Report - www.antsgifts.com/index.php

Report Overview

Submitted URL
www.antsgifts.com/index.php
IP
104.164.93.165
ASN
#18779 EGIHOSTING
Submitted
2022-11-30 16:00:06
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
dimg04.c-ctrip.com	139731	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	814 B	462 kB	104.110.17.24
img.1198555.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	407 B	182 B	185.239.226.87
img.9565x.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	405 B	182 B	185.239.226.87
fmtu.netfhtu.com	244457	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	13 kB	1.4 MB	104.21.235.64
p26.toutiaoimg.com	75286	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	442 B	679 kB	120.52.95.240
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	5.7 kB	104.18.21.226
hm.baidu.com	8254	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.1 kB	24 kB	103.235.46.191
img.9219x.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	405 B	182 B	185.239.226.87
p.qlogo.cn	48578	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	456 B	449 B	43.154.254.32
www.xyyds90.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.3 kB	800 kB	45.136.118.155
ocsp.sectigo.com	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.8 kB	172.64.155.188
828239sam.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	406 B	553 kB	45.61.212.60
webs24.theavstatic.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	404 B	737 B	104.21.234.237
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
app.gxfc567888.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	699 B	644 B	5.180.146.25
p3.douyinpic.com	23536	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	1.1 MB	47.246.44.230
398375178.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	406 B	584 kB	47.75.19.145
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.4 kB	7.2 kB	93.184.220.29
www.antsgifts.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	3.6 kB	104.164.93.165
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	60 kB	34.120.237.76
www.tupku.top	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	386 B	1.6 MB	188.114.97.1
ocsp2.globalsign.com	1544	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	367 B	1.9 kB	104.18.20.226
638236rpn.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	406 B	759 kB	45.61.212.130
kjimg10.360buyimg.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	899 B	2.1 MB	182.140.218.3
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.210.150.237
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	714 B	1.4 kB	142.250.74.131
585227ybn.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	406 B	408 kB	45.61.212.123
375772rug.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	406 B	876 kB	45.61.212.118

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-11-30	medium	585227ybn.com	Sinkholed
2022-11-30	medium	828239sam.com	Sinkholed
2022-11-30	medium	638236rpn.com	Sinkholed

JavaScript (11)

	URL	Size	First Seen	Last Seen
	hm.baidu.com/hm.js?282ad46c18b6295a8bb8e1da991aa804	30 kB	2023-03-11	2023-03-11
Pretty URL hm.baidu.com/hm.js?282ad46c18b6295a8bb8e1da991aa804 IP 103.235.46.191 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash ae72e0a8acf3d89199c94cee635721fc 2cf7cdc167346676badca53666427e40d7dce3dd 781a4bd07f540137d31efe8bb5cd4ea2f2a8a655a3d2c5916ef7850e82f9670f Loading...

	www.antsgifts.com/index.php	43 B	2023-03-11	2023-03-11
Pretty URL www.antsgifts.com/index.php IP 104.164.93.165 ASN #18779 EGIHOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash 7a3f690cd486448c325d5dc11faf64fe dde14cfd1379367511c877a59cd9bf49f8daa5e1 95308b786d64a6fa1b7cead15e0b33d02a386567133339fc85a34fa5dc7ed8fb Loading...

	www.antsgifts.com/common.js	1.5 kB	2023-03-08	2023-04-21
Pretty URL www.antsgifts.com/common.js IP 104.164.93.165 ASN #18779 EGIHOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:34:16 Last Seen2023-04-21 13:59:57 Times Seen24 Hash 3e081194ac87a85286f524d6effdba6f a2c4606a09bd3c90510946c1d91fb26170d17a47 24c9e59e2fd989db8c57af2ef4061b0563b58349f869ed68621b4d4142d89452 Loading...

	www.antsgifts.com/tj.js	518 B	2023-03-07	2023-04-16
Pretty URL www.antsgifts.com/tj.js IP 104.164.93.165 ASN #18779 EGIHOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:15:52 Last Seen2023-04-16 09:40:55 Times Seen6 Hash 944d97ef7c875a7db71f41aac9400d94 ea8789b9a7c6f611d8c1ef9c458877338f364001 2409ceeb61edfec3d4a96afa5453bc239a4e0e474120c180aa55a7f659d96e07 Loading...

	www.xyyds90.xyz/	254 B	2023-03-07	2023-04-21
Pretty URL www.xyyds90.xyz/ IP 45.136.118.155 ASN #18978 ENZUINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:39 Last Seen2023-04-21 13:59:56 Times Seen28 Hash 298ee42e9232694083a97fda7e132322 af5d8b2e1d6b1df5cd36b7e5f413fff9430098a6 4a18a4dbc15636fc685eedbf1021d563ade56dc646d717f30f49b753b5fe7afe Loading...

	hm.baidu.com/hm.js?8a25af5bea94a7da8d20c689df4320a6	30 kB	2023-03-11	2023-03-11
Pretty URL hm.baidu.com/hm.js?8a25af5bea94a7da8d20c689df4320a6 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash ccad36340061aadd0f1d4ef6ab7e2828 f3217a0b51ca1ea6a6c2cee01e9f4cdd862e2bce 1b0eaf2e118aac8efd0fc6792e825687555e617b7d91b92a4a42ac62d25095d7 Loading...

	app.gxfc567888.com/api/data.php	256 B	2023-03-08	2023-03-11
Pretty URL app.gxfc567888.com/api/data.php IP 5.180.146.25 ASN #18978 ENZUINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:34:16 Last Seen2023-03-11 23:18:35 Times Seen1 Hash 2241af6817c91e303518ef9c164320f6 650d2011c2c9c5091240522ac7b16e8b9e1c822a c7541cc6ec8d4e0569a052f5478c6b8c4bb4e887fd77192cd2fc6956cfb2a5a3 Loading...

	hm.baidu.com/hm.js?11d8e5ab923af9d7b3514bb0e3a79782	30 kB	2023-03-11	2023-03-11
Pretty URL hm.baidu.com/hm.js?11d8e5ab923af9d7b3514bb0e3a79782 IP 103.235.46.191 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash 76959d2d5524f5b762e4d0fbae5ea079 25879364141f8c332c9c9beefa58742305f9d646 df9d82a13a0b57be33fee09a4a20dc78324381a8acf8260a2a816f1495425b01 Loading...

	www.xyyds90.xyz/	463 B	2023-03-07	2023-06-19
Pretty URL www.xyyds90.xyz/ IP 45.136.118.155 ASN #18978 ENZUINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:39 Last Seen2023-06-19 00:29:41 Times Seen29 Hash 3a4193d6600f622eabc904da78bb4893 05a360d8d24be27da70940b656c1158f68e22923 fce95d7f105887d82094294c37d111707d443914332e0299b5a8d2f2eca8b0b5 Loading...

		Size	First Seen	Last Seen
	#1 Eval - e537e318f242ec10db9eaa03855a211c	483 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash e537e318f242ec10db9eaa03855a211c dc37527a469aff098bc90c0a4cf278fedc09474f 796803f788ecafa35b1714b4d58768bd4af39ca3e1a42f1dbfc8140318ffb6ea Loading...

		Size	First Seen	Last Seen
	#1 Write - 77a263559e4f5a808848c908d560794a	464 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash 77a263559e4f5a808848c908d560794a 2abc8cdbbdb7d22b3ee80c6a854807fd2b03633e 38baef106d32f1b60a0171dc05ccf1a01cfee3f54762cc6c91ab3f88a592f080 Loading...

HTTP Transactions (114)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9018
Expires: Wed, 30 Nov 2022 18:30:11 GMT
Date: Wed, 30 Nov 2022 15:59:53 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2279
Cache-Control: max-age=155365
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:53 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 11:09:18 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 15:18:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2510
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7369
Expires: Wed, 30 Nov 2022 18:02:42 GMT
Date: Wed, 30 Nov 2022 15:59:53 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: eoVzzE9akAy05dilDgy5iHT7Ox4/BLX6KovI+BiZVzbyC1C3Uey1s8lZpvVXN6gHyt8MzK7JRAM=
x-amz-request-id: KHN6CJKR9QP55YZ8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 15:45:17 GMT
age: 876
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:53 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 15:11:14 GMT
cache-control: public,max-age=3600
age: 2920
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

www.antsgifts.com/index.php

104.164.93.165

200 OK

373 B

URL HTTP/1.1
www.antsgifts.com/index.php
IP
104.164.93.165:0
ASN
#18779 EGIHOSTING

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Size
373 B (373 bytes)
Hash
fc85adaa7bdb8238c4961a3bea73d32e
a4de1bf8d6a769f50663d8874bac38482b54382d
3af4551876a71b6006c4f47a6915594638ba0d729f168d0e7dfed73ac23dc0a3

HTTP Headers

GET /index.php HTTP/1.1
Host: www.antsgifts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 15:59:54 GMT
Content-Type: text/html
Content-Length: 373
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2268
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:54 GMT
Last-Modified: Wed, 30 Nov 2022 15:22:06 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

www.antsgifts.com/tj.js

104.164.93.165

200 OK

518 B

URL HTTP/1.1
www.antsgifts.com/tj.js
IP
104.164.93.165:0
ASN
#18779 EGIHOSTING

File type
ASCII text, with CRLF line terminators
Size
518 B (518 bytes)
Hash
944d97ef7c875a7db71f41aac9400d94
ea8789b9a7c6f611d8c1ef9c458877338f364001
2409ceeb61edfec3d4a96afa5453bc239a4e0e474120c180aa55a7f659d96e07

HTTP Headers

GET /tj.js HTTP/1.1
Host: www.antsgifts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antsgifts.com/index.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 15:59:54 GMT
Content-Type: application/x-javascript
Content-Length: 518
Connection: keep-alive

www.antsgifts.com/common.js

104.164.93.165

200 OK

749 B

URL HTTP/1.1
www.antsgifts.com/common.js
IP
104.164.93.165:0
ASN
#18779 EGIHOSTING

File type
HTML document text\012- HTML document, ASCII text, with very long lines (438), with CRLF line terminators
Size
749 B (749 bytes)
Hash
15c3c0585995c7f58a1a79a0025d69e0
e5cd41244d801b1f13a2aa70fbb90a486f3f1fda
b81925961827073ce4c0edbe9d57c5a89f9563692cae1a2d0b61fc6b3b8248de

HTTP Headers

GET /common.js HTTP/1.1
Host: www.antsgifts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antsgifts.com/index.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 15:59:54 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

push.services.mozilla.com/

34.210.150.237

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.210.150.237:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: w1WFDaH0LdBK6L9URaovSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: yTO/68VoOjJuJrOb50kQ0jIHnEc=

www.antsgifts.com/favicon.ico

104.164.93.165

200 OK

1.2 kB

URL HTTP/1.1
www.antsgifts.com/favicon.ico
IP
104.164.93.165:0
ASN
#18779 EGIHOSTING

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.antsgifts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antsgifts.com/index.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 15:59:54 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:22 GMT
Connection: keep-alive
ETag: "4e0d81de-47e"
Expires: Mon, 05 Dec 2022 15:59:54 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes

app.gxfc567888.com/api/index.php

5.180.146.25

200 OK

48 B

URL HTTP/1.1
app.gxfc567888.com/api/index.php
IP
5.180.146.25:0
ASN
#18978 ENZUINC

File type
HTML document, ASCII text, with no line terminators
Size
48 B (48 bytes)
Hash
046691e8308c2adf72fc25247e2f9e80
a47d4ddf558d878140dd88a539159659e781345e
49f190d90d221b19e342cf6425fbb173e894ca0531935a3b08eaf83d980a6268

HTTP Headers

GET /api/index.php HTTP/1.1
Host: app.gxfc567888.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.antsgifts.com/
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 15:59:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

app.gxfc567888.com/api/data.php

5.180.146.25

200 OK

180 B

URL HTTP/1.1
app.gxfc567888.com/api/data.php
IP
5.180.146.25:0
ASN
#18978 ENZUINC

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
180 B (180 bytes)
Hash
fff739b301fafe28aa662efd7b2360db
1474e30fb31d9d4764a9065d95b3b89dba044fcc
cc89d23f76fbb953c1796b1e98f0f40432fa2d091fbfa051cb626119397a6ca7

HTTP Headers

GET /api/data.php HTTP/1.1
Host: app.gxfc567888.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://app.gxfc567888.com/api/index.php

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 15:59:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

ocsp.globalsign.com/gsrsaovsslca2018

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
c99a49063e3d0e80376272ff56b79e68
cb66ea59a35b3f4f25f961cb78d62d0f9e17f9f9
0440ecf45a10fab748ac97af738b09341c1420eb551afa2c0b1963e881222f83

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 04 Dec 2022 14:07:03 GMT
ETag: "cb66ea59a35b3f4f25f961cb78d62d0f9e17f9f9"
Last-Modified: Wed, 30 Nov 2022 14:07:04 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 244
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7724cb0499d8b511-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
c99a49063e3d0e80376272ff56b79e68
cb66ea59a35b3f4f25f961cb78d62d0f9e17f9f9
0440ecf45a10fab748ac97af738b09341c1420eb551afa2c0b1963e881222f83

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 04 Dec 2022 14:07:03 GMT
ETag: "cb66ea59a35b3f4f25f961cb78d62d0f9e17f9f9"
Last-Modified: Wed, 30 Nov 2022 14:07:04 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 244
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7724cb04ad960b59-OSL

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7575
Expires: Wed, 30 Nov 2022 18:06:11 GMT
Date: Wed, 30 Nov 2022 15:59:56 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7575
Expires: Wed, 30 Nov 2022 18:06:11 GMT
Date: Wed, 30 Nov 2022 15:59:56 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7575
Expires: Wed, 30 Nov 2022 18:06:11 GMT
Date: Wed, 30 Nov 2022 15:59:56 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7575
Expires: Wed, 30 Nov 2022 18:06:11 GMT
Date: Wed, 30 Nov 2022 15:59:56 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9330 bytes)
Hash
bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 64104
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10176 bytes)
Hash
03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7LVxajVjJ1N2W-jxCmKpYHg1rS1MbrRnAVc15QmM0iH94CH1yJnR0w==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 04:53:01 GMT
age: 40015
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10958 bytes)
Hash
777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e4GuUolL0WIMXvnF7BZ80j-dMMSILN2gd-1mqFwNns-zCUBsJa8iHQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:04 GMT
age: 65812
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.8 kB (5785 bytes)
Hash
59baec8db5ced0210ab766ea5636a5fd
f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b
33ff55891f18c22970804f1b8b2ba6821ddfd7426b01486410bd43f2b4295a8d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5785
x-amzn-requestid: ee77265b-8e90-4035-8ef1-92a2d26aaefa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHdWoAMFqmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-0d10d74030e7aee74804b654;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GydenCzPtpFdVLqN4ssiZ4dKN48WGneS3mwzEdDE81pobtLznfC4VQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:07:59 GMT
age: 64317
etag: "f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9674 bytes)
Hash
5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:46 GMT
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
age: 65710
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.3 kB (7298 bytes)
Hash
e00769bd1391b8f4f5b8ab128a825355
e4ddf955e8ac1986045ed55880c43c69e588a021
81ca4d20c28fed8fd3135515daadc1fdbfb4198535d7c46021b418b8b98e59a5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7298
x-amzn-requestid: 381e55bb-876b-46ad-84b6-1ddf9f876f56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDcE3poAMFaAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-7c12394600900afc7281e858;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7mRG070F4NZnewfowUhVhMerJaGjJd4G6O1tvTPiKyvTAzq-Y16-jw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:51 GMT
etag: "e4ddf955e8ac1986045ed55880c43c69e588a021"
content-type: image/jpeg
age: 64985
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4323b80bee4290614958c7e0ef28c8cd
8af0a6031df67b28704a6a777bf549acd45f0362
27a8847c1ecbad4884c07d95f5fddae71c34e0e61a366f8ff3106f98e5178af8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "27A8847C1ECBAD4884C07D95F5FDDAE71C34E0E61A366F8FF3106F98E5178AF8"
Last-Modified: Tue, 29 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 30 Nov 2022 21:59:56 GMT
Date: Wed, 30 Nov 2022 15:59:56 GMT
Connection: keep-alive

www.xyyds90.xyz/template/m1938pc/static/css/footer.css

45.136.118.155

200 OK

786 B

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/footer.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
ASCII text, with CRLF line terminators
Size
786 B (786 bytes)
Hash
035c39627f489e6f8371e06f956c23c2
14ac806f3909e4b3d2120ba39936867d292376f1
551bb1c2ffb8a2e628101cedb256030b199a6e1276b6d53cc62f7baf02ead8c7

HTTP Headers

GET /template/m1938pc/static/css/footer.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
content-length: 786
last-modified: Thu, 14 Oct 2021 16:57:27 GMT
etag: "61686177-312"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

www.xyyds90.xyz/template/m1938pc/static/css/default.css

45.136.118.155

200 OK

22 B

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/default.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
ASCII text, with no line terminators
Size
22 B (22 bytes)
Hash
99bd951428de1a6dea7746c9db4face5
45a7071d97b407a28143bafb878477fbfbd5dd05
4d4e1af3c62dde233082e14491f7627f63e370721e38f8f411a26270e18f4c1b

HTTP Headers

GET /template/m1938pc/static/css/default.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
content-length: 22
last-modified: Mon, 13 Sep 2021 12:37:28 GMT
etag: "613f4608-16"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

hm.baidu.com/hm.js?11d8e5ab923af9d7b3514bb0e3a79782

103.235.46.191

200 OK

11 kB

URL HTTP/1.1
hm.baidu.com/hm.js?11d8e5ab923af9d7b3514bb0e3a79782
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
ASCII text, with very long lines (620)
Size
11 kB (11258 bytes)
Hash
10df49bf4acb3bf5ab32c70aa02cdb37
f6e1dae7fb705a0f0ce988fc623777e00f08c43f
7f1acf85bab829e42c4d2daef2c5ed762fade67b9eb4b1339657a7257b969060

HTTP Headers

GET /hm.js?11d8e5ab923af9d7b3514bb0e3a79782 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antsgifts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Wed, 30 Nov 2022 15:59:56 GMT
Etag: 7d8826ab5cee0122275783f129ee1fd2
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=1C808F45EB87D328; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

hm.baidu.com/hm.js?282ad46c18b6295a8bb8e1da991aa804

103.235.46.191

200 OK

11 kB

URL HTTP/1.1
hm.baidu.com/hm.js?282ad46c18b6295a8bb8e1da991aa804
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
ASCII text, with very long lines (618)
Size
11 kB (11256 bytes)
Hash
a7c71325e1dc917b6ba5666989db4958
ff25ee9747b561e8c57ec9c9403668cfb7a31d51
09d5353afffa4fab354bb5c011efba7319e093d3c8c4657e41c14aaa309a2e60

HTTP Headers

GET /hm.js?282ad46c18b6295a8bb8e1da991aa804 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antsgifts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Content-Type: application/javascript
Date: Wed, 30 Nov 2022 15:59:56 GMT
Etag: efe96dc66bef94fa570140294930b02c
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=554FCF48AE762C69; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

www.xyyds90.xyz/upload/site/20211013-1/08f24df38294685d55744d75fa64dc33.png

45.136.118.155

200 OK

14 kB

URL HTTP/2
www.xyyds90.xyz/upload/site/20211013-1/08f24df38294685d55744d75fa64dc33.png
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
PNG image data, 180 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (13909 bytes)
Hash
b8549307d46342c96a4b1da5ba0b51e2
f3861dff285c7a5acad503c30a015cd629e341bb
72b949e9c60ad72560df7cbcc9f9e94d169992cf65377371441f7378ac30f193

HTTP Headers

GET /upload/site/20211013-1/08f24df38294685d55744d75fa64dc33.png HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: image/png
content-length: 13909
last-modified: Wed, 13 Oct 2021 11:54:13 GMT
etag: "6166c8e5-3655"
expires: Fri, 30 Dec 2022 15:59:56 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

www.xyyds90.xyz/static/images/go.gif

45.136.118.155

200 OK

254 B

URL HTTP/2
www.xyyds90.xyz/static/images/go.gif
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
GIF image data, version 89a, 16 x 17\012- data
Size
254 B (254 bytes)
Hash
b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef

HTTP Headers

GET /static/images/go.gif HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: image/gif
content-length: 254
last-modified: Thu, 14 Oct 2021 06:39:43 GMT
etag: "6167d0af-fe"
expires: Fri, 30 Dec 2022 15:59:56 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

www.xyyds90.xyz/template/m1938pc/static/css/banner.css

45.136.118.155

200 OK

364 B

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/banner.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
data
Size
364 B (364 bytes)
Hash
f2a2c25112a0a84ed1f1f26b11a23a70
1a4edc36053dba0878e83cd1d4fe1d8618d9a025
217d3b90f786bcfbf7ffc64be5eb6cd326a05bf06b999995683a8da66f5f26df

HTTP Headers

GET /template/m1938pc/static/css/banner.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:26 GMT
vary: Accept-Encoding
etag: W/"613f4606-49c"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1850028465&si=282ad46c18b6295a8bb8e1da991aa804&v=1.3.0&lv=1&sn=57731&r=0&ww=1280&u=http%3A%2F%2Fwww.antsgifts.com%2Findex.php&tt=%E5%BA%86%E9%98%B3%E7%96%9A%E5%85%86%E5%B7%A5%E8%89%BA%E5%93%81%E6%9C%89%E9%99%90%E8%B4%A3%E4%BB%BB%E5%85%AC%E5%8F%B8

103.235.46.191

200 OK

43 B

URL HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1850028465&si=282ad46c18b6295a8bb8e1da991aa804&v=1.3.0&lv=1&sn=57731&r=0&ww=1280&u=http%3A%2F%2Fwww.antsgifts.com%2Findex.php&tt=%E5%BA%86%E9%98%B3%E7%96%9A%E5%85%86%E5%B7%A5%E8%89%BA%E5%93%81%E6%9C%89%E9%99%90%E8%B4%A3%E4%BB%BB%E5%85%AC%E5%8F%B8
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1850028465&si=282ad46c18b6295a8bb8e1da991aa804&v=1.3.0&lv=1&sn=57731&r=0&ww=1280&u=http%3A%2F%2Fwww.antsgifts.com%2Findex.php&tt=%E5%BA%86%E9%98%B3%E7%96%9A%E5%85%86%E5%B7%A5%E8%89%BA%E5%93%81%E6%9C%89%E9%99%90%E8%B4%A3%E4%BB%BB%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.antsgifts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Wed, 30 Nov 2022 15:59:57 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=3BB91EED201B8486; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

www.xyyds90.xyz/template/m1938pc/static/picture/favimg.png

45.136.118.155

200 OK

172 kB

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/picture/favimg.png
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
PNG image data, 1080 x 1918, 8-bit/color RGBA, non-interlaced\012- data
Size
172 kB (172027 bytes)
Hash
c2cbbd773680667cb8dc7a0b88ee779c
fc158fcd1d5a3280923258eb783bd46428810af9
f72c5939d80e87ad72edf33f96b298c51bf1902e0603c18a4defee4c9c33576a

HTTP Headers

GET /template/m1938pc/static/picture/favimg.png HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: image/png
content-length: 172027
last-modified: Sun, 14 Mar 2021 06:39:32 GMT
etag: "604dafa4-29ffb"
expires: Fri, 30 Dec 2022 15:59:56 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

dimg04.c-ctrip.com/images/0101u120009udrvgm786A.gif

104.110.17.24

200 OK

248 kB

URL HTTP/2
dimg04.c-ctrip.com/images/0101u120009udrvgm786A.gif
IP
104.110.17.24:0
ASN
#16625 AKAMAI-AS

File type
GIF image data, version 89a, 960 x 70\012- data
Size
248 kB (248461 bytes)
Hash
aa6b9520d5a9b565794bdd46a2f72b2c
2c3fd7861aa54e3cefa6332c5bec2585fcce095c
356cb950ac303776b9faffc5c34e0e9a00b3f20f64cb02ad5f5d3fb399587a7d

HTTP Headers

GET /images/0101u120009udrvgm786A.gif HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
content-length: 248461
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
x-edgeconnect-midmile-rtt: 6
x-edgeconnect-origin-mex-latency: 114
cache-control: max-age=7325740
expires: Thu, 23 Feb 2023 10:55:37 GMT
date: Wed, 30 Nov 2022 15:59:57 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

dimg04.c-ctrip.com/images/0100812000a0gbc4iF593.gif

104.110.17.24

200 OK

212 kB

URL HTTP/2
dimg04.c-ctrip.com/images/0100812000a0gbc4iF593.gif
IP
104.110.17.24:0
ASN
#16625 AKAMAI-AS

File type
GIF image data, version 89a, 1140 x 100\012- data
Size
212 kB (212414 bytes)
Hash
70730bae184e481644c32bb7b632f611
498605c96e0a4b47c79e3ce0af02e111907e77d9
6fd07537bbc60b12f5708a94fb208b3afe0db2e1da1b7159956cb026ee5c535b

HTTP Headers

GET /images/0100812000a0gbc4iF593.gif HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
content-length: 212414
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=7572547
expires: Sun, 26 Feb 2023 07:29:04 GMT
date: Wed, 30 Nov 2022 15:59:57 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2

www.xyyds90.xyz/template/m1938pc/static/css/menu.css

45.136.118.155

200 OK

12 kB

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/menu.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
ASCII text, with very long lines (622), with CRLF, LF line terminators
Size
12 kB (12270 bytes)
Hash
65c07fa9d814eeaad85e2957b6ab800c
1755b3f9ff113546dddf7acb894ff9d5be86ccfd
63a07a6701bb73cb643eb85484e2e6a8b9447bff83b1154a80135d41efafa10a

HTTP Headers

GET /template/m1938pc/static/css/menu.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Thu, 14 Oct 2021 06:03:46 GMT
vary: Accept-Encoding
etag: W/"6167c842-1e6c"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
6d88668580a24e512b17a21ed73815c4
cdb66827baa48b67d063df340b192daa2faf5a15
cbf4fd6e676d60d54939f42c44a180a8659f80efe90c16f9888fa74c8de0f1ca

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 716
Cache-Control: max-age=167424
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Etag: "63876632-117"
Expires: Fri, 02 Dec 2022 14:30:22 GMT
Last-Modified: Wed, 30 Nov 2022 14:18:26 GMT
Server: ECS (amb/6BAC)
X-Cache: HIT
Content-Length: 279

www.xyyds90.xyz/template/m1938pc/static/css/index.css

45.136.118.155

200 OK

2.1 kB

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/index.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
data
Size
2.1 kB (2123 bytes)
Hash
3822ef1586d77e9c492126b556a996ea
d1f1f2618af0efd0bd36fd27a26b28a74825d6fd
2e5864b79665fe2de05668db2eb3d7d66e1314538e69cf661279114e360680d7

HTTP Headers

GET /template/m1938pc/static/css/index.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Fri, 12 Nov 2021 13:36:57 GMT
vary: Accept-Encoding
etag: W/"618e6df9-1837"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
05e86db92b07dd5bc244d42b0a20d64c
1b94de12672339ff3f137c4482565536b746de70
9c8e971d95c9744d946ae007c0b8f8c62ec00c3333b825f40115476e9de48760

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6050
Cache-Control: max-age=127075
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Etag: "6386b3c0-118"
Expires: Fri, 02 Dec 2022 03:17:53 GMT
Last-Modified: Wed, 30 Nov 2022 01:37:04 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 280

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
05e86db92b07dd5bc244d42b0a20d64c
1b94de12672339ff3f137c4482565536b746de70
9c8e971d95c9744d946ae007c0b8f8c62ec00c3333b825f40115476e9de48760

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6050
Cache-Control: max-age=127075
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Etag: "6386b3c0-118"
Expires: Fri, 02 Dec 2022 03:17:53 GMT
Last-Modified: Wed, 30 Nov 2022 01:37:04 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 280

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
05e86db92b07dd5bc244d42b0a20d64c
1b94de12672339ff3f137c4482565536b746de70
9c8e971d95c9744d946ae007c0b8f8c62ec00c3333b825f40115476e9de48760

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4546
Cache-Control: max-age=125572
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Etag: "6386b3c0-118"
Expires: Fri, 02 Dec 2022 02:52:50 GMT
Last-Modified: Wed, 30 Nov 2022 01:37:04 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280

www.xyyds90.xyz/template/m1938pc/static/css/img_list.css

45.136.118.155

200 OK

3.0 kB

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/img_list.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
data
Size
3.0 kB (3011 bytes)
Hash
e77e21784b1a153c3e5447aca77d737d
9035d24266945f7787ef9c73fdd6208582ff740c
ab63da8b6807a1df6c4f72ffc743438156a127d78e020708f6f840f1093d3501

HTTP Headers

GET /template/m1938pc/static/css/img_list.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Thu, 14 Oct 2021 15:08:47 GMT
vary: Accept-Encoding
etag: W/"616847ff-9dd"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
6d88668580a24e512b17a21ed73815c4
cdb66827baa48b67d063df340b192daa2faf5a15
cbf4fd6e676d60d54939f42c44a180a8659f80efe90c16f9888fa74c8de0f1ca

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 716
Cache-Control: max-age=167424
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Etag: "63876632-117"
Expires: Fri, 02 Dec 2022 14:30:22 GMT
Last-Modified: Wed, 30 Nov 2022 14:18:26 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279

fmtu.netfhtu.com/upload/vod/2022/11/bfwu331ceas.jpg

104.21.235.64

200 OK

17 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/bfwu331ceas.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
17 kB (17141 bytes)
Hash
9f71a99349494e06d627237cdf938270
638084b15c4abea8d538a13409b318367ce62c3b
a05f8caf69d8bb1fd8869002aa13b0a4a2192ad958cb10887c56816eb8191211

HTTP Headers

GET /upload/vod/2022/11/bfwu331ceas.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 17141
cf-bgj: h2pri
etag: "6385dc62-42f5"
last-modified: Tue, 29 Nov 2022 10:18:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5SbtkKL%2FC36Q1y22x%2BB%2Fx%2F4l2MWuV2AQzU8lXpENXFsdZaoux7YIFzQcmy2BDh7iKLAoXMXX6bAMwUmJ0OR%2BdUaRDZsB69YoNV0MapinZtx%2BDrUGTUyQZJfTDmfKgMFlU7OA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c43dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1124660.jpg

104.21.235.64

200 OK

91 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1124660.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x540, components 3\012- data
Size
91 kB (91049 bytes)
Hash
d16134df0509ef649bf30f1a166725dc
6595e4298a7d3125965d8260e4bf7809eab24717
ba915f09d411fe60a810e874258415acb4eb1c7e920b55da96accee538a4e1f6

HTTP Headers

GET /upload/vod/20200717/fc2ppv_1124660.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 91049
cf-bgj: h2pri
etag: "5f118f14-163a9"
last-modified: Fri, 17 Jul 2020 11:44:20 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e5IDiR1EylZ%2BbC%2FJmyKXWda5r5bX4VVX%2FuRet88Im8Uq%2BzZ0yNLWJdcmbwsa5%2FXL1Iq6o1uu4jXWY7r75pV9Kb24sw%2BAM0b5vN6ms70WXPinahGf2xQyrgIT%2FRB4AYubLw%2FS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c53dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/yxzckkdbgvo.jpg

104.21.235.64

200 OK

12 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/yxzckkdbgvo.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
12 kB (11646 bytes)
Hash
b191277534429ea1e19489b2b6f0002c
4eca55ecb458dd77283fcf4df58bfe918692e378
242ddb9dc0fbf4cb96f0750f445f0714a8d7941d767db02aac3c090ae816f797

HTTP Headers

GET /upload/vod/2022/11/yxzckkdbgvo.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 11646
cf-bgj: h2pri
etag: "6385dc66-2d7e"
last-modified: Tue, 29 Nov 2022 10:18:14 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4564
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D99fwZ3fQEBInWZA3XNygi7ZkFDilFEGxfkUr5h%2F7sgI1ng%2BQQR1LB9Qtr2YPXG%2FgejZdWqETEp6zPBP08vf%2F6QmVUtEkg6ILyL49%2F2g63JJ8z7eL969b4TlBnJNDtgR9rtm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c49dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/sbjvn1nug32.jpg

104.21.235.64

200 OK

10 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/sbjvn1nug32.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
10 kB (10166 bytes)
Hash
441169934677c48e754724e9d516175d
c946661c5cfd738db73658e0e03375cc422c7355
b0fa2e4f494cce8df2e0877a89d09cf097298506890ee46cf3345a70747818b1

HTTP Headers

GET /upload/vod/2022/11/sbjvn1nug32.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 10166
cf-bgj: h2pri
etag: "6379edc2-27b6"
last-modified: Sun, 20 Nov 2022 09:05:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ei3cv%2F46y21xaNVNTuYN1yNA0Hk3UpcpdyWErsphM4Lobtb9UcF19K%2F2o8BqSK3BM5BNJrtDzZdgroUAMBwir1YHAULrazUD%2FDSArAW9CuWCpaz9qcHxYGlt%2FRHKv4sTPvNQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c4bdd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/axhbvtwr4o5.jpg

104.21.235.64

200 OK

10 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/axhbvtwr4o5.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
10 kB (10339 bytes)
Hash
54914ce5b8d9447a442f249f4e11cdb9
3fe76b293e1dcc1d5613fb98ae5aee5003dcc8cb
793e6fe95b4f13c30c78fb03bc3fa6d911fb6b23727ea209fe3fc282c722443f

HTTP Headers

GET /upload/vod/2022/11/axhbvtwr4o5.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 10339
cf-bgj: h2pri
etag: "6379eeff-2863"
last-modified: Sun, 20 Nov 2022 09:10:23 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L2%2Bx8SZRwiUx83bPQbP%2B9NAPMbJWjXysQK7RX1yP9497%2Fi6LKGWTxh4SnYdEa8bemXmOqVzCJJwB2%2FO2gpNTd6EGzivRLYSyBmxZHqzWOlVHV77V5D6UBmALB89EmW6AZ3gg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c4ddd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/yp15l3ai3g3.jpg

104.21.235.64

200 OK

8.5 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/yp15l3ai3g3.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
8.5 kB (8534 bytes)
Hash
10d138b7b343529eab844d77ade1cab7
22b4183f9c9a9d47b63e0ced0b2b2c7254e022c1
9d4e85cb41e9f46341e7ffbae8f1f1ec73642a94a5daac0abada9b8468186a56

HTTP Headers

GET /upload/vod/2022/11/yp15l3ai3g3.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 8534
cf-bgj: h2pri
etag: "6379ef14-2156"
last-modified: Sun, 20 Nov 2022 09:10:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ndy1IVbGQs1LA%2BjGdxM889cNas%2BgHViEqzL%2FnVymGCI7T%2BNQt%2Fcon8IFqzHxJyJQgOXIJb0Ei13R%2FBHDmBnwG3TX5EwrwETG1cS0R8jCI6JRg%2F4Cy%2FM7IqhpUyURAA3khLFI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c4edd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/wuu25rwixcl.jpg

104.21.235.64

200 OK

9.9 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/wuu25rwixcl.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
9.9 kB (9868 bytes)
Hash
c3091e03581a49274607ad7ca795ae8d
d028ace6d85042673fc45a95587dfcfffad12c26
4928b81625b54be381ffbafee95c4d5a54230a25b4cf362e974347dd37418041

HTTP Headers

GET /upload/vod/2022/11/wuu25rwixcl.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 9868
cf-bgj: h2pri
etag: "6379f97a-268c"
last-modified: Sun, 20 Nov 2022 09:55:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uG6r1%2FKP8zkxyz8jyFqUr7mTB0yiV79eP7Qf0EPHJuOsCGzAuc6VJX8MI8pRUBUpcBbJqVnp2bmACweJGY%2BiapRnQ6u4iw3PgnM5zMZiUp1b1CPa5hjcmumXMpeJf5hV1oHi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c4fdd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/1bwbb4402qa.jpg

104.21.235.64

200 OK

12 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/1bwbb4402qa.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
12 kB (11555 bytes)
Hash
52fe03b44050b53296f0b8a4227fed18
e90b79f8b5a66914656d47c0ed04f878dbb439b2
6794d4121c7d64f0e7d17d188ff5f75864d78b00bde2e5de038ece97bb7e0d10

HTTP Headers

GET /upload/vod/2022/11/1bwbb4402qa.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 11555
cf-bgj: h2pri
etag: "6379edc9-2d23"
last-modified: Sun, 20 Nov 2022 09:05:13 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7JUvbrQ836soXvcn4LKsyIGUo4uRZYecj1rOCuWvZ8fbqAeee3jDeWiZwBqDPOA6ZD%2BQhfDktY%2F4rE2AC7UakO0ZqB6ManOZod525OzPMjQKv6JkkrI1QGxI5wm%2FwUPMtyxZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c83dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/gpxydcki3tv.jpg

104.21.235.64

200 OK

10 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/gpxydcki3tv.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
10 kB (10484 bytes)
Hash
3d05b629aa688a5d14be65b0abea88c5
97d723c37cbba313abfb55496e835f45ae809bc0
7eae138b1fcaaee1ef1c9c63843b7b008d6d5195581de702ae0aef7cba8a0a33

HTTP Headers

GET /upload/vod/2022/11/gpxydcki3tv.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 10484
cf-bgj: h2pri
etag: "6379edc6-28f4"
last-modified: Sun, 20 Nov 2022 09:05:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tiNhcJJETx6ISvgFg3EXmOOoNSfycH1KTEBomeARsbCZcJTa25llEnHJwAU%2FQgSai7SG9Kn9wDBcTtZb4kyBXDU1DFPipfEbWXAmDF9r0EKkhl0WQsmomk4EHaF9CNDHPCEW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c84dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1369134335&si=8a25af5bea94a7da8d20c689df4320a6&su=http%3A%2F%2Fapp.gxfc567888.com%2F&v=1.3.0&lv=1&sn=57732&r=0&ww=1268&u=https%3A%2F%2Fwww.xyyds90.xyz%2F&tt=%E5%A6%9E%E5%A6%9E%E5%BD%B1%E8%A7%86

103.235.46.191

200 OK

43 B

URL HTTP/1.1
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1369134335&si=8a25af5bea94a7da8d20c689df4320a6&su=http%3A%2F%2Fapp.gxfc567888.com%2F&v=1.3.0&lv=1&sn=57732&r=0&ww=1268&u=https%3A%2F%2Fwww.xyyds90.xyz%2F&tt=%E5%A6%9E%E5%A6%9E%E5%BD%B1%E8%A7%86
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1369134335&si=8a25af5bea94a7da8d20c689df4320a6&su=http%3A%2F%2Fapp.gxfc567888.com%2F&v=1.3.0&lv=1&sn=57732&r=0&ww=1268&u=https%3A%2F%2Fwww.xyyds90.xyz%2F&tt=%E5%A6%9E%E5%A6%9E%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Wed, 30 Nov 2022 15:59:58 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=BDB27EAF32D88C37; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

fmtu.netfhtu.com/upload/vod/2022/11/d4ygcfq0nv5.jpg

104.21.235.64

200 OK

12 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/d4ygcfq0nv5.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
12 kB (11627 bytes)
Hash
fe1654450aee8e672eb176cd3762dbd3
a8fd31cdcecea52e4eebea7ee0f529f3b918f02f
853b2a3384d136c6d83da63a33edea80a7b15dac38d441024f36506ccdbde872

HTTP Headers

GET /upload/vod/2022/11/d4ygcfq0nv5.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 11627
cf-bgj: h2pri
etag: "6379edbe-2d6b"
last-modified: Sun, 20 Nov 2022 09:05:02 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y%2F5O7QhSGSKDMzSimmygrnsvR%2FKORcOOE09X4hYMEUio3awOfzlSNo5OF6Q7mRvq7ynAnQG9j5NbfojMDqXfNSdfeq5pCUVaVezdxSp5YAPAnZ73GAjWrnZ1NGp0ETk7IsR7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c8add72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/nvy2csnqxaq.jpg

104.21.235.64

200 OK

10 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/nvy2csnqxaq.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size
10 kB (10031 bytes)
Hash
2c049f5c9f591f50eb9a2c50d10e90cd
e53aecdc2a644913831f9c35d01fc323c0b2fac7
813660488e94bf22386fa1ef2bca253416aa3ee5b9ee61ca045931508766fc65

HTTP Headers

GET /upload/vod/2022/11/nvy2csnqxaq.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 10031
cf-bgj: h2pri
etag: "63789876-272f"
last-modified: Sat, 19 Nov 2022 08:48:54 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OGUi8EB5GpwpJZAX2O%2BpVFGE%2FGh2auEhHiUuFw8R2Wxow9aej5SmyhMno5o6blt%2B6AUmSis2j5jHrT92cu5VmnzaWLAxIyKAi%2Fy8oiekM6wm7MA%2FeHW6kPZjo3duqWCPy1Gn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c8cdd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/1kbkrithkia.jpg

104.21.235.64

200 OK

10 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/1kbkrithkia.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1240x1611, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size
10 kB (10509 bytes)
Hash
69633e5401c8a1435bc4e00a52606638
d0a53343e6be55aa384f7c91c8695a7e4ce87dbd
a8770ef516813533bd1bc5942c4d26796b2ee00e2961287aedcfd61a6ee2099d

HTTP Headers

GET /upload/vod/2022/11/1kbkrithkia.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 10509
cf-bgj: h2pri
etag: "63789871-290d"
last-modified: Sat, 19 Nov 2022 08:48:49 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BlNKltZbzaYoqiGUvxyAWBrJz7j2h%2BDYnjUupZOoeRrxvYOtsL%2BZNVvZtKB3AHfAejhlzLSL%2FM%2FC99qeR%2FztszerDwFpoEo879sS4kH3Du35lt1UO%2Fh9MfmdC6DKwtK4%2Ba2u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c8edd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/utdxf0co1j5.jpg

104.21.235.64

200 OK

9.5 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/utdxf0co1j5.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
9.5 kB (9522 bytes)
Hash
c928c6cdb727c53324578255235a44f3
98ff4f39b960bee212f8156cb4e1ea52385ec8ed
9f51f2f9b61a5eb40a107ccb0f61d9342963ba4af84891ed0dd72a260ea5c80a

HTTP Headers

GET /upload/vod/2022/11/utdxf0co1j5.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 9522
cf-bgj: h2pri
etag: "63807fe4-2532"
last-modified: Fri, 25 Nov 2022 08:42:12 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4MpbOPbDZUbLB0h3y16TDpmdRVWl2tYGzUQxnHHkKB0Whmo%2F5CLSK81C6e99vMVDk1dBv9BfEqTSp46HwiTfW2tlPmwtEn6YlXGNWN70dqjiGQZV2GMuY9oO4QTaTXGLCHW%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c90dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
05e86db92b07dd5bc244d42b0a20d64c
1b94de12672339ff3f137c4482565536b746de70
9c8e971d95c9744d946ae007c0b8f8c62ec00c3333b825f40115476e9de48760

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6050
Cache-Control: max-age=127075
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Etag: "6386b3c0-118"
Expires: Fri, 02 Dec 2022 03:17:53 GMT
Last-Modified: Wed, 30 Nov 2022 01:37:04 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 280

fmtu.netfhtu.com/upload/vod/2022/11/utqhombsvvg.jpg

104.21.235.64

200 OK

12 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/utqhombsvvg.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
12 kB (12294 bytes)
Hash
9c8534bc2507004617d6bb08b01b7196
133fbab79c12cfc11ce6c7454d06253682a6bbac
988ed3d4f3cf7543c8a0232e22c4800b0c52c17d771cfe95c41eaeb6026aea28

HTTP Headers

GET /upload/vod/2022/11/utqhombsvvg.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 12294
cf-bgj: h2pri
etag: "63807fe8-3006"
last-modified: Fri, 25 Nov 2022 08:42:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zkgaRud50pJsr6XNatSDsDjfk0QkA53%2FtJJpU4iCkovuMZ2q2fj%2BX4GDuQBlwtT7sDWdhlHusjS8TmnDNHTVVPpVetnc934PLM0T%2BDROfsDwmk6N2%2Fazy39CmG4gcK8CW%2FyU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c92dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/1hvlaxr1skq.jpg

104.21.235.64

200 OK

11 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/1hvlaxr1skq.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
11 kB (11334 bytes)
Hash
032250eff21128f6ae0b5fd0d37bbd21
842d20d33ae5e36a67183fed46d910f09b769842
585c55208d0274e9ed4ee8c4d8206ad690955cd04cd26ea8c83e0f3b9c8691cb

HTTP Headers

GET /upload/vod/2022/11/1hvlaxr1skq.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 11334
cf-bgj: h2pri
etag: "63807feb-2c46"
last-modified: Fri, 25 Nov 2022 08:42:19 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7F1erJ6Cv%2BwSxptxEOx3xPVhXs4ivQ4zzKxeZWWBb2PG9xAstJe%2FrVxOqUmeYkGP%2FV%2BtiTtruthHtn67cGD38ANcAgP8d5QwpSHYHMs7ouFCvc8gvLHLNeDv3y%2BINnYqzUW4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c95dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/2rzjwxv1mib.jpg

104.21.235.64

200 OK

9.4 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/2rzjwxv1mib.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
9.4 kB (9432 bytes)
Hash
468fdd40788ed71ead7ee2a050db97b3
1cc8a171704cd1a48279293f0ac9ef5f5fb96e3b
def778e9e46f6621d7da5dd2c0e31079e1d527581cc865e9b20638591c7cf433

HTTP Headers

GET /upload/vod/2022/11/2rzjwxv1mib.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 9432
cf-bgj: h2pri
etag: "63807ff0-24d8"
last-modified: Fri, 25 Nov 2022 08:42:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gx1IPLMvmzapIcImYrIK4lz2Lx%2FVHPWmu7K4Joiw4u9PacX4D638wk%2F4Jf1a3wyxOpZe1eT2jXnNFY%2BK1TkUvuPioxIsUggkbdwm19xJUAy3mwyoXau1beYFukMMhK8PnSZB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c98dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/hxwne0nhunr.jpg

104.21.235.64

200 OK

12 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/hxwne0nhunr.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
12 kB (12000 bytes)
Hash
faf8afb139b99b27560416117dc5b3d4
38614432ead2cfb6afe63778fd947f504d7a0d54
c3d8a8e91e3c62b08c3d538041140764a5553f935a033ef1cb88cc7070c77c4f

HTTP Headers

GET /upload/vod/2022/11/hxwne0nhunr.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 12000
cf-bgj: h2pri
etag: "63807ff4-2ee0"
last-modified: Fri, 25 Nov 2022 08:42:28 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Id3a7v%2FjdG1%2BvuRKt34cZpJg1hJwWfPZIGLxqyTgIRHNWkbyHrZ2oQjaq%2FOGg%2Fu%2FiBeeCi%2Buqe6AeUZHjvzAr0Db9acVKRTnx4ldwYNom%2FIKmWpHwci9X7dfd5O7iSwOPNiG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c99dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/pbga0n2um2e.jpg

104.21.235.64

200 OK

11 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/pbga0n2um2e.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
11 kB (11115 bytes)
Hash
98e5f0a89eac497538fee5a93a2b6e2f
62b7f5443ccdf1f4750002e69a188807346b29ed
6bf94d7b5058d0c27f54085a402a5c7dfc56682ecb7b684664334d9eb7bda49b

HTTP Headers

GET /upload/vod/2022/11/pbga0n2um2e.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 11115
cf-bgj: h2pri
etag: "63807ff8-2b6b"
last-modified: Fri, 25 Nov 2022 08:42:32 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IHhLjMEETowImkwVojXYCtufbqZQ4sY1%2F25S%2B5OcFmhHi6t%2BHope7O11WmN0%2Fo9%2BTv8HqozE8hIZySXYWJecqwSHscrTFgVV%2BhBPpV6q0R4TQnqjIxbzc515HfqJiIXa%2FHJ5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c9ddd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/pwhspzlvmxa.jpg

104.21.235.64

200 OK

9.6 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/pwhspzlvmxa.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
9.6 kB (9649 bytes)
Hash
b7709f66d66f0a8c12e6a1e58e1c3a50
b3b2aa7be26e58348037d464694b258e46909336
3efd897add9097cd835d9630dced17d9d2c974cf256c993afe338974c91d575b

HTTP Headers

GET /upload/vod/2022/11/pwhspzlvmxa.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 9649
cf-bgj: h2pri
etag: "6385dc59-25b1"
last-modified: Tue, 29 Nov 2022 10:18:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QgShAzQZv%2FmegMNhWsH84po6aMSNWJaebs6eblENX%2FXwW8JuNgx2h%2BQ5iS3beEXtgM6RYLZ6kwtDDiddvmv9c8CioeGTiuklErKj2fS2aRwKf%2FsoFnJ38hHDxpo147RbiolI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159ca0dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/vwgd4fqhrsc.jpg

104.21.235.64

200 OK

17 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/vwgd4fqhrsc.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 683x512, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
17 kB (16927 bytes)
Hash
2164afdec2f62f23508d9161e0891f68
5ee11bbea7662d7169eb3e03b81b7e5321a9d579
650a6bbfe4c9d199b13a1ecb7e3ac233521bcef6c3de8eca2f7b87989eae2dde

HTTP Headers

GET /upload/vod/2022/11/vwgd4fqhrsc.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 16927
cf-bgj: h2pri
etag: "6385dc4d-421f"
last-modified: Tue, 29 Nov 2022 10:17:49 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rLSsBXdPW3llD1Q39BB4d9TFz2NlKyRBez016XCRjdclIz6frMSj0m2btwRkkSzBC9zwwOe%2BfsjwhyfpUw%2Bdy9tpnF0iI9wzhafAahQ6ERAoPFxIHXyB6iDjJfH6hEHxswhH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159ca1dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/1av4odvshgp.jpg

104.21.235.64

200 OK

8.5 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/1av4odvshgp.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 683x512, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size
8.5 kB (8521 bytes)
Hash
19d299f938a05284a681d64415b39268
48e5b8ff1a3b2f5873be701f91d3cfbc9df58d44
738f2e62466a028def768744bdc4d37311150f0c11596ccfbf5994efb3960b86

HTTP Headers

GET /upload/vod/2022/11/1av4odvshgp.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 8521
cf-bgj: h2pri
etag: "6385dc5e-2149"
last-modified: Tue, 29 Nov 2022 10:18:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QdWF1o3yM2OqKMZdseYZ0r4QiwPLkhzG5OY3zaecN5A%2FB5AYxWkghyezY%2F4bJ1q1T3cnGQ8fnsqASmeHu9DH3Y%2BdHQ24FcuHQjudeoHCle9DgeRdacQgaDV8edIuLnPvUFqc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159ca5dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/ervkop4zh2g.jpg

104.21.235.64

200 OK

9.7 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/ervkop4zh2g.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Size
9.7 kB (9670 bytes)
Hash
6ffc11549b68b81647428277f66c01e7
f578eedc0932c7db9f8e1b5f33b623ce5f28fc2a
10634ab35edba3b4a013400569ac254419f73ab04ae484c8c8169093ec89cb73

HTTP Headers

GET /upload/vod/2022/11/ervkop4zh2g.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 9670
cf-bgj: h2pri
etag: "6385dc55-25c6"
last-modified: Tue, 29 Nov 2022 10:17:57 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H7HmeeNG45kRE0QpB4cHobkK3C5OokWGJlZpYBJ4SeWVkbgJThHjN6s7QOvWO4MWUT5FZ725%2F0CzMtKav1lRJQF8wAysn0sPBVsjMDCYeuVAmm7kWBx7reYbfoM8bjnXtEGy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb15acb7dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/2022/11/bj0t0us01f4.jpg

104.21.235.64

200 OK

13 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/2022/11/bj0t0us01f4.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Size
13 kB (13259 bytes)
Hash
fc741c46269a76dac24f3ff87aebd223
9cb4638ce6d7b9676be562765811c8f8bb9eb873
ef4215f0516ac1263b0e3fb7db145138a8267aaac3a77f96513ea715aa27e088

HTTP Headers

GET /upload/vod/2022/11/bj0t0us01f4.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 13259
cf-bgj: h2pri
etag: "6385dc50-33cb"
last-modified: Tue, 29 Nov 2022 10:17:52 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JroKfUvkJJ9nH4oHk9JyqhEo7EBGala8M5WBieZAJunO7lSqe5gve%2BKKqvXPYYyVHFtxQbYDd8tDwG7dawWeralZrrEe6qWYm5LF%2BCVSVB%2B7GhU5uf8hOx2lhp6L2t%2B0pMUN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb15acbbdd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1095082.jpg

104.21.235.64

200 OK

109 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1095082.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x540, components 3\012- data
Size
109 kB (108644 bytes)
Hash
69aba731a636df4dc58ff95eea31d6bc
bc9b7665f0da57d601dad10e734ba729cd20ea39
8fcfc5ea979c69d1fbaf69e2852f453c17e9a4641508773d4a7282cf5571fc08

HTTP Headers

GET /upload/vod/20200717/fc2ppv_1095082.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 108644
cf-bgj: h2pri
etag: "5f119055-1a864"
last-modified: Fri, 17 Jul 2020 11:49:41 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XWP%2FV1e%2FxuvQS1H0YCI545UXYPt2x1N1B4F%2Fn4U%2F6k9kFmbHSaMtDdCoPJ4mJkOl%2FGqyOn0nLcGIo4wsG28q1nXX%2BgR%2BItH1wiS8EIicDL07ypHcYUa%2B%2Fwcx1hub%2FcVDX%2FNp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb157c57dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1081888.jpg

104.21.235.64

200 OK

137 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1081888.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 960x540, components 3\012- data
Size
137 kB (136582 bytes)
Hash
3b1cdcc7102a0962ff720cf2d57f1b96
2d8e34d25ca35681d0e2ff1bfdfb7162c26907b6
b6471b0021e2521e01d82cb7a9d25613765b5eca53156e649d7b32a9e053cca9

HTTP Headers

GET /upload/vod/20200717/fc2ppv_1081888.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 136582
cf-bgj: h2pri
etag: "5f1190f6-21586"
last-modified: Fri, 17 Jul 2020 11:52:22 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wrCGSVHL7VcfSqXxgCad8GN3tCh5%2BJFCs965XNWMp%2FRoDQy6SrN%2BB6CMgvI0MJCUeDMvjSEW7bSOONJEA%2FxR7zzFLCEVoobijDQb2rsdfQZfKF%2B64ohfBLqsr6Y7hmcV7fgR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c6edd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/20200718/fc2-ppv-1001384.jpg

104.21.235.64

200 OK

122 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200718/fc2-ppv-1001384.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x540, components 3\012- data
Size
122 kB (121555 bytes)
Hash
76ea785a5a71a2daebaabff39035426d
a4ad2261e1544f1233af70b6ef6a897f3ed85364
33e029edd0f83607455e0fdcc8caa55ce3e2377dcc22bb7c27b3bb67afa1d315

HTTP Headers

GET /upload/vod/20200718/fc2-ppv-1001384.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 121555
cf-bgj: h2pri
etag: "5f125b84-1dad3"
last-modified: Sat, 18 Jul 2020 02:16:36 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RYqaqQ5BgPTlxZcO6QRqEPlPtxrDVKyNcZ%2FOk%2FUgui5k31nGEmjLfRsBuV2Ob0BvtZ3nliD4jD5UFqz9B4Raw9DlDJj0l2kKdXRvomMcr%2FbKRra8Bgzn5WBjxN5zjhM%2FBgVA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c7edd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1070490.jpg

104.21.235.64

200 OK

147 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1070490.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Pixelmator 3.8.2, datetime=2019:04:19 10:04:96], baseline, precision 8, 960x540, components 3\012- data
Size
147 kB (146846 bytes)
Hash
89f8667ec3abcef3a42412e9d654bdc0
b6276167425bcfbd475d42864fafa248fd50f4fb
28ca88fc8855205bf0e77ae0dbca4e7301d461f5ea9ca0096966e4b17696369b

HTTP Headers

GET /upload/vod/20200717/fc2ppv_1070490.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 146846
cf-bgj: h2pri
etag: "5f1191da-23d9e"
last-modified: Fri, 17 Jul 2020 11:56:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SZ15JvQiFPR0SeOcTWhN8gZkGy4FOPh87FOoaz84cbyE0lRiBh2aGqSgGXoqzpmbrGqbyvLO9Z5Aa%2B6v8bIr%2BPpcMJfRfryRMKf9KllUM7SRffXW2sBxeZm%2BfgZzQ5trfsxG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c7bdd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/20200805/auks112sopl.jpg

104.21.235.64

200 OK

178 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200805/auks112sopl.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size
178 kB (177548 bytes)
Hash
dd702f42b7063be2caad2cf9b59f7744
afc6188e15ff760ff12a0d5f6fcb3c478853c670
617dcaa0490104cd2d051380fa9dbbf64da0a7b3875fa76248e440c6128adda0

HTTP Headers

GET /upload/vod/20200805/auks112sopl.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 177548
cf-bgj: h2pri
etag: "5f2a7813-2b58c"
last-modified: Wed, 05 Aug 2020 09:12:51 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LJeRVP4H9%2F5raVaQdz5sNcfQ15Ebb4GQ9eGQRjJYYMISxdEkL%2BO%2BlHCoG2E1waPYK8EcZsuesrSeONHoIvtwPV%2BxFAENUgJN5a%2F8TRp36oLRh4bALhHFG%2Be6RMJTFqCmOcXn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c80dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1061516.jpg

104.21.235.64

200 OK

152 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200717/fc2ppv_1061516.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, software=PhotoScape, datetime=2019:04:04 21:25:47], baseline, precision 8, 960x540, components 3\012- data
Size
152 kB (152384 bytes)
Hash
af8b09a725f3bb91cce96c130fd8e531
a71b59d6f30d2d5c810eb265102b2fc0b9eeacc2
ae1904d26bddfae3523b2670f535c19aa013e333be09d9fbe989fdad9215640a

HTTP Headers

GET /upload/vod/20200717/fc2ppv_1061516.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 152384
cf-bgj: h2pri
etag: "5f11916d-25340"
last-modified: Fri, 17 Jul 2020 11:54:21 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pYQVqltQ5xPT7%2FrNPilEntpTkdNCTZ5imj9%2F8%2BTBF7fAMDs6d6zqJNMaGAql9X31AFQ95Qb%2BIz954wcYm6zaP1qx4n71ek2T%2BVc4OgWuRIxqdBM38RBzGQdLeQAZWWDlFwvn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c73dd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/8PiKUJKCkz4

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/8PiKUJKCkz4
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
91c14bcf3776036421976abe6f895ae7
e01f0ad034c0f349ddf3fac31ba286abd5ce6c40
6bd85de27ced525c3c0610b2e242af362375b7f8b76375376258ba025d7688fa

HTTP Headers

POST /s/gts1p5/8PiKUJKCkz4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fmtu.netfhtu.com/upload/vod/20200805/atid413pl.jpg

104.21.235.64

200 OK

207 kB

URL HTTP/2
fmtu.netfhtu.com/upload/vod/20200805/atid413pl.jpg
IP
104.21.235.64:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x537, components 3\012- data
Size
207 kB (206567 bytes)
Hash
0d238687e02d62e6a30f86ff39a828d8
0418c76bea3373a75b84daa6764e0f7e6c25a897
4b48fb5d7da454031d99f4443ad81251c2ecbecf809e1abae2b394d6a67fac5f

HTTP Headers

GET /upload/vod/20200805/atid413pl.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/jpeg
content-length: 206567
cf-bgj: h2pri
etag: "5f2a78c1-326e7"
last-modified: Wed, 05 Aug 2020 09:15:45 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eTkRkxnY4jaKoOgiDmc8kmqYDHeTOfm87P4fr5WPpDu8gVTB%2Fwf%2BNfCyAFWQU%2F9KP8Lk7gRTTqthsNYVH%2FJZH3BNuneA%2FwgzDEJfCdydKpTglnCGw%2FUeqtYvXrSHS8IshM5y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb159c8bdd72-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.tupku.top/lm/031815-80.gif

188.114.97.1

200 OK

1.6 MB

URL HTTP/2
www.tupku.top/lm/031815-80.gif
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 500 x 281\012- data
Size
1.6 MB (1626999 bytes)
Hash
17244f3a8b60a0f7b291f5621c873713
c523f5d5b60d2eabc9084e9ba5803647ac08c2cd
4aed8c090aa7bff3de4c028efced6a87dd7645bc15d265cdddf106f3f5dd9435

HTTP Headers

GET /lm/031815-80.gif HTTP/1.1
Host: www.tupku.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/gif
content-length: 1626999
last-modified: Thu, 07 Jul 2022 15:13:11 GMT
etag: "62c6f807-18d377"
expires: Thu, 15 Dec 2022 23:37:39 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1228145
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dZ%2BQG6QRhBtuFHRi0r07ov5f5nqX2ccIFsqPmLZe3Dq0F7LjDHDBybN9rDFbkyEAbRb%2Bk347q9KkIB96b45gedx2LsrG5BpCu5XxP8hJYNeFrym63OW7oiy1ocu2AOls"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724cb16e9e3b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/8PiKUJKCkz4

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/8PiKUJKCkz4
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
91c14bcf3776036421976abe6f895ae7
e01f0ad034c0f349ddf3fac31ba286abd5ce6c40
6bd85de27ced525c3c0610b2e242af362375b7f8b76375376258ba025d7688fa

HTTP Headers

POST /s/gts1p5/8PiKUJKCkz4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

727 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
727 B (727 bytes)
Hash
60be9e248a19af148c3186ec7c1178cc
d7222300d95edc3587fed013f3f775b21b2b214b
5792630410e60ea547cb827ca0c74674486c78c72dca1b35e974b335a091d701

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5616
Cache-Control: max-age=113332
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:58 GMT
Etag: "63867fc2-2d7"
Expires: Thu, 01 Dec 2022 23:28:50 GMT
Last-Modified: Tue, 29 Nov 2022 21:55:14 GMT
Server: ECS (amb/6BC2)
X-Cache: HIT
Content-Length: 727

ocsp.sectigo.com/

172.64.155.188

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
8be047b9eea5204769ef354d954aff4a
21f52c131af86006ecfc79580efaa98eb55da849
d478955d6cd59d7982f65b85dcdaf6907d1d88fcadf943922d48bd16c64faf06

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 20:23:24 GMT
Expires: Sun, 04 Dec 2022 20:23:23 GMT
Etag: "21f52c131af86006ecfc79580efaa98eb55da849"
Cache-Control: max-age=360804,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7724cb17798eb4ee-OSL

p3.douyinpic.com/obj/tos-cn-i-dy/f5e989c9395e4c019f0ae250047773ca

47.246.44.230

200 OK

435 kB

URL HTTP/2
p3.douyinpic.com/obj/tos-cn-i-dy/f5e989c9395e4c019f0ae250047773ca
IP
47.246.44.230:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
GIF image data, version 89a, 960 x 60\012- data
Size
435 kB (434791 bytes)
Hash
339d7b92784972bcae5c5adc6e4195b2
43f218af86d814adf5f9796f524174f28de61382
99a0f7cf7a1d8f3f746f2b3c237c74bc532fe687efd10a9a8a1c86262328ca5d

HTTP Headers

GET /obj/tos-cn-i-dy/f5e989c9395e4c019f0ae250047773ca HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 434791
date: Fri, 25 Nov 2022 12:30:41 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Fri, 25 Nov 2022 06:10:02 GMT
nw-session-id: 202211251410020101750890790818B11C5hdpm01dy
nw-session-trace: 2022-11-25T14:10:02.808299566+08:00 74
x-bdcdn-cache-status: TCP_HIT
x-length: 434791
x-powered-by: ImageX
x-response-date: Fri, 25 Nov 2022 14:10:02 GMT
x-tt-logid: 202211251410020101750890790818B11C
via: n204-099-053, cache21.l2de2[0,0,206-0,H], cache20.l2de2[1,0], cache20.l2de2[1,0], cache8.se1[0,0,200-0,H], cache1.se1[1,0]
x-request-ip: fdbd:dc01:27:721::21
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 01ec2936d191a37d7cd9157e1f67a31bf6398fcd6fb45995bb27cd8a2d78148d34a40ece5425f058848e3cf53ffb0376d0ddebe088e84e818ef89797c15143e2ac23ddd5e260a0915bf4ef31ff7377d7892d3d5b3cba9e3c667ab8391bad63b717
x-response-lb: image
ali-swift-global-savetime: 1669379441
age: 444557
x-cache: HIT TCP_MEM_HIT dirn:1:197467500
x-swift-savetime: Fri, 25 Nov 2022 13:09:47 GMT
x-swift-cachetime: 31533654
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9516698239986774315e
X-Firefox-Spdy: h2

p3.douyinpic.com/obj/tos-cn-i-dy/7a86c48a291048b292805c178a58ea12

47.246.44.230

200 OK

289 kB

URL HTTP/2
p3.douyinpic.com/obj/tos-cn-i-dy/7a86c48a291048b292805c178a58ea12
IP
47.246.44.230:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
GIF image data, version 89a, 960 x 70\012- data
Size
289 kB (288676 bytes)
Hash
74eb142fa1087dc2eee9cd3543ee965d
8a9b2861643c64c7e131d39c5d6aed4988051659
5c7331b29c2563a925053e0f06c845b805583cf3d79231201528d4ca64df7085

HTTP Headers

GET /obj/tos-cn-i-dy/7a86c48a291048b292805c178a58ea12 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 288676
date: Mon, 28 Nov 2022 07:14:12 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 28 Nov 2022 06:13:49 GMT
nw-session-id: 2022112814134901020817416048808D62x726402dy
nw-session-trace: 2022-11-28T14:13:49.035361118+08:00 23
x-bdcdn-cache-status: TCP_HIT
x-length: 288676
x-powered-by: ImageX
x-response-date: Mon, 28 Nov 2022 14:13:49 GMT
x-tt-logid: 2022112814134901020817416048808D62
via: n132-078-071, cache15.l2de2[0,0,206-0,H], cache25.l2de2[1,0], cache25.l2de2[1,0], cache2.se1[0,0,200-0,H], cache1.se1[2,0]
x-request-ip: fdbd:dc03:8:577::23
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=2
x-tt-trace-host: 0178520ad27bd5d1cf50b17ae5b59e240a9961cf21b5798052e2f7c00ae8a38a4d8bd3bc55b15e541204a52c2105a97e946b17fd61a5726e34f7f1f9b53725f4d77c4164566be55a086f9402ff81301dc228e8de5ebb5af5e2a2afeb093f22ce17
x-response-lb: image
ali-swift-global-savetime: 1669619652
age: 204346
x-cache: HIT TCP_MEM_HIT dirn:6:467308472
x-swift-savetime: Mon, 28 Nov 2022 07:22:38 GMT
x-swift-cachetime: 31535494
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9516698239988944463e
X-Firefox-Spdy: h2

ocsp.sectigo.com/

172.64.155.188

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
53a9e6075e0614555254a4c3908fba86
731233b1e5b778588a42355e2123948ecf800cbb
0f348a69f07626c93e6dacdae01c1f7b6c0d94f484b9a645ce755cf565249f91

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 04:32:10 GMT
Expires: Tue, 06 Dec 2022 04:32:09 GMT
Etag: "731233b1e5b778588a42355e2123948ecf800cbb"
Cache-Control: max-age=476530,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7724cb17da4bb4ee-OSL

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
b90107aa3c563acdc194853c5704d99a
e5053c180140bdb839e6bb32de7188e248506a94
cd5447d7005115a79566f447d08cc879fcaa366ab9abd0f3d99084f6a6a8c949

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 13:44:20 GMT
Expires: Mon, 05 Dec 2022 13:44:19 GMT
Etag: "e5053c180140bdb839e6bb32de7188e248506a94"
Cache-Control: max-age=423260,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7724cb1848c5fac4-OSL

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
3bfe5fbb0390910ffc8e2186aebdffdd
556bb3bd51a70b9ebe1403078332474b3df136d2
eac2d5c15abfa9538b47dc356a45b461abdde88a7fc197f5b1ec9a31eac18fa2

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 00:14:21 GMT
Expires: Tue, 06 Dec 2022 00:14:20 GMT
Etag: "556bb3bd51a70b9ebe1403078332474b3df136d2"
Cache-Control: max-age=461060,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7724cb184e7fb512-OSL

p3.douyinpic.com/obj/tos-cn-i-dy/e0beba9af0914112bc75015297d9dbdc

47.246.44.230

200 OK

409 kB

URL HTTP/2
p3.douyinpic.com/obj/tos-cn-i-dy/e0beba9af0914112bc75015297d9dbdc
IP
47.246.44.230:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
GIF image data, version 89a, 600 x 300\012- data
Size
409 kB (408780 bytes)
Hash
7948af520e94a790d8e1046883590d3a
be6209c742b34b19cf193f902527a18983a5d5d7
b75c697f0933a336145e263d5d0d9cc2358ff78db02655b31d710dc93839e078

HTTP Headers

GET /obj/tos-cn-i-dy/e0beba9af0914112bc75015297d9dbdc HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 408780
date: Mon, 28 Nov 2022 07:14:13 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 28 Nov 2022 06:14:22 GMT
nw-session-id: 20221128141422010131136012497E5CFDt6p7c01dy
nw-session-trace: 2022-11-28T14:14:22.65688774+08:00 30
x-bdcdn-cache-status: TCP_HIT
x-length: 408780
x-powered-by: ImageX
x-response-date: Mon, 28 Nov 2022 14:14:22 GMT
x-tt-logid: 20221128141422010131136012497E5CFD
via: n132-085-021, cache4.l2de2[0,0,206-0,H], cache15.l2de2[0,0], cache15.l2de2[1,0], cache7.se1[0,0,200-0,H], cache1.se1[2,0]
x-request-ip: fdbd:dc03:15:294::79
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=2
x-tt-trace-host: 0178520ad27bd5d1cf50b17ae5b59e240ac422d4cb9e6228712265874fe3e38fffb4691080b7c9d9e900bb385572bc0715e3764f4cb6191d7730d84065e5ebd8fa63b5a2c0972c613b953ff1ed421fb23f76b698e875b19858834cb416888cca6d
x-response-lb: image
ali-swift-global-savetime: 1669619653
age: 204346
x-cache: HIT TCP_MEM_HIT dirn:3:261095652
x-swift-savetime: Mon, 28 Nov 2022 07:22:38 GMT
x-swift-cachetime: 31535495
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9516698239992214684e
X-Firefox-Spdy: h2

ocsp.sectigo.com/

172.64.155.188

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
ec3eb29922ea9f8d0dd60bbec4ccca1b
df7c66f2a5c4dc7b89f85c336fa5f8e3fc301170
2ce6c62d4177646e9838c1d0e5d02ac720825446fd1ea81e748fece4dc7908bf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 02:11:01 GMT
Expires: Mon, 05 Dec 2022 02:11:00 GMT
Etag: "df7c66f2a5c4dc7b89f85c336fa5f8e3fc301170"
Cache-Control: max-age=381660,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7724cb1aef16b4ee-OSL

ocsp.sectigo.com/

104.18.32.68

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
e0cca75d80a5cb0b70156377f339a245
61b4e7fd7f3d8051a91061334649a3b6cd5859f7
fdab1f1c268c6d969b18ddb2fcbaab563f5f4bcb245ded4cc2717376e2685761

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:59:59 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 05:02:14 GMT
Expires: Wed, 07 Dec 2022 05:02:13 GMT
Etag: "61b4e7fd7f3d8051a91061334649a3b6cd5859f7"
Cache-Control: max-age=564733,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7724cb1b7b41fac4-OSL

ocsp.digicert.com/

93.184.220.29

200 OK

727 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
727 B (727 bytes)
Hash
91c07924675d9cc73d80e10a1aa91ee3
574a1b9490889004a6ab0e59bf42b0a175ce6982
c8e83d896c6a68b48b7b59e6bfa250263eec9daef4935f9785ac6996acf6fa1c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=162412
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:59:59 GMT
Etag: "6387556b-2d7"
Expires: Fri, 02 Dec 2022 13:06:51 GMT
Last-Modified: Wed, 30 Nov 2022 13:06:51 GMT
Server: nginx
Content-Length: 727

www.xyyds90.xyz/

45.136.118.155

200 OK

590 kB

URL HTTP/2
www.xyyds90.xyz/
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type
data
Size
590 kB (590131 bytes)
Hash
58233f91792b18216f321083bb4cd9fe
50a4e3f78f14ca9ba6726884bcdb363d6f774c15
ce3849f6baf0f47bcc2bd55cc0ce67877d81a13ee412956c81414f087332e429

HTTP Headers

GET / HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://app.gxfc567888.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp2.globalsign.com/gsorganizationvalsha2g2

104.18.20.226

200 OK

1.5 kB

URL HTTP/1.1
ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1459 bytes)
Hash
c96b31b60855572722a5b548ad650a9d
6ad0b01d3466710f5403e506c01aa3914b9ff4c5
c1403a16d82e29a4fe4861cd85deac8d151cf3b8156e8ca4a2fd686f35cac633

HTTP Headers

POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 16:00:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 04 Dec 2022 13:00:09 GMT
ETag: "6ad0b01d3466710f5403e506c01aa3914b9ff4c5"
Last-Modified: Wed, 30 Nov 2022 13:00:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 890
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7724cb201fcc0b02-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
f05974074a01553a1aae4b477d85bd11
060363f7e22782df328bf3e40b2f7c932b6dad42
746e0546b6f6afca1c0144af4baa787628adc41a6e29b01458e91fda8f5711ac

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 16:00:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 04 Dec 2022 14:39:27 GMT
ETag: "060363f7e22782df328bf3e40b2f7c932b6dad42"
Last-Modified: Wed, 30 Nov 2022 14:39:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 168
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7724cb212dbab511-OSL

585227ybn.com/64e75ce4c9aa45f4bfd46368618403da.gif

45.61.212.123

200 OK

407 kB

URL HTTP/1.1
585227ybn.com/64e75ce4c9aa45f4bfd46368618403da.gif
IP
45.61.212.123:0
ASN
#53587 AZT

File type
GIF image data, version 89a, 960 x 70\012- data
Size
407 kB (407200 bytes)
Hash
3a2a02fe192865c46b4ea1b57711d35d
10d02c2e54d809ceeed42839991a8b2efa59c573
0b600e3355c823c5669f8338ff521c9b3790de0c3bb051bf24b19fc644821c6d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /64e75ce4c9aa45f4bfd46368618403da.gif HTTP/1.1
Host: 585227ybn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63667f70-636a0"
Date: Fri, 25 Nov 2022 16:19:47 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sat, 05 Nov 2022 15:21:20 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-23
Content-Length: 407200

828239sam.com/b3cf3d072cf14805b89609dacc60d30c.gif

45.61.212.60

200 OK

553 kB

URL HTTP/1.1
828239sam.com/b3cf3d072cf14805b89609dacc60d30c.gif
IP
45.61.212.60:0
ASN
#53587 AZT

File type
GIF image data, version 89a, 960 x 60\012- data
Size
553 kB (552818 bytes)
Hash
097e6fa9314192dc3dd55cb1c5023ee5
c30366c4c910616f1a3c1b773ffb4af967e20eb5
db020d7293807326453f5848c0bf219e2b835f2530468a9d816a3c1c7941023a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /b3cf3d072cf14805b89609dacc60d30c.gif HTTP/1.1
Host: 828239sam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "635b9393-86f72"
Date: Tue, 29 Nov 2022 07:08:32 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 28 Oct 2022 08:32:19 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us1-cdnb-30
Content-Length: 552818

398375178.com/c310ce984d314cde8c4c930fd85d15a4.gif

47.75.19.145

200 OK

584 kB

URL HTTP/1.1
398375178.com/c310ce984d314cde8c4c930fd85d15a4.gif
IP
47.75.19.145:0
ASN
#45102 Alibaba US Technology Co., Ltd.

File type
GIF image data, version 89a, 960 x 60\012- data
Size
584 kB (584025 bytes)
Hash
ebf4ee75bbd43b703e1b1b861ba166e2
c241029604f77ad6b4f56894bc51decfededfde7
d6655adbfa7089435d168e9b1432e524f0bf11be8b80ddc499bef69bd5a376ea

HTTP Headers

GET /c310ce984d314cde8c4c930fd85d15a4.gif HTTP/1.1
Host: 398375178.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: AliyunOSS
Date: Wed, 30 Nov 2022 15:59:59 GMT
Content-Type: image/gif
Content-Length: 584025
Connection: keep-alive
x-oss-request-id: 63877DFFF27FBE313811D042
Accept-Ranges: bytes
ETag: "EBF4EE75BBD43B703E1B1B861BA166E2"
Last-Modified: Wed, 16 Nov 2022 15:34:08 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9573701292697531384
x-oss-storage-class: Standard
Content-MD5: 6/TudbvUO3A+GxuGG6Fm4g==
x-oss-server-time: 1

p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image

120.52.95.240

200 OK

678 kB

URL HTTP/2
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
IP
120.52.95.240:0
ASN
#133119 China Unicom IP network

File type
GIF image data, version 89a, 270 x 160\012- data
Size
678 kB (677521 bytes)
Hash
94051cb1d1b77200b4462281a864b96e
e5b468a1b2f4bbdda1b6a3a0df2dcce6b3de7e06
d44d0d2dd188024b60ec38cb3f3ea10c080690175e923f90c9c2a2e862670c84

HTTP Headers

GET /img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image HTTP/1.1
Host: p26.toutiaoimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:59 GMT
content-type: image/gif
content-length: 677521
set-cookie: hccesp_lttk=AAAAAgAAAAAAAAAFAAAAAQAAAAeBwwi0wpEfjGnHyqoUXnDJ4s1wqEDE4+CrI6SViOvEwwAAAAAAAAAAAAAAQCbaRw9SA/mQuVgrjImm7uHRM9scMWBCPpFm01tHEt0Rw3oahVnGayEtgmBDWd6G1/nIhXztI9pFoldUXCz9pa4=; Expires=Thu, 30 Nov 2023 15:59:59 GMT; path=/;
server: openresty
age: 13695654
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 30 Dec 2021 00:07:35 GMT
nw-session-id: 2021123008073501015013614530ADE9B0dprsv01tt
nw-session-trace: 2021-12-30T08:07:35.194015393+08:00 68
x-bdcdn-cache-status: TCP_HIT
x-ccdn-cachettl: 31536000
x-length: 677521
x-powered-by: ImageX
x-response-date: Thu, 30 Dec 2021 08:07:35 GMT
x-response-lb: image
x-tt-logid: 2021123008073501015013614530ADE9B0
nginx-hit: 1
server-timing: cdn-cache;desc=HIT, edge;dur=13
via: CHN-HElangfang-AREACUCC1-CACHE18[13],CHN-HElangfang-AREACUCC1-CACHE35[0,TCP_HIT,7],CHN-TJ-GLOBAL1-CACHE60[39],CHN-TJ-GLOBAL1-CACHE35[0,TCP_HIT,36]
x-hcs-proxy-type: 1
x-tt-trace-host: 016a2077e03b2041825c42669e9a23cec5ee04519515486308eb42b81315658df6aa5ed29ad219c7d25626d5b022cced5274c18183adcd43889f65e87a17fde2315b0226a7e5f07d4c19094125051b3e74699be800dd629619bc2141d5fb81fc89ccc76230d7d3e4f731a9d881f3cb16c4
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2

638236rpn.com/d0245169c64c469c88717a1a417e40b4.gif

45.61.212.130

200 OK

759 kB

URL HTTP/1.1
638236rpn.com/d0245169c64c469c88717a1a417e40b4.gif
IP
45.61.212.130:0
ASN
#53587 AZT

File type
GIF image data, version 89a, 960 x 100\012- data
Size
759 kB (758664 bytes)
Hash
aba678cc899befb96d7234dc3087f2c0
72becd4ad309343a09159b1eaf66ea3c3b05585a
f4ee005ff278376111cf7430637a2be54c202f0ca62bd2afde5c8cff0e5f2c7c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /d0245169c64c469c88717a1a417e40b4.gif HTTP/1.1
Host: 638236rpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6370b612-b9388"
Date: Sat, 26 Nov 2022 02:42:11 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sun, 13 Nov 2022 09:17:06 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-30
Content-Length: 758664

kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif

182.140.218.3

200 OK

1.2 MB

URL HTTP/2
kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif
IP
182.140.218.3:0
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

File type
GIF image data, version 89a, 960 x 80\012- data
Size
1.2 MB (1197751 bytes)
Hash
6938343bc2a842c4d2c9c96f4dde0298
00e2b1b902b196b3c005facb934c10e2a2ca1961
5ccc1726994dfc6d2667e13bf946785f79bb01401fedb59db1cbdf6942dbaee6

HTTP Headers

GET /ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 16:00:00 GMT
content-type: image/gif
content-length: 1197751
cache-control: max-age=315360000
expires: Mon, 22 Nov 2032 14:50:06 GMT
last-modified: Fri, 25 Nov 2022 14:36:03 GMT
age: 436194
via: http/1.1 ORI-CLOUD-HUN-MIX-117 (jcs [cRs f ]), http/1.1 SCchengdu-CT-11-MIX-26 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1669387806409-0-0-0-35-35;200;200-1669395701684-0-0-0-1-1;200-1669824000304-0-0-0-0-0
X-Firefox-Spdy: h2

kjimg10.360buyimg.com/ott/jfs/t1/48391/16/19388/893726/6380d3c5E0d000912/3cef13072ce017c1.gif

182.140.218.3

200 OK

894 kB

URL HTTP/2
kjimg10.360buyimg.com/ott/jfs/t1/48391/16/19388/893726/6380d3c5E0d000912/3cef13072ce017c1.gif
IP
182.140.218.3:0
ASN
#38283 CHINANET SiChuan Telecom Internet Data Center

File type
GIF image data, version 89a, 960 x 80\012- data
Size
894 kB (893726 bytes)
Hash
1e34697200f13da14c5bfabeba617325
9a18ed38d5d385f885c28a4280b4c61302745b65
b63a862a0f65ff9f685e9b67fd171a6df96878469b0a85d1da2f644399c0409f

HTTP Headers

GET /ott/jfs/t1/48391/16/19388/893726/6380d3c5E0d000912/3cef13072ce017c1.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 16:00:00 GMT
content-type: image/gif
content-length: 893726
cache-control: max-age=315360000
expires: Mon, 22 Nov 2032 14:44:40 GMT
last-modified: Fri, 25 Nov 2022 14:40:05 GMT
age: 436521
via: http/1.1 ORI-CLOUD-HUN-MIX-16 (jcs [cHs f ]), http/1.1 SCchengdu-CT-11-MIX-26 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1669387480861-0-0-20-47-47;200;200-1669387855499-0-0-0-4-4;200-1669824000332-0-0-0-1-1
X-Firefox-Spdy: h2

375772rug.com/73adb285b662407297532268d44673a5.gif

45.61.212.118

200 OK

876 kB

URL HTTP/1.1
375772rug.com/73adb285b662407297532268d44673a5.gif
IP
45.61.212.118:0
ASN
#53587 AZT

File type
GIF image data, version 89a, 750 x 100\012- data
Size
876 kB (875887 bytes)
Hash
615bb5640bd5731d565ce226248874aa
6078a171d5f984f650d0b310c216e286bcb6f36d
6dd751858e88556c5f2191769bf831076fa4a6ea2f5d84cd0f21c30ca2b45545

HTTP Headers

GET /73adb285b662407297532268d44673a5.gif HTTP/1.1
Host: 375772rug.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6377672f-d5d6f"
Date: Sat, 19 Nov 2022 06:45:12 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 18 Nov 2022 11:06:23 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-18
Content-Length: 875887

www.xyyds90.xyz/pf.js

45.136.118.155

404 Not Found

0 B

URL HTTP/2
www.xyyds90.xyz/pf.js
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /pf.js HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

www.xyyds90.xyz/template/m1938pc/static/css/style.css

45.136.118.155

200 OK

0 B

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/style.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /template/m1938pc/static/css/style.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Thu, 14 Oct 2021 17:25:59 GMT
vary: Accept-Encoding
etag: W/"61686827-5335"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

img.1198555.com/images/638035d88d97bc67605fda09.gif

185.239.226.87

302 Found

0 B

URL HTTP/2
img.1198555.com/images/638035d88d97bc67605fda09.gif
IP
185.239.226.87:0
ASN
#134835 Starry Network Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/638035d88d97bc67605fda09.gif HTTP/1.1
Host: img.1198555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/f5e989c9395e4c019f0ae250047773ca
X-Firefox-Spdy: h2

img.9565x.com/images/638451bcb5eb6667f536d102.gif

185.239.226.87

302 Found

0 B

URL HTTP/2
img.9565x.com/images/638451bcb5eb6667f536d102.gif
IP
185.239.226.87:0
ASN
#134835 Starry Network Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/638451bcb5eb6667f536d102.gif HTTP/1.1
Host: img.9565x.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/e0beba9af0914112bc75015297d9dbdc
X-Firefox-Spdy: h2

www.xyyds90.xyz/template/m1938pc/static/css/flickity.min.css

45.136.118.155

200 OK

0 B

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/flickity.min.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /template/m1938pc/static/css/flickity.min.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:28 GMT
vary: Accept-Encoding
etag: W/"613f4608-ab1"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

img.9219x.com/images/6384519bb5eb6667f536d0ff.gif

185.239.226.87

302 Found

0 B

URL HTTP/2
img.9219x.com/images/6384519bb5eb6667f536d0ff.gif
IP
185.239.226.87:0
ASN
#134835 Starry Network Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/6384519bb5eb6667f536d0ff.gif HTTP/1.1
Host: img.9219x.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/7a86c48a291048b292805c178a58ea12
X-Firefox-Spdy: h2

webs24.theavstatic.xyz/static/tmp/x99av/semm.gif

104.21.234.237

200 OK

0 B

URL HTTP/2
webs24.theavstatic.xyz/static/tmp/x99av/semm.gif
IP
104.21.234.237:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/tmp/x99av/semm.gif HTTP/1.1
Host: webs24.theavstatic.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:59:58 GMT
content-type: image/gif
last-modified: Fri, 15 Apr 2022 12:43:13 GMT
vary: Accept-Encoding
etag: W/"62596861-4ad05"
expires: Sun, 11 Dec 2022 13:49:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1649414
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OqtQyU5T1S%2BRravvJiouvfXdKYHUxJc6mJbAQ7Jy6qSJLoiholUbaWnTu1XbWoWyYiMgPoZ9a99rvonqw0FNKwRNzpei%2B9oTbQnLlaoG6QM2OxvhG2i0nq%2B%2BpLPyFb4joFiKOcFq6jSo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7724cb150d7fdc67-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.xyyds90.xyz/template/m1938pc/static/css/header.css

45.136.118.155

200 OK

0 B

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/header.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /template/m1938pc/static/css/header.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Wed, 13 Oct 2021 13:35:12 GMT
vary: Accept-Encoding
etag: W/"6166e090-10db"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

www.xyyds90.xyz/template/m1938pc/static/css/main.css

45.136.118.155

200 OK

0 B

URL HTTP/2
www.xyyds90.xyz/template/m1938pc/static/css/main.css
IP
45.136.118.155:0
ASN
#18978 ENZUINC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /template/m1938pc/static/css/main.css HTTP/1.1
Host: www.xyyds90.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:59:56 GMT
content-type: text/css
last-modified: Thu, 14 Oct 2021 14:51:36 GMT
vary: Accept-Encoding
etag: W/"616843f8-85b"
expires: Thu, 01 Dec 2022 03:59:56 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0

43.154.254.32

200 OK

0 B

URL HTTP/2
p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0
IP
43.154.254.32:0
ASN
#132203 Tencent Building, Kejizhongyi Avenue

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xyyds90.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: Qnginx/1.4.4
date: Wed, 30 Nov 2022 16:00:00 GMT
content-type: image/gif
content-length: 1607696
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:45 GMT
cache-control: max-age=2592000
x-delay: 116590 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1607696
chid: 0
fid: 0
x-nws-log-uuid: a53e8b09-93c3-4257-acef-442369e11db2
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations