hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=701258810&si=24e51846dadc7d5def9c215a184e7353&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=701258810&si=24e51846dadc7d5def9c215a184e7353&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=701258810&si=24e51846dadc7d5def9c215a184e7353&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:51 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=7659A1626006A059; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
otc.bjhav.cn/image/top_banner.png
200 OK 6.6 kB URL GET otc.bjhav.cn/image/top_banner.png
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
File type PNG image data, 362 x 80, 8-bit/color RGBA, non-interlaced
Hash 0085cd1216f048c4789c1ccc7b3b7298
ec3378294eeb587ab00082bb633a992ff5f7807d
c37e12eec8bbdcfc4ca8debc2103765b7c51eb550f569c90faa305cc88cd97fb
GET /image/top_banner.png HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:53 GMT
Content-Type: image/png
Content-Length: 6567
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Sun, 14 Apr 2024 04:41:45 GMT
ETag: "661b5e89-19a7"
Accept-Ranges: bytes
Via: 1.1 PSxgHKG8ld122:5 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 141688
x-ws-request-id: 67d37a9d_PSrdsdgemSTO1sw92_9149-4157
600tk600tk1zabcd.a18fdjf4ik.cc/mashen.png
200 OK 1.1 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/mashen.png
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type PNG image data, 73 x 28, 8-bit colormap, non-interlaced
Hash 6c3397eea09b78ca1150474cb8b861ec
f40485f590a75946b8c3dee3b9449c93b2265e06
404093050e63f487857f1a98cb675da36ff3fb662fc863fde600efe1f8772d8d
GET /mashen.png HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 1119
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:02:45 GMT
accept-ranges: bytes
date: Fri, 14 Mar 2025 00:37:54 GMT
cache-control: max-age=60
etag: "66b5bf15-45f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aW6sjm_cFQVlq3SSGlU2U9skkT6UUxiTZzqQEAHNfLm-8PPOpotjzw==
age: 59
X-Firefox-Spdy: h2
cdn1.bjhav.cn/blob/2025/0228/c8f6c00ff2781cee8226d0e4b0a0a79f
200 OK 58 kB URL GET cdn1.bjhav.cn/blob/2025/0228/c8f6c00ff2781cee8226d0e4b0a0a79f
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash 0221b5fa5a1bac2ea43662fab4a87f50
2a2a61cd5d0e09c345be41eb048e4ed8cfdd3a98
5ae80e7617bee765790c421b691ce66837acf260c45b83ba31cd0638f040b792
GET /blob/2025/0228/c8f6c00ff2781cee8226d0e4b0a0a79f HTTP/1.1
Host: cdn1.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://600tk600tk1zabcd.a18fdjf4ik.cc
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 57769
date: Mon, 10 Mar 2025 05:13:21 GMT
last-modified: Fri, 28 Feb 2025 05:03:19 GMT
etag: "67c14397-e1a9"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
x-via: 2.0 PS-ARN-04Dih238 [HIT]
age: 329133
x-ws-request-id: 67d37a9e_PS-ARN-04Dih238_30529-33372
x-cache-status: HIT
server: nginx
X-Firefox-Spdy: h2
200 OK 3.6 kB IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (3791), with no line terminators
Hash 09be6c827ce8d7e7e71c983f7cd113ce
b40fa81e5fbf0de23d36c49199410170b69b8270
bd6c508717a6f621f086970d0ba55d40a597cf52f14912ba62752b35449d9d13
GET / HTTP/1.1
Host: huimeidg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 14 Mar 2025 00:38:48 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
hm.baidu.com/hm.js?073d35101eff9270c99ddb14253ca952
200 OK 30 kB URL GET hm.baidu.com/hm.js?073d35101eff9270c99ddb14253ca952
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (621)
Hash 8097242d5132d0f3f6a2dbc6e73b5dc2
0ad6920302273ac95c3052d0d1129f41c82a6be8
f1b6b03a66adc0a07f42b1e475eb35de31aea72a8b45b4e772e19170251827d4
GET /hm.js?073d35101eff9270c99ddb14253ca952 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11291
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:49 GMT
Etag: de79003bc9c770afee978f21ee7d3da2
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=0FE6E0F49AD1E2AD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
600tk600tk1zabcd.a18fdjf4ik.cc/public/css/000624.css?
200 OK 6.6 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/public/css/000624.css?
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type ASCII text, with very long lines (6801), with no line terminators
Hash 316fdf9c8cf33031f24da7912e3bd36b
26d311fdb2b821c02f46e831305107743050ecf4
de6ab26b723c645cd6bf5d88e4f1ed8b7f27c64180372442c000a322af572a75
GET /public/css/000624.css? HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:03:01 GMT
content-encoding: gzip
date: Fri, 14 Mar 2025 00:38:47 GMT
cache-control: max-age=60
etag: W/"66b5bf25-19e4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SJWJ32miaFFvvKw3UmvKjLiA__YJiFmb4ARbEiBx-wOhHU0sB_HsZw==
age: 3
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?8c4f429069d3220603a03af76e7008f5
200 OK 30 kB URL GET hm.baidu.com/hm.js?8c4f429069d3220603a03af76e7008f5
IP
ASN #56040 China Mobile communications corporation
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (621)
Hash 6ba9945c6cd3a57ed4f2adb450a19889
eff5e5658b33002f61f66a7e7aca4be0dedf841d
dab8b084297eb896489f11ba14469e8988c014815eefeefb2bedbbee3dc73490
GET /hm.js?8c4f429069d3220603a03af76e7008f5 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11291
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:51 GMT
Etag: 7dfed8505c7579c204b3e5fda2005a3b
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=6A276FC8ADE9ECD2; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
otc.bjhav.cn/assets/lazysizes-umd.min.js
200 OK 7.9 kB URL GET otc.bjhav.cn/assets/lazysizes-umd.min.js
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
File type JavaScript source, ASCII text, with very long lines (8088), with no line terminators
Hash feb3284767aea660f980a3cae0884d09
1628879bab6371c83c94a98118e22d1fabe708bb
66b5c0e7210efbbbc918cc71a2d09e4deac9392fee8b4fe3971f1b97c67fbe9b
GET /assets/lazysizes-umd.min.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Wed, 26 Feb 2025 06:37:42 GMT
ETag: W/"67beb6b6-1ee0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 PS-HKG-046K749:1 (W), 1.1 PSrdsdgemSTO1sw92:9 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 838
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_8915-13714
otc.bjhav.cn/assets/ls.unveilhooks.min.js
200 OK 1.9 kB URL GET otc.bjhav.cn/assets/ls.unveilhooks.min.js
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
File type JavaScript source, ASCII text, with very long lines (1937), with no line terminators
Hash cbd3d0323c57fcbb35b58612af36e318
bc0099348dd9ce5c231eb1498e09af703b571a2c
a4aa6f6fd17ac4e263583794e23ec166887c40e53e9abd93711e4f916dcbabbd
GET /assets/ls.unveilhooks.min.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Wed, 26 Feb 2025 06:37:44 GMT
ETag: W/"67beb6b8-750"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 PS-HKG-04oR750:1 (W), 1.1 PSrdsdgemSTO1sw92:6 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 577
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_8258-63909
hm.baidu.com/hm.js?f0be0441577b5f9b376629e95586b1d2
200 OK 0 B URL GET hm.baidu.com/hm.js?f0be0441577b5f9b376629e95586b1d2
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?f0be0441577b5f9b376629e95586b1d2 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Fri, 14 Mar 2025 00:38:49 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
otc.bjhav.cn/sock/4.7.5/socket.io.min.js
200 OK 50 kB URL GET otc.bjhav.cn/sock/4.7.5/socket.io.min.js
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
File type JavaScript source, ASCII text, with very long lines (49854)
Hash 5f46dd97f716f56f0e649433fe456519
5096d2e8540dbe8ab29b98dda70b6c3c52f49697
d32640d8e45c0b3fd1643a47276e0b3c769432f1b7ef7178c7b47346651730e7
GET /sock/4.7.5/socket.io.min.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Sun, 23 Feb 2025 15:06:52 GMT
ETag: W/"67bb398c-c320"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 PS-HKG-046K749:13 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 88158
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_9149-4115
600tk600tk1zabcd.a18fdjf4ik.cc/niubi.png
200 OK 2.2 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/niubi.png
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type PNG image data, 73 x 28, 8-bit/color RGBA, non-interlaced
Hash 23e80e84693a7edab2201f7dab2cc6cd
75766f334da01e11ad2c84bff0066752671871ae
cd90be6c5281207943ba1ec0314a29e132669286509ea592f0ac903a7e7bd8d6
GET /niubi.png HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 2220
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:02:45 GMT
accept-ranges: bytes
date: Fri, 14 Mar 2025 00:37:54 GMT
cache-control: max-age=60
etag: "66b5bf15-8ac"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rxmoanQDyc-hHc0IRZTTOAKB5up0qgj0i2m-kM07Er8DZRjeXbbQ3w==
age: 59
X-Firefox-Spdy: h2
otc.bjhav.cn/com.js
200 OK 1.4 kB IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
File type JavaScript source, ASCII text, with very long lines (1444), with no line terminators
Hash ce4f30df8575500f34495ddf97060c5c
3c34c612d26aee6585b4d9463a85e1e7523084e8
b1f6ef4634a06dde5299a0b122167479e30f569ec2e3c490e92e2c02d1508161
GET /com.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Mon, 10 Mar 2025 03:47:01 GMT
ETag: W/"67ce60b5-573"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 dx141:14 (W), 1.1 PSrdsdgemSTO1sw92:6 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 84087
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_8258-63900
hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1368035824&si=a3694896046ebc5da7a3249fc5ce8cb6&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1368035824&si=a3694896046ebc5da7a3249fc5ce8cb6&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1368035824&si=a3694896046ebc5da7a3249fc5ce8cb6&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=B5DCC4D8AD7C0BE1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
otc.bjhav.cn/hk/tuku.js
200 OK 30 kB IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hk/tuku.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Tue, 25 Feb 2025 13:06:55 GMT
ETag: W/"67bdc06f-7346"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 dx141:14 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 84087
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_9149-4108
huimeidg.cn/favicon.ico
200 OK 574 B IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash 045f0951fb88da1b68b865782e6eaa58
97190a714ed7a69b40c418017811794a4a38e14e
4e2e2d480a9fc2ce44c806ae74025502b174f8bf9a624eee6c5daaff9e06b614
GET /favicon.ico HTTP/1.1
Host: huimeidg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Cookie: Hm_lvt_47f30c4ad8ef0c2b8d31cc9b9e634780=1741912730; Hm_lpvt_47f30c4ad8ef0c2b8d31cc9b9e634780=1741912730; HMACCOUNT=2BFFE6945E73171B; Hm_lvt_073d35101eff9270c99ddb14253ca952=1741912730; Hm_lpvt_073d35101eff9270c99ddb14253ca952=1741912730; Hm_lvt_a3694896046ebc5da7a3249fc5ce8cb6=1741912730; Hm_lpvt_a3694896046ebc5da7a3249fc5ce8cb6=1741912730; Hm_lvt_ec77608962e42837c9135c3854b61fc6=1741912730; Hm_lpvt_ec77608962e42837c9135c3854b61fc6=1741912730; Hm_lvt_040826da20b78619a0ca07116fa7f0b2=1741912731; Hm_lpvt_040826da20b78619a0ca07116fa7f0b2=1741912731; Hm_lvt_41db58cb27c42fbc783a0aec8795c2da=1741912731; Hm_lpvt_41db58cb27c42fbc783a0aec8795c2da=1741912731; Hm_lvt_24e51846dadc7d5def9c215a184e7353=1741912731; Hm_lpvt_24e51846dadc7d5def9c215a184e7353=1741912731
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: image/x-icon
Content-Length: 574
Last-Modified: Fri, 28 Feb 2025 10:17:26 GMT
Connection: keep-alive
ETag: "67c18d36-23e"
Accept-Ranges: bytes
otc.bjhav.cn/assets/AnimalsHelper.js
200 OK 11 kB URL GET otc.bjhav.cn/assets/AnimalsHelper.js
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/AnimalsHelper.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Thu, 27 Feb 2025 06:34:47 GMT
ETag: W/"67c00787-2bfc"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 PS-HKG-04oR750:1 (W), 1.1 PSrdsdgemSTO1sw92:4 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 577
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_7671-25477
cdn5.bjhav.cn/blob/2024/0930/825cd175f37ca2565a5902bb35e17f62
200 OK 234 kB URL GET cdn5.bjhav.cn/blob/2024/0930/825cd175f37ca2565a5902bb35e17f62
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Size 234 kB (233635 bytes)
Hash e0a619b7343e7722b5233a5ce8b26a54
63705d1566ae9b0e2a65b62ed4b0c8350862e098
db8a75c8bc7544de3999e5ece3282676ae0fc64e9ea4d25ccd6d3b4888bed131
GET /blob/2024/0930/825cd175f37ca2565a5902bb35e17f62 HTTP/1.1
Host: cdn5.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://600tk600tk1zabcd.a18fdjf4ik.cc
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 233635
date: Wed, 05 Mar 2025 11:56:16 GMT
last-modified: Mon, 30 Sep 2024 12:58:22 GMT
etag: "66faa06e-390a3"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
x-via: 2.0 PS-ARN-04Dih238 [HIT]
age: 736958
x-ws-request-id: 67d37a9e_PS-ARN-04Dih238_30529-33368
x-cache-status: HIT
server: nginx
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?c591f99fc3f63feb9e7ca993c790b773
200 OK 0 B URL GET hm.baidu.com/hm.js?c591f99fc3f63feb9e7ca993c790b773
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?c591f99fc3f63feb9e7ca993c790b773 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Fri, 14 Mar 2025 00:38:49 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
600tk600tk1zabcd.a18fdjf4ik.cc/public/css/nav_refresh.png.html
200 OK 1.1 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/public/css/nav_refresh.png.html
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1181), with no line terminators
Hash 1cf9fa7b934c1b9c19515931f86fa65c
689bbf2f913cae73a98f861d59783889e2ac07d7
0adee404f8206319bc81b8f7965e6d27ed33776a4f8c0aca96ac08e761137ff9
GET /public/css/nav_refresh.png.html HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/public/css/style.css?14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:03:01 GMT
content-encoding: gzip
date: Fri, 14 Mar 2025 00:37:54 GMT
cache-control: max-age=60
etag: W/"66b5bf25-46d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VIoDvZlxKIHWfHzVxJsWmwMdyq1wso4C-kd9bf0Be2Zky-pkZLTCsA==
age: 59
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?040826da20b78619a0ca07116fa7f0b2
200 OK 30 kB URL GET hm.baidu.com/hm.js?040826da20b78619a0ca07116fa7f0b2
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (615)
Hash 2d28f26bd647d1454cd5024c8a1de27b
72a33406bc4d9bbefc5fc8bcf14ab4710765ae39
47ae0ef90d18e2260a6e1e3c4fb33161beba52853a0091d15777a9a895217865
GET /hm.js?040826da20b78619a0ca07116fa7f0b2 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11285
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:50 GMT
Etag: bad824db4e7171823d18bba3171ba298
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=1920A9068C8D41A1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
otc.bjhav.cn/hk/popMore.js?_v=31412
200 OK 6.8 kB URL GET otc.bjhav.cn/hk/popMore.js?_v=31412
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6597), with no line terminators
Hash d1985828231d55d60940c31d488f534e
5c2f38d10ababee192ac0cf3080792257ac79d69
7063ed5129849fcf6d9dd8dd10a5185fd439e6050c3e7c5bb0ceca27183e9f5b
GET /hk/popMore.js?_v=31412 HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Thu, 13 Mar 2025 14:49:37 GMT
ETag: W/"67d2f081-1a61"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 PS-HKG-04oR750:8 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 4797
x-ws-request-id: 67d37a9d_PSrdsdgemSTO1sw92_9149-4152
600tk600tk1zabcd.a18fdjf4ik.cc/public/css/logodlg.jpg?1
200 OK 40 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/public/css/logodlg.jpg?1
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=60, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=240], progressive, precision 8, 240x60, components 3
Hash 02a93528cefed295d8c7f830e60f3a47
0410cec7ad60f1fe58a362a8e8e5ea781aa91ba0
68b14ba47e462d605472f64dfb54b579081c34fb77c44dafbb29c64fb3490943
GET /public/css/logodlg.jpg?1 HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/public/css/style.css?14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 39533
server: nginx/1.24.0
last-modified: Sun, 09 Mar 2025 05:53:05 GMT
accept-ranges: bytes
date: Fri, 14 Mar 2025 00:37:54 GMT
cache-control: max-age=60
etag: "67cd2cc1-9a6d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0tWlHysHcDPMOtoUG2k4Tasa4Y8SvEE-BcCSKzy4YB_H7SF1V5EL-A==
age: 59
X-Firefox-Spdy: h2
600tk600tk1zabcd.a18fdjf4ik.cc/1578374419755576.gif
200 OK 12 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/1578374419755576.gif
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type GIF image data, version 89a, 800 x 90
Hash 874ba95be529b9dc93dc3d7fab2f8b6a
4787011ed51ad9d1b59c061ca5f572cc19ad60c9
62eb82c1fb10cae4d55b046653291a997c928303b04015ab80422f9e750b1d1e
GET /1578374419755576.gif HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 11510
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:02:42 GMT
accept-ranges: bytes
date: Fri, 14 Mar 2025 00:38:48 GMT
cache-control: max-age=60
etag: "66b5bf12-2cf6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GVC4G1DrFSist6WJe5mRyw63iYaccprBHr-lnb9gORb9xByXduN6mQ==
age: 6
X-Firefox-Spdy: h2
wss://ws.edgoapp.com/socket.io/?EIO=4&transport=websocket
101 Switching Protocols 0 B URL GET wss://ws.edgoapp.com/socket.io/?EIO=4&transport=websocket
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subjectedgoapp.com
FingerprintBC:01:88:B2:F1:CA:6E:21:5E:27:00:98:50:BE:08:54:60:45:46:6D
ValiditySat, 14 Dec 2024 00:00:00 GMT - Tue, 13 Jan 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /socket.io/?EIO=4&transport=websocket HTTP/1.1
Host: ws.edgoapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://600tk600tk1zabcd.a18fdjf4ik.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5FXWXqSSL4ax88ACFpP9sg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: lKe2KOXlGuiTO6wpsBI2qxY2Zl0=
hm.baidu.com/hm.js?a3694896046ebc5da7a3249fc5ce8cb6
200 OK 30 kB URL GET hm.baidu.com/hm.js?a3694896046ebc5da7a3249fc5ce8cb6
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (622)
Hash d63e54121fd45eb1ce585fb4ce6bddce
00ad2da6765d149f9b272be7d4ca52429cf8498e
9bb80eccde750dd3e5041e07513a9886adbe5f17ba66fbd6f96c8c858acda6c1
GET /hm.js?a3694896046ebc5da7a3249fc5ce8cb6 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11292
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:49 GMT
Etag: fb0ba1cf937db61fcd30badf858dd92a
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=57354763B7C91CCC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
cdn1.bjhav.cn/blob/2024/1218/21e30e29e2641087d038075ac6def96e
200 OK 289 kB URL GET cdn1.bjhav.cn/blob/2024/1218/21e30e29e2641087d038075ac6def96e
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Size 289 kB (288719 bytes)
Hash ccca83f02e674ea660cbf97ac0a070f7
1b248f0cf3e93dd2b59c9702db9916100d96c13a
cb0a6e47cff07b65d737e80aaed9acc05b5c96bb415e2eab1f5aed8b02dd7344
GET /blob/2024/1218/21e30e29e2641087d038075ac6def96e HTTP/1.1
Host: cdn1.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://600tk600tk1zabcd.a18fdjf4ik.cc
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 288719
date: Sat, 22 Feb 2025 11:58:13 GMT
last-modified: Wed, 18 Dec 2024 05:33:22 GMT
etag: "67625ea2-467cf"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
x-via: 2.0 PS-ARN-04Dih238 [HIT]
age: 1687241
x-ws-request-id: 67d37a9e_PS-ARN-04Dih238_30529-33373
x-cache-status: HIT
server: nginx
X-Firefox-Spdy: h2
600tk600tk1zabcd.a18fdjf4ik.cc/
200 OK 63 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/
IP
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
server: nginx/1.24.0
last-modified: Thu, 13 Mar 2025 13:37:33 GMT
content-encoding: gzip
date: Fri, 14 Mar 2025 00:38:33 GMT
cache-control: max-age=60
etag: W/"67d2df9d-f6a4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -TZmlf2G8q-arTcpnarUMj-7HrZZjBYMDFQ5iXpLxM6d4w-Y4ZD5Lw==
age: 16
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=848463451&si=040826da20b78619a0ca07116fa7f0b2&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=848463451&si=040826da20b78619a0ca07116fa7f0b2&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=848463451&si=040826da20b78619a0ca07116fa7f0b2&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A691043B37F5A77B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
res.tpxiaoshimei.com/assets/kj_ws.js
200 OK 22 kB URL GET res.tpxiaoshimei.com/assets/kj_ws.js
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerGoogle Trust Services
Subjecttpxiaoshimei.com
FingerprintDB:1B:2A:8B:C0:E3:32:50:5B:0F:6C:6E:95:9A:42:A4:D8:C0:42:89
ValidityThu, 06 Mar 2025 08:28:30 GMT - Wed, 04 Jun 2025 09:26:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/kj_ws.js HTTP/1.1
Host: res.tpxiaoshimei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:38:51 GMT
content-type: application/javascript
last-modified: Thu, 13 Mar 2025 13:43:50 GMT
vary: Accept-Encoding
etag: "67d2e116-55f6"
expires: Fri, 14 Mar 2025 00:48:51 GMT
cache-control: max-age=300
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7PDQloHUzf%2Fk6A4WSRzREOh%2FHGXGp0zPNNEKGjEAZR9J%2BUGMarawBcoMzxbCwG602X5DhdLdo1nEJeekPkPJZEDhHu0whTgkTTjUJoyC7SK3Jz5l9UaToUWSX56hKfeagyQIMQe5NQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 91ffb5e7ff58569c-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=530&min_rtt=417&rtt_var=175&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3211&recv_bytes=1083&delivery_rate=7515570&cwnd=254&unsent_bytes=0&cid=504d569b39adeab0&ts=600&x=0"
X-Firefox-Spdy: h2
cdn4.bjhav.cn/blob/2024/08/21/1f4f392430003177ede9697b79265e10
200 OK 367 kB URL GET cdn4.bjhav.cn/blob/2024/08/21/1f4f392430003177ede9697b79265e10
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Size 367 kB (367369 bytes)
Hash 41e83d1aa8e614f5a8425405e0b97b20
820835c4f86356c08e2f6086221c25abffefa4e8
28b82ab71a4c267e8e10d292b8e84b0f82afd664f5b72583cd71f306a2a184a7
GET /blob/2024/08/21/1f4f392430003177ede9697b79265e10 HTTP/1.1
Host: cdn4.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://600tk600tk1zabcd.a18fdjf4ik.cc
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 367369
date: Sun, 09 Mar 2025 22:59:30 GMT
last-modified: Wed, 21 Aug 2024 12:30:49 GMT
etag: "66c5ddf9-59b09"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
x-via: 2.0 PS-ARN-04Dih238 [HIT]
age: 351564
x-ws-request-id: 67d37a9e_PS-ARN-04Dih238_30529-33367
x-cache-status: HIT
server: nginx
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?1ce4ba5ed1069777ce19a9648d7efb4d
200 OK 0 B URL GET hm.baidu.com/hm.js?1ce4ba5ed1069777ce19a9648d7efb4d
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?1ce4ba5ed1069777ce19a9648d7efb4d HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Fri, 14 Mar 2025 00:38:49 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1099482383&si=47f30c4ad8ef0c2b8d31cc9b9e634780&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1099482383&si=47f30c4ad8ef0c2b8d31cc9b9e634780&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1099482383&si=47f30c4ad8ef0c2b8d31cc9b9e634780&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=3DED7FE7C3AC7042; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
600tk600tk1zabcd.a18fdjf4ik.cc/public/css/style.css?14
200 OK 26 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/public/css/style.css?14
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type ASCII text, with very long lines (315)
Hash cc2c5c73243ca27388083b85c267da8a
46ec7465fc963cf94a98b8b91c3945cbe0feeb9e
e682def2bcff9a9de3873b927977822b57b9f6a17b2ac713b20e2175744b65c5
GET /public/css/style.css?14 HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx/1.24.0
last-modified: Sun, 09 Mar 2025 05:53:40 GMT
content-encoding: gzip
date: Fri, 14 Mar 2025 00:38:21 GMT
cache-control: max-age=60
etag: W/"67cd2ce4-6544"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L3yOc_0WqwxmK0cgrRhv3vANMD55JFmnNue7emLPHPMJlSGiUjgD5w==
age: 29
X-Firefox-Spdy: h2
600tk600tk1zabcd.a18fdjf4ik.cc/public/css/51155.css?
200 OK 3.7 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/public/css/51155.css?
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type ASCII text, with very long lines (3781), with no line terminators
Hash 718f8437dfea87ab623c85a38cd387e1
6dc04cb05a6f708186ed195dc8793b3ec7cea72b
99b00bd2acbca975406c424471dea4c2f834e6f530f089cc88f21925557b493c
GET /public/css/51155.css? HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:03:03 GMT
content-encoding: gzip
date: Fri, 14 Mar 2025 00:38:47 GMT
cache-control: max-age=60
etag: W/"66b5bf27-e69"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Vtb3hjCOyjWcuAElmV7VVhVX1YKIlg5PVTTicn0xicwSb0XxzHkg3w==
age: 3
X-Firefox-Spdy: h2
otc.bjhav.cn/assets/label-com4.js
200 OK 10 kB URL GET otc.bjhav.cn/assets/label-com4.js
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/label-com4.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Wed, 26 Feb 2025 06:37:41 GMT
ETag: W/"67beb6b5-2845"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
Via: 1.1 PS-HKG-04oR750:1 (W), 1.1 PSrdsdgemSTO1sw92:4 (W)
X-Px: ht PSrdsdgemSTO1sw92ARN
Age: 577
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_7671-25482
600tk600tk1zabcd.a18fdjf4ik.cc/dingjian.png
200 OK 22 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/dingjian.png
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type PNG image data, 73 x 28, 8-bit/color RGBA, non-interlaced
Hash 477ac5066c9fdc07cce45c73272e5fc8
3aa5d908cab3ea694bd98d19ef633d183ba9d259
5246ae380f294474e5bd69a918e244f94142204bab85ded436b100702c9028ed
GET /dingjian.png HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 21539
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:02:44 GMT
accept-ranges: bytes
date: Fri, 14 Mar 2025 00:37:54 GMT
cache-control: max-age=60
etag: "66b5bf14-5423"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 84l55Yq4_V5lCS1vyfFXaLU7AMFsWjxEwnitYA0iG1ZQvpP91Qb5Cw==
age: 59
X-Firefox-Spdy: h2
cdn4.bjhav.cn/blob/2025/0101/17f37fdaa6c4371ae4af0929c5d25431
200 OK 32 kB URL GET cdn4.bjhav.cn/blob/2025/0101/17f37fdaa6c4371ae4af0929c5d25431
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash 84f48e139ec4b3b96592269652b686af
9be75dbed679c5690ac6128971ea6749bba9a37f
371aa7e89b000aefe82def470eacd1eb56e30d944b902b93e93b10555e53c627
GET /blob/2025/0101/17f37fdaa6c4371ae4af0929c5d25431 HTTP/1.1
Host: cdn4.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://600tk600tk1zabcd.a18fdjf4ik.cc
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 32057
date: Wed, 05 Mar 2025 11:01:25 GMT
last-modified: Wed, 01 Jan 2025 08:02:48 GMT
etag: "6774f6a8-7d39"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
x-via: 2.0 PS-ARN-04Dih238 [HIT]
age: 740249
x-ws-request-id: 67d37a9e_PS-ARN-04Dih238_30529-33370
x-cache-status: HIT
server: nginx
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?47f30c4ad8ef0c2b8d31cc9b9e634780
200 OK 30 kB URL GET hm.baidu.com/hm.js?47f30c4ad8ef0c2b8d31cc9b9e634780
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (616)
Hash c0f48d352a5cb3c24eda814cd763f46d
f98d1c850ed7d9948908ef348bcfd68e83b3006e
c6f4786e0f3ff2849cb2ba2ac3355b914bac0111c137470c6a064c17514cfb34
GET /hm.js?47f30c4ad8ef0c2b8d31cc9b9e634780 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11286
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:49 GMT
Etag: 064d4bcd9e221015183bd436d33fd587
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=2BFFE6945E73171B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?ec77608962e42837c9135c3854b61fc6
200 OK 30 kB URL GET hm.baidu.com/hm.js?ec77608962e42837c9135c3854b61fc6
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (615)
Hash ddf75e1ec7d90a08fb348f3d155bd5e4
f5350a39e0da0f2b36f43f331e6b93c0a2604608
ce1eaa44aa34dcc3cb109d6c1e62d71eba5be896367b7a437861e5eacc997531
GET /hm.js?ec77608962e42837c9135c3854b61fc6 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11285
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:50 GMT
Etag: cbb12d775662bc6c90db29021c8b7598
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=9ECC2C03287C791B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?24e51846dadc7d5def9c215a184e7353
200 OK 30 kB URL GET hm.baidu.com/hm.js?24e51846dadc7d5def9c215a184e7353
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (616)
Hash f36796e95ddcf8f41db1bf23b033830c
71f6b1454447af62d639b1dfdb72867de0a559dc
1d28b498d101362cc2769fac28f063a06550a830adf9dd230650a9d324f63b73
GET /hm.js?24e51846dadc7d5def9c215a184e7353 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11286
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:50 GMT
Etag: ecbd1b1c976be38286f7ac78e71365ec
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=3E7B72D33DD91C03; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
res.bjhav.cn/assets/no.js?2
200 OK 82 B URL GET res.bjhav.cn/assets/no.js?2
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerGoogle Trust Services
Subjectbjhav.cn
Fingerprint1F:85:93:B3:CE:77:FC:D4:C8:5A:CA:88:F5:13:73:EF:FD:EC:26:F1
ValiditySat, 15 Feb 2025 02:08:16 GMT - Fri, 16 May 2025 03:05:51 GMT
File type ASCII text, with no line terminators
Hash b5742d5daa8a36a269960eb46dce9349
227a85cc96fc88cfc03d2d16613d8ef941b239b2
71b0dba0b14d1ed2aa4d79b612f2f27a65fbb41c7c5e30f485610fce06738711
GET /assets/no.js?2 HTTP/1.1
Host: res.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:38:51 GMT
content-type: application/javascript
last-modified: Thu, 13 Mar 2025 13:41:02 GMT
etag: W/"67d2e06e-52"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gUo6N4cJlz18eZgc8wJVI7tWU5uBlQIqkhdzgePgLjAERiVkwPECanGMuM101guGScZ9oCJc%2BoNvPS0hsSTnaKyEEGQELVncJyTXk%2Fq%2BGemaFHYcylCGIZ1FO6xjtKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91ffb5e7caa35688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1605&min_rtt=443&rtt_var=2068&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3263&recv_bytes=1202&delivery_rate=7006451&cwnd=254&unsent_bytes=0&cid=490d77f428873c41&ts=598&x=0"
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?hca=6A276FC8ADE9ECD2&cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=694851186&si=8c4f429069d3220603a03af76e7008f5&su=http%3A%2F%2Fhuimeidg.cn%2F&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=https%3A%2F%2F600tk600tk1zabcd.a18fdjf4ik.cc%2F&tt=%E6%BE%B3%E9%97%A8%E5%85%AD%E5%90%88%E5%BD%A9%7C600%E5%9B%BE%E5%BA%93%7C%E5%85%AB%E7%99%BE%E5%9B%BE%E5%BA%93%7C%E5%BC%80%E5%A5%96%E6%9C%80%E5%BF%AB%7C%E6%BE%B3%E9%97%A8%E4%BB%8A%E6%99%9A%E5%BF%85%E4%B8%AD%E4%B8%80%E8%82%96%E4%B8%80%E7%A0%81%7C%E6%B0%B8%E4%B9%85%E5%85%8D%E8%B4%B9%E8%B5%84%E6%96%99%7C%E4%B8%8B%E8%BD%BD%E6%BE%B3%E9%97%A8%E5%85%AD%E4%B8%8B%E5%BD%A9%E8%B5%84%E6%96%99%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%992025%7C%E7%AE%A1%E5%AE%B6%E5%A9%86%E4%B8%89%E8%82%96%E4%B8%89%E6%9C%9F%E5%BF%85%E5%87%BA%E4%B8%80%E6%9C%9F%E5%BF%AB%E5%BC%80%E5%A5%96%E7%9B%B4%E6%92%AD
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=6A276FC8ADE9ECD2&cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=694851186&si=8c4f429069d3220603a03af76e7008f5&su=http%3A%2F%2Fhuimeidg.cn%2F&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=https%3A%2F%2F600tk600tk1zabcd.a18fdjf4ik.cc%2F&tt=%E6%BE%B3%E9%97%A8%E5%85%AD%E5%90%88%E5%BD%A9%7C600%E5%9B%BE%E5%BA%93%7C%E5%85%AB%E7%99%BE%E5%9B%BE%E5%BA%93%7C%E5%BC%80%E5%A5%96%E6%9C%80%E5%BF%AB%7C%E6%BE%B3%E9%97%A8%E4%BB%8A%E6%99%9A%E5%BF%85%E4%B8%AD%E4%B8%80%E8%82%96%E4%B8%80%E7%A0%81%7C%E6%B0%B8%E4%B9%85%E5%85%8D%E8%B4%B9%E8%B5%84%E6%96%99%7C%E4%B8%8B%E8%BD%BD%E6%BE%B3%E9%97%A8%E5%85%AD%E4%B8%8B%E5%BD%A9%E8%B5%84%E6%96%99%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%992025%7C%E7%AE%A1%E5%AE%B6%E5%A9%86%E4%B8%89%E8%82%96%E4%B8%89%E6%9C%9F%E5%BF%85%E5%87%BA%E4%B8%80%E6%9C%9F%E5%BF%AB%E5%BC%80%E5%A5%96%E7%9B%B4%E6%92%AD
IP
ASN #56040 China Mobile communications corporation
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=6A276FC8ADE9ECD2&cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=694851186&si=8c4f429069d3220603a03af76e7008f5&su=http%3A%2F%2Fhuimeidg.cn%2F&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=https%3A%2F%2F600tk600tk1zabcd.a18fdjf4ik.cc%2F&tt=%E6%BE%B3%E9%97%A8%E5%85%AD%E5%90%88%E5%BD%A9%7C600%E5%9B%BE%E5%BA%93%7C%E5%85%AB%E7%99%BE%E5%9B%BE%E5%BA%93%7C%E5%BC%80%E5%A5%96%E6%9C%80%E5%BF%AB%7C%E6%BE%B3%E9%97%A8%E4%BB%8A%E6%99%9A%E5%BF%85%E4%B8%AD%E4%B8%80%E8%82%96%E4%B8%80%E7%A0%81%7C%E6%B0%B8%E4%B9%85%E5%85%8D%E8%B4%B9%E8%B5%84%E6%96%99%7C%E4%B8%8B%E8%BD%BD%E6%BE%B3%E9%97%A8%E5%85%AD%E4%B8%8B%E5%BD%A9%E8%B5%84%E6%96%99%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%992025%7C%E7%AE%A1%E5%AE%B6%E5%A9%86%E4%B8%89%E8%82%96%E4%B8%89%E6%9C%9F%E5%BF%85%E5%87%BA%E4%B8%80%E6%9C%9F%E5%BF%AB%E5%BC%80%E5%A5%96%E7%9B%B4%E6%92%AD HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:51 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=89BAC6CF153C3310; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
cdn9.bjhav.cn/blob/2025/0228/9226b8a62b44d86f04206a0d5df03a1b
200 OK 76 kB URL GET cdn9.bjhav.cn/blob/2025/0228/9226b8a62b44d86f04206a0d5df03a1b
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash 22c49d38548991338088188fe2bdb72e
c52648407aa74196d2cc7a34c2a53bc188634445
8f62c8e4f60fe47360a6bb719918f4c3e9034c3d0f4188fd6fe311eb3d8bee16
GET /blob/2025/0228/9226b8a62b44d86f04206a0d5df03a1b HTTP/1.1
Host: cdn9.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://600tk600tk1zabcd.a18fdjf4ik.cc
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 76348
date: Mon, 10 Mar 2025 12:17:19 GMT
last-modified: Fri, 28 Feb 2025 04:28:10 GMT
etag: "67c13b5a-12a3c"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
x-via: 2.0 PS-ARN-04Dih238 [HIT]
age: 303695
x-ws-request-id: 67d37a9e_PS-ARN-04Dih238_30529-33371
x-cache-status: HIT
server: nginx
X-Firefox-Spdy: h2
ok1rr.top/ccc31.js
200 OK 789 B IP
Certificate IssuerGoogle Trust Services
Subjectok1rr.top
FingerprintCD:1D:15:E6:43:B9:57:74:23:B9:4F:F8:2D:9B:65:FE:07:58:EA:6D
ValidityThu, 20 Feb 2025 10:45:38 GMT - Wed, 21 May 2025 11:44:21 GMT
File type Unicode text, UTF-8 text, with very long lines (736), with no line terminators
Hash 7d4aeb7dc8acfc932d0cde6e2ca31300
1ff447992843c31dcc69d3c4ba064296cb9b6e74
c70e50d0ccdef1b213dbf34ca3b0502f35a8bf5b16706d1c45f41ed21ba234c7
GET /ccc31.js HTTP/1.1
Host: ok1rr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:38:49 GMT
content-type: application/javascript
last-modified: Thu, 13 Mar 2025 14:11:29 GMT
etag: W/"67d2e791-315"
expires: Fri, 14 Mar 2025 12:38:48 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mCffowC0ESwDvcmpcSk%2BWBMbtYBcPX%2FBDWDav2mOTLAjytVFHpZSkiW9krp1hewemmo3p%2FX4FRS7bim9EB%2BqKMYd3jBSeKie3Dp1FPx0naI8jruC06vsUvBRTMc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91ffb5d8ec5d56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5566&min_rtt=443&rtt_var=10219&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3193&recv_bytes=1057&delivery_rate=6906200&cwnd=254&unsent_bytes=0&cid=ca2e7c6ab9bacd8f&ts=689&x=0"
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?41db58cb27c42fbc783a0aec8795c2da
200 OK 30 kB URL GET hm.baidu.com/hm.js?41db58cb27c42fbc783a0aec8795c2da
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (623)
Hash 9abf6e4c0b5b60083addf3071f921a99
583a62a0d2e0b1f5694d445c70132f34e553a510
6d177c4e974ee2b936e84e1e80eafd39ff08b8fa28497be2fdb942facaaf1712
GET /hm.js?41db58cb27c42fbc783a0aec8795c2da HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11293
Content-Type: application/javascript
Date: Fri, 14 Mar 2025 00:38:50 GMT
Etag: ff5a943efa654c71c036ceeee27652ab
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=D0C4FB7462A6120F; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=63200376&si=ec77608962e42837c9135c3854b61fc6&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=63200376&si=ec77608962e42837c9135c3854b61fc6&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=63200376&si=ec77608962e42837c9135c3854b61fc6&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=D769A22D781994CF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=577866303&si=41db58cb27c42fbc783a0aec8795c2da&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=577866303&si=41db58cb27c42fbc783a0aec8795c2da&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=577866303&si=41db58cb27c42fbc783a0aec8795c2da&v=1.3.2&lv=1&sn=57966&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=1B185EFB88C4B5B1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
600tk600tk1zabcd.a18fdjf4ik.cc/public/css/style-1.css?3
200 OK 9.5 kB URL GET 600tk600tk1zabcd.a18fdjf4ik.cc/public/css/style-1.css?3
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerAmazon
Subject*.lph7vmfkqh.cc
FingerprintFA:98:B6:B2:68:9B:D6:C9:34:DA:0B:48:F9:41:0E:AE:BE:7A:62:E7
ValidityFri, 14 Feb 2025 00:00:00 GMT - Sun, 15 Mar 2026 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (10136), with no line terminators
Hash b7b5d288aec9598adf7e7ed40d03c3f5
bae47dda63cbef5d6e505fdd83aa1377a3ee4bda
0ece8fca5c3b77095ccfe4247f48cdedcb51e06344cd695afdeae8f3789c47ab
GET /public/css/style-1.css?3 HTTP/1.1
Host: 600tk600tk1zabcd.a18fdjf4ik.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx/1.24.0
last-modified: Fri, 09 Aug 2024 07:03:02 GMT
content-encoding: gzip
date: Fri, 14 Mar 2025 00:38:47 GMT
cache-control: max-age=60
etag: W/"66b5bf26-24f9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fmPQ4EqokGxqOu5m9qjoJ5Lt6JqNUN0ducRhZ_yiCdzm71yOWm9HnA==
age: 3
X-Firefox-Spdy: h2
otc.bjhav.cn/assets/amgg.js
200 OK 39 kB URL GET otc.bjhav.cn/assets/amgg.js
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/amgg.js HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Wed, 26 Feb 2025 08:02:57 GMT
ETag: W/"67becab1-9877"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
via: 1.1 PS-HKG-04JlJ51:2 (W), 1.1 PSrdsdgemSTO1sw92:9 (W)
X-Px: ms PSrdsdgemSTO1sw92ARN, ms PS-HKG-04JlJ51HKG(origin)
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_8915-13707
libs.baidu.com/jquery/1.11.1/jquery.min.js
200 OK 96 kB URL GET libs.baidu.com/jquery/1.11.1/jquery.min.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (32086), with CRLF line terminators
Hash 4dc834d16a0d219d5c2b8a5b814569e4
4fbe0563917d6f6289e4e1b4a0a8758e4e43bda9
91222f96f34735ebc88df208017e54d4329b9202e3e52367fb8b149698a1a5ef
GET /jquery/1.11.1/jquery.min.js HTTP/1.1
Host: libs.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Fri, 14 Mar 2025 00:38:53 GMT
Expires: Sun, 13 Apr 2025 00:38:53 GMT
Last-Modified: Tue, 08 Jul 2014 03:05:51 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: Apache
Set-Cookie: BAIDUID=9BDFDDE48C09D0164ED590DA82AF9095:FG=1; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2145916555; path=/; domain=.baidu.com; version=1
Strict-Transport-Security: max-age=87600
Vary: Accept-Encoding
Transfer-Encoding: chunked
otc.bjhav.cn/assets/kj-style.css?v=314122
200 OK 5.0 kB URL GET otc.bjhav.cn/assets/kj-style.css?v=314122
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
File type ASCII text, with very long lines (5334), with no line terminators
Hash 1f2d63ae36e36f30dbd033443035bfa3
bd732f815cbbe6e905ab76e063e291e744e42bb4
9ad45a165ee6ffa460ff55e2bc0067df1e19545f5b5e9455a80e81819692b390
GET /assets/kj-style.css?v=314122 HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Fri, 28 Feb 2025 05:42:32 GMT
ETag: W/"67c14cc8-13ad"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
via: 1.1 PS-HKG-04oR750:5 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)
X-Px: ms PSrdsdgemSTO1sw92ARN, ms PS-HKG-04oR750HKG(origin)
x-ws-request-id: 67d37a9d_PSrdsdgemSTO1sw92_9149-4153
hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1529455088&si=073d35101eff9270c99ddb14253ca952&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1529455088&si=073d35101eff9270c99ddb14253ca952&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=2BFFE6945E73171B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1529455088&si=073d35101eff9270c99ddb14253ca952&v=1.3.2&lv=1&sn=57965&r=0&ww=1280&u=http%3A%2F%2Fhuimeidg.cn%2F&tt=%E6%81%AD%E5%96%9C%EF%BC%8C%E7%AB%99%E7%82%B9%E5%88%9B%E5%BB%BA%E6%88%90%E5%8A%9F%EF%BC%81%E5%87%BA%E9%87%8F%E8%81%94%E7%B3%BBTG%3A%40daliang6868 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://huimeidg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 14 Mar 2025 00:38:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=4D00F73328FFF6CB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: huimeidg.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
otc.bjhav.cn/assets/base_code.js?v=3141238
200 OK 13 kB URL GET otc.bjhav.cn/assets/base_code.js?v=3141238
IP
Requested by https://600tk600tk1zabcd.a18fdjf4ik.cc/
Certificate IssuerLet's Encrypt
Subjectbjhav.cn
FingerprintF0:A8:9B:4A:60:C5:99:C2:2D:AF:CD:C8:0B:23:AA:82:95:E2:71:B8
ValiditySun, 19 Jan 2025 10:38:44 GMT - Sat, 19 Apr 2025 10:38:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/base_code.js?v=3141238 HTTP/1.1
Host: otc.bjhav.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://600tk600tk1zabcd.a18fdjf4ik.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 14 Mar 2025 00:38:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: PWS/8.3.1.0.8
Last-Modified: Thu, 13 Mar 2025 05:28:44 GMT
ETag: W/"67d26d0c-3465"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Content-Encoding: gzip
via: 1.1 PS-HKG-04JlJ51:6 (W), 1.1 PSrdsdgemSTO1sw92:6 (W)
X-Px: ms PSrdsdgemSTO1sw92ARN, ms PS-HKG-04JlJ51HKG(origin)
x-ws-request-id: 67d37a9b_PSrdsdgemSTO1sw92_8258-63910
156.234.32.13
104.21.87.194
138.113.181.177
183.240.98.228
143.204.55.72