r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e1e94f036b0e677a492e4238b9443034
862ebeb19164d77b65229976b12338c399ce0bd9
1875033f6e187cdb371b497b6640a3c9625283b6a4b12de5bbc5be326365b6a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1875033F6E187CDB371B497B6640A3C9625283B6A4B12DE5BBC5BE326365B6A9"
Last-Modified: Mon, 13 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13995
Expires: Tue, 14 Feb 2023 12:45:27 GMT
Date: Tue, 14 Feb 2023 08:52:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 254178cc40b1a92de9d879bd731aeb9a
bfab58d211f1f823deed8f91de96ddf778b393a3
469d18130ca960ff8efb710d09f4498bfc21df7339a2e7b79ad1f73a8ce3299a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469D18130CA960FF8EFB710D09F4498BFC21DF7339A2E7B79AD1F73A8CE3299A"
Last-Modified: Sat, 11 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8927
Expires: Tue, 14 Feb 2023 11:20:59 GMT
Date: Tue, 14 Feb 2023 08:52:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 14 Feb 2023 08:49:03 GMT
content-type: application/json
age: 189
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3534c46dafa4e959cb5f4aba0b1d8cd7
f4aa8774355b04bf1f074aeb73c56c52b32568ab
68b7b6679046611b607c073416e818c6d0391e2953ecc8781b02e57a9b5af306
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "68B7B6679046611B607C073416E818C6D0391E2953ECC8781B02E57A9B5AF306"
Last-Modified: Mon, 13 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10583
Expires: Tue, 14 Feb 2023 11:48:35 GMT
Date: Tue, 14 Feb 2023 08:52:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QT6QhpQyN2WwatV5yBBs5eaE+VnLE1dohQugB5V13l3I1sZD87lub1DoDYdYco8B8SjrF+cBPXA=
x-amz-request-id: A5QNK25H74CT49JB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 14 Feb 2023 08:48:27 GMT
age: 225
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 14 Feb 2023 08:52:12 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 188e06be43a4f1b02aa98f1762147970
5e6b7e3a172fb7327331fd8c7f74559d079bd4fb
89bd97cff26b8d656f26db21b59b02fbc3f671ac903e1e44735c7472ebd05090
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89BD97CFF26B8D656F26DB21B59B02FBC3F671AC903E1E44735C7472EBD05090"
Last-Modified: Mon, 13 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14592
Expires: Tue, 14 Feb 2023 12:55:25 GMT
Date: Tue, 14 Feb 2023 08:52:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Last-Modified, Alert, Backoff, Content-Type, Pragma, Expires, Cache-Control, Retry-After, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 14 Feb 2023 08:14:53 GMT
age: 2240
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oELRQjJaRSuxN9IZ/3o/rw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: be77B4Qy06V/3jLDYqldI+eUWtE=
beihaicq.com/
301 Moved Permanently 162 B IP
ASN #26658 HENGTONG-IDC-LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 14 Feb 2023 08:52:13 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://www.beihaicq.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d42a01fdf9af7a50d630c42fde100d30
a7568d35657f934220298ca4c2fb102398554196
f215d87cad50e9310bf2a4df263b24e1c87e7cda29e48f93f6b0d76eb218ab1d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F215D87CAD50E9310BF2A4DF263B24E1C87E7CDA29E48F93F6B0D76EB218AB1D"
Last-Modified: Mon, 13 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19171
Expires: Tue, 14 Feb 2023 14:11:45 GMT
Date: Tue, 14 Feb 2023 08:52:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ba070e2-295e-485b-8bb9-cf35a649e9d1.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ba070e2-295e-485b-8bb9-cf35a649e9d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8526505043a5b3a1a8a3e86f80dd796
121031f827508bc441ab34387ffdf9bf878c43a9
70e9f640c8339aea888ceea9fd2ef74fa2c3ea210f69fa22442155dca61a799e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ba070e2-295e-485b-8bb9-cf35a649e9d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10635
x-amzn-requestid: 98a6b744-d08f-4e53-a0b0-735b336c8513
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AS_zjG9boAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eaace3-5d86345a4ee7009e61291369;Sampled=0
x-amzn-remapped-date: Mon, 13 Feb 2023 21:34:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KJ56reDkEbXg0bE7sE4pB1n7Lkn1nLiKblbKM9aFYCow4tpHrIqGnw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Feb 2023 22:31:33 GMT
etag: "121031f827508bc441ab34387ffdf9bf878c43a9"
content-type: image/jpeg
age: 37241
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02747389-fc16-42b4-9ec9-cf0c387a8d9c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02747389-fc16-42b4-9ec9-cf0c387a8d9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a368a0f4d91a04ece485fa6939b93ed0
34edb57e9f33babf053565c546089c2ffb80974a
35c141b46fad3913dfae10e1f6406a849bddcd0fb2c86d35561243aefe3bc54b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02747389-fc16-42b4-9ec9-cf0c387a8d9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8676
x-amzn-requestid: 1a72201f-c7b0-4215-81a6-e89ad432444d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AS_6WEqgIAMFRMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eaad0e-322b9c2c03c0f7662edaf161;Sampled=0
x-amzn-remapped-date: Mon, 13 Feb 2023 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: m9X0NdaBnd176DYQfgYBih2t66lv75jyu1j3nhomSTN1NKD-Ybuh_A==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Feb 2023 22:18:05 GMT
age: 38049
etag: "34edb57e9f33babf053565c546089c2ffb80974a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3b95fd0-70b7-4757-9068-83472c90622c.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3b95fd0-70b7-4757-9068-83472c90622c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd9dfc91c131903f04b22bca2ea07569
8fac706269ae3ec4a9f60a64f6b08066e9eeb22a
d72e6a45a42dd6f6d39bdf2a68837a2fdd73b9df6e01a29dd173725b3d88e97e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3b95fd0-70b7-4757-9068-83472c90622c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12032
x-amzn-requestid: 1be7b95f-1088-4e2a-ba74-bba8a5c3b615
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AMZ_gHE7oAMFfkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e809fc-65057649605a732b64098657;Sampled=0
x-amzn-remapped-date: Sat, 11 Feb 2023 21:34:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3wc9cOb6EBcYrHuQPvVx1h8f0xSef25washUegMtRo7oeLosn4RlYg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 14 Feb 2023 00:41:17 GMT
age: 29457
etag: "8fac706269ae3ec4a9f60a64f6b08066e9eeb22a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F318ff2b9-f4f9-4c7a-81df-9e4b1f2674dd.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F318ff2b9-f4f9-4c7a-81df-9e4b1f2674dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f36dc9974ff642bd2d59215b566e9b48
3a8baa33c526c25a0eb42a3a777cf38eeb01b25c
90868802014325116787331c121e74d0a9550d0f2b309801ffa66160fa810cde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F318ff2b9-f4f9-4c7a-81df-9e4b1f2674dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11402
x-amzn-requestid: 17e77e17-627f-4070-848a-e2fba60ca596
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ATAtHGmBIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eaae53-6958c09576c288a3308a3aab;Sampled=0
x-amzn-remapped-date: Mon, 13 Feb 2023 21:40:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSsnNIzDqHxB_RtWCxFsNxJHHcS5jAJsGA_SoSdFGCv183aBgKSSEg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Feb 2023 22:17:30 GMT
age: 38084
etag: "3a8baa33c526c25a0eb42a3a777cf38eeb01b25c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b064cd-e914-46c4-9261-f5cf1e300786.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b064cd-e914-46c4-9261-f5cf1e300786.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e24473b3e335f2046f72ea198a1a9ac8
346f3744c1fd32467ac8c1783f7c28c0ffd3cc4b
87fb8a02fb286ccd1d04abe4052fb08617fc68692515aa6daed2895e83827ccd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b064cd-e914-46c4-9261-f5cf1e300786.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10677
x-amzn-requestid: 7fbf05af-939a-443c-9add-f856b5ab4b1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AS_zFH3hoAMFUkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eaace0-0676c24e496661ff545249f0;Sampled=0
x-amzn-remapped-date: Mon, 13 Feb 2023 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ASk3lL6xNgUz-lLwE7lpLLh_PK_Iq-PSAz3VSOZrEweutYlfUggXTg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Feb 2023 22:28:32 GMT
age: 37422
etag: "346f3744c1fd32467ac8c1783f7c28c0ffd3cc4b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee02a15-8482-4f95-a7be-3d184d8c9d77.jpeg
200 OK 2.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee02a15-8482-4f95-a7be-3d184d8c9d77.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4976933e30a4a44e68d08c00ffae17d1
70a5fda7f3515776a08d7063619eb4a8a61efba0
4adeae7a16af1167e6ffab1beab81feaec2dbdc0c90e5beb081c7bfcea0e5443
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee02a15-8482-4f95-a7be-3d184d8c9d77.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2360
x-amzn-requestid: f2e6dc22-444c-42af-947c-6d9d6f0253de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AS_0iFhHIAMFjXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eaace9-18f8bade4f2ddbd0018c2117;Sampled=0
x-amzn-remapped-date: Mon, 13 Feb 2023 21:34:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ESGbRefQzfK2WINhWLISRdtGqaO2W4Cn0-Aj1oNLfPC0tnYaPDubYg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Feb 2023 22:31:43 GMT
age: 37231
etag: "70a5fda7f3515776a08d7063619eb4a8a61efba0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.beihaicq.com/
200 OK 16 kB IP
ASN #26658 HENGTONG-IDC-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (4742), with LF, NEL line terminators
Hash d56f0d38d47bcca40d4b528e34dc37bd
219847a7912c3b8b08a8ecc9e7cb95314d3afb4a
e0d08af700ebae5ca5d5bc858e3261201b3c1e4ded34ed51be9100e0b98b385f
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/8.0.8
Content-Encoding: gzip
www.beihaicq.com/static/e830e1224038416e719ff5b62244619e.css
200 OK 8.0 kB URL HTTP/1.1 www.beihaicq.com/static/e830e1224038416e719ff5b62244619e.css
IP
ASN #26658 HENGTONG-IDC-LLC
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 63d9606fc27121e7573991a385dd1dc1
dc8753706d0f4682c9fd8d093c8fe1e2d7b9411f
066190f2d40bad6dd61404eb89c1a98bcb6d116c8aba5ee363f8f4f21937a4e0
GET /static/e830e1224038416e719ff5b62244619e.css HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:16 GMT
Content-Type: text/css
Last-Modified: Thu, 11 Aug 2022 14:57:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f518cd-72e5"
Content-Encoding: gzip
www.beihaicq.com/static/8e9c3ebf0c375d0bfdd0e29dee394f1f.js
200 OK 2.4 kB URL HTTP/1.1 www.beihaicq.com/static/8e9c3ebf0c375d0bfdd0e29dee394f1f.js
IP
ASN #26658 HENGTONG-IDC-LLC
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash c0633d13193972227cb6709a4a206426
8948039b07652f6e1a7bf5fd0b3d202bbfa708e8
455da1675c9d33b26d3d963b7ff1821dd7bc26f4bf445434168a0b0cf02dc7cd
Analyzer Verdict Alert fortinet Phishing
GET /static/8e9c3ebf0c375d0bfdd0e29dee394f1f.js HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:16 GMT
Content-Type: application/javascript
Last-Modified: Fri, 12 Aug 2022 00:06:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f5999d-15e0"
Content-Encoding: gzip
www.beihaicq.com/static/71cad08216c7fabefe3583164a922a92.js
200 OK 3.9 kB URL HTTP/1.1 www.beihaicq.com/static/71cad08216c7fabefe3583164a922a92.js
IP
ASN #26658 HENGTONG-IDC-LLC
File type Unicode text, UTF-8 text, with very long lines (11013), with CRLF, CR line terminators
Hash a67f85ed05bfc9d287c1d37e81ef0461
5d880415cc010c65ec35c73702a6da77e6381088
a3ec6e351ca536f5e11663eca2f9d5d72f74fed9eaa3794ce4879e53bbff685a
Analyzer Verdict Alert fortinet Phishing
GET /static/71cad08216c7fabefe3583164a922a92.js HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:16 GMT
Content-Type: application/javascript
Last-Modified: Fri, 12 Aug 2022 00:21:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f59cee-2cba"
Content-Encoding: gzip
www.beihaicq.com/static/1c146d55ba80e0f50604fa01928825b3.css
200 OK 25 kB URL HTTP/1.1 www.beihaicq.com/static/1c146d55ba80e0f50604fa01928825b3.css
IP
ASN #26658 HENGTONG-IDC-LLC
File type ASCII text, with very long lines (593)
Hash fb37189ec170dd7b6771f756e23be3b0
a56f502a5b48de6307022a4d65928460cb3a76a3
102c097f860e64f75ea4fd6ae1842fa3225a272331720fc115078e0b8e7ba3ce
GET /static/1c146d55ba80e0f50604fa01928825b3.css HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:16 GMT
Content-Type: text/css
Last-Modified: Thu, 11 Aug 2022 20:39:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f568e6-20a48"
Content-Encoding: gzip
www.beihaicq.com/static/1157f804402f36000c79aa99fbd51abb.js
200 OK 2.6 kB URL HTTP/1.1 www.beihaicq.com/static/1157f804402f36000c79aa99fbd51abb.js
IP
ASN #26658 HENGTONG-IDC-LLC
File type Unicode text, UTF-8 text, with CRLF, CR line terminators
Hash 1f1a74429bc2205c5972fe443b1249f1
b4cbd9da4d8c35cc9a14b1b3642538de11c9a57f
3989bc8d4e20a522b5b2753f9632e0e34a588422ed9d9e8b21c5ad76e5fcb499
Analyzer Verdict Alert fortinet Phishing
GET /static/1157f804402f36000c79aa99fbd51abb.js HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:16 GMT
Content-Type: application/javascript
Last-Modified: Fri, 12 Aug 2022 00:35:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f5a04c-261a"
Content-Encoding: gzip
www.beihaicq.com/static/5ed8dfa705c8192052ba287a1cc298b4.js
200 OK 248 B URL HTTP/1.1 www.beihaicq.com/static/5ed8dfa705c8192052ba287a1cc298b4.js
IP
ASN #26658 HENGTONG-IDC-LLC
File type ASCII text, with CRLF line terminators
Hash d1a63cb7b1bafe8f5a92f8ed2687bea3
0612ca76c34a05268c3eccbf7fbaf02bcdb5cbda
c435a295b5cb199d7da580e4c004f03680682e060b797770fb364bfe17b7a72b
Analyzer Verdict Alert fortinet Phishing
GET /static/5ed8dfa705c8192052ba287a1cc298b4.js HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:16 GMT
Content-Type: application/javascript
Content-Length: 248
Last-Modified: Fri, 12 Aug 2022 00:21:01 GMT
Connection: keep-alive
ETag: "62f59ced-f8"
Accept-Ranges: bytes
www.beihaicq.com/static/0c911d5cf8252dcfb0d056c4536e2269.js
200 OK 37 kB URL HTTP/1.1 www.beihaicq.com/static/0c911d5cf8252dcfb0d056c4536e2269.js
IP
ASN #26658 HENGTONG-IDC-LLC
File type Unicode text, UTF-8 text, with very long lines (65480)
Hash de3968a3e85f14d383808f72fc786da8
ea3375191afaf4e476e432c98482f0fac7acb4cf
6e30acf3f7cd4a2458b14f4ee7f6953be14c6464c5cb7aa4b68524d5b9658603
Analyzer Verdict Alert fortinet Phishing
GET /static/0c911d5cf8252dcfb0d056c4536e2269.js HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:16 GMT
Content-Type: application/javascript
Last-Modified: Thu, 11 Aug 2022 20:39:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f568eb-1698c"
Content-Encoding: gzip
www.beihaicq.com/static/109003cfa1b370e8a44aba0940ec2df6.js
200 OK 3.5 kB URL HTTP/1.1 www.beihaicq.com/static/109003cfa1b370e8a44aba0940ec2df6.js
IP
ASN #26658 HENGTONG-IDC-LLC
File type ASCII text, with very long lines (11013), with CRLF line terminators
Hash a7613c68dd5e114bcb0a47dc0e5f0b2a
28dd24cb4ab0878992b5ce3f057c0694b7d08119
981f8c843e0036f1fab4844bd6a22bfcce3ec9c44502a2e779adc370ba6d0254
Analyzer Verdict Alert fortinet Phishing
GET /static/109003cfa1b370e8a44aba0940ec2df6.js HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:17 GMT
Content-Type: application/javascript
Last-Modified: Fri, 12 Aug 2022 00:35:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f5a04d-2b07"
Content-Encoding: gzip
www.beihaicq.com/static/b28f6fb65fceea6d193fe8d3e0b2f59a.css
200 OK 1.3 kB URL HTTP/1.1 www.beihaicq.com/static/b28f6fb65fceea6d193fe8d3e0b2f59a.css
IP
ASN #26658 HENGTONG-IDC-LLC
File type assembler source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash da88816604ebce61d99de317167d5f15
ff43947d659c443a033de6b5c7fc4c4ac2d6c835
8d6901b284ba68e6cd51c91c808833d4f64ff3f2336d52cc7d62c7bd9865c038
GET /static/b28f6fb65fceea6d193fe8d3e0b2f59a.css HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:17 GMT
Content-Type: text/css
Last-Modified: Thu, 11 Aug 2022 14:45:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f51622-b46"
Content-Encoding: gzip
www.beihaicq.com/static/dcb325cfe7ebd7e99957e0861cdae19b.css
200 OK 8.5 kB URL HTTP/1.1 www.beihaicq.com/static/dcb325cfe7ebd7e99957e0861cdae19b.css
IP
ASN #26658 HENGTONG-IDC-LLC
File type troff or preprocessor input, Unicode text, UTF-8 (with BOM) text, with very long lines (306), with CRLF line terminators
Hash 52226f84bd8a87de94b8af137f8e9797
5e0f54ebdf3bedf38daec329f3b036936c85936b
d8d2c8e91330204cf87425afb46ce3d4a66e697cedc07b8d153cfa09f6f92f79
GET /static/dcb325cfe7ebd7e99957e0861cdae19b.css HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:17 GMT
Content-Type: text/css
Last-Modified: Thu, 11 Aug 2022 14:52:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f517aa-765b"
Content-Encoding: gzip
www.beihaicq.com/static/c995b91614c2585a60b10109b942eefe.css
200 OK 8.2 kB URL HTTP/1.1 www.beihaicq.com/static/c995b91614c2585a60b10109b942eefe.css
IP
ASN #26658 HENGTONG-IDC-LLC
File type troff or preprocessor input, Unicode text, UTF-8 (with BOM) text, with very long lines (306)
Hash e34b255437e8f8a637908760100d750f
6382793823d90928cc90aac0867b3ac5ba542836
9a1e48c81ce821ebd084ac3a2c05a443bff9c33fb3b0b642b2c3b7f80e77205c
GET /static/c995b91614c2585a60b10109b942eefe.css HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:17 GMT
Content-Type: text/css
Last-Modified: Thu, 11 Aug 2022 14:52:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f517b8-91d3"
Content-Encoding: gzip
www.beihaicq.com/static/46f8455b0c91bf8113bd3a1543b78aa6.gif
200 OK 1.5 kB URL HTTP/1.1 www.beihaicq.com/static/46f8455b0c91bf8113bd3a1543b78aa6.gif
IP
ASN #26658 HENGTONG-IDC-LLC
File type GIF image data, version 89a, 16 x 41\012- data
Hash 342eadb816ec40c7c4bdae43a8bc1d09
6817eb480c63cb49845151bcc4dc17ef7fa1f30c
89f7f6a99dd1df0bb59ab8f076333ef4f911e50734010afba6da227d6c6b8e40
GET /static/46f8455b0c91bf8113bd3a1543b78aa6.gif HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:17 GMT
Content-Type: image/gif
Content-Length: 1532
Last-Modified: Fri, 12 Aug 2022 08:57:12 GMT
Connection: keep-alive
ETag: "62f615e8-5fc"
Accept-Ranges: bytes
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:18 GMT
Etag: "4078521116"
Expires: Wed, 14 Feb 2024 08:52:18 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=B5E6ED464B54F4C3B23AF37D55452B09:FG=1; max-age=31536000; expires=Wed, 14-Feb-24 08:52:18 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
www.beihaicq.com/static/737a11045a752cf96ef29ab583a31e3f.jpg
200 OK 63 kB URL HTTP/1.1 www.beihaicq.com/static/737a11045a752cf96ef29ab583a31e3f.jpg
IP
ASN #26658 HENGTONG-IDC-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", progressive, precision 8, 768x1024, components 3\012- data
Hash bc46e71216f47502b6191d5c0ab9c4ed
092758b2075164f86a0e34bf16a8dc5913cbf69e
0d98706a8278d7bfa889153c6e9b6a8026b8882acf5276bc1d88f77808edfeb6
GET /static/737a11045a752cf96ef29ab583a31e3f.jpg HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:17 GMT
Content-Type: image/jpeg
Content-Length: 62954
Last-Modified: Fri, 12 Aug 2022 08:45:38 GMT
Connection: keep-alive
ETag: "62f61332-f5ea"
Accept-Ranges: bytes
bdimg.share.baidu.com/static/api/js/share.js?v=89860593.js?cdnversion=465655
200 OK 6.2 kB URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/share.js?v=89860593.js?cdnversion=465655
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with very long lines (17305), with no line terminators
Hash a78bd68ac53bbc7eff7039d2c4e2c4ab
52e17a124e5ef7c4729e2000f8a7ffa14c2a4eb9
dbaf841ced63da2a82e537cf643b52d50b71620c39b5fbb6c90965ba8b78fd8e
GET /static/api/js/share.js?v=89860593.js?cdnversion=465655 HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 6218
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:18 GMT
Etag: "2981715462"
Expires: Tue, 14 Feb 2023 09:22:18 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:07 GMT
Server: BWS/1.0
Vary: Accept-Encoding
www.beihaicq.com/static/0dcdc399a053783711f67d9b85edbab7.jpg
200 OK 154 kB URL HTTP/1.1 www.beihaicq.com/static/0dcdc399a053783711f67d9b85edbab7.jpg
IP
ASN #26658 HENGTONG-IDC-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x1066, components 3\012- data
Size 154 kB (153613 bytes)
Hash 182e787e258f7fc338d0f5ebe0bfe467
0994d7e0d8d16353f960164e7d0acd0190017e8c
86f48db001de653aa68026546f982ecf50ec12b0426a072c10b5c195292c421a
GET /static/0dcdc399a053783711f67d9b85edbab7.jpg HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:17 GMT
Content-Type: image/jpeg
Content-Length: 153613
Last-Modified: Fri, 12 Aug 2022 07:42:36 GMT
Connection: keep-alive
ETag: "62f6046c-2580d"
Accept-Ranges: bytes
www.beihaicq.com/static/a08fec44622bdca7b41d8c3bfb22e271.jpg
200 OK 134 kB URL HTTP/1.1 www.beihaicq.com/static/a08fec44622bdca7b41d8c3bfb22e271.jpg
IP
ASN #26658 HENGTONG-IDC-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x1066, components 3\012- data
Size 134 kB (134291 bytes)
Hash 8a3d9311abedf2e84f847c4b65dee1e3
f9eb3737b6318f0f93307d26514e2bb7febcb8cf
bc14542913c893d37d90dd9bfb13594f8cf87bf6b78ce56abf8967617467f246
GET /static/a08fec44622bdca7b41d8c3bfb22e271.jpg HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:18 GMT
Content-Type: image/jpeg
Content-Length: 134291
Last-Modified: Fri, 12 Aug 2022 07:42:33 GMT
Connection: keep-alive
ETag: "62f60469-20c93"
Accept-Ranges: bytes
bdimg.share.baidu.com/static/api/js/view/slide_view.js?v=9fecb657.js
200 OK 1.1 kB URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/view/slide_view.js?v=9fecb657.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type HTML document, ASCII text, with very long lines (2477), with no line terminators
Hash 33f8c8b079531d77030ceccf7d4d5489
ffa5eb393e050f70b7862e68dc6a795889e8eb6b
a49ca88582ff8c35a66ee40edf293edffc5aae5050f640666382829802dfd61d
GET /static/api/js/view/slide_view.js?v=9fecb657.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1066
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:18 GMT
Etag: "3233339206"
Expires: Tue, 14 Feb 2023 09:22:18 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:09 GMT
Server: BWS/1.0
Vary: Accept-Encoding
bdimg.share.baidu.com/static/api/js/share/slide_api.js?v=ec14f516.js
200 OK 302 B URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/share/slide_api.js?v=ec14f516.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with very long lines (471), with no line terminators
Hash 6aaecfeb9b2a6388b5b1420cbb66c471
84b537c0b589cca07bcfb7a0b3bc8997a27b954f
89e3bf7b98b7e1fce88dfcc0582f705fde4948b184cf8f88ce4eed24bb8c876a
GET /static/api/js/share/slide_api.js?v=ec14f516.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 302
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:18 GMT
Etag: "3283672007"
Expires: Tue, 14 Feb 2023 09:22:18 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:08 GMT
Server: BWS/1.0
Vary: Accept-Encoding
api.share.baidu.com/s.gif?l=http://www.beihaicq.com/
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.beihaicq.com/
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.beihaicq.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Tue, 14 Feb 2023 08:52:18 GMT
www.beihaicq.com/static/8307d58ac11ca9dc0d70a975583f7f67.jpg
200 OK 102 kB URL HTTP/1.1 www.beihaicq.com/static/8307d58ac11ca9dc0d70a975583f7f67.jpg
IP
ASN #26658 HENGTONG-IDC-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x1066, components 3\012- data
Size 102 kB (101487 bytes)
Hash a83586c59a57550dbd1dd958aea01a0b
4c80cc6056a5a93b948fae0c37b56a26dda79eb3
08a5ec1454263b1bf64b226cf377a42fc63b491a80fdf90cddaa0c3c8c4cb70c
GET /static/8307d58ac11ca9dc0d70a975583f7f67.jpg HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:18 GMT
Content-Type: image/jpeg
Content-Length: 101487
Last-Modified: Fri, 12 Aug 2022 08:45:40 GMT
Connection: keep-alive
ETag: "62f61334-18c6f"
Accept-Ranges: bytes
bdimg.share.baidu.com/static/api/js/view/select_view.js?v=14bb0f0f.js
200 OK 2.0 kB URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/view/select_view.js?v=14bb0f0f.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type HTML document, ASCII text, with very long lines (4546), with no line terminators
Hash 00a97031422989482b18700be41cc59d
41f4d2309dc77aee077dccceb06273fcd55cb7bd
a20ef2dd939552e3f06221d0ef62cc666d28f867e919ab2723ac92c58ebad30a
GET /static/api/js/view/select_view.js?v=14bb0f0f.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1963
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "4030256836"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:09 GMT
Server: BWS/1.0
Vary: Accept-Encoding
bdimg.share.baidu.com/static/api/js/share/select_api.js
200 OK 244 B URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/share/select_api.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with very long lines (359), with no line terminators
Hash 92bec79c6434996591615f8eaeefc52e
5cec066bd9f628d70b3a1c4d69ba387d22cbc576
a3b655fb5c47e752d195c8e3a285e55f1890a77e05865b3551dda23c24cf0ce6
GET /static/api/js/share/select_api.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 244
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "3887651785"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:08 GMT
Server: BWS/1.0
Vary: Accept-Encoding
bdimg.share.baidu.com/static/api/js/view/image_view.js
200 OK 1.8 kB URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/view/image_view.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type HTML document, ASCII text, with very long lines (4063), with no line terminators
Hash 572b71fa329a9c389accbc6438cfe246
c2a7f7e45388d53bf7a8041fda8787dc7d3e3e0d
66c420b7d2faa02a4c9fe3daf19d5b664a8687257b47522b73d6c03f63f0c7ec
GET /static/api/js/view/image_view.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1766
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "3535328974"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:09 GMT
Server: BWS/1.0
Vary: Accept-Encoding
www.beihaicq.com/static/10673947276309398ab945951832a130.jpg
200 OK 108 kB URL HTTP/1.1 www.beihaicq.com/static/10673947276309398ab945951832a130.jpg
IP
ASN #26658 HENGTONG-IDC-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x1066, components 3\012- data
Size 108 kB (107906 bytes)
Hash c51df1587b59fac8458ed46d8e1101cf
ba0890a25aacd79e0321f05f84d6201290848542
e8758be69f3e045e26be1c21e98f0cf47f072b243464cbb25c76c9825117806b
GET /static/10673947276309398ab945951832a130.jpg HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:18 GMT
Content-Type: image/jpeg
Content-Length: 107906
Last-Modified: Fri, 12 Aug 2022 08:48:05 GMT
Connection: keep-alive
ETag: "62f613c5-1a582"
Accept-Ranges: bytes
bdimg.share.baidu.com/static/api/js/share/image_api.js
200 OK 293 B URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/share/image_api.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with very long lines (453), with no line terminators
Hash 95ef49f0b56ceeac2bee33c978bf9e9f
6c0e9245c48d5800db4478877ab625ebd0fc2464
7d04931514d095ef0d46508c67d05786841c2af99ebe30cd5e4928e9b0de294c
GET /static/api/js/share/image_api.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 293
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "3803765703"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:08 GMT
Server: BWS/1.0
Vary: Accept-Encoding
bdimg.share.baidu.com/static/api/js/view/view_base.js
200 OK 728 B URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/view/view_base.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with very long lines (1616), with no line terminators
Hash 7ee144ca4be853ced65e63463259e6eb
a171d2b09ecb55590628a71a7f50fc05eb2d7e92
89119613d47f7bd1c2daf15d878fea5cfbca158fbd90930fcf106b4dc177d9f6
GET /static/api/js/view/view_base.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 728
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "2688079746"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:09 GMT
Server: BWS/1.0
Vary: Accept-Encoding
bdimg.share.baidu.com/static/api/js/share/api_base.js
200 OK 580 B URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/share/api_base.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with very long lines (1468), with no line terminators
Hash a2f2cddb86ee350731a332b4c44f5e0d
e8ec70d2a62da5fff2ce1b684a4a9d112d640315
142e59628a500e248c6155c8fe279eeb70bc6aebf516c1bb6cd9486ea1b207b1
GET /static/api/js/share/api_base.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 580
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "3610826631"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:08 GMT
Server: BWS/1.0
Vary: Accept-Encoding
bdimg.share.baidu.com/static/api/js/base/tangram.js?v=37768233.js
200 OK 36 kB URL HTTP/1.1 bdimg.share.baidu.com/static/api/js/base/tangram.js?v=37768233.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with very long lines (32769)
Hash 1a17164900cba54de0776f3d66b38647
115ecb2a379ead464545695c324301d95164b16c
2eb4ae8ab6cc0e3b820134d3da036902344908846eecc4f7d0adb6dbdab23a79
GET /static/api/js/base/tangram.js?v=37768233.js HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 36055
Content-Type: text/javascript
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "814241156"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:07 GMT
Server: BWS/1.0
Vary: Accept-Encoding
bdimg.share.baidu.com/static/api/css/slide_share.css?v=855af98e.css
200 OK 1.3 kB URL HTTP/1.1 bdimg.share.baidu.com/static/api/css/slide_share.css?v=855af98e.css
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type Unicode text, UTF-8 text, with very long lines (5768), with no line terminators
Hash 8ee65622cc46e6ee98ce5ccc4689d132
583873fd0c7a95848c9337c1c064311f11fdd796
93aa316f1f73646fe2bab465cf771d849132ae238fd2a4caef21a25a4049ef75
GET /static/api/css/slide_share.css?v=855af98e.css HTTP/1.1
Host: bdimg.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=1800
Content-Encoding: gzip
Content-Length: 1317
Content-Type: text/css
Date: Tue, 14 Feb 2023 08:52:19 GMT
Etag: "3258504845"
Expires: Tue, 14 Feb 2023 09:22:19 GMT
Last-Modified: Fri, 05 Jun 2015 08:50:04 GMT
Server: BWS/1.0
Vary: Accept-Encoding
www.beihaicq.com/static/399ead154b8a2618a1f674e268aa8bed.jpg
200 OK 174 kB URL HTTP/1.1 www.beihaicq.com/static/399ead154b8a2618a1f674e268aa8bed.jpg
IP
ASN #26658 HENGTONG-IDC-LLC
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x520, components 3\012- data
Size 174 kB (173683 bytes)
Hash 2da89d380d8f57f947cf5e8c25dc4f14
665036a5ec3cc2e66c3f0fd6f2cf5c77c4352df7
b53dfd69cd91d2e1abf1acb4e9012b95cd5de73cb7a94056619eb799e84498ec
GET /static/399ead154b8a2618a1f674e268aa8bed.jpg HTTP/1.1
Host: www.beihaicq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.beihaicq.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 14 Feb 2023 08:52:19 GMT
Content-Type: image/jpeg
Content-Length: 173683
Last-Modified: Fri, 12 Aug 2022 08:57:29 GMT
Connection: keep-alive
ETag: "62f615f9-2a673"
Accept-Ranges: bytes
107.178.171.54
23.36.77.32
182.61.201.94