r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7181eff9c60e83eb0004ece591e47dca
0fd8cd0c9d10b0547938982e57d2c43e2d98679f
89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17239
Expires: Thu, 08 Dec 2022 13:48:43 GMT
Date: Thu, 08 Dec 2022 09:01:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7179
Expires: Thu, 08 Dec 2022 11:01:03 GMT
Date: Thu, 08 Dec 2022 09:01:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 08:08:11 GMT
content-type: application/json
age: 3193
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14663
Expires: Thu, 08 Dec 2022 13:05:47 GMT
Date: Thu, 08 Dec 2022 09:01:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9epFPJ8/ZoxAAwrEZRq0f3JCJ7WZPOzwoJQX6UAgP5pjn5eR7vmNLhfV6rWex7kAuTyXFaZ5/MA=
x-amz-request-id: H82SVW8A8NAP00C2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 08:47:51 GMT
age: 813
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:01:24 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
bsdyrf1.com/
200 OK 9.1 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (24590), with no line terminators
Hash 57195d58a30b9ff3233fd53f068a521b
db05690db1129bf3aa1635fd03100e293298cded
c4731a5650b448b2c5e33d292f834b8d69620977f27375afefe8a80def6c5938
GET / HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: PHP/7.0.33, ASP.NET
Date: Thu, 08 Dec 2022 09:01:11 GMT
Content-Length: 9092
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 08:07:55 GMT
age: 3210
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1724
Cache-Control: max-age=88449
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:01:25 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 09:35:34 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
bsdyrf1.com/template/m1938U/css/white.css
200 OK 2.4 kB URL HTTP/1.1 bsdyrf1.com/template/m1938U/css/white.css
IP
File type assembler source, Unicode text, UTF-8 (with BOM) text, with very long lines (1029), with CRLF line terminators
Hash 75edbbafcc84cf044238c5a3ad1d4770
3ddfa9c0d74282683e41b7613b252d793476c6e6
a83309e147bd4f03483fd26ebe445416ec2e856b3cbe02a2cf4792f5fbfce512
GET /template/m1938U/css/white.css HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 06 Jul 2019 15:04:34 GMT
Accept-Ranges: bytes
ETag: "0ede61ec34d51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:12 GMT
Content-Length: 2403
bsdyrf1.com/template/m1938U/css/mm-content.css
200 OK 1.5 kB URL HTTP/1.1 bsdyrf1.com/template/m1938U/css/mm-content.css
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash c49fc9242ae068438fb59a439e0d1c19
55fe11442ade461301938256cdbe204a059b9263
7654e080efe86eb0b05fa105c53700c3a5d9cf8b0eeff16a2c58d2d93a929953
GET /template/m1938U/css/mm-content.css HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 06 Jul 2019 15:04:28 GMT
Accept-Ranges: bytes
ETag: "066531bc34d51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:12 GMT
Content-Length: 1484
bsdyrf1.com/template/m1938U/css/swiper.min.css
200 OK 2.9 kB URL HTTP/1.1 bsdyrf1.com/template/m1938U/css/swiper.min.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (17459)
Hash acd22ea88fcf58404432de706994db5f
0608e04eac9837a6218e6be2002c7a10bbbe3da1
7649c299a8208043c01a991539aebd7db06b408f13661663e2748f4a25efa1a7
GET /template/m1938U/css/swiper.min.css HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 06 Jul 2019 15:04:32 GMT
Accept-Ranges: bytes
ETag: "0c0b51dc34d51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:12 GMT
Content-Length: 2853
172.252.171.234/wenzi.js
200 OK 531 B IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 3dcd97b0cc9e669d423e2adad5068ec1
beda193085d4342e2c846402d6016bc034dda7c1
7594a4562d67dca311ddb7cb2313e3fcc0a846c1830e0dae173be2faaf935435
Analyzer Verdict Alert quad9 Sinkholed
GET /wenzi.js HTTP/1.1
Host: 172.252.171.234
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 14 Nov 2022 03:26:33 GMT
Accept-Ranges: bytes
ETag: "80babce4d8f7d81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:24 GMT
Content-Length: 531
bsdyrf1.com/template/m1938U/css/style.css
200 OK 11 kB URL HTTP/1.1 bsdyrf1.com/template/m1938U/css/style.css
IP
File type assembler source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 5375895a14567b7c53168d10f5a0136c
0a7623f9dff1528bcea2aa592443ad244eabc885
1daba8a85e3cd3a0c1cf2a84ba4b7daf341caf0d476d14eb111f56e4d6c9d0b4
GET /template/m1938U/css/style.css HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 06 Jul 2019 15:04:32 GMT
Accept-Ranges: bytes
ETag: "0c0b51dc34d51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:12 GMT
Content-Length: 11193
172.252.171.234/shang.js
200 OK 1.3 kB IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash ce8a8627879ff81f9107cd1ed11f0c4e
7c95ebeebec2a1f5561a5f9b3a39445223eb5a14
4951b94446db041d74d1a4d791b458b9d89c7d9f115f4a73f90075c317529cae
Analyzer Verdict Alert quad9 Sinkholed
GET /shang.js HTTP/1.1
Host: 172.252.171.234
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 05 Dec 2022 13:13:10 GMT
Accept-Ranges: bytes
ETag: "0777552ab8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:24 GMT
Content-Length: 1252
172.252.171.234/zhong.js
200 OK 1.0 kB IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash d3fb171d00f16271613c429974c79af0
42e424d72a448602916838ae30c31c7064d5f81a
73f456d11d7ad83968ecef77f0de1dcc6e6f0845861e399aa5b688b52eb9be8e
Analyzer Verdict Alert quad9 Sinkholed
GET /zhong.js HTTP/1.1
Host: 172.252.171.234
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 05 Dec 2022 13:11:02 GMT
Accept-Ranges: bytes
ETag: "0372a6ab8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:24 GMT
Content-Length: 1005
172.252.171.234/feijihao.js
200 OK 368 B URL HTTP/1.1 172.252.171.234/feijihao.js
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash c8c2dcc6345168cb115a7fa048262125
7f4778449d22683e167598d58ab2c8c5ffbf1524
b476ac5c7df6e9d43d27f0621f5e78b9979bfd64f9c62b84d2e2d4a6451ab54f
Analyzer Verdict Alert quad9 Sinkholed
GET /feijihao.js HTTP/1.1
Host: 172.252.171.234
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 08 Nov 2022 00:17:00 GMT
Accept-Ranges: bytes
ETag: "766e726b7f3d81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:24 GMT
Content-Length: 368
172.252.171.234/xia.js
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /xia.js HTTP/1.1
Host: 172.252.171.234
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 11 Nov 2022 12:25:52 GMT
Accept-Ranges: bytes
ETag: "66208cbdc8f5d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:24 GMT
Content-Length: 0
172.252.171.234/lianmeng.js
200 OK 912 B URL HTTP/1.1 172.252.171.234/lianmeng.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 3a1eecb82905f21127553b7f15d3211b
f032586cb6e106477c2d7d64d04e09628e2ea55d
048839ce09dfcf4414b45ad67d469a3c1dbd215324441778fa984407ee8e0c8b
Analyzer Verdict Alert quad9 Sinkholed
GET /lianmeng.js HTTP/1.1
Host: 172.252.171.234
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 27 Nov 2022 13:48:50 GMT
Accept-Ranges: bytes
ETag: "3ea3defa662d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:24 GMT
Content-Length: 912
bsdyrf1.com/template/m1938U/css/bootstrap.min.css
200 OK 20 kB URL HTTP/1.1 bsdyrf1.com/template/m1938U/css/bootstrap.min.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65364), with CRLF line terminators
Hash fb6c31f3792669dfacd5a0c51e93070d
1206f1ca2f871d739789fe7316f8258ab420ea6f
0a30434aa91a4b89aec48ae842c2cb1479843542409ccaefe3073869ab46b82f
GET /template/m1938U/css/bootstrap.min.css HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 06 Jul 2019 15:04:28 GMT
Accept-Ranges: bytes
ETag: "066531bc34d51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:12 GMT
Content-Length: 19748
bsdyrf1.com/template/m1938U/css/showfloatdiv.css
404 Not Found 7.2 kB URL HTTP/1.1 bsdyrf1.com/template/m1938U/css/showfloatdiv.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /template/m1938U/css/showfloatdiv.css HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
X-Powered-By: PHP/7.0.33, ASP.NET
Date: Thu, 08 Dec 2022 09:01:12 GMT
Content-Length: 7199
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Oc/T4SPAu2E36U27OWbRpA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Mvw66cpZmTEgei/mNdEDm+wqRoM=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 41e808cea28344d365509f7b34758f25
8dbb0e926f9c7b2ec9be8fa01a0dbcd10866aff1
662df55e6e38efa7b2b1f83ff675663f115a5fe9c955b1496ca49bd43de0f8cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "662DF55E6E38EFA7B2B1F83FF675663F115A5FE9C955B1496CA49BD43DE0F8CB"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 08 Dec 2022 15:01:26 GMT
Date: Thu, 08 Dec 2022 09:01:26 GMT
Connection: keep-alive
js.users.51.la/21470745.js
403 Forbidden 21 B URL HTTP/1.1 js.users.51.la/21470745.js
IP
ASN #4837 CHINA UNICOM China169 Backbone
File type very short file (no magic)
Hash 1a60c330fb42841e8dcf3cd507a70bfc
9ba9c8d18f6be7851b4d88e3b608a9979f56a083
7fa5a93246b84491c51c9c8b4493d30518932a2bb45d67df757bc8a332b1f2d1
GET /21470745.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 403 Forbidden
Server: CloudWAF
Date: Thu, 08 Dec 2022 09:01:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=e661343c2d033e6daf2; path=/
HWWAFSESTIME=1670490083040; path=/
Content-Encoding: gzip
bsdyrf1.com/template/m1938U/fonts/font_593233_jsu8tlct5shpk3xr.woff
200 OK 13 kB URL HTTP/1.1 bsdyrf1.com/template/m1938U/fonts/font_593233_jsu8tlct5shpk3xr.woff
IP
File type Web Open Font Format, TrueType, length 13408, version 1.0\012- data
Hash 99af6debcdaba3e7ffe01b4c3cbccacb
4efda64b06cd7c294f6214623bcb634f3def3bd1
1106aebd6819da7203324abc443186658c8f54180a460ccc5b83553c5ce34f72
GET /template/m1938U/fonts/font_593233_jsu8tlct5shpk3xr.woff HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://bsdyrf1.com/template/m1938U/css/style.css
HTTP/1.1 200 OK
Content-Type: font/x-woff
Last-Modified: Sat, 06 Jul 2019 15:04:26 GMT
Accept-Ranges: bytes
ETag: "039221ac34d51:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:13 GMT
Content-Length: 13408
js.users.51.la/21470745.js
403 Forbidden 21 B URL HTTP/1.1 js.users.51.la/21470745.js
IP
ASN #4837 CHINA UNICOM China169 Backbone
File type very short file (no magic)
Hash 1a60c330fb42841e8dcf3cd507a70bfc
9ba9c8d18f6be7851b4d88e3b608a9979f56a083
7fa5a93246b84491c51c9c8b4493d30518932a2bb45d67df757bc8a332b1f2d1
GET /21470745.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 403 Forbidden
Server: CloudWAF
Date: Thu, 08 Dec 2022 09:01:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=e66134e12d033e6daf2; path=/
HWWAFSESTIME=1670490083040; path=/
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4602
Expires: Thu, 08 Dec 2022 10:18:09 GMT
Date: Thu, 08 Dec 2022 09:01:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4602
Expires: Thu, 08 Dec 2022 10:18:09 GMT
Date: Thu, 08 Dec 2022 09:01:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15e59c3f-fa3a-4698-96c2-2e89662ffa9f.webp
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15e59c3f-fa3a-4698-96c2-2e89662ffa9f.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 311cb4353566dfb426dbc692fde93223
979910df445a5c4d3513c8c25e289800335f646d
5ecd5c12620c0b8b6bbf456cb6c016168479a735f4eb67a9a1047677b9d798fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15e59c3f-fa3a-4698-96c2-2e89662ffa9f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8179
x-amzn-requestid: 39aa4016-4f48-4d2a-b94b-05432980d66a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czCruHckIAMFkHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639117e4-1953985a5c8d2da8239ec8e8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:47:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKaRX4QpQU2U8J-jk1lWjhAooObsgxfHuNXv5Bbc69IEMCXAyIESeQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:50:01 GMT
age: 36686
etag: "979910df445a5c4d3513c8c25e289800335f646d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:35:32 GMT
age: 33955
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fb1ea0161d261518c99909aff49e6f58
c3b915cb579b651db25442fea0bbedd0d292c0fc
d877a21abfd883a368da0136c4e56d7f590fa9e9ea09dec3675823211fe56385
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6110
x-amzn-requestid: ddb5c208-5bfe-4e8c-9fdd-55076fac9eb8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czg9FGl2IAMFxYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63914853-148fec9213f360520ff3c52a;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 02:13:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: l8PbqnzJrf0uHiLE9iy5PSfKl8f4520ddTxkji7GyUyAWuX9Sc4U0w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 04:20:38 GMT
age: 16849
etag: "c3b915cb579b651db25442fea0bbedd0d292c0fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57a992ab666f21c6da0057fefb622ff2
c36381d6744ae44360b2a37ca7586028e980714b
afe4050d9b07dcab509c95eb8d75ca410db74bd59f39561e5d190550cb61503e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13556
x-amzn-requestid: 3e79e2da-80ea-404c-8d87-939c7682dbe8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4h8EuUIAMFkIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639107a5-68318f164708882a43fb0f12;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7RZTh3iQHGp_XffXQQw13UUWqPNZQFJ_e4pIvNPgAaA1aGy_cXMueA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:24 GMT
etag: "c36381d6744ae44360b2a37ca7586028e980714b"
content-type: image/jpeg
age: 38883
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d27bcd3-7b4f-4d99-8f0d-b7b98bfaa8d7.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d27bcd3-7b4f-4d99-8f0d-b7b98bfaa8d7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce35df4fe4f77c950e40dc44b311bab4
aadf97d040e3577599581e892ee20f88d191bf91
f9c4cfc384213f77c0bbb252f3d6fbc22be60e1ecc158eece857d5050c8ced3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d27bcd3-7b4f-4d99-8f0d-b7b98bfaa8d7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5620
x-amzn-requestid: fadda084-c7fc-4ec0-bad0-27e97b8349d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4gHGIMIAMFy_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391079a-5dc824963fe82ab927205128;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MWB80hrfUMDjexNsySVGMXtm6Wva4t1gkJXaesFKRaGSkFS1r1zIrw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:24 GMT
age: 38883
etag: "aadf97d040e3577599581e892ee20f88d191bf91"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d44d17585c9a536c8da0e75ed90d175
9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 12:11:17 GMT
age: 75010
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 72ab9961eb5181d8c4fd4bff44fb6c3b
9945fd3056a0a2bbdd288917f7b0a0893557a3c8
c3d7ae5daeefc274dbf1cd6fe27219e8bce763080a8f10cdbeadef6042f36ad4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 08 Dec 2022 06:11:29 GMT
Expires: Fri, 09 Dec 2022 06:11:29 GMT
ETag: "9945fd3056a0a2bbdd288917f7b0a0893557a3c8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 72ab9961eb5181d8c4fd4bff44fb6c3b
9945fd3056a0a2bbdd288917f7b0a0893557a3c8
c3d7ae5daeefc274dbf1cd6fe27219e8bce763080a8f10cdbeadef6042f36ad4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 08 Dec 2022 06:11:29 GMT
Expires: Fri, 09 Dec 2022 06:11:29 GMT
ETag: "9945fd3056a0a2bbdd288917f7b0a0893557a3c8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81ab6072e33616c9e15015ece66b8847
cb124ed21daa17df301e89a8d89650fe6f0a7aa6
fc0052e5488aedeeaf1174f6e61e59ff85e09675c0451c5a18b31192d58490fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC0052E5488AEDEEAF1174F6E61E59FF85E09675C0451C5A18B31192D58490FA"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 08 Dec 2022 15:01:27 GMT
Date: Thu, 08 Dec 2022 09:01:27 GMT
Connection: keep-alive
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash dae750546bb982e1fe2a8a43def15b5e
2a338dc30d4fcc62c667756d2a95fb1f6b60d46c
11e9b7c279a9cb92e8cf51161be2dcfb5cab92350b7d0dbe05c97aaa325b0543
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=363666,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776451069a140b02-OSL
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash dae750546bb982e1fe2a8a43def15b5e
2a338dc30d4fcc62c667756d2a95fb1f6b60d46c
11e9b7c279a9cb92e8cf51161be2dcfb5cab92350b7d0dbe05c97aaa325b0543
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=363666,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776451069d8cb506-OSL
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash dae750546bb982e1fe2a8a43def15b5e
2a338dc30d4fcc62c667756d2a95fb1f6b60d46c
11e9b7c279a9cb92e8cf51161be2dcfb5cab92350b7d0dbe05c97aaa325b0543
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=363666,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776451069e751c16-OSL
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash dae750546bb982e1fe2a8a43def15b5e
2a338dc30d4fcc62c667756d2a95fb1f6b60d46c
11e9b7c279a9cb92e8cf51161be2dcfb5cab92350b7d0dbe05c97aaa325b0543
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=363666,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776451069b3a1c02-OSL
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash dae750546bb982e1fe2a8a43def15b5e
2a338dc30d4fcc62c667756d2a95fb1f6b60d46c
11e9b7c279a9cb92e8cf51161be2dcfb5cab92350b7d0dbe05c97aaa325b0543
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=363666,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7764510699160b45-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash d16949afac12220fd9d50ccb1cd63c8f
4249f7eda7572ae22168d64a6015ed48a5b15449
5f052793d411b36950bf80e11db55c6e57b0611a367b446ce0b3769483becfad
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 22:57:49 GMT
Expires: Tue, 13 Dec 2022 22:57:48 GMT
Etag: "4249f7eda7572ae22168d64a6015ed48a5b15449"
Cache-Control: max-age=481580,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77645107afa8b529-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash d16949afac12220fd9d50ccb1cd63c8f
4249f7eda7572ae22168d64a6015ed48a5b15449
5f052793d411b36950bf80e11db55c6e57b0611a367b446ce0b3769483becfad
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 22:57:49 GMT
Expires: Tue, 13 Dec 2022 22:57:48 GMT
Etag: "4249f7eda7572ae22168d64a6015ed48a5b15449"
Cache-Control: max-age=481580,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77645107bca7b527-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash df5a6cc3f174cc38a930d6c4c1db65e8
a4ebc44f06356b882cfb9e1a0274c7d35f0ee8d0
82499b9e226593115b1c95ca9819f7fd46eb1f8f2d9815bbe97c2b25764dc10e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 09:55:23 GMT
Expires: Mon, 12 Dec 2022 09:55:22 GMT
Etag: "a4ebc44f06356b882cfb9e1a0274c7d35f0ee8d0"
Cache-Control: max-age=348234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77645107f801b529-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 84bc44d3ea7ce4ec75e9110007fe8976
cbc617d13e8344408f218879ac5afb1ef3ddbba2
b19901b055fa533d199d4e77e47f656a17cc3afea4ce3e912693a65ad97903e1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 18:22:18 GMT
Expires: Tue, 13 Dec 2022 18:22:17 GMT
Etag: "cbc617d13e8344408f218879ac5afb1ef3ddbba2"
Cache-Control: max-age=465049,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77645108f986b529-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash d16949afac12220fd9d50ccb1cd63c8f
4249f7eda7572ae22168d64a6015ed48a5b15449
5f052793d411b36950bf80e11db55c6e57b0611a367b446ce0b3769483becfad
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 22:57:49 GMT
Expires: Tue, 13 Dec 2022 22:57:48 GMT
Etag: "4249f7eda7572ae22168d64a6015ed48a5b15449"
Cache-Control: max-age=481580,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77645107fceab527-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 231e640b509a52f7f0875635437a390b
d0cf304cac5ba4f282b9d287be2b4954b3adcc34
cf16ed6130f4e93cf295084dc8b5c30dbce770bf8b2d75c202a6edd7a4ab8d9e
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 12 Dec 2022 05:54:22 GMT
ETag: "d0cf304cac5ba4f282b9d287be2b4954b3adcc34"
Last-Modified: Thu, 08 Dec 2022 05:54:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 905
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776451097b53b4ed-OSL
qmjijs-niudyeh-eyqujd.com/tp/8888.gif
200 OK 82 kB URL HTTP/1.1 qmjijs-niudyeh-eyqujd.com/tp/8888.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Hash 49e87cc6d440991190ff8388e06982a3
803f0eabc35569b821e6994f9d4a7b3e392e6190
12cc64a3cc3ed5577dbc2b40601978c3be4634598e26e7f69fa67dfd66f1f679
GET /tp/8888.gif HTTP/1.1
Host: qmjijs-niudyeh-eyqujd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 11 Nov 2022 14:26:13 GMT
Accept-Ranges: bytes
ETag: "66683e8dd9f5d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:01:39 GMT
Content-Length: 81493
ocsp.sectigo.com/
200 OK 471 B IP
Hash 47629c40bd434b6ba39ceb257a1e13cd
ecea7fa54d3c9dbf57d8d2602b3de9471b86117b
f3edf65f96d23c3d8cebe801659e1798459f8f1dd9e681eba86535881b21df20
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 13:44:21 GMT
Expires: Mon, 12 Dec 2022 13:44:20 GMT
Etag: "ecea7fa54d3c9dbf57d8d2602b3de9471b86117b"
Cache-Control: max-age=361972,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776451080857b52d-OSL
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #134770 CHINANET Jiangsu province Suzhou taihu IDC network
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Thu, 08 Dec 2022 09:01:27 GMT
Etag: "4078521116"
Expires: Fri, 08 Dec 2023 09:01:27 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=53D95C88A3001CB318762169BC1DEA30:FG=1; max-age=31536000; expires=Fri, 08-Dec-23 09:01:27 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
tpkj2222.com/img/k80m/oCItEEUid.gif
200 OK 61 kB URL HTTP/1.1 tpkj2222.com/img/k80m/oCItEEUid.gif
IP
ASN #59371 Dimension Network & Communication Limited
File type GIF image data, version 89a, 960 x 80\012- data
Hash 936aa22b82774093e4ea0bae5c756654
583e34d014395e46fc979fac99d6e3b5ed7fe047
4527904a23b0e5690efb872917037524ea03e1de0b6af9bc4f61fff49651473e
GET /img/k80m/oCItEEUid.gif HTTP/1.1
Host: tpkj2222.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60911-1670145003000"
Last-Modified: Sun, 04 Dec 2022 09:10:03 GMT
Expires: Fri, 23 Dec 2022 09:01:27 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip
Nginx-Cache: HIT, HIT
img.lytuchuang3.com/upload/vod/20221003-1/9b7fb1e60071ea23c004afb42a09bb24.jpg
200 OK 73 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221003-1/9b7fb1e60071ea23c004afb42a09bb24.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Hash df0715c1809cfde67726ad6607013e11
e49fbffa75cb968a778a3bccb39216ff80925aa6
6a0353e9269fe9e93d0460995bf9e0723c9e85c543da2afc97e44ffdda39651a
GET /upload/vod/20221003-1/9b7fb1e60071ea23c004afb42a09bb24.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/jpeg
Content-Length: 72717
Last-Modified: Sun, 02 Oct 2022 16:31:55 GMT
Connection: keep-alive
ETag: "6339bcfb-11c0d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221003-1/f72e7ed4f696662a391e94e71ae70d2b.jpg
200 OK 94 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221003-1/f72e7ed4f696662a391e94e71ae70d2b.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Hash ad18c5a952d1cdb48ec8557db1c7d4b8
b02eeb82d824897d25ace44e43121143af6e442e
f1788af96de02b583d26751aec8350f39656fec5ee6b72b3c3a8be242e3cbcc1
GET /upload/vod/20221003-1/f72e7ed4f696662a391e94e71ae70d2b.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/jpeg
Content-Length: 94002
Last-Modified: Sun, 02 Oct 2022 16:31:55 GMT
Connection: keep-alive
ETag: "6339bcfb-16f32"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash e0faf961cf3a0e2d3bdb2b8b31473469
1d398a78da5f6246e18e98a59f48e7d65e0ce29b
7196bc0a24750618f365c28a4266913121ef2a988447c966b1e547f056e35b2a
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 19:25:38 GMT
Expires: Wed, 14 Dec 2022 19:25:37 GMT
Etag: "1d398a78da5f6246e18e98a59f48e7d65e0ce29b"
Cache-Control: max-age=555248,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7764510addce0b02-OSL
img.lytuchuang3.com/upload/vod/20221004-1/1be1e4d9b8e631fc8ddb64a12e2b1258.jpg
200 OK 92 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221004-1/1be1e4d9b8e631fc8ddb64a12e2b1258.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Hash 10c6fc73810deb3f810bee10a4f260d5
6a885490e28c33d95713aff762a3beb778d06340
d5743a58d0f597bb372d38f95a81fc12d262fbfb1c6e86a0dd55a207e79c713f
GET /upload/vod/20221004-1/1be1e4d9b8e631fc8ddb64a12e2b1258.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/jpeg
Content-Length: 92523
Last-Modified: Mon, 03 Oct 2022 16:16:39 GMT
Connection: keep-alive
ETag: "633b0ae7-1696b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221002-1/1af38ebe9afe6e2a673f6a3143997080.jpg
200 OK 221 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221002-1/1af38ebe9afe6e2a673f6a3143997080.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 221 kB (220842 bytes)
Hash 546f1902f562e7021036885cb524c7ee
56a8491850685e0f80a4d1297fa3bea8aa1d0e41
fe732a148c235b07aa4cf165ef48b04faeb564770aa8d31f8262a72ac1b10f0f
GET /upload/vod/20221002-1/1af38ebe9afe6e2a673f6a3143997080.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/jpeg
Content-Length: 220842
Last-Modified: Sun, 02 Oct 2022 11:37:22 GMT
Connection: keep-alive
ETag: "633977f2-35eaa"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221003-1/4ad60d35a74e866f4f415587e47400ac.jpg
200 OK 204 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221003-1/4ad60d35a74e866f4f415587e47400ac.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 204 kB (203570 bytes)
Hash 6e51fb2a5be12d3e06f75cf8c955935e
b08a860e5ac68b6313300b8a244c771a3a6226a9
102b6b10a284e42d732b6f010d66dbeda8d9048fba2aa9c239b7c77ae9f3bb9c
GET /upload/vod/20221003-1/4ad60d35a74e866f4f415587e47400ac.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/jpeg
Content-Length: 203570
Last-Modified: Sun, 02 Oct 2022 16:31:55 GMT
Connection: keep-alive
ETag: "6339bcfb-31b32"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 727 B IP
Hash 50e7304604e7c77b3c119da8e820c093
50803969449a9904ab28148c2272015edaaf1264
f37596514fe9c4d75d7cfeb6e71a905a40458b9bbaae35472d71f015e1528421
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6444
Cache-Control: max-age=139265
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 09:01:28 GMT
Etag: "63910bbd-2d7"
Expires: Fri, 09 Dec 2022 23:42:33 GMT
Last-Modified: Wed, 07 Dec 2022 21:55:09 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727
img.1170555.com/images/638decdd09ca91e002014577.gif
302 Found 727 B URL HTTP/2 img.1170555.com/images/638decdd09ca91e002014577.gif
IP
ASN #134835 Starry Network Limited
Hash 50e7304604e7c77b3c119da8e820c093
50803969449a9904ab28148c2272015edaaf1264
f37596514fe9c4d75d7cfeb6e71a905a40458b9bbaae35472d71f015e1528421
GET /images/638decdd09ca91e002014577.gif HTTP/1.1
Host: img.1170555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/9e0cafd55375400ebd591988573f0a63
X-Firefox-Spdy: h2
225962tyy.com/62d06ed40fe6442ea9f23cdeb037da65.gif
200 OK 407 kB URL HTTP/1.1 225962tyy.com/62d06ed40fe6442ea9f23cdeb037da65.gif
IP
File type GIF image data, version 89a, 960 x 70\012- data
Size 407 kB (407200 bytes)
Hash 3a2a02fe192865c46b4ea1b57711d35d
10d02c2e54d809ceeed42839991a8b2efa59c573
0b600e3355c823c5669f8338ff521c9b3790de0c3bb051bf24b19fc644821c6d
Analyzer Verdict Alert quad9 Sinkholed
GET /62d06ed40fe6442ea9f23cdeb037da65.gif HTTP/1.1
Host: 225962tyy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6368d9cd-636a0"
Date: Tue, 29 Nov 2022 16:55:12 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Mon, 07 Nov 2022 10:11:25 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us1-cdnb-20
Content-Length: 407200
p3.douyinpic.com/obj/tos-cn-i-dy/367a61eddc794c9d953f4404ad091462
200 OK 701 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/367a61eddc794c9d953f4404ad091462
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 90\012- data
Size 701 kB (700902 bytes)
Hash a36a5d7852f96943e307929a79068ec2
15677aa05f2edf0500e683c1fe9e18f1346c5093
962252d47d64b9ebd1ff1f1683f5dfe33c75effbd28fa027fa44aab7c641eda1
GET /obj/tos-cn-i-dy/367a61eddc794c9d953f4404ad091462 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 700902
date: Tue, 06 Dec 2022 20:13:39 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Tue, 06 Dec 2022 12:56:51 GMT
nw-session-id: 202212062056510102090950661D4312FAnml5502dy
nw-session-trace: 2022-12-06T20:56:51.950722857+08:00 86
x-bdcdn-cache-status: TCP_HIT
x-length: 700902
x-powered-by: ImageX
x-response-date: Tue, 06 Dec 2022 20:56:51 GMT
x-tt-logid: 202212062056510102090950661D4312FA
via: n204-098-016, cache8.l2de2[257,257,206-0,M], cache5.l2de2[258,0], cache5.l2de2[259,0], cache3.se1[0,0,200-0,H], cache8.se1[1,0]
x-request-ip: fdbd:dc01:25:346::75
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 0178520ad27bd5d1cf50b17ae5b59e240a623fbf226762dacd1fb97e16af2e52d9adec653132beda74eb0105a4fc4041c0440a966020e909b5cfc4edec9802aa511351e892febe558722e7d6a4513b80dbd5a04acc10844782ec74737232147390
x-response-lb: image
ali-swift-global-savetime: 1670357619
age: 132469
x-cache: HIT TCP_HIT dirn:11:306970697 mlen:0
x-swift-savetime: Tue, 06 Dec 2022 20:13:39 GMT
x-swift-cachetime: 31536000
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9c16704900885007144e
X-Firefox-Spdy: h2
img.lytuchuang3.com/upload/vod/20221003-1/f697d1b739ba61c834b375bd84830507.jpg
200 OK 339 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221003-1/f697d1b739ba61c834b375bd84830507.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 339 kB (339250 bytes)
Hash 5e0b2d00b0ef467f7af44699a994821f
145f1353c87ffb8adadffa7ed7dc5d71854db309
b618be5e2753db67c9841e214e1fe4b849e99485615cf3827d915233dd292cae
GET /upload/vod/20221003-1/f697d1b739ba61c834b375bd84830507.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/jpeg
Content-Length: 339250
Last-Modified: Sun, 02 Oct 2022 16:31:55 GMT
Connection: keep-alive
ETag: "6339bcfb-52d32"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221004-1/62241fde1ebb54c278a8d8fa1bcdc993.jpg
200 OK 114 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221004-1/62241fde1ebb54c278a8d8fa1bcdc993.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 114 kB (114073 bytes)
Hash 4fd72fbdf7f0cbde43ef99f16c7edcf0
297d264e9bdce021afd9801d8b2cdb000a186b59
0e4a74d2aed4fd4386c813a8c4d8ff945596d507c96cd97d7c91c38006dc5ef8
GET /upload/vod/20221004-1/62241fde1ebb54c278a8d8fa1bcdc993.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 114073
Last-Modified: Mon, 03 Oct 2022 16:18:32 GMT
Connection: keep-alive
ETag: "633b0b58-1bd99"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
p3.douyinpic.com/obj/tos-cn-i-dy/9e0cafd55375400ebd591988573f0a63
200 OK 851 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/9e0cafd55375400ebd591988573f0a63
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 120\012- data
Size 851 kB (850553 bytes)
Hash 2095c1e8f1e570a7991da9a94ab6b8e0
c7bf2e7e17d0251942ae670eaf6e99f86bf4fe25
ce58136edb4867b2190cde4921693c606fd7faa1665095569f9cfa0e46dcf3d2
GET /obj/tos-cn-i-dy/9e0cafd55375400ebd591988573f0a63 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 850553
date: Mon, 05 Dec 2022 12:15:21 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 05 Dec 2022 11:42:43 GMT
nw-session-id: 202212051942430101750942094CC9457Emg67w03dy
nw-session-trace: 2022-12-05T19:42:43.562842529+08:00 40
x-bdcdn-cache-status: TCP_HIT
x-length: 850553
x-powered-by: ImageX
x-response-date: Mon, 05 Dec 2022 19:42:43 GMT
x-tt-logid: 202212051942430101750942094CC9457E
via: n150-055-208, cache2.l2de2[0,0,206-0,H], cache8.l2de2[1,0], cache8.l2de2[1,0], cache2.se1[0,0,200-0,H], cache8.se1[1,0]
x-request-ip: fdbd:dc02:20:306::101
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 013bf24fed8673b8d562acc5eb962bb3c85e56ff6cf69a8858b7c945930e0bda9f65138b6b9e7f4ece9973fcc4c7a26f67b7fec2da17b729b74adb9f2ad7eadce13b3c831ec533dc51f0fb7a18591e5bc8aae687d5685b887466281e93e3fc835e
x-response-lb: image
ali-swift-global-savetime: 1670242521
age: 247567
x-cache: HIT TCP_MEM_HIT dirn:11:352661748 mlen:0
x-swift-savetime: Mon, 05 Dec 2022 12:32:26 GMT
x-swift-cachetime: 31534975
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9c16704900885077150e
X-Firefox-Spdy: h2
8357.app/images/111.gif
200 OK 235 kB IP
File type GIF image data, version 89a, 950 x 60\012- data
Size 235 kB (235089 bytes)
Hash ce54fdef11a4b49711f4972717259e2c
d23e1ffcde7629b62300529d9193f53a6602dd0a
630298b0df9948f0cf5647484627e4f7276315cc13328271714f2d033cdb4d46
GET /images/111.gif HTTP/1.1
Host: 8357.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Thu, 10 Nov 2022 08:54:22 GMT
Accept-Ranges: bytes
ETag: "b0a9f76e2f4d81:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:00:59 GMT
Content-Length: 235089
sysupload.csiteadmin.com/static/uploads/image/x22/20221112/1668247895288463.gif
200 OK 357 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221112/1668247895288463.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 357 kB (357085 bytes)
Hash f42ca8fcf5788a5582b57937421e2b06
3aa98cb656bd50079b824858f734a40600239556
7319a1b6094103fed21e4aa1cbf27dc7985be229ea96245e82b31e434a0212b9
GET /static/uploads/image/x22/20221112/1668247895288463.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 12 Nov 2022 12:53:51 GMT
ETag: "1668257631"
Expires: Mon, 12 Dec 2022 12:53:51 GMT
Last-Modified: Sat, 12 Nov 2022 12:53:51 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
img.lytuchuang3.com/upload/vod/20221004-1/e469db52341e734950e8b14a2598f2c0.jpg
200 OK 232 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221004-1/e469db52341e734950e8b14a2598f2c0.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 232 kB (231642 bytes)
Hash 56caa7c5c72805b2ef32548fe1e47274
47001085f4c116c6ab42e216afda72e055a9db73
028f5f8a2b33df94558edaa9e8a8e85a2b07961b2378710ab3454d7c3d67f041
GET /upload/vod/20221004-1/e469db52341e734950e8b14a2598f2c0.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 231642
Last-Modified: Mon, 03 Oct 2022 16:18:33 GMT
Connection: keep-alive
ETag: "633b0b59-388da"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352536705082.gif
200 OK 423 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352536705082.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 423 kB (423091 bytes)
Hash 05cb648d84c2606c9892128f3ae9892d
aacbe8019ae2afaf01cb75f291ecb852ab21e94e
1ecea29ead7cf4e13e61b83bf6b40832727c259807f3a5f963f6ba435ce0eeb1
GET /static/uploads/image/x22/20221021/1666352536705082.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sun, 20 Nov 2022 11:59:55 GMT
ETag: "1668945595"
Expires: Tue, 20 Dec 2022 11:59:55 GMT
Last-Modified: Sun, 20 Nov 2022 11:59:55 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352830978201.gif
200 OK 385 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352830978201.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 385 kB (385063 bytes)
Hash c78be403757792bab60796cef35fe914
0f8985a3c906d190aa5a33900151b91960fab66e
7a5a1f6615520a6ec9ad88f5146eb28cafa7589934070658a90c6fa9498ca8aa
GET /static/uploads/image/x22/20221021/1666352830978201.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sun, 20 Nov 2022 11:47:19 GMT
ETag: "1668944839"
Expires: Tue, 20 Dec 2022 11:47:19 GMT
Last-Modified: Sun, 20 Nov 2022 11:47:19 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
img.lytuchuang3.com/upload/vod/20221005-1/438c5e14c2e8af7f743cbfd17066490d.jpg
200 OK 176 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221005-1/438c5e14c2e8af7f743cbfd17066490d.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 176 kB (176433 bytes)
Hash fd808e0a36f82e7088765091d76d710d
05eab4706be0f55b712145f91f61c0a786aa6ad2
bda8535670fa9da590fd2ed0f6fe22fbe06df4df9e2d1e89b201f781615d047b
GET /upload/vod/20221005-1/438c5e14c2e8af7f743cbfd17066490d.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 176433
Last-Modified: Tue, 04 Oct 2022 21:22:39 GMT
Connection: keep-alive
ETag: "633ca41f-2b131"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221005-1/325dccf1a71c32ff6d352fae3786c74e.jpg
200 OK 184 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221005-1/325dccf1a71c32ff6d352fae3786c74e.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 184 kB (183769 bytes)
Hash 734dad69f09270bf4dc778b31563a0d4
ac8be60bc8a24f8026a902f3b41f9daec6573bc4
6f37b8b36624205eae98d9b0c7da90b15cca90ae5d7bd4de40c17de93dfe75d0
GET /upload/vod/20221005-1/325dccf1a71c32ff6d352fae3786c74e.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 183769
Last-Modified: Tue, 04 Oct 2022 21:22:39 GMT
Connection: keep-alive
ETag: "633ca41f-2cdd9"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221004-1/3883507aa60ef8acb2fb0c2db246af89.jpg
200 OK 210 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221004-1/3883507aa60ef8acb2fb0c2db246af89.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 210 kB (210135 bytes)
Hash 3afb4adba2dfda2ac8071e7d4dc7d7c1
cef2af8bf63c6f566ff83dc6dd793c448b7a6720
4621e072ca7203b84b095336bf5af381d55f7b0fd389dc909f56eee88bf02c86
GET /upload/vod/20221004-1/3883507aa60ef8acb2fb0c2db246af89.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 210135
Last-Modified: Mon, 03 Oct 2022 16:18:32 GMT
Connection: keep-alive
ETag: "633b0b58-334d7"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221027-1/9c65165b780a4f033cb1de7b6d562f64.jpg
200 OK 11 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221027-1/9c65165b780a4f033cb1de7b6d562f64.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 4eca08b0236c5df409e15ae166dcf96e
6d5a5daddf154d5560bcb3d51715559ec72927ed
3ba073cf4f58c141ac3e6e12261c79b308ceaf310e3f56d1532a9cc6f9822a6c
GET /upload/vod/20221027-1/9c65165b780a4f033cb1de7b6d562f64.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 11175
Last-Modified: Wed, 26 Oct 2022 16:05:43 GMT
Connection: keep-alive
ETag: "63595ad7-2ba7"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
www.tnnde.com/
200 OK 16 kB IP
Hash 7925682b2a4cb626e211de09f9f00378
9ca3f70d82862461a5c51973842c26370b6fdc7e
d7019460e8c960ed57c3b60f0985688408223c76b650bc96f5031c51d4ed7eeb
GET / HTTP/1.1
Host: www.tnnde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 09:00:50 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: PHPSESSID=60bmgq80tkdm2r093e66p77rk8; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352753192348.gif
200 OK 429 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352753192348.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 429 kB (428593 bytes)
Hash 60de0e198b93e9f487d4f1c77ed5db88
fa3070711f791e218c5235ff20bba7c086697f75
ab8489fad65bf627642df428a3ba8b3733ce209f60b5c5e4064d76a0d160dd41
GET /static/uploads/image/x22/20221021/1666352753192348.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sun, 20 Nov 2022 11:52:27 GMT
ETag: "1668945147"
Expires: Tue, 20 Dec 2022 11:52:27 GMT
Last-Modified: Sun, 20 Nov 2022 11:52:27 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
img.lytuchuang3.com/upload/vod/20221005-1/6e81b917a3f4a6760f111c4c8b4e653c.jpg
200 OK 134 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221005-1/6e81b917a3f4a6760f111c4c8b4e653c.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 680x453, components 3\012- data
Size 134 kB (133562 bytes)
Hash 373d2db7f1d73660e631d8e71690ab5b
4a7b94576b855694af75d3edd6410e187881fdb5
781a57b574a6a060c5c2355ed23d8b916004cd442b65f2eefaa44196b4871500
GET /upload/vod/20221005-1/6e81b917a3f4a6760f111c4c8b4e653c.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 133562
Last-Modified: Tue, 04 Oct 2022 21:22:39 GMT
Connection: keep-alive
ETag: "633ca41f-209ba"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352689794967.gif
200 OK 424 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352689794967.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 424 kB (423804 bytes)
Hash 71806e46fb21247b29a90bee12b9de20
99bd9bb01b41a4696101ff5354f597b336db5ef1
32a4191b7f2325c5a589f6068bc9b2275363dfa921d154a53a25b7a81576ae0a
GET /static/uploads/image/x22/20221021/1666352689794967.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sun, 20 Nov 2022 11:44:59 GMT
ETag: "1668944699"
Expires: Tue, 20 Dec 2022 11:44:59 GMT
Last-Modified: Sun, 20 Nov 2022 11:44:59 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352586148177.gif
200 OK 412 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352586148177.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 412 kB (412238 bytes)
Hash 0451e1c2285cd71154effcd37645e7a5
a819601be3a9a499bc071e00974295538e3cf5a4
a6f4e4a3a16ac559b52d53f6fbbd717772dcf495ce028e3f8a2fa75c579ce955
GET /static/uploads/image/x22/20221021/1666352586148177.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Mon, 21 Nov 2022 04:47:15 GMT
ETag: "1669006035"
Expires: Wed, 21 Dec 2022 04:47:15 GMT
Last-Modified: Mon, 21 Nov 2022 04:47:15 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352725204370.gif
200 OK 310 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221021/1666352725204370.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 310 kB (309605 bytes)
Hash 4071e48a26d7faf69c698215927af245
2e115baa1a19fe6ece7f80ec422b55cad3e8d924
e2f177931a0773f3fadbccb3a6e28e40016f282eb2fb83bc673aaf646cde14d7
GET /static/uploads/image/x22/20221021/1666352725204370.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Mon, 21 Nov 2022 04:47:15 GMT
ETag: "1669006035"
Expires: Wed, 21 Dec 2022 04:47:15 GMT
Last-Modified: Mon, 21 Nov 2022 04:47:15 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x26/20221021/1666352843186044.gif
200 OK 258 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x26/20221021/1666352843186044.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 258 kB (258053 bytes)
Hash b6ecc8ec3fb4f22e2293637e747ee5eb
75a7b5d6be538451d9475576be0760684a9ff0be
b5597fb987ebefa6df3806fa34ac00148690b3df6334730ccf1b77edf63e7191
GET /static/uploads/image/x26/20221021/1666352843186044.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sun, 20 Nov 2022 11:47:31 GMT
ETag: "1668944851"
Expires: Tue, 20 Dec 2022 11:47:31 GMT
Last-Modified: Sun, 20 Nov 2022 11:47:31 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x26/20221021/1666352858716040.gif
200 OK 245 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x26/20221021/1666352858716040.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 245 kB (244765 bytes)
Hash 33f38e6023b5ede462de22f215182bf9
e01668a18648c782e2bdadb24639fa8021711b76
7b2c93fd22f9d5f9827ed4538974ffc29cef5e34a20845b38c521369eb9afb4f
GET /static/uploads/image/x26/20221021/1666352858716040.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sun, 20 Nov 2022 11:47:50 GMT
ETag: "1668944870"
Expires: Tue, 20 Dec 2022 11:47:50 GMT
Last-Modified: Sun, 20 Nov 2022 11:47:50 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
img.lytuchuang3.com/upload/vod/20221027-1/50bc5436045792d369af9505f5528b7e.jpg
200 OK 12 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221027-1/50bc5436045792d369af9505f5528b7e.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 970c659ed40314efab53886deb5f3521
e456c9edcff9c4732d9169dfc1c202fe0bb9353a
57969215b6e5977990fcbc204210c3c6dda7625e583718737db3dd8d615a7b85
GET /upload/vod/20221027-1/50bc5436045792d369af9505f5528b7e.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 12039
Last-Modified: Wed, 26 Oct 2022 16:05:43 GMT
Connection: keep-alive
ETag: "63595ad7-2f07"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
66885aaa.com/66d2b99806f3494995ad78ddf3332e8a.gif
200 OK 1.1 MB URL HTTP/1.1 66885aaa.com/66d2b99806f3494995ad78ddf3332e8a.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 1.1 MB (1088957 bytes)
Hash c3fda8fcab58d831194fa48d60f24840
4755a74760f5285eb2f50032994405cd7be599fe
13324eddc11d8a9195a44d7bf66e4086552b2a4d78dbed4b07d42badf95ae927
Analyzer Verdict Alert quad9 Sinkholed
GET /66d2b99806f3494995ad78ddf3332e8a.gif HTTP/1.1
Host: 66885aaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6385b791-109dbd"
Date: Mon, 05 Dec 2022 00:15:33 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Tue, 29 Nov 2022 07:41:05 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us1-cdnb-20
Content-Length: 1088957
api.share.baidu.com/s.gif?l=http://bsdyrf1.com/
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://bsdyrf1.com/
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://bsdyrf1.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Thu, 08 Dec 2022 09:01:28 GMT
585227ybn.com/1b9d57cf851e40978ac0f6c807791304.gif
200 OK 859 kB URL HTTP/1.1 585227ybn.com/1b9d57cf851e40978ac0f6c807791304.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 859 kB (858698 bytes)
Hash e36f7cc08f92892f5a2451c26c3645e8
0d4256936ebdba0958c265e8ee7336fcce031797
17b603c1da1ed967f2ade688c00a7189afc64cd94d188c72a215cc440e347ee0
Analyzer Verdict Alert quad9 Sinkholed
GET /1b9d57cf851e40978ac0f6c807791304.gif HTTP/1.1
Host: 585227ybn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6385b8f5-d1a4a"
Date: Tue, 29 Nov 2022 08:09:30 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Tue, 29 Nov 2022 07:47:01 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-28
Content-Length: 858698
img.lytuchuang3.com/upload/vod/20221027-1/5eed3ec56f85984344d4dc842a5b5c7f.jpg
200 OK 7.3 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221027-1/5eed3ec56f85984344d4dc842a5b5c7f.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 320x240, components 3\012- data
Hash 68b30fee177e0073979345ea33193fd6
27e8fae539bf4a34ac5ec850066c037b1d49a21c
6a9c252238455345a1ef1fbd0ba86e4f8bb76015cddba675139894d6499b908f
GET /upload/vod/20221027-1/5eed3ec56f85984344d4dc842a5b5c7f.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 7346
Last-Modified: Wed, 26 Oct 2022 16:05:43 GMT
Connection: keep-alive
ETag: "63595ad7-1cb2"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221027-1/00dd1f3e02c66b1d9bd5ad9ebb393188.jpg
200 OK 8.7 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221027-1/00dd1f3e02c66b1d9bd5ad9ebb393188.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 320x240, components 3\012- data
Hash 5a907b524cd637bb16bac184e3fd1a2d
7af247d5d24c2e484c1cdf7e78e380c244fa470b
e81058405228c1885e3fe9300935b4cc73491624da2bf6d24bb06e4e510f96ff
GET /upload/vod/20221027-1/00dd1f3e02c66b1d9bd5ad9ebb393188.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 8662
Last-Modified: Wed, 26 Oct 2022 16:05:42 GMT
Connection: keep-alive
ETag: "63595ad6-21d6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.lytuchuang3.com/upload/vod/20221027-1/e771ae2a71d4052a9938502ff7e43cb1.jpg
200 OK 9.4 kB URL HTTP/1.1 img.lytuchuang3.com/upload/vod/20221027-1/e771ae2a71d4052a9938502ff7e43cb1.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash d24db731923403cd328aae86dd0bcc9b
89a5bf4229b471e26ac3e7410416f5152a70ae61
30687d6c07092e4c0a587436c941bf9a55063264b3381f4e7430ca8acb4904f9
GET /upload/vod/20221027-1/e771ae2a71d4052a9938502ff7e43cb1.jpg HTTP/1.1
Host: img.lytuchuang3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Thu, 08 Dec 2022 09:01:28 GMT
Content-Type: image/jpeg
Content-Length: 9367
Last-Modified: Wed, 26 Oct 2022 16:05:43 GMT
Connection: keep-alive
ETag: "63595ad7-2497"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
kzett.com/65e7e65f41ad1c2cb20bb39e08e6b041.gif
200 OK 497 kB URL HTTP/2 kzett.com/65e7e65f41ad1c2cb20bb39e08e6b041.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 497 kB (497175 bytes)
Hash 308dfc606f51875abeaddaf59af06f44
fbc86f1ca7aaf6132c4643c7138b539a170fb6c1
1e1e5e16afd234768c984ee2f2551abbf8af6de533f12b80dbee9ab06a857bf3
GET /65e7e65f41ad1c2cb20bb39e08e6b041.gif HTTP/1.1
Host: kzett.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 497175
last-modified: Thu, 01 Dec 2022 15:50:53 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Dec 2022 10:42:28 GMT
etag: "308dfc606f51875abeaddaf59af06f44"
x-cache: Hit from cloudfront
via: 1.1 5f0e4b6c5dc81a6ef5ba5add70d69fb0.cloudfront.net (CloudFront)
x-amz-cf-pop: SIN52-P1
x-amz-cf-id: WpSvBsyUZg18X4rFQeotwmbpKCD7wLNCgDo8A5-y0aHbQdfjLiAASA==
age: 80340
X-Firefox-Spdy: h2
8357.app/images/222.gif
200 OK 532 kB IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 532 kB (531920 bytes)
Hash e74d49a1c2617c360791835f66cfcdfa
c6df43d2eb3d74a1d9786d8a79a379eff3ad1461
7ba844b237d93bbc66b51a5dcd87f459a40d4a07a0fdbb9518c9ebe97979c519
GET /images/222.gif HTTP/1.1
Host: 8357.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 11 Nov 2022 14:56:31 GMT
Accept-Ranges: bytes
ETag: "c080e3c8ddf5d81:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 08 Dec 2022 09:00:59 GMT
Content-Length: 531920
tpkj2222.com/img/k80m/oJ8rVeomP.gif
200 OK 213 kB URL HTTP/1.1 tpkj2222.com/img/k80m/oJ8rVeomP.gif
IP
ASN #59371 Dimension Network & Communication Limited
File type GIF image data, version 89a, 960 x 80\012- data
Size 213 kB (212917 bytes)
Hash d1931dd316b9ac2d1bd98a9c89bb2c77
5660ca5156b14a4b0df59089738774977eab5357
48886aed2c4e673776c75db728e4fddc8647a559dee0d8f3549cc6d7a5062053
GET /img/k80m/oJ8rVeomP.gif HTTP/1.1
Host: tpkj2222.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Dec 2022 09:01:27 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"423944-1669660103000"
Last-Modified: Mon, 28 Nov 2022 18:28:23 GMT
Expires: Fri, 23 Dec 2022 09:01:27 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip
Nginx-Cache: HIT, HIT
8499159.com/8499/s/960x60.gif
200 OK 331 kB URL HTTP/2 8499159.com/8499/s/960x60.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 331 kB (331043 bytes)
Hash 09f29e56330449942571a66f47f82fb5
30fc3421671176f6f724f32ee910470f03661ddc
b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
GET /8499/s/960x60.gif HTTP/1.1
Host: 8499159.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 09:01:28 GMT
content-type: image/gif
content-length: 331043
last-modified: Wed, 09 Nov 2022 06:23:10 GMT
etag: "50d23-5ed03b0c9c3d8"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
sysupload.csiteadmin.com/static/uploads/image/x26/20221021/1666352814488575.gif
200 OK 460 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x26/20221021/1666352814488575.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 460 kB (459715 bytes)
Hash d4e74dbadc18d9e35bc48b815b8f37de
07562effc5109ea41403466d5d8795ededa57030
7973bc38aaf7332a150691990b844ce1efb79ab82e4d262fcd5901e77a53112b
GET /static/uploads/image/x26/20221021/1666352814488575.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sun, 20 Nov 2022 11:59:55 GMT
ETag: "1668945595"
Expires: Tue, 20 Dec 2022 11:59:55 GMT
Last-Modified: Sun, 20 Nov 2022 11:59:55 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
bsdyrf1.com/favicon.ico
404 Not Found 7.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /favicon.ico HTTP/1.1
Host: bsdyrf1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bsdyrf1.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
X-Powered-By: PHP/7.0.33, ASP.NET
Date: Thu, 08 Dec 2022 09:01:16 GMT
Content-Length: 7199
p.qlogo.cn/qqmail_head/PiajxSqBRaEL6CJZGYgAAMVv8Eqb0kKqmk8ZBGxSry9wDdbDrX4ZxIxycHEPiaOJdHNib4U7xBWDrs/0
200 OK 331 kB URL HTTP/2 p.qlogo.cn/qqmail_head/PiajxSqBRaEL6CJZGYgAAMVv8Eqb0kKqmk8ZBGxSry9wDdbDrX4ZxIxycHEPiaOJdHNib4U7xBWDrs/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 331 kB (331043 bytes)
Hash 09f29e56330449942571a66f47f82fb5
30fc3421671176f6f724f32ee910470f03661ddc
b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
GET /qqmail_head/PiajxSqBRaEL6CJZGYgAAMVv8Eqb0kKqmk8ZBGxSry9wDdbDrX4ZxIxycHEPiaOJdHNib4U7xBWDrs/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Thu, 08 Dec 2022 09:01:28 GMT
content-type: image/gif
content-length: 331043
vary: Accept,Origin
last-modified: Tue, 08 Nov 2022 23:41:39 GMT
cache-control: max-age=2592000
x-delay: 54536 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 331043
chid: 0
fid: 0
x-nws-log-uuid: d737e192-afa4-4dc8-8e26-328f22cd65c4
X-Firefox-Spdy: h2
img.u1338.com/images/638dc5258f3963d46af13147.gif
302 Found 0 B URL HTTP/2 img.u1338.com/images/638dc5258f3963d46af13147.gif
IP
ASN #134835 Starry Network Limited
GET /images/638dc5258f3963d46af13147.gif HTTP/1.1
Host: img.u1338.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bsdyrf1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/367a61eddc794c9d953f4404ad091462
X-Firefox-Spdy: h2
136.0.94.156
43.154.254.32
185.239.226.87
104.18.21.226
23.33.119.27
47.246.44.225
103.143.19.103
93.184.220.29