r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14873
Expires: Sun, 05 Feb 2023 08:42:50 GMT
Date: Sun, 05 Feb 2023 04:34:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18071
Expires: Sun, 05 Feb 2023 09:36:08 GMT
Date: Sun, 05 Feb 2023 04:34:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6210
Expires: Sun, 05 Feb 2023 06:18:27 GMT
Date: Sun, 05 Feb 2023 04:34:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 04:33:54 GMT
content-type: application/json
age: 63
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9pRnXc2J6c9c1zpc+0otCpaWYDooq6BtLnf+o9XQ6WskAf2oT9VI4eOowFhT4VGovok309/y3wY=
x-amz-request-id: TT5N3CT189JS4FYY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 04:24:19 GMT
age: 638
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 04:34:57 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 04:07:20 GMT
age: 1658
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
hlj.fun/archives/16395/
200 OK 92 kB IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3023), with CRLF, LF line terminators
Hash 8be5ffc7b3e6b4d1d371a8313c8b379f
2be7db770e362a56bdf80913f04b9ab7902e4d0f
162b1588380d9aba71a88e46bf3643e452bce213991b9ef2a2845fba38912aac
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
GET /archives/16395/ HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
X-Powered-By: PHP/7.3.6
X-Pingback: http://hlj.fun/action/xmlrpc
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15068
Expires: Sun, 05 Feb 2023 08:46:06 GMT
Date: Sun, 05 Feb 2023 04:34:58 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 04:34:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hlj.fun/usr/themes/Mirages/css/7.10.0/common.css
200 OK 9.2 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/css/7.10.0/common.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text
Hash 6a2ee461713470fd2233f9ebe74b10e8
6dd7d9d2c020c338176f6e89b7b102db060233bd
907bda54a1a3a2a9e436cf0c3dd943e00d17c9bf90ac6ddb1d96a6772f64b170
GET /usr/themes/Mirages/css/7.10.0/common.css HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:58 GMT
Content-Type: text/css
Content-Length: 9184
Last-Modified: Mon, 29 Aug 2022 09:15:06 GMT
ETag: "630c839a-23e0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=G-NGV4MXSYPX
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-NGV4MXSYPX
IP
File type ASCII text, with very long lines (21849)
Hash 8078c4f5cbdd29d37810aa58fc3bde39
1d0ccf6ebbea6444eff4c2db36835274e75308bd
4244e1c1e9a10eef72ac9091cbabbcd3d28da9dd22f46c3264597d56f1bd6ed1
GET /gtag/js?id=G-NGV4MXSYPX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 04:34:58 GMT
expires: Sun, 05 Feb 2023 04:34:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77543
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 04:34:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NoxIFsXLrKOp9KDoDqNUkg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: plSee644MuLk5FVmiY5GXB7PGbo=
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash b737c815d11ec88b58593d91b2499438
2e0a38db0040130ae9e24c7c978f1265bb82b793
dfdfa4304d4f1b24d55ddf42b4b1eeb6c524e7f00ba64105139cda5500b36402
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 04:34:58 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 01:17:11 GMT
Expires: Thu, 09 Feb 2023 01:17:10 GMT
Etag: "2e0a38db0040130ae9e24c7c978f1265bb82b793"
Cache-Control: max-age=333131,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7948efccbb600b02-OSL
hlj.fun/usr/themes/Mirages/static/jquery/2.2.4/jquery.min.js
200 OK 86 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/static/jquery/2.2.4/jquery.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /usr/themes/Mirages/static/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:58 GMT
Content-Type: application/javascript
Content-Length: 85578
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-14e4a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/plugins/tbxw/js/zzz.js
200 OK 51 kB URL HTTP/1.1 hlj.fun/usr/plugins/tbxw/js/zzz.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (48316)
Hash 78dab9fcf576de8cba46edd716dd2309
7113abe41f95159f9bfccf70d01bdda1055af2ad
7c66d6c8e2c470780513a282b66e2b5b7429ed863d6a0ecd6054b38dcda004b5
GET /usr/plugins/tbxw/js/zzz.js HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:58 GMT
Content-Type: application/javascript
Content-Length: 50811
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-c67b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/themes/Mirages/css/7.10.0/mirages.min.css
200 OK 188 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/css/7.10.0/mirages.min.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65345)
Size 188 kB (188387 bytes)
Hash 1bc8f0ded4e1d999ae7724297ff5fd33
824b08b96cfaba481710aae6020b16167c20bc70
3ddffd9cc31ee86ead963895fec57d7d9e722b2457aef4df6e9b0958ec79b869
GET /usr/themes/Mirages/css/7.10.0/mirages.min.css HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:58 GMT
Content-Type: text/css
Content-Length: 188387
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-2dfe3"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/themes/Mirages/js/7.10.0/mirages.main.min.js
200 OK 146 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/js/7.10.0/mirages.main.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1366)
Size 146 kB (145790 bytes)
Hash beb8d1d3bc00618859c71ecfc93a6930
9401b2465c1fd8bb2139fb4202a61e2f2c6e603c
b955ebaef9b2d587c1d82d6fb672b9a15d6b0c50aeaa677eb6214005c53cc44f
GET /usr/themes/Mirages/js/7.10.0/mirages.main.min.js HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:58 GMT
Content-Type: application/javascript
Content-Length: 145790
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-2397e"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/plugins/DPlayer/assets/DPlayer.min.css
200 OK 45 kB URL HTTP/2 hlj.fun/usr/plugins/DPlayer/assets/DPlayer.min.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (36675)
Hash 31ac9b1a5a7f018dcc9a0e0f66261c08
f7d19655f873b813ffba5d1a17145c91f82631b8
fba0d89e59046d8bd52df0d3b28850b3af41aa4959233634286087af7d741b03
GET /usr/plugins/DPlayer/assets/DPlayer.min.css HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.12.2
date: Sun, 05 Feb 2023 04:34:59 GMT
content-type: text/css
content-length: 45249
last-modified: Wed, 20 Jul 2022 10:25:22 GMT
etag: "62d7d812-b0c1"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
X-Firefox-Spdy: h2
hlj.fun/usr/plugins/DPlayer/assets/player.js
200 OK 478 B URL HTTP/2 hlj.fun/usr/plugins/DPlayer/assets/player.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 92c350574e6ee1c047ac07112cfd84de
9f746d0ff574167b6039a263a974f63f60b9a04e
22ff157b8298b56b2afee6a550acbea96d707b31235a502965114f1ccb734460
GET /usr/plugins/DPlayer/assets/player.js HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.12.2
date: Sun, 05 Feb 2023 04:34:59 GMT
content-type: application/javascript
content-length: 478
last-modified: Tue, 19 Jul 2022 09:46:10 GMT
etag: "62d67d62-1de"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
X-Firefox-Spdy: h2
hlj.fun/usr/plugins/tbxw/zw.png?change=1
200 OK 8.8 kB URL HTTP/1.1 hlj.fun/usr/plugins/tbxw/zw.png?change=1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 750 x 463, 8-bit colormap, non-interlaced\012- data
Hash 0d28cab0af081db2bd0fc53d05e3bf3b
ec412d675cd475e536df58d8cef394122273031b
c1f5ef60a5104f08466b489a2bbe1343c30530a0ac0eb15365ec674d9c80a9b0
GET /usr/plugins/tbxw/zw.png?change=1 HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:59 GMT
Content-Type: image/png
Content-Length: 8775
Last-Modified: Thu, 11 Aug 2022 03:51:37 GMT
ETag: "62f47cc9-2247"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/themes/Mirages/images/spinner.svg
200 OK 3.8 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/images/spinner.svg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (324)
Hash 42c114a299760f9a5eb2838eadde043c
f466f94fc5d584a02dc12b8fa81a5e0c8fbf05ed
fcbb19b52032dce2b7e1215ae31fa95d33e6bea5737d5a6771c58cc06e0eec87
GET /usr/themes/Mirages/images/spinner.svg HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:59 GMT
Content-Type: image/svg+xml
Content-Length: 3814
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-ee6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/themes/Mirages/images/7.10.0/share-mark-active.png
200 OK 813 B URL HTTP/1.1 hlj.fun/usr/themes/Mirages/images/7.10.0/share-mark-active.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 54 x 50, 8-bit colormap, non-interlaced\012- data
Hash f081e0bcc2cd3e312d249c6d32248a47
fb0ca312aebc1e36f9de889d4ed005e86df846b5
3329556038d948dfafbb12d2faabf81432e24d7760dd31268c49f3eb233470e1
GET /usr/themes/Mirages/images/7.10.0/share-mark-active.png HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:59 GMT
Content-Type: image/png
Content-Length: 813
Last-Modified: Thu, 11 Aug 2022 03:51:37 GMT
ETag: "62f47cc9-32d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/themes/Mirages/images/7.10.0/share-mark.png
200 OK 699 B URL HTTP/1.1 hlj.fun/usr/themes/Mirages/images/7.10.0/share-mark.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 52 x 50, 8-bit colormap, non-interlaced\012- data
Hash 268773e9c5717cc1ce8d2a4f9cecf36d
8a5bca596ea5aaa19a82be09436056ad85a1c675
d7a9a9d37422f4f6971b0273da76ab90212aa8f38b14788059f0f414f461565e
GET /usr/themes/Mirages/images/7.10.0/share-mark.png HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:59 GMT
Content-Type: image/png
Content-Length: 699
Last-Modified: Thu, 11 Aug 2022 03:51:37 GMT
ETag: "62f47cc9-2bb"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/logo.png
200 OK 6.6 kB IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash ee8cc1cf49552e9df90727d46f0df2b4
6feace1189fc5536dc6c73975321d0c4ef743b35
669beaabbc252144afad6ba0627df6580552435aca000bde31ce4599408cdce0
GET /usr/logo.png HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:59 GMT
Content-Type: image/png
Content-Length: 6599
Last-Modified: Thu, 28 Jul 2022 09:18:00 GMT
ETag: "62e25448-19c7"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/plugins/DPlayer/assets/DPlayer.min.js
200 OK 168 kB URL HTTP/2 hlj.fun/usr/plugins/DPlayer/assets/DPlayer.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65536), with no line terminators
Size 168 kB (168399 bytes)
Hash 1fe194f5f7f2edfb586c0f60d55d37a3
95e0729d14988764491787eafdd28e626fe000ee
2ab42f4512d370c64932307977a669b7a87cfd61a6d6d6ae2cdcf19e2898cded
GET /usr/plugins/DPlayer/assets/DPlayer.min.js HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.12.2
date: Sun, 05 Feb 2023 04:34:59 GMT
content-type: application/javascript
content-length: 168399
last-modified: Fri, 22 Jul 2022 07:51:58 GMT
etag: "62da571e-291cf"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Sun, 05 Feb 2023 07:11:34 GMT
Date: Sun, 05 Feb 2023 04:35:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Sun, 05 Feb 2023 07:11:34 GMT
Date: Sun, 05 Feb 2023 04:35:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Sun, 05 Feb 2023 07:11:34 GMT
Date: Sun, 05 Feb 2023 04:35:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9394
Expires: Sun, 05 Feb 2023 07:11:34 GMT
Date: Sun, 05 Feb 2023 04:35:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75caf9549ac23c827c10d6baabb84884
e8391e4046acb91cd4a6113974fda1c44dcd3865
a01e3a9aaa0b0fa156303bcbf38c1c45ea6abe8d0a052734b05ea4da82f176c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7060
x-amzn-requestid: 9379b64e-3a3f-4b8d-aba2-bc3cd7dab98f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3cgFCkIAMFrhA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c4f-6ac6da215407497043249929;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:51 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 75uKxGlJDSXzIUgR5Rm4f13SClTT1UIDLgbkTrFDEDvKmGmViQ3Djg==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:25:50 GMT
age: 22150
etag: "e8391e4046acb91cd4a6113974fda1c44dcd3865"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7a466d89c75ff3459b7328591db52cf
c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:51:26 GMT
age: 24214
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F685cff1e-52eb-4db3-b937-986385529f6d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F685cff1e-52eb-4db3-b937-986385529f6d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a118e823631b0566a87aaa72123af893
286a0ef82fe504a7721b98a726bd6ef28198393d
57cd7640cfaa81f2dd7deddefccfbf024064d92ce5cadafae27bfa9e9136dbcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F685cff1e-52eb-4db3-b937-986385529f6d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10109
x-amzn-requestid: 5fc8bfc5-459e-476a-b74e-51de6fe31cea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fjbUrHEiIAMFxSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d7a5b7-739df0b602e9d9001495a8a7;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 11:10:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -FXyVXIcXGusNAfcF7uEimmu2d1cLzlwMp37ooaVv0lpkN7X2Fi86A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:59:43 GMT
age: 2117
etag: "286a0ef82fe504a7721b98a726bd6ef28198393d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 062e186a259eda97173695240a492c63
9b476a4ec219667f560b88199a3a4e4b0a93b579
d18570d3c4ada689b5c2a99b0783ce41c629bd125e6683cf225e01b7032f14a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12256
x-amzn-requestid: 1b959eb9-cf69-414c-b57b-4a63277d709c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvgx-EhgoAMF2wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc7b3f-2c58e8ac2aee8a8f409a93a0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 03:10:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dvxlk1iSyNfjmNRI_8HcmhG9_xe0ZlaZ0Pzj0H9EBR6wwXKg0L7YVQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 04:43:21 GMT
age: 85899
etag: "9b476a4ec219667f560b88199a3a4e4b0a93b579"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a85f9ff-45f7-4467-9bcf-99adfc764c87.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a85f9ff-45f7-4467-9bcf-99adfc764c87.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e011d457dc1153c2be3958161c109d4c
7579fae4b76a48eba7acd8f8572db91191db0c19
03156808efbab06a9a28138dd185c7870a1144f758b9743878f480de863eb884
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a85f9ff-45f7-4467-9bcf-99adfc764c87.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4493
x-amzn-requestid: 83e58e1a-ee1d-46a9-861c-1119166df08b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJsrFmmoAMFkdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcb7-70db4dc502641c010e29fd08;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:01:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fnUx-d1GCQ_kAeCwkEaS7f0EvS1WfNBtuk0Jhi6Q0IWpWX_PXDBR2w==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 10:35:52 GMT
age: 64748
etag: "7579fae4b76a48eba7acd8f8572db91191db0c19"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01d9feca-e9dc-4ee4-9694-bcc983e3a7c1.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01d9feca-e9dc-4ee4-9694-bcc983e3a7c1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d632f8be93820b9746f76146fe3ff0e
7e5e9b16819af678ba84ddb6f45c073e659e2f4e
26ad66cf5e4fe4de99ad31b5c4f0fa3d05c085be04610de8ad80989528c100bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01d9feca-e9dc-4ee4-9694-bcc983e3a7c1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6434
x-amzn-requestid: ccf74c35-c654-4a9a-8121-ab27fc4cd862
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WWYFbJoAMFgSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f5-10dedb6a287acd2b10cdfdb4;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3bv0yNuzTWh742AZFesuU0caKmg0nMFc3P0bLYkhGd-TAeg5R9W_vQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:51:28 GMT
age: 24212
etag: "7e5e9b16819af678ba84ddb6f45c073e659e2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hlj.fun/usr/plugins/DPlayer/plugin/hls.min.js
200 OK 220 kB URL HTTP/2 hlj.fun/usr/plugins/DPlayer/plugin/hls.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (31978)
Size 220 kB (219867 bytes)
Hash f79f1fd1d5db2c347e66ff3e45aefb1f
d44ab2bfd39b9570f7aafc52968b6462632054c3
6baad05958e511e917f7466f4a21fca50cf488eb18bf90f9ebc80d589b96bb20
GET /usr/plugins/DPlayer/plugin/hls.min.js HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.12.2
date: Sun, 05 Feb 2023 04:34:59 GMT
content-type: application/javascript
content-length: 219867
last-modified: Tue, 19 Jul 2022 09:46:10 GMT
etag: "62d67d62-35adb"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
accept-ranges: bytes
X-Firefox-Spdy: h2
hlj.fun/usr/themes/Mirages/css/7.10.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/css/7.10.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /usr/themes/Mirages/css/7.10.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://hlj.fun/usr/themes/Mirages/css/7.10.0/mirages.min.css
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:34:59 GMT
Content-Type: application/octet-stream
Content-Length: 77160
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-12d68"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/bg-header-base.png
200 OK 3.9 kB URL HTTP/1.1 hlj.fun/usr/bg-header-base.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 112 x 112, 8-bit colormap, non-interlaced\012- data
Hash f858eaab104cd1f15cf2d900f7718164
1939bb50789fac52be235c6b5a4bcee5e22dc461
ccc0c1550eeaf9a44456644f568f9caabb22241ae5e46c814ad11ebb0114ca13
GET /usr/bg-header-base.png HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:35:00 GMT
Content-Type: image/png
Content-Length: 3917
Last-Modified: Fri, 12 Aug 2022 06:34:46 GMT
ETag: "62f5f486-f4d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
region1.google-analytics.com/g/collect?v=2&tid=G-NGV4MXSYPX>m=45je3210&_p=1649070641&cid=429340130.1675571739&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675571739&sct=1&seg=0&dl=http%3A%2F%2Fhlj.fun%2Farchives%2F16395%2F&dt=%E3%80%8E%E6%83%8A%E5%A4%A9%E5%A4%A7%E7%93%9C%E3%80%8F%E5%8F%B0%E6%B9%BE%E9%99%86%E5%86%9B%E5%B0%91%E5%B0%89%E5%86%9B%E5%AE%98%E9%99%88%E8%8A%AE%E8%8A%B9%20%E7%AB%9F%E7%84%B6%E5%9C%A8%E5%86%9B%E8%90%A5%E7%8E%A9%E2%80%9C%E5%88%B6%E6%9C%8D%E8%AF%B1%E6%83%91%E2%80%9D%E5%92%8C%E4%B8%8A%E5%B0%89%E8%AE%AD%E7%BB%83%E5%AE%98%E5%95%AA%E5%95%AA%E5%95%AA%20-%20%E7%BA%A2%E9%A2%86%E5%B7%BE%E7%93%9C%E6%8A%A5%20hlj.fun&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-NGV4MXSYPX>m=45je3210&_p=1649070641&cid=429340130.1675571739&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675571739&sct=1&seg=0&dl=http%3A%2F%2Fhlj.fun%2Farchives%2F16395%2F&dt=%E3%80%8E%E6%83%8A%E5%A4%A9%E5%A4%A7%E7%93%9C%E3%80%8F%E5%8F%B0%E6%B9%BE%E9%99%86%E5%86%9B%E5%B0%91%E5%B0%89%E5%86%9B%E5%AE%98%E9%99%88%E8%8A%AE%E8%8A%B9%20%E7%AB%9F%E7%84%B6%E5%9C%A8%E5%86%9B%E8%90%A5%E7%8E%A9%E2%80%9C%E5%88%B6%E6%9C%8D%E8%AF%B1%E6%83%91%E2%80%9D%E5%92%8C%E4%B8%8A%E5%B0%89%E8%AE%AD%E7%BB%83%E5%AE%98%E5%95%AA%E5%95%AA%E5%95%AA%20-%20%E7%BA%A2%E9%A2%86%E5%B7%BE%E7%93%9C%E6%8A%A5%20hlj.fun&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-NGV4MXSYPX>m=45je3210&_p=1649070641&cid=429340130.1675571739&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675571739&sct=1&seg=0&dl=http%3A%2F%2Fhlj.fun%2Farchives%2F16395%2F&dt=%E3%80%8E%E6%83%8A%E5%A4%A9%E5%A4%A7%E7%93%9C%E3%80%8F%E5%8F%B0%E6%B9%BE%E9%99%86%E5%86%9B%E5%B0%91%E5%B0%89%E5%86%9B%E5%AE%98%E9%99%88%E8%8A%AE%E8%8A%B9%20%E7%AB%9F%E7%84%B6%E5%9C%A8%E5%86%9B%E8%90%A5%E7%8E%A9%E2%80%9C%E5%88%B6%E6%9C%8D%E8%AF%B1%E6%83%91%E2%80%9D%E5%92%8C%E4%B8%8A%E5%B0%89%E8%AE%AD%E7%BB%83%E5%AE%98%E5%95%AA%E5%95%AA%E5%95%AA%20-%20%E7%BA%A2%E9%A2%86%E5%B7%BE%E7%93%9C%E6%8A%A5%20hlj.fun&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://hlj.fun
date: Sun, 05 Feb 2023 04:35:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hlj.fun/usr/themes/Mirages/images/7.10.0/favicon.ico
200 OK 6.8 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/images/7.10.0/favicon.ico
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash d2053bd39677d7bd5548bf53a3104d3f
ff6df629073a27a6c5f8afd8b62af3862654397c
e3db74065305dd56949196965f997888c855e04b1da6fff8f012db95fc275296
GET /usr/themes/Mirages/images/7.10.0/favicon.ico HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
Cookie: _ga_NGV4MXSYPX=GS1.1.1675571739.1.0.1675571739.0.0.0; _ga=GA1.1.429340130.1675571739
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:35:01 GMT
Content-Type: image/x-icon
Content-Length: 6786
Last-Modified: Thu, 11 Aug 2022 03:51:37 GMT
ETag: "62f47cc9-1a82"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 727 B IP
Hash 77ed5e517303c4240defc9269fee919a
6748e5a482bba01d06d5d21327dfdf78f0c925b0
9a113dd184283905672d345e691df3fadea1bf6dfe3a5642edfedc1c215bd4ea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1034
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 04:35:02 GMT
Etag: "63dcd025-2d7"
Last-Modified: Sun, 05 Feb 2023 04:17:48 GMT
Server: ECS (amb/6BBC)
X-Cache: HIT
Content-Length: 727
lf6-cdn-tos.bytecdntp.com/cdn/expire-1-M/clipboard.js/2.0.10/clipboard.min.js
200 OK 3.2 kB URL HTTP/2 lf6-cdn-tos.bytecdntp.com/cdn/expire-1-M/clipboard.js/2.0.10/clipboard.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (8941)
Hash a700b4fc8492f747c0488313b544aa6e
7b9f934ddf20ec43d10759537c7f7f3e023543ab
730073cffe9bdba3b68c7a488ca76b996e324a5b391977dcdba251f77ef93272
GET /cdn/expire-1-M/clipboard.js/2.0.10/clipboard.min.js HTTP/1.1
Host: lf6-cdn-tos.bytecdntp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 3163
server: nginx
etag: W/"62652ba2-234a"
date: Fri, 03 Feb 2023 23:11:52 GMT
last-modified: Sun, 24 Apr 2022 10:51:14 GMT
expires: Sun, 05 Mar 2023 23:11:52 GMT
age: 105789
cache-control: max-age=2592000
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
server-timing: inner; dur=4
x-tt-trace-host: 01244a8edae7e34df178ad63d855c7ffb1e4e9178c6c3cfaae26816ac770a69013a4a726e25a3ba27a4d8120333e497fc8741c32d76d7ea60dc8db7a36911562534590f0b47436700290dc4a36ff30659c9a349921532cfdccf291fd61572c01718441f7ad0f93db40ebcf1594e33b1521
x-tt-trace-tag: id=06;cdn-cache=hit;type=static
x-response-cache: edge_hit
x-link-via: xjp01:443;whmp02:443;
x-cache-status: HIT from KS-CLOUD-WH-MP-02-25, HIT from KS-CLOUD-XJP-FOREIGN-01-10
timing-allow-origin: *
x-response-cinfo: 91.90.42.154
x-cdn-request-id: c5bf4db3eead5bf62420de9919d2e16d
X-Firefox-Spdy: h2
hlj.fun/usr/themes/Mirages/js/7.10.0/OwO.json
200 OK 4.3 kB URL HTTP/1.1 hlj.fun/usr/themes/Mirages/js/7.10.0/OwO.json
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , Unicode text, UTF-8 text
Hash d3e4fda29ced50ec0a7ae925757edf88
354b74736eb46e2b88c496bb2adf15bd3b41d4c1
b592c814590adc31c1ac7f6c796b1ada4a48fef3da852b05b8dba731304af7a6
GET /usr/themes/Mirages/js/7.10.0/OwO.json HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
Cookie: _ga_NGV4MXSYPX=GS1.1.1675571739.1.0.1675571739.0.0.0; _ga=GA1.1.429340130.1675571739
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:35:02 GMT
Content-Type: application/json
Content-Length: 4330
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-10ea"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0f419e62b95cd29a7f6d5b4013019078
3a9d4f722fd8a6b9c77e05ac68c0b594dad49744
e90819d40628d994289595f4d3a595183a96453b475a5bc5bd05e7887f1d9b26
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165417
Date: Sun, 05 Feb 2023 04:35:03 GMT
Etag: "63df0f2f-1d7"
Expires: Tue, 07 Feb 2023 02:32:00 GMT
Last-Modified: Sun, 05 Feb 2023 02:06:39 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dzjNASfRp8FVjO6GIa9n4aKLEG_tzPB2v4pZnik-2kCH9Im9OuEmjA==
Age: 1521
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0f419e62b95cd29a7f6d5b4013019078
3a9d4f722fd8a6b9c77e05ac68c0b594dad49744
e90819d40628d994289595f4d3a595183a96453b475a5bc5bd05e7887f1d9b26
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=168546
Date: Sun, 05 Feb 2023 04:35:03 GMT
Etag: "63df0f2f-1d7"
Expires: Tue, 07 Feb 2023 03:24:09 GMT
Last-Modified: Sun, 05 Feb 2023 02:06:39 GMT
Server: ECS (dcb/7EA6)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uvuCrBpDMRAW98aTJumiXzAtolTvbBOCyfk78hBfb1GbENk8GOYimQ==
Age: 4650
hlj.fun/usr/plugins/Mirages/biaoqing/paopao/E591B5E591B5.png
200 OK 1.8 kB URL HTTP/1.1 hlj.fun/usr/plugins/Mirages/biaoqing/paopao/E591B5E591B5.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 78d497abd5829761d0e6a3b5ae3b1fc6
01b5320b476274357c927744a0d9d8949908b1a1
ca7726933b8cd96c21f892fd3cf3b7da3192ef4c82c0ca26be9e0724ead9fbbb
GET /usr/plugins/Mirages/biaoqing/paopao/E591B5E591B5.png HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
Cookie: _ga_NGV4MXSYPX=GS1.1.1675571739.1.0.1675571739.0.0.0; _ga=GA1.1.429340130.1675571739
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:35:03 GMT
Content-Type: image/png
Content-Length: 1824
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-720"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/plugins/Mirages/biaoqing/paopao/E9A699E89589.png
200 OK 1.6 kB URL HTTP/1.1 hlj.fun/usr/plugins/Mirages/biaoqing/paopao/E9A699E89589.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 8b9faca1b8c120ae7ebbf38517c634ba
d05b9124cae63c6254898f7c2c8668050c0dc5fd
7e3e9b57cadeaaf41f912051aea9f30094610b05c03c54cbf36b38a22b78370a
GET /usr/plugins/Mirages/biaoqing/paopao/E9A699E89589.png HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
Cookie: _ga_NGV4MXSYPX=GS1.1.1675571739.1.0.1675571739.0.0.0; _ga=GA1.1.429340130.1675571739
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:35:03 GMT
Content-Type: image/png
Content-Length: 1602
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-642"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
hlj.fun/usr/plugins/Mirages/biaoqing/paopao/E59090E8888C.png
200 OK 2.0 kB URL HTTP/1.1 hlj.fun/usr/plugins/Mirages/biaoqing/paopao/E59090E8888C.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 8912b46dbee59ee03c7b44f7c3ca46f5
e064089c652c772e389ec81adf483c00fcf2a667
9f4014c2d9fad7d389b7c81e688f56b0e7238cfdd292cc96fbe4089fd581af1e
GET /usr/plugins/Mirages/biaoqing/paopao/E59090E8888C.png HTTP/1.1
Host: hlj.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hlj.fun/archives/16395/
Cookie: _ga_NGV4MXSYPX=GS1.1.1675571739.1.0.1675571739.0.0.0; _ga=GA1.1.429340130.1675571739
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Sun, 05 Feb 2023 04:35:03 GMT
Content-Type: image/png
Content-Length: 1980
Last-Modified: Wed, 20 Jul 2022 10:25:22 GMT
ETag: "62d7d812-7bc"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Accept-Ranges: bytes
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 4dbb99a092a686dd0381a1f0023dea0e
9be08622124be9bf5c897c3793d673c4721f4708
0c2dc07e93800fc96f58e12d1c13a4d1cbabedb5ed9ea393dbe5e9e00244f8a0
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 04:35:03 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 15:40:00 GMT
Expires: Fri, 10 Feb 2023 15:39:59 GMT
Etag: "9be08622124be9bf5c897c3793d673c4721f4708"
Cache-Control: max-age=471295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7948efec19adb51d-OSL
images.vryunpan.cc/new/xiao/20230203/2023020312353324373.jpeg
200 OK 100 kB URL HTTP/2 images.vryunpan.cc/new/xiao/20230203/2023020312353324373.jpeg
IP
Size 100 kB (100240 bytes)
Hash 9d2bae17d83376af44ee67653243f119
503814f15b0d1d332713df4778b048d22ed1480a
00089a4db371bb7fdbeb3778c28aadd70b9b89f03120badb14df4487ad4beb66
GET /new/xiao/20230203/2023020312353324373.jpeg HTTP/1.1
Host: images.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:03 GMT
content-type: image/jpeg
content-length: 100240
server: openresty
access-control-allow-origin: *
age: 163021
content-md5: nSuuF9gzdq9E7mdlMkPxGQ==
etag: "9d2bae17d83376af44ee67653243f119"
expires: Mon, 06 Feb 2023 06:53:25 GMT
last-modified: Fri, 03 Feb 2023 06:53:22 GMT
ohc-cache-hit: chenzct66 [4], suzix117 [4]
ohc-file-size: 100240
ohc-global-saved-time: Fri, 03 Feb 2023 06:53:25 GMT
timing-allow-origin: *
x-ccdn-cachettl: 31536000
x-ccdn-expires: 31372979
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE3[10],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,8]
x-bce-content-crc32: 319303977
x-bce-debug-id: 3arJ2QFsIQ8Ggnoa1sradZCmydrDvvct2LKGPlrKyN+ODA28CO3x1a/G15wDrhcQCOfrd4yhCD0Ui8Y4gAJ9/w==
x-bce-request-id: fe5e96b1-a0b8-44a5-82c9-78618f0cbf6d
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
images.vryunpan.cc/new/xiao/20230203/2023020312353818142.jpeg
200 OK 95 kB URL HTTP/2 images.vryunpan.cc/new/xiao/20230203/2023020312353818142.jpeg
IP
Hash d0a648358a2a3c52c1a48771330754e2
2a455b05857425c8049af8f451dc2fa84244c5a9
6fb30c3486e5d45bfccfb1e0fa94614b020f2bb618b08de346f918668cea7954
GET /new/xiao/20230203/2023020312353818142.jpeg HTTP/1.1
Host: images.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:03 GMT
content-type: image/jpeg
content-length: 95040
server: openresty
access-control-allow-origin: *
age: 163021
content-md5: 0KZINYoqPFLBpIdxMwdU4g==
etag: "d0a648358a2a3c52c1a48771330754e2"
expires: Mon, 06 Feb 2023 06:53:25 GMT
last-modified: Fri, 03 Feb 2023 06:53:22 GMT
ohc-cache-hit: chenzct57 [4], bdix57 [4]
ohc-file-size: 95040
ohc-global-saved-time: Fri, 03 Feb 2023 06:53:25 GMT
timing-allow-origin: *
x-ccdn-cachettl: 31536000
x-ccdn-expires: 31372979
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE11[19],EU-GER-frankfurt-GLOBAL1-CACHE11[0,TCP_HIT,19]
x-bce-content-crc32: 3512535882
x-bce-debug-id: aRoEoV0iAzUx2xkpIoS1lT6BQkhMmRqWs9WOge4UF6hhynVYPd07iWi4r3QU7/afnLG2XaPdK40kqvLSH+DvMw==
x-bce-request-id: 75d938b2-67a2-4914-8c60-20220c34a3d0
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
images.vryunpan.cc/new/xiao/20230203/2023020312353716606.jpeg
200 OK 89 kB URL HTTP/2 images.vryunpan.cc/new/xiao/20230203/2023020312353716606.jpeg
IP
Hash 5afc5e653b4c6bc80e78a4295183d7ca
52a5ec617d2e2202945c99bd180476388d0ceb45
366bbfc65d1f4b7ae13c9175bf99361f7239d4cae8342ef5692efea21d432162
GET /new/xiao/20230203/2023020312353716606.jpeg HTTP/1.1
Host: images.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:03 GMT
content-type: image/jpeg
content-length: 88688
server: openresty
access-control-allow-origin: *
age: 163021
content-md5: WvxeZTtMa8gOeKQpUYPXyg==
etag: "5afc5e653b4c6bc80e78a4295183d7ca"
expires: Mon, 06 Feb 2023 06:53:25 GMT
last-modified: Fri, 03 Feb 2023 06:53:22 GMT
ohc-cache-hit: chenzct87 [4], czix87 [4]
ohc-file-size: 88688
ohc-global-saved-time: Fri, 03 Feb 2023 06:53:25 GMT
timing-allow-origin: *
x-ccdn-cachettl: 31536000
x-ccdn-expires: 31372979
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE6[9],EU-GER-frankfurt-GLOBAL1-CACHE11[0,TCP_HIT,7]
x-bce-content-crc32: 4141981050
x-bce-debug-id: O0cJIhQcy42dpHBdrTikhzAPGSRtjlmN1zX7rEfB4+R+kgeEZR7wLsWqGpVNetDQrEeupDngAXT8taI+JpwTPQ==
x-bce-request-id: e8351964-00da-4555-88e8-ab90a1bce2f8
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 4dbb99a092a686dd0381a1f0023dea0e
9be08622124be9bf5c897c3793d673c4721f4708
0c2dc07e93800fc96f58e12d1c13a4d1cbabedb5ed9ea393dbe5e9e00244f8a0
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 04:35:03 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 15:40:00 GMT
Expires: Fri, 10 Feb 2023 15:39:59 GMT
Etag: "9be08622124be9bf5c897c3793d673c4721f4708"
Cache-Control: max-age=471295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7948efec1ca30b06-OSL
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 4dbb99a092a686dd0381a1f0023dea0e
9be08622124be9bf5c897c3793d673c4721f4708
0c2dc07e93800fc96f58e12d1c13a4d1cbabedb5ed9ea393dbe5e9e00244f8a0
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 04:35:03 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 15:40:00 GMT
Expires: Fri, 10 Feb 2023 15:39:59 GMT
Etag: "9be08622124be9bf5c897c3793d673c4721f4708"
Cache-Control: max-age=471295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7948efec1a00b523-OSL
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 4dbb99a092a686dd0381a1f0023dea0e
9be08622124be9bf5c897c3793d673c4721f4708
0c2dc07e93800fc96f58e12d1c13a4d1cbabedb5ed9ea393dbe5e9e00244f8a0
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 04:35:03 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 15:40:00 GMT
Expires: Fri, 10 Feb 2023 15:39:59 GMT
Etag: "9be08622124be9bf5c897c3793d673c4721f4708"
Cache-Control: max-age=471295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7948efec1ec90b3d-OSL
images.vryunpan.cc/new/xiao/20230203/2023020312353557007.jpeg
200 OK 74 kB URL HTTP/2 images.vryunpan.cc/new/xiao/20230203/2023020312353557007.jpeg
IP
Hash b73e252e210551186d6abe2b236c337f
92a0794a4efa3b3bd84b134c72ea702c079febb5
79d89aa4a9cce6f7cf5e17e93adbf5e71c166ec56276b2ddff85f83d9f251db6
GET /new/xiao/20230203/2023020312353557007.jpeg HTTP/1.1
Host: images.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:03 GMT
content-type: image/jpeg
content-length: 73840
server: openresty
access-control-allow-origin: *
age: 163021
content-md5: tz4lLiEFURhtar4rI2wzfw==
etag: "b73e252e210551186d6abe2b236c337f"
expires: Mon, 06 Feb 2023 06:53:25 GMT
last-modified: Fri, 03 Feb 2023 06:53:22 GMT
ohc-cache-hit: chenzct70 [4], bdix155 [4]
ohc-file-size: 73840
ohc-global-saved-time: Fri, 03 Feb 2023 06:53:25 GMT
timing-allow-origin: *
x-ccdn-cachettl: 31536000
x-ccdn-expires: 31372979
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE6[18],EU-GER-frankfurt-GLOBAL1-CACHE6[0,TCP_HIT,18]
x-bce-content-crc32: 246367059
x-bce-debug-id: jsLeMYo1v5ByOwZa+wB7WIvsc3Hu93bfy0eoz3wlH8AkISyt/GTJwD0xZ25km3XjtP6aycKrmV51heRTohapQw==
x-bce-request-id: 2604c3a5-8b15-4462-bb5b-0bfe38cabdc9
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
images.vryunpan.cc/new/xiao/20230203/2023020312353280945.jpeg
200 OK 89 kB URL HTTP/2 images.vryunpan.cc/new/xiao/20230203/2023020312353280945.jpeg
IP
Hash 6e87b718d8d0db2747e901ab377a93d6
568601e98f39cfdae1607e8f9e2ca537d193ab0d
643adfd589963247d2503f7768313f8abcdfbf0febae76d76ce66113a3599fcb
GET /new/xiao/20230203/2023020312353280945.jpeg HTTP/1.1
Host: images.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:03 GMT
content-type: image/jpeg
content-length: 89040
server: openresty
access-control-allow-origin: *
age: 163021
content-md5: boe3GNjQ2ydH6QGrN3qT1g==
etag: "6e87b718d8d0db2747e901ab377a93d6"
expires: Mon, 06 Feb 2023 06:53:25 GMT
last-modified: Fri, 03 Feb 2023 06:53:22 GMT
ohc-cache-hit: chenzct82 [4], czix228 [4]
ohc-file-size: 89040
ohc-global-saved-time: Fri, 03 Feb 2023 06:53:25 GMT
timing-allow-origin: *
x-ccdn-cachettl: 31536000
x-ccdn-expires: 31372979
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE2[21],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,20]
x-bce-content-crc32: 1995059366
x-bce-debug-id: sU7pghrD2IogQy7Arbbhfs412Mppidyccz2IhFNc8ke8JqvIJuWE1zKmqoKmQfFNtaFU5eYnJwbsxV5x6u2OGw==
x-bce-request-id: fcabffb4-0661-40e2-8a32-3d3d13fedfd1
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
images.vryunpan.cc/new/xiao/20230203/2023020312353616787.jpeg
200 OK 60 kB URL HTTP/2 images.vryunpan.cc/new/xiao/20230203/2023020312353616787.jpeg
IP
Hash 0cf4e97d751d340123296ad5637bb43b
3b1555e1b3883324ca9f6b0c7b2d3ea8549f89fb
d0ca12ae8a1577bf33070eb249ece1be1d0661af5fef10637dcd05f69ff1cdf2
GET /new/xiao/20230203/2023020312353616787.jpeg HTTP/1.1
Host: images.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:03 GMT
content-type: image/jpeg
content-length: 59584
server: openresty
access-control-allow-origin: *
age: 163021
content-md5: DPTpfXUdNAEjKWrVY3u0Ow==
etag: "0cf4e97d751d340123296ad5637bb43b"
expires: Mon, 06 Feb 2023 06:53:25 GMT
last-modified: Fri, 03 Feb 2023 06:53:22 GMT
ohc-cache-hit: chenzct54 [4], bdix105 [4]
ohc-file-size: 59584
ohc-global-saved-time: Fri, 03 Feb 2023 06:53:25 GMT
timing-allow-origin: *
x-ccdn-cachettl: 31536000
x-ccdn-expires: 31372979
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE1[18],EU-GER-frankfurt-GLOBAL1-CACHE5[0,TCP_HIT,18]
x-bce-content-crc32: 2520502427
x-bce-debug-id: aM2ZxvDscdBI6xxFjNDga4LRJk0IteKjJWiqMEoViOJ3Xe8T5t1z7QzrHx8BAYwwOKZrK23/7a4GIWOG4rihuQ==
x-bce-request-id: b00258a9-6c61-485e-a2b3-29269374c267
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 4dbb99a092a686dd0381a1f0023dea0e
9be08622124be9bf5c897c3793d673c4721f4708
0c2dc07e93800fc96f58e12d1c13a4d1cbabedb5ed9ea393dbe5e9e00244f8a0
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 04:35:04 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 15:40:00 GMT
Expires: Fri, 10 Feb 2023 15:39:59 GMT
Etag: "9be08622124be9bf5c897c3793d673c4721f4708"
Cache-Control: max-age=471295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7948efec0a9a0b02-OSL
images.vryunpan.cc/new/xiao/20230203/2023020312353016009.jpeg
200 OK 89 kB URL HTTP/2 images.vryunpan.cc/new/xiao/20230203/2023020312353016009.jpeg
IP
Hash 64fdf6b2bce512b4f64d9e5ce2ce64a5
adcf99637b10186f7973517bb01e036de9595743
d048bda0ecfa71a069b5b8febd99c163d8179891bf4dfcd85fc579ba3b3fbfc3
GET /new/xiao/20230203/2023020312353016009.jpeg HTTP/1.1
Host: images.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:04 GMT
content-type: image/jpeg
content-length: 88752
server: openresty
access-control-allow-origin: *
age: 163022
content-md5: ZP32srzlErT2TZ5c4s5kpQ==
etag: "64fdf6b2bce512b4f64d9e5ce2ce64a5"
expires: Mon, 06 Feb 2023 06:53:25 GMT
last-modified: Fri, 03 Feb 2023 06:53:22 GMT
ohc-cache-hit: chenzct73 [4], wzix73 [4]
ohc-file-size: 88752
ohc-global-saved-time: Fri, 03 Feb 2023 06:53:25 GMT
timing-allow-origin: *
x-ccdn-cachettl: 31536000
x-ccdn-expires: 31372978
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE14[16],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15]
x-bce-content-crc32: 2324880310
x-bce-debug-id: r2xJ6L3aC7j/vIObknVZTzsfJhBMetpiuIE5aEZpuMEwPVGxXU6X7luu1ZBjiWZ7rccwVcJmHRvD2bdLHd+Utw==
x-bce-request-id: 20331193-0d80-4c0d-b85d-cdc94b14d6cb
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
long.lgtcpnb.cn/videos1/38708e687a845e1042aac591ae59ed15/38708e687a845e1042aac591ae59ed15.m3u8
200 OK 5.2 kB URL HTTP/2 long.lgtcpnb.cn/videos1/38708e687a845e1042aac591ae59ed15/38708e687a845e1042aac591ae59ed15.m3u8
IP
Hash 6f2613d4b44a752baf982961e09bce6a
80e227a2891cd8627f37ee484f3f10c11ddd82a5
1e825baa9e7d88397c32b888960f5d1e577efa4e99eb8c5264c1af41a6979774
GET /videos1/38708e687a845e1042aac591ae59ed15/38708e687a845e1042aac591ae59ed15.m3u8 HTTP/1.1
Host: long.lgtcpnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
date: Sat, 04 Feb 2023 06:53:24 GMT
x-powered-by: PHP/7.3.6
x-by: aws
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ztwYOMcOdmnS9Qee6JpIjTmVlPdYyve%2FTE5OUqNu3P%2FfEKSARsc86kuQb%2FAx449CDzN3YbnB0AsU1VWenidgC%2F7A831orbbLRibRyvHkbB2mF%2FYyovfNNJoMRsgNCZqBGVlfZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79417d32dbc3c393-SEA
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BOcBNRcfK9JFAFQ8rk_KIYTaPwSdN0XiwCSb3t_9XBArhDwAbVCq8g==
age: 78099
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
long.lgtcpnb.cn/videos1/e4204c97b57ead9490e28b3b37910b51/e4204c97b57ead9490e28b3b37910b51.m3u8
200 OK 6.8 kB URL HTTP/2 long.lgtcpnb.cn/videos1/e4204c97b57ead9490e28b3b37910b51/e4204c97b57ead9490e28b3b37910b51.m3u8
IP
Hash 8235a1b6912fe856e61a34d65012b50c
219ef7fe7f4feaf50c8ac938ab375082e3d59c55
c3ab0f7bf6b1525569123c78cf97a69eb6fde461de4202432eb9a250cb8850c3
GET /videos1/e4204c97b57ead9490e28b3b37910b51/e4204c97b57ead9490e28b3b37910b51.m3u8 HTTP/1.1
Host: long.lgtcpnb.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
date: Sat, 04 Feb 2023 06:53:24 GMT
x-powered-by: PHP/7.3.6
x-by: aws
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6fkhpjcBamjw73cWnXTbhqd2PN0MWmzpYFDLm536E4LUUBUROis1cmRqrqFyArOR%2BwEkE%2F3HHzd2SyMwG507gITpB9%2FGryoNsYQDWLNgdilZTj56fB9iJZckiEgFl2UzJzhjng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79417d324eeec5f5-SEA
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1QP8CqjsDt_BvsCswDZIlwTKcp3r1KYTYjwz8sqJl4RArHH9YD3C9g==
age: 78099
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
p.vryunpan.cc/videos1/38708e687a845e1042aac591ae59ed15/38708e687a845e1042aac591ae59ed150.ts?auth_key=1675493256-0-0-853fa42bdbf4c6837b2831c09d6350a0
200 OK 1.4 MB URL HTTP/2 p.vryunpan.cc/videos1/38708e687a845e1042aac591ae59ed15/38708e687a845e1042aac591ae59ed150.ts?auth_key=1675493256-0-0-853fa42bdbf4c6837b2831c09d6350a0
IP
Size 1.4 MB (1397040 bytes)
Hash 72a5b71dfbde5e44eb4214498e82ab4b
04e9f801d27bca11696f504443d71becd425e391
6bbebdaeae865d07418cb2cbcc515eaa7747b6275e8d61a4ee8c4acd7e3d1f05
GET /videos1/38708e687a845e1042aac591ae59ed15/38708e687a845e1042aac591ae59ed150.ts?auth_key=1675493256-0-0-853fa42bdbf4c6837b2831c09d6350a0 HTTP/1.1
Host: p.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:04 GMT
content-type: binary/octet-stream
content-length: 1397040
server: openresty
access-control-allow-origin: *
age: 163947
etag: "72a5b71dfbde5e44eb4214498e82ab4b"
last-modified: Fri, 03 Feb 2023 04:32:57 GMT
vary: Origin
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE3[192],EU-GER-frankfurt-GLOBAL1-CACHE5[189,TCP_MISS,191],1.1 6f32a39163a1e36ace7a71a85e2d2884.cloudfront.net (CloudFront)
x-amz-cf-id: rQu96Bjo4PAUNkATBZ6LVTcGJ43ab76DAMBrNT0acwloaN34vcqOYQ==
x-amz-cf-pop: FRA56-P7
x-ccdn-cachettl: 31536000
x-cache: Miss from cloudfront
x-content-type-options: nosniff
nginx-hit: 1
x-hcs-proxy-type: 1
x-ccdn-expires: 31372053
accept-ranges: bytes
X-Firefox-Spdy: h2
p.vryunpan.cc/videos1/e4204c97b57ead9490e28b3b37910b51/e4204c97b57ead9490e28b3b37910b510.ts?auth_key=1675492962-0-0-45c5568440141b9665ff42bab3743db7
200 OK 2.5 MB URL HTTP/2 p.vryunpan.cc/videos1/e4204c97b57ead9490e28b3b37910b51/e4204c97b57ead9490e28b3b37910b510.ts?auth_key=1675492962-0-0-45c5568440141b9665ff42bab3743db7
IP
Size 2.5 MB (2509616 bytes)
Hash 48b02df62dfc8238bbb565e474fdc1aa
eab98c182b64b839426f6e89464a3b9fc13d465d
c0ab2cef1ac709419a355cdc5275559f6e663781e0ebc3253d896a54c9227d59
GET /videos1/e4204c97b57ead9490e28b3b37910b51/e4204c97b57ead9490e28b3b37910b510.ts?auth_key=1675492962-0-0-45c5568440141b9665ff42bab3743db7 HTTP/1.1
Host: p.vryunpan.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hlj.fun
Connection: keep-alive
Referer: http://hlj.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 04:35:04 GMT
content-type: binary/octet-stream
content-length: 2509616
server: openresty
access-control-allow-origin: *
age: 164266
etag: "48b02df62dfc8238bbb565e474fdc1aa"
last-modified: Fri, 03 Feb 2023 04:32:46 GMT
vary: Origin
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE7[173],EU-GER-frankfurt-GLOBAL1-CACHE8[170,TCP_MISS,172],1.1 fde85e7daa13f95cf6b8f5fa09c62ef6.cloudfront.net (CloudFront)
x-amz-cf-id: tyMDFFCejyE69asUCm71R91bZlJGvapIjxZaBOk3F_ov4OLT4YF0ow==
x-amz-cf-pop: FRA56-P7
x-ccdn-cachettl: 31536000
x-cache: Miss from cloudfront
x-content-type-options: nosniff
nginx-hit: 1
x-hcs-proxy-type: 1
x-ccdn-expires: 31371735
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F030e2301-116b-4cdd-ae90-c5bbc86e9669.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F030e2301-116b-4cdd-ae90-c5bbc86e9669.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1092c4dd4d9ca4d09462ae46e1dd7c1
17444ff60be1afbc40d3653fa936f9eaf9478068
ea8362c7249080b34288ee675f70333607fc3be37e716fdcf63e4901849def9f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F030e2301-116b-4cdd-ae90-c5bbc86e9669.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7288
x-amzn-requestid: 1aa297f5-2f9a-45be-b823-1eb4d5887769
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WrwH-iIAMFyhQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded17e-2b630b4a302b8ae118883b71;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:43:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z2oKgp1keqEkvN6jjsUepMbrxD4JCXKAOHrMNJHcuXN0CpulUh5GLA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:43:26 GMT
etag: "17444ff60be1afbc40d3653fa936f9eaf9478068"
content-type: image/jpeg
age: 24700
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
104.208.107.39
142.250.74.3
93.184.220.29
90.84.161.14
95.101.11.115
129.227.82.175
104.18.32.68