Overview

URLwww.allfixmechanical.com/
IP 217.18.56.153 (United States)
ASN#46261 QUICKPACKET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-28 09:26:59 UTC
StatusLoading report..
IDS alerts0
Blocklist alert13
urlquery alerts No alerts detected
Tags None

Domain Summary (62)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
s2.loli.net (4) 100401 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1618 1801416 104.26.0.190
zerossl.ocsp.sectigo.com (2) 4049 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 696 2439 104.18.32.68
nvhaaa.top (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 406 159609 104.21.234.40
zhibo128x.xyz (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 388 647636 154.83.25.141
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
api.share.baidu.com (1) 44629 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 344 114 182.61.201.93
dvcasha2.ocsp-certum.com (5) 71753 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1740 9312 23.36.79.17
kvezz.com (1) 237784 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 405 422 45.154.215.92
mei.netlbtu.com (3) 917912 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1257 47335 172.247.77.90
p26.toutiaoimg.com (2) 75286 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 890 981561 120.52.95.234
kjimg10.360buyimg.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 454 1368892 182.140.218.3
www.allfixmechanical.com (4) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1264 4033 217.18.56.153
kveff.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 405 422 64.32.13.142
223969ufy.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 409 635958 45.61.212.223
img.2633u.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 408 182 185.239.226.23
aooacctp.vip (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 385 89802 104.21.82.179
ocsp.digicert.com (13) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4433 10413 93.184.220.29
ocsp.sectigo.com (5) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1700 4815 172.64.155.188
8499483.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 386 331298 162.209.128.164
n0622.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 405 142095 20.78.78.186
r3.o.lencr.org (17) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 5746 15068 23.36.77.32
kvkggg.top (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 406 401035 172.67.154.165
u1022.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 405 358822 103.170.15.52
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2373 34.102.187.140
push.zhanzhang.baidu.com (1) 57139 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 294 750 182.61.240.101
baidu.hnmaccms.xyz (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 709 662 143.92.57.79
max002.top (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 406 367200 104.21.233.254
nkiun.xyz (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 534 39549 8.210.99.166
img.1153555.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 410 182 185.239.226.23
ocsp2.globalsign.com (6) 1544 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2202 11596 104.18.21.226
p9.toutiaoimg.com (2) 59405 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 870 895802 4.79.109.102
cbu01.alicdn.com (1) 44205 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 425 98944 47.246.44.252
s3.uuu.ovh (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 406 629052 194.13.80.102
kvegg.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 405 422 45.154.215.92
ocsp.pki.goog (3) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1071 2136 142.250.74.3
www.tupku.top (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 389 1627770 172.67.200.40
kzeaa.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 405 422 67.198.205.125
dl66d.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 380 469939 185.135.77.192
p.qlogo.cn (4) 48578 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1834 3365622 43.154.254.32
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
kvheee.top (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 406 66182 104.21.234.198
398375178.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 409 141174 47.75.19.145
ggt999.oss-cn-hangzhou.aliyuncs.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 412 345660 47.110.23.69
cdn.u1.huluxia.com (1) 865541 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 307 477945 104.250.44.2
www.henniu455.site (12) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 5172 15954 173.231.12.252
365tupian.oss-cn-shenzhen.aliyuncs.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 407 340627 120.77.166.102
png.pngtree.com (1) 48376 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 449 620 104.18.2.157
678tktp.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 384 41962 154.83.24.157
ocsp.globalsign.com (3) 2075 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1077 5717 104.18.21.226
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 67626 34.120.237.76
kvtooo.top (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 406 374493 172.67.175.176
ddcdn.comtucdncom.com (1) 240637 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 439 465053 45.89.209.74
8499583.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 387 135002 162.209.128.164
sz88.oss-cn-shenzhen.aliyuncs.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 410 479208 120.77.166.72
img.9376x.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 408 182 185.239.226.23
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 54.148.84.125
hm.baidu.com (6) 8254 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3157 36712 103.235.46.191
ocsp.digicert.cn (1) 37572 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 340 1102 47.246.44.205
p3.douyinpic.com (3) 23536 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1158 1461042 47.246.44.231
kvhaa.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 405 422 170.178.176.170
e1.o.lencr.org (6) 6159 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2028 4374 23.36.77.32
jackie4fun.cc (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 386 114299 58.218.208.85

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium kvkggg.top Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed
2022-11-28 medium henniu455.site Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 217.18.56.153
Date UQ / IDS / BL URL IP
2022-11-28 09:26:59 UTC 0 - 0 - 13 www.allfixmechanical.com/ 217.18.56.153


Last 5 reports on ASN: QUICKPACKET
Date UQ / IDS / BL URL IP
2023-06-05 04:52:29 UTC 0 - 1 - 0 azinventorymanagement.com/ 185.213.18.209
2023-06-04 20:15:29 UTC 0 - 1 - 0 ceossfit.com/ 103.207.163.18
2023-06-04 20:01:45 UTC 0 - 8 - 3 www.ocxxxlatinablog.com/2011/11/09/anal-vibra (...) 45.43.202.119
2023-06-04 02:19:29 UTC 0 - 1 - 0 btpmh.com/images/index/svchost.exe 160.202.99.48
2023-06-04 01:22:55 UTC 0 - 2 - 0 www.fosteringmemories.com/432/77.exe 104.166.74.184


Last 1 reports on domain: allfixmechanical.com
Date UQ / IDS / BL URL IP
2022-11-28 09:26:59 UTC 0 - 0 - 13 www.allfixmechanical.com/ 217.18.56.153


No other reports with similar screenshot

JavaScript

Executed Scripts (15)

Executed Evals (1)
#1 JavaScript::Eval (size: 475) - SHA256: 72a3e32af5ad0ebd54ddd2442402c861dfe76041852b5d846688d97839fd6419
document.write('<title>U>�7�.	Pl�</title><div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" height="100%" src="http://baidu.hnmaccms.xyz/news/index.php"></iframe></div><style type="text/css">html{width:100%;height:100%;}body {width:100%;height:100%;}</style>');

Executed Writes (4)
#1 JavaScript::Write (size: 456) - SHA256: 0d34422b9eac76423858df679cf29da65df49619ccf211693c135a2e6b99b7e9
< title > U > �7�.Pl� < /title><div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" height="100%" src="http:/ / baidu.hnmaccms.xyz / news / index.php "></iframe></div><style type="
text / css ">html{width:100%;height:100%;}body {width:100%;height:100%;}</style>
#2 JavaScript::Write (size: 201) - SHA256: 2d7d346bf62ff160f8d7d20318bedeb9dc7c79d0e2845f6061de5beabda471ca
< style > # o63092 {
    animation - duration: 10000 ms;
    animation - iteration - count: infinite;
    animation - timing - function: linear;
}@
keyframes spin {
    from {
        transform: rotate(0 deg);
    }
    to {
        transform: rotate(360 deg);
    }
} < /style>
#3 JavaScript::Write (size: 566) - SHA256: 44cbcb9ea4a240cdf901c982e6c4fb0febe60ccb37e445452619d1c2b1f1d37a
< div class = "f63092"
id = "o63092"
style = "position: fixed; bottom: 60%; z-index: 19999 !important; right: 2px;" > < img src = "https://png.pngtree.com/png-vector/20190603/ourmid/pngtree-icon-close-button-png-image_1357955.jpg"
onclick = "$('#o63092').remove()"
style = "border-radius:50%;position:absolute;top:3px;right:3px;cursor:pointer;width:15px;height:15px;z-index:19000;"
id = "c63092" > < a target = "_blank"
href = "/static/js/ad.html" > < img src = "https://dl66d.com/200x200.gif"
style = "margin:10px;border-radius: 15px;border: solid 2px red;"
width = "90px"
height = "90px"
"></a></div>
#4 JavaScript::Write (size: 529) - SHA256: dffe4418406e28a666168f228e9c055b77c166a98e702b693aa07cf1f84fa9f4
< div class = "f63092"
id = "o63092"
style = "position: fixed; bottom: 60%; z-index: 19999 !important; left: 2px;" > < img src = "https://s2.loli.net/2022/05/21/zAxwCKkLnFjlaQ8.jpg"
onclick = "$('#o63092').remove()"
style = "border-radius:50%;position:absolute;top:3px;left:3px;cursor:pointer;width:15px;height:15px;z-index:19000;"
id = "c63092" > < a target = "_blank"
href = "https://8499123.xyz:8443" > < img src = "https://8499583.com/8499/150x150.gif"
style = "margin:10px;border-radius: 15px;border: solid 2px red;"
width = "90px"
height = "90px"
"></a></div>


HTTP Transactions (152)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10553
Expires: Mon, 28 Nov 2022 12:22:40 GMT
Date: Mon, 28 Nov 2022 09:26:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9257
Expires: Mon, 28 Nov 2022 12:01:04 GMT
Date: Mon, 28 Nov 2022 09:26:47 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 7NrN3Xmx9/QZiKLWRqTc2nvSQhXAa3DYIKFZNwGlzEfBP0X6BkiApve2b1HYo2R7SLRwAavoAp4=
x-amz-request-id: K1R1W456Y2J7MM2A
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 08:44:58 GMT
age: 2509
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2560
Cache-Control: max-age=92826
Date: Mon, 28 Nov 2022 09:26:47 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:13:53 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 09:17:46 GMT
cache-control: public,max-age=3600
age: 541
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:47 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: www.allfixmechanical.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             217.18.56.153
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:47 GMT
Content-Length: 801
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Size:   801
Md5:    a5938d944f5c385551ed16182d4c39ce
Sha1:   79a6102cf6cb562a727f95da7fd85bfa4b4e27a0
Sha256: 43f823c57ea19d42e89cca1a59aea47ce6824af67aac87148a9123a490744e97
                                        
                                            GET /tj.js HTTP/1.1 
Host: www.allfixmechanical.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.allfixmechanical.com/

                                        
                                             217.18.56.153
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:47 GMT
Content-Length: 520
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   520
Md5:    645b849433caa9671a36773280b7cbcd
Sha1:   7b2893ee802185c1ad717547146aa69ebd4337c6
Sha256: 985b2fd4e4d340bd50de5bc284bccdf79d26d4d58c1782b2a876a99feed7d956
                                        
                                            GET /common.js HTTP/1.1 
Host: www.allfixmechanical.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.allfixmechanical.com/

                                        
                                             217.18.56.153
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (438), with CRLF line terminators
Size:   757
Md5:    ae4f9ffe7a2eeb4f281eec7788eba03b
Sha1:   09d7e9e07ddb8f412b4e904bbfd609edef5353bf
Sha256: 8bce791cc2ad839158815f6e0a8a1073de39f96f4e6c2135e13736cd5f620aca
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5878
Cache-Control: max-age=91083
Date: Mon, 28 Nov 2022 09:26:47 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:44:50 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 09:08:55 GMT
cache-control: public,max-age=3600
age: 1072
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PJyPiRAl1sjV8TUVJmv9bw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.148.84.125
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JEzpePhNrRjJf5snjQ2L2rcXXOQ=

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.allfixmechanical.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.allfixmechanical.com/

                                        
                                             217.18.56.153
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:48 GMT
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sat, 03 Dec 2022 09:26:48 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    7ef1f0a0093460fe46bb691578c07c95
Sha1:   2da3ffbbf4737ce4dae9488359de34034d1ebfbd
Sha256: 4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
                                        
                                            GET /news/index.php HTTP/1.1 
Host: baidu.hnmaccms.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.allfixmechanical.com/
Upgrade-Insecure-Requests: 1

                                        
                                             143.92.57.79
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   48
Md5:    046691e8308c2adf72fc25247e2f9e80
Sha1:   a47d4ddf558d878140dd88a539159659e781345e
Sha256: 49f190d90d221b19e342cf6425fbb173e894ca0531935a3b08eaf83d980a6268
                                        
                                            GET /push.js HTTP/1.1 
Host: push.zhanzhang.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.allfixmechanical.com/

                                        
                                             182.61.240.101
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Date: Mon, 28 Nov 2022 09:26:48 GMT
Etag: "4078521116"
Expires: Tue, 28 Nov 2023 09:26:48 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=AD20868B2F649FEE586EBDDF7648F6AA:FG=1; max-age=31536000; expires=Tue, 28-Nov-23 09:26:48 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   227
Md5:    e548b6ce15bb616c2bfba36e9cfbf307
Sha1:   a348285d9928a6548a57569f1fb9d62bdd747f33
Sha256: 7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
                                        
                                            GET /news/data.php HTTP/1.1 
Host: baidu.hnmaccms.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://baidu.hnmaccms.xyz/news/index.php

                                        
                                             143.92.57.79
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   198
Md5:    129e8138e06bd1b8253d4e085dd20765
Sha1:   8d912f0a8fffc97d33a938a360a775281e0b643e
Sha256: af60632c5457d59bba80f177ea9a65f072d469a112af2d025cd8274ae8398a3a
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:49 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 02 Dec 2022 06:22:39 GMT
ETag: "153f29a00e890de7d96af41b6cc554b23ae09277"
Last-Modified: Mon, 28 Nov 2022 06:22:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2729
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712106ed84b1c16-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4e1da2dd4fbf4fe13150df8a479e96e4
Sha1:   153f29a00e890de7d96af41b6cc554b23ae09277
Sha256: d0067732ae097018b3bc257b5dfe5425ae39b3831fca40150bd1ae0f39a97006
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:49 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 02 Dec 2022 06:22:39 GMT
ETag: "153f29a00e890de7d96af41b6cc554b23ae09277"
Last-Modified: Mon, 28 Nov 2022 06:22:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2729
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712106ee8571c16-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4e1da2dd4fbf4fe13150df8a479e96e4
Sha1:   153f29a00e890de7d96af41b6cc554b23ae09277
Sha256: d0067732ae097018b3bc257b5dfe5425ae39b3831fca40150bd1ae0f39a97006
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "98E6F46037362A0A92FB02A90439C2F699AB7986528F7182CFA700B99C781816"
Last-Modified: Sat, 26 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21547
Expires: Mon, 28 Nov 2022 15:25:56 GMT
Date: Mon, 28 Nov 2022 09:26:49 GMT
Connection: keep-alive

                                        
                                            GET /s.gif?l=http://www.allfixmechanical.com/ HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.allfixmechanical.com/

                                        
                                             182.61.201.93
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                            
Content-Length: 0
Date: Mon, 28 Nov 2022 09:26:49 GMT

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7028
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:26:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7028
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:26:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7028
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:26:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7028
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:26:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7028
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:26:49 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11255
x-amzn-requestid: ce06e0cc-3874-4a3d-a6c5-5cc1cb342138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7w8EEOIAMF_6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99f-5ca652aa369ee1690b0d08cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0diXekmaxz0zbwy1wShePUxsvtC59YoEPcLJmS_ql6uKG0MtqbxbeQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:03:04 GMT
age: 41025
etag: "602e8ba5c6671ff947acfda757577ddc8ecec6ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11255
Md5:    6e240caa3153ea25c34d07185b47f8a5
Sha1:   602e8ba5c6671ff947acfda757577ddc8ecec6ec
Sha256: c2b37bf1ef003ceffaaf4612f2001b6f7998d5b95cd55b32c79fefcb24ccad7f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 41123
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6376
Md5:    78b1389f425425d0450c94d900404dc4
Sha1:   53b12a8702f7c5b7cc697e2a24da824d9434be65
Sha256: 0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 15639
x-amzn-requestid: 98e846b4-287f-4698-9529-25bcc2727a4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78dGReoAMFiDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e9-62c41b2717bd8e6f3b3797da;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fxNulyOR88nEcjtrXm1dECsulI-MsAxm2Zl0Y83uMz23lGh18d-ZBA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:55 GMT
age: 41394
etag: "5b97bfd787afcb912cdbef0f137f78a059082992"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15639
Md5:    0a4e0bb1e2748bdce6bbf685a910f0fc
Sha1:   5b97bfd787afcb912cdbef0f137f78a059082992
Sha256: a7bc9adeb22cb57675e907bd961a6f554e6b7a46414ed782bcc9b53d68b1c328
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KcI_BV4rZkM-2CmcFI5qkJLT-OOwYQnRNEPXrQJvlNA9A3Da0EzgEA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 41745
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12555
Md5:    f20d5c4b208740dd4c737b9d95c0e1d0
Sha1:   c843c5422499736a83a80c2b07475a8dbbb8860f
Sha256: f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 41133
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5989
x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78LHQqIAMF9_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P0Nx-FcvcV-f5cRPwZr5sEMb8pH3AoYFr185q_D0X2bE7z40nDn91w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 41745
etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5989
Md5:    fa848cb85e85df184b078fe7aa95ae52
Sha1:   21aa6418f3a0d2b64925b66d5fb9079b7e84a11c
Sha256: 37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085
                                        
                                            GET /static/images/1.gif HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:49 GMT
content-length: 254
last-modified: Fri, 24 Dec 2021 10:11:17 GMT
etag: "61c59cc5-fe"
expires: Wed, 28 Dec 2022 09:26:49 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 17\012- data
Size:   254
Md5:    b013f8fa3ec997fe20dc80b82af0ad0a
Sha1:   e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
Sha256: 119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /template/dfcc/images/loading.svg HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:49 GMT
content-length: 506
last-modified: Sun, 09 Jan 2022 08:39:24 GMT
etag: "61da9f3c-1fa"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   506
Md5:    bb36cf278bc5f407c3a64054c13dbbdf
Sha1:   ecd02eea9d41f6282fcaaffc84dbefc1fedb58a2
Sha256: fa5ecaba8e7048ec0475ac862bec89853e8c87e84475e199f8657d6e89065dff

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /template/dfcc/html9/ads/dulian.js HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:49 GMT
last-modified: Sat, 26 Nov 2022 09:30:43 GMT
vary: Accept-Encoding
etag: W/"6381dcc3-6b1"
expires: Mon, 28 Nov 2022 21:26:49 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   845
Md5:    99bce0d0e39824b45ff4f11a9cb62262
Sha1:   1264faaa0c1991af82e2816c008a069ca7951c47
Sha256: ae3d9af3529df78d65ffeeb6c164506f5a9b313e659e57150b9a240575cd6e4d

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4845
Cache-Control: max-age=166340
Date: Mon, 28 Nov 2022 09:26:50 GMT
Etag: "638452b1-116"
Expires: Wed, 30 Nov 2022 07:39:10 GMT
Last-Modified: Mon, 28 Nov 2022 06:18:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /logo.html HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: text/html
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 879
last-modified: Wed, 18 May 2022 08:37:40 GMT
etag: "6284b054-36f"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 (with BOM) text
Size:   879
Md5:    a4229e5d02151f80ae5438c1b96aeeff
Sha1:   84b0a174ce8032bb83a4b015d3122d6014540b89
Sha256: 94f1b6a919ebd8d414f1c423ef3ad76df2349a7782ae45a313d3b2743b6b31e0

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4845
Cache-Control: max-age=166340
Date: Mon, 28 Nov 2022 09:26:50 GMT
Etag: "638452b1-116"
Expires: Wed, 30 Nov 2022 07:39:10 GMT
Last-Modified: Mon, 28 Nov 2022 06:18:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4845
Cache-Control: max-age=166340
Date: Mon, 28 Nov 2022 09:26:50 GMT
Etag: "638452b1-116"
Expires: Wed, 30 Nov 2022 07:39:10 GMT
Last-Modified: Mon, 28 Nov 2022 06:18:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /template/dfcc/images/video-mask.png HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/template/dfcc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 107
last-modified: Tue, 04 Jan 2022 15:14:22 GMT
etag: "61d4644e-6b"
expires: Wed, 28 Dec 2022 09:26:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced\012- data
Size:   107
Md5:    6a5ee87ff75437cb480df839f36004fd
Sha1:   eac66370f99601cb7febef320c9540d4593cd856
Sha256: c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /template/dfcc/images/video-play.png HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/template/dfcc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 1567
last-modified: Tue, 04 Jan 2022 15:14:20 GMT
etag: "61d4644c-61f"
expires: Wed, 28 Dec 2022 09:26:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Size:   1567
Md5:    be7ca0a4a7c0317398a11162b1e09b75
Sha1:   5dbe6a02524cfbf5f5111478a71f91a9259056b5
Sha256: cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /henniu.png HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/logo.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 4973
last-modified: Wed, 18 May 2022 08:34:27 GMT
etag: "6284af93-136d"
expires: Wed, 28 Dec 2022 09:26:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 120 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   4973
Md5:    66a858de209ee39809102a15257bbd71
Sha1:   6856ccaf274c24cdbe62155da4847eafd3b7f3e9
Sha256: 478f7ef871afdab3f845e3f501b9ec980ff449f34651ebc7f0b5b5498ea60296

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "44A8613385F936A9955061D3709672BE506AE53661623A2A2D54F8CE6C9FF39D"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11000
Expires: Mon, 28 Nov 2022 12:30:10 GMT
Date: Mon, 28 Nov 2022 09:26:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "31D7C3C10BCCE1980236C0CA9EDF54A938685CB0F9B21A78CFBAC212F09B129C"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17967
Expires: Mon, 28 Nov 2022 14:26:17 GMT
Date: Mon, 28 Nov 2022 09:26:50 GMT
Connection: keep-alive

                                        
                                            GET /hm.js?e999deeef0f51d57f8d135ece1f722db HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.allfixmechanical.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Date: Mon, 28 Nov 2022 09:26:49 GMT
Etag: f35b68d3e62a6b2b759e08406e8e77f3
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=40BC5879246F47B0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (619)
Size:   11257
Md5:    370010e667c9d0e51d97c261ae291323
Sha1:   229ba0b85a6bf836635aeb91d26d06b2e62c54b4
Sha256: 5bc1593af5f8cf4ba1b4515662348b7f76ead46e1e6a45231eeedc2b648d7aab
                                        
                                            GET /hm.js?d8caaf5fc7e747bf497566f2be1cc916 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.allfixmechanical.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Date: Mon, 28 Nov 2022 09:26:49 GMT
Etag: 20f90f64f94b40ea6a2f96bc9967b5c1
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=09EF613BCC738C43; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (621)
Size:   11259
Md5:    908c6ff54fa45a76e5ca6d6f688b9ef7
Sha1:   7c8f01dbb9f3e734d4a73b6ea41bcca17a2e58cb
Sha256: d051232da1c0df7292df8d3482f0aa84f1d1c1fdd1827230df56098a6a3d4830
                                        
                                            GET /imgs/2022/11/19/6f431e4f52047cda.gif HTTP/1.1 
Host: s3.uuu.ovh
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             194.13.80.102
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 628226
content-security-policy: block-all-mixed-content
etag: "f9f1662ef340031afb90532b7d6eae1d"
last-modified: Sat, 19 Nov 2022 11:31:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 172B1F73E01D1855
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Mon, 12 Dec 2022 09:26:50 GMT
cache-control: max-age=1209600
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,X-Requested-With
access-control-allow-methods: GET,POST
xcdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   628226
Md5:    f9f1662ef340031afb90532b7d6eae1d
Sha1:   7ba723466aa5b7afd79f1b7e3a83c4d416367461
Sha256: 0c52d18925c4306e353fb064c9551285c8087468786b88c0c519b13d6f8e4fe6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "00208B1B1208122769519DD5BDBD95B99DA4F1D771D28116C67D6A4BF0BBDC82"
Last-Modified: Sun, 27 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11673
Expires: Mon, 28 Nov 2022 12:41:23 GMT
Date: Mon, 28 Nov 2022 09:26:50 GMT
Connection: keep-alive

                                        
                                            GET /hm.js?83778f58a428085f4ecef06936407d2b HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11262
Date: Mon, 28 Nov 2022 09:26:50 GMT
Etag: b1f665ef18a3fd5972dba0be121e8b0d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=AF2EB9AE11795113; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (624)
Size:   11262
Md5:    e67e1057ef17b3faf973730f481055b6
Sha1:   59643278155c0e65779e4865a55d63c486c7f23c
Sha256: a50685105e133c066af702119fde916d10fd63be25eb2f8982c982d34e87b063
                                        
                                            GET /53223777da2c042d1033909afab5c5a6.gif HTTP/1.1 
Host: kvegg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.154.215.92
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 162
location: https://kvtooo.top/53223777da2c042d1033909afab5c5a6.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /tp/960x60.gif HTTP/1.1 
Host: 678tktp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             154.83.24.157
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: openresty
Date: Mon, 28 Nov 2022 09:26:50 GMT
Content-Length: 41618
Connection: keep-alive
Last-Modified: Mon, 07 Nov 2022 04:31:47 GMT
ETag: "63688a33-a292"
Expires: Mon, 26 Dec 2022 16:13:03 GMT
Cache-Control: max-age=2592000
Via: 154.83.24.154
CDN-Cache: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   41618
Md5:    4fd9de737ce6698fb5c3a0eb52ed3cdf
Sha1:   da1fc841a82ddbfcee0dde9dd50b34acad24ce50
Sha256: 03cae438deedf1f1eb905ac79daef3fa63b8a45c51c9fbbe8164e7df0ac4a58c
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=859134426&si=e999deeef0f51d57f8d135ece1f722db&v=1.3.0&lv=1&sn=57950&r=0&ww=1280&u=http%3A%2F%2Fwww.allfixmechanical.com%2F&tt=%E6%B1%95%E5%B0%BE%E8%86%B3%E8%88%B7%E7%A7%9F%E5%94%AE%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.allfixmechanical.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Mon, 28 Nov 2022 09:26:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=9E06EAA989E0927E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1770111830&si=d8caaf5fc7e747bf497566f2be1cc916&v=1.3.0&lv=1&sn=57950&r=0&ww=1280&u=http%3A%2F%2Fwww.allfixmechanical.com%2F&tt=%E6%B1%95%E5%B0%BE%E8%86%B3%E8%88%B7%E7%A7%9F%E5%94%AE%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.allfixmechanical.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Mon, 28 Nov 2022 09:26:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=8EBC2C34E56B3C5A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /2022/05/21/zAxwCKkLnFjlaQ8.jpg HTTP/1.1 
Host: s2.loli.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.0.190
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 9166
last-modified: Sat, 21 May 2022 11:42:12 GMT
etag: "6288d014-23ce"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VupOPJxGPqMNOaVOYCxoRaF4bRg9G6hmPWJb93rDMdOLIFfqIG%2FqTT%2BnEvGf9APBK2RfnhlFXTcR5Gxf3HBwDAk%2B%2FJ%2Fx6BNi2PjrSqVI0Liu2jsyOb97KfC%2BjKfU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771210740cf5b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3\012- data
Size:   9166
Md5:    43ae14560cdbc69ce960a28002f04309
Sha1:   4dc694c2754882f840c77807016676732c38138b
Sha256: af0e248de25efb22e6edd4e1453e686154b00ce5039f94dceb2684a332ddad0e
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:50 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 02 Dec 2022 06:09:12 GMT
ETag: "12b4558cb310b355d5d26a2b3f41fa8272c8aeb7"
Last-Modified: Mon, 28 Nov 2022 06:09:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2104
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712107888cd1bfe-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    79bd5a2860ce909a1eef0cd8773c77d1
Sha1:   12b4558cb310b355d5d26a2b3f41fa8272c8aeb7
Sha256: 32ccb36f7a907d37bc54e8bafd05693abf429d19a81c2d40581a80f1d6304716
                                        
                                            POST /s/gts1p5/8PiKUJKCkz4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /lm/031815-80.gif HTTP/1.1 
Host: www.tupku.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.200.40
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 1626999
last-modified: Thu, 07 Jul 2022 15:13:11 GMT
etag: "62c6f807-18d377"
expires: Thu, 15 Dec 2022 23:37:39 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1031757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WJDYvwyEvc9QVxsG24Qf7fHJOUvsPU5Qfs0C5tiuQh5ujk2xIATQxuW%2F2pLDTzVUOt%2FqdYDSxDl9FHahfNzFhej1O4Sk5w40J4uxhRjsyr%2Bjpd3x7AMiRh%2FQsbfWOhNf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77121078be7c1c12-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 500 x 281\012- data
Size:   1626999
Md5:    17244f3a8b60a0f7b291f5621c873713
Sha1:   c523f5d5b60d2eabc9084e9ba5803647ac08c2cd
Sha256: 4aed8c090aa7bff3de4c028efced6a87dd7645bc15d265cdddf106f3f5dd9435
                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 1599
X-Cached: STALE
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    57a5ebff12a55db170cd1fa0b71fea8a
Sha1:   9da22e92e0e9d79ed68400c52f85fbd5df03c7ec
Sha256: 16308bc0b9e3b4875cbe01fab729f57ed77e19b7674014a14aaed762ab228a1c
                                        
                                            GET /template/dfcc/static/js/jquery.lazyload.min.js HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:49 GMT
last-modified: Sat, 08 Jan 2022 14:08:22 GMT
vary: Accept-Encoding
etag: W/"61d99ad6-d35"
expires: Mon, 28 Nov 2022 21:26:49 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2941
Md5:    1ef7545cf8a744b19b9eabc070ac82c7
Sha1:   693e39027690142f9e95ecce50a942b8c71d7cd8
Sha256: 9b4f5b846742435a120c61ddd6c1f087c04b10ca135cbc450ee80b7a5a1dbfb4

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1194041597&si=83778f58a428085f4ecef06936407d2b&su=http%3A%2F%2Fbaidu.hnmaccms.xyz%2F&v=1.3.0&lv=1&sn=57950&r=0&ww=1268&u=https%3A%2F%2Fwww.henniu455.site%2F&tt=%E5%BE%88%E7%89%9B%E5%BD%B1%E8%A7%86 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Mon, 28 Nov 2022 09:26:50 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=6C0BF929C5526F17; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "F69BBAA4C9FAEABA866B4A85904C8C206FAFED8AC5123A3AED5769D186201563"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15037
Expires: Mon, 28 Nov 2022 13:37:28 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 15:36:47 GMT
Expires: Sat, 03 Dec 2022 15:36:46 GMT
Etag: "e83de138d99a587fcdb2d957f42ef01c2ad94d75"
Cache-Control: max-age=453594,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771210787bdab512-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "81D305F15E1629E2725F7B034F8D2080F6450FE841765FADFC9106834EC977F9"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18707
Expires: Mon, 28 Nov 2022 14:38:38 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            GET /lm/ynv100.gif HTTP/1.1 
Host: aooacctp.vip
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.82.179
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 89034
last-modified: Sun, 29 May 2022 06:37:35 GMT
etag: "629314af-15bca"
expires: Sat, 03 Dec 2022 22:39:15 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2072094
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2FJTOSJ12J80OUV7G35Rrjxfb9LFrojP3E4jqjrnbxtRw0KCWSnFV3A4AIqrQCYM%2BstMZOFRqlIopcjxTN6uszM01xp10IRkNTuLX4it%2BB1TCm2Ned6v4QVruQGxs1A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77121079ca890af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 267 x 160\012- data
Size:   89034
Md5:    482e725b00bf18359cae59cd413aea13
Sha1:   aaf8f22b9470066e250989a25a09a7486c3aaf28
Sha256: 85b083b68289347328190d67fe187ba65d44e1d0072a254fd9f06d3510133083
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4846
Cache-Control: max-age=166340
Date: Mon, 28 Nov 2022 09:26:51 GMT
Etag: "638452b1-116"
Expires: Wed, 30 Nov 2022 07:39:11 GMT
Last-Modified: Mon, 28 Nov 2022 06:18:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6C32B1DCD393F020D8F92903920D09EF351A54AB81FB44D1060D70FDB0FF3FEB"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=342
Expires: Mon, 28 Nov 2022 09:32:33 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 728
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 11:09:41 GMT
Expires: Fri, 02 Dec 2022 11:09:40 GMT
Etag: "6bfb1ec65d740e6385399d9549f0720bfd8a67cb"
Cache-Control: max-age=351168,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77121079cd9fb4f7-OSL

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 02 Dec 2022 08:35:35 GMT
ETag: "6424f4c50990cc355d631eb3193633832c8cc352"
Last-Modified: Mon, 28 Nov 2022 08:35:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 850
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712107a2a521bfe-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    11d7a2faa60822ec3230a6300d3f845a
Sha1:   6424f4c50990cc355d631eb3193633832c8cc352
Sha256: fa4964296deebde2cd34444f98d79a50103a1b3b9b3af14b8ad37abc2311c1d7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2360
Cache-Control: max-age=133655
Date: Mon, 28 Nov 2022 09:26:51 GMT
Etag: "6383dcba-2d7"
Expires: Tue, 29 Nov 2022 22:34:26 GMT
Last-Modified: Sun, 27 Nov 2022 21:55:06 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "BAADC21658C7C41DC11C0989FDCA5B20EB8B10FE5C87DC821C0CC64A4FA70055"
Last-Modified: Sun, 27 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11947
Expires: Mon, 28 Nov 2022 12:45:58 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            GET /obj/tos-cn-i-dy/089f3a1286414d82ae6996008b165e45 HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             47.246.44.231
HTTP/2 200 OK
content-type: image/gif
                                            
server: Tengine
content-length: 420442
date: Thu, 17 Nov 2022 15:58:44 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 17 Nov 2022 15:50:17 GMT
nw-session-id: 2022111723501701020803521406D172A0m425803dy
nw-session-trace: 2022-11-17T23:50:17.892997564+08:00 41
x-bdcdn-cache-status: TCP_HIT
x-length: 420442
x-powered-by: ImageX
x-response-date: Thu, 17 Nov 2022 23:50:17 GMT
x-tt-logid: 2022111723501701020803521406D172A0
via: n204-098-012, cache4.l2de2[0,0,206-0,H], cache6.l2de2[1,0], cache6.l2de2[2,0], cache5.se1[0,0,200-0,H], cache4.se1[2,0]
x-request-ip: fdbd:dc01:26:318::66
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=2
x-tt-trace-host: 01d8a37559a42dab1df9ddb2359a3e18948507c6b373bf4ea151dd04e9e53f40853d434f6fe7a67381440a85e967118d6902515a19439b56f21c681efa926d07d71f65787927462bdd51a41ff032662f35aca71ddabac3eaf0fe5c9b728f42bfbf
x-response-lb: image
ali-swift-global-savetime: 1668700724
age: 926887
x-cache: HIT TCP_MEM_HIT dirn:11:420780317
x-swift-savetime: Thu, 17 Nov 2022 16:25:06 GMT
x-swift-cachetime: 31534418
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9816696276112345527e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   420442
Md5:    7020ecb5ebdf5d2d41668f76d36f5982
Sha1:   30c768ceb1463fffc0145f1e73c808f8f6d2bb51
Sha256: 3a55db6e5e4fa541729efffaa932549e491e07af768e1c3c3d1dad65ae53a8bb
                                        
                                            GET /obj/tos-cn-i-dy/4bd29c7e9a5b4161ad0f05921c40288e HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             47.246.44.231
HTTP/2 200 OK
content-type: image/gif
                                            
server: Tengine
content-length: 474754
date: Thu, 17 Nov 2022 09:55:40 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 17 Nov 2022 09:53:05 GMT
nw-session-id: 2022111717530501021004914549AA1B1Dx7xdl03dy
nw-session-trace: 2022-11-17T17:53:05.479651358+08:00 74
x-bdcdn-cache-status: TCP_HIT
x-length: 474754
x-powered-by: ImageX
x-response-date: Thu, 17 Nov 2022 17:53:05 GMT
x-tt-logid: 2022111717530501021004914549AA1B1D
via: n204-098-025, cache3.l2de2[0,0,206-0,H], cache23.l2de2[0,0], cache23.l2de2[1,0], cache3.se1[0,0,200-0,H], cache4.se1[1,0]
x-request-ip: fdbd:dc01:25:582::100
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 01db2ef58bb0f251f58322562d06fcbd2f62774c95199d5c6ca1ecc6ce9db8add0cc4560d6fbb52dd46bff78f9a89db36d8279770d0b5b8c72c547a4771e50e96821faacbf127d48ca32d75b3ee5be3dfdb2209d714210068b2b4b69e7ee917aa2
x-response-lb: image
ali-swift-global-savetime: 1668678940
age: 948671
x-cache: HIT TCP_MEM_HIT dirn:2:58591294
x-swift-savetime: Thu, 17 Nov 2022 09:57:02 GMT
x-swift-cachetime: 31535918
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9816696276112425533e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 80\012- data
Size:   474754
Md5:    187c69beaa798211a2760f0e7944d8cc
Sha1:   645bc6d28abf2cf3756a014fb2fc9075d0f0fe20
Sha256: 50bc3ac7422522639cd47b65d6cb5683ba8f80395087ba0c105e47edb69b81d4
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "F69BBAA4C9FAEABA866B4A85904C8C206FAFED8AC5123A3AED5769D186201563"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15037
Expires: Mon, 28 Nov 2022 13:37:28 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            GET /53223777da2c042d1033909afab5c5a6.gif HTTP/1.1 
Host: kvtooo.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.henniu455.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.175.176
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 373731
last-modified: Thu, 17 Nov 2022 07:58:50 GMT
etag: "6375e9ba-5b3e3"
expires: Sat, 24 Dec 2022 05:34:54 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 359517
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vnbc7yXrDCNFEx%2FGOj5OA6WHnqRGvAczk5gnRWQ%2BhqFHWAvMskXHqN1D0nbwqmMnfHWsdwnvb%2FTwDWKy8JYJVdLd37SQ3puZxKazumaTOEgzpol8rZ4H7frLZswe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712107a8fad0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   373731
Md5:    cf97219922dd7d97965a5100350ac241
Sha1:   2c0947fad658e5bbcc035ad980d8742a966cd816
Sha256: 728bc7bed27cd30e3964e416bcb3d06faaff9705933da2d73f444dab72d4f86c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "36F4C61112066821E5A505F142DD76EF9A6B3B63E27B0BB5864E1B9CA211428F"
Last-Modified: Mon, 28 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15212
Expires: Mon, 28 Nov 2022 13:40:23 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            GET /95ca29ec3907b3bf2d8a24b35e3eda22.gif HTTP/1.1 
Host: kvezz.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.154.215.92
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 162
location: https://kvkggg.top/95ca29ec3907b3bf2d8a24b35e3eda22.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /obj/tos-cn-i-dy/b75457ba961c4fbb9e3770eab50c6481 HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             47.246.44.231
HTTP/2 200 OK
content-type: image/gif
                                            
server: Tengine
content-length: 561802
date: Thu, 24 Nov 2022 07:56:06 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Wed, 23 Nov 2022 14:37:37 GMT
nw-session-id: 202211232237370101581631462B703C71nqps503dy
nw-session-trace: 2022-11-23T22:37:37.933349302+08:00 42
x-bdcdn-cache-status: TCP_HIT
x-length: 561802
x-powered-by: ImageX
x-response-date: Wed, 23 Nov 2022 22:37:37 GMT
x-tt-logid: 202211232237370101581631462B703C71
via: n132-069-106, cache5.l2de2[0,0,206-0,H], cache16.l2de2[1,0], cache16.l2de2[1,0], cache3.se1[0,0,200-0,H], cache4.se1[1,0]
x-request-ip: fdbd:dc03:15:294::68
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 019f4845bcec5a43d6c9e96cb2b392b7bb8f77a8f9f69ab6c1bf7160a3f6dc2a60b0425e62b43b69ad3b1ec3633fb5c8cde6ab92d270f32725740e32fd30d5d8e23a8a1e78a16de7ed5f60387b3dadca8caff76fbfb65a5a2181410f6fe9092e13
x-response-lb: image
ali-swift-global-savetime: 1669276566
age: 351045
x-cache: HIT TCP_MEM_HIT dirn:11:29641968 mlen:0
x-swift-savetime: Fri, 25 Nov 2022 13:30:08 GMT
x-swift-cachetime: 31429558
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9816696276112675547e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 80\012- data
Size:   561802
Md5:    6992b4cd488bb4437ec954ab09a3fa00
Sha1:   e41fc5970be04ab5801e80ce785ff0832b305793
Sha256: 54d436cbf368311b0aa7bb497ac1b5a4330067953e11b4ad2da233e07e923d05
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 20:23:24 GMT
Expires: Sun, 04 Dec 2022 20:23:23 GMT
Etag: "21f52c131af86006ecfc79580efaa98eb55da849"
Cache-Control: max-age=557191,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77121079ab2b1c16-OSL

                                        
                                            GET /92f0c144d76dd785f7c04f84ae149b33.gif HTTP/1.1 
Host: kzeaa.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             67.198.205.125
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 162
location: https://kvheee.top/92f0c144d76dd785f7c04f84ae149b33.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 02 Dec 2022 06:28:57 GMT
ETag: "22b5364b36c33f118ea80f7314d1cc22e8c48993"
Last-Modified: Mon, 28 Nov 2022 06:28:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1621
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712107b2afa1bfe-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    540fc9cbbd62e8147ee1c770824c3b4a
Sha1:   22b5364b36c33f118ea80f7314d1cc22e8c48993
Sha256: bed1e08f979cdfdc1762bc96f9989a9fb604458b9e8c22dd08e835ce7283b0e1
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 02 Dec 2022 06:28:57 GMT
ETag: "22b5364b36c33f118ea80f7314d1cc22e8c48993"
Last-Modified: Mon, 28 Nov 2022 06:28:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1621
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712107b28790b51-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    540fc9cbbd62e8147ee1c770824c3b4a
Sha1:   22b5364b36c33f118ea80f7314d1cc22e8c48993
Sha256: bed1e08f979cdfdc1762bc96f9989a9fb604458b9e8c22dd08e835ce7283b0e1
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 02 Dec 2022 06:28:57 GMT
ETag: "22b5364b36c33f118ea80f7314d1cc22e8c48993"
Last-Modified: Mon, 28 Nov 2022 06:28:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1621
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712107b2b4b0b65-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    540fc9cbbd62e8147ee1c770824c3b4a
Sha1:   22b5364b36c33f118ea80f7314d1cc22e8c48993
Sha256: bed1e08f979cdfdc1762bc96f9989a9fb604458b9e8c22dd08e835ce7283b0e1
                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=442
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    4f7a29c1007c277f89206a7030707d01
Sha1:   b9e4486214ec26997a05a276b439743f55b4925b
Sha256: 4423d9bfd43907e63e119b9c617a6a39fd2cca57a5f4880663341da9e950d930
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CCBCFC8848FD59224745ABE58A2DE0EF4CD8DB02FEC4822E2B1CE05106CB26E5"
Last-Modified: Sun, 27 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3651
Expires: Mon, 28 Nov 2022 10:27:42 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "94F22E22629ED12113AA16825A4F5BB498AEF958DDA1745F067D934E31C09A50"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2911
Expires: Mon, 28 Nov 2022 10:15:22 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 20:23:24 GMT
Expires: Sun, 04 Dec 2022 20:23:23 GMT
Etag: "21f52c131af86006ecfc79580efaa98eb55da849"
Cache-Control: max-age=557191,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7712107a3f74b512-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 03:39:04 GMT
Expires: Sun, 04 Dec 2022 03:39:03 GMT
Etag: "e60b44b493885b9e3bfcd727a512d8fded812887"
Cache-Control: max-age=496931,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7712107b3c9b1c16-OSL

                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=711
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    70a989ddf916063fd6d50ebc64e6db2f
Sha1:   49ef79d20a2ed51f3bcfa9979bea11be8fd26ade
Sha256: 4bc9206912ce15588266a1992922997be61248d3648be9d80b208a1c6cd38264
                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=480
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    70a989ddf916063fd6d50ebc64e6db2f
Sha1:   49ef79d20a2ed51f3bcfa9979bea11be8fd26ade
Sha256: 4bc9206912ce15588266a1992922997be61248d3648be9d80b208a1c6cd38264
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Tengine
Content-Length: 471
Connection: keep-alive
Date: Mon, 28 Nov 2022 09:26:51 GMT
Last-Modified: Sun, 27 Nov 2022 21:24:59 GMT
ETag: "6383d5ab-1d7"
Expires: Tue, 29 Nov 2022 21:24:59 GMT
Cache-Control: max-age=129488
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669627611
Via: cache19.l2de2[246,245,200-0,M], cache19.l2de2[246,0], cache1.se1[267,267,200-0,M], cache1.se1[268,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 28 Nov 2022 09:26:51 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9516696276111482843e

                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.79.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=728
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    70a989ddf916063fd6d50ebc64e6db2f
Sha1:   49ef79d20a2ed51f3bcfa9979bea11be8fd26ade
Sha256: 4bc9206912ce15588266a1992922997be61248d3648be9d80b208a1c6cd38264
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "BAADC21658C7C41DC11C0989FDCA5B20EB8B10FE5C87DC821C0CC64A4FA70055"
Last-Modified: Sun, 27 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11947
Expires: Mon, 28 Nov 2022 12:45:58 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "AF114AF187190B086868098D82E13EE2A9571EA0E2A366318DEB06A6DBFC6624"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5706
Expires: Mon, 28 Nov 2022 11:01:57 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 02 Dec 2022 06:29:15 GMT
ETag: "f4e8ac0b476e881fc2897adc09c4d1041662ebbf"
Last-Modified: Mon, 28 Nov 2022 06:29:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 689
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712107beb8b1bfe-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    dd57dfa6ed27d572dd972ae149518bd5
Sha1:   f4e8ac0b476e881fc2897adc09c4d1041662ebbf
Sha256: ed6b575824fe55ae1cff4c491811ce9cb287cc8041bba03f68e355234d9058ec
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5469
Cache-Control: max-age=168067
Date: Mon, 28 Nov 2022 09:26:51 GMT
Etag: "63845701-2d7"
Expires: Wed, 30 Nov 2022 08:07:58 GMT
Last-Modified: Mon, 28 Nov 2022 06:36:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /img/ibank/2020/865/518/22902815568_1738432517.jpg HTTP/1.1 
Host: cbu01.alicdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             47.246.44.252
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: Tengine
content-length: 98277
date: Thu, 30 Dec 2021 15:58:00 GMT
last-modified: Thu, 24 Dec 2020 19:19:13 GMT
picasso-ret-code: SUCCESS
request-time: 0.083
expires: Fri, 30 Dec 2022 15:58:00 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1640879880
via: cache9.l2de2[0,0,200-0,H], cache23.l2de2[1,0], cache1.se1[0,0,200-0,H], cache4.se1[1,0]
access-control-allow-origin: *
age: 28747731
x-cache: HIT TCP_MEM_HIT dirn:11:98715752
x-swift-savetime: Wed, 31 Aug 2022 14:25:15 GMT
x-swift-cachetime: 10459965
timing-allow-origin: *
eagleid: 2ff62c9816696276115015670e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   98277
Md5:    c23b2edd3dce8616a9a723a26b2fd280
Sha1:   51451bb2e19c4f956b425221ede9cfdd90472a0e
Sha256: 4d47bba01041ef53fd4ee75b4c13e5730fe106b233a7a1b4e8e9f12fc7527f88
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5469
Cache-Control: max-age=168067
Date: Mon, 28 Nov 2022 09:26:51 GMT
Etag: "63845701-2d7"
Expires: Wed, 30 Nov 2022 08:07:58 GMT
Last-Modified: Mon, 28 Nov 2022 06:36:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /f0e76a5c8312a00241ad726bac0f2d0f.gif HTTP/1.1 
Host: kvhaa.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             170.178.176.170
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 162
location: https://nvhaaa.top/f0e76a5c8312a00241ad726bac0f2d0f.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "BB8B384B8B9A3B6C73717378A0CCFCEEE5473F6E7D14BC350241CED35A9F3A22"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16889
Expires: Mon, 28 Nov 2022 14:08:20 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1 
Host: kveff.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             64.32.13.142
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 162
location: https://max002.top/68a7807de3933bf7079116fa9df99e6f.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 21:48:56 GMT
Expires: Fri, 02 Dec 2022 21:48:55 GMT
Etag: "b73ceac50688ecaa446219d0d7c650c24ac30df6"
Cache-Control: max-age=389523,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7712107c58c3b4f7-OSL

                                        
                                            POST /s/gts1p5/yJiqwzofsT4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /95ca29ec3907b3bf2d8a24b35e3eda22.gif HTTP/1.1 
Host: kvkggg.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.henniu455.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.154.165
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 400264
last-modified: Mon, 02 May 2022 19:22:39 GMT
etag: "62702f7f-61b88"
expires: Sat, 10 Dec 2022 11:40:47 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1547164
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QNVe14GHd3DYzIju9F1mAcaMOLgFjaYeBpPq%2Bh%2B1A%2F6z2Vk%2FLWcUI0g6IzKuZrThCdljFi1mN0MMswkW%2BWBPxl7HmtEWgLzXOey1hwa%2F7VYA7btBRlQ%2FmIXmXjPR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712107cac600b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   400264
Md5:    b722c3905b96f11823e04826aafdd50e
Sha1:   68b63b572a042d40ab210aa313b7ebbc372be5a1
Sha256: 630c6a955789d5bb6311db75ce52e57ff4c12074ef5a5a080cf5459f907e9dc1

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /upload/art/gif/gfdt/071616_341-4.gif HTTP/1.1 
Host: mei.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.247.77.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Tengine
Date: Mon, 28 Nov 2022 09:28:39 GMT
Content-Length: 13797
Last-Modified: Wed, 09 Nov 2022 11:39:13 GMT
Connection: keep-alive
ETag: "636b9161-35e5"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3\012- data
Size:   13797
Md5:    e994db89370c07131c299b37e86e0906
Sha1:   3166f9925170c117be7c77602c26f45105cae06c
Sha256: d9a139378357052913b2b57af565d38baef6f7a10ff1c0b58376e57a764f16df
                                        
                                            GET /92f0c144d76dd785f7c04f84ae149b33.gif HTTP/1.1 
Host: kvheee.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.henniu455.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.234.198
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 65414
last-modified: Mon, 21 Nov 2022 22:57:02 GMT
etag: "637c023e-ff86"
expires: Wed, 21 Dec 2022 23:01:50 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 555901
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v4nWbzZXfHY%2FbZkacqfUD4Fo2TYVcgufmKc9pvi3yn6%2BmZK%2Bsr7lsY6umrD1yPwNvw9xqNXdfdlTL6qyeT1R8T3YNrVuheC44pmY7ch74Xt%2FM6t%2B%2F%2B6rHh6DPcYs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712107c8b5ddcff-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   65414
Md5:    514c48163ce5b65fb6bf16d8578b478b
Sha1:   6c21c2f7fd18259458573225fbfdf80cd27b6bac
Sha256: 045b14c655e54a2b1c3bef56f95352d2bb6b794889c746985ec51ef03578cb52
                                        
                                            GET /2022/11/21/HXSObKxZrpNoT8w.gif HTTP/1.1 
Host: s2.loli.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.0.190
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 375054
last-modified: Mon, 21 Nov 2022 09:00:42 GMT
etag: "637b3e3a-5b90e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EI2NgF29gWtOZWiez%2FmZN2WVGJNxIiwr3%2FfjtcAuC9aWFVAWwDI0pKcQVQsjav8WhWTfPUh6%2BRkTfnseFD2hR92hziiy6Gw066FH%2BYi0o2clr6M9WAN0Goi8B0rF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771210743d2eb506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   375054
Md5:    893c2eaccd9a2ddb1c1a9fd2c9e18f0d
Sha1:   4b8f92fd3a66b9064eed25bf1c785c78118e1de4
Sha256: 86021668104ddf758f57a26eb01a60683bab0fc019c7856b962308ebe775a6d7
                                        
                                            GET /upload/art/gif/20200421/170511-1.mp4_1587324106344.gif HTTP/1.1 
Host: mei.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.247.77.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Tengine
Date: Mon, 28 Nov 2022 09:28:39 GMT
Content-Length: 12943
Last-Modified: Wed, 09 Nov 2022 09:18:36 GMT
Connection: keep-alive
ETag: "636b706c-328f"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 480x270, components 3\012- data
Size:   12943
Md5:    e1a576cbd51934165b0de029925eba4d
Sha1:   8225a3aa258bf5e6985492a834622a090376208f
Sha256: 7664f5c8b9e9611fc3d76c64ca431e0b96ba7d9bbc2ed1ebcc15b4037725b380
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "BB8B384B8B9A3B6C73717378A0CCFCEEE5473F6E7D14BC350241CED35A9F3A22"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16889
Expires: Mon, 28 Nov 2022 14:08:20 GMT
Date: Mon, 28 Nov 2022 09:26:51 GMT
Connection: keep-alive

                                        
                                            GET /2022/11/21/GjPS2c1pFvEmyUd.gif HTTP/1.1 
Host: s2.loli.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.0.190
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 508025
last-modified: Mon, 21 Nov 2022 09:00:08 GMT
etag: "637b3e18-7c079"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DzfrX0ngfmrpncTois7KgC3N45%2FCNEflypwOaheT%2BzZghWm%2FyJA0WBIRvdhSYk4fc7xblrpou9JgDNl2D0ApMAZ6XgYalbErFinWgv4n%2Fxb%2FGdrhe4tv5ZVvF6IG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771210742d15b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   508025
Md5:    a2ed6c020d6acb8be4d5bb10e2cd0c80
Sha1:   e9c3f1c4f8615d16d3c9e8a39cd175dc94a9086c
Sha256: 5f7d936f3948400e6d4f51442c50cf16eaa6267c086943f1333c44594a7824c6
                                        
                                            GET /upload/art/gif/gfdt/746bfd5d31fc37377d.gif HTTP/1.1 
Host: mei.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.247.77.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Tengine
Date: Mon, 28 Nov 2022 09:28:39 GMT
Content-Length: 19506
Last-Modified: Wed, 09 Nov 2022 11:40:19 GMT
Connection: keep-alive
ETag: "636b91a3-4c32"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 560x314, components 3\012- data
Size:   19506
Md5:    ad1f30d4930167d4eff601f3fee06b8d
Sha1:   b0fa5f060045cad3ae25d6ce6e00758668a31f00
Sha256: 5605d7b7176cda10fc43bfe3ef7c57efda471a1d0ed5092aaca9e8426c747032
                                        
                                            POST /s/gts1p5/yJiqwzofsT4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1 
Host: max002.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.henniu455.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.233.254
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 366444
last-modified: Fri, 19 Aug 2022 17:02:28 GMT
etag: "62ffc224-5976c"
expires: Sun, 25 Dec 2022 12:12:28 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 249263
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PyejZuXsHS7y21SC5MgM3cCmxW5h0M1SkrD7DxbOyYf8YHTltmVmdUyP5Xdz0b3kminHBFDpesaPSMcthwjRm8OUiFp9gkOmbBU4TMRLBPPbJ2Ly4eUV6x3wDBQw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712107d08a77417-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   366444
Md5:    86371c51bf2086f3a40f0e438246b662
Sha1:   9da793de9c620485ee91b88413b256c69dc774c5
Sha256: 8155b44efd09301dca9ec4bdab8e3e6445d1564fe580edd5f7575c9289843ccf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=129857
Date: Mon, 28 Nov 2022 09:26:51 GMT
Etag: "6383d71c-118"
Expires: Tue, 29 Nov 2022 21:31:08 GMT
Last-Modified: Sun, 27 Nov 2022 21:31:08 GMT
Server: nginx
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 15:19:39 GMT
Expires: Sat, 03 Dec 2022 15:19:38 GMT
Etag: "2f6e1dc63e1c9befda2c24cbbc4e0853fde41fb1"
Cache-Control: max-age=452566,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7712107e3d44b512-OSL

                                        
                                            GET /guanggao/5678.jpg HTTP/1.1 
Host: nkiun.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                        
                                             8.210.99.166
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 15532
Last-Modified: Tue, 20 Sep 2022 14:00:47 GMT
Connection: keep-alive
ETag: "6329c78f-3cac"
Expires: Wed, 28 Dec 2022 09:26:51 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Size:   15532
Md5:    61cdbfab0213705019d0f0359a69334c
Sha1:   687637f6ef3219935e2c7a1f2ec30d52383bd789
Sha256: 3011f4fab001f3af1c122c6e03b73e2dd60da42ee7e1f692dc917cd254e65045
                                        
                                            GET /2022/01/07/deGgwzf7Tly9S3b.gif HTTP/1.1 
Host: s2.loli.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.0.190
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:50 GMT
content-length: 905505
last-modified: Fri, 07 Jan 2022 15:29:57 GMT
etag: "61d85c75-dd121"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pGn%2FmqinH3eceqm%2BV1MMuZrAekuEWM%2FK1GyV2XV4Wo3NBIshCKNS%2FT3I%2FjoSJbNAq4Y3brp6Wz6nACcQG%2Ben5kzQ1Ig3bBrCQth4t%2F97N9uWjfmDweb1zQRfNDRI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771210740cf1b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   905505
Md5:    3abde39f91e4a75e550b7e50eb25e68a
Sha1:   75e357b027236d81ea4b1002d992117d53212bd8
Sha256: 2ee18fe5f2dec0caa8ddca814b0f318e2574bd52b389bb8a2348356567a7db7d
                                        
                                            GET /guanggao/88.jpg HTTP/1.1 
Host: nkiun.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                        
                                             8.210.99.166
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 23407
Last-Modified: Mon, 10 Oct 2022 13:06:55 GMT
Connection: keep-alive
ETag: "634418ef-5b6f"
Expires: Wed, 28 Dec 2022 09:26:51 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 377x377, components 3\012- data
Size:   23407
Md5:    4e0430d10999201c61bd8ca67a1b9ad5
Sha1:   35ac2369a649edff8176762d7a4c2cc442545cbe
Sha256: 1ab4cb62c3914b2780555cc36cc0e4f6094bf271be62c6939cf9ff19c766c5fa
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=129857
Date: Mon, 28 Nov 2022 09:26:52 GMT
Etag: "6383d71c-118"
Expires: Tue, 29 Nov 2022 21:31:09 GMT
Last-Modified: Sun, 27 Nov 2022 21:31:08 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /origin/pgc-image/440e4613c87e49aaa978851137a2e2cb HTTP/1.1 
Host: p9.toutiaoimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             4.79.109.102
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 86697
date: Sat, 01 Oct 2022 07:09:17 GMT
server: nginx
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Fri, 01 Oct 2021 06:59:21 GMT
nw-session-id: 202110011459210101940982193F1AF1C7sjvgq03tt
nw-session-trace: 2021-10-01T14:59:21.256856375+08:00 43
x-bdcdn-cache-status: TCP_MISS
x-length: 86697
x-powered-by: ImageX
x-response-date: Fri, 01 Oct 2021 14:59:21 GMT
x-tt-logid: 202110011459210101940982193F1AF1C7
x-tt-trace-host: 01007de0759bedd164cef8c7ee3bed522ee82528cdf35d20ca9e7c1d86094cf8ffad7f68acafca8aea0051d6ead0ed8e33ef2b558f3d1ebc3189b63748e03187964ec1a388482de80a872045f4071810de2ede20a8f16c213cf5c5d158b486d275
x-tt-trace-tag: id=09;cdn-cache=hit;type=static
x-response-lb: image
x-ser: BC199_dx-lt-yd-jiangsu-huaian-8-cache-10, BC199_dx-lt-yd-jiangsu-huaian-8-cache-10, BC108_US-Colorado-Denver-1-cache-2, BC108_US-Colorado-Denver-1-cache-2, BC103_US-Washington-seattle-1-cache-1, BC103_US-Washington-seattle-1-cache-1
x-cache: HIT from BC103_US-Washington-seattle-1-cache-1(baishan)
access-control-allow-origin: *
timing-allow-origin: *
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: inner; dur=50, cdn-cache;desc=HIT,edge;dur=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   86697
Md5:    c93b3ed293066d747d880ea368f305c3
Sha1:   7847cf128db1b0cc6f25cbfb54125348bf6dda97
Sha256: 79a2ddaa98a1421d78798163acdce3928ac97d2f63e5a7a64ff011180661a2b3
                                        
                                            GET /f0e76a5c8312a00241ad726bac0f2d0f.gif HTTP/1.1 
Host: nvhaaa.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.henniu455.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.234.40
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 158847
last-modified: Wed, 10 Aug 2022 09:44:15 GMT
etag: "62f37def-26c7f"
expires: Mon, 26 Dec 2022 15:44:57 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 150114
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OMHDoGCyzJnmy3lW8aL5rQY2pGnL74SUP2tgLLISgaUx5zb77Auaep70sv9Q8C%2FvZs733SzRY9hYMmrjvvvjoB8%2F0hToxJfSGQ77TZtwHEXa6VHG577fsa%2BiREzb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712107ead3688b6-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 80\012- data
Size:   158847
Md5:    a497c1ae73df54fe08463b3342b8d1d0
Sha1:   73ce4da38e2826e033444992cff2a827eb474c97
Sha256: e9f7f7dc820dc334c1cf0e7ccb151c7483c7a64cc7c28f50de03fa2f65c34957
                                        
                                            GET /8499/960x60.gif HTTP/1.1 
Host: 8499483.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.209.128.164
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 331043
last-modified: Wed, 09 Nov 2022 06:22:39 GMT
etag: "50d23-5ed03aef4304d"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   331043
Md5:    09f29e56330449942571a66f47f82fb5
Sha1:   30fc3421671176f6f724f32ee910470f03661ddc
Sha256: b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
                                        
                                            GET /1b350a16bb764a9e88c046c9d14cabfa.gif HTTP/1.1 
Host: n0622.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             20.78.78.186
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Mon, 28 Nov 2022 09:26:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 03 Nov 2022 13:58:40 GMT
ETag: W/"6363c910-4002e"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   141802
Md5:    d266492116a9903619eeb035b0f4cdd9
Sha1:   4444e9192f207b2b946d71bc38fdf7e23fe8912c
Sha256: 829c5302dd74ad53f4d8adf3de284908c5d6a1662b28b395fea1b4d3d9e78eed
                                        
                                            GET /e8f25c9642e34d42959c3389f35c045e.gif HTTP/1.1 
Host: u1022.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.170.15.52
HTTP/2 200 OK
content-type: image/gif
                                            
cache-control: max-age=86400
etag: "63791001-5787a"
server: nginx
date: Fri, 25 Nov 2022 14:11:46 GMT
last-modified: Sat, 19 Nov 2022 17:18:57 GMT
accept-ranges: bytes
x-cache: HIT from yd11_02-cdn-g01-la2-42
content-length: 358522
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   358522
Md5:    677dab97fd11d2343aed327e66c5a29e
Sha1:   72835b9544fb5562003588064f415bb9362b7cb6
Sha256: feb70e6f842abc981c0d7bac60bb6fac4e602065bfecf386adcafa5d2e303d48
                                        
                                            GET /128/960x120.gif HTTP/1.1 
Host: zhibo128x.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             154.83.25.141
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: openresty
Date: Mon, 28 Nov 2022 09:26:15 GMT
Content-Length: 647290
Connection: keep-alive
Last-Modified: Sat, 08 Oct 2022 06:08:16 GMT
ETag: "634113d0-9e07a"
Expires: Wed, 30 Nov 2022 00:43:28 GMT
Cache-Control: max-age=2592000
Via: 154.83.25.138
CDN-Cache: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   647290
Md5:    4fd1179d632274467f2d161456d79264
Sha1:   7e14d27cde6b11c437d17d7abf8ea273a5e63798
Sha256: 4a24512ccf73527d8996dc5a02acc63fe7fcb7c9f9ae22cac178345c6d46361c
                                        
                                            GET /upload/vod/20211208-1/3dbaac8a18dffbb986cb8ada5afe756f.jpg HTTP/1.1 
Host: ddcdn.comtucdncom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.89.209.74
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: Tengine
Date: Mon, 28 Nov 2022 17:26:45 GMT
Content-Length: 464670
Connection: keep-alive
Last-Modified: Wed, 16 Feb 2022 16:45:06 GMT
ETag: "620d2a12-7171e"
Expires: Wed, 28 Dec 2022 09:26:51 GMT
Cache-Control: max-age=2592000
access-control-allow-credentials: : true
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, xresolution=120, yresolution=120], baseline, precision 8, 1280x720, components 3\012- data
Size:   464670
Md5:    ba0bc684cabb92a694d67237b2637887
Sha1:   cf57fb92bcca91174e038eb25b9fcd4c36af9a49
Sha256: 07de171b4735f70b00021bf230231faf69573e9e90e60b3974aeae196375a27d
                                        
                                            GET /4/960X120.gif HTTP/1.1 
Host: jackie4fun.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             58.218.208.85
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Tengine
Content-Length: 113720
Connection: keep-alive
Date: Mon, 28 Nov 2022 08:31:06 GMT
Last-Modified: Tue, 15 Nov 2022 13:01:26 GMT
ETag: "63738da6-1bc38"
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669624266
Via: cache72.l2cn2647[341,341,304-0,M], cache28.l2cn2647[343,0], kunlun6.cn192[0,0,200-0,H], kunlun8.cn192[1,0]
Age: 3345
X-Cache: HIT TCP_MEM_HIT dirn:11:1172472169
X-Swift-SaveTime: Mon, 28 Nov 2022 08:31:06 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 3adad01c16696276112831905e


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   113720
Md5:    48bd39bd9b0a2c36655f4202daea1314
Sha1:   8aba4108ee8c1e5128b5d52310064192c2766620
Sha256: e01821b5e8f776bc45dd2fe19116816697d45a74fc96babb67a6a63844f992ae
                                        
                                            GET /8499/150x150.gif HTTP/1.1 
Host: 8499583.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.209.128.164
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 134747
last-modified: Sun, 13 Nov 2022 10:03:32 GMT
etag: "20e5b-5ed573c48c405"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 150\012- data
Size:   134747
Md5:    48c8ab8ae6b52201e71decda0b783d26
Sha1:   5817a61ac305b0b96542b5aced965e79cf67d010
Sha256: 011e88ae2efb7e2c7a98115adcc443c2b965206d34a45c98f7012d476de9aeb8
                                        
                                            GET /36580.gif HTTP/1.1 
Host: 365tupian.oss-cn-shenzhen.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             120.77.166.102
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: AliyunOSS
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 340103
Connection: keep-alive
x-oss-request-id: 63847EDB703D5E323419FE04
Accept-Ranges: bytes
ETag: "DE35ABDFD47D687767C6CBCF00ECC4EF"
Last-Modified: Fri, 18 Nov 2022 08:51:06 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10759737833161401007
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: 3jWr39R9aHdnxsvPAOzE7w==
x-oss-server-time: 2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 80\012- data
Size:   340103
Md5:    de35abdfd47d687767c6cbcf00ecc4ef
Sha1:   567b54f4af028ccfe624b1ae2b00528465ed55d3
Sha256: e2b981314879e8bf01da60ce70dc097c394629ca150f93b0920b00eb99719fe2
                                        
                                            GET /img/tos-cn-i-siecs4i2o7/dcadd199aa5e4cb291ed40729e0fa5a9~noop.image HTTP/1.1 
Host: p9.toutiaoimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             4.79.109.102
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 806826
date: Tue, 08 Nov 2022 15:56:15 GMT
server: nginx
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 31 Mar 2022 10:03:03 GMT
nw-session-id: 2022033118030201019409901840A77C0Endgts03la
nw-session-trace: 2022-03-31T18:03:03.257713369+08:00 344
x-bdcdn-cache-status: TCP_HIT
x-length: 806826
x-powered-by: ImageX
x-response-date: Thu, 31 Mar 2022 18:03:03 GMT
x-tt-logid: 2022033118030201019409901840A77C0E
x-tt-trace-tag: id=09;cdn-cache=hit;type=static
x-response-lb: image
x-ser: BC177_dx-lt-yd-zhejiang-jinhua-12-cache-13, BC177_dx-lt-yd-zhejiang-jinhua-12-cache-13, BC33_US-Michigan-chieago-1-cache-1, BC103_US-Washington-seattle-1-cache-1
x-cache: HIT from BC103_US-Washington-seattle-1-cache-1(baishan)
server-timing: cdn-cache;desc=HIT,edge;dur=1
access-control-allow-origin: *
timing-allow-origin: *
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 400 x 420\012- data
Size:   806826
Md5:    ce6a32bc15190689f6891ff7973e913f
Sha1:   99a64f0bdb4351f86032d9b1c9d9079ea6667cc8
Sha256: 18cdc10ae1ad7de191dd2adc346add24ded8e35c69f25a63bb91c928fe837331
                                        
                                            GET /b9f56fb3d2e6405b8b756e0ff7c42ac6.gif HTTP/1.1 
Host: 398375178.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             47.75.19.145
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: AliyunOSS
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 140712
Connection: keep-alive
x-oss-request-id: 63847EDB0E14E439373E461D
Accept-Ranges: bytes
ETag: "62ACA5F86547EBF8ABA956425356874B"
Last-Modified: Thu, 17 Nov 2022 13:15:31 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2922816915217488187
x-oss-storage-class: Standard
Content-MD5: Yqyl+GVH6/irqVZCU1aHSw==
x-oss-server-time: 2


--- Additional Info ---
Magic:  GIF image data, version 89a, 750 x 240\012- data
Size:   140712
Md5:    62aca5f86547ebf8aba956425356874b
Sha1:   d9ecdbe6202ddee69d57658be2d54a0312c1cb55
Sha256: 3be630a28e559a5dd07a2e9e3bf8280a8e20dda60eda7dce947fad9716e2eba8
                                        
                                            GET /xpj/xpj96060a.gif HTTP/1.1 
Host: ggt999.oss-cn-hangzhou.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             47.110.23.69
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: AliyunOSS
Date: Mon, 28 Nov 2022 09:26:51 GMT
Content-Length: 345138
Connection: keep-alive
x-oss-request-id: 63847EDB29A53C3430836851
Accept-Ranges: bytes
ETag: "F05834994A4E3B5795FE3F457E8D7DC0"
Last-Modified: Sat, 12 Nov 2022 05:03:57 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 696102764230784626
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: 8Fg0mUpOO1eV/j9Ffo19wA==
x-oss-server-time: 3


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   345138
Md5:    f05834994a4e3b5795fe3f457e8d7dc0
Sha1:   841957f7408ebdac8fa20a77c906fdb18570f639
Sha256: 1dddb11b151830b32f8b9750d07e00ae6f81f3ed3aff1fa8e5636e890f9d5671
                                        
                                            GET /b205223651a64b9cb579ec80e7d56282.gif HTTP/1.1 
Host: 223969ufy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.61.212.223
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: max-age=604800
ETag: "63692693-9b320"
Date: Fri, 25 Nov 2022 13:13:06 GMT
Server: nginx
Last-Modified: Mon, 07 Nov 2022 15:38:59 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-23
Content-Length: 635680


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   635680
Md5:    1cb325d5859a93c29e41953b1089d4ef
Sha1:   ba867d7f6fd51ccf98e3e62b3786b109198ed236
Sha256: 903053e8dc64064819c2c30f1672015877d8cf7f5f2e7ca70ba8060ddda4b8fb
                                        
                                            GET /200x200.gif HTTP/1.1 
Host: dl66d.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.135.77.192
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 469594
last-modified: Tue, 01 Nov 2022 09:16:18 GMT
etag: "6360e3e2-72a5a"
expires: Wed, 28 Dec 2022 09:26:51 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   469594
Md5:    edbab5fd16a19f4165fdb9a2754055e8
Sha1:   89d14608bdb7e494e7c4c23eb9e032b86246c39e
Sha256: 36911d69e52b439f41f2536e79b7548e67a9a71a98454f3f4bcad26aa26d12c4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5919
Cache-Control: max-age=105521
Date: Mon, 28 Nov 2022 09:26:53 GMT
Etag: "638360ef-2d7"
Expires: Tue, 29 Nov 2022 14:45:34 GMT
Last-Modified: Sun, 27 Nov 2022 13:06:55 GMT
Server: ECS (amb/6B92)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /af/q960x120-6.gif HTTP/1.1 
Host: sz88.oss-cn-shenzhen.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             120.77.166.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: AliyunOSS
Date: Mon, 28 Nov 2022 09:26:52 GMT
Content-Length: 478685
Connection: keep-alive
x-oss-request-id: 63847EDC4EAD113637988D99
Accept-Ranges: bytes
ETag: "5BF732E915BAF1D960C69A7DFEB3EF7C"
Last-Modified: Tue, 27 Sep 2022 07:43:46 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8402549840524505905
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: W/cy6RW68dlgxpp9/rPvfA==
x-oss-server-time: 1


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   478685
Md5:    5bf732e915baf1d960c69a7dfeb3ef7c
Sha1:   dab765903785eb638106a06c2dc636daa1842a01
Sha256: e986d2a1b3591d88a0f5ca8c1f5192b77f130f495dfe7af3a73ab51ae8ca17c7
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:26:53 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 02 Dec 2022 05:47:31 GMT
ETag: "21bb570776956f36c9f3ed7bc95e0f9dea0c486f"
Last-Modified: Mon, 28 Nov 2022 05:47:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 815
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77121089cae01c16-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    fcde31d33aa3ef8c0fcae657bc544712
Sha1:   21bb570776956f36c9f3ed7bc95e0f9dea0c486f
Sha256: 2bf2bb959ce895b9c6b9a6b12d4f944b44f2a8c71100e340ad9ed561d7ccd021
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=99602
Date: Mon, 28 Nov 2022 09:26:53 GMT
Etag: "638360ef-2d7"
Expires: Tue, 29 Nov 2022 13:06:55 GMT
Last-Modified: Sun, 27 Nov 2022 13:06:55 GMT
Server: nginx
Content-Length: 727

                                        
                                            GET /qqmail_head/exDQ4ofPz1kmmHxzRWkqxuiaS1ef2WDKV9IlGqQ01KRp1TcLC88449sRZyibbnmqia1/0 HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             43.154.254.32
HTTP/2 200 OK
content-type: image/png
                                            
server: Qnginx/1.4.4
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 62229
vary: Accept,Origin
last-modified: Tue, 19 Oct 2021 21:03:59 GMT
cache-control: max-age=2592000
x-delay: 13878 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 62229
chid: 0
fid: 0
x-nws-log-uuid: 67641498-46b2-4349-8780-abb69850d5ac
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   62229
Md5:    ee52eff8577d4346eca344892bd41406
Sha1:   5e2ad497a1866f71f088860d05f2b962e82a16e1
Sha256: b1d685515a8e1186c3f5d4844256b95fcc83121fa45f29a2e58e852537332267
                                        
                                            GET /qqmail_head/PiajxSqBRaEJ9B4UlyASnW3oH3MPQFqEtXG2iaiak1YbXXGG6NXuTKLQqz8Mo6C2CJ3MbwcCrQRmHw/0 HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             43.154.254.32
HTTP/2 200 OK
content-type: image/gif
                                            
server: Qnginx/1.4.4
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 331043
vary: Accept,Origin
last-modified: Sat, 12 Nov 2022 13:28:23 GMT
cache-control: max-age=2592000
x-delay: 174 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 331043
chid: 0
fid: 0
x-nws-log-uuid: 43b14c15-5d31-4a4a-91db-4cadf2d1abe2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   331043
Md5:    09f29e56330449942571a66f47f82fb5
Sha1:   30fc3421671176f6f724f32ee910470f03661ddc
Sha256: b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
                                        
                                            GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0 HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             43.154.254.32
HTTP/2 200 OK
content-type: image/gif
                                            
server: Qnginx/1.4.4
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 1607696
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:45 GMT
cache-control: max-age=2592000
x-delay: 736 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1607696
chid: 0
fid: 0
x-nws-log-uuid: 99be87cb-6852-41df-91e0-079a52e5fc7f
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 640 x 200\012- data
Size:   1607696
Md5:    9c26f4dcfdfa72ecdcbe3ea854547b4c
Sha1:   fed85b90734400d6810be2b07403f5c8a194a507
Sha256: ebd842d015d6684a6995a73f1e81f0dea219815318f8993501da9ca79cca74d2
                                        
                                            GET /img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image HTTP/1.1 
Host: p26.toutiaoimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             120.52.95.234
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:53 GMT
content-length: 677521
set-cookie: hccesp_lttk=AAAAAgAAAAAAAAAFAAAAAQAAAAeBwwi0wpEfjP7O+Tm16SDgpQE1Sqtouq3SRN7JzynFUgAAAAAAAAAAAAAAQN8evMDbeqneSpXQaERowYJVdntsADvFvTR1dLvWZHytVkNV9MZUv0VjrB1Gxnd7jghq7DO2YJqAMP30c5WoOdI=; Expires=Tue, 28 Nov 2023 09:26:53 GMT; path=/;
server: openresty
age: 13499268
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 30 Dec 2021 00:07:35 GMT
nw-session-id: 2021123008073501015013614530ADE9B0dprsv01tt
nw-session-trace: 2021-12-30T08:07:35.194015393+08:00 68
x-bdcdn-cache-status: TCP_HIT
x-ccdn-cachettl: 31536000
x-length: 677521
x-powered-by: ImageX
x-response-date: Thu, 30 Dec 2021 08:07:35 GMT
x-response-lb: image
x-tt-logid: 2021123008073501015013614530ADE9B0
nginx-hit: 1
server-timing: cdn-cache;desc=HIT, edge;dur=3
via: CHN-HElangfang-AREACUCC1-CACHE22[3],CHN-HElangfang-AREACUCC1-CACHE35[0,TCP_HIT,0],CHN-TJ-GLOBAL1-CACHE60[39],CHN-TJ-GLOBAL1-CACHE35[0,TCP_HIT,36]
x-hcs-proxy-type: 1
x-tt-trace-host: 016a2077e03b2041825c42669e9a23cec5ee04519515486308eb42b81315658df6aa5ed29ad219c7d25626d5b022cced5274c18183adcd43889f65e87a17fde2315b0226a7e5f07d4c19094125051b3e74699be800dd629619bc2141d5fb81fc89ccc76230d7d3e4f731a9d881f3cb16c4
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 270 x 160\012- data
Size:   677521
Md5:    94051cb1d1b77200b4462281a864b96e
Sha1:   e5b468a1b2f4bbdda1b6a3a0df2dcce6b3de7e06
Sha256: d44d0d2dd188024b60ec38cb3f3ea10c080690175e923f90c9c2a2e862670c84
                                        
                                            GET /img/tos-cn-i-siecs4i2o7/0226fc4667f041eebafb92c08aba742c~noop.image HTTP/1.1 
Host: p26.toutiaoimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             120.52.95.234
HTTP/2 200 OK
content-type: image/gif
                                            
date: Mon, 28 Nov 2022 09:26:53 GMT
content-length: 301024
set-cookie: hccesp_lttk=AAAAAgAAAAAAAAAFAAAAAQAAAAeBwwi0wpEfjO7SWvyLs8mw/7QB34kfHY+gLXpPgS4VhQAAAAAAAAAAAAAAQCt+FU7aYW5djhkk/iM/zSbSBhNsy/gdLNilz02sO2kxTC+mB8QBC+94Cwk09I6CyoA05x14t7LdlOTptsGuEGM=; Expires=Tue, 28 Nov 2023 09:26:53 GMT; path=/;
server: openresty
age: 9824887
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Sat, 06 Nov 2021 17:01:43 GMT
nw-session-id: 2021110701014301015108502152A73235rcjk803tt
nw-session-trace: 2021-11-07T01:01:43.669209445+08:00 34
x-bdcdn-cache-status: TCP_MISS
x-ccdn-cachettl: 31536000
x-length: 301024
x-powered-by: ImageX
x-response-date: Sun, 07 Nov 2021 01:01:43 GMT
x-response-lb: image
x-tt-logid: 2021110701014301015108502152A73235
nginx-hit: 1
server-timing: cdn-cache;desc=HIT, edge;dur=8
via: CHN-HElangfang-AREACUCC1-CACHE22[8],CHN-HElangfang-AREACUCC1-CACHE15[0,TCP_HIT,1],CHN-TJ-GLOBAL1-CACHE90[6],CHN-TJ-GLOBAL1-CACHE72[0,TCP_HIT,4]
x-hcs-proxy-type: 1
x-tt-trace-host: 016e0001876583f0a366970da60fe77c66f56a5eb79688f9c4e7e6c49708d552a39ce55d97749c3e8510d737d6bed077b75390b82e45430b80f2266ba222fbd73cd89bceef56b5d71b00add0867f5f44d259170ca6c80d220231d003018378230b0a9b18efbe7abad09aa9b368178b8893f8ed65931abed8e45506dc8686afd64a2dd156f524477f07b8b7fcfe9e7fdb2c
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 120 x 120\012- data
Size:   301024
Md5:    924fb352713ee10f6f4bce3167ccce13
Sha1:   127a437f7a5020f7e7c08b6c6465be55dcb32e0c
Sha256: 6e04c7ee887495ce8805d38b200ca217c28b5e83655f4e7f4e8f8f8e28b872bf
                                        
                                            GET /g4/M01/A8/BC/rBAAdmMm1vmAR9JIAAdIafyG5QY340.gif HTTP/1.1 
Host: cdn.u1.huluxia.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

                                        
                                             104.250.44.2
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Content-Length: 477289
Connection: keep-alive
Server: KS3
ETag: "760cc21f91ee02e848650627ffa47ae2"
Date: Mon, 28 Nov 2022 09:26:53 GMT
Last-Modified: Sun, 18 Sep 2022 08:29:45 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
X-Application-Context: application
x-kss-request-id: f9ah8t80h92obs6l7hib1norlkcr0vc6
X-Info-StorageClass: -
Content-MD5: dgzCH5HuAuhIZQYn/6R64g==
x-kss-meta-huluxia_upload: huluxia_upload
x-link-via: lsj11:80;lsj12:80;
x-b2f-cs-cache: no-cache
X-Cache-Status: MISS from KS-CLOUD-LSJ-12-03, MISS from KS-CLOUD-LSJ-11-02
X-Cdn-Request-ID: e0017c8634f88ff1f5a662492f0f8980


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   477289
Md5:    760cc21f91ee02e848650627ffa47ae2
Sha1:   22df8e62d12977ffd032aba17e5fd7632032633f
Sha256: 2b36a60cb734e5ebcaa9ad4d93f914157e563da89c4e08231bd02b72678875bd
                                        
                                            GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0 HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             43.154.254.32
HTTP/2 200 OK
content-type: image/gif
                                            
server: Qnginx/1.4.4
date: Mon, 28 Nov 2022 09:26:51 GMT
content-length: 1362871
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:47 GMT
cache-control: max-age=2592000
x-delay: 100061 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1362871
chid: 0
fid: 0
x-nws-log-uuid: 4186478e-d98b-49d3-b0d5-39dd5d910544
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 640 x 200\012- data
Size:   1362871
Md5:    b43c54ced7fcd33ebd9405eb26d533b7
Sha1:   05e5eb23ef5a79364bc8f8fd778d54a9fa335174
Sha256: 7db80c626560b0016fd427d864bb6116a44a858eb7968728cd872814939a24b2
                                        
                                            GET /ott/jfs/t1/100541/13/34425/1368366/6380d2c7E557223e9/c7ab328a6bf1c202.gif HTTP/1.1 
Host: kjimg10.360buyimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             182.140.218.3
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:53 GMT
content-length: 1368366
cache-control: max-age=315360000
expires: Mon, 22 Nov 2032 14:53:07 GMT
last-modified: Fri, 25 Nov 2022 14:35:51 GMT
age: 239626
via: http/1.1 ORI-CLOUD-HUN-MIX-37 (jcs [cRs f ]), http/1.1 SCchengdu-CT-11-MIX-30 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1669387987433-0-0-15-60-60;200;200-1669438776196-0-0-0-1-1;200-1669627613825-0-0-0-1-1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 240\012- data
Size:   1368366
Md5:    e2d39c8f7400e280a030d2973e264a40
Sha1:   aaae77607041010aaee190544bdbe9591a87d1f8
Sha256: 8c03d26da39edc9f28d4af8e91b1adefe9fdccff142178da3110a15bacf08134
                                        
                                            GET /png-vector/20190603/ourmid/pngtree-icon-close-button-png-image_1357955.jpg HTTP/1.1 
Host: png.pngtree.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.18.2.157
HTTP/2 403 Forbidden
content-type: application/xml
                                            
date: Mon, 28 Nov 2022 09:26:52 GMT
x-amz-request-id: BZCRB0MZC8W67FC9
x-amz-id-2: Q2uNQ/yrsw+4yPI49JDsblaIlWQh0UUDSd6bgxt/W5BS5BtM1xcTBcJW/XCeoKDAPqt24s5PW/E=
cf-cache-status: MISS
set-cookie: __cf_bm=2l.IGo79iQPjyVARpPLrTtLbBX3XwqP3OB8LmvKMW.w-1669627612-0-AcZDQ7vcDsBYdXa7rVAIEQozdEZa/0+UC2jeRg/zjxx+Ic01O12OjFd7sBYoi9I67oZvIzzDd02VkVCiZsq6gDw=; path=/; expires=Mon, 28-Nov-22 09:56:52 GMT; domain=.pngtree.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712107bd8aa0b45-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /images/63664dfd09d6345f4f98bebe.gif HTTP/1.1 
Host: img.9376x.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.239.226.23
HTTP/2 302 Found
                                            
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/b75457ba961c4fbb9e3770eab50c6481
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /template/dfcc/static/js/jquery.min.js HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.henniu455.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:49 GMT
last-modified: Sat, 08 Jan 2022 14:07:32 GMT
vary: Accept-Encoding
etag: W/"61d99aa4-17b8b"
expires: Mon, 28 Nov 2022 21:26:49 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: www.henniu455.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://baidu.hnmaccms.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             173.231.12.252
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 09:26:49 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1: