Report - artefact.live666.online/

Report Overview

Visited public
2023-12-11 03:35:46
Tags
URL
artefact.live666.online/
Finishing URL
artefact.live666.online/
IP / ASN
139.180.223.6
#20473 AS-CHOOPA
Title
爱性生活网

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
translate-pa.googleapis.com	1620	2005-01-25	2021-11-04 07:37:42	2023-12-10 22:42:16	548 B	2.3 kB	142.250.74.106
img.puzyzcdn.com	unknown	2023-01-18	2023-08-17 18:00:01	2023-11-20 05:05:38	2.9 kB	0 B	0.0.0.0
f2dimg.0afaf5e.com	unknown	2023-07-10	2023-11-16 02:34:56	2023-12-05 15:39:16	6.5 kB	8.4 MB	104.18.3.221
imagetupian.nypd520.com	404351	2018-07-28	2018-09-06 12:29:36	2023-11-19 04:45:44	3.3 kB	4.8 kB	85.208.116.42
zimwimg.0afaf5e.com	unknown	2023-07-10	2023-11-15 06:22:01	2023-11-21 15:04:34	6.0 kB	1.9 MB	104.18.2.221
hm.baidu.com	8254	1999-10-11	2012-05-26 10:38:45	2023-12-10 18:29:19	1.1 kB	12 kB	103.235.46.191
translate.google.com	1156	1997-09-15	2012-05-30 03:30:32	2023-12-10 18:13:27	469 B	91 kB	216.58.211.14
artefact.live666.online	unknown	unknown	No data	No data	5.2 kB	197 kB	139.180.223.6
img.f2dbf.com	unknown	2023-10-03	2023-10-03 08:34:13	2023-11-30 23:45:14	6.3 kB	9.5 kB	85.208.116.42
hyimg.0afaf5e.com	unknown	2023-07-10	2023-11-16 19:22:49	2023-11-19 04:45:44	6.6 kB	897 kB	104.18.2.221
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2023-12-10 05:58:01	1.7 kB	8.9 kB	142.250.74.99
	unknown				6.0 kB	8.8 kB	142.54.176.10
img2.xiangbinjun.com	339934	2016-03-17	2019-11-08 03:23:17	2023-11-20 05:05:38	6.6 kB	9.6 kB	142.54.176.10
nygimg.0afaf5e.com	unknown	2023-07-10	2023-11-16 19:22:49	2023-12-07 16:38:38	3.3 kB	464 kB	104.18.3.221
translate.googleapis.com	1005	2005-01-25	2012-05-31 09:21:21	2023-12-10 18:39:00	1.8 kB	92 kB	142.250.74.106
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-12-10 10:23:31	441 B	87 kB	142.250.74.136
ocsp.trust-provider.cn	unknown	2015-04-09	2022-02-10 09:18:30	2023-12-10 12:43:13	3.5 kB	14 kB	111.13.153.152
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-12-10 10:32:08	471 B	4.2 kB	142.250.74.3
api.9ccmsapi.com	unknown	2019-02-19	2019-02-23 10:40:41	2023-12-09 18:23:02	428 B	1.1 kB	104.21.82.6

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-11	medium	puzyzcdn.com	Sinkholed
2023-12-11	medium	puzyzcdn.com	Sinkholed
2023-12-11	medium	puzyzcdn.com	Sinkholed
2023-12-11	medium	puzyzcdn.com	Sinkholed
2023-12-11	medium	puzyzcdn.com	Sinkholed
2023-12-11	medium	puzyzcdn.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (17)

	URL	From	Size	First Seen	Last Seen
	artefact.live666.online/Static/Home/GongGao/js/co.js?t=10	ScriptElement	2.6 kB	2023-03-10	2024-08-21
Pretty URL artefact.live666.online/Static/Home/GongGao/js/co.js?t=10 IP 139.180.223.6 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 16:24 Last Seen2024-08-21 09:00 Times Seen34 Hash fe96d0095b6ff0b008a8cb3adcb201c9 db14429ffec791462d2e16f8176d055a764b361f deeccee80dff180f813b66073d612832d5e69d8ffbe8ba682ba8bd12d8d098dd Loading...

	artefact.live666.online/	ScriptElement	153 B	2023-11-15	2024-08-20
Pretty URL artefact.live666.online/ IP 139.180.223.6 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-15 04:46 Last Seen2024-08-20 19:32 Times Seen12 Hash eadfddf65d120056fc3a252f7c304222 70cd9528b8050e7d0a34e74abad9d209aafda8d7 d0628e78104aa94b01d085dbbbc112298518e45b5c4955b632bbe8599865c3b0 Loading...

	artefact.live666.online/Template/9C18A473/js/index.min.js	ScriptElement	17 kB	2023-11-15	2023-12-11
Pretty URL artefact.live666.online/Template/9C18A473/js/index.min.js IP 139.180.223.6 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-15 04:46 Last Seen2023-12-11 04:35 Times Seen2 Hash b3c71196ad1bef7f6ef9eab02f2ddafe 644a9f620db768eba49e3ab92aa422e3bfdaa8b0 d8faf818d5a5214910d550386fbc6a0e9a77ff44e4163bebe852787dba5d8c3d Loading...

	www.googletagmanager.com/gtag/js?id=G-BNVSKDCKNQ	ScriptElement	250 kB	2023-12-11	2023-12-11
Pretty URL www.googletagmanager.com/gtag/js?id=G-BNVSKDCKNQ IP 142.250.74.136 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-11 04:35 Last Seen2023-12-11 04:35 Times Seen1 Hash 030319b4aae1c2bf93f4e50816624fe0 1257c00dbb7d380b6fc2e2e3a434588e9f22918f 8de3a6b3cba67e91b62e7581bf1f374652c986f378a60b45f08fbd52f935861b Loading...

	artefact.live666.online/Static/Home/GongGao/js/jQuery.js	ScriptElement	88 kB	2023-03-07	2025-05-05
Pretty URL artefact.live666.online/Static/Home/GongGao/js/jQuery.js IP 139.180.223.6 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17 Last Seen2025-05-05 14:49 Times Seen226 Hash 4a24bed8e21d8f3b5569e507c0de2ba4 23a66cab14110e02194a5f205bb7e6aa551a046f 26a80014d87ff2ce19f2d1cfc92e537213f96ab6b620a4217da3cb643aeab4ba Loading...

	artefact.live666.online/Static/Home/GongGao/js/cookie.js	ScriptElement	2.3 kB	2023-03-07	2025-04-16
Pretty URL artefact.live666.online/Static/Home/GongGao/js/cookie.js IP 139.180.223.6 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17 Last Seen2025-04-16 19:52 Times Seen171 Hash 648c602f063ab15d0a2bab03baffd0a3 90822d0b6ebd3d1b6e7cad8d8a52cc500e3732c6 20a143a888ebddef9e315bcf6c4d7083021479e2761c9376fd88b2e1a8dc1faf Loading...

	artefact.live666.online/Php/Home/kakaxiaikakaxi.php	ScriptElement	5.0 kB	2023-03-07	2025-03-20
Pretty URL artefact.live666.online/Php/Home/kakaxiaikakaxi.php IP 139.180.223.6 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17 Last Seen2025-03-20 07:19 Times Seen133 Hash bcb96b28258f61569a5a73720d332278 aa2e46e7863a8f0f34354fa0e878f360ce954e2a ded26e227e5409785bdf1513dd88d97c63ee61062bad3131624dcac3149cdc6c Loading...

	unknown	Function	37 B	2023-04-11	2025-05-11
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:49 Last Seen2025-05-11 07:50 Times Seen34545 Hash 1c5c9160600df2d96d69a4ea16cec7ed 3cf678c9135cc952ba6970ef545035bb757a443f a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808 Loading...

	hm.baidu.com/hm.js?a89207277c97474e61d6e7942b61562f	ScriptElement	30 kB	2023-12-11	2023-12-11
Pretty URL hm.baidu.com/hm.js?a89207277c97474e61d6e7942b61562f IP 103.235.46.191 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-11 04:35 Last Seen2023-12-11 04:35 Times Seen1 Hash bc944477f1e4c970b0793f9d786c23c8 65fd967085f0f253b5d5fdadc1b1ee0b2fd1ae65 f09b1679e8969cd1234fc604e9cb74352edcbd72c7cc8e124ab5f8a4c6f47919 Loading...

	unknown	ScriptElement	49 kB	2023-12-08	2025-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 03:46 Last Seen2025-05-07 12:11 Times Seen1221 Hash 95a79d9eec10cbcd3a22313eb08523bb 0a26303c22beedddd464324712828599519b7cca bf5f99f9b0cf7c4e2b4e6e20ca35c24e142d87507f8db00ef4ad6ed73ce4da92 Loading...

	artefact.live666.online/_/translate_http/_/js/k=translate_http.tr.no.L3wIDG9mmTk.O/am=AAM/d=1/rs=AN8SPfrPgOxDirRraXwwVCWhWj26dFe3YA/m=el_conf	ScriptElement	90 kB	2023-12-11	2023-12-11
Pretty URL artefact.live666.online/_/translate_http/_/js/k=translate_http.tr.no.L3wIDG9mmTk.O/am=AAM/d=1/rs=AN8SPfrPgOxDirRraXwwVCWhWj26dFe3YA/m=el_conf IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-11 04:35 Last Seen2023-12-11 04:35 Times Seen1 Hash 473c7e72aa6ff89c17e0952abcf42d51 fdee976a6f17703be0a9307bb61b90f0f34f6f5e 8f6f7389262a30f4b807655eb90848faf0e3fa6ac52e257c11844a0f86866a54 Loading...

	unknown	Function	299 B	2024-08-20	2024-08-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-08-20 16:09 Last Seen2024-08-20 16:09 Times Seen1 Hash 6b9ac1eeed5ffe8eea0d40720b9d871d a3c6aa0a249aa5efc13e88c16ccbf45b7264a13c 94592f46cb8d580edba22111a58fcf49915b33dbe9b2c04571098dd98c5f12a4 Loading...

	translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.L3wIDG9mmTk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrYT5fIDVzVavnV7x1S07NcQgDRsA/m=el_main	ScriptElement	261 kB	2023-12-08	2025-03-26
Pretty URL translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.L3wIDG9mmTk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrYT5fIDVzVavnV7x1S07NcQgDRsA/m=el_main IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 03:46 Last Seen2025-03-26 14:20 Times Seen246 Hash 879ffbe206a9e9b58833370a30157dc7 296cf6cda05aed2e3a1c04314b7b2e7c51dfbe5f 8abe56f67c72b6b5ba0f7e27e49d42791f1b687f45b7e370f2f78bf50ec9ae55 Loading...

	api.9ccmsapi.com/boss/20190928.js	ScriptElement	341 B	2023-03-07	2025-04-16
Pretty URL api.9ccmsapi.com/boss/20190928.js IP 104.21.82.6 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17 Last Seen2025-04-16 19:52 Times Seen104 Hash 155a2200839938056a709a6c93055fce e3281311bf17b9a4e3ee828b499821c41f8d3dab da3025eab8247578f8f3d3d29efb112cdfcfde7e8ac9d7d191b512516267cd44 Loading...

	artefact.live666.online/Template/9C18A473/js/language.js	ScriptElement	1.3 kB	2023-03-08	2024-08-21
Pretty URL artefact.live666.online/Template/9C18A473/js/language.js IP 139.180.223.6 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 08:24 Last Seen2024-08-21 09:24 Times Seen47 Hash 42acba827fc793ddba125f940cd26644 b3d22069cdfb69632597fed99ce80b90863d3f62 aff7f2108eb8b33e0aa04a33f1d0897422239ebd0f23fb4f82fbaff7c0f9bcdd Loading...

		Size	First Seen	Last Seen
	#1 Write - de456dc8067d4dcd4398ed875f052ab0	27 B	2023-03-07 01:17	2025-03-20 07:19
Pretty Observations First Seen2023-03-07 01:17 Last Seen2025-03-20 07:19 Times Seen127 Hash de456dc8067d4dcd4398ed875f052ab0 07bfd7c08c7199a50b65c72582ed0d1f0475651f a01fd8566744afe7348bc5b6eb89724fba2f963ba562a14ed9b296c6e5b8154a Loading...

	#2 Write - 0a3a0b592b9c285e050805307cee87c2	6 B	2023-03-07 01:02	2025-05-11 08:08
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 08:08 Times Seen51955 Hash 0a3a0b592b9c285e050805307cee87c2 125a168e24b2bd38aadb84cbb5f87f316b073c41 aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23 Loading...

HTTP Transactions (138)

URL IP Response Size

artefact.live666.online/

139.180.223.6

11 kB

URL User Request GET
artefact.live666.online/
IP
139.180.223.6:0
ASN
#20473 AS-CHOOPA

File type
HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document text - exported SGML document, Unicode text, UTF-8 text, with very long lines (733), with CRLF line terminators
Size
11 kB (10623 bytes)
Hash
7354bbd040df03e376a184c6a891954e
7ddfa55789649c27a8dc5f3a78c4b8062a812dfb
a2a02e1b45dad21700cbf867b682abb76801ae902d7d832a7e8e6e0d4a0aea6c

HTTP Headers

GET / HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:18 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

www.googletagmanager.com/gtag/js?id=G-BNVSKDCKNQ

142.250.74.136

200 OK

86 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-BNVSKDCKNQ
IP
142.250.74.136:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT

File type
ASCII text, with very long lines (3034)
Size
86 kB (86187 bytes)
Hash
030319b4aae1c2bf93f4e50816624fe0
1257c00dbb7d380b6fc2e2e3a434588e9f22918f
8de3a6b3cba67e91b62e7581bf1f374652c986f378a60b45f08fbd52f935861b

HTTP Headers

GET /gtag/js?id=G-BNVSKDCKNQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 03:35:19 GMT
expires: Mon, 11 Dec 2023 03:35:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

artefact.live666.online/Php/Home/kakaxiaikakaxi.php

139.180.223.6

200 OK

1.5 kB

URL GET HTTP/1.1
artefact.live666.online/Php/Home/kakaxiaikakaxi.php
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
1.5 kB (1478 bytes)
Hash
bcb96b28258f61569a5a73720d332278
aa2e46e7863a8f0f34354fa0e878f360ce954e2a
ded26e227e5409785bdf1513dd88d97c63ee61062bad3131624dcac3149cdc6c

HTTP Headers

GET /Php/Home/kakaxiaikakaxi.php HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Template/9C18A473/css/style.min.css

139.180.223.6

200 OK

25 kB

URL GET HTTP/1.1
artefact.live666.online/Template/9C18A473/css/style.min.css
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
ASCII text, with very long lines (44865)
Size
25 kB (24641 bytes)
Hash
92072cc64558e0f24fc2c9a6f3f04ea9
40fd3e4a0bd44645119bf51815bf4382c15c732a
d0b50c36a86c223de6b99e9372b82d93cd5fa010067457807298268737983530

HTTP Headers

GET /Template/9C18A473/css/style.min.css HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:18 GMT
Content-Type: text/css
Last-Modified: Wed, 23 Mar 2022 21:15:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"623b8dea-19619"
Expires: Thu, 14 Dec 2023 03:35:18 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Static/Home/GongGao/css/style.css?t=11

139.180.223.6

200 OK

1.0 kB

URL GET HTTP/1.1
artefact.live666.online/Static/Home/GongGao/css/style.css?t=11
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
1.0 kB (1008 bytes)
Hash
a9ec811fd442fa146248c167914766e0
4d70ab4256c8f9964053be2e8fe5de24f894a66a
f911c0e72de06bd24da4cf768997ef92ce5b0d2b0934e8b22903c1e2b90ea8ba

HTTP Headers

GET /Static/Home/GongGao/css/style.css?t=11 HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: text/css
Last-Modified: Fri, 18 Dec 2020 15:20:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5fdcc8ba-bb0"
Expires: Thu, 14 Dec 2023 03:35:19 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Static/Home/GongGao/js/cookie.js

139.180.223.6

200 OK

751 B

URL GET HTTP/1.1
artefact.live666.online/Static/Home/GongGao/js/cookie.js
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
751 B (751 bytes)
Hash
648c602f063ab15d0a2bab03baffd0a3
90822d0b6ebd3d1b6e7cad8d8a52cc500e3732c6
20a143a888ebddef9e315bcf6c4d7083021479e2761c9376fd88b2e1a8dc1faf

HTTP Headers

GET /Static/Home/GongGao/js/cookie.js HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: application/javascript
Last-Modified: Sat, 12 Dec 2020 22:59:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5fd54b6c-8f1"
Expires: Thu, 14 Dec 2023 03:35:19 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Static/Home/GongGao/js/co.js?t=10

139.180.223.6

200 OK

756 B

URL GET HTTP/1.1
artefact.live666.online/Static/Home/GongGao/js/co.js?t=10
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
756 B (756 bytes)
Hash
fe96d0095b6ff0b008a8cb3adcb201c9
db14429ffec791462d2e16f8176d055a764b361f
deeccee80dff180f813b66073d612832d5e69d8ffbe8ba682ba8bd12d8d098dd

HTTP Headers

GET /Static/Home/GongGao/js/co.js?t=10 HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: application/javascript
Last-Modified: Fri, 18 Dec 2020 15:38:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5fdcccdc-a30"
Expires: Thu, 14 Dec 2023 03:35:19 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Template/9C18A473/js/index.min.js

139.180.223.6

200 OK

5.3 kB

URL GET HTTP/1.1
artefact.live666.online/Template/9C18A473/js/index.min.js
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
Unicode text, UTF-8 text
Size
5.3 kB (5303 bytes)
Hash
b3c71196ad1bef7f6ef9eab02f2ddafe
644a9f620db768eba49e3ab92aa422e3bfdaa8b0
d8faf818d5a5214910d550386fbc6a0e9a77ff44e4163bebe852787dba5d8c3d

HTTP Headers

GET /Template/9C18A473/js/index.min.js HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Mar 2022 23:30:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"623bad82-429a"
Expires: Thu, 14 Dec 2023 03:35:19 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Template/9C18A473/js/language.js

139.180.223.6

200 OK

550 B

URL GET HTTP/1.1
artefact.live666.online/Template/9C18A473/js/language.js
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
ASCII text, with very long lines (1260), with no line terminators
Size
550 B (550 bytes)
Hash
42acba827fc793ddba125f940cd26644
b3d22069cdfb69632597fed99ce80b90863d3f62
aff7f2108eb8b33e0aa04a33f1d0897422239ebd0f23fb4f82fbaff7c0f9bcdd

HTTP Headers

GET /Template/9C18A473/js/language.js HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: application/javascript
Last-Modified: Thu, 04 Feb 2021 13:12:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"601bf2cc-4ec"
Expires: Thu, 14 Dec 2023 03:35:19 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Static/Home/GongGao/js/jQuery.js

139.180.223.6

200 OK

34 kB

URL GET HTTP/1.1
artefact.live666.online/Static/Home/GongGao/js/jQuery.js
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
ASCII text, with very long lines (65450), with CRLF line terminators
Size
34 kB (34481 bytes)
Hash
4a24bed8e21d8f3b5569e507c0de2ba4
23a66cab14110e02194a5f205bb7e6aa551a046f
26a80014d87ff2ce19f2d1cfc92e537213f96ab6b620a4217da3cb643aeab4ba

HTTP Headers

GET /Static/Home/GongGao/js/jQuery.js HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: application/javascript
Last-Modified: Sat, 26 Oct 2019 17:39:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5db484dc-15857"
Expires: Thu, 14 Dec 2023 03:35:19 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

artefact.live666.online/Static/Home/GongGao/js/jQuery.js

139.180.223.6

200 OK

34 kB

URL GET HTTP/1.1
artefact.live666.online/Static/Home/GongGao/js/jQuery.js
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
ASCII text, with very long lines (65450), with CRLF line terminators
Size
34 kB (34481 bytes)
Hash
4a24bed8e21d8f3b5569e507c0de2ba4
23a66cab14110e02194a5f205bb7e6aa551a046f
26a80014d87ff2ce19f2d1cfc92e537213f96ab6b620a4217da3cb643aeab4ba

HTTP Headers

GET /Static/Home/GongGao/js/jQuery.js HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: application/javascript
Last-Modified: Sat, 26 Oct 2019 17:39:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5db484dc-15857"
Expires: Thu, 14 Dec 2023 03:35:19 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

ocsp.trust-provider.cn/

111.13.153.152

600 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
600 B (600 bytes)
Hash
6b15ac44270abbd6a9ab05b57dbb8748
84780daf0447739a47cb8b977cb40164607868f0
86d10ec9dd0d8291d65f6c10e5dca4f1aae52134427fa8ae33f567d5ffd20e89

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83286680af42f95f-SJC
ETag: "84780daf0447739a47cb8b977cb40164607868f0"
Expires: Fri, 15 Dec 2023 21:59:52 GMT
Last-Modified: Fri, 08 Dec 2023 21:59:53 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb6
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PSzjtzsx2ix53:9 (Cdn Cache Server V2.0), 1.1 12124589:17 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_12124589_8153-7063
via: n173-159-130.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1702265720b36fe0f5d9e1914db5fd591e25088ffc
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=4, edge;dur=0

ocsp.trust-provider.cn/

111.13.153.152

600 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
600 B (600 bytes)
Hash
6b15ac44270abbd6a9ab05b57dbb8748
84780daf0447739a47cb8b977cb40164607868f0
86d10ec9dd0d8291d65f6c10e5dca4f1aae52134427fa8ae33f567d5ffd20e89

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83286680af42f95f-SJC
ETag: "84780daf0447739a47cb8b977cb40164607868f0"
Expires: Fri, 15 Dec 2023 21:59:52 GMT
Last-Modified: Fri, 08 Dec 2023 21:59:53 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb6
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PSzjtzsx2ix53:9 (Cdn Cache Server V2.0), 1.1 12124589:17 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_12124589_8317-1834
via: n173-159-129.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 17022657203cba1ee001bbfde2f8f50be1b5b2eb8a
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=4, edge;dur=0

ocsp.trust-provider.cn/

111.13.153.152

600 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
600 B (600 bytes)
Hash
6b15ac44270abbd6a9ab05b57dbb8748
84780daf0447739a47cb8b977cb40164607868f0
86d10ec9dd0d8291d65f6c10e5dca4f1aae52134427fa8ae33f567d5ffd20e89

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83286680af42f95f-SJC
ETag: "84780daf0447739a47cb8b977cb40164607868f0"
Expires: Fri, 15 Dec 2023 21:59:52 GMT
Last-Modified: Fri, 08 Dec 2023 21:59:53 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb6
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PSzjtzsx2ix53:9 (Cdn Cache Server V2.0), 1.1 12124589:17 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_12124589_8607-58744
via: n173-159-129.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 170226572054b2449f65b896124e3e7eac980ed8f8
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=4, edge;dur=0

artefact.live666.online/Static/Home/GongGao/js/cookie.js

139.180.223.6

200 OK

751 B

URL GET HTTP/1.1
artefact.live666.online/Static/Home/GongGao/js/cookie.js
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
751 B (751 bytes)
Hash
648c602f063ab15d0a2bab03baffd0a3
90822d0b6ebd3d1b6e7cad8d8a52cc500e3732c6
20a143a888ebddef9e315bcf6c4d7083021479e2761c9376fd88b2e1a8dc1faf

HTTP Headers

GET /Static/Home/GongGao/js/cookie.js HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: application/javascript
Last-Modified: Sat, 12 Dec 2020 22:59:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5fd54b6c-8f1"
Expires: Thu, 14 Dec 2023 03:35:20 GMT
Cache-Control: max-age=259200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

ocsp.trust-provider.cn/

111.13.153.152

600 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
600 B (600 bytes)
Hash
6b15ac44270abbd6a9ab05b57dbb8748
84780daf0447739a47cb8b977cb40164607868f0
86d10ec9dd0d8291d65f6c10e5dca4f1aae52134427fa8ae33f567d5ffd20e89

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83286680af42f95f-SJC
ETag: "84780daf0447739a47cb8b977cb40164607868f0"
Expires: Fri, 15 Dec 2023 21:59:52 GMT
Last-Modified: Fri, 08 Dec 2023 21:59:53 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb6
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PSzjtzsx2ix53:9 (Cdn Cache Server V2.0), 1.1 12124589:17 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_12124589_8177-42775
via: n173-159-130.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 17022657205a4b8d53357fb44fe53dc4e750e4cf21
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=5, edge;dur=0

img.f2dbf.com/f2dgc/20230926/1493.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1493.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1493.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1493.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1461.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1461.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1461.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1461.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1445.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1445.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1445.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1445.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1495.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1495.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1495.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1495.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1494.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1494.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1494.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1494.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1505.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1505.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1505.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1505.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

ocsp.trust-provider.cn/

111.13.153.152

599 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
599 B (599 bytes)
Hash
001b6c8586ff79afb0b3d0240e636487
2948840f97b1dc8192d74b099971a025a4033fa7
17521c304d64e54d8faae0dabc0e90365caa73527692d916f7494cd8e0ab8d12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83374519ccdecef1-SJC
ETag: "2948840f97b1dc8192d74b099971a025a4033fa7"
Expires: Sun, 17 Dec 2023 17:08:19 GMT
Last-Modified: Sun, 10 Dec 2023 17:08:20 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb1
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 sxian70:9 (Cdn Cache Server V2.0), 1.1 PS-PEK-01ylP25:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_PS-PEK-01ylP25_15245-52289
via: n173-159-130.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1702265720b77d03155159a9b3f87b6abb53df5764
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=8, edge;dur=0

ocsp.trust-provider.cn/

111.13.153.152

599 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
599 B (599 bytes)
Hash
001b6c8586ff79afb0b3d0240e636487
2948840f97b1dc8192d74b099971a025a4033fa7
17521c304d64e54d8faae0dabc0e90365caa73527692d916f7494cd8e0ab8d12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83374519ccdecef1-SJC
ETag: "2948840f97b1dc8192d74b099971a025a4033fa7"
Expires: Sun, 17 Dec 2023 17:08:19 GMT
Last-Modified: Sun, 10 Dec 2023 17:08:20 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb1
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 sxian70:9 (Cdn Cache Server V2.0), 1.1 PS-PEK-01ylP25:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_PS-PEK-01i6s21_9055-23106
via: n173-159-129.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1702265720c33fd95302466afa07fbe821a1345f47
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=6, edge;dur=0

ocsp.trust-provider.cn/

119.36.90.164

599 B

URL
ocsp.trust-provider.cn/
IP
119.36.90.164:0
ASN
#4837 CHINA UNICOM China169 Backbone

File type
data
Size
599 B (599 bytes)
Hash
001b6c8586ff79afb0b3d0240e636487
2948840f97b1dc8192d74b099971a025a4033fa7
17521c304d64e54d8faae0dabc0e90365caa73527692d916f7494cd8e0ab8d12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 833722c4ff070516-HKG
ETag: "2948840f97b1dc8192d74b099971a025a4033fa7"
Expires: Sun, 17 Dec 2023 17:08:19 GMT
Last-Modified: Sun, 10 Dec 2023 17:08:20 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 anxun11:9 (Cdn Cache Server V2.0), 1.1 CS-000-01f4L24:16 (Cdn Cache Server V2.0), 1.1 PS-000-015v471:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_PS-000-01k7g70_29439-42045
via: n173-114-139.bdcdn-hbxtcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 170226572077b067187555548c6c081f5878878dc9
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=10, edge;dur=0

img.f2dbf.com/f2dgc/20230926/1551.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1551.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1551.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1551.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1366.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1366.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1366.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1366.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1550.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1550.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1550.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1550.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

artefact.live666.online/Template/9C18A473/fonts/fontawesome-webfont.woff2?v=4.7.0

139.180.223.6

200 OK

77 kB

URL GET HTTP/1.1
artefact.live666.online/Template/9C18A473/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459 - data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /Template/9C18A473/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/Template/9C18A473/css/style.min.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 03:35:19 GMT
Content-Type: font/woff2
Content-Length: 77160
Last-Modified: Wed, 08 Dec 2021 20:01:20 GMT
Connection: keep-alive
ETag: "61b10f10-12d68"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

img.f2dbf.com/f2dgc/20230926/1547.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1547.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1547.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1547.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

ocsp.trust-provider.cn/

119.36.90.164

599 B

URL
ocsp.trust-provider.cn/
IP
119.36.90.164:0
ASN
#4837 CHINA UNICOM China169 Backbone

File type
data
Size
599 B (599 bytes)
Hash
001b6c8586ff79afb0b3d0240e636487
2948840f97b1dc8192d74b099971a025a4033fa7
17521c304d64e54d8faae0dabc0e90365caa73527692d916f7494cd8e0ab8d12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:20 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 833722c4ff070516-HKG
ETag: "2948840f97b1dc8192d74b099971a025a4033fa7"
Expires: Sun, 17 Dec 2023 17:08:19 GMT
Last-Modified: Sun, 10 Dec 2023 17:08:20 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 anxun11:9 (Cdn Cache Server V2.0), 1.1 CS-000-01f4L24:16 (Cdn Cache Server V2.0), 1.1 PS-000-01fG29:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_PS-000-01fG29_7815-62843
via: n173-114-140.bdcdn-hbxtcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 170226572039a06734386cd748e80b3c32fc8ac3b7
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=7, edge;dur=0

f2dimg.0afaf5e.com/f2dgc/20230926/1493.jpg

104.18.3.221

200 OK

693 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1493.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1280x720, components 3 - data
Size
693 kB (692627 bytes)
Hash
d6e29b68c0a58773589a4dbbbfa85d63
4443817094014d67d0c5c54be618e82dc75b25ce
cef6acb17fa70dbc653f9f0d08d3b842530da59328ba3130486c1bdf8f2b6429

HTTP Headers

GET /f2dgc/20230926/1493.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:20 GMT
content-type: image/jpeg
content-length: 692627
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8eI9wSjKW5NaWB02nrIbcUf92TRuT%2BYgBKkUjsRNUpKHyq3AeqSOmIIsG3ngV6JAkFC86xMU8Qv48QCVoi1fo%2B0y%2BuD3wAktT0%2BMYFV3J3kiBwq3V8BkfqlTVmY4sGgDI6yDFg%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 692627
cf-cache-status: HIT
age: 74573
last-modified: Sun, 10 Dec 2023 06:52:27 GMT
expires: Tue, 10 Dec 2024 03:35:20 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad535d33569f-OSL
X-Firefox-Spdy: h2

img2.minqingguancha.com:8099/z-t-img/MIDE-392.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/MIDE-392.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/MIDE-392.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/MIDE-392.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/NTRD-108.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/NTRD-108.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/NTRD-108.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/NTRD-108.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/MIMK-023.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/MIMK-023.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/MIMK-023.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/MIMK-023.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

f2dimg.0afaf5e.com/f2dgc/20230926/1366.jpg

104.18.3.221

200 OK

114 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1366.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x720, components 3 - data
Size
114 kB (113840 bytes)
Hash
6401fcb42c21093f5bc19658a748767b
dc66844a1c73bb5077309ba3b738f45b5d2bd718
aaa5e089b832b226be374e2f5ea1725a9a5780b59f42908f8a8af40554d66acc

HTTP Headers

GET /f2dgc/20230926/1366.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:20 GMT
content-type: image/jpeg
content-length: 113840
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w7q8hmWQZjTtIL5HbSdMkctFgsUAH4zbuQ%2BieLPBN2EYoLaNQbnYXAftYQ086xccBMkNkVLY9up5h3YL5RPoOcvFFQjRTqeOrNd1V%2BtMaVEwrbNldlJ8%2B3dgTHh6wMfbsMPbaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 113840
cf-cache-status: HIT
age: 78552
last-modified: Sun, 10 Dec 2023 05:46:08 GMT
expires: Tue, 10 Dec 2024 03:35:20 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad539d4a569f-OSL
X-Firefox-Spdy: h2

f2dimg.0afaf5e.com/f2dgc/20230926/1551.jpg

104.18.3.221

200 OK

448 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1551.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "Lavc53.42.4", baseline, precision 8, 1280x720, components 3 - data
Size
448 kB (447720 bytes)
Hash
4919613908b5b566a20582ce6982067d
242d917fffc0277f9ec567da074c6655fc091261
3c32f39f1e8b92dda9d8a72e5540e2fc43a168fe3e742b4698b07b0364a508b2

HTTP Headers

GET /f2dgc/20230926/1551.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:20 GMT
content-type: image/jpeg
content-length: 447720
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iKy7r%2FH%2F%2FbDZit9XgLnnYux7ms4xSyNPKWUw9WypK5FFhIyB0eigxNk7qfzsUt4wYePJfRL0hx5sIEI9qD6D6Om2dmOQK%2BM0jLbyV6NtVQ7JBDde0lvXFCLwjOaPfE%2FrR5vvEw%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 447720
cf-cache-status: HIT
age: 74574
last-modified: Sun, 10 Dec 2023 06:52:26 GMT
expires: Tue, 10 Dec 2024 03:35:20 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad539d48569f-OSL
X-Firefox-Spdy: h2

f2dimg.0afaf5e.com/f2dgc/20230926/1550.jpg

104.18.3.221

200 OK

189 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1550.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "Lavc53.42.4", baseline, precision 8, 720x408, components 3 - data
Size
189 kB (188578 bytes)
Hash
445b314eb2fbaeffabdd0e3d93ae27fb
f11f9f15e85a6d50c897b53d678502d167fe832a
ae0edfcd6e87de7b4d47d243fbe1ca81c0b6c0f2f2679f800a1ea0613e25a662

HTTP Headers

GET /f2dgc/20230926/1550.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:20 GMT
content-type: image/jpeg
content-length: 188578
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r8Hfy%2FUXq%2FihM4gbQ07AnhWJ2iTOQVg%2FLbn%2FGsLQhGW709A2G4tpmhZmB8nHf5gCb8aMLoMLmP3ROzjUnVMK7FBwWE6xYPMBlQ6qpzgGNOmsEEsyQQzKz1gx0pgLn4jqUMTWwg%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 188578
cf-cache-status: HIT
age: 74574
last-modified: Sun, 10 Dec 2023 06:52:26 GMT
expires: Tue, 10 Dec 2024 03:35:20 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad539d4b569f-OSL
X-Firefox-Spdy: h2

img.f2dbf.com/f2dgc/20230926/1549.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1549.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1549.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1549.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1548.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1548.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1548.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1548.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

f2dimg.0afaf5e.com/f2dgc/20230926/1445.jpg

104.18.3.221

200 OK

424 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1445.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 850x478, components 3 - data
Size
424 kB (424454 bytes)
Hash
9bb0f047073534b62d920c7c94e3a3c3
0b2d4aa73a7cf4b11c46a2866d6556024b9d0141
e01ea8be4ab3a5a6c476a48c3ba9f5bc796b3ea7fcd8f7aa63c538b9a9a37310

HTTP Headers

GET /f2dgc/20230926/1445.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:20 GMT
content-type: image/jpeg
content-length: 424454
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YbnlC8iHt5XPjVWOrYdIqfCvrynyJebZDxRcBheRXewAmAQpaMXb%2BbqsWsKjh9vhJ6rjy2KXYX%2Bcy9ts7EbnOiKosQWRspMnP8%2Ffp15KezZjQyAF3H1Ahe%2BpZxetun6a1QUkGw%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 424454
cf-cache-status: HIT
age: 74573
last-modified: Sun, 10 Dec 2023 06:52:27 GMT
expires: Tue, 10 Dec 2024 03:35:20 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad539d4c569f-OSL
X-Firefox-Spdy: h2

img2.xiangbinjun.com/new/202300/FC2PPV-1585551-1.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1585551-1.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1585551-1.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1585551-1.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1601404.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1601404.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1601404.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1601404.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1602258.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1602258.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1602258.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1602258.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1607590.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1607590.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1607590.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1607590.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1603409.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1603409.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1603409.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1603409.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1589185.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1589185.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1589185.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1589185.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

f2dimg.0afaf5e.com/f2dgc/20230926/1461.jpg

104.18.3.221

200 OK

418 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1461.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 864x512, components 3 - data
Size
418 kB (418407 bytes)
Hash
0421accf776f067508c0dddbed31274a
404813059112db9fc1ec880405964af1ff2347f0
460c5a8279eb2dc6e0b419eed4e534d4b06a0f5efc1d0838bd50ce224b9e70f8

HTTP Headers

GET /f2dgc/20230926/1461.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:20 GMT
content-type: image/jpeg
content-length: 418407
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BgtngIxJ0iepqlSpozT0yHU4KdaO5FjT5qM%2FLEiNF7ruI%2B0SKfMV23CFJ7%2FYYnk4b%2F%2BqqntCH%2Bv2p%2FcHxodSBhT35wK12uv6ECR1PnjCG854IAdHnx44cGSP2djaClOtbW9xqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 418407
cf-cache-status: HIT
age: 250769
last-modified: Fri, 08 Dec 2023 05:55:51 GMT
expires: Tue, 10 Dec 2024 03:35:20 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad53bd53569f-OSL
X-Firefox-Spdy: h2

img2.minqingguancha.com:8099/z-t-img/MKMP-459.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/MKMP-459.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/MKMP-459.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/MKMP-459.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

imagetupian.nypd520.com/uploads/202300/FC2PPV-1526308-2.mp4.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
imagetupian.nypd520.com/uploads/202300/FC2PPV-1526308-2.mp4.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /uploads/202300/FC2PPV-1526308-2.mp4.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://nygimg.0afaf5e.com/uploads/202300/FC2PPV-1526308-2.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

imagetupian.nypd520.com/uploads/202300/FC2PPV-1526308-1.mp4.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
imagetupian.nypd520.com/uploads/202300/FC2PPV-1526308-1.mp4.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /uploads/202300/FC2PPV-1526308-1.mp4.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://nygimg.0afaf5e.com/uploads/202300/FC2PPV-1526308-1.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

imagetupian.nypd520.com/uploads/202300/FC2PPV-1524821-2.mp4.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
imagetupian.nypd520.com/uploads/202300/FC2PPV-1524821-2.mp4.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /uploads/202300/FC2PPV-1524821-2.mp4.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://nygimg.0afaf5e.com/uploads/202300/FC2PPV-1524821-2.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

imagetupian.nypd520.com/uploads/202300/FC2PPV-1524821-1.mp4.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
imagetupian.nypd520.com/uploads/202300/FC2PPV-1524821-1.mp4.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /uploads/202300/FC2PPV-1524821-1.mp4.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://nygimg.0afaf5e.com/uploads/202300/FC2PPV-1524821-1.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

imagetupian.nypd520.com/uploads/202300/FC2PPV-071707.mp4.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
imagetupian.nypd520.com/uploads/202300/FC2PPV-071707.mp4.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /uploads/202300/FC2PPV-071707.mp4.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://nygimg.0afaf5e.com/uploads/202300/FC2PPV-071707.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

imagetupian.nypd520.com/uploads/202300/FC2PPV-1523969-2.mp4.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
imagetupian.nypd520.com/uploads/202300/FC2PPV-1523969-2.mp4.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /uploads/202300/FC2PPV-1523969-2.mp4.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://nygimg.0afaf5e.com/uploads/202300/FC2PPV-1523969-2.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

f2dimg.0afaf5e.com/f2dgc/20230926/1505.jpg

104.18.3.221

200 OK

435 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1505.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 861x512, components 3 - data
Size
435 kB (434621 bytes)
Hash
9e6247a6a2852be2953cb44fc51b6753
3bbc2e03c724d2c3bd808ba36225011165690ef1
3cc71a059b5a5104c9ce9eab4c9a1c8145401058f40ea6f01730862dac357c77

HTTP Headers

GET /f2dgc/20230926/1505.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 434621
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nyKrYmPXA%2FKv4F3DqJyskFJtnZpeXgv8vZJyf8oY2qtJ09npZk%2FoU3xZVF07mB0khhc1DXkzyssOAbTcGv4rIV4LxcsTgy%2B2wVcmRqJdRfyN%2Bf65gMD7btw4XKLCUfaJO7ogjA%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 434621
cf-cache-status: HIT
age: 74615
last-modified: Sun, 10 Dec 2023 06:51:46 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad545d7e569f-OSL
X-Firefox-Spdy: h2

img.f2dbf.com/f2dgc/20230926/1554.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1554.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1554.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1554.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img.f2dbf.com/f2dgc/20230926/1552.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img.f2dbf.com/f2dgc/20230926/1552.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg.f2dbf.com
Fingerprint26:DB:C7:8B:5F:43:D9:17:42:13:3A:24:66:34:52:DE:FB:9C:F2:64
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /f2dgc/20230926/1552.jpg HTTP/1.1
Host: img.f2dbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:20 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://f2dimg.0afaf5e.com/f2dgc/20230926/1552.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/SNIS-688.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/SNIS-688.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/SNIS-688.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/SNIS-688.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/KIOVR-008.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/KIOVR-008.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/KIOVR-008.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/KIOVR-008.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/VRKM-856.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/VRKM-856.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/VRKM-856.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/VRKM-856.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/MIMK-112.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/MIMK-112.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/MIMK-112.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/MIMK-112.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

f2dimg.0afaf5e.com/f2dgc/20230926/1494.jpg

104.18.3.221

200 OK

754 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1494.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1280x720, components 3 - data
Size
754 kB (753780 bytes)
Hash
6bc7bea8a8404485f0bc45636285c104
66ed4cf1a1425ef29939a4e90c8f3257c3db7a94
14dfa5e81f940e4ff884ca05e7e0bdadf842692726662070820a6ee32c89bb26

HTTP Headers

GET /f2dgc/20230926/1494.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 753780
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7P6H4IJzKBcSQW9RZQYgMCXHB4QmmtiPAmnJ56mWVCx%2BY5rkQ6e7FRsqfGryJINI1HKXPbfJc9oXZzb9qjyT3H31lzNlaJNMLZyt7GJNJE9Eg4h3V36R4D8wg2deMcNEypki%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 753780
cf-cache-status: HIT
age: 74575
last-modified: Sun, 10 Dec 2023 06:52:26 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad545d7f569f-OSL
X-Firefox-Spdy: h2

img2.xiangbinjun.com/new/202300/FC2PPV-1599412.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1599412.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1599412.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1599412.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1594414-1.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1594414-1.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1594414-1.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1594414-1.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1594414-2.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1594414-2.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1594414-2.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1594414-2.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1581246-3.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1581246-3.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1581246-3.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1581246-3.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1584259.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1584259.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1584259.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1584259.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1581860-2.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1581860-2.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1581860-2.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1581860-2.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/MIAA-742.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/MIAA-742.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/MIAA-742.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/MIAA-742.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

imagetupian.nypd520.com/uploads/2022/01/230910YM026.jpg

85.208.116.42

307 Temporary Redirect

235 B

URL GET HTTP/1.1
imagetupian.nypd520.com/uploads/2022/01/230910YM026.jpg
IP
85.208.116.42:443
ASN
#18978 ENZUINC

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /uploads/2022/01/230910YM026.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:35:21 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://nygimg.0afaf5e.com/uploads/2022/01/230910YM026.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/444KING-092.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/444KING-092.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/444KING-092.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/444KING-092.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/REAL-806.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/REAL-806.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/REAL-806.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/REAL-806.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.minqingguancha.com:8099/z-t-img/SNIS-576.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/SNIS-576.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/SNIS-576.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/SNIS-576.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1587094.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1587094.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1587094.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1587094.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

img2.xiangbinjun.com/new/202300/FC2PPV-1586110.mp4.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.xiangbinjun.com/new/202300/FC2PPV-1586110.mp4.jpg
IP
142.54.176.10:443
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerSectigo Limited
Subjectvideo2.51daao.com
FingerprintA0:21:18:47:98:90:A0:F9:F1:25:32:12:4F:A0:44:F4:2F:5C:83:37
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /new/202300/FC2PPV-1586110.mp4.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:34 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://hyimg.0afaf5e.com/new/202300/FC2PPV-1586110.mp4.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

f2dimg.0afaf5e.com/f2dgc/20230926/1495.jpg

104.18.3.221

200 OK

1.6 MB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1495.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3 - data
Size
1.6 MB (1561228 bytes)
Hash
f274a866c58f63299f21f0ab70217da9
5fcc6c873d519257fc81623f654eede3bef51a72
5e9d3ec24c08c1610b20534906ca7e3d54fcb33b564f8dedd1427e57346178a9

HTTP Headers

GET /f2dgc/20230926/1495.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:20 GMT
content-type: image/jpeg
content-length: 1561228
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lLP7U1Cr%2F93hfn70QeeVpHmsnIIuD9PP2EZ%2BCtHGeusr7xMhSlqgJ53Kku9lg1uS1H0vlLX%2B0T%2FHIYAjZwxmL0tAxAS5UHUBcAxh4apNX3jvIuJ4d2UvDmoDbU2VBvtRZ1tNmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 1561228
cf-cache-status: HIT
age: 74573
last-modified: Sun, 10 Dec 2023 06:52:27 GMT
expires: Tue, 10 Dec 2024 03:35:20 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad53dd5a569f-OSL
X-Firefox-Spdy: h2

f2dimg.0afaf5e.com/f2dgc/20230926/1548.jpg

104.18.3.221

200 OK

467 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1548.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "Lavc53.42.4", baseline, precision 8, 1280x720, components 3 - data
Size
467 kB (466911 bytes)
Hash
c68f24260e5b9b43b9ce88ecceeeea75
2f86ed5ca261bcac7d4658450a41c67484a14f86
24e820bcaa010f099347745558cd95f1844c4819db47d36ffe3a0e041cfa9f12

HTTP Headers

GET /f2dgc/20230926/1548.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 466911
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Iy8mZRs3WQliAko1I95eg%2Fpxv%2BhkHiiJP5ycPbUlGMdbrsuyxhSM6UFY2fmBcaYp6cVnSdJu4XzfrZieTkxq%2Fyruh1Ynk7Ic7jsTGdyg1p%2F4zoF5b8%2Fcm51%2B5npB9pXIwlQUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 466911
cf-cache-status: HIT
age: 74575
last-modified: Sun, 10 Dec 2023 06:52:26 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad57ee6a569f-OSL
X-Firefox-Spdy: h2

f2dimg.0afaf5e.com/f2dgc/20230926/1549.jpg

104.18.3.221

200 OK

722 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1549.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1280x720, components 3 - data
Size
722 kB (722237 bytes)
Hash
097e3b24172afde860a6c6133dfaab3b
72d52620b51612e667d61a48cdbc0b192e3d34df
067bd5fa532bcdb488663ccd6a7fa697bc69e102952b6726fe1f4cdcc243426f

HTTP Headers

GET /f2dgc/20230926/1549.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 722237
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Q3yBZ1ha7Y2GM8NNluopZSjEDLVHbD%2BIuzX4d9EhFbXkJ0EPbwQ%2FoEv9j5lYtQra7ltnBIhVePyASOS2QPzkkXQo27rQYXobDufDLq8Fs33mSJtUZhBI6jj%2FqWGBoZmGd5X1A%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 722237
cf-cache-status: HIT
age: 74575
last-modified: Sun, 10 Dec 2023 06:52:26 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad57ee69569f-OSL
X-Firefox-Spdy: h2

f2dimg.0afaf5e.com/f2dgc/20230926/1547.jpg

104.18.3.221

200 OK

1.1 MB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1547.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "Lavc53.42.4", baseline, precision 8, 1920x1080, components 3 - data
Size
1.1 MB (1099898 bytes)
Hash
1953f09d699a2e4d9ec83f83a86d5534
14ee881a5f380001f9690fcef3ad22da8a3f5d2f
63c882ac558184d7f8366d9045f1aff81c736c1d06196003a651c3dfb118d53c

HTTP Headers

GET /f2dgc/20230926/1547.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 1099898
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uEAvlfNyzyNDMZaWEVXrQXX5QK%2BZ912BpIO%2Fn5vdDXScFYxG9GFr3ndblpIU1lpfer2mcocyD%2F3W01fjwpneyYkhCbcO6OovXvbO%2BZIX5G8pwq2wQR3kuTaygZAhij4UGYi58w%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 1099898
cf-cache-status: HIT
age: 74575
last-modified: Sun, 10 Dec 2023 06:52:26 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad57de59569f-OSL
X-Firefox-Spdy: h2

f2dimg.0afaf5e.com/f2dgc/20230926/1554.jpg

104.18.3.221

200 OK

558 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1554.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1280x720, components 3 - data
Size
558 kB (558504 bytes)
Hash
15d583bf27985a5c9748d700b3f907f1
96fced4234ce6237e1a5cd9468ffb7e7504bf926
4d0d1183de2ac9c6dcb872426c7f29ff2d721f8539e627e023a58e5b00d911a8

HTTP Headers

GET /f2dgc/20230926/1554.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 558504
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XfuajsfyPSqLQX5xDfaFc1XsjJpb81tnPWVYK9F6N12AMluXXYWALmsXNKDHIu43oyjVyCc7q%2FCSx%2BKTrrR01kWWY64OmYtEjFu7SCJ9Vb5zIY13UNbjzFn6BszmwKPidj6LSg%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 558504
cf-cache-status: HIT
age: 74575
last-modified: Sun, 10 Dec 2023 06:52:26 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad586e8b569f-OSL
X-Firefox-Spdy: h2

img2.minqingguancha.com:8099/z-t-img/SNIS-778.jpg

142.54.176.10

307 Temporary Redirect

235 B

URL GET HTTP/1.1
img2.minqingguancha.com:8099/z-t-img/SNIS-778.jpg
IP
142.54.176.10:8099
ASN
#33387 NOCIX

Requested by
http://artefact.live666.online/
Certificate
IssuerTrustAsia Technologies, Inc.
Subjectimg2.minqingguancha.com
FingerprintCD:82:CD:D4:DD:E5:D8:EC:25:84:B8:2B:48:8B:11:9C:2B:CF:60:47
ValidityWed, 20 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with CRLF line terminators
Size
235 B (235 bytes)
Hash
d3078ba7d045aa0c050352689144c252
f91367e39a6a0850636538a898d473df3514fc89
a2da80d56c14c3365e0913c66919481d425cb926f7e78246554982db3b50a265

HTTP Headers

GET /z-t-img/SNIS-778.jpg HTTP/1.1
Host: img2.minqingguancha.com:8099
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: X
Date: Mon, 11 Dec 2023 03:36:35 GMT
Content-Type: text/html
Content-Length: 235
Connection: keep-alive
Location: https://zimwimg.0afaf5e.com/z-t-img/SNIS-778.jpg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

f2dimg.0afaf5e.com/f2dgc/20230926/1552.jpg

104.18.3.221

200 OK

510 kB

URL GET HTTP/2
f2dimg.0afaf5e.com/f2dgc/20230926/1552.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectf2dimg.0afaf5e.com
FingerprintD6:7B:97:F2:54:26:C9:1B:3E:5F:FA:D3:4B:A9:2B:3B:85:2C:13:BF
ValidityWed, 15 Nov 2023 04:08:40 GMT - Tue, 13 Feb 2024 04:08:39 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 929x660, components 3 - data
Size
510 kB (510430 bytes)
Hash
bbfedf73d1d94075eea74056509c45e6
b6057f7bae06542361be5e49cfbe4d779b6e9f83
b5e579fdd6f9705ae53892e7297ee05b4e7a98f3e601e7b21151714a3c6b1ab1

HTTP Headers

GET /f2dgc/20230926/1552.jpg HTTP/1.1
Host: f2dimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 510430
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MRK83VfOaJrOIude0jXUnOyjLG9IBpS%2BKvsCZLEUznulPRTIq34MZa%2BLdahls0YzhYySprDdoyYlZ%2BCW7q8OwvfIaQ%2F%2FQRGgmer3t2XzDRW7EQam4RSHZjv1w2TPDiqBipLhjg%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 510430
cf-cache-status: HIT
age: 74614
last-modified: Sun, 10 Dec 2023 06:51:47 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad586e8e569f-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1585551-1.mp4.jpg

104.18.2.221

200 OK

73 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1585551-1.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25518ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
73 kB (72629 bytes)
Hash
7b6e4c338d1e664574745cdec75d5f86
5f8c0cca1f0aa906527d82d205c1bbedf3a527e2
dbd3615141f8b893f19e89c2850984d05a58a49dbf144a31774a9e9cd71d6347

HTTP Headers

GET /new/202300/FC2PPV-1585551-1.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 72629
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vVy4YlHGCkYDunHVJOIyVpkWeMXtsFspddV1%2FR3eJda4Au3k0JDffQymL3%2F77g8peEwr5mzx%2BjfIIA4vhM%2BzFxmh7UoIU%2ByFe4XzdaRIcji2ooMWt79Hg301pFauNygaq4Rc2raS5muaKJ%2FnCKat"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 72629
cf-cache-status: HIT
age: 177714
last-modified: Sat, 09 Dec 2023 02:13:27 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec5d56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/444KING-092.jpg

104.18.2.221

200 OK

56 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/444KING-092.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 700x393, components 3 - data
Size
56 kB (56017 bytes)
Hash
bfae40419cdb66090d29856e44bf0213
4375b0747f8411c14dd64e470a7b217b78aea04f
c26374558b39ae92a19ac1a383632b1bad6e4e03e8a614729e0163889232b9ef

HTTP Headers

GET /z-t-img/444KING-092.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 56017
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XNIUff7SyQkcaRzhGCfLDCZJobI5OnqefGTZaHpyhCc08sPogregVsCYfy0OE8jy94CVqJcpry1S%2B6UO8VCRHMj0bgDRLSwU65xkJ9iIzpZKoGR%2BXtUCzJzGrdYOfU01YjAuXFs%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 56017
cf-cache-status: HIT
age: 74615
last-modified: Sun, 10 Dec 2023 06:51:46 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ee715691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1599412.mp4.jpg

104.18.2.221

200 OK

68 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1599412.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25605ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
68 kB (68318 bytes)
Hash
137ca15f25439f99cb7e6f1cdbe6ba28
e8ab677cefaf3ca8db76e463d87789862e648665
d634478ff68ea596ee69b96e0e6fdb9692d34b274590ebc4261b97f81867b037

HTTP Headers

GET /new/202300/FC2PPV-1599412.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 68318
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vuMKMsF5Cu2bzVPoYRWR0PPfTKYy7t21oPn%2BZLxATIyQmMi6w3dbHp3m20f0p7K07zMSMPx2IP0eK1UCfhJlCQ03P6CkTg6VA%2F0t2%2FftY4idZ6jk0wGH9UBrZw4C1xTHPdmqxJjtW1qYoyZ9oVaZ"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 68318
cf-cache-status: HIT
age: 177717
last-modified: Sat, 09 Dec 2023 02:13:24 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec5e56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/MKMP-459.jpg

104.18.2.221

200 OK

170 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/MKMP-459.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, baseline, precision 8, 800x537, components 3 - data
Size
170 kB (170532 bytes)
Hash
96d82aad2327d5c1e669dd918d66494e
5ef864e534b1b86742579b4188eb1c61ecf9128e
2e52fb817b71dacadc5f2e4349313c6e4dcc3710dfe6e8c290e14f6155c4558f

HTTP Headers

GET /z-t-img/MKMP-459.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 170532
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=plCP8xHbohW%2FkOUpe1DWEI0s0o%2F3luuniDqPCc9qQlXbSZQOgsaHFw22FoGoRaaMsgiIcj2jfrTunLDuCLwvf%2FDRNQ3d4hMPTQuTfdNc7owa03kiSosKi6KvQJVxRXoWo12uSTk%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 170532
cf-cache-status: HIT
age: 78767
last-modified: Sun, 10 Dec 2023 05:42:34 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ee6c5691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1594414-2.mp4.jpg

104.18.2.221

200 OK

61 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1594414-2.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25571ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
61 kB (60558 bytes)
Hash
373c0805682bee9f99e72cf993fa71bf
4a750809f5ca2ac48d94091296e4d798d60701ac
5ad46a1d8f3877ace27975f73c85e3e05b600f662df60ccacdb577263bed2720

HTTP Headers

GET /new/202300/FC2PPV-1594414-2.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 60558
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qVeA0Q956aj28jVSHf1GXAznXeh22Wpf%2Bu1yc7cnDAPxeF7YVBGaWPxgc%2F9aSeB39iLN0Rc%2BVNSXI7%2F0xJmKE27ojrERdl45piiFs73ibjj3gfHVmOyH21ZB2KfPP8H7Rgs9"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 60558
cf-cache-status: HIT
age: 182157
last-modified: Sat, 09 Dec 2023 00:59:24 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec6056c9-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1594414-1.mp4.jpg

104.18.2.221

200 OK

67 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1594414-1.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25570ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
67 kB (67103 bytes)
Hash
1000f1b49528678b8541013c14926201
d7a982a2c768b0b2f5399d400ea77c2c5f2150ef
5faaaea6c0ad6583a152cbfc555b8a85c4014b8e63cdc91cab9d314b1fac563a

HTTP Headers

GET /new/202300/FC2PPV-1594414-1.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 67103
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s69aeidXQegrDDOEJVyBtwvxhy30boNt47VSpzOt%2FJOjmqNMy6ckTCI82WVgTUWFmUXYGO4CcurUbdnIKis8uv3KJvYDTOSpN5QHExsfTEci0tweVFYEdRdxlqFoT3UDJQxn%2FMFmL13B50jj2wPv"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 67103
cf-cache-status: HIT
age: 177716
last-modified: Sat, 09 Dec 2023 02:13:25 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec5f56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/VRKM-856.jpg

104.18.2.221

200 OK

122 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/VRKM-856.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x437, components 3 - data
Size
122 kB (121848 bytes)
Hash
afa051f3cb6706e5e1b956e9ffd649d3
ce2021039f5465863214333a24efdfa1d81dbdd1
6a86141504c1cdd6848721c1fc37819dfb08afc6e88576c65b6b1e523bec6ac8

HTTP Headers

GET /z-t-img/VRKM-856.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 121848
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iYjK5C0sAMRtDrnv%2F9heI8SHoAcq6K20yY9G2u8DfkA3U4ECJ6pTdH06dQ4UraS77ApUNSIlIKbbpyHkbdaFGm7sdc0EGPoexUvUotizG1ncv1FXRQw8k7j3SdiTHY3kAAdb5WZKlZqt%2BAFytGHpAps%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 121848
cf-cache-status: HIT
age: 70925
last-modified: Sun, 10 Dec 2023 07:53:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ee6d5691-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/MIMK-112.jpg

104.18.2.221

200 OK

157 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/MIMK-112.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x470, components 3 - data
Size
157 kB (156813 bytes)
Hash
d1bbb859dd78df3b74d29d87139450a1
38949f266e172cf81fe2a25eb78de0e89cc5ae67
c959218d755ffa120812f650a734385fb5617de7e5062224fd89094d68a153f6

HTTP Headers

GET /z-t-img/MIMK-112.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 156813
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o8bTfXqwGC3KBBcHBemfV1xVXuMMgOg2091ZeQ72bTNJcbaUo%2B5wdB4UnDeqL1ijd3EClSzWspLyHj9gY%2F338fJCCOL5yfp%2Fn77Og5h2XrMG%2FctDTUTYJYkPJKmhqLBU9mEjr3G1coRdLVIJQS%2FuoD4%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 156813
cf-cache-status: HIT
age: 70925
last-modified: Sun, 10 Dec 2023 07:53:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ee6f5691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1584259.mp4.jpg

104.18.2.221

200 OK

56 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1584259.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25515ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
56 kB (56314 bytes)
Hash
8ec8f0944e3bfefb3553a20d789889a5
4dbd633635e5217c7c5c4497ec2c382ca3e0e08a
dd2617a5710c667723c7b91b1b4d370a7851f81048277d4ad83a293310a46ea3

HTTP Headers

GET /new/202300/FC2PPV-1584259.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 56314
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ubi72g%2BIHQ6N8ErUpBUEzPa9Qsbx4unSc0EpcC54lv3uVLXjmNkEly%2FZQLT3Qk%2Bns5%2FEyZHxXlzsJacq1aL4P4X8sRN2MLmFFfTVBuIk%2BbkTBiMv2EJhogjN9748bcufotk2"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 56314
cf-cache-status: HIT
age: 99546
last-modified: Sat, 09 Dec 2023 23:56:15 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec6256c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/MIAA-742.jpg

104.18.2.221

200 OK

144 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/MIAA-742.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x470, components 3 - data
Size
144 kB (144478 bytes)
Hash
20d91b41370fd54eb8c1ed3f4670a10b
974b25ed6631b37549ad65a1fd72648e71b6e584
83841028bba8e0ba1c115ece065fdb605d09e482b3e22be67efffb1fa034889a

HTTP Headers

GET /z-t-img/MIAA-742.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 144478
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7MlNzXnOuNYNihbcKAZcRNI1NMlOXC6mstrll1fdw8pmvHnfYQoYK39KDi0ygn6YciicDGeDxwVtrMq%2BVHtFrQWDUszIXWX3hmmOfdFwFmLEivrSEDj6JHvjJG8pgAP8DhYvcg8Z0%2FVowWTIi4aHLRo%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 144478
cf-cache-status: HIT
age: 70925
last-modified: Sun, 10 Dec 2023 07:53:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ee705691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1581860-2.mp4.jpg

104.18.2.221

200 OK

75 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1581860-2.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25505ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
75 kB (75139 bytes)
Hash
6a09ab897a6d01498a67f6f1f0afddcc
ba9d72fa397e1124c28729da53d98cd07499b525
f04495a30270b32f37e1fcd96057451ea8a7f00f0fa376250250157b7b302fbf

HTTP Headers

GET /new/202300/FC2PPV-1581860-2.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 75139
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=llNVD2PgvQaQZTe%2Byz7roC%2BNKplAFL3VScb51f0Fpi7%2FbKRMSM%2Fy3gqJYxbwKn4taPno%2FWo1a7xPC0FLd3aeyAJGJIeKRWdg0z9AMwYfjcxnGJpeSa%2Fc8IuFOOua29Oqf86q"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 75139
cf-cache-status: HIT
age: 99546
last-modified: Sat, 09 Dec 2023 23:56:15 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec6356c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/REAL-806.jpg

104.18.2.221

200 OK

138 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/REAL-806.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x469, components 3 - data
Size
138 kB (137891 bytes)
Hash
3aa1cb515af913f3e048683b675c27e1
98f7e210ab08dcb8bcae3aac68598a9dc1761b19
bbeeeae8fbf22504bc6c53a49ae3b1ed2854d52830732bfcf91f7c880a93d140

HTTP Headers

GET /z-t-img/REAL-806.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 137891
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q2IEpYXRpFMWcvIPs68zhcSvOz4y%2FbV8oB7FOWOT9rq0xn6vIDBvgz3nJ52X%2FAIJIAIB9%2Fylogx4%2Fbt18KN4WXhn5owJQ%2BC3VVLy0LzoOgEd5R6bkf96yyY%2BQTUtev8VtMoU87g%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 137891
cf-cache-status: HIT
age: 74615
last-modified: Sun, 10 Dec 2023 06:51:46 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ee735691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1587094.mp4.jpg

104.18.2.221

200 OK

60 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1587094.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25533ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
60 kB (60178 bytes)
Hash
4acdaf55db151bc834f02984142aeb2d
83e9a068d4c44f3c5b6a2ad3366e1ad7a12877f3
6882140d282d5f25e74175a6c0581c82048c86a7d9ea5115a5a5ab9bf209dbd5

HTTP Headers

GET /new/202300/FC2PPV-1587094.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 60178
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N3KMw9Lr6m8pdS%2BK8R7sgYB04wLxpTJc6yE%2BpurNAGqgNvC8HZghGXeUiMzBLTKEyXX4zhUVk6D7ROvDM8haoMHgiXc%2FxlIq2zmg9iVLeVqE9kHTFy%2FlKfHf%2FfetsMvzV0WM"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 60178
cf-cache-status: HIT
age: 99546
last-modified: Sat, 09 Dec 2023 23:56:15 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec6456c9-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1586110.mp4.jpg

104.18.2.221

200 OK

62 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1586110.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25525ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
62 kB (62547 bytes)
Hash
f6536e914f4941da237a2fcdfc89b198
692b147a548570c8fbea0e6998a05164b4949692
fa10b613a1bcfb0bdd6ba5306ef4840ce5dfdae3cb0dfedf5c443c2ae4767cf5

HTTP Headers

GET /new/202300/FC2PPV-1586110.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 62547
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KQqnsNGJ%2B8j99vcvZww%2BkeBuxv%2BQw1czV1kRTVJ6ORN3L4gdxVM97ZH0aGHx5j5Zt6eW35%2B7%2FLqlW3emHgTQka0ri%2FAw39gWM0UrDjkrxJ5qRWvLsFI%2BJsvmEBVxYWL8Ihie"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 62547
cf-cache-status: HIT
age: 99546
last-modified: Sat, 09 Dec 2023 23:56:15 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec6556c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/SNIS-576.jpg

104.18.2.221

200 OK

152 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/SNIS-576.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, baseline, precision 8, 800x536, components 3 - data
Size
152 kB (152389 bytes)
Hash
244ecbfe54b39293a0240bc6627c70d5
70bd4ca8cefab639b9f3b16c08614f66b83a8da6
724acbaf6b70f566cbf4cd11499e0ae9e497505bc4f463a38c8e0ba45af80943

HTTP Headers

GET /z-t-img/SNIS-576.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 152389
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cfzDycQY%2FtOA63NF%2FYGD9%2Fbe7G6CvPR%2FVkYM9Wn%2Ffd4NuamEYPdlJu7%2FZvfBkRgUi3bJ8Kb75qalaYwbefQRn60OBl%2BoRJsvrIYR0uqA1vLkeOcrJ9RRWYWvW0VYPkPYGG5i2ll2P4bXj3gOvevGUUI%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 152389
cf-cache-status: HIT
age: 70925
last-modified: Sun, 10 Dec 2023 07:53:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ee745691-OSL
X-Firefox-Spdy: h2

hm.baidu.com/hm.js?a89207277c97474e61d6e7942b61562f

103.235.46.191

200 OK

11 kB

URL GET HTTP/1.1
hm.baidu.com/hm.js?a89207277c97474e61d6e7942b61562f
IP
103.235.46.191:443
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

Requested by
http://artefact.live666.online/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
ASCII text, with very long lines (619)
Size
11 kB (11257 bytes)
Hash
bc944477f1e4c970b0793f9d786c23c8
65fd967085f0f253b5d5fdadc1b1ee0b2fd1ae65
f09b1679e8969cd1234fc604e9cb74352edcbd72c7cc8e124ab5f8a4c6f47919

HTTP Headers

GET /hm.js?a89207277c97474e61d6e7942b61562f HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Mon, 11 Dec 2023 03:35:21 GMT
Etag: 7a3f89055098fb843fce2ffa28020ab0
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=97F1F8C470E25901; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

hyimg.0afaf5e.com/new/202300/FC2PPV-1581246-3.mp4.jpg

104.18.2.221

200 OK

57 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1581246-3.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25499ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
57 kB (57169 bytes)
Hash
56d652b16dac22f66790090eddcd6444
b952c093a58d8aefbca3cc61a454a2dba42eb0f7
ecaebe3e6f50b7864a9eb8e0ddaf629dbf5dd4da1434faea34ac44d1218b079b

HTTP Headers

GET /new/202300/FC2PPV-1581246-3.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 57169
access-control-allow-origin: *
cache-control: public, max-age=31536000
access-control-allow-methods: GET,HEAD
cf-placement: local-OSL
size: 57169
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JgpGVczZK1eMl%2BydkIAjSzCvlQbqviU6zg7VqT5xp0XOneajWYgPhNXOY91Pe%2Bvf60zbLDo8psHWl76TIQ3WB2PvoDCgXII%2BwmSrLyqc%2B1xbzXxngZyYO%2BZiC1U4%2BUuWe8j0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
last-modified: Mon, 11 Dec 2023 03:35:21 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad58ec6156c9-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1601404.mp4.jpg

104.18.2.221

200 OK

66 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1601404.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25617ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
66 kB (66507 bytes)
Hash
b2eebadc0d6f70a89ca6291552d1f208
0202fe6a118b67a54ad9f38c06b7648dfd4ab9f2
b833f1619a9170d41ae07bcd6e226c3b776d93e746689a368eb2f69033a20747

HTTP Headers

GET /new/202300/FC2PPV-1601404.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 66507
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xTVai1GngpGxQ6TULw%2BHbdkKb8ezsJQXsy4ufCuov%2F1bJS96H1z%2FfTYFxE0w3uSxMFzBlkKMJ0KLkgvN07XUgV44%2F0jhv15POSCgA4mVQrj1XKNwetvPlzm%2BVwNTTdeBUjpz"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 66507
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad59bc9b56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/MIMK-023.jpg

104.18.2.221

200 OK

197 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/MIMK-023.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, baseline, precision 8, 800x536, components 3 - data
Size
197 kB (196754 bytes)
Hash
54c35fa27648e9e5b4f9f906d7523457
c82de6df116d9075ce3d529293194df50ce6dd84
5c4f3a79a23e5ba53726ab8c2663b4b07b75cdd120234134dcbe011af193f395

HTTP Headers

GET /z-t-img/MIMK-023.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 196754
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8CQTsRDFz%2FCL7muonivvOjus%2FwEQVzTtUOGNzFmyJn0CrSduqJzTyvp7XUJafsP3FkKoZxL8rIYz%2FwHWodjzI345uqj%2Fb2joudPp0vmzUc1r3hRAkPIklks54z9MxtGNxEPzAkk%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 196754
cf-cache-status: HIT
age: 74614
last-modified: Sun, 10 Dec 2023 06:51:47 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad599e985691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1602258.mp4.jpg

104.18.2.221

200 OK

61 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1602258.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25621ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
61 kB (60790 bytes)
Hash
46b79d7415156914d225c9b8efdbfb75
366d1cb9fecf238ae7240ddd19105e3321a8aeb6
cda77de8ee50e938a6221f505cb8dd69a2ec5b29e90a3f94eabacf187fb5f9de

HTTP Headers

GET /new/202300/FC2PPV-1602258.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 60790
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ORKR1YaMBXjjE7wkM7kc9dAr4roz3Ymo6RIa0cNxWaKo1CDvce2dc6L3Z%2FjWV3eg5wLU4duECzYN2%2FJihh2RvlEZBXJeyQg7P%2Bc1CXPEG%2BEKeeX4z%2FMLiExHuSftfNPsHQ9W"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 60790
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad59bc9d56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/MIDE-392.jpg

104.18.2.221

200 OK

152 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/MIDE-392.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 793x533, components 3 - data
Size
152 kB (152512 bytes)
Hash
f2a12caf89bada18126d4a2daa8a270b
fc5d33781145e7757b846da09eca2e6d9cecf876
40dafb071235354d1abc76b857c356df61ccb666b175fd9656936f2b84cb6a8e

HTTP Headers

GET /z-t-img/MIDE-392.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 152512
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1inXdChXM0yqyAkcoNfmusRKuGVi%2BfUAd4MWgXXt%2BdZdmtvVpe%2BErC%2FJYDXTMw8Ni42h2FKD9Wn2ZvM1fd7ZryeVDD9vsN1IEzZh75Ag7rHBRqK8GF2EniMJicukoHjDkBwX%2BF9fQQbsIeTnnNNcrno%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 152512
cf-cache-status: HIT
age: 70925
last-modified: Sun, 10 Dec 2023 07:53:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad599e9b5691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1589185.mp4.jpg

104.18.2.221

200 OK

67 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1589185.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25544ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
67 kB (66587 bytes)
Hash
2c3b0eb72523b3b71a505606914218f4
6d9b55dd7d8ae6f848d4b1e6c76b030b07263378
228f358c49a4f8a70e2907c87bf40e9fa4924ad61c41b3695018f16452566aed

HTTP Headers

GET /new/202300/FC2PPV-1589185.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 66587
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PvnMuqOzw56syHiyEu8X8QL8fAb4iBZOtkcMHf3AVSyBUOXCKrs9lpVnjSfarnRTeaBlS%2FmNhvq80r6gKMQzxHCCpIDIWOxfPTiXWtJd%2BWD5fz%2BcRc9IOnLUpWjTOu3mbRMiHR4QfEbncfRqmd4J"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 66587
cf-cache-status: HIT
age: 177716
last-modified: Sat, 09 Dec 2023 02:13:25 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad59bc9c56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/NTRD-108.jpg

104.18.2.221

200 OK

159 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/NTRD-108.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x469, components 3 - data
Size
159 kB (159066 bytes)
Hash
7485ff243ebc265059b0ee36ac63932f
1d70fd475da05a9fd9d062367a3404264bc4e359
c57ae815bf13b9fc1f1a2e9781c1307fcd58b185fae3311f2022c6be01b823d3

HTTP Headers

GET /z-t-img/NTRD-108.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 159066
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FMYmne8Fp22WqTILIUmQYf6kytj4oZds%2BuN7ji1TV6usKogYJSRbsaQAG2%2BMgqeN9xISBrEiQXQOREwlbuTe04cCqZNgyTpD8rJgeh5uVnd8p4GvY2Zt7r1wgdYjqMRn6%2FbljLg%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 159066
cf-cache-status: HIT
age: 74614
last-modified: Sun, 10 Dec 2023 06:51:47 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad599e9a5691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1603409.mp4.jpg

104.18.2.221

200 OK

60 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1603409.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25636ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
60 kB (59674 bytes)
Hash
3688dc05892d60be2d9b6164e859c137
1550192b73e34d942dd69c8110fa0a50d29d1b9d
46e6145ae2edbdabc9c814f675d5c194cb38b4f4e8a746608930d3200ad6a4ba

HTTP Headers

GET /new/202300/FC2PPV-1603409.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 59674
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3CQ4oRBuFcePLxmlcTNpOn5m64PurS44S%2FXEMDRg5wFEwC%2BWTqnilhjoM3LCtepJQ0FpN%2B2jxXQfeJtaS4jb6a4qFZQj%2FBCBrqdd4%2FKNeKqwoworoJyr74iCCN%2BNpUPHMEc8"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 59674
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad59bc9f56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/SNIS-688.jpg

104.18.2.221

200 OK

179 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/SNIS-688.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, baseline, precision 8, 800x538, components 3 - data
Size
179 kB (178978 bytes)
Hash
009267181164f494bdc7d5b315723e8b
78df4e3658449a1f3d4ef290ef226960a060babf
eebac6f44ca70b8cba6b03e9ee4b7421271af5226b4fd14a9e3943fee3bbd101

HTTP Headers

GET /z-t-img/SNIS-688.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 178978
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mj7OxdZnZwx2%2BPu%2FCeeS9SsbbxGkI8eFVig%2B8vUHES4d3QWW4QCFWQIg1oFiGR1SBexcwGQC0I0ZirjcVdytEue8qzwXwYHFlI3Xzz8AdQuy%2B6CFIGG%2BLH%2BOvH1z6dDb6KEZBIc%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 178978
cf-cache-status: HIT
age: 74615
last-modified: Sun, 10 Dec 2023 06:51:46 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad59cea55691-OSL
X-Firefox-Spdy: h2

hyimg.0afaf5e.com/new/202300/FC2PPV-1607590.mp4.jpg

104.18.2.221

200 OK

52 kB

URL GET HTTP/2
hyimg.0afaf5e.com/new/202300/FC2PPV-1607590.mp4.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjecthyimg.0afaf5e.com
FingerprintD9:00:DC:EF:D7:8D:A9:B7:B1:6A:0C:C8:22:2C:12:36:C7:FE:50:9B
ValidityWed, 15 Nov 2023 04:12:02 GMT - Tue, 13 Feb 2024 04:12:01 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25666ths 250rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
52 kB (52153 bytes)
Hash
a9c2647f558b9d1ef5cdb23429d645d8
127ec74d14adb787a7b2cfaca719a5219cf15350
193384e8bc789b9c5e329b77844cda662b8a27174c82a25a1910614176fad40c

HTTP Headers

GET /new/202300/FC2PPV-1607590.mp4.jpg HTTP/1.1
Host: hyimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 52153
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K41ipVrJY%2FAxDFYhNm%2Fxl8wSeIBzvuL%2FpHMMh5yUc%2F89Q0qp3nnXccEDQMmnpQ56lqE%2FNpFzihhK%2Fg4abtjhtJflR0BEmcYzZjfINwG%2Br7Axq7a39BTeI9RZNKkYq1pmI7kR"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 52153
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad59bc9e56c9-OSL
X-Firefox-Spdy: h2

zimwimg.0afaf5e.com/z-t-img/KIOVR-008.jpg

104.18.2.221

200 OK

149 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/KIOVR-008.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 700x437, components 3 - data
Size
149 kB (149341 bytes)
Hash
c2c288713c5f9adf54969d62d1f1a214
c8d835071e63b6b7a97c96d2c2ed195acba3319f
940dda16deeba5825129407a2df851fc006b3134fe8e7181eec3edaa83ffe01d

HTTP Headers

GET /z-t-img/KIOVR-008.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 149341
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6DlLK7v9AtyylzHD05WQUwZhuYkUMknvyj8hjiooQEt8BHbVo%2B99gzUzMVhedUz%2FKjzkkIgGeGu2iyjEJ6iZKO2DertBDE2FzrDVeAV7teAPpxD0WKbQGl%2BAdDoVu%2BTuMqzPpQjp7hWweOsUwZulK2g%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 149341
cf-cache-status: HIT
age: 70925
last-modified: Sun, 10 Dec 2023 07:53:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad59feb35691-OSL
X-Firefox-Spdy: h2

nygimg.0afaf5e.com/uploads/202300/FC2PPV-1523969-2.mp4.jpg

104.18.3.221

200 OK

53 kB

URL GET HTTP/2
nygimg.0afaf5e.com/uploads/202300/FC2PPV-1523969-2.mp4.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectnygimg.0afaf5e.com
Fingerprint00:4A:2E:65:58:F6:75:CB:24:8E:F8:FC:98:DF:00:DC:F6:76:1D:E7
ValidityWed, 15 Nov 2023 03:34:14 GMT - Tue, 13 Feb 2024 03:34:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25224ths 249rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
53 kB (52960 bytes)
Hash
43ecf0d94f8eed29de43630bc9dba121
bb6b8c583b89182421690d90ce3a336e485007dc
220fefb17f669fd8fa7a5ac3d543272cdc3be24e101ef8d1575943ecabae827f

HTTP Headers

GET /uploads/202300/FC2PPV-1523969-2.mp4.jpg HTTP/1.1
Host: nygimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 52960
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z1i3cbg3x648XaiphBkwf0ToreonBIkVFA4n3kL3sWQsk5yWGDP0tYkbY3ctfzBo1Y%2FiXuHHrWbUTiIxi1TNiyqJK2MI%2FQnfl2Fw1y4ltr0cctqiJmaJN65bv7sAElmcDtpxYg%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 52960
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad5a1e505685-OSL
X-Firefox-Spdy: h2

nygimg.0afaf5e.com/uploads/202300/FC2PPV-1524821-2.mp4.jpg

104.18.3.221

200 OK

61 kB

URL GET HTTP/2
nygimg.0afaf5e.com/uploads/202300/FC2PPV-1524821-2.mp4.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectnygimg.0afaf5e.com
Fingerprint00:4A:2E:65:58:F6:75:CB:24:8E:F8:FC:98:DF:00:DC:F6:76:1D:E7
ValidityWed, 15 Nov 2023 03:34:14 GMT - Tue, 13 Feb 2024 03:34:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25227ths 249rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
61 kB (60847 bytes)
Hash
41cf34c917676b7951d08cc7e3bcfa95
cf72deae214d6b428a45f2ea45d8c94bfb88a34d
32fbe55974e60b9b091b8b839a55d355df649da4eb2c4003cb88e9db99524e67

HTTP Headers

GET /uploads/202300/FC2PPV-1524821-2.mp4.jpg HTTP/1.1
Host: nygimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 60847
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=edATH0Ua2AXUrNHQMjgbqEwDIJEqT09HbQkjqxThNAV5%2BRmZegMCYgoxhvvogEWH9yn9%2BeRYYP4BQ2BY1XDeVWLOMuF7Y6Uq4nnfy9IL6j5J4SILKZNadoPwtdiMYD7o2N2pZA%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 60847
cf-cache-status: HIT
age: 99546
last-modified: Sat, 09 Dec 2023 23:56:15 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad5a1e525685-OSL
X-Firefox-Spdy: h2

nygimg.0afaf5e.com/uploads/202300/FC2PPV-1526308-2.mp4.jpg

104.18.3.221

200 OK

78 kB

URL GET HTTP/2
nygimg.0afaf5e.com/uploads/202300/FC2PPV-1526308-2.mp4.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectnygimg.0afaf5e.com
Fingerprint00:4A:2E:65:58:F6:75:CB:24:8E:F8:FC:98:DF:00:DC:F6:76:1D:E7
ValidityWed, 15 Nov 2023 03:34:14 GMT - Tue, 13 Feb 2024 03:34:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25229ths 249rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
78 kB (77971 bytes)
Hash
b656937a5e5928c95e6e13339b47a37d
0c74b0d1bddb89dc56a1c1253f80f070ada880d6
8ad8a77f764213c5eaaf46f71a6a38f00e9a98ca421d2462e595432ebdd1bf76

HTTP Headers

GET /uploads/202300/FC2PPV-1526308-2.mp4.jpg HTTP/1.1
Host: nygimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 77971
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j2JdaAMeXm9djM4Q7CxgIMXh700hllsQAo60q4OEuoJkBBKm4poRBmwOZJzHLXoPB7OoWj9CdQYE%2F%2BcjbiD6hfbhhtzRaBMWwt%2FX2AB6l3POmTHZIqFWmVtT9obabQq6x8IBJg%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 77971
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad5a1e535685-OSL
X-Firefox-Spdy: h2

nygimg.0afaf5e.com/uploads/2022/01/230910YM026.jpg

104.18.3.221

200 OK

71 kB

URL GET HTTP/2
nygimg.0afaf5e.com/uploads/2022/01/230910YM026.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectnygimg.0afaf5e.com
Fingerprint00:4A:2E:65:58:F6:75:CB:24:8E:F8:FC:98:DF:00:DC:F6:76:1D:E7
ValidityWed, 15 Nov 2023 03:34:14 GMT - Tue, 13 Feb 2024 03:34:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 840x472, components 3 - data
Size
71 kB (71333 bytes)
Hash
c0669906268d4de5367ddb609344e88b
250d3fb75fd7d81020e71ad5d873b73a329efffc
aba3c8dcd4e52edad4fdab54a1d71a3ee1dbe4399d74c076413f4fc7e89c348f

HTTP Headers

GET /uploads/2022/01/230910YM026.jpg HTTP/1.1
Host: nygimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 71333
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B80%2F5CI%2BH1exRn0h55XUkHvOJXMv4i9d531pGQzYxwRCRDLPJJ5yPxJsiJuIRN529gN0IIrw5ddZmUi8rKnrqxkT3K%2BZyfcSEiweO9XrkOMjsHP5XR6rK%2BoZaimMCrzAB2b4DI6rP7Krv9qvWRXcRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 71333
cf-cache-status: HIT
age: 793643
last-modified: Fri, 01 Dec 2023 23:07:58 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad5a1e515685-OSL
X-Firefox-Spdy: h2

nygimg.0afaf5e.com/uploads/202300/FC2PPV-1526308-1.mp4.jpg

104.18.3.221

200 OK

84 kB

URL GET HTTP/2
nygimg.0afaf5e.com/uploads/202300/FC2PPV-1526308-1.mp4.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectnygimg.0afaf5e.com
Fingerprint00:4A:2E:65:58:F6:75:CB:24:8E:F8:FC:98:DF:00:DC:F6:76:1D:E7
ValidityWed, 15 Nov 2023 03:34:14 GMT - Tue, 13 Feb 2024 03:34:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25228ths 249rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
84 kB (83491 bytes)
Hash
19096241c57c3adb5bd1c5d03056e769
e52db2f42fee069a328edda3392d3608feb21ff5
e4727f4a6f24ec67981229f2e64a55b3434ad72f2722571b211c25f786e3ac2b

HTTP Headers

GET /uploads/202300/FC2PPV-1526308-1.mp4.jpg HTTP/1.1
Host: nygimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 83491
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=waN39UV6eWlnbItUp0WWQZ7su3LYsCV1zQUI6%2F5APuqxX9QF7wlXgQ7MrshhRRbSd1UCG%2FF78WSW8YeTusv0q9fioJ5yJo4h94wZ7kuEpf5Uh5Qw5gFly6Vk0hlbmi8aO%2BCfhg%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 83491
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad5a1e545685-OSL
X-Firefox-Spdy: h2

nygimg.0afaf5e.com/uploads/202300/FC2PPV-1524821-1.mp4.jpg

104.18.3.221

200 OK

56 kB

URL GET HTTP/2
nygimg.0afaf5e.com/uploads/202300/FC2PPV-1524821-1.mp4.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectnygimg.0afaf5e.com
Fingerprint00:4A:2E:65:58:F6:75:CB:24:8E:F8:FC:98:DF:00:DC:F6:76:1D:E7
ValidityWed, 15 Nov 2023 03:34:14 GMT - Tue, 13 Feb 2024 03:34:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=25226ths 249rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
56 kB (55481 bytes)
Hash
d412cf6beac7330af54bf24af60f2974
005c3b796da42d38d8d81cb536a22edb09d82ace
88ddc25eab9fe2bad1b7586f3c5f3fe4500146845702d49e0e0ae170a1f1055a

HTTP Headers

GET /uploads/202300/FC2PPV-1524821-1.mp4.jpg HTTP/1.1
Host: nygimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 55481
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E1nZPoB5i0xnSIbyhX2PVOyMCyxyC%2BZfOTo3%2BW%2FJL8ZzPnlNd%2Fst1In70%2FwsidD62ANjKRacGFDIP%2BTsBBiJos1BK9yIFMynLMP%2BhPZ8KnIHNMmy%2F9ZOUjgPefDPbC%2FLf1QL7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 55481
cf-cache-status: HIT
age: 99545
last-modified: Sat, 09 Dec 2023 23:56:16 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad5a2e565685-OSL
X-Firefox-Spdy: h2

nygimg.0afaf5e.com/uploads/202300/FC2PPV-071707.mp4.jpg

104.18.3.221

200 OK

56 kB

URL GET HTTP/2
nygimg.0afaf5e.com/uploads/202300/FC2PPV-071707.mp4.jpg
IP
104.18.3.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectnygimg.0afaf5e.com
Fingerprint00:4A:2E:65:58:F6:75:CB:24:8E:F8:FC:98:DF:00:DC:F6:76:1D:E7
ValidityWed, 15 Nov 2023 03:34:14 GMT - Tue, 13 Feb 2024 03:34:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, manufacturer=24907ths 248rns, software=Video Thumbnails Maker v6.3.0.0a, copyright=SUU Design], baseline, precision 8, 812x462, components 3 - data
Size
56 kB (55978 bytes)
Hash
7ccba13a33a320ffea4e2c543680d225
e18bb0a46d00a36b6c73f2ae02ce80265cf4dbdc
ff7d256d5e7e54c45fdf36e4d8a3672fe1e96f4605471aa8c4b5052366651b2e

HTTP Headers

GET /uploads/202300/FC2PPV-071707.mp4.jpg HTTP/1.1
Host: nygimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:21 GMT
content-type: image/jpeg
content-length: 55978
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BLE33VneiSAVXMkt4OSXVxm9LXMP%2BDhsLqKlKaskFdqNFQd3NqUotScnx672O%2Fd4I38dopC6%2FDqv1rNwyo65US7vJBWW4RyF%2F2JLW3Wqjj4GKbFEX2MSi5BYr0O5rdfUTCjsmw%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 55978
cf-cache-status: HIT
age: 320183
last-modified: Thu, 07 Dec 2023 10:38:58 GMT
expires: Tue, 10 Dec 2024 03:35:21 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad5a2e575685-OSL
X-Firefox-Spdy: h2

ocsp.trust-provider.cn/

111.13.153.152

599 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
599 B (599 bytes)
Hash
001b6c8586ff79afb0b3d0240e636487
2948840f97b1dc8192d74b099971a025a4033fa7
17521c304d64e54d8faae0dabc0e90365caa73527692d916f7494cd8e0ab8d12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:23 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83374519ccdecef1-SJC
ETag: "2948840f97b1dc8192d74b099971a025a4033fa7"
Expires: Sun, 17 Dec 2023 17:08:19 GMT
Last-Modified: Sun, 10 Dec 2023 17:08:20 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb1
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 sxian70:9 (Cdn Cache Server V2.0), 1.1 PS-PEK-01ylP25:0 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_PS-PEK-01i6s21_8758-31198
via: n173-159-129.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 17022657201908a4ad70a3795a9c487028d4c8dd5c
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=2511, edge;dur=0

ocsp.trust-provider.cn/

111.13.153.152

600 B

URL
ocsp.trust-provider.cn/
IP
111.13.153.152:0
ASN
#9808 China Mobile Communications Group Co., Ltd.

File type
data
Size
600 B (600 bytes)
Hash
6b15ac44270abbd6a9ab05b57dbb8748
84780daf0447739a47cb8b977cb40164607868f0
86d10ec9dd0d8291d65f6c10e5dca4f1aae52134427fa8ae33f567d5ffd20e89

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Mon, 11 Dec 2023 03:35:23 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 83286680af42f95f-SJC
ETag: "84780daf0447739a47cb8b977cb40164607868f0"
Expires: Fri, 15 Dec 2023 21:59:52 GMT
Last-Modified: Fri, 08 Dec 2023 21:59:53 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb6
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PSzjtzsx2ix53:9 (Cdn Cache Server V2.0), 1.1 PS-PEK-01ylP25:14 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 65768378_PS-PEK-01ylP25_15053-59382
via: n173-159-130.bdcdn-bjcm.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1702265720a58f3988d5219d1f946bb553bc84a051
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=2779, edge;dur=0

zimwimg.0afaf5e.com/z-t-img/SNIS-778.jpg

104.18.2.221

200 OK

150 kB

URL GET HTTP/2
zimwimg.0afaf5e.com/z-t-img/SNIS-778.jpg
IP
104.18.2.221:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectzimwimg.0afaf5e.com
FingerprintA1:1D:AD:02:7D:1E:0F:7A:98:60:8D:CC:04:C6:08:71:61:E5:3D:56
ValidityWed, 15 Nov 2023 04:20:16 GMT - Tue, 13 Feb 2024 04:20:15 GMT

File type
JPEG image data, baseline, precision 8, 800x538, components 3 - data
Size
150 kB (149479 bytes)
Hash
cb662fa039e7abe8094cb5cef670f3a5
23f18e81aa3e27df5cb9befdd57d89a87c170b11
16934829c5a156d1c1bd4018d53e82cb74837ab4232042829e60867e9bf38e28

HTTP Headers

GET /z-t-img/SNIS-778.jpg HTTP/1.1
Host: zimwimg.0afaf5e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://artefact.live666.online/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:23 GMT
content-type: image/jpeg
content-length: 149479
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: h2pri
cf-placement: local-OSL
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SUxHzXJAg%2B6L15POMyfhC8EbfT9nxDvYe%2Bweb5GlNSD29neWBYxtqtftUlByYopNvYC1aDnS4zLP8TNJibDFdvvTUDz9i39Kq58OcFp7TmvfDRAVO9KSZQnwGUs8PMmMogZHlS3%2BQ7IdbSkutyEHuDQ%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
size: 149479
cf-cache-status: HIT
age: 70927
last-modified: Sun, 10 Dec 2023 07:53:16 GMT
expires: Tue, 10 Dec 2024 03:35:23 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 833aad63d9325691-OSL
X-Firefox-Spdy: h2

artefact.live666.online/favicon.ico

139.180.223.6

404 Not Found

146 B

URL GET HTTP/1.1
artefact.live666.online/favicon.ico
IP
139.180.223.6:80
ASN
#20473 AS-CHOOPA

Requested by
http://artefact.live666.online/

File type
HTML document text - HTML document text - HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: artefact.live666.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Cookie: version=v1; showbox=ishide; _ga_BNVSKDCKNQ=GS1.1.1702265721.1.0.1702265721.0.0.0; _ga=GA1.1.1523754159.1702265721; Hm_lvt_a89207277c97474e61d6e7942b61562f=1702265723; Hm_lpvt_a89207277c97474e61d6e7942b61562f=1702265723
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 11 Dec 2023 03:35:23 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css

142.250.74.99

200 OK

4.0 kB

URL GET HTTP/2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT

File type
ASCII text, with very long lines (20367), with no line terminators
Size
4.0 kB (3960 bytes)
Hash
72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1

HTTP Headers

GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:41:31 GMT
expires: Fri, 06 Dec 2024 15:41:31 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 302032
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1992149454&si=a89207277c97474e61d6e7942b61562f&v=1.3.0&lv=1&sn=59633&r=0&ww=1280&u=http%3A%2F%2Fartefact.live666.online%2F&tt=%E7%88%B1%E6%80%A7%E7%94%9F%E6%B4%BB%E7%BD%91

103.235.46.191

200 OK

43 B

URL GET HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1992149454&si=a89207277c97474e61d6e7942b61562f&v=1.3.0&lv=1&sn=59633&r=0&ww=1280&u=http%3A%2F%2Fartefact.live666.online%2F&tt=%E7%88%B1%E6%80%A7%E7%94%9F%E6%B4%BB%E7%BD%91
IP
103.235.46.191:443
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

Requested by
http://artefact.live666.online/
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
GIF image data, version 89a, 1 x 1 - data
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1992149454&si=a89207277c97474e61d6e7942b61562f&v=1.3.0&lv=1&sn=59633&r=0&ww=1280&u=http%3A%2F%2Fartefact.live666.online%2F&tt=%E7%88%B1%E6%80%A7%E7%94%9F%E6%B4%BB%E7%BD%91 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 11 Dec 2023 03:35:23 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=D0650DBE24ECF37C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.L3wIDG9mmTk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrYT5fIDVzVavnV7x1S07NcQgDRsA/m=el_main

142.250.74.106

200 OK

90 kB

URL GET HTTP/2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.L3wIDG9mmTk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrYT5fIDVzVavnV7x1S07NcQgDRsA/m=el_main
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT

File type
ASCII text, with very long lines (2191)
Size
90 kB (89471 bytes)
Hash
879ffbe206a9e9b58833370a30157dc7
296cf6cda05aed2e3a1c04314b7b2e7c51dfbe5f
8abe56f67c72b6b5ba0f7e27e49d42791f1b687f45b7e370f2f78bf50ec9ae55

HTTP Headers

GET /_/translate_http/_/js/k=translate_http.tr.no.L3wIDG9mmTk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfrYT5fIDVzVavnV7x1S07NcQgDRsA/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 89471
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 21:49:48 GMT
expires: Fri, 06 Dec 2024 21:49:48 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 06 Dec 2023 14:12:04 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 279935
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png

142.250.74.99

200 OK

910 B

URL GET HTTP/3
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT

File type
PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced - data
Size
910 B (910 bytes)
Hash
efa6bb2bfe459bc6f4bdafa3db0383f6
52d15ce52fe50643e542c17812de43f4ed1b6ee0
6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2

HTTP Headers

GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:59:16 GMT
expires: Fri, 06 Dec 2024 15:59:16 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/png
vary: Origin
age: 300968
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/images/branding/product/2x/translate_24dp.png

142.250.74.99

200 OK

1.8 kB

URL GET HTTP/3
www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced - data
Size
1.8 kB (1842 bytes)
Hash
c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82

HTTP Headers

GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:58:03 GMT
expires: Fri, 06 Dec 2024 15:58:03 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 301041
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg

142.250.74.3

200 OK

3.3 kB

URL GET HTTP/2
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP
142.250.74.3:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT

File type
SVG Scalable Vector Graphics image - , ASCII text, with very long lines (6225), with no line terminators
Size
3.3 kB (3340 bytes)
Hash
2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09

HTTP Headers

GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 09 Dec 2023 15:42:33 GMT
expires: Sun, 08 Dec 2024 15:42:33 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 129171
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback

142.250.74.106

1.4 kB

URL
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
142.250.74.106:0
ASN
#15169 GOOGLE

File type
Unicode text, UTF-8 text
Size
1.4 kB (1392 bytes)
Hash
a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067

HTTP Headers

GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 11 Dec 2023 03:35:24 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=ULIBP7fBBrh0eRjchCd1VEIzoM7DRIap1lRAoUk4tUrYQm551Bf6D0clLZcTpwET9_7Ks9ncdJkjI0tcVgnja-YI53D3im_oJDgj1YX3HsNf62qCJIS3P4YHr_b2Drcg1u2AXJP3ERatnT1912iHdgWZ5stXDejEBupsX6hpgF0; expires=Tue, 11-Jun-2024 03:35:24 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+881; expires=Wed, 10-Dec-2025 03:35:24 GMT; path=/; domain=.googleapis.com; Secure
expires: Mon, 11 Dec 2023 03:35:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0

142.250.74.106

200 OK

0 B

URL OPTIONS HTTP/3
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: http://artefact.live666.online/
Origin: http://artefact.live666.online
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-origin: http://artefact.live666.online
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Mon, 11 Dec 2023 03:35:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+810; expires=Wed, 10-Dec-2025 03:35:34 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 11 Dec 2023 03:35:34 GMT
cache-control: private

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0

142.250.74.106

200 OK

131 B

URL OPTIONS HTTP/3
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT

File type
JSON data - , ASCII text, with no line terminators
Size
131 B (131 bytes)
Hash
ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358

HTTP Headers

POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 308
Origin: http://artefact.live666.online
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-origin: http://artefact.live666.online
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 11 Dec 2023 03:35:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+146; expires=Wed, 10-Dec-2025 03:35:34 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 11 Dec 2023 03:35:34 GMT

img.puzyzcdn.com/upload/vod/20230828-1/417f240775e55a534c1005d951f13552.jpg

0.0.0.0

0 B

URL GET
img.puzyzcdn.com/upload/vod/20230828-1/417f240775e55a534c1005d951f13552.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://artefact.live666.online/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/vod/20230828-1/417f240775e55a534c1005d951f13552.jpg HTTP/1.1
Host: img.puzyzcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

api.9ccmsapi.com/boss/20190928.js

104.21.82.6

200 OK

341 B

URL GET HTTP/2
api.9ccmsapi.com/boss/20190928.js
IP
104.21.82.6:443
ASN
#13335 CLOUDFLARENET

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subject9ccmsapi.com
Fingerprint41:E1:89:72:CF:CC:39:E1:E8:04:1F:06:C7:1A:D5:BE:7F:B4:E8:CF
ValiditySat, 11 Nov 2023 10:34:27 GMT - Fri, 09 Feb 2024 10:34:26 GMT

File type
ASCII text, with very long lines (371), with no line terminators
Size
341 B (341 bytes)
Hash
b96e4642a24d381e88e4e3210f8d8e53
93229dfbededc414cdcd58faeb8e5a01eebd2298
b2e1528337057584d2b5ebccd813e2dc3b901932bbc386b067bcae91a579c3e4

HTTP Headers

GET /boss/20190928.js HTTP/1.1
Host: api.9ccmsapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 03:35:19 GMT
content-type: application/javascript
last-modified: Sat, 09 Sep 2023 20:35:40 GMT
etag: W/"64fcd71c-155"
expires: Mon, 11 Dec 2023 13:31:46 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 7413
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=92dvURRJJf3Nh893wCm2W7OEaPAbrek74TDjTb7OWOqBIFyR8deXtSJFI8rJ9X18fqujdyerPNwuaVz%2BLC0WEdITm%2BCO07YVLXw7veLReLSu%2FEDjOrUgrQg2MhqFvFG6jLkG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833aad481909b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2

216.58.211.14

200 OK

90 kB

URL GET HTTP/2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
http://artefact.live666.online/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT

File type
ASCII text, with very long lines (2462)
Size
90 kB (90326 bytes)
Hash
473c7e72aa6ff89c17e0952abcf42d51
fdee976a6f17703be0a9307bb61b90f0f34f6f5e
8f6f7389262a30f4b807655eb90848faf0e3fa6ac52e257c11844a0f86866a54

HTTP Headers

GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 11 Dec 2023 03:35:23 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/a89246f01efa04d48da2a721ccb48e84/ro
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+134; expires=Wed, 10-Dec-2025 03:35:23 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

img.puzyzcdn.com/upload/vod/20230813-1/bcdd9a5f285742c45b8cc62bb23fb8d9.jpg

0.0.0.0

0 B

URL GET
img.puzyzcdn.com/upload/vod/20230813-1/bcdd9a5f285742c45b8cc62bb23fb8d9.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://artefact.live666.online/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/vod/20230813-1/bcdd9a5f285742c45b8cc62bb23fb8d9.jpg HTTP/1.1
Host: img.puzyzcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

img.puzyzcdn.com/upload/vod/20230813-1/06744966ade1df6c8d0bd4697ae87758.jpg

0.0.0.0

0 B

URL GET
img.puzyzcdn.com/upload/vod/20230813-1/06744966ade1df6c8d0bd4697ae87758.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://artefact.live666.online/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/vod/20230813-1/06744966ade1df6c8d0bd4697ae87758.jpg HTTP/1.1
Host: img.puzyzcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

img.puzyzcdn.com/upload/vod/20230815-1/0c86c28568e06f6698f6087de3fe967c.jpg

0.0.0.0

0 B

URL GET
img.puzyzcdn.com/upload/vod/20230815-1/0c86c28568e06f6698f6087de3fe967c.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://artefact.live666.online/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/vod/20230815-1/0c86c28568e06f6698f6087de3fe967c.jpg HTTP/1.1
Host: img.puzyzcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

img.puzyzcdn.com/upload/vod/20230813-1/69c06e4c98aae24c614ea4cf50c85dcd.jpg

0.0.0.0

0 B

URL GET
img.puzyzcdn.com/upload/vod/20230813-1/69c06e4c98aae24c614ea4cf50c85dcd.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://artefact.live666.online/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/vod/20230813-1/69c06e4c98aae24c614ea4cf50c85dcd.jpg HTTP/1.1
Host: img.puzyzcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

img.puzyzcdn.com/upload/vod/20230813-1/b985944c405612cf1537ddbb406a3c23.jpg

0.0.0.0

0 B

URL GET
img.puzyzcdn.com/upload/vod/20230813-1/b985944c405612cf1537ddbb406a3c23.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://artefact.live666.online/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/vod/20230813-1/b985944c405612cf1537ddbb406a3c23.jpg HTTP/1.1
Host: img.puzyzcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://artefact.live666.online/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (17)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN