r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16521
Expires: Sat, 04 Feb 2023 16:30:28 GMT
Date: Sat, 04 Feb 2023 11:55:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19739
Expires: Sat, 04 Feb 2023 17:24:06 GMT
Date: Sat, 04 Feb 2023 11:55:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7948
Expires: Sat, 04 Feb 2023 14:07:35 GMT
Date: Sat, 04 Feb 2023 11:55:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 11:36:14 GMT
content-type: application/json
age: 1133
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: N0k39FnQrj4coGQGd/8W82vf4oXIi0gqLs9vue3R6/EzgdYMOf/GBL2sfvMtiMQoi2URYnU8nh0=
x-amz-request-id: 7S7BQAM4MHJXPW1Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 11:52:49 GMT
age: 138
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 11:55:07 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 11:07:19 GMT
age: 2868
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10185
Expires: Sat, 04 Feb 2023 14:44:52 GMT
Date: Sat, 04 Feb 2023 11:55:07 GMT
Connection: keep-alive
12647.url.tudown.com/down/office2016@418_61474.exe
200 OK 8.6 kB URL HTTP/1.1 12647.url.tudown.com/down/office2016@418_61474.exe
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (371), with CRLF, LF line terminators
Hash 52655645fa0d36f51751b1df97d2bd6a
614b0d7c8cfb886fa2ecd198b025f3d162554b9b
c2748aff03c420246e57c4c6fceff47919b1054a050af4f839e5b9260a4ee829
Analyzer Verdict Alert fortinet Malware
GET /down/office2016@418_61474.exe HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:07 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XYWIFYXuyGIRmqjwG9f0VA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MzEoNsVQXyuwXZGhy3VZ5fapKdA=
12647.url.tudown.com/js/orsxg5a.script
200 OK 531 B URL HTTP/1.1 12647.url.tudown.com/js/orsxg5a.script
IP
ASN #137951 Clayer Limited
File type HTML document, ASCII text, with CRLF line terminators
Hash 39fd4f4c17d424445d9f437c99c9d40a
84a56ab95c669d43c757a5f9a312d5f3a37f73fa
45f58e7b2e72c9f2734889b73ef5c3f2d3e1fb9ac69995afe1561ec4a7943d15
GET /js/orsxg5a.script HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
12647.url.tudown.com/template/company/955yx/css/gb.css
200 OK 47 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/css/gb.css
IP
ASN #137951 Clayer Limited
File type Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators
Hash 50dd1318432db01d440645564e53edc9
ee0cb6adb44f515312f771197c6c08b951cb7689
2b908ce7540ed6b03b07bdec7eb7eb504b76e78b3304474f40af3b8f3afb2135
GET /template/company/955yx/css/gb.css HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: text/css
Last-Modified: Tue, 15 Jun 2021 09:16:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60c86fef-30c0d"
Expires: Sat, 04 Feb 2023 23:55:08 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12647.url.tudown.com/template/company/955yx/js/searchword.js
200 OK 1.3 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/js/searchword.js
IP
ASN #137951 Clayer Limited
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 95c12a0f8944cbd1c05e11f7a72875dd
22430886820419d75b8da5721af251bdeb6811d1
36e33550c0a108df269183b53afe7f8c86316cc7e24a84ee3804e8ae12c627eb
GET /template/company/955yx/js/searchword.js HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Jun 2021 09:16:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60c86ff1-fb5"
Expires: Sat, 04 Feb 2023 23:55:08 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12647.url.tudown.com/template/company/955yx/js/script_index2.js
200 OK 2.3 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/js/script_index2.js
IP
ASN #137951 Clayer Limited
File type ISO-8859 text, with CRLF line terminators
Hash e3f1b130f72b9756f002c6bbbc284fb7
d51b59da45422005ca5f02b66cb02eaf1b44a8fd
3c0e569d33461414b263a4a7e6602577873e4843bb450d5de979f263d02644c9
GET /template/company/955yx/js/script_index2.js HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Jun 2021 09:16:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60c86ff2-1f77"
Expires: Sat, 04 Feb 2023 23:55:08 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12647.url.tudown.com/template/company/955yx/js/week_rank.js
200 OK 656 B URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/js/week_rank.js
IP
ASN #137951 Clayer Limited
File type ASCII text, with CRLF line terminators
Hash 00ac918b54dd742e0ec507274205038a
6a2976eb86376f33eb4f7b587f71296f07940da5
11624c98f05816c06f80e2ea5ef22376ce5509cb2c076003f9d5f27ac81f4ec9
GET /template/company/955yx/js/week_rank.js HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: application/javascript
Content-Length: 656
Last-Modified: Tue, 15 Jun 2021 09:16:32 GMT
Connection: keep-alive
ETag: "60c86ff0-290"
Expires: Sat, 04 Feb 2023 23:55:08 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
12647.url.tudown.com/template/company/955yx/js/api.js
200 OK 22 B URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/js/api.js
IP
ASN #137951 Clayer Limited
File type ASCII text, with CRLF line terminators
Hash 143a35d673d243f56603ac04a89d8099
677acddc2a341ec711d74ecfd05bb919208c23df
ab368ffd11e345075f085c40cfdd9254280e0db19ed65e2668c287b17508170f
GET /template/company/955yx/js/api.js HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: application/javascript
Content-Length: 22
Last-Modified: Tue, 15 Jun 2021 09:16:34 GMT
Connection: keep-alive
ETag: "60c86ff2-16"
Expires: Sat, 04 Feb 2023 23:55:08 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
12647.url.tudown.com/template/company/955yx/js/gb.js
200 OK 7.7 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/js/gb.js
IP
ASN #137951 Clayer Limited
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 2a105ecd23c8abe20d0f84a4d10903a7
f3a1339005455be7df05412b2bde5d33ed096da0
9e8e3180840152689c4d7732c3660da6c766645aad88f695c041720ff5ec0a67
GET /template/company/955yx/js/gb.js HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Jun 2021 09:16:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60c86fef-7685"
Expires: Sat, 04 Feb 2023 23:55:08 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12647.url.tudown.com/template/company/955yx/js/jquery-1.8.3.min.js
200 OK 41 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/js/jquery-1.8.3.min.js
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (65483)
Hash aef63d51fe884fe89d488a2abc96381b
ed39edfb824178566b87b08164c7d382a119705b
51826bef0d69d08144d8605e1c56e1602cb1b6f620f854972c31080cf17d11f5
GET /template/company/955yx/js/jquery-1.8.3.min.js HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:08 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Jun 2021 09:16:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60c86fef-198c3"
Expires: Sat, 04 Feb 2023 23:55:08 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae58d39edb7923f0dac8e7b20767f306
827e75323edf1548d2b898b96caaec9556893e3a
2c18f66718230665099bdc4a96dbed4e667ff233f9853aebd3e0802235c658d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C18F66718230665099BDC4A96DBED4E667FF233F9853AEBD3E0802235C658D8"
Last-Modified: Thu, 02 Feb 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7881
Expires: Sat, 04 Feb 2023 14:06:30 GMT
Date: Sat, 04 Feb 2023 11:55:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10976
Expires: Sat, 04 Feb 2023 14:58:05 GMT
Date: Sat, 04 Feb 2023 11:55:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10976
Expires: Sat, 04 Feb 2023 14:58:05 GMT
Date: Sat, 04 Feb 2023 11:55:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7101f6e43855cb76ce48271a847ffbd
8e674830a97d8ce3818132fda197db4f0289d316
e78a83a4024e238bcdec3b9c4d5c12a99f49aabd57e34952f6a4cc8ed4422f55
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9141
x-amzn-requestid: ed7db574-6bca-4f3e-8879-c3e836549339
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD8zE5lIAMF1HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8051-4480112f11d4ced0037d1ad8;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6kDIOqhM4aVL80sF02uFu2TuGbiBE7_L_S2W7x-P46hO5YZFmuL9nQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:13:30 GMT
age: 49299
etag: "8e674830a97d8ce3818132fda197db4f0289d316"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:04 GMT
age: 50825
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: f95a2821-ae89-4ea9-93b2-43e570285df3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3FyboAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-7e2177f11d5715d4092cad2c;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcFgY5x3Ef0J__7wGn3llTjZ9as5nX1H4HErIT3VlKfeQaQTjymW2g==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:33 GMT
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
age: 49476
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5b4e4f15da3323c73974c3f1cdb5d74
1f14971d0cf979cc34ff191849dc43d86e8ac463
5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EFAHIAMFQQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 49488
etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 518bba9a8770e8ff15229a68be5bddc3
139f944b3f4279e640901f7a6b993f1a49b51a22
0591e73dec2190752677f06525bc993dc8c7a5aa20984a5eda64c323188e2b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9743
x-amzn-requestid: b6c1caa9-72e4-476f-9c3d-4a746c410ba3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EHLJoAMF_TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-1289ef383fbad59621eda6d0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nIp2nUVnamnoTpFwrN1L4K1dqjYvcDGuV2yFqYskkXb14k72AZsjMg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:08:41 GMT
age: 49588
etag: "139f944b3f4279e640901f7a6b993f1a49b51a22"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7afd5ce8fb9ec7b62e528bf97705e49
afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3
b2d93ba6c0ed2c858d91afba1c81251afbffa41c779be2e9203994dcfb7bbc9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: 007ce521-ed5c-4074-a314-684ad0df2e22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9GH5goAMF_ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8053-7060f02b767c90371991a190;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fTV_e56nzjiXo4Guu67WXDDvp3nrjB0Yfyy6ByjcDSx23J-8r0fmQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 49488
etag: "afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/998166.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/998166.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/998166.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=2127145328,732012671&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=714
12647.url.tudown.com/static/api/http://12647.url.tudown.com/template/company/955yx/js/share.js?v=89860593.js?cdnversion=465418
404 Not Found 146 B URL HTTP/1.1 12647.url.tudown.com/static/api/http://12647.url.tudown.com/template/company/955yx/js/share.js?v=89860593.js?cdnversion=465418
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /static/api/http://12647.url.tudown.com/template/company/955yx/js/share.js?v=89860593.js?cdnversion=465418 HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
12647.url.tudown.com/template/company/955yx/images/home.png
200 OK 1.3 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/images/home.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash 302b4d0465daebb6a02b59b721d92a41
20d18d0cb9f052ec48b775ec2de2e8ce1a233c1e
a7fa550286b2b0974ab70bbadbe26cfa5b6770da8a71445b3b3f87abd896d3f2
GET /template/company/955yx/images/home.png HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/template/company/955yx/css/gb.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/png
Content-Length: 1270
Last-Modified: Tue, 15 Jun 2021 09:16:32 GMT
Connection: keep-alive
ETag: "60c86ff0-4f6"
Accept-Ranges: bytes
12647.url.tudown.com/uploads/images/936062.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/936062.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/936062.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=2399996021,1355300969&fm=253&fmt=auto&app=138&f=JPEG?w=455&h=700
12647.url.tudown.com/uploads/images/933850.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/933850.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/933850.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=160146455,2314142787&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
12647.url.tudown.com/uploads/images/542648.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/542648.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/542648.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2687242963,916685875&fm=253&fmt=auto&app=138&f=JPG?w=265&h=236
12647.url.tudown.com/uploads/images/45900.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/45900.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/45900.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=1088706344,982398881&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/332538.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/332538.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/332538.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=3048217472,4201161446&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=86
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Sat, 04 Feb 2023 11:55:09 GMT
Etag: "4078521116"
Expires: Sun, 04 Feb 2024 11:55:09 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=FFF45CF28685043C3BC89245A3D7D8A6:FG=1; max-age=31536000; expires=Sun, 04-Feb-24 11:55:09 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
s.ssl.qhres2.com/ssl/ab77b6ea7f3fbf79.js
200 OK 478 B URL HTTP/2 s.ssl.qhres2.com/ssl/ab77b6ea7f3fbf79.js
IP
File type ASCII text, with very long lines (478), with no line terminators
Hash 5dd27f8f2b042194c3cdabd62fd80110
c035036a939799d4c29b9c0f7229ae1953d03109
928131ab2183d971cdbfe2ed1329200212d0021db70574a35c89ae169c0f6e0a
GET /ssl/ab77b6ea7f3fbf79.js HTTP/1.1
Host: s.ssl.qhres2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12647.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 478
date: Fri, 06 Jan 2023 02:40:18 GMT
x-qstatic-hit: 1
last-modified: Mon, 01 Jan 2018 00:00:00 GMT
etag: W/"67d74adaac6d2f43"
access-control-allow-origin: *
cache-control: max-age=315360000, immutable
expires: Mon, 03 Jan 2033 02:40:18 GMT
kcs-via: HIT from w-fc03.lato;MISS from w-sc01.lato
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O_7RmULtPeQHSCO2uTFGxqNsM2PUBewo4xsJNq1HYsXYXDlBuQLp0w==
age: 2538891
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 896527e9b74cc1e9b5b97c09ad3b321c
77f8053e0989f43e0820de5d8ca4fa2c011dabf0
c3e179932c16e93245a00ae2c3575f1e6c0e7632a8bde1898e9e27c0b9b41e4c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 08 Feb 2023 10:09:59 GMT
ETag: "77f8053e0989f43e0820de5d8ca4fa2c011dabf0"
Last-Modified: Sat, 04 Feb 2023 10:10:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2582
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7943373a1e54b51e-OSL
12647.url.tudown.com/uploads/images/585657.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/585657.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/585657.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=1039649212,3189771205&fm=253&fmt=auto&app=120&f=JPEG?w=587&h=500
12647.url.tudown.com/uploads/images/384673.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/384673.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/384673.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2266473788,83495481&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
12647.url.tudown.com/uploads/images/433518.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/433518.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/433518.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=4056346842,570088631&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/788759.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/788759.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/788759.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t13.baidu.com/it/u=164423245,1478100639&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/406954.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/406954.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/406954.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1488390620,817452110&fm=253&fmt=auto&app=138&f=GIF?w=630&h=500
api.share.baidu.com/s.gif?l=http://12647.url.tudown.com/down/office2016@418_61474.exe
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://12647.url.tudown.com/down/office2016@418_61474.exe
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://12647.url.tudown.com/down/office2016@418_61474.exe HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Sat, 04 Feb 2023 11:55:10 GMT
s.360.cn/so/zz.gif?url=http%3A%2F%2F12647.url.tudown.com%2Fdown%2Foffice2016%40418_61474.exe&sid=d182b3f28525f2db83acfaaf6e696dba&token=de1x8e2.b437f421865_2851f42@d6b1
200 OK 0 B URL HTTP/1.1 s.360.cn/so/zz.gif?url=http%3A%2F%2F12647.url.tudown.com%2Fdown%2Foffice2016%40418_61474.exe&sid=d182b3f28525f2db83acfaaf6e696dba&token=de1x8e2.b437f421865_2851f42@d6b1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /so/zz.gif?url=http%3A%2F%2F12647.url.tudown.com%2Fdown%2Foffice2016%40418_61474.exe&sid=d182b3f28525f2db83acfaaf6e696dba&token=de1x8e2.b437f421865_2851f42@d6b1 HTTP/1.1
Host: s.360.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/
HTTP/1.1 200 OK
Server: openresty/1.15.8.2
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/gif
Content-Length: 0
Last-Modified: Wed, 24 Apr 2019 08:02:53 GMT
Connection: keep-alive
ETag: "5cc0182d-0"
Accept-Ranges: bytes
12647.url.tudown.com/uploads/images/89883.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/89883.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/89883.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=71929175,3014354428&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/953607.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/953607.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/953607.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=1954089302,3846842511&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/419279.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/419279.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/419279.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2972669789,3054849935&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
12647.url.tudown.com/uploads/images/929444.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/929444.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/929444.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3053061917,372692374&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
12647.url.tudown.com/template/company/955yx/images/bgs.png
200 OK 101 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/images/bgs.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 500 x 900, 8-bit/color RGBA, non-interlaced\012- data
Size 101 kB (101362 bytes)
Hash 1621ecee9c5f80ff96ab42e1ee259f58
5867acc872a638e86b981dbd81632c219a8093ec
f7809c07dbf542cc134fa715f678d4fba323bffdc649c9fb85a866b55b0c47f9
GET /template/company/955yx/images/bgs.png HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/template/company/955yx/css/gb.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:09 GMT
Content-Type: image/png
Content-Length: 101362
Last-Modified: Tue, 15 Jun 2021 09:16:31 GMT
Connection: keep-alive
ETag: "60c86fef-18bf2"
Accept-Ranges: bytes
12647.url.tudown.com/index.php?m=content&c=index&a=get_searchkey&pc_hash=WrCDxe&_=1675511745123
200 OK 8.6 kB URL HTTP/1.1 12647.url.tudown.com/index.php?m=content&c=index&a=get_searchkey&pc_hash=WrCDxe&_=1675511745123
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (371), with CRLF, LF line terminators
Hash 79cdbe83d43a074187eefeea9d802a91
39a6dc2a48b166116e4b48c8cbaa2f0c16e00cfa
726304513eb6e8fca56fe605da03658cd5d934c02c13ce8b56a09e09df10fd1a
GET /index.php?m=content&c=index&a=get_searchkey&pc_hash=WrCDxe&_=1675511745123 HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
t14.baidu.com/it/u=4056346842,570088631&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 71 kB URL HTTP/1.1 t14.baidu.com/it/u=4056346842,570088631&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 22155c2395c89d6a153f63420a0e71d4
6ce4d99c8668a653eabe269eb229d5cb9d7957fc
9162a0351508adf7178e26427d7f9c9913a63125e0c06e0eea1b2aa35cd6dc94
GET /it/u=4056346842,570088631&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpeg
Content-Length: 71358
Connection: keep-alive
Expires: Thu, 02 Mar 2023 12:11:14 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 22155c2395c89d6a153f63420a0e71d4
Age: 341589
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Tue, 31 Jan 2023 12:11:14 GMT
Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [4], zhuzuncache52 [1], xiangyix52 [2]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 71358
X-Cache-Status: HIT
Timing-Allow-Origin: *
t14.baidu.com/it/u=1954089302,3846842511&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 47 kB URL HTTP/1.1 t14.baidu.com/it/u=1954089302,3846842511&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 247a79f3c50c98ff4180dd3fde7ff506
953c4c79c372efd2237b344d9ec6c8d16121e4b9
35c19d9fe093fa0d109111846610c2cc9d5eea2bff460e5460e87b208f81f8ae
GET /it/u=1954089302,3846842511&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpeg
Content-Length: 46898
Connection: keep-alive
Expires: Wed, 01 Mar 2023 04:23:48 GMT
Last-Modified: Sun, 11 Jan 1970 00:00:00 GMT
ETag: 247a79f3c50c98ff4180dd3fde7ff506
Age: 210861
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Mon, 30 Jan 2023 04:23:48 GMT
Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache64 [4], wzix111 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 46898
X-Cache-Status: HIT
Timing-Allow-Origin: *
img1.baidu.com/it/u=3048217472,4201161446&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=86
200 OK 1.6 kB URL HTTP/2 img1.baidu.com/it/u=3048217472,4201161446&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=86
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 86x86, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 438cd527fab5a964b5e1a3bd7e699e9b
010ca28858c6e751b3f1a2288b67b883e1f3ebdc
7e6756e025097c19a2d3335b429e3be00c4716b9f5eed8393cc6d2a7106dc78f
GET /it/u=3048217472,4201161446&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=86 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 1586
expires: Sun, 12 Feb 2023 13:45:40 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: 438cd527fab5a964b5e1a3bd7e699e9b
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 13 Jan 2023 13:45:40 GMT
ohc-cache-hit: qd4ct81 [1], bdix220 [4]
ohc-file-size: 1586
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/template/company/955yx/images/litterstar.png
200 OK 1.7 kB URL HTTP/1.1 12647.url.tudown.com/template/company/955yx/images/litterstar.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 73 x 143, 8-bit colormap, non-interlaced\012- data
Hash d130270dc6abd41d1d40acbe01e36739
5dec8c0c88e9c3dfb13cbfc7d1d9818baa7ee96c
8b31f0ef117010f8ad5e5c8c73ede7468072e1cb08f994fce90ada97f461b59b
GET /template/company/955yx/images/litterstar.png HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/template/company/955yx/css/gb.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/png
Content-Length: 1706
Last-Modified: Tue, 15 Jun 2021 09:16:33 GMT
Connection: keep-alive
ETag: "60c86ff1-6aa"
Accept-Ranges: bytes
img0.baidu.com/it/u=2687242963,916685875&fm=253&fmt=auto&app=138&f=JPG?w=265&h=236
200 OK 18 kB URL HTTP/2 img0.baidu.com/it/u=2687242963,916685875&fm=253&fmt=auto&app=138&f=JPG?w=265&h=236
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 265x236, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fd7cb1c31c1f4243483099ec4904d2ad
25918768de138b697c451e68654ff4161364755d
202072eaabcbd0fea4cdded104d667cd3542a9bf0379e746191b46f8e89027f7
GET /it/u=2687242963,916685875&fm=253&fmt=auto&app=138&f=JPG?w=265&h=236 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 18060
expires: Sun, 26 Feb 2023 10:55:44 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: fd7cb1c31c1f4243483099ec4904d2ad
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 27 Jan 2023 10:55:44 GMT
ohc-cache-hit: dg3ct55 [1], qdix113 [4]
ohc-file-size: 18060
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/406840.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/406840.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/406840.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img2.baidu.com/it/u=2412970578,3182876104&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=583
12647.url.tudown.com/uploads/images/54917.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/54917.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/54917.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1184451977,2281396793&fm=253&fmt=auto&app=120&f=JPEG?w=600&h=430
12647.url.tudown.com/uploads/images/817788.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/817788.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/817788.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=2796111739,2944871356&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=298
t13.baidu.com/it/u=164423245,1478100639&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 50 kB URL HTTP/1.1 t13.baidu.com/it/u=164423245,1478100639&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash e31e4063fda82cb2a9a484ff790a795a
66c90e36e616ebb2a01584c523b15968ac661471
b4a3e7c4a780d1137500ceef4ea0848bd7c548f5f856f872839cf732f4857786
GET /it/u=164423245,1478100639&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t13.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpeg
Content-Length: 49778
Connection: keep-alive
Expires: Sun, 05 Mar 2023 20:50:25 GMT
Last-Modified: Tue, 13 Jan 1970 00:00:00 GMT
ETag: e31e4063fda82cb2a9a484ff790a795a
Age: 28379
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 03 Feb 2023 20:50:25 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [4], zhuzuncache63 [1], bdix135 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 49778
X-Cache-Status: HIT
Timing-Allow-Origin: *
t15.baidu.com/it/u=1088706344,982398881&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 43 kB URL HTTP/1.1 t15.baidu.com/it/u=1088706344,982398881&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 7dda212905813e133173193c5839dae5
f4f08b9e8a760fbbaf0160450e8e68abf9e5ab7b
731195aeb7dcdfadb3006b21218bdb0b6313c848b84a95d6d95e85d4b82e52ef
GET /it/u=1088706344,982398881&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpeg
Content-Length: 43276
Connection: keep-alive
Expires: Fri, 10 Feb 2023 13:36:12 GMT
Last-Modified: Mon, 12 Jan 1970 00:00:00 GMT
ETag: 7dda212905813e133173193c5839dae5
Age: 2040058
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 11 Jan 2023 13:36:11 GMT
Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [4], zhuzuncache59 [4], bdix59 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 43276
X-Cache-Status: HIT
Timing-Allow-Origin: *
12647.url.tudown.com/api.php?op=digg&action=show&id=23038
404 Not Found 146 B URL HTTP/1.1 12647.url.tudown.com/api.php?op=digg&action=show&id=23038
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /api.php?op=digg&action=show&id=23038 HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
12647.url.tudown.com/uploads/images/76937.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/76937.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/76937.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=2636044549,3626760536&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/537355.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/537355.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/537355.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=4110925945,4259986758&fm=253&fmt=auto&app=138&f=JPEG?w=333&h=500
img1.baidu.com/it/u=2127145328,732012671&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=714
200 OK 43 kB URL HTTP/2 img1.baidu.com/it/u=2127145328,732012671&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=714
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x714, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3bc7fee1d9581b8ebd154cfd2a418448
06f4937ac56528fd006e1f1e49cbdb7bf2a9bc08
2191d613b9d2d4a05b3ba7dfb8ae3a55f05652699c319a0928503bdc37c44c76
GET /it/u=2127145328,732012671&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=714 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 43272
expires: Sun, 19 Feb 2023 20:37:04 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 3bc7fee1d9581b8ebd154cfd2a418448
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 20 Jan 2023 20:37:04 GMT
ohc-cache-hit: qd4ct61 [1], czix153 [4]
ohc-file-size: 43272
x-cache-status: MISS
X-Firefox-Spdy: h2
img1.baidu.com/it/u=71929175,3014354428&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 18 kB URL HTTP/2 img1.baidu.com/it/u=71929175,3014354428&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5cd86660e91a640b704c92afceaa0887
2529d4c8d79399e6add551aad6ed605af88dc525
923bd9caeddeed883a82710a799e2b956aba84ec0c10f5d5fc9c6932d0fe83b9
GET /it/u=71929175,3014354428&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 18266
expires: Sun, 05 Mar 2023 00:22:24 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: 5cd86660e91a640b704c92afceaa0887
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 03 Feb 2023 00:22:24 GMT
ohc-cache-hit: qd4ct62 [1], xiangyix150 [4]
ohc-file-size: 18266
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=3053061917,372692374&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
200 OK 20 kB URL HTTP/2 img0.baidu.com/it/u=3053061917,372692374&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 281x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c15a720f7109bc5dacbce07f946514c9
cabf3b7b1d9d53bdc67dcea34f3b54f2705567a7
bad362e4f967d3ac9172e2231f0ffa3a0878d0a9e78452302aa443315ce24e9f
GET /it/u=3053061917,372692374&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 20170
expires: Mon, 20 Feb 2023 08:17:48 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: c15a720f7109bc5dacbce07f946514c9
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 21 Jan 2023 08:17:48 GMT
ohc-cache-hit: dg3ct51 [1], czix115 [4]
ohc-file-size: 20170
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=160146455,2314142787&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
200 OK 34 kB URL HTTP/2 img2.baidu.com/it/u=160146455,2314142787&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x501, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 44cffc2ae33e952daf0c68b5827b6702
028660d85c345aefed4ec0da1d102bb06948a725
921e253bdeced24619b225bc18abc13eb3ac0ff79c66a74e819b52c508e7f415
GET /it/u=160146455,2314142787&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 33938
expires: Wed, 22 Feb 2023 03:38:32 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 44cffc2ae33e952daf0c68b5827b6702
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 23 Jan 2023 03:38:32 GMT
ohc-cache-hit: qd4ct51 [1], suzix170 [4]
ohc-file-size: 33938
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=1039649212,3189771205&fm=253&fmt=auto&app=120&f=JPEG?w=587&h=500
200 OK 22 kB URL HTTP/2 img2.baidu.com/it/u=1039649212,3189771205&fm=253&fmt=auto&app=120&f=JPEG?w=587&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 587x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7e270d2d83380e5c9a17fd4eb59ecfd6
d7cbbeecb1999116ab1182a06d7880ea34ecdf11
2e642f5642177dbf4a39d41336910bcd7e367ec6cb222d81216bc2c5a01fa17e
GET /it/u=1039649212,3189771205&fm=253&fmt=auto&app=120&f=JPEG?w=587&h=500 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 22480
expires: Wed, 22 Feb 2023 03:22:46 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 7e270d2d83380e5c9a17fd4eb59ecfd6
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 23 Jan 2023 03:22:46 GMT
ohc-cache-hit: qd4ct50 [1], bdix108 [4]
ohc-file-size: 22480
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=2972669789,3054849935&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
200 OK 30 kB URL HTTP/2 img0.baidu.com/it/u=2972669789,3054849935&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x501, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 77ae88df11cfd5e3ee0f28c857df7eb8
e8b091b977a4d82e01ca04d704faec757e3f9f85
31daa48d212f3177477a669a81407ef692ae142829707707768b2e54e93a2b0f
GET /it/u=2972669789,3054849935&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 30128
expires: Wed, 22 Feb 2023 06:17:47 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 77ae88df11cfd5e3ee0f28c857df7eb8
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 23 Jan 2023 06:17:47 GMT
ohc-cache-hit: dg3ct50 [1], bdix135 [4]
ohc-file-size: 30128
x-cache-status: MISS
X-Firefox-Spdy: h2
img1.baidu.com/it/u=2399996021,1355300969&fm=253&fmt=auto&app=138&f=JPEG?w=455&h=700
200 OK 18 kB URL HTTP/2 img1.baidu.com/it/u=2399996021,1355300969&fm=253&fmt=auto&app=138&f=JPEG?w=455&h=700
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 455x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8e4db0f4b23247ec34209eb065bf59af
bddb64412a645c9df03d69c19e3755c2d934de80
6ab4360e3a10975d359a9827e39d387b7bbf1e1fe8006b3e2b3873ed03b10cc2
GET /it/u=2399996021,1355300969&fm=253&fmt=auto&app=138&f=JPEG?w=455&h=700 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 18214
expires: Sat, 04 Mar 2023 14:24:04 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: 8e4db0f4b23247ec34209eb065bf59af
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 02 Feb 2023 14:24:04 GMT
ohc-cache-hit: qd4ct80 [1], wzix109 [4]
ohc-file-size: 18214
x-cache-status: MISS
X-Firefox-Spdy: h2
t15.baidu.com/it/u=2636044549,3626760536&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 40 kB URL HTTP/1.1 t15.baidu.com/it/u=2636044549,3626760536&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 33deadedd3329057265adc289514cf4e
14319ba00bfe17d4d268d7631f030a1ce80b4840
ad19e2953dc896edb876371637237d40f11d0e08e10d941937f23659a6dc8028
GET /it/u=2636044549,3626760536&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpeg
Content-Length: 39695
Connection: keep-alive
Expires: Sun, 05 Feb 2023 21:39:53 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 33deadedd3329057265adc289514cf4e
Age: 2040178
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 06 Jan 2023 21:39:53 GMT
Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [4], zhuzuncache65 [1], suzix132 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 39695
X-Cache-Status: HIT
Timing-Allow-Origin: *
img2.baidu.com/it/u=2796111739,2944871356&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=298
200 OK 32 kB URL HTTP/2 img2.baidu.com/it/u=2796111739,2944871356&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=298
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x298, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 275a1582e85bdc81830f19ee86c064d0
d28e4f2b6b2d7cd5c8e1c05d05879f11423ffbac
e0331f2ad602cb5df845a9b49f4d521ede8d9f28e32ace173ca2c04ae8ccff4c
GET /it/u=2796111739,2944871356&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=298 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 31698
expires: Sat, 18 Feb 2023 12:25:11 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 275a1582e85bdc81830f19ee86c064d0
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 19 Jan 2023 12:25:11 GMT
ohc-cache-hit: qd4ct77 [1], xaix99 [4]
ohc-file-size: 31698
x-cache-status: MISS
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?dd9836db2e433f487a0aa434b7b3deb7
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?dd9836db2e433f487a0aa434b7b3deb7
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (633)
Hash 42ceb6062d2774b5f47081710e838b69
33f1ea4e10df2203845a9537a0d02eb6a388370a
fbcfd0838f46d951c1041ce0e56a6472f45945705eddf9bf03d772d8b2fd2d62
GET /hm.js?dd9836db2e433f487a0aa434b7b3deb7 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12647.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11271
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 11:55:10 GMT
Etag: 33678c796e34273beaa666fa7cc7fe32
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=B4E37655F47F16BA; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
12647.url.tudown.com/uploads/images/201967.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/201967.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/201967.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img0.baidu.com/it/u=4165652638,788669603&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281
img1.baidu.com/it/u=1184451977,2281396793&fm=253&fmt=auto&app=120&f=JPEG?w=600&h=430
200 OK 17 kB URL HTTP/2 img1.baidu.com/it/u=1184451977,2281396793&fm=253&fmt=auto&app=120&f=JPEG?w=600&h=430
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x430, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bdc7117ec4e745faacd376b168adb233
c79e2563a4fcedf0f0d4ea614588d418a298a879
d998e3db794e9a5047e2568015fc218b1573f1b952876d35360b848aa9c9b2dc
GET /it/u=1184451977,2281396793&fm=253&fmt=auto&app=120&f=JPEG?w=600&h=430 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 16702
expires: Mon, 06 Feb 2023 16:02:32 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: bdc7117ec4e745faacd376b168adb233
age: 1867904
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 07 Jan 2023 16:02:32 GMT
ohc-cache-hit: qd4ct52 [4], bdix93 [2]
ohc-file-size: 16702
x-cache-status: HIT
X-Firefox-Spdy: h2
12647.url.tudown.com/index.php?m=content&c=index&a=get_week_rank&catid=undefined&num=16
200 OK 8.7 kB URL HTTP/1.1 12647.url.tudown.com/index.php?m=content&c=index&a=get_week_rank&catid=undefined&num=16
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (371), with CRLF, LF line terminators
Hash f66b8e8f43c781153fa5011facebeb49
cdc68757f6f930159fc286e36316bbe41a962ebd
2d740d230945f95285adc656ee61eab075bcf5b88dc62cc2d45e68dda43c2071
GET /index.php?m=content&c=index&a=get_week_rank&catid=undefined&num=16 HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
12647.url.tudown.com/uploads/images/790483.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/790483.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/790483.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=314616197,3602866051&fm=253&fmt=auto&app=138&f=JPEG?w=666&h=500
12647.url.tudown.com/index.php?m=content&c=index&a=get_week_rank&catid=undefined&num=16
200 OK 8.7 kB URL HTTP/1.1 12647.url.tudown.com/index.php?m=content&c=index&a=get_week_rank&catid=undefined&num=16
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (371), with CRLF, LF line terminators
Hash 00cfe5ae92a858c9ef141f54217dce11
01ae0d12a1e19bf74360cc8ec31582fde1649ad1
e0e7f7e328eb283cc5c9acd99a3870e58d283929e0f85de0ba985f1fcac14496
GET /index.php?m=content&c=index&a=get_week_rank&catid=undefined&num=16 HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
img0.baidu.com/it/u=2266473788,83495481&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
200 OK 25 kB URL HTTP/2 img0.baidu.com/it/u=2266473788,83495481&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x501, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d2d1f3862261abf551daeafb6b68501b
41ad6c8fffd374d2013e1564fe0cefc3d3067765
1a1dd1e1e4aa753763ca0abe4d78a8c23142e432ebd67a93b1077bd251a6d7c2
GET /it/u=2266473788,83495481&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=501 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/webp
content-length: 24598
expires: Mon, 20 Feb 2023 08:42:18 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: d2d1f3862261abf551daeafb6b68501b
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 21 Jan 2023 08:42:18 GMT
ohc-cache-hit: dg3ct50 [1], suzix131 [4]
ohc-file-size: 24598
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/505578.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/505578.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/505578.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=918100495,307202898&fm=253&fmt=auto?w=1280&h=800
12647.url.tudown.com/uploads/images/333848.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/333848.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/333848.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=622441925,2513952089&fm=224&app=112&f=JPEG?w=500&h=500
t14.baidu.com/it/u=622441925,2513952089&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 27 kB URL HTTP/1.1 t14.baidu.com/it/u=622441925,2513952089&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 49edcb8db5681008f307a591f95d2ce1
66b47deea69e6428eb161726e86a766c73a3c727
a3a9d385f7d36672b18e6e055d637b8ba88e6b24590ddb79a3d62f595a8edb39
GET /it/u=622441925,2513952089&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpeg
Content-Length: 27035
Connection: keep-alive
Expires: Mon, 27 Feb 2023 17:21:42 GMT
Last-Modified: Sat, 10 Jan 1970 00:00:00 GMT
ETag: 49edcb8db5681008f307a591f95d2ce1
Age: 551931
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 28 Jan 2023 17:21:42 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache54 [1], wzix111 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 27035
X-Cache-Status: HIT
Timing-Allow-Origin: *
img2.baidu.com/it/u=2412970578,3182876104&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=583
200 OK 17 kB URL HTTP/1.1 img2.baidu.com/it/u=2412970578,3182876104&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=583
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x583, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash df3d962c77863ad32f6481425c165d53
1f75888eb1b8562d80d707b4a3a8e9099928388a
18f0f810de1d71876d573c4b6f886543f9592e9947bac7feda535ce894e4ce75
GET /it/u=2412970578,3182876104&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=583 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/webp
Content-Length: 17244
Connection: keep-alive
Expires: Fri, 24 Feb 2023 03:32:54 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: df3d962c77863ad32f6481425c165d53
Age: 25219
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 25 Jan 2023 03:32:54 GMT
Ohc-Cache-HIT: qd4ct51 [4], czix51 [4]
Ohc-File-Size: 17244
X-Cache-Status: HIT
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=837415416&si=dd9836db2e433f487a0aa434b7b3deb7&v=1.3.0&lv=1&sn=43936&r=0&ww=1280&u=http%3A%2F%2F12647.url.tudown.com%2Fdown%2Foffice2016%40418_61474.exe&tt=yobo%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91%E7%99%BB%E5%BD%95%E5%85%A5%E5%8F%A3(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-ios%2F%E5%AE%89%E5%8D%93%2F%E6%89%8B%E6%9C%BA%E7%89%88app%E4%B8%8B%E8%BD%BDV4816.72875
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=837415416&si=dd9836db2e433f487a0aa434b7b3deb7&v=1.3.0&lv=1&sn=43936&r=0&ww=1280&u=http%3A%2F%2F12647.url.tudown.com%2Fdown%2Foffice2016%40418_61474.exe&tt=yobo%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91%E7%99%BB%E5%BD%95%E5%85%A5%E5%8F%A3(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-ios%2F%E5%AE%89%E5%8D%93%2F%E6%89%8B%E6%9C%BA%E7%89%88app%E4%B8%8B%E8%BD%BDV4816.72875
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=837415416&si=dd9836db2e433f487a0aa434b7b3deb7&v=1.3.0&lv=1&sn=43936&r=0&ww=1280&u=http%3A%2F%2F12647.url.tudown.com%2Fdown%2Foffice2016%40418_61474.exe&tt=yobo%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91%E7%99%BB%E5%BD%95%E5%85%A5%E5%8F%A3(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-ios%2F%E5%AE%89%E5%8D%93%2F%E6%89%8B%E6%9C%BA%E7%89%88app%E4%B8%8B%E8%BD%BDV4816.72875 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12647.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 11:55:11 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=7E81EB23452AA36B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
12647.url.tudown.com/uploads/images/267389.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/267389.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/267389.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2738800377,1578235653&fm=253&fmt=auto&app=138&f=JPEG?w=235&h=300
img2.baidu.com/it/u=918100495,307202898&fm=253&fmt=auto?w=1280&h=800
200 OK 43 kB URL HTTP/2 img2.baidu.com/it/u=918100495,307202898&fm=253&fmt=auto?w=1280&h=800
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d3fd93e74fd4ca7b35adb0953f1e2a2e
51833657ba34ec47a01f1f9b14e66991be27f335
ec99451d83229faf764082a54e1114f9a15f6bcf69f8560be17e1b2cff6a51fa
GET /it/u=918100495,307202898&fm=253&fmt=auto?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:11 GMT
content-type: image/webp
content-length: 43296
expires: Mon, 20 Feb 2023 13:23:59 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: d3fd93e74fd4ca7b35adb0953f1e2a2e
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 21 Jan 2023 13:23:59 GMT
ohc-cache-hit: qd4ct79 [1], qdix79 [4]
ohc-file-size: 43296
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/621937.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/621937.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/621937.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=798240307,1406047227&fm=253&app=138&f=JPEG?w=800&h=500
12647.url.tudown.com/uploads/images/992623.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/992623.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/992623.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/813930.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/813930.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/813930.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=367859812,942481575&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
img0.baidu.com/it/u=1488390620,817452110&fm=253&fmt=auto&app=138&f=GIF?w=630&h=500
200 OK 215 kB URL HTTP/2 img0.baidu.com/it/u=1488390620,817452110&fm=253&fmt=auto&app=138&f=GIF?w=630&h=500
IP
File type GIF image data, version 89a, 630 x 500\012- data
Size 215 kB (215232 bytes)
Hash c988ab06aca284055176781c37d8c132
99e41e755a6ed459780cc8a7a856c7321e54e024
82e9e57e1071e33299e700bf49db825719d7ada1e112bdc71c92221972523892
GET /it/u=1488390620,817452110&fm=253&fmt=auto&app=138&f=GIF?w=630&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:10 GMT
content-type: image/gif
content-length: 215232
expires: Sun, 19 Feb 2023 17:28:09 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: c988ab06aca284055176781c37d8c132
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 20 Jan 2023 17:28:09 GMT
ohc-cache-hit: dg3ct53 [2], xaix208 [4]
ohc-file-size: 215232
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=4110925945,4259986758&fm=253&fmt=auto&app=138&f=JPEG?w=333&h=500
200 OK 11 kB URL HTTP/2 img0.baidu.com/it/u=4110925945,4259986758&fm=253&fmt=auto&app=138&f=JPEG?w=333&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 333x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 123a84dc41139fa3cbf6958b42340d8f
b7774b86c8ce74de999b9c5396a1cd27ecf96510
70de1f9b252faff593d21614801fc4e727dd162dc30e5cbf22ec4f9dd5beb748
GET /it/u=4110925945,4259986758&fm=253&fmt=auto&app=138&f=JPEG?w=333&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:11 GMT
content-type: image/webp
content-length: 10762
expires: Mon, 06 Feb 2023 00:42:12 GMT
last-modified: Sun, 04 Jan 1970 00:00:00 GMT
etag: 123a84dc41139fa3cbf6958b42340d8f
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 07 Jan 2023 00:42:12 GMT
ohc-cache-hit: dg3ct55 [1], wzix65 [4]
ohc-file-size: 10762
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/18432.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/18432.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/18432.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=2369403815,841701763&fm=253&fmt=auto?w=500&h=889
12647.url.tudown.com/uploads/images/947366.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/947366.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/947366.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=2813421157,3352110648&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
img0.baidu.com/it/u=314616197,3602866051&fm=253&fmt=auto&app=138&f=JPEG?w=666&h=500
200 OK 45 kB URL HTTP/2 img0.baidu.com/it/u=314616197,3602866051&fm=253&fmt=auto&app=138&f=JPEG?w=666&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 666x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 33f69915bd4eb28f053601294ca5cd4e
47771962cac4bfe4c2fef5448b635a7e129c515f
98db5a7420b22207273f404a74f4fb82333406308fee3ddea8165b24e754c0d5
GET /it/u=314616197,3602866051&fm=253&fmt=auto&app=138&f=JPEG?w=666&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:11 GMT
content-type: image/webp
content-length: 44700
expires: Wed, 01 Mar 2023 13:41:51 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 33f69915bd4eb28f053601294ca5cd4e
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 30 Jan 2023 13:41:51 GMT
ohc-cache-hit: dg3ct59 [1], csix59 [4]
ohc-file-size: 44700
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=4165652638,788669603&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281
200 OK 29 kB URL HTTP/1.1 img0.baidu.com/it/u=4165652638,788669603&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x281, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7c72d0bc2ff75f43658d745ebc971dba
e89e3cc9fd02ad8b356881bf361c219d6aef408e
e90258b5cb257462474582c7fec602a682a3dda7ecb7af53de4679bcaf1bd945
GET /it/u=4165652638,788669603&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/webp
Content-Length: 29110
Connection: keep-alive
Expires: Thu, 23 Feb 2023 11:01:43 GMT
Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT
ETag: 7c72d0bc2ff75f43658d745ebc971dba
Age: 462650
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Tue, 24 Jan 2023 11:01:43 GMT
Ohc-Cache-HIT: dg3ct60 [4], xiangyix60 [4]
Ohc-File-Size: 29110
X-Cache-Status: HIT
img0.baidu.com/it/u=2738800377,1578235653&fm=253&fmt=auto&app=138&f=JPEG?w=235&h=300
200 OK 11 kB URL HTTP/2 img0.baidu.com/it/u=2738800377,1578235653&fm=253&fmt=auto&app=138&f=JPEG?w=235&h=300
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 235x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2cc79136b0154a813f1c5063ca15eb95
bfb9f4d37d3abcdea45c20d8f96286cc86d27175
74eae466d2c52b57c43a6e1db6e3e7b6e19af2aac2cc229cd5ae88a08a0e14d7
GET /it/u=2738800377,1578235653&fm=253&fmt=auto&app=138&f=JPEG?w=235&h=300 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:11 GMT
content-type: image/webp
content-length: 10994
expires: Thu, 09 Feb 2023 10:08:42 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: 2cc79136b0154a813f1c5063ca15eb95
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 10 Jan 2023 10:08:42 GMT
ohc-cache-hit: dg3ct53 [1], czix215 [4]
ohc-file-size: 10994
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/180236.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/180236.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/180236.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1055632317,2119601850&fm=253&fmt=auto&app=138&f=JPEG?w=600&h=339
img2.baidu.com/it/u=367859812,942481575&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 27 kB URL HTTP/2 img2.baidu.com/it/u=367859812,942481575&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d404cad30de8d227440c676387b40390
db6abf68f5ad00f542ce41e74985d997bdeb2d9e
be654b1f71d50f93bcd900ce4f3bb9b7243fd6b5b1e3b4d11486a891883d4bc5
GET /it/u=367859812,942481575&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:11 GMT
content-type: image/webp
content-length: 27284
expires: Mon, 06 Mar 2023 07:20:39 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: d404cad30de8d227440c676387b40390
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 04 Feb 2023 07:20:39 GMT
ohc-cache-hit: qd4ct56 [2], csix56 [2]
ohc-file-size: 27284
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=2369403815,841701763&fm=253&fmt=auto?w=500&h=889
200 OK 13 kB URL HTTP/2 img2.baidu.com/it/u=2369403815,841701763&fm=253&fmt=auto?w=500&h=889
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x889, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5e197100176d7f25f2750d0aee344270
bd7b28bb3b4f7840d6549d7e64c2d88ed056b524
ad460a78844ff41390f27804e9a4310eba76558c650f223f088a3184b7295328
GET /it/u=2369403815,841701763&fm=253&fmt=auto?w=500&h=889 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:11 GMT
content-type: image/webp
content-length: 13296
expires: Sat, 04 Mar 2023 15:27:46 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: 5e197100176d7f25f2750d0aee344270
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 02 Feb 2023 15:27:46 GMT
ohc-cache-hit: qd4ct76 [1], csix76 [4]
ohc-file-size: 13296
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/932637.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/932637.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/932637.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=865723965,1263432967&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=276
img1.baidu.com/it/u=2813421157,3352110648&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
200 OK 45 kB URL HTTP/2 img1.baidu.com/it/u=2813421157,3352110648&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 953911aabbc1de3373137fedbb27f73e
1e66b89750c92fdb44c050ca2404ba71289aa3f5
d9ecf2a3e956af2575d10ac778e3613af58ab84aebd780351ed1802accc626e7
GET /it/u=2813421157,3352110648&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:11 GMT
content-type: image/webp
content-length: 44746
expires: Fri, 10 Feb 2023 21:05:28 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: 953911aabbc1de3373137fedbb27f73e
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 21:05:28 GMT
ohc-cache-hit: qd4ct68 [1], xiangyix87 [4]
ohc-file-size: 44746
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/417350.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/417350.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/417350.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1134180222,2374450107&fm=253&fmt=auto&app=138&f=JPEG?w=720&h=413
12647.url.tudown.com/uploads/images/546642.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/546642.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/546642.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=3007874580,493846993&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/688519.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/688519.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/688519.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3695466873,51825183&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/52785.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/52785.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/52785.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=839128845,1007717103&fm=253&fmt=auto?w=500&h=313
img0.baidu.com/it/u=1055632317,2119601850&fm=253&fmt=auto&app=138&f=JPEG?w=600&h=339
200 OK 13 kB URL HTTP/2 img0.baidu.com/it/u=1055632317,2119601850&fm=253&fmt=auto&app=138&f=JPEG?w=600&h=339
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x339, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 121e990dc1871045532004760f05d452
7fde75d24be1726c8b33b0f8e04cd832f484b966
665799b0a3f991e1b8129ab050838e8d73c57df0126f0a7b3596a36a4dca8e20
GET /it/u=1055632317,2119601850&fm=253&fmt=auto&app=138&f=JPEG?w=600&h=339 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 12840
expires: Thu, 23 Feb 2023 12:56:24 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 121e990dc1871045532004760f05d452
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 24 Jan 2023 12:56:23 GMT
ohc-cache-hit: dg3ct55 [1], suzix76 [2]
ohc-file-size: 12840
x-cache-status: MISS
X-Firefox-Spdy: h2
img1.baidu.com/it/u=1134180222,2374450107&fm=253&fmt=auto&app=138&f=JPEG?w=720&h=413
200 OK 36 kB URL HTTP/2 img1.baidu.com/it/u=1134180222,2374450107&fm=253&fmt=auto&app=138&f=JPEG?w=720&h=413
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 720x413, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 490cc60e4f8b6024f0ee644ece848e71
f60927395869ce501d39c3d593bdec58fcacc457
02f2f43f1c169f49e11fdd72aa836f318a48b5d499d668f576998cc819624c7e
GET /it/u=1134180222,2374450107&fm=253&fmt=auto&app=138&f=JPEG?w=720&h=413 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 35720
expires: Thu, 09 Feb 2023 07:26:08 GMT
last-modified: Sun, 04 Jan 1970 00:00:00 GMT
etag: 490cc60e4f8b6024f0ee644ece848e71
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 10 Jan 2023 07:26:08 GMT
ohc-cache-hit: qd4ct70 [1], wzix70 [4]
ohc-file-size: 35720
x-cache-status: MISS
X-Firefox-Spdy: h2
t15.baidu.com/it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 73 kB URL HTTP/1.1 t15.baidu.com/it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 15f19d1938d8ade71638f27c76e2af7e
3a3394256ee3f6b37d00bd189b15c2032f976448
d76c3a5b474d3673500f9f1dcd5dc2a7ded0628300d3828db8df8b75bd6bf724
GET /it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpeg
Content-Length: 72681
Connection: keep-alive
Expires: Mon, 06 Mar 2023 11:55:12 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 15f19d1938d8ade71638f27c76e2af7e
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 04 Feb 2023 11:55:11 GMT
Ohc-Upstream-Trace: 180.97.33.13; 124.237.212.192; 58.20.204.54
Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache54 [1], bdix192 [4]
Ohc-Response-Time: 1 0 0 0 506 506
Ohc-File-Size: 72681
X-Cache-Status: MISS
Timing-Allow-Origin: *
12647.url.tudown.com/uploads/images/847118.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/847118.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/847118.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=1877318472,482588290&fm=253&fmt=auto&app=138&f=JPEG?w=576&h=360
img1.baidu.com/it/u=865723965,1263432967&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=276
200 OK 8.8 kB URL HTTP/2 img1.baidu.com/it/u=865723965,1263432967&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=276
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 499x276, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 81903d6d40d2bd21d80531e61daf35f1
de00e5224288657c5be63e56f1bb36bc8a0de367
996bc1fda18249cc91479a045cd422832d28f59eb844ab85286dfd6a2261a10d
GET /it/u=865723965,1263432967&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=276 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 8814
expires: Wed, 22 Feb 2023 13:07:33 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 81903d6d40d2bd21d80531e61daf35f1
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 23 Jan 2023 13:07:33 GMT
ohc-cache-hit: qd4ct76 [1], xaix227 [4]
ohc-file-size: 8814
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/89857.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/89857.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/89857.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1783721675,635933565&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=753
t15.baidu.com/it/u=3007874580,493846993&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 43 kB URL HTTP/1.1 t15.baidu.com/it/u=3007874580,493846993&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 2bb3660164b808d4d15b325d628bf5e1
7ad213919de33c98ddb67f245be22624a37420c2
9c0001e988013518dd6e34d565dcc70553ed7cb66473c665aede9183308976a2
GET /it/u=3007874580,493846993&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpeg
Content-Length: 43204
Connection: keep-alive
Expires: Tue, 07 Feb 2023 08:17:56 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 2bb3660164b808d4d15b325d628bf5e1
Age: 2040345
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 08 Jan 2023 08:17:56 GMT
Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [4], zhuzuncache62 [1], suzix224 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 43204
X-Cache-Status: HIT
Timing-Allow-Origin: *
12647.url.tudown.com/uploads/images/811425.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/811425.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/811425.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=545832904,60057236&fm=224&app=112&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/926296.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/926296.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/926296.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t13.baidu.com/it/u=3821247245,2431353316&fm=224&app=112&f=PNG?w=500&h=500&s=7384FE0F5C0546DC6A2A2F6C0300F068
img1.baidu.com/it/u=798240307,1406047227&fm=253&app=138&f=JPEG?w=800&h=500
200 OK 59 kB URL HTTP/1.1 img1.baidu.com/it/u=798240307,1406047227&fm=253&app=138&f=JPEG?w=800&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x500, components 3\012- data
Hash 1db57e43fdb67565d0dcb9280d43948f
ec5bf9edcf8abc94ff681214fe7681d30abd8d05
ca47db6fb53581a1675cc2be1326fc90c0b61d3689d78d8cc0e2a6bc604c30ce
GET /it/u=798240307,1406047227&fm=253&app=138&f=JPEG?w=800&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:11 GMT
Content-Type: image/jpeg
Content-Length: 59236
Connection: keep-alive
Expires: Thu, 09 Feb 2023 09:49:49 GMT
Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT
ETag: 1db57e43fdb67565d0dcb9280d43948f
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Tue, 10 Jan 2023 09:49:49 GMT
Ohc-Cache-HIT: qd4ct56 [1], wzix56 [4]
Ohc-File-Size: 59236
X-Cache-Status: MISS
img0.baidu.com/it/u=3695466873,51825183&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 20 kB URL HTTP/2 img0.baidu.com/it/u=3695466873,51825183&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 42d202bb72bcae39dbfa05ec8d076bb6
ac587517ef5e7820b1ddfafa34b41adb520de2ae
c269f8c9d981abb34696a1d1527adf14a12bd1a9c37a8a366ff9a17a8bb46dab
GET /it/u=3695466873,51825183&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 19480
expires: Tue, 21 Feb 2023 02:14:14 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: 42d202bb72bcae39dbfa05ec8d076bb6
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 22 Jan 2023 02:14:14 GMT
ohc-cache-hit: dg3ct61 [1], csix80 [4]
ohc-file-size: 19480
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/logo.png?n=5cq2d2mywps3raxhx2hollvz4s52vzmzvdsy5aq&w=250
200 OK 3.7 kB URL HTTP/1.1 12647.url.tudown.com/uploads/images/logo.png?n=5cq2d2mywps3raxhx2hollvz4s52vzmzvdsy5aq&w=250
IP
ASN #137951 Clayer Limited
File type PNG image data, 250 x 66, 8-bit colormap, non-interlaced\012- data
Hash 83c006dcf438126d8939863e20220ced
06c0b9f668a92a30f87f208fd07fe02437966891
3de9f99e4656bae066f41f4534066910cd9be307f065a9f2522f0b754665725b
GET /uploads/images/logo.png?n=5cq2d2mywps3raxhx2hollvz4s52vzmzvdsy5aq&w=250 HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
12647.url.tudown.com/uploads/images/289202.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/289202.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/289202.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=802108909,1033849596&fm=253&fmt=auto&app=138&f=JPEG?w=450&h=450
img0.baidu.com/it/u=839128845,1007717103&fm=253&fmt=auto?w=500&h=313
200 OK 15 kB URL HTTP/2 img0.baidu.com/it/u=839128845,1007717103&fm=253&fmt=auto?w=500&h=313
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x313, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7e7cafdf067514e12322f2a5d4afeb00
b7f076aabff690ca8bd5c43e2e9a275dacd7fecb
28f5674986d515d695b113fa0ebf4046202e50aed1f1634d406784612c92cc90
GET /it/u=839128845,1007717103&fm=253&fmt=auto?w=500&h=313 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 15150
expires: Wed, 22 Feb 2023 02:25:01 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: 7e7cafdf067514e12322f2a5d4afeb00
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 23 Jan 2023 02:25:01 GMT
ohc-cache-hit: dg3ct51 [1], wzix108 [4]
ohc-file-size: 15150
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=1877318472,482588290&fm=253&fmt=auto&app=138&f=JPEG?w=576&h=360
200 OK 27 kB URL HTTP/2 img2.baidu.com/it/u=1877318472,482588290&fm=253&fmt=auto&app=138&f=JPEG?w=576&h=360
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 576x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56a266cf93c1cde039ae17819b0065e4
ab799d9e3946e1785c5d48750054526fbcd76405
731ff7716cb1583a8e91ea0bf38b354b4f77da9ef59f5a92673c0ea47ee5f9dc
GET /it/u=1877318472,482588290&fm=253&fmt=auto&app=138&f=JPEG?w=576&h=360 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 27062
expires: Mon, 20 Feb 2023 09:17:26 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 56a266cf93c1cde039ae17819b0065e4
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 21 Jan 2023 09:17:26 GMT
ohc-cache-hit: qd4ct53 [1], suzix53 [4]
ohc-file-size: 27062
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=1783721675,635933565&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=753
200 OK 27 kB URL HTTP/2 img0.baidu.com/it/u=1783721675,635933565&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=753
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x753, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b17ce1899916b9599538d6327c66232f
03acc9318ee66e9709aa4d13af10a549e4f40d6a
2ee776a46276f9b77abd68d07408c630b90add59878c3303e6037d1a590ebc7b
GET /it/u=1783721675,635933565&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=753 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 27114
expires: Tue, 21 Feb 2023 21:31:51 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: b17ce1899916b9599538d6327c66232f
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 22 Jan 2023 21:31:51 GMT
ohc-cache-hit: dg3ct54 [1], suzix221 [2]
ohc-file-size: 27114
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/851855.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/851855.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/851855.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=3934810236,54774737&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=614
12647.url.tudown.com/uploads/images/453876.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/453876.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/453876.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=181297811,2365520341&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=751
12647.url.tudown.com/uploads/images/99454.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/99454.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/99454.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1155055563,1305849724&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889
img1.baidu.com/it/u=802108909,1033849596&fm=253&fmt=auto&app=138&f=JPEG?w=450&h=450
200 OK 17 kB URL HTTP/2 img1.baidu.com/it/u=802108909,1033849596&fm=253&fmt=auto&app=138&f=JPEG?w=450&h=450
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 450x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b4ec8835315bd1fc6ff6506e91b1fe16
71aa0482fd014304f63a424b6af14d699f95544d
8f3a84fcd63f99a1ab468196579c8f618ee61316898d6c0b8ba04a19d8f8e711
GET /it/u=802108909,1033849596&fm=253&fmt=auto&app=138&f=JPEG?w=450&h=450 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 16746
expires: Fri, 10 Feb 2023 05:36:48 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: b4ec8835315bd1fc6ff6506e91b1fe16
age: 64378
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 05:36:48 GMT
ohc-cache-hit: qd4ct73 [4], wzix118 [4]
ohc-file-size: 16746
x-cache-status: HIT
X-Firefox-Spdy: h2
t14.baidu.com/it/u=545832904,60057236&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 64 kB URL HTTP/1.1 t14.baidu.com/it/u=545832904,60057236&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash f8e6aa996765303705f2f3b6a98da35c
6d74191e2dbbb392f87f82569a6e6f7bc82dfd88
27853f4d41dc189bd7b26406f865a59f99c5e7b2dfd87b0ed093e360b8a9927d
GET /it/u=545832904,60057236&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpeg
Content-Length: 63627
Connection: keep-alive
Expires: Mon, 06 Mar 2023 10:34:30 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: f8e6aa996765303705f2f3b6a98da35c
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 04 Feb 2023 10:34:30 GMT
Ohc-Upstream-Trace: 58.20.204.61
Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache61 [1], wzix61 [4]
Ohc-Response-Time: 1 0 0 0 337 337
Ohc-File-Size: 63627
X-Cache-Status: MISS
Timing-Allow-Origin: *
t13.baidu.com/it/u=3821247245,2431353316&fm=224&app=112&f=PNG?w=500&h=500&s=7384FE0F5C0546DC6A2A2F6C0300F068
200 OK 408 kB URL HTTP/1.1 t13.baidu.com/it/u=3821247245,2431353316&fm=224&app=112&f=PNG?w=500&h=500&s=7384FE0F5C0546DC6A2A2F6C0300F068
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Size 408 kB (407881 bytes)
Hash 8c027f5b715f3da09bab606b4e6500de
758ef6a83df81dbef576a0a4aed675b5f49c832d
1c31a270b345291d90c642d55069c8bca035f1375d1f7bdfb418be51e842f382
GET /it/u=3821247245,2431353316&fm=224&app=112&f=PNG?w=500&h=500&s=7384FE0F5C0546DC6A2A2F6C0300F068 HTTP/1.1
Host: t13.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/png
Content-Length: 407881
Connection: keep-alive
Expires: Fri, 03 Mar 2023 02:11:56 GMT
Last-Modified: Sat, 10 Jan 1970 00:00:00 GMT
ETag: 8c027f5b715f3da09bab606b4e6500de
Age: 205074
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 01 Feb 2023 02:11:56 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache112 [3], czix112 [3]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 407881
X-Cache-Status: HIT
12647.url.tudown.com/uploads/images/789625.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/789625.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/789625.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2281621243,3660229774&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
12647.url.tudown.com/uploads/images/638584.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/638584.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/638584.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=4172320430,3242179436&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=500
12647.url.tudown.com/uploads/images/450765.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/450765.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/450765.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=1910389554,3497051872&fm=224&app=112&f=JPEG?w=500&h=500
t15.baidu.com/it/u=1910389554,3497051872&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 34 kB URL HTTP/1.1 t15.baidu.com/it/u=1910389554,3497051872&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 6aa7d2d3f1475f540e983bf66298ae28
bd9483efb727f0bf9ef7a178b2d9ba190473df4f
e1cdbb2f6de96000e8012d021d5f0241a97056d9c3a460c245b652b2e1435bab
GET /it/u=1910389554,3497051872&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpeg
Content-Length: 33662
Connection: keep-alive
Expires: Sun, 12 Feb 2023 08:01:44 GMT
Last-Modified: Fri, 16 Jan 1970 00:00:00 GMT
ETag: 6aa7d2d3f1475f540e983bf66298ae28
Age: 1872365
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 13 Jan 2023 08:01:44 GMT
Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache55 [4], czix244 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 33662
X-Cache-Status: HIT
Timing-Allow-Origin: *
img2.baidu.com/it/u=3934810236,54774737&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=614
200 OK 13 kB URL HTTP/2 img2.baidu.com/it/u=3934810236,54774737&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=614
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x614, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9b1bb744559dee8dc31eead0f61dd223
d123584f8dcd246576aa5fda58383515ce96f192
126fbef3ea675ed956faecd429acabdeccf5eece66ccd28a6ba2afb4f9e0171a
GET /it/u=3934810236,54774737&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=614 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 13102
expires: Tue, 21 Feb 2023 05:26:58 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 9b1bb744559dee8dc31eead0f61dd223
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 22 Jan 2023 05:26:58 GMT
ohc-cache-hit: qd4ct71 [1], suzix71 [4]
ohc-file-size: 13102
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=181297811,2365520341&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=751
200 OK 32 kB URL HTTP/2 img2.baidu.com/it/u=181297811,2365520341&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=751
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x751, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1a9c8cf7fb98a16e38cd25a39bfd7fe6
13c571cafc543e29c76578bd18023771b7f1a183
65283badb8402965cf999f10866c58e64cd820023eac39ed89c85d8ae078f7ba
GET /it/u=181297811,2365520341&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=751 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 31550
expires: Fri, 10 Feb 2023 15:46:32 GMT
last-modified: Sun, 04 Jan 1970 00:00:00 GMT
etag: 1a9c8cf7fb98a16e38cd25a39bfd7fe6
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 15:46:32 GMT
ohc-cache-hit: qd4ct53 [1], wzix113 [4]
ohc-file-size: 31550
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=1155055563,1305849724&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889
200 OK 11 kB URL HTTP/2 img0.baidu.com/it/u=1155055563,1305849724&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x889, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 46a959ef150e3e0ce5f165f285fbba28
8e9b17474c08d9834e2330ce2449ed3aaced7909
2c7deaabe298afa35596464febb32a84e70fadc773b5a1d42d9639f4dcd33475
GET /it/u=1155055563,1305849724&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 11180
expires: Tue, 21 Feb 2023 03:55:06 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 46a959ef150e3e0ce5f165f285fbba28
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 22 Jan 2023 03:55:06 GMT
ohc-cache-hit: dg3ct61 [1], bdix187 [4]
ohc-file-size: 11180
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/874776.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/874776.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/874776.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=4265740008,2601059680&fm=253&fmt=auto&app=138&f=JPG?w=231&h=500
12647.url.tudown.com/uploads/images/301223.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/301223.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/301223.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2964491205,821410066&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=881
12647.url.tudown.com/uploads/images/945409.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/945409.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/945409.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img0.baidu.com/it/u=1435952161,4158970875&fm=253&app=120&f=JPEG?w=1280&h=800
img1.baidu.com/it/u=4172320430,3242179436&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=500
200 OK 27 kB URL HTTP/2 img1.baidu.com/it/u=4172320430,3242179436&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1677de996d8ec8bb03e2c7df1d52f329
7469ac85b33e8443c1ca96163cb75b813ea37584
1c4686d9486914eafa0bf54869b25f539c2441655bed6d789aa12e527dacca20
GET /it/u=4172320430,3242179436&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 27162
expires: Mon, 06 Mar 2023 11:55:12 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: 1677de996d8ec8bb03e2c7df1d52f329
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 04 Feb 2023 11:55:12 GMT
ohc-cache-hit: qd4ct60 [1], bdix175 [2]
ohc-file-size: 27162
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/719410.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/719410.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/719410.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:12 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1134180222,2374450107&fm=253&fmt=auto&app=138&f=JPEG?w=720&h=413
img0.baidu.com/it/u=2281621243,3660229774&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
200 OK 39 kB URL HTTP/2 img0.baidu.com/it/u=2281621243,3660229774&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aeca05b0dff2d97668449c734e201f1b
978e6d8fcb949fcecce36a0f71c878e5cf1f3408
c8066975e415abe490db8daa032413dca848315c7568c8f764cca8beb7de43d8
GET /it/u=2281621243,3660229774&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:12 GMT
content-type: image/webp
content-length: 39128
expires: Mon, 06 Feb 2023 17:25:04 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: aeca05b0dff2d97668449c734e201f1b
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 07 Jan 2023 17:25:04 GMT
ohc-cache-hit: dg3ct50 [1], czix183 [4]
ohc-file-size: 39128
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/463537.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/463537.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/463537.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=119951684,3744503612&fm=253&app=120&f=JPEG?w=1422&h=800
12647.url.tudown.com/uploads/images/833624.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/833624.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/833624.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=1986515109,3178822468&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
img1.baidu.com/it/u=4265740008,2601059680&fm=253&fmt=auto&app=138&f=JPG?w=231&h=500
200 OK 19 kB URL HTTP/2 img1.baidu.com/it/u=4265740008,2601059680&fm=253&fmt=auto&app=138&f=JPG?w=231&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 231x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 02302cd9997f6f2c36bdaedf421e70c7
490ef13e3cd9ead82fc97ae4f874199f8f0624fa
08689065151ca8ae917998a21ae1131a8f53857d1136190f10334fd4b8babf82
GET /it/u=4265740008,2601059680&fm=253&fmt=auto&app=138&f=JPG?w=231&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:13 GMT
content-type: image/webp
content-length: 18818
expires: Thu, 09 Feb 2023 14:14:16 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: 02302cd9997f6f2c36bdaedf421e70c7
age: 1759867
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 10 Jan 2023 14:14:16 GMT
ohc-cache-hit: qd4ct53 [4], wzix53 [4]
ohc-file-size: 18818
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=2964491205,821410066&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=881
200 OK 63 kB URL HTTP/2 img0.baidu.com/it/u=2964491205,821410066&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=881
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x881, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1dcf2ae9f71b1b608ebd82ed7c734fe0
16184d345fee1092146101dd01e22bdf7a3a3a33
f99c79d0fcad9569118594ab3e4d1efb236de59b6bce4fe0b931b30f5dcf7dba
GET /it/u=2964491205,821410066&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=881 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:13 GMT
content-type: image/webp
content-length: 63416
expires: Sat, 04 Mar 2023 04:17:50 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: 1dcf2ae9f71b1b608ebd82ed7c734fe0
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 02 Feb 2023 04:17:50 GMT
ohc-cache-hit: dg3ct61 [1], csix52 [4]
ohc-file-size: 63416
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/524449.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/524449.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/524449.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=3613509507,2726090124&fm=253&fmt=auto&app=120&f=JPEG?w=1422&h=800
12647.url.tudown.com/uploads/images/909843.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/909843.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/909843.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=1159415086,3811644642&fm=253&fmt=auto?w=120&h=80
12647.url.tudown.com/uploads/images/823787.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/823787.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/823787.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=4024750478,2155653066&fm=253&fmt=auto&app=138&f=JPEG?w=284&h=250
img2.baidu.com/it/u=1986515109,3178822468&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
200 OK 38 kB URL HTTP/2 img2.baidu.com/it/u=1986515109,3178822468&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 281x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5779b329ce463d84a8694defee3c2746
ff32e95d154474473845f007fe654aa4ad842861
ef409016a3ba78c5357c5ca0173358c2424e3d4f60a409be5ff2eb822e893376
GET /it/u=1986515109,3178822468&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:13 GMT
content-type: image/webp
content-length: 37966
expires: Mon, 20 Feb 2023 06:13:20 GMT
last-modified: Sun, 11 Jan 1970 00:00:00 GMT
etag: 5779b329ce463d84a8694defee3c2746
age: 1138797
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 21 Jan 2023 06:13:20 GMT
ohc-cache-hit: qd4ct67 [4], xaix143 [4]
ohc-file-size: 37966
x-cache-status: HIT
X-Firefox-Spdy: h2
12647.url.tudown.com/uploads/images/768487.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12647.url.tudown.com/uploads/images/768487.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/768487.jpg HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3487085410,3091791895&fm=253&fmt=auto&app=138&f=JPEG?w=418&h=300
img0.baidu.com/it/u=1435952161,4158970875&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 86 kB URL HTTP/1.1 img0.baidu.com/it/u=1435952161,4158970875&fm=253&app=120&f=JPEG?w=1280&h=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Hash f652f0390648cee2d992a9077e89ce57
a48fc77f53e48e8f4bed646f33cd47b435abe7ff
fa17d2107c62979ce3231f20687f578523505ecb1e564f66bac8ae1c0c06cece
GET /it/u=1435952161,4158970875&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpeg
Content-Length: 85974
Connection: keep-alive
Expires: Tue, 07 Feb 2023 16:33:59 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: f652f0390648cee2d992a9077e89ce57
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 08 Jan 2023 16:33:59 GMT
Ohc-Cache-HIT: dg3ct61 [1], bdix194 [4]
Ohc-File-Size: 85974
X-Cache-Status: MISS
img1.baidu.com/it/u=4024750478,2155653066&fm=253&fmt=auto&app=138&f=JPEG?w=284&h=250
200 OK 3.9 kB URL HTTP/2 img1.baidu.com/it/u=4024750478,2155653066&fm=253&fmt=auto&app=138&f=JPEG?w=284&h=250
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 284x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 015f3532692b14d38c11757b03aec1f8
32f98dcfa1c289b088cdfb7f95f2de8d25c79068
1b6c2e3ceaf11386df33640b12b125df118ddee52115035de162c5b255b1e163
GET /it/u=4024750478,2155653066&fm=253&fmt=auto&app=138&f=JPEG?w=284&h=250 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:13 GMT
content-type: image/webp
content-length: 3886
expires: Tue, 21 Feb 2023 02:09:42 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 015f3532692b14d38c11757b03aec1f8
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 22 Jan 2023 02:09:42 GMT
ohc-cache-hit: qd4ct74 [1], qdix95 [4]
ohc-file-size: 3886
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=3613509507,2726090124&fm=253&fmt=auto&app=120&f=JPEG?w=1422&h=800
200 OK 64 kB URL HTTP/2 img2.baidu.com/it/u=3613509507,2726090124&fm=253&fmt=auto&app=120&f=JPEG?w=1422&h=800
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1422x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash efde805bf62e362ad10b82fc6bd6a903
cd9d03d4096906f924496fe22c8411ddcb26f953
d679af15cd7f377f815b883cb9058df7d11a016f37870f8721ad70227b1dadad
GET /it/u=3613509507,2726090124&fm=253&fmt=auto&app=120&f=JPEG?w=1422&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:13 GMT
content-type: image/webp
content-length: 63892
expires: Mon, 20 Feb 2023 06:53:47 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: efde805bf62e362ad10b82fc6bd6a903
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 21 Jan 2023 06:53:47 GMT
ohc-cache-hit: qd4ct73 [1], bdix73 [4]
ohc-file-size: 63892
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=1159415086,3811644642&fm=253&fmt=auto?w=120&h=80
200 OK 3.1 kB URL HTTP/2 img2.baidu.com/it/u=1159415086,3811644642&fm=253&fmt=auto?w=120&h=80
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x80, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d7f10e008ee7d9a6d98dd44c20e9d51b
5ae437b2ea7b0296ae950b3cb730cfc10b1b5ed8
647fad433590d1421d642e4c1512e76b26d026c73b911ca67d32768d1ff431bc
GET /it/u=1159415086,3811644642&fm=253&fmt=auto?w=120&h=80 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:13 GMT
content-type: image/webp
content-length: 3088
expires: Sat, 18 Feb 2023 02:29:55 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: d7f10e008ee7d9a6d98dd44c20e9d51b
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 19 Jan 2023 02:29:55 GMT
ohc-cache-hit: qd4ct74 [1], czix201 [4]
ohc-file-size: 3088
x-cache-status: MISS
X-Firefox-Spdy: h2
img1.baidu.com/it/u=119951684,3744503612&fm=253&app=120&f=JPEG?w=1422&h=800
200 OK 135 kB URL HTTP/1.1 img1.baidu.com/it/u=119951684,3744503612&fm=253&app=120&f=JPEG?w=1422&h=800
IP
ASN #136195 Qingdao, Shandong Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1422x800, components 3\012- data
Size 135 kB (135437 bytes)
Hash e240e6076d2090281fd285df1dca1bd2
05f33aeac478a812a1dd2772f974b9acd7b7f2f5
85367fb3fd1e5556baa1120153b53043b0c5d0122a64cf579ee27eaac87917a0
GET /it/u=119951684,3744503612&fm=253&app=120&f=JPEG?w=1422&h=800 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12647.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 04 Feb 2023 11:55:13 GMT
Content-Type: image/jpeg
Content-Length: 135437
Connection: keep-alive
Expires: Mon, 06 Feb 2023 16:19:10 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: e240e6076d2090281fd285df1dca1bd2
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 07 Jan 2023 16:19:10 GMT
Ohc-Cache-HIT: qd4ct51 [2], wzix108 [4]
Ohc-File-Size: 135437
X-Cache-Status: MISS
img0.baidu.com/it/u=3487085410,3091791895&fm=253&fmt=auto&app=138&f=JPEG?w=418&h=300
200 OK 21 kB URL HTTP/2 img0.baidu.com/it/u=3487085410,3091791895&fm=253&fmt=auto&app=138&f=JPEG?w=418&h=300
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 418x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b91366a97b0fa899bcb53db5e99fcbfd
7506e5b39aff947ce38b201e908adec763175cb3
b39be6655208ba31e74f23ac0f222e84b52bee09876d1c41817e23d5e962d87e
GET /it/u=3487085410,3091791895&fm=253&fmt=auto&app=138&f=JPEG?w=418&h=300 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12647.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 11:55:13 GMT
content-type: image/webp
content-length: 20610
expires: Wed, 22 Feb 2023 01:46:45 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: b91366a97b0fa899bcb53db5e99fcbfd
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 23 Jan 2023 01:46:45 GMT
ohc-cache-hit: dg3ct50 [1], qdix123 [4]
ohc-file-size: 20610
x-cache-status: MISS
X-Firefox-Spdy: h2
12647.url.tudown.com/favicon.ico
200 OK 0 B URL HTTP/1.1 12647.url.tudown.com/favicon.ico
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 12647.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12647.url.tudown.com/down/office2016@418_61474.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1675511746; Hm_lpvt_dd9836db2e433f487a0aa434b7b3deb7=1675511746
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:55:14 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Tue, 30 Jul 2019 15:51:36 GMT
Connection: keep-alive
ETag: "5d406788-0"
Accept-Ranges: bytes
jspassport.ssl.qhimg.com/11.0.1.js?d182b3f28525f2db83acfaaf6e696dba
200 OK 0 B URL HTTP/2 jspassport.ssl.qhimg.com/11.0.1.js?d182b3f28525f2db83acfaaf6e696dba
IP
GET /11.0.1.js?d182b3f28525f2db83acfaaf6e696dba HTTP/1.1
Host: jspassport.ssl.qhimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12647.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 28 Nov 2018 07:43:20 GMT
kcs-via: HIT from w-fc01.lato;REVALIDATED from w-sc01.lato
date: Sat, 04 Feb 2023 11:49:39 GMT
cache-control: max-age=600
expires: Sat, 04 Feb 2023 11:59:30 GMT
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F9n8yTUqXv4rZKi0XH5nXlKCYRNAmcCgj9O4HFnI_Fnmf5uC446KyA==
age: 339
X-Firefox-Spdy: h2
154.218.151.71
34.160.144.191
171.13.14.66
95.101.11.115
104.18.21.226