r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6293
Expires: Tue, 22 Nov 2022 05:53:30 GMT
Date: Tue, 22 Nov 2022 04:08:37 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4843de3bf95411e6aa89834def44bb86
1f1882351ac63fba73a22014382f69df5e02ec96
1e6ed1df02f8fa6c89ddca66f7c9981f8a06127d7ec90b503703137e823bb4b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6115
Cache-Control: max-age=115475
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:37 GMT
Etag: "637b5375-1d7"
Expires: Wed, 23 Nov 2022 12:13:12 GMT
Last-Modified: Mon, 21 Nov 2022 10:31:17 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2266
Expires: Tue, 22 Nov 2022 04:46:23 GMT
Date: Tue, 22 Nov 2022 04:08:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 03:09:18 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3559
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WHIBGr8nn93xeI6vO7g28xTpNN0f49/gXc/cpeFv2wiz1Avbvy7orU+dscLmPdgDvBfka8uoO2w=
x-amz-request-id: 8WCM27Q93HSJABSG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 03:39:24 GMT
age: 1753
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 04:08:37 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.shjxjs.com/
200 OK 40 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, CR, LF line terminators
Hash 03e9d132a7989b9210492b290deaa884
81d6302bfcd078366ea26c36e6c013ffea749ce8
7ba7e1536d6f9068f71b5a3eb3d06c0af4e54f8d082704ea4931b3f211b2a0b0
GET / HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: text/html
Content-Length: 40216
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding
www.shjxjs.com/atic/css/iconfont.css
200 OK 928 B URL HTTP/1.1 www.shjxjs.com/atic/css/iconfont.css
IP
File type Unicode text, UTF-8 (with BOM) text
Hash d6f5821d0866c5ef4329519076096849
a006c2ca7493b9cd1954e2cc106fb72e361b8540
b8145589bb54c721a56e293facb2f6204779c4c3824e6b628c38dcf83c76150d
GET /atic/css/iconfont.css HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: text/css
Last-Modified: Tue, 07 Sep 2021 04:59:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6136f1c4-e41"
Expires: Tue, 22 Nov 2022 16:08:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/atic/js/jquery.lazyload.min.js
200 OK 1.3 kB URL HTTP/1.1 www.shjxjs.com/atic/js/jquery.lazyload.min.js
IP
File type ASCII text, with very long lines (3309)
Hash 107610b0db6edb28f23fa6225715d7b8
126dbbafb6d950bdad39ed43252935662102c427
d66c70427c0ca29dd4ca5649cb50c2f4c72e03506309ead0bbf9ca0d18d82f18
GET /atic/js/jquery.lazyload.min.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: application/javascript
Last-Modified: Tue, 07 Sep 2021 04:59:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6136f1c2-d35"
Expires: Tue, 22 Nov 2022 16:08:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 03:08:53 GMT
cache-control: public,max-age=3600
age: 3584
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.shjxjs.com/atic/js/sousuo.js
200 OK 548 B URL HTTP/1.1 www.shjxjs.com/atic/js/sousuo.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 566d5c5619b4c845737c80320b8e188e
b411ffb863456869fa335f39cc8d0a89922da65b
91059c98a4fc2d6efb3016f1ba65977352036f5e30cd6c0d452be757ea6da1f0
GET /atic/js/sousuo.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: application/javascript
Content-Length: 548
Last-Modified: Mon, 17 Oct 2022 08:07:05 GMT
Connection: keep-alive
ETag: "634d0d29-224"
Expires: Tue, 22 Nov 2022 16:08:37 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.shjxjs.com/atic/js/home.js
200 OK 8.9 kB URL HTTP/1.1 www.shjxjs.com/atic/js/home.js
IP
Hash ef5684d1a2af89012b3f0c76e654ca77
92f8faba52aa48931d94d25d9d368af6a91fbce1
17f2053129817790271a8fce4d6a19dfdc31d322fc5707c7e3d30b82af8b2ac0
GET /atic/js/home.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: application/javascript
Last-Modified: Tue, 31 May 2022 10:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6295f340-84cc"
Expires: Tue, 22 Nov 2022 16:08:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/atic/js/daohang1.js
200 OK 573 B URL HTTP/1.1 www.shjxjs.com/atic/js/daohang1.js
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 7647444489e3e5e4f73938b3eaa7fad5
468acfd7e68e9f9f9c26e8d4b9a5621b34cb2a78
5b5cd378d093d5dc781ec807bf0f299d18a4f8f680a275ac30a6948dcee62010
GET /atic/js/daohang1.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: application/javascript
Content-Length: 573
Last-Modified: Tue, 15 Nov 2022 07:25:38 GMT
Connection: keep-alive
ETag: "63733ef2-23d"
Expires: Tue, 22 Nov 2022 16:08:37 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.shjxjs.com/atic/js/daohang2.js
200 OK 466 B URL HTTP/1.1 www.shjxjs.com/atic/js/daohang2.js
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 46b39e3b568bfec7e72d79c747378a2a
7c72c09cc15e12200f12a607d94440a06dca3e0d
bf451ee02340c0ea8860629e7cc41840c639aab0ee4c547ee4384bcd279a3348
GET /atic/js/daohang2.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Nov 2022 07:25:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63733f07-a2c"
Expires: Tue, 22 Nov 2022 16:08:37 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/atic/js/daohang3.js
200 OK 643 B URL HTTP/1.1 www.shjxjs.com/atic/js/daohang3.js
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 3bc581517597d6dfd7393fa947382438
bce78f51363f9bd8f014401c9aa37edb77488c80
1fc19d9be99bb19640bf9e40211c4ea5192d2d4dc8269e316db621588b714bcc
GET /atic/js/daohang3.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: application/javascript
Content-Length: 643
Last-Modified: Mon, 17 Oct 2022 08:06:52 GMT
Connection: keep-alive
ETag: "634d0d1c-283"
Expires: Tue, 22 Nov 2022 16:08:37 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 2db0ebb9efcf3be3c92f23b61de5c065
dd830565723f18a7944c26d24b0fb142d06a71a5
8615316184c4d1d64db923a5364363bbb3d25e146a042c5fbd5bf0cfcec8effb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3850
Cache-Control: max-age=108146
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:38 GMT
Etag: "637b3fae-1d7"
Expires: Wed, 23 Nov 2022 10:11:04 GMT
Last-Modified: Mon, 21 Nov 2022 09:06:54 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
www.shjxjs.com/gg7f5kv/shang1i7d3.php
200 OK 145 B URL HTTP/1.1 www.shjxjs.com/gg7f5kv/shang1i7d3.php
IP
File type ASCII text, with no line terminators
Hash 401fd0306dcb01bc1cdef171a0c32eb5
0999cb924824c024f1359c8a403fc2f85fefcec9
b0c83c5d47e533809585a74bf257407612b3187174606342496f609272f27566
GET /gg7f5kv/shang1i7d3.php HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.shjxjs.com/gg7f5kv/sxpf.js
200 OK 970 B URL HTTP/1.1 www.shjxjs.com/gg7f5kv/sxpf.js
IP
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (509), with CRLF line terminators
Hash 6536ca21c71ae990e6ab6868fe7f89a1
1eecdf2b2956a322c774cc4bf3608d7b18175cf4
67eee7f71b43c72557162a9a24d0b3bf82383dbb722bbbadafeb058903328a26
GET /gg7f5kv/sxpf.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: application/javascript
Last-Modified: Fri, 11 Nov 2022 05:39:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"636de015-d9d"
Expires: Tue, 22 Nov 2022 16:08:38 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/gg7f5kv/shipinqiangg.js
200 OK 612 B URL HTTP/1.1 www.shjxjs.com/gg7f5kv/shipinqiangg.js
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 09682b8beba56f5cab1a8109d2528a5d
b99c3bb89f669ac81579139b756a99b80b0b0dc8
1b4f16ea788208269f26cfb2549084b0ac876fc283ab27668edf5635eb991edc
GET /gg7f5kv/shipinqiangg.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: application/javascript
Last-Modified: Sun, 20 Nov 2022 08:16:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6379e241-758"
Expires: Tue, 22 Nov 2022 16:08:38 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/atic/css/stui_default.css
200 OK 4.9 kB URL HTTP/1.1 www.shjxjs.com/atic/css/stui_default.css
IP
File type assembler source, Unicode text, UTF-8 (with BOM) text, with very long lines (310), with CRLF line terminators
Hash ffe86c65a45f4c1ce9f2729525c38610
fd54b3d1657e177e4eb3a0a22c8c9a59fd4cfd1b
e7c6d5d66dd623d6ff41e792b919b42a3508c7005fadb0e19d8ffb94eb9350d1
GET /atic/css/stui_default.css HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: text/css
Last-Modified: Mon, 01 Nov 2021 08:29:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"617fa57c-4b1d"
Expires: Tue, 22 Nov 2022 16:08:38 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/atic/js/stui_default.js
200 OK 1.8 kB URL HTTP/1.1 www.shjxjs.com/atic/js/stui_default.js
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 88309ab2087abf77ffd6cd362306bdc2
a70ca083de465cd44c46d1522ed0a398da145fed
c1ee1083469f5915240855919148a951ad49493d2f0bf6ef62a587715eb727ce
GET /atic/js/stui_default.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: application/javascript
Last-Modified: Tue, 07 Sep 2021 04:59:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6136f1c4-11b6"
Expires: Tue, 22 Nov 2022 16:08:38 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/atic/js/jquery.cookie.min.js
200 OK 707 B URL HTTP/1.1 www.shjxjs.com/atic/js/jquery.cookie.min.js
IP
File type ASCII text, with very long lines (1266)
Hash 58dbd5fe203290a568f56b67b661e002
76f8bf540b3df5c5ec21957ce3d3f221fa4925b3
7965786891d81a4d8a5e9211cdc4db9b586c1dfb3b9c65d1079ba7999f980822
GET /atic/js/jquery.cookie.min.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: application/javascript
Last-Modified: Tue, 07 Sep 2021 04:59:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6136f1c2-514"
Expires: Tue, 22 Nov 2022 16:08:38 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/atic/js/tj.js
200 OK 258 B URL HTTP/1.1 www.shjxjs.com/atic/js/tj.js
IP
File type ASCII text, with CRLF line terminators
Hash 619c7095a069cd8e591f04dd8be9af87
6e5a314c42f67cf6ab8eee1cc1b48d5997459237
2a20fdc5e1d8324c4d9e93dcfe32bf2e18f4044982e2d9a10e6cbc18720e2eac
GET /atic/js/tj.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: application/javascript
Content-Length: 258
Last-Modified: Wed, 31 Aug 2022 09:03:57 GMT
Connection: keep-alive
ETag: "630f23fd-102"
Expires: Tue, 22 Nov 2022 16:08:38 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xThDbt4ncRW9BHOFyvjZdg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8B7FdChxgZj9VKAQEENKdIrFnIs=
www.shjxjs.com/atic/js/jquery.min.js
200 OK 33 kB URL HTTP/1.1 www.shjxjs.com/atic/js/jquery.min.js
IP
File type ASCII text, with very long lines (32061)
Hash 86e98aeb7b032f4d77c7417cf01804c2
6dac186a17a276a44ab10be97ce7a7e68ea0f4ca
25122f689abc9b607b190b64254c6f70daa217593624db865e0a763d05aa4d28
GET /atic/js/jquery.min.js HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: application/javascript
Last-Modified: Tue, 07 Sep 2021 04:59:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6136f1c2-14938"
Expires: Tue, 22 Nov 2022 16:08:38 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.shjxjs.com/gg7f5kv/shouyeshang.html
200 OK 4.2 kB URL HTTP/1.1 www.shjxjs.com/gg7f5kv/shouyeshang.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 440ab7e8cb4353ae091e9d4c30a9dc44
2e4b429519df8b2bc5f1bf24530ac726eede693f
0be07fb21aff028dae138508eb97b66cecdd8c6a9278e24a7cdd16afeeea1b5e
GET /gg7f5kv/shouyeshang.html HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: text/html
Last-Modified: Tue, 22 Nov 2022 02:45:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"637c37e6-4660"
Content-Encoding: gzip
www.shjxjs.com/atic/images/150x50.gif
200 OK 6.5 kB URL HTTP/1.1 www.shjxjs.com/atic/images/150x50.gif
IP
File type GIF image data, version 89a, 150 x 50\012- data
Hash 234bdd5dc2570a5ab1dc9c708245b395
375b93c3bc8f4382991d2ff4af446685e429bf2c
77cab73693745ce7a57f4e10d5b7213019939be397f526fd709e759bde032aa9
GET /atic/images/150x50.gif HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/atic/css/stui_default.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: image/gif
Content-Length: 6450
Last-Modified: Tue, 07 Sep 2021 04:59:40 GMT
Connection: keep-alive
ETag: "6136f1bc-1932"
Expires: Thu, 22 Dec 2022 04:08:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 280 B IP
Hash f405ae31bd115344042e4a13ebc6fd71
def881934d067d241652c7f73857b9e207290561
750f08cf1ce7f292ec46d84ea352c0a8b8c31a2c30dbc1b6594d17628f07d723
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=94187
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:38 GMT
Etag: "637b1831-118"
Expires: Wed, 23 Nov 2022 06:18:25 GMT
Last-Modified: Mon, 21 Nov 2022 06:18:25 GMT
Server: nginx
Content-Length: 280
www.shjxjs.com/atic/images/load.gif
200 OK 65 kB URL HTTP/1.1 www.shjxjs.com/atic/images/load.gif
IP
File type GIF image data, version 89a, 150 x 210\012- data
Hash 1fbb5556099254502571ddee76ec3683
8d1bc81d78d45b97e0c031f813c338cf22043978
1a41d8b1fe312bd93ad4ce35db83af7647ab0ebef9d60c45d211cda7340ec4c8
GET /atic/images/load.gif HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/atic/css/stui_default.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: image/gif
Content-Length: 65214
Last-Modified: Tue, 07 Sep 2021 04:59:40 GMT
Connection: keep-alive
ETag: "6136f1bc-febe"
Expires: Thu, 22 Dec 2022 04:08:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee0c515785eb572025c8b7230e8df1c9
6e453b0c98ad7c7702d44c6f54caef1869231c6e
bdebe6bd439e96e0eeaaf3687e9db8ba7630122b80c8ca8a737dd26cb5dd29fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDEBE6BD439E96E0EEAAF3687E9DB8BA7630122B80C8CA8A737DD26CB5DD29FB"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3821
Expires: Tue, 22 Nov 2022 05:12:20 GMT
Date: Tue, 22 Nov 2022 04:08:39 GMT
Connection: keep-alive
www.shjxjs.com/atic/fonts/c8e1344f3d584efebecd98ce9573c7b8.woff
200 OK 182 kB URL HTTP/1.1 www.shjxjs.com/atic/fonts/c8e1344f3d584efebecd98ce9573c7b8.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size 182 kB (181701 bytes)
Hash 9ce4dceb03459c7c34b603f3ca0382b3
08816b4228cf05b62eb2a7e511e9fddd431eba0c
b37cee6beef2cce3ab22d5b354a15efad562a4e523669b98da0aacf12a73e7db
GET /atic/fonts/c8e1344f3d584efebecd98ce9573c7b8.woff HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.shjxjs.com/atic/css/iconfont.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee0c515785eb572025c8b7230e8df1c9
6e453b0c98ad7c7702d44c6f54caef1869231c6e
bdebe6bd439e96e0eeaaf3687e9db8ba7630122b80c8ca8a737dd26cb5dd29fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDEBE6BD439E96E0EEAAF3687E9DB8BA7630122B80C8CA8A737DD26CB5DD29FB"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3821
Expires: Tue, 22 Nov 2022 05:12:20 GMT
Date: Tue, 22 Nov 2022 04:08:39 GMT
Connection: keep-alive
s2.loli.net/2022/05/21/zAxwCKkLnFjlaQ8.jpg
200 OK 9.2 kB URL HTTP/2 s2.loli.net/2022/05/21/zAxwCKkLnFjlaQ8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3\012- data
Hash 43ae14560cdbc69ce960a28002f04309
4dc694c2754882f840c77807016676732c38138b
af0e248de25efb22e6edd4e1453e686154b00ce5039f94dceb2684a332ddad0e
GET /2022/05/21/zAxwCKkLnFjlaQ8.jpg HTTP/1.1
Host: s2.loli.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:39 GMT
content-type: image/jpeg
content-length: 9166
last-modified: Sat, 21 May 2022 11:42:12 GMT
etag: "6288d014-23ce"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pa8wv%2BAYwfj5eJEk9T6Xhq3tS3sgxFsyuR8gWuJELLpesL7TPhPgCD2FIsiLH5LTVDsyrUGprvYnJ%2Bj5evrYZf4TZ9cgYiT8E58xu58yYscihAGchuqmZPnhSYh%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76dece19d801b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0247688e4dc14194bb3412981eb6306
7067b4c07d0084f5029692e95314430588082be9
4f0c72724f1b0191529b6aba51c206e7181d3775ca4c2280de502477c172beb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F0C72724F1B0191529B6ABA51C206E7181D3775CA4C2280DE502477C172BEB2"
Last-Modified: Mon, 21 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21556
Expires: Tue, 22 Nov 2022 10:07:55 GMT
Date: Tue, 22 Nov 2022 04:08:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3ec6172ac1e64cd21934d3d4b2eb4f62
631eb7efeac61a957d1a972021dd4dc843dd8e6e
d7f54a3acd91821836c726a08ced5cf61aeb2df90e1873200c10bb3fc168bea8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7F54A3ACD91821836C726A08CED5CF61AEB2DF90E1873200C10BB3FC168BEA8"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19642
Expires: Tue, 22 Nov 2022 09:36:01 GMT
Date: Tue, 22 Nov 2022 04:08:39 GMT
Connection: keep-alive
www.shjxjs.com/atic/fonts/iconfont-15417656157251.ttf
200 OK 22 kB URL HTTP/1.1 www.shjxjs.com/atic/fonts/iconfont-15417656157251.ttf
IP
File type TrueType Font data, 11 tables, 1st "GSUB", 18 names, Macintosh, \012- data
Hash ac82e9b2caf4353072767003329646d5
6711419177b4fd005c1c69900517af042504bb60
12cfa0fe87f6160e5fc1d1dd699e701e6c55f36b5c6a86a2e1fbcbf12f7b688e
GET /atic/fonts/iconfont-15417656157251.ttf HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/atic/css/iconfont.css
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:39 GMT
Content-Type: application/octet-stream
Content-Length: 21940
Last-Modified: Tue, 07 Sep 2021 04:59:38 GMT
Connection: keep-alive
ETag: "6136f1ba-55b4"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3ec6172ac1e64cd21934d3d4b2eb4f62
631eb7efeac61a957d1a972021dd4dc843dd8e6e
d7f54a3acd91821836c726a08ced5cf61aeb2df90e1873200c10bb3fc168bea8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7F54A3ACD91821836C726A08CED5CF61AEB2DF90E1873200C10BB3FC168BEA8"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19642
Expires: Tue, 22 Nov 2022 09:36:01 GMT
Date: Tue, 22 Nov 2022 04:08:39 GMT
Connection: keep-alive
kvevv.com/4bf88adf466b90cef3686374a27fc0e2.gif
301 Moved Permanently 162 B URL HTTP/2 kvevv.com/4bf88adf466b90cef3686374a27fc0e2.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /4bf88adf466b90cef3686374a27fc0e2.gif HTTP/1.1
Host: kvevv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:39 GMT
content-type: text/html
content-length: 162
location: https://kvthhh.top/4bf88adf466b90cef3686374a27fc0e2.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
kvevv.com/47fc3dfa6dab926d04bc8c0e76b89995.gif
301 Moved Permanently 162 B URL HTTP/2 kvevv.com/47fc3dfa6dab926d04bc8c0e76b89995.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /47fc3dfa6dab926d04bc8c0e76b89995.gif HTTP/1.1
Host: kvevv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:39 GMT
content-type: text/html
content-length: 162
location: https://kvthhh.top/47fc3dfa6dab926d04bc8c0e76b89995.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 707a35daef5c06ff9646cfe587ce76bb
1a8327a8a1244aa7e5f7ded5fd7ac4b58193b99e
caf1adced277ac93bf0499f1fe8616bd866c40d32c7eb1e5469b77ed8bbe359e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CAF1ADCED277AC93BF0499F1FE8616BD866C40D32C7EB1E5469B77ED8BBE359E"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15468
Expires: Tue, 22 Nov 2022 08:26:27 GMT
Date: Tue, 22 Nov 2022 04:08:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 90a46c52d981c686211eeb501a452601
408db0fedea28cc69e2a831571e26a3683ac7665
41317607c82435565030ebc520c244339b5751063cc9ab9f6aa789bdd1b4de0e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41317607C82435565030EBC520C244339B5751063CC9AB9F6AA789BDD1B4DE0E"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2559
Expires: Tue, 22 Nov 2022 04:51:18 GMT
Date: Tue, 22 Nov 2022 04:08:39 GMT
Connection: keep-alive
kzeii.com/8d62ac139591ff0c5f17d4c5f1ff3cf6.gif
301 Moved Permanently 162 B URL HTTP/2 kzeii.com/8d62ac139591ff0c5f17d4c5f1ff3cf6.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /8d62ac139591ff0c5f17d4c5f1ff3cf6.gif HTTP/1.1
Host: kzeii.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:39 GMT
content-type: text/html
content-length: 162
location: https://kvhggg.top/8d62ac139591ff0c5f17d4c5f1ff3cf6.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
kvezz.com/95ca29ec3907b3bf2d8a24b35e3eda22.gif
301 Moved Permanently 162 B URL HTTP/2 kvezz.com/95ca29ec3907b3bf2d8a24b35e3eda22.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /95ca29ec3907b3bf2d8a24b35e3eda22.gif HTTP/1.1
Host: kvezz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:39 GMT
content-type: text/html
content-length: 162
location: https://kvkmmm.top/95ca29ec3907b3bf2d8a24b35e3eda22.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b71cbca9797a69b8ce4948cf50f0f0e7
2a2bd429f0fbd92bd2bad25e629f324cd6ea72fc
9c23b4241337151874a7e76e2493ba1e8ba0307def4f599b0b3232aa031d2b02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C23B4241337151874A7E76E2493BA1E8BA0307DEF4F599B0B3232AA031D2B02"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1069
Expires: Tue, 22 Nov 2022 04:26:29 GMT
Date: Tue, 22 Nov 2022 04:08:40 GMT
Connection: keep-alive
www.shjxjs.com/atic/images/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 www.shjxjs.com/atic/images/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 11bf57dec75674ec9af4351125a77667
a95e2eb332bcf60a29bf2ff9ad27a9e7acb9dcbd
d5edeeecd4f0ce96dd5ea591726b17a090b843e9a4dbc83cf98f216a73e835b1
GET /atic/images/favicon.ico HTTP/1.1
Host: www.shjxjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shjxjs.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: image/x-icon
Content-Length: 4286
Last-Modified: Sat, 27 Aug 2022 07:44:58 GMT
Connection: keep-alive
ETag: "6309cb7a-10be"
Accept-Ranges: bytes
kzecc.com/8fdce7479dd03f1ee73805e8d2e9bab8.gif
301 Moved Permanently 162 B URL HTTP/2 kzecc.com/8fdce7479dd03f1ee73805e8d2e9bab8.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /8fdce7479dd03f1ee73805e8d2e9bab8.gif HTTP/1.1
Host: kzecc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:40 GMT
content-type: text/html
content-length: 162
location: https://kvhaaa.top/8fdce7479dd03f1ee73805e8d2e9bab8.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
taiwtp1.com/img/200200.gif
200 OK 75 kB URL HTTP/2 taiwtp1.com/img/200200.gif
IP
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 200 x 200\012- data
Hash 03c13356e00c2033df2c88cb919251eb
f3a334a0366ddda6a87034f7d6c889c4d159dc8d
0c184e206259e8d0c54d3fc12d3d5332e9f6ff5f0404630fcb2daefe65fe1bfe
GET /img/200200.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 04:06:17 GMT
content-type: image/gif
content-length: 75259
last-modified: Wed, 09 Mar 2022 04:51:10 GMT
etag: "6228323e-125fb"
expires: Thu, 22 Dec 2022 04:06:17 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.loli.net/2022/11/16/yGHBshX51mTPgDt.gif
200 OK 573 kB URL HTTP/2 s2.loli.net/2022/11/16/yGHBshX51mTPgDt.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 573 kB (573283 bytes)
Hash 82ec0aee9e789788b2af0f8ffa0b71cc
6634973a51e588bd2638a906dda2e687ebf1899d
6dab48a63adf9cc0a632be9ffdef37dbb783448b4106090fa8d6b89cffb0b8af
GET /2022/11/16/yGHBshX51mTPgDt.gif HTTP/1.1
Host: s2.loli.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:39 GMT
content-type: image/gif
content-length: 573283
last-modified: Tue, 15 Nov 2022 16:06:55 GMT
etag: "6373b91f-8bf63"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6e8SFmWczZ3aTptbQOHfWBz2hONZbwbjG9pUDZ5OJ6wGp15r6d7x270OdnltIQJ35eXSe%2ByiVDbzVr21BbxP0cNj2OpzXy0JxFBMGrWVGiocsDMZl586YyEZRce"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76dece1bc89eb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s2.loli.net/2022/11/16/34mUJrIsuoFQDXO.gif
200 OK 424 kB URL HTTP/2 s2.loli.net/2022/11/16/34mUJrIsuoFQDXO.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 424 kB (423944 bytes)
Hash 7477cff9d8a4c8c69b7f03e08531f56e
41ac73827b766192ce97796bb8c4c752211cf9b7
bc38f40933b5e6f69a368ba11289f4f7ea04b757119f3728bdf8abf845e57444
GET /2022/11/16/34mUJrIsuoFQDXO.gif HTTP/1.1
Host: s2.loli.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:39 GMT
content-type: image/gif
content-length: 423944
last-modified: Tue, 15 Nov 2022 16:04:53 GMT
etag: "6373b8a5-67808"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rr%2B822e%2B3rVT9FdvuTHZfUXncZ3wtAMFdfwzJhxyc1ssIP9N1QX5mr899zJX%2FXrL6CJsacko5PgtBvIqtZoS20spe9irTRhDRn6gaya7it3uUQLb9m3zCtagNwIH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76dece1bb894b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2c607b5a6eb7e1f190921ed2fe2fafe8
f0b5420c425d8b1780da0117d46a5166bf9da581
dae77f7546aaf18299fd5239564799a25d40d2f43eda9b6ea8c1b6c3fb4e8a25
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 05:43:31 GMT
Expires: Sun, 27 Nov 2022 05:43:30 GMT
Etag: "f0b5420c425d8b1780da0117d46a5166bf9da581"
Cache-Control: max-age=437089,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece25cfe0b515-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f8534b421f9959ef2aeb907306ba64eb
d9f54900a565c6e32f583f98ab49b9ea6123d8b3
713c9d6c83afefc9d757eb246928254a9238c0117f8f9caf2c963160d8a5f072
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "713C9D6C83AFEFC9D757EB246928254A9238C0117F8F9CAF2C963160D8A5F072"
Last-Modified: Sun, 20 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12524
Expires: Tue, 22 Nov 2022 07:37:24 GMT
Date: Tue, 22 Nov 2022 04:08:40 GMT
Connection: keep-alive
yh.133svip.com/tu/960%C3%97120.gif
200 OK 726 kB URL HTTP/1.1 yh.133svip.com/tu/960%C3%97120.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 726 kB (726222 bytes)
Hash 130b7105c146e3147938a30b95438d0b
43102c80cf43db03028d5c306ed9d9fd7b3d16cb
e40f0165bbd173dd3598ff685bc966d38c24f9552eaaeaf7d562e2d45d4efe02
GET /tu/960%C3%97120.gif HTTP/1.1
Host: yh.133svip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
ETag: "1eaa4ba0f4bad81:0"
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2022 15:41:23 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Mon, 21 Nov 2022 20:09:14 GMT
X-Cache: HIT from dhostname
Content-Length: 726222
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash b02886bffe192ee5259a2c3a1e1b5ba7
00fa6e56af4f69a831affc97cc6a83ca8afed8af
d612a6e3dfc5804e274d999dbb5dd1eaea58b0a4820b3b1ab90be7fe8a792b80
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 00:53:48 GMT
Expires: Tue, 29 Nov 2022 00:53:47 GMT
Etag: "00fa6e56af4f69a831affc97cc6a83ca8afed8af"
Cache-Control: max-age=592506,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece25cbd6b4f3-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 019446fb143d0baedeb0603b1b662cfc
d09a34f9a799a79fdb4ffe4727d52b3460f44915
b11c275e6045afbdf052eab893508c67710692d1f2c130b056adf68fc270f679
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 26 Nov 2022 02:55:32 GMT
ETag: "d09a34f9a799a79fdb4ffe4727d52b3460f44915"
Last-Modified: Tue, 22 Nov 2022 02:55:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1644
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dece26ece1b506-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash b02886bffe192ee5259a2c3a1e1b5ba7
00fa6e56af4f69a831affc97cc6a83ca8afed8af
d612a6e3dfc5804e274d999dbb5dd1eaea58b0a4820b3b1ab90be7fe8a792b80
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 00:53:48 GMT
Expires: Tue, 29 Nov 2022 00:53:47 GMT
Etag: "00fa6e56af4f69a831affc97cc6a83ca8afed8af"
Cache-Control: max-age=592506,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece25cc2e1bfa-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash f6c30b1b04c23962af4918c119ae90a5
61517a22c9e93c84a6158d47d9e45c922ad8e541
b51b7905a73784de871cf1ac19e443ab5ea0762a6cbd6a941d4b5c5e615cc9aa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 02:24:38 GMT
Expires: Sat, 26 Nov 2022 02:24:37 GMT
Etag: "61517a22c9e93c84a6158d47d9e45c922ad8e541"
Cache-Control: max-age=338756,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece25c8befac8-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56f7f43b0e9812408c0c7ea9632f9066
bed541aedeb35f797aa08c3bbf6117ffd8bbb923
665f8c0eeebea758ad6b3cc4e40b698aa06d9d311308c0a52bffd2aee272d683
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "665F8C0EEEBEA758AD6B3CC4E40B698AA06D9D311308C0A52BFFD2AEE272D683"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8784
Expires: Tue, 22 Nov 2022 06:35:04 GMT
Date: Tue, 22 Nov 2022 04:08:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7cd16dd4f12493acb6ce3ccc17334b2f
ecf1276e700d52706c58489c75a896bc7c338e4c
5b7c36fe17333b2f52f1b507b8fe1fa84bb020854d06f4517dddcdfe36662bf6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B7C36FE17333B2F52F1B507B8FE1FA84BB020854D06F4517DDDCDFE36662BF6"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5453
Expires: Tue, 22 Nov 2022 05:39:33 GMT
Date: Tue, 22 Nov 2022 04:08:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 605f5707a834be0e12de316af72da5e4
b2177356bb727829e0d18a3aabb75f686a9a7a72
71369ff77e24abf58d752450716bf2d6b35f6f54e55604f355caee9b3bee34d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71369FF77E24ABF58D752450716BF2D6B35F6F54E55604F355CAEE9B3BEE34D7"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8195
Expires: Tue, 22 Nov 2022 06:25:15 GMT
Date: Tue, 22 Nov 2022 04:08:40 GMT
Connection: keep-alive
ak-d.tripcdn.com/images/0Z03f223495fl86ls3FAF.gif
200 OK 1.2 MB URL HTTP/2 ak-d.tripcdn.com/images/0Z03f223495fl86ls3FAF.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 1.2 MB (1197751 bytes)
Hash 6938343bc2a842c4d2c9c96f4dde0298
00e2b1b902b196b3c005facb934c10e2a2ca1961
5ccc1726994dfc6d2667e13bf946785f79bb01401fedb59db1cbdf6942dbaee6
GET /images/0Z03f223495fl86ls3FAF.gif HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 1197751
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=6835373
expires: Thu, 09 Feb 2023 06:51:33 GMT
date: Tue, 22 Nov 2022 04:08:40 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 698fbcb08a10e627ee91a09b0137a2e5
97ff73afe2487f7900e4936ab2effe3bd2d6956f
d58d055af9657ca6f6cc68759e50b251fe18a247b2a78b983e81693341d3f7e6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 18 Nov 2022 20:52:34 GMT
Expires: Fri, 25 Nov 2022 20:52:33 GMT
Etag: "97ff73afe2487f7900e4936ab2effe3bd2d6956f"
Cache-Control: max-age=318832,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece25cb98b505-OSL
kzeaa.com/92f0c144d76dd785f7c04f84ae149b33.gif
301 Moved Permanently 162 B URL HTTP/2 kzeaa.com/92f0c144d76dd785f7c04f84ae149b33.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /92f0c144d76dd785f7c04f84ae149b33.gif HTTP/1.1
Host: kzeaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:40 GMT
content-type: text/html
content-length: 162
location: https://kvheee.top/92f0c144d76dd785f7c04f84ae149b33.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 93d837c0da7101fda5e8e8529f4e8be5
260c81c324167e59a599675de51a36a6f66fb6ad
63692ddbf73c2edee12e3bde32f8d8cee44846cc6c0004f1c5eefea4f3f4ed48
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63692DDBF73C2EDEE12E3BDE32F8D8CEE44846CC6C0004F1C5EEFEA4F3F4ED48"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21090
Expires: Tue, 22 Nov 2022 10:00:10 GMT
Date: Tue, 22 Nov 2022 04:08:40 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash 7e1b351a4f589546dedaf1d7d26e390a
bdb4b78f4f40cc4f70c40add6b6320dbb941bba6
86c298dfc6da4cf97f7f1c7c98f9d3c50c8f70ff1db291e5f406eacb88ffb19f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 03:24:57 GMT
Expires: Sat, 26 Nov 2022 03:24:56 GMT
Etag: "bdb4b78f4f40cc4f70c40add6b6320dbb941bba6"
Cache-Control: max-age=342375,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece272c8f1bfa-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 8659a055d40c34b70cbf9ab81d13727d
f58787becf50de511ad7ca372267c1aae3ad27ea
cff02e906dce300e5a5e7c78a54652c9c23c713e62d4616cb65845aecb382178
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 10:22:01 GMT
Expires: Sun, 27 Nov 2022 10:22:00 GMT
Etag: "f58787becf50de511ad7ca372267c1aae3ad27ea"
Cache-Control: max-age=453799,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece25cb970b4d-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3239
Expires: Tue, 22 Nov 2022 05:02:39 GMT
Date: Tue, 22 Nov 2022 04:08:40 GMT
Connection: keep-alive
kzemm.com/bb7f858c0dad171784517c02e7bff891.gif
301 Moved Permanently 162 B URL HTTP/2 kzemm.com/bb7f858c0dad171784517c02e7bff891.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /bb7f858c0dad171784517c02e7bff891.gif HTTP/1.1
Host: kzemm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:40 GMT
content-type: text/html
content-length: 162
location: https://kvkaaa.top/bb7f858c0dad171784517c02e7bff891.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 253593d1b3f90aa54d0748688fbb09ac
470c54ca28e1e5c56828c8c7f9849374061f501e
d8d331519f526b1117e4f67b0fb5fb46f400a63d1cb5757a3f22201ea70301ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9598
x-amzn-requestid: a713ce94-2441-4288-b6d8-cd6b638274b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IqVGgJoAMFz5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee41-5ed8e45c664203e137f8c92b;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mDiJvNjoSqIbYd2Mx4Kv5muJ-g-hehPMyWAjnZuhidG7uEtjdTtTGA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:36:15 GMT
etag: "470c54ca28e1e5c56828c8c7f9849374061f501e"
content-type: image/jpeg
age: 19945
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 03:49:11 GMT
age: 1169
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed6b76d15fc8d6295acdb6fb47461d3
b8c928f93a8d82b48491448d811a95ad99dc6aef
de326836a9de677438b9ae724198e94348b0900c62817ff10de3677ce93fdae0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8685
x-amzn-requestid: 66455cc7-83d7-4570-99f9-5fa838da947f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrAHwKoAMFUHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee46-354d65e9609bc05647556a5a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -9tZPsMl7i5hr0N1rwJdQBLiOImuEO12RDL0pcPNjf6t-LkRbPaN2A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:02:46 GMT
etag: "b8c928f93a8d82b48491448d811a95ad99dc6aef"
content-type: image/jpeg
age: 21955
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b919084-f564-465a-ac1a-59e00596bb76.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b919084-f564-465a-ac1a-59e00596bb76.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10f54d1625147d074c29bdff1897ef8f
d1359b0dcf6974d685b5c55c5789810863cce7cd
6431d25310697b4455f3e9487a11415f082d05e02d33b29cad3c8862ece28322
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b919084-f564-465a-ac1a-59e00596bb76.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8405
x-amzn-requestid: b93c951e-7aa0-468d-92b9-4079f7bfc9ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1jFbGoWIAMFZ7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63787eef-14f7c7985f46ffde1b7e3ed6;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 06:59:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3KHsHTHxpi4ia2Ka-uq0s5c543qAWVq_ZqHk4atSRMS95BaNeLMmhA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:47:12 GMT
age: 22889
etag: "d1359b0dcf6974d685b5c55c5789810863cce7cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b591bcc9d645eed0ea6ebc5dae07d31
97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb
82dde9a4d139bdfae1d8859f4d7a77f92182c65ad630e25d0cc52f346dd1dfad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11793
x-amzn-requestid: 7edbd95e-83c8-4162-886f-b0bf88deee5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oFrQIAMFnYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-4f1317ec61500d713816830d;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hd2a0sbw7fzVnkVpCOEAnu_W-Z0EajArOracSTImr6jbhOFwKbDKpw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:44:56 GMT
age: 23025
etag: "97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash fd93ca1fec2169813b6a96ff53c237ed
a8aa92bebf49d8c0144c060afc9348bd2c33f105
22eea0f23d1facefc6f569e52d2dd2561f360eb2d79c67a5996e01ee246f262b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 15:19:40 GMT
Expires: Sat, 26 Nov 2022 15:19:39 GMT
Etag: "a8aa92bebf49d8c0144c060afc9348bd2c33f105"
Cache-Control: max-age=385258,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece271c58b4f3-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ab62c5a7c3296600de924eb0b283bc1
bc4a2dc43898e3fb78ba7301d8b09b280991d221
f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10556
x-amzn-requestid: d2426c6d-5e78-496c-8649-0496a872b380
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-Iq0GPVoAMF9bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee45-1ee6dc09394731cc4dbfc38a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eHLf2DFK-3yN5dEG22XItPxRzmODRdThIYJI2oZqDJpgTGQGSQnGzQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:46:07 GMT
age: 22954
etag: "bc4a2dc43898e3fb78ba7301d8b09b280991d221"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1f919c44f4be14ce20a12342acddc9f3
c1cace75609058f0af75470371415901bf320fe7
801032659dd656d53da1826df120cd0a6899436d4586153ca5546a8da2e58015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "801032659DD656D53DA1826DF120CD0A6899436D4586153CA5546A8DA2E58015"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10181
Expires: Tue, 22 Nov 2022 06:58:22 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
kzerr.com/6fb5deabda1e984b6bd49b2baa8dfa10.gif
301 Moved Permanently 162 B URL HTTP/2 kzerr.com/6fb5deabda1e984b6bd49b2baa8dfa10.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /6fb5deabda1e984b6bd49b2baa8dfa10.gif HTTP/1.1
Host: kzerr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: text/html
content-length: 162
location: https://kvkccc.top/6fb5deabda1e984b6bd49b2baa8dfa10.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 61135622b519eb50eceb1be996409ed3
50ab46be5b240ee410271fa1f132d463de3db6b0
481ee1e298a8684917c0bcf19adc792224d8e43cfbb18328e587e711fee6cf87
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 26 Nov 2022 02:11:17 GMT
ETag: "50ab46be5b240ee410271fa1f132d463de3db6b0"
Last-Modified: Tue, 22 Nov 2022 02:11:18 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3390
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dece28de26b50f-OSL
kvexx.com/03c3cb047014f05117117e4a924df90d.gif
301 Moved Permanently 162 B URL HTTP/2 kvexx.com/03c3cb047014f05117117e4a924df90d.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /03c3cb047014f05117117e4a924df90d.gif HTTP/1.1
Host: kvexx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: text/html
content-length: 162
location: https://kvhttt.top/03c3cb047014f05117117e4a924df90d.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
kveww.com/99462c01e85acc1311bebac224df6cce.gif
301 Moved Permanently 162 B URL HTTP/2 kveww.com/99462c01e85acc1311bebac224df6cce.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /99462c01e85acc1311bebac224df6cce.gif HTTP/1.1
Host: kveww.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: text/html
content-length: 162
location: https://kvkjjj.top/99462c01e85acc1311bebac224df6cce.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28442f67dc656eb7a6cae198cbe4aaf0
61a128b30fec09ba6d4caa43f84f9082d87be157
7c17752778eecfddc2955cac9aa485c44af0748e00d07d7b98f53d3718ad048b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7C17752778EECFDDC2955CAC9AA485C44AF0748E00D07D7B98F53D3718AD048B"
Last-Modified: Sun, 20 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21534
Expires: Tue, 22 Nov 2022 10:07:35 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
kvemm.com/ec9fcd758df74f805f29f72e8545d13b.gif
301 Moved Permanently 162 B URL HTTP/2 kvemm.com/ec9fcd758df74f805f29f72e8545d13b.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /ec9fcd758df74f805f29f72e8545d13b.gif HTTP/1.1
Host: kvemm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: text/html
content-length: 162
location: https://kvtddd.top/ec9fcd758df74f805f29f72e8545d13b.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash a660cd6e2c96e51131f5addf2a90567e
0751bc571a82300bd67dbeeeea310b4ce4399106
b831ac1d842f800e41d92f1f2035592a21c157c908577d225d973f05f3269f06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=137408
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:41 GMT
Etag: "637bc109-118"
Expires: Wed, 23 Nov 2022 18:18:49 GMT
Last-Modified: Mon, 21 Nov 2022 18:18:49 GMT
Server: nginx
Content-Length: 280
ocsp.pki.goog/s/gts1p5/mxpEmQKZIUM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/mxpEmQKZIUM
IP
Hash 67f80fb8625bc26c1cd01f66407b84c4
2f6a5268bc65b7882e0bae317f32f7b25bd92243
5366cd706fb330428e03fe98cdcf30e2b94168b4f7a1a2d4b0e0377940086363
POST /s/gts1p5/mxpEmQKZIUM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/mxpEmQKZIUM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/mxpEmQKZIUM
IP
Hash 67f80fb8625bc26c1cd01f66407b84c4
2f6a5268bc65b7882e0bae317f32f7b25bd92243
5366cd706fb330428e03fe98cdcf30e2b94168b4f7a1a2d4b0e0377940086363
POST /s/gts1p5/mxpEmQKZIUM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/KzhrJKWHgbg
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/KzhrJKWHgbg
IP
Hash a543e74e7c062034c4dd3a37c271f90b
4933c90876c33e624978df50ba69f9cab9084971
82870d19abe2432ad16e009fa43a929a9d268ce8b561c6eb300f9f0b66613757
POST /s/gts1p5/KzhrJKWHgbg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4e91a3b7634b5244186df7f707f86f89
8c44784e58617a0e8559c53040e86cf4898f37d1
731095f8ae0f8d273b8505acd1db78868cbd8b4a22deea59a98e5bf042cf964c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 18:12:22 GMT
Expires: Sun, 27 Nov 2022 18:12:21 GMT
Etag: "8c44784e58617a0e8559c53040e86cf4898f37d1"
Cache-Control: max-age=482019,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76dece2a59aefac8-OSL
kvhggg.top/8d62ac139591ff0c5f17d4c5f1ff3cf6.gif
200 OK 566 kB URL HTTP/2 kvhggg.top/8d62ac139591ff0c5f17d4c5f1ff3cf6.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 566 kB (565615 bytes)
Hash 6a2c609ad0c46bb1b8d9cd39eacde625
45de0f50f86b45dd6fd4a1c764d47e2640126bf3
8eb8f61188f2555f5f7f0a934ebbae9e9ab703a3dc0b23191bdc7c147eb12140
GET /8d62ac139591ff0c5f17d4c5f1ff3cf6.gif HTTP/1.1
Host: kvhggg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: image/gif
content-length: 565615
last-modified: Mon, 10 Oct 2022 13:11:33 GMT
etag: "63441a05-8a16f"
expires: Wed, 21 Dec 2022 22:53:28 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 18913
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B6fhfolTYDcRPrOiy%2FkFY3VWIFSSJa5jr%2F6wjJxn3kiv%2ByfLQT4sFWZDx4ZefIPqWbwWgul0uLtOW%2BJ9vhUmvmWZATalHsv1JEs%2BFDPGjU%2FdhBq%2B6%2BiNySg%2FO6xv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2a1cd17572-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kvhaa.com/cf4287991556df0490caf209d0ed91fe.gif
301 Moved Permanently 162 B URL HTTP/2 kvhaa.com/cf4287991556df0490caf209d0ed91fe.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /cf4287991556df0490caf209d0ed91fe.gif HTTP/1.1
Host: kvhaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: text/html
content-length: 162
location: https://nvhaaa.top/cf4287991556df0490caf209d0ed91fe.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b1c00805e9aabacd98aa244a19e220f3
f85b82148c844af09cf5278f67c2df1e1b03509e
e116471bf3e0875353ab7994d56ef6d6f549c235b77e0f433d0133f11cca6684
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E116471BF3E0875353AB7994D56EF6D6F549C235B77E0F433D0133F11CCA6684"
Last-Modified: Sun, 20 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13341
Expires: Tue, 22 Nov 2022 07:51:02 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
kvkmmm.top/95ca29ec3907b3bf2d8a24b35e3eda22.gif
200 OK 400 kB URL HTTP/2 kvkmmm.top/95ca29ec3907b3bf2d8a24b35e3eda22.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 400 kB (400264 bytes)
Hash b722c3905b96f11823e04826aafdd50e
68b63b572a042d40ab210aa313b7ebbc372be5a1
630c6a955789d5bb6311db75ce52e57ff4c12074ef5a5a080cf5459f907e9dc1
GET /95ca29ec3907b3bf2d8a24b35e3eda22.gif HTTP/1.1
Host: kvkmmm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: image/gif
content-length: 400264
last-modified: Mon, 02 May 2022 19:22:39 GMT
etag: "62702f7f-61b88"
expires: Sat, 10 Dec 2022 11:57:43 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1008658
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mypo4yJVUMZCIvYIDUJJZuYvy%2BBWvlJnUedkMcI8KiWLZcR9306Q1uI6Jjdob1LdLVm%2FgWlMWuWEjLnkoU9H4sYObP2kDRiAVLl5Nu6ufcCp%2F%2FLBYUxanENX1t7c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2afed9b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kvthhh.top/47fc3dfa6dab926d04bc8c0e76b89995.gif
200 OK 65 kB URL HTTP/2 kvthhh.top/47fc3dfa6dab926d04bc8c0e76b89995.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Hash 514c48163ce5b65fb6bf16d8578b478b
6c21c2f7fd18259458573225fbfdf80cd27b6bac
045b14c655e54a2b1c3bef56f95352d2bb6b794889c746985ec51ef03578cb52
GET /47fc3dfa6dab926d04bc8c0e76b89995.gif HTTP/1.1
Host: kvthhh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: image/gif
content-length: 65414
last-modified: Mon, 21 Nov 2022 23:12:50 GMT
etag: "637c05f2-ff86"
expires: Wed, 21 Dec 2022 23:20:02 GMT
cache-control: max-age=16070400
cf-cache-status: HIT
age: 17319
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZBP%2B%2Fo8zvbr7lh79jQTRieUl664llu%2FQxodbz9PJ6tvkQivGkDsFMmCKd32Zcs7%2B3VnG9Y%2B8n5oXG%2BnmgqHy40hfwaIOW0jiOZ%2FEAiY5uThUmFySJcLjKCeWlEcY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2a4ac3dcb7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsjsjs.xyz/happy/newyear/kongkong/960x60ns.gif
200 OK 406 kB URL HTTP/2 cdn.jsjsjs.xyz/happy/newyear/kongkong/960x60ns.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 406 kB (406419 bytes)
Hash 91949a67089d61d1c111d50f6e101660
fab540d8a71b28159836bf995e398a9569314e47
35ede3c11832a2e4f6562a484535420d010601981e3b07fdc271f160b0a81507
GET /happy/newyear/kongkong/960x60ns.gif HTTP/1.1
Host: cdn.jsjsjs.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: image/gif
content-length: 406419
last-modified: Wed, 16 Feb 2022 13:39:39 GMT
etag: "620cfe9b-63393"
expires: Sun, 04 Dec 2022 03:02:09 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 1559192
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XFrdDtqrxoJ0UD%2B98r4chiCM5%2FQcDgGk5SjEIYgKMP2hiAJUkxXT0tcYplqRcRHT0TA5cRX2N3Rkybo05rNVWEEIDsRUY16yH%2FrFDdsYWkamAYhqOOUVTrHnI%2Bsya5r7sg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2b0c711c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kvthhh.top/4bf88adf466b90cef3686374a27fc0e2.gif
200 OK 507 kB URL HTTP/2 kvthhh.top/4bf88adf466b90cef3686374a27fc0e2.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 507 kB (506851 bytes)
Hash 720e80d2a7ff4cf1bbf0b1608c2f35de
bf0a987ac8d4c7728171fe41e5c45b61b45a2f73
e177aeb64efe8103f8af0afc0a768394d970bbe60edcf103a083d56b915c18b1
GET /4bf88adf466b90cef3686374a27fc0e2.gif HTTP/1.1
Host: kvthhh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: image/gif
content-length: 506851
last-modified: Mon, 21 Nov 2022 11:03:46 GMT
etag: "637b5b12-7bbe3"
expires: Wed, 21 Dec 2022 23:20:25 GMT
cache-control: max-age=16070400
cf-cache-status: HIT
age: 17296
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IohmbJ4cZJXQfNsYnwLNXaATXoq8atjcYAVNAz004e3ZwHHe%2FPqx57tv5PPBrBcFHF6eNgrAhC3QNaM69q7C1a8WTMfZ5latNMOFjuJSXMHaKnOGqiuDhDVl94Eq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2a3abddcb7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 171aeccd4190b38484631af82f038a0e
c005bfeaa0c674cc8d6c745ac2a3d9377b6ad8da
8a37f9af7a653f8607bd3e25b635da7903313f66a072a15c1e3c0df0724ad3a0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8A37F9AF7A653F8607BD3E25B635DA7903313F66A072A15C1E3C0DF0724AD3A0"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15061
Expires: Tue, 22 Nov 2022 08:19:42 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
kvmaa.com/2bce8945ac6ae3579798b563e15db7a0.gif
301 Moved Permanently 162 B URL HTTP/2 kvmaa.com/2bce8945ac6ae3579798b563e15db7a0.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /2bce8945ac6ae3579798b563e15db7a0.gif HTTP/1.1
Host: kvmaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: text/html
content-length: 162
location: https://nvhbbb.top/2bce8945ac6ae3579798b563e15db7a0.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7ae3ba6d978122219f60c3e8c33f75b4
cf1859defef954763790a99cd1e216d6c15afbde
3d1f44d0fa5cf354f5f27eab131d865722235634de9b2ecbbd11cefd24976126
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3D1F44D0FA5CF354F5F27EAB131D865722235634DE9B2ECBBD11CEFD24976126"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1923
Expires: Tue, 22 Nov 2022 04:40:44 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
538936vxn.com/d435373888944b359330ac8c9bcff8c1.gif
200 OK 553 kB URL HTTP/1.1 538936vxn.com/d435373888944b359330ac8c9bcff8c1.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 553 kB (552818 bytes)
Hash 097e6fa9314192dc3dd55cb1c5023ee5
c30366c4c910616f1a3c1b773ffb4af967e20eb5
db020d7293807326453f5848c0bf219e2b835f2530468a9d816a3c1c7941023a
Analyzer Verdict Alert quad9 Sinkholed
GET /d435373888944b359330ac8c9bcff8c1.gif HTTP/1.1
Host: 538936vxn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "635b9374-86f72"
Date: Tue, 15 Nov 2022 07:28:52 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 28 Oct 2022 08:31:48 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-22
Content-Length: 552818
zmhmaz8.com/f7c7ff277fc946dab898f4ae7c2c4be0.gif
200 OK 1.0 MB URL HTTP/1.1 zmhmaz8.com/f7c7ff277fc946dab898f4ae7c2c4be0.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 120\012- data
Size 1.0 MB (1020091 bytes)
Hash b3aedc862671b2fa2e2922fadaa38add
8134113e40aa47b7b0508e81c447ccea8c10e7c0
d60a38f60cbd8cc782d6ecaf7c076dea16bf5eddfdc064d0aa4c03a440d236aa
GET /f7c7ff277fc946dab898f4ae7c2c4be0.gif HTTP/1.1
Host: zmhmaz8.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "62ee2dc7-f90bb"
Date: Fri, 11 Nov 2022 11:56:18 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sat, 06 Aug 2022 09:00:55 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-27
Content-Length: 1020091
362728tdg.com/f5cbf05f255e4fd0b931ba2a20d2534c.gif
200 OK 709 kB URL HTTP/1.1 362728tdg.com/f5cbf05f255e4fd0b931ba2a20d2534c.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 709 kB (708914 bytes)
Hash 81b52b9a83a90be8ae7e060ca470f9fd
e021e8764dfcaba6cf69c374c29f13b09c2c3f5e
b0e6924d24812d25d86ae15677857eea32a9dcd5ff6e5a00a8033986508d5526
Analyzer Verdict Alert quad9 Sinkholed
GET /f5cbf05f255e4fd0b931ba2a20d2534c.gif HTTP/1.1
Host: 362728tdg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63773234-ad132"
Date: Fri, 18 Nov 2022 09:06:25 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 18 Nov 2022 07:20:20 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-27
Content-Length: 708914
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash efec902bee1d2c325367fd0207cf3611
4d36d3bd4f3776deca1164623fb2df4a11c4ff38
5e34546de30fcf8e7f484378568aec26c1f98ddfbf8ee2a04625a4024ec20f92
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Tue, 22 Nov 2022 04:08:41 GMT
Last-Modified: Mon, 21 Nov 2022 08:54:41 GMT
ETag: "637b3cd1-1d7"
Expires: Wed, 23 Nov 2022 08:54:41 GMT
Cache-Control: max-age=103560
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669090121
Via: cache19.l2de2[3,2,200-0,M], cache19.l2de2[4,0], cache8.se1[24,24,200-0,M], cache8.se1[26,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 22 Nov 2022 04:08:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c16690901215796452e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash efec902bee1d2c325367fd0207cf3611
4d36d3bd4f3776deca1164623fb2df4a11c4ff38
5e34546de30fcf8e7f484378568aec26c1f98ddfbf8ee2a04625a4024ec20f92
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Tue, 22 Nov 2022 04:08:41 GMT
Last-Modified: Mon, 21 Nov 2022 08:54:41 GMT
ETag: "637b3cd1-1d7"
Expires: Wed, 23 Nov 2022 08:54:41 GMT
Cache-Control: max-age=103560
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669090121
Via: cache4.l2de2[2,2,200-0,M], cache4.l2de2[3,0], cache1.se1[25,24,200-0,M], cache1.se1[26,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 22 Nov 2022 04:08:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9516690901215784417e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash efec902bee1d2c325367fd0207cf3611
4d36d3bd4f3776deca1164623fb2df4a11c4ff38
5e34546de30fcf8e7f484378568aec26c1f98ddfbf8ee2a04625a4024ec20f92
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Tue, 22 Nov 2022 04:08:41 GMT
Last-Modified: Mon, 21 Nov 2022 08:54:41 GMT
ETag: "637b3cd1-1d7"
Expires: Wed, 23 Nov 2022 08:54:41 GMT
Cache-Control: max-age=103560
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669090121
Via: cache4.l2de2[4,3,200-0,M], cache4.l2de2[5,0], cache4.se1[26,25,200-0,M], cache4.se1[27,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 22 Nov 2022 04:08:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816690901215791971e
u1102.com/e78dae76ab72458a805527bea2c08236.gif
200 OK 262 kB URL HTTP/2 u1102.com/e78dae76ab72458a805527bea2c08236.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 262 kB (262190 bytes)
Hash 1a8e3a0619f31ef8f6c1fc4929b111df
5e0aa3f1847a89e281f54895ec6bdf95a1a907f9
eb28b213fc0196269abe1f9cfb6ce42f8fc3b2d6362828a91ec32fb99c63bfe2
GET /e78dae76ab72458a805527bea2c08236.gif HTTP/1.1
Host: u1102.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
etag: "6363bb28-4002e"
server: nginx
date: Tue, 22 Nov 2022 03:34:47 GMT
content-type: image/gif
last-modified: Thu, 03 Nov 2022 12:59:20 GMT
accept-ranges: bytes
x-cache: HIT from yd11_02-cdn-g01-la2-37
content-length: 262190
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?2b1dbb8222e1c4cfa5a07251b61deb7c
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?2b1dbb8222e1c4cfa5a07251b61deb7c
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (618)
Hash d972c032c06287cbafd679dc5371081e
05960229d76abcf1eeb3aeeb0cbd1f91924470e0
dcf327d0086604a2430946e935f7d596a5a48402dc403844a3fb730bffa23163
GET /hm.js?2b1dbb8222e1c4cfa5a07251b61deb7c HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11331
Content-Type: application/javascript
Date: Tue, 22 Nov 2022 04:08:40 GMT
Etag: a77a96029ce856f52455bd50cbbef9ef
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=EB9E5707B5237D2A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash efec902bee1d2c325367fd0207cf3611
4d36d3bd4f3776deca1164623fb2df4a11c4ff38
5e34546de30fcf8e7f484378568aec26c1f98ddfbf8ee2a04625a4024ec20f92
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Tue, 22 Nov 2022 04:08:41 GMT
Last-Modified: Mon, 21 Nov 2022 08:54:41 GMT
ETag: "637b3cd1-1d7"
Expires: Wed, 23 Nov 2022 08:54:41 GMT
Cache-Control: max-age=103560
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669090121
Via: cache5.l2de2[3,2,200-0,M], cache5.l2de2[5,0], cache8.se1[25,25,200-0,M], cache8.se1[26,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 22 Nov 2022 04:08:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c16690901216436511e
kzett.com/65e7e65f41ad1c2cb20bb39e08e6b041.gif
301 Moved Permanently 162 B URL HTTP/2 kzett.com/65e7e65f41ad1c2cb20bb39e08e6b041.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /65e7e65f41ad1c2cb20bb39e08e6b041.gif HTTP/1.1
Host: kzett.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: text/html
content-length: 162
location: https://kvtrrr.top/65e7e65f41ad1c2cb20bb39e08e6b041.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
kvhaaa.top/8fdce7479dd03f1ee73805e8d2e9bab8.gif
200 OK 864 kB URL HTTP/2 kvhaaa.top/8fdce7479dd03f1ee73805e8d2e9bab8.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 864 kB (864004 bytes)
Hash d2c820747a9b9b8c3abaab0775436ab7
99651afd10bd3874fb84d7973845482cd2c81f23
8aa3c7b05ba9bb5176a7155ead2a0ea562b07fb0dd7b27a9cf91c38e95ed43ed
GET /8fdce7479dd03f1ee73805e8d2e9bab8.gif HTTP/1.1
Host: kvhaaa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:41 GMT
content-type: image/gif
content-length: 864004
last-modified: Sun, 04 Sep 2022 09:11:53 GMT
etag: "63146bd9-d2f04"
expires: Tue, 20 Dec 2022 05:46:34 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 166927
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3o8ILj4AbaOllK7Z%2FRdE7Zi4xZHXP%2BzgGNKKBiaAierCreNn18rbvhJuUwTXL0H%2BsZA5prgE8u26MbnbdgK4CsRKIw60jL1HqCuYRh2vcWW44ADD4%2FryuK4jN5ji"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2cf99bb529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2ce0005faa907c3b040130f6f5724046
617be82793dee01e19a953be2543fe711d7fc79e
64074bb15e3cacd028e1ccb549db771c884c26a19407a7afce7821a2e99193a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64074BB15E3CACD028E1CCB549DB771C884C26A19407A7AFCE7821A2E99193A1"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3972
Expires: Tue, 22 Nov 2022 05:14:53 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 2af5f57048988fb003770dcbd36fa586
9369985a1e2f48a72296e66fba92fb1a72f5890d
7e6bdc7c41841c5256feb1dea0bca75e559550d974f87996a66a403e78b12d55
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 26 Nov 2022 00:45:42 GMT
ETag: "9369985a1e2f48a72296e66fba92fb1a72f5890d"
Last-Modified: Tue, 22 Nov 2022 00:45:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1896
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dece2d2fceb50f-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e62c5f6315c0bc2c1888c652b9bfb24e
9761f57bcc4864019dcfde0705fafd24bf777c2a
d0c07ffe62e97394368ff804aba9c9e67801c919a78eec215297b558531122df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D0C07FFE62E97394368FF804ABA9C9E67801C919A78EEC215297B558531122DF"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12416
Expires: Tue, 22 Nov 2022 07:35:37 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash fdadadc354e3b3c6720014164225baf3
72f6b60f26af8d232e0293ea40c84e79cd6ef861
5bb7cfca3a394dc5a9704dbfc5aa607ae51ecfeb2c916bddcb5b3e3fcee3bbe8
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 26 Nov 2022 01:38:03 GMT
ETag: "72f6b60f26af8d232e0293ea40c84e79cd6ef861"
Last-Modified: Tue, 22 Nov 2022 01:38:04 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 91
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dece2e0826b50f-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcd456b01a5eb376c20553949d5635fc
c551549ca2b0e8752772c9d501711368d19d7f75
f185da8db8e00aecf0724a3488a0e5f537294e0b9896fe350800d3775dfa95af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F185DA8DB8E00AECF0724A3488A0E5F537294E0B9896FE350800D3775DFA95AF"
Last-Modified: Tue, 22 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17071
Expires: Tue, 22 Nov 2022 08:53:12 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c6d9376d4e44a7dd85eb4972f7b809f4
d3e8fb5a729bbfdda06d540d1983612f68ae74d9
984d3622313d746b04078cf268e2aa735187bc048b740f4fe6f1866b0a32594d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "984D3622313D746B04078CF268E2AA735187BC048B740F4FE6F1866B0A32594D"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Tue, 22 Nov 2022 10:08:24 GMT
Date: Tue, 22 Nov 2022 04:08:41 GMT
Connection: keep-alive
223969ufy.com/13489beb95e840629251f7c0f98cc843.gif
200 OK 654 kB URL HTTP/1.1 223969ufy.com/13489beb95e840629251f7c0f98cc843.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 654 kB (653713 bytes)
Hash 6e1b913d233fb64271527a796618f37b
a858c96c304244dfa9d5cd159a3a5c80c6b98598
4dc0708abb2de56eaee1961f8143ec911357863a2b259c4154701ddd128d3a37
Analyzer Verdict Alert quad9 Sinkholed
GET /13489beb95e840629251f7c0f98cc843.gif HTTP/1.1
Host: 223969ufy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "635b8da1-9f991"
Date: Tue, 22 Nov 2022 03:45:29 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 28 Oct 2022 08:06:57 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us1-cdnb-20
Content-Length: 653713
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 682e81ff7a350a8ffbf2d0d96cd939d5
5574c8c3ad954b370b00cca069227f56c9f00fb5
20f83bc37b069f1191b22de1746e47f232c2f077908c38b9d7d9101d9496f6c7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "20F83BC37B069F1191B22DE1746E47F232C2F077908C38B9D7D9101D9496F6C7"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8174
Expires: Tue, 22 Nov 2022 06:24:56 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
kvheee.top/92f0c144d76dd785f7c04f84ae149b33.gif
200 OK 65 kB URL HTTP/2 kvheee.top/92f0c144d76dd785f7c04f84ae149b33.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Hash 514c48163ce5b65fb6bf16d8578b478b
6c21c2f7fd18259458573225fbfdf80cd27b6bac
045b14c655e54a2b1c3bef56f95352d2bb6b794889c746985ec51ef03578cb52
GET /92f0c144d76dd785f7c04f84ae149b33.gif HTTP/1.1
Host: kvheee.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 65414
last-modified: Mon, 21 Nov 2022 22:57:02 GMT
etag: "637c023e-ff86"
expires: Wed, 21 Dec 2022 23:01:48 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 18414
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d%2F1RSqL%2FIFThsSnZEqDpyZlSHLbGNpVrsLwZeOFi3JD7EG764O5FB3HIiVhRs28xhjE1amzGTt5X2WsmVWH3tYeU%2F7LiWI3FvZmUkHThZsiZWUXoaclzJg7d8K%2F2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2e9ef572c7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 685d13e399fca18844ea909b83a8e71f
24375673de9417bac9ea7ca4abc5ad8b93265454
5511187a2fb101d755d8e8401bf23008c986e7b2eef85d071788f9bcc5df84aa
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5511187A2FB101D755D8E8401BF23008C986E7B2EEF85D071788F9BCC5DF84AA"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21400
Expires: Tue, 22 Nov 2022 10:05:22 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
kveff.com/68a7807de3933bf7079116fa9df99e6f.gif
301 Moved Permanently 162 B URL HTTP/2 kveff.com/68a7807de3933bf7079116fa9df99e6f.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1
Host: kveff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: text/html
content-length: 162
location: https://kvteee.top/68a7807de3933bf7079116fa9df99e6f.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 0a4c734c54030151628910c9f0431b77
a7f16773cd93c107d94ffc214480b9a6599e9d1b
eb5148d1d90a65a847798a563e41b3bfa3e824c93ebb246409c33fc74e55d54a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EB5148D1D90A65A847798A563E41B3BFA3E824C93EBB246409C33FC74E55D54A"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Tue, 22 Nov 2022 10:08:04 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
kvkccc.top/6fb5deabda1e984b6bd49b2baa8dfa10.gif
200 OK 65 kB URL HTTP/2 kvkccc.top/6fb5deabda1e984b6bd49b2baa8dfa10.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Hash 514c48163ce5b65fb6bf16d8578b478b
6c21c2f7fd18259458573225fbfdf80cd27b6bac
045b14c655e54a2b1c3bef56f95352d2bb6b794889c746985ec51ef03578cb52
GET /6fb5deabda1e984b6bd49b2baa8dfa10.gif HTTP/1.1
Host: kvkccc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 65414
last-modified: Mon, 21 Nov 2022 22:57:57 GMT
etag: "637c0275-ff86"
expires: Wed, 21 Dec 2022 23:57:34 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 15068
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hpWxwCugnOdDvanIAd8%2FrAcRAca3eyk5mCeGEpxoetCqdIZrHs8CY24wUu6UZtNr15c6HBlVIGMaHXiP7%2Fe65eTbmpSfr6kbHccbROUMVLWO5AvTe4DHJcM3jRw1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2f28b5b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 3065c5f42001d42d194f04bb5ffa7769
9fd829ec67f3fcb1e50484c91bc55d5cdc930ff6
34636a09b858d468b49c20b8ac9c01ba1fad0b274fc1ea51fca477579d400d8d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "34636A09B858D468B49C20B8AC9C01BA1FAD0B274FC1EA51FCA477579D400D8D"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9638
Expires: Tue, 22 Nov 2022 06:49:20 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/mxpEmQKZIUM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/mxpEmQKZIUM
IP
Hash 67f80fb8625bc26c1cd01f66407b84c4
2f6a5268bc65b7882e0bae317f32f7b25bd92243
5366cd706fb330428e03fe98cdcf30e2b94168b4f7a1a2d4b0e0377940086363
POST /s/gts1p5/mxpEmQKZIUM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kvkjjj.top/99462c01e85acc1311bebac224df6cce.gif
200 OK 845 kB URL HTTP/2 kvkjjj.top/99462c01e85acc1311bebac224df6cce.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 845 kB (845326 bytes)
Hash c3e13dfb200737af2e68b42c07f28465
4d8262aecd8d789494afca5d63b5dd50600870dc
3e962d14b678808967d50df163581b65c6052144cb6239d72da58cceb7bf04ac
Analyzer Verdict Alert quad9 Sinkholed
GET /99462c01e85acc1311bebac224df6cce.gif HTTP/1.1
Host: kvkjjj.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 845326
last-modified: Mon, 15 Aug 2022 06:10:27 GMT
etag: "62f9e353-ce60e"
expires: Mon, 12 Dec 2022 13:52:48 GMT
cache-control: max-age=16070400
cf-cache-status: HIT
age: 828954
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h7JWQvtXUr6SvhKbtyY%2B4M071DeK9%2BNW8j0SGpgfwsoXUdDRpbAVq2dVeC0YitBHFmpthoypkRERHsG5R5YYGL1HVMY4L5Xyk9yR40ZZLV6uW6xrP%2FKrCuPyMlk2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2f7b4fb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ad1cdd58e9ef8c2e85750f9713e0df6a
ebfe599df924cb6b2c6b339ea6b4e17ab7acc85c
67bd14916953000791409e0ca404ebba093aea2b48892ba09e3554192249958c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637a6b6e-117"
Server: ECS (amb/6B8A)
Content-Length: 280
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1654570241&si=2b1dbb8222e1c4cfa5a07251b61deb7c&v=1.2.97&lv=1&sn=44742&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.shjxjs.com%2F&tt=%E4%B9%85%E8%8D%89%E5%9C%A8%E7%8E%B0%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%85%8D%E8%B4%B9%E8%B5%84%E6%BA%90_%E4%B9%85%E8%8D%89%E5%9C%A8%E7%BA%BF%E7%A6%8F%E5%88%A9%E8%B5%84%E6%BA%90_%E4%B9%85%E8%8D%89%E5%9C%A8%E7%BA%BF%E7%A6%8F%E5%88%A9%E8%B5%84%E6%BA%90_%E4%B9%85%E4%B9%85%E4%B8%8D%E5%B0%84
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1654570241&si=2b1dbb8222e1c4cfa5a07251b61deb7c&v=1.2.97&lv=1&sn=44742&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.shjxjs.com%2F&tt=%E4%B9%85%E8%8D%89%E5%9C%A8%E7%8E%B0%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%85%8D%E8%B4%B9%E8%B5%84%E6%BA%90_%E4%B9%85%E8%8D%89%E5%9C%A8%E7%BA%BF%E7%A6%8F%E5%88%A9%E8%B5%84%E6%BA%90_%E4%B9%85%E8%8D%89%E5%9C%A8%E7%BA%BF%E7%A6%8F%E5%88%A9%E8%B5%84%E6%BA%90_%E4%B9%85%E4%B9%85%E4%B8%8D%E5%B0%84
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1654570241&si=2b1dbb8222e1c4cfa5a07251b61deb7c&v=1.2.97&lv=1&sn=44742&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.shjxjs.com%2F&tt=%E4%B9%85%E8%8D%89%E5%9C%A8%E7%8E%B0%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%85%8D%E8%B4%B9%E8%B5%84%E6%BA%90_%E4%B9%85%E8%8D%89%E5%9C%A8%E7%BA%BF%E7%A6%8F%E5%88%A9%E8%B5%84%E6%BA%90_%E4%B9%85%E8%8D%89%E5%9C%A8%E7%BA%BF%E7%A6%8F%E5%88%A9%E8%B5%84%E6%BA%90_%E4%B9%85%E4%B9%85%E4%B8%8D%E5%B0%84 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 22 Nov 2022 04:08:42 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=0BE0475E123D37FB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 3c21971ac52d48b28bc0e2d768d5dc0b
c16a57e3bbac09d94911f2b4e18e5bd2482edb0e
5e2b900edf9e90be30511fc524db3cbd2b74b65b01dfdcbbcbdfb1188cd6b3f6
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:08:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 26 Nov 2022 00:38:35 GMT
ETag: "c16a57e3bbac09d94911f2b4e18e5bd2482edb0e"
Last-Modified: Tue, 22 Nov 2022 00:38:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 266
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dece2fd900b50f-OSL
kvhttt.top/03c3cb047014f05117117e4a924df90d.gif
200 OK 310 kB URL HTTP/2 kvhttt.top/03c3cb047014f05117117e4a924df90d.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 310 kB (310102 bytes)
Hash aaaee07863e1fab7724d3b6698c0b4b3
1f75ba89585a8844a2c1e41625f88bae649be17d
41ac392c3cca5e4434c0f80595838a48338c94f8a9c691d4141c7ecb68acb24e
GET /03c3cb047014f05117117e4a924df90d.gif HTTP/1.1
Host: kvhttt.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 310102
last-modified: Wed, 13 Jul 2022 15:28:42 GMT
etag: "62cee4aa-4bb56"
expires: Sat, 10 Dec 2022 21:09:47 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 975535
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J9%2BmiImzbP2vg0pl3%2FzEnbVtJVxlloWY7jF5nFRCwBx2V%2BPtshQbRqcOf9ORqxRld1WXJz043tF6Lry62jJ%2FpPBXn%2FX9u33IF50UWY1Eco%2FByeHWu8KGQFtV9D1G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2ff80eb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
u1033.com/8b73f3976477486d9b4ad5d0adda6a8a.gif
200 OK 218 kB URL HTTP/2 u1033.com/8b73f3976477486d9b4ad5d0adda6a8a.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 218 kB (217826 bytes)
Hash 27ec5c83cb9575b31075dcd71389974e
681c71534d8c5bc8ec8526db4d56f63099809e69
b53d8f0e3870208d18544443eb3f76870a4c79e9a7c745b699bd8060e84fde01
GET /8b73f3976477486d9b4ad5d0adda6a8a.gif HTTP/1.1
Host: u1033.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
etag: "63791710-352e2"
server: nginx
date: Mon, 21 Nov 2022 02:24:58 GMT
content-type: image/gif
last-modified: Sat, 19 Nov 2022 17:49:04 GMT
accept-ranges: bytes
x-cache: HIT from ty8-cdn109-065
content-length: 217826
X-Firefox-Spdy: h2
529723929.com/f570c1027cb24e31b7615a45b9215112.gif
200 OK 584 kB URL HTTP/1.1 529723929.com/f570c1027cb24e31b7615a45b9215112.gif
IP
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 584 kB (584025 bytes)
Hash ebf4ee75bbd43b703e1b1b861ba166e2
c241029604f77ad6b4f56894bc51decfededfde7
d6655adbfa7089435d168e9b1432e524f0bf11be8b80ddc499bef69bd5a376ea
GET /f570c1027cb24e31b7615a45b9215112.gif HTTP/1.1
Host: 529723929.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 22 Nov 2022 04:08:40 GMT
Content-Type: image/gif
Content-Length: 584025
Connection: keep-alive
x-oss-request-id: 637C4B48051F6839342C114B
Accept-Ranges: bytes
ETag: "EBF4EE75BBD43B703E1B1B861BA166E2"
Last-Modified: Wed, 28 Sep 2022 06:57:23 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9573701292697531384
x-oss-storage-class: Standard
Content-MD5: 6/TudbvUO3A+GxuGG6Fm4g==
x-oss-server-time: 2
829355rff.com/6010fb1531bd41f4a889ff19c6f74dea.gif
200 OK 359 kB URL HTTP/1.1 829355rff.com/6010fb1531bd41f4a889ff19c6f74dea.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 359 kB (358672 bytes)
Hash 668143938c3bb811847d83330decd423
f86300da5d773b84bc65d3c901a4767fd8566c48
a06c47f458fdbd01ba8ba0202fb615e94e2353d65098b480ede52a13a645f859
Analyzer Verdict Alert quad9 Sinkholed
GET /6010fb1531bd41f4a889ff19c6f74dea.gif HTTP/1.1
Host: 829355rff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "636753b8-57910"
Date: Tue, 22 Nov 2022 03:33:08 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sun, 06 Nov 2022 06:27:04 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-27
Content-Length: 358672
ocsp.pki.goog/s/gts1p5/KzhrJKWHgbg
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/KzhrJKWHgbg
IP
Hash a543e74e7c062034c4dd3a37c271f90b
4933c90876c33e624978df50ba69f9cab9084971
82870d19abe2432ad16e009fa43a929a9d268ce8b561c6eb300f9f0b66613757
POST /s/gts1p5/KzhrJKWHgbg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 894a80c8dce0c10809872c022309ecbf
8f03e5df7ef099b94afa6ddfe4ed1da61a4986bb
b3aca29cddf84cf1a2fa6cf139337e9ea64c559f7767876416e2434df5c47d8f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B3ACA29CDDF84CF1A2FA6CF139337E9EA64C559F7767876416E2434DF5C47D8F"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20260
Expires: Tue, 22 Nov 2022 09:46:22 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7ae3ba6d978122219f60c3e8c33f75b4
cf1859defef954763790a99cd1e216d6c15afbde
3d1f44d0fa5cf354f5f27eab131d865722235634de9b2ecbbd11cefd24976126
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3D1F44D0FA5CF354F5F27EAB131D865722235634DE9B2ECBBD11CEFD24976126"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1922
Expires: Tue, 22 Nov 2022 04:40:44 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
dimg04.c-ctrip.com/images/0Z05r12000a1q2ru71C64.gif
200 OK 415 kB URL HTTP/2 dimg04.c-ctrip.com/images/0Z05r12000a1q2ru71C64.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 415 kB (414559 bytes)
Hash 1a2cba8175d957d2379d06e6d2d4250d
190eb918616fa53aaca8a53b917f2627e626fecc
17e78ffe065be76212de6b960082ea287cc0e712b6f170f44c63e2144ec14c84
GET /images/0Z05r12000a1q2ru71C64.gif HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 414559
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=11420342
expires: Mon, 03 Apr 2023 08:27:44 GMT
date: Tue, 22 Nov 2022 04:08:42 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash a660cd6e2c96e51131f5addf2a90567e
0751bc571a82300bd67dbeeeea310b4ce4399106
b831ac1d842f800e41d92f1f2035592a21c157c908577d225d973f05f3269f06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=137407
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637bc109-118"
Expires: Wed, 23 Nov 2022 18:18:49 GMT
Last-Modified: Mon, 21 Nov 2022 18:18:49 GMT
Server: nginx
Content-Length: 280
kvkaaa.top/bb7f858c0dad171784517c02e7bff891.gif
200 OK 1.6 MB URL HTTP/2 kvkaaa.top/bb7f858c0dad171784517c02e7bff891.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 1.6 MB (1590489 bytes)
Hash 59648e1a4d52551c26255ff6bc625648
165fbacafad21065e9faa33c5e3752cd463549ad
eb53352fe423b9358ba49249e57fe3d55746d854c681f6c45baedb23eb2196e5
GET /bb7f858c0dad171784517c02e7bff891.gif HTTP/1.1
Host: kvkaaa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 1590489
last-modified: Sat, 01 Oct 2022 05:56:30 GMT
etag: "6337d68e-1844d9"
expires: Mon, 12 Dec 2022 14:03:31 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 828311
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DrlXm9RNhonVK2UlKcyifhCEiyBQjwDPlLOo3laot0woJ7x2f3nm1vVHAku%2F547sV4rHmoy5lD1h%2Fbx%2FMdykX2E0rI%2BUlrorvT5g5PF8%2F75aFisKVwZ3aXiIP5or"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece2f6c017312-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0105j12000a16nl1n59E7.gif?proc=autoorient
200 OK 477 kB URL HTTP/2 dimg04.c-ctrip.com/images/0105j12000a16nl1n59E7.gif?proc=autoorient
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 477 kB (477289 bytes)
Hash 760cc21f91ee02e848650627ffa47ae2
22df8e62d12977ffd032aba17e5fd7632032633f
2b36a60cb734e5ebcaa9ad4d93f914157e563da89c4e08231bd02b72678875bd
GET /images/0105j12000a16nl1n59E7.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 477289
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=11108383
expires: Thu, 30 Mar 2023 17:48:25 GMT
date: Tue, 22 Nov 2022 04:08:42 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/03950120009rs7dn26B5E.gif
200 OK 894 kB URL HTTP/2 dimg04.c-ctrip.com/images/03950120009rs7dn26B5E.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 894 kB (893726 bytes)
Hash 1e34697200f13da14c5bfabeba617325
9a18ed38d5d385f885c28a4280b4c61302745b65
b63a862a0f65ff9f685e9b67fd171a6df96878469b0a85d1da2f644399c0409f
GET /images/03950120009rs7dn26B5E.gif HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 893726
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=6301660
expires: Fri, 03 Feb 2023 02:36:22 GMT
date: Tue, 22 Nov 2022 04:08:42 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 92c65b6fc113a99e8c1f70bd354cade2
060abffbc4ef4b56b7e8708a0c6501544b890193
521f7e3731f62e570ad4bc3995ca63814f26ed376ddcdb6025eec801baf8724e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=124436
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637b8e5e-116"
Expires: Wed, 23 Nov 2022 14:42:38 GMT
Last-Modified: Mon, 21 Nov 2022 14:42:38 GMT
Server: nginx
Content-Length: 278
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 685d13e399fca18844ea909b83a8e71f
24375673de9417bac9ea7ca4abc5ad8b93265454
5511187a2fb101d755d8e8401bf23008c986e7b2eef85d071788f9bcc5df84aa
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5511187A2FB101D755D8E8401BF23008C986E7B2EEF85D071788F9BCC5DF84AA"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21400
Expires: Tue, 22 Nov 2022 10:05:22 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c6d9376d4e44a7dd85eb4972f7b809f4
d3e8fb5a729bbfdda06d540d1983612f68ae74d9
984d3622313d746b04078cf268e2aa735187bc048b740f4fe6f1866b0a32594d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "984D3622313D746B04078CF268E2AA735187BC048B740F4FE6F1866B0A32594D"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21582
Expires: Tue, 22 Nov 2022 10:08:24 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
nvhbbb.top/2bce8945ac6ae3579798b563e15db7a0.gif
200 OK 54 kB URL HTTP/2 nvhbbb.top/2bce8945ac6ae3579798b563e15db7a0.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Hash 1b0debb707f7274e95ae467969832663
7787ea12e377677eccfcbba7f7fc14b18602ddad
688c201ad0040278d8431382eeeb71ea318699cc7d4ccf167132e5818473d55f
GET /2bce8945ac6ae3579798b563e15db7a0.gif HTTP/1.1
Host: nvhbbb.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 53701
last-modified: Tue, 27 Sep 2022 05:36:32 GMT
etag: "63328be0-d1c5"
expires: Sun, 27 Nov 2022 07:55:28 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2146394
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qgnmGC83D2QWBPqLVX5lAPUpSV5XRSJdr7AleFtQsMj%2BAWQADs2FbdlTeIHgz51LvftXRXl9f9TmR6ls%2FYaXiRlStbBS9u17dZDLhmWNhbzyu0HJ1wknXJ2CAtKw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece323fadb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 3065c5f42001d42d194f04bb5ffa7769
9fd829ec67f3fcb1e50484c91bc55d5cdc930ff6
34636a09b858d468b49c20b8ac9c01ba1fad0b274fc1ea51fca477579d400d8d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "34636A09B858D468B49C20B8AC9C01BA1FAD0B274FC1EA51FCA477579D400D8D"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9638
Expires: Tue, 22 Nov 2022 06:49:20 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 0a4c734c54030151628910c9f0431b77
a7f16773cd93c107d94ffc214480b9a6599e9d1b
eb5148d1d90a65a847798a563e41b3bfa3e824c93ebb246409c33fc74e55d54a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EB5148D1D90A65A847798A563E41B3BFA3E824C93EBB246409C33FC74E55D54A"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Tue, 22 Nov 2022 10:08:04 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash ad1cdd58e9ef8c2e85750f9713e0df6a
ebfe599df924cb6b2c6b339ea6b4e17ab7acc85c
67bd14916953000791409e0ca404ebba093aea2b48892ba09e3554192249958c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Last-Modified: Tue, 22 Nov 2022 04:08:42 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 727 B IP
Hash a80e58af8782f90e9fa4650b74da3959
6352fe4326d96ba1708392fbae29d322a2098a8e
e9377aacd3e84ccf3654edbbdac2ee1c3d640b2691862ec5951b9bd437a98ce0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6538
Cache-Control: max-age=156918
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637bf3b7-2d7"
Expires: Wed, 23 Nov 2022 23:44:00 GMT
Last-Modified: Mon, 21 Nov 2022 21:55:03 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash a80e58af8782f90e9fa4650b74da3959
6352fe4326d96ba1708392fbae29d322a2098a8e
e9377aacd3e84ccf3654edbbdac2ee1c3d640b2691862ec5951b9bd437a98ce0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6538
Cache-Control: max-age=156918
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637bf3b7-2d7"
Expires: Wed, 23 Nov 2022 23:44:00 GMT
Last-Modified: Mon, 21 Nov 2022 21:55:03 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 278 B IP
Hash 94a731815f9510f8877d3e57c8555ff8
f9ac158c726eceeeb0702a01f2b30434d0c1ad65
25d639a1d8b82ad6428615082610c5b4081d0cc542bb039d8ec86efd1860b390
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=148947
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637bee1d-116"
Expires: Wed, 23 Nov 2022 21:31:09 GMT
Last-Modified: Mon, 21 Nov 2022 21:31:09 GMT
Server: nginx
Content-Length: 278
kvtddd.top/ec9fcd758df74f805f29f72e8545d13b.gif
200 OK 902 kB URL HTTP/2 kvtddd.top/ec9fcd758df74f805f29f72e8545d13b.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 902 kB (902313 bytes)
Hash 8b4a95ea7cfbb7fb4d2b18efca5145f3
d2966ecbeb7369620cce5dbcd15d0fe591d79648
dd5ff25f4d6931bd3d2ef86c1a8901853ee2503fd2d6edb264a61abb37c2b002
GET /ec9fcd758df74f805f29f72e8545d13b.gif HTTP/1.1
Host: kvtddd.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 902313
last-modified: Sat, 12 Mar 2022 15:17:28 GMT
etag: "622cb988-dc4a9"
expires: Sun, 04 Dec 2022 22:50:23 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1487899
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HjRMXub8MzUA7Ikq%2FdH%2BfBp9iubscq1G6khz5qeK%2B169IDUVtKxDp1a0rbtcaGt9sS5f1VQm0Nd9jVYqdKmwmsV%2BoCDGRode6YHa7uVd697tndRnUvWjmOCmcwoD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece321c2276c9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/AQDLc79Bg-4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/AQDLc79Bg-4
IP
Hash 9fbe1f40d188a800db46d1c2618ec2d8
f3a34d3fac7cd240b8990fec075b64e9bec27d00
2d13957637a7cf628e4c29faa568b987cb686858e7075a690527b725264fbf48
POST /s/gts1p5/AQDLc79Bg-4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
383tupian.oss-cn-shenzhen.aliyuncs.com/960x60.gif
200 OK 299 kB URL HTTP/1.1 383tupian.oss-cn-shenzhen.aliyuncs.com/960x60.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 299 kB (299398 bytes)
Hash f4b7967855549e81f65598b93a43d9db
6ab53e8a9af687c1dddad236af323080a04499cf
2e95dc2082af7cc833e0aef825efc261c04b69e3ec4350203854008cc4a12dc6
GET /960x60.gif HTTP/1.1
Host: 383tupian.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 22 Nov 2022 04:08:41 GMT
Content-Type: image/gif
Content-Length: 299398
Connection: keep-alive
x-oss-request-id: 637C4B49B1F52537311D515B
Accept-Ranges: bytes
ETag: "F4B7967855549E81F65598B93A43D9DB"
Last-Modified: Sun, 23 Oct 2022 07:06:26 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8810428828543929982
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: 9LeWeFVUnoH2VZi5OkPZ2w==
x-oss-server-time: 2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 894a80c8dce0c10809872c022309ecbf
8f03e5df7ef099b94afa6ddfe4ed1da61a4986bb
b3aca29cddf84cf1a2fa6cf139337e9ea64c559f7767876416e2434df5c47d8f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B3ACA29CDDF84CF1A2FA6CF139337E9EA64C559F7767876416E2434DF5C47D8F"
Last-Modified: Mon, 21 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20260
Expires: Tue, 22 Nov 2022 09:46:22 GMT
Date: Tue, 22 Nov 2022 04:08:42 GMT
Connection: keep-alive
kvtrrr.top/65e7e65f41ad1c2cb20bb39e08e6b041.gif
200 OK 258 kB URL HTTP/2 kvtrrr.top/65e7e65f41ad1c2cb20bb39e08e6b041.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 258 kB (257738 bytes)
Hash 8f0b0917afe5412d61fc23697edd51f8
791d2fbb2b04d9a40ca02f0897934b0358e110c7
aacf40f19988d3415b5b7d0ab96d4eb2687221968ad7b122180ef8d2d8807c80
Analyzer Verdict Alert quad9 Sinkholed
GET /65e7e65f41ad1c2cb20bb39e08e6b041.gif HTTP/1.1
Host: kvtrrr.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 257738
last-modified: Mon, 21 Nov 2022 07:03:46 GMT
etag: "637b22d2-3eeca"
expires: Wed, 21 Dec 2022 07:19:40 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 74942
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EK3Euhk1ad%2BTksi%2BrCKuRq9WAupB0OspZhgMAFBZtWmlPjbJ7fVUigf0ZsPlkruzGFjaphIoAuti5fiuGYRtC%2FE8F0AG6cICQHNrHMpj%2ByxE9RLhx%2BFsKNBvBIet"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece336906b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/4ba0eddc54134c619c5f6701dbc94c60
200 OK 385 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/4ba0eddc54134c619c5f6701dbc94c60
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 385 kB (384932 bytes)
Hash 6b1533d50f7375dff2f5b3969e7ec1da
6dfd13e56902faedb34a9d2e6d27e51605ddb0f1
2f235ff0c8fd65b40619ef5448206c505716aa41dcee03850c00b1352c986f7c
GET /obj/tos-cn-i-dy/4ba0eddc54134c619c5f6701dbc94c60 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 384932
date: Thu, 17 Nov 2022 09:53:38 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 17 Nov 2022 09:53:03 GMT
nw-session-id: 2022111717530301020908015308A52A92bdqvm02dy
nw-session-trace: 2022-11-17T17:53:03.852532667+08:00 58
x-bdcdn-cache-status: TCP_HIT
x-length: 384932
x-powered-by: ImageX
x-response-date: Thu, 17 Nov 2022 17:53:03 GMT
x-tt-logid: 2022111717530301020908015308A52A92
via: n131-120-203, cache5.l2de2[0,0,206-0,H], cache26.l2de2[0,0], cache26.l2de2[1,0], cache3.se1[0,0,200-0,H], cache2.se1[1,0]
x-request-ip: fdbd:dc03:15:231::134
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 01da6d350c4cffac2c410f84746e18233c6962e7fd10a4600481acacfcbf16320a894ee93489832834b2461544494a335c96ebd167bd1056c701078f32fbeb9006730d9f18cf8bc93727e55ea7a124385fa4b7369b4e4c92b343b0813281a82a26
x-response-lb: image
ali-swift-global-savetime: 1668678818
age: 411304
x-cache: HIT TCP_MEM_HIT dirn:1:52475550
x-swift-savetime: Thu, 17 Nov 2022 09:55:59 GMT
x-swift-cachetime: 31535859
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9616690901226574878e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/3809564fecbe4e9c8845a85d95c7a81d
200 OK 498 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/3809564fecbe4e9c8845a85d95c7a81d
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 70\012- data
Size 498 kB (497844 bytes)
Hash 9d43f768f1897d7d3fd5ba803e1a770a
ff8fb3f427df7b6cfef65fcae162e0abab9474a4
00fe4f1ccfc623639abadf4e745aca22b946365e932a7a794d6c108fee0d85af
GET /obj/tos-cn-i-dy/3809564fecbe4e9c8845a85d95c7a81d HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 497844
date: Fri, 21 Oct 2022 06:45:44 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Fri, 21 Oct 2022 06:39:38 GMT
nw-session-id: 202210211439380101311360293842A52Fgx4cc03dy
nw-session-trace: 2022-10-21T14:39:38.59145035+08:00 28
x-bdcdn-cache-status: TCP_HIT
x-length: 497844
x-powered-by: ImageX
x-response-date: Fri, 21 Oct 2022 14:39:38 GMT
x-tt-logid: 202210211439380101311360293842A52F
via: n132-067-168, cache19.l2de2[0,0,206-0,H], cache11.l2de2[2,0], cache11.l2de2[2,0], cache1.se1[0,0,200-0,H], cache2.se1[1,0]
x-request-ip: fdbd:dc03:14:130::18
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 010bb5ec5b1b5f1e47ca91c2b81197a74f8048ba6c9105f29b60a5a5654edfd2e74a44ae94b6f429eb61763780aa091400b761df5690404fbe40d4d865710f70cd7a52fd33d8906f8ae44a9cba323b06e589132522b5dde5de19e056fb46c2d0ef
x-response-lb: image
ali-swift-global-savetime: 1666334744
age: 2755378
x-cache: HIT TCP_MEM_HIT dirn:0:1414489287
x-swift-savetime: Fri, 21 Oct 2022 07:27:56 GMT
x-swift-cachetime: 31533468
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9616690901227064932e
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 97ed645220914519878d8b7779aac6dc
39d995f2b83dbe6dce9b77c8cd68d35007720651
8bcfb3773745a8479a55d1cdef1f4ecf5c40b0a4c4fa3ff53677e4d6b3569852
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=86294
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637af960-116"
Expires: Wed, 23 Nov 2022 04:06:56 GMT
Last-Modified: Mon, 21 Nov 2022 04:06:56 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 92c65b6fc113a99e8c1f70bd354cade2
060abffbc4ef4b56b7e8708a0c6501544b890193
521f7e3731f62e570ad4bc3995ca63814f26ed376ddcdb6025eec801baf8724e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=124436
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637b8e5e-116"
Expires: Wed, 23 Nov 2022 14:42:38 GMT
Last-Modified: Mon, 21 Nov 2022 14:42:38 GMT
Server: nginx
Content-Length: 278
tpcdnde88de.com/79tp/960x60-2.gif
200 OK 322 kB URL HTTP/2 tpcdnde88de.com/79tp/960x60-2.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 322 kB (322376 bytes)
Hash c41a909fa1e62a4ebc583626a93c05c1
10adfd5b6d78d04cc93c76b14a29fc93ce4f2708
b60310fa346cdc56ed271a244d9c4f1e137e0fd46571802f25c0c8e09131aa4e
GET /79tp/960x60-2.gif HTTP/1.1
Host: tpcdnde88de.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:27 GMT
content-type: image/gif
content-length: 322376
last-modified: Sat, 25 Jun 2022 12:15:37 GMT
etag: "62b6fc69-4eb48"
expires: Wed, 21 Dec 2022 08:24:20 GMT
cache-control: max-age=2592000
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
72agg.com/gg/960x60-2.gif
200 OK 567 kB URL HTTP/2 72agg.com/gg/960x60-2.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 567 kB (566629 bytes)
Hash c9fa1542af8b7e568dc7b3a56522b833
1449fff789834cb44c300d12d770eeb251a4bbd5
7db19a9e96ed52f61b3b4c76bf6cac9259ae0b3e9d18eb597320c30a0e4e1e90
GET /gg/960x60-2.gif HTTP/1.1
Host: 72agg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 04:10:57 GMT
content-type: image/gif
content-length: 566629
last-modified: Tue, 01 Nov 2022 07:49:47 GMT
etag: "6360cf9b-8a565"
expires: Thu, 22 Dec 2022 04:10:57 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
nvhaaa.top/cf4287991556df0490caf209d0ed91fe.gif
200 OK 318 kB URL HTTP/2 nvhaaa.top/cf4287991556df0490caf209d0ed91fe.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 318 kB (317903 bytes)
Hash fb3f1f47e7cd3c017411f4a08cb222b7
9ef0eebfa48d7d3c66398066ad781c2e4c5c2fce
864310898b7de94e28b82e0e318d801e6537365a75078d2f94b98a25c81e98a9
GET /cf4287991556df0490caf209d0ed91fe.gif HTTP/1.1
Host: nvhaaa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 317903
last-modified: Sat, 13 Aug 2022 11:03:31 GMT
etag: "62f78503-4d9cf"
expires: Tue, 20 Dec 2022 20:02:12 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 115590
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8y9475U8sF5Xx0zaKAHFfum25kGWD0AZcdaBGvg12BkoKMEbHvhXVw1sG%2BAIAHgHS8FtEvM33kVNt8tgO5zHKyPuFvodTrnLL4w0EXXhvVRS8bVnJTTZSEI0rxY%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece335b8475cf-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 94a731815f9510f8877d3e57c8555ff8
f9ac158c726eceeeb0702a01f2b30434d0c1ad65
25d639a1d8b82ad6428615082610c5b4081d0cc542bb039d8ec86efd1860b390
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2751
Cache-Control: max-age=151698
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:42 GMT
Etag: "637bee1d-116"
Expires: Wed, 23 Nov 2022 22:17:00 GMT
Last-Modified: Mon, 21 Nov 2022 21:31:09 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 278
tpcdnde88de.com/235tp/960x60.gif
200 OK 590 kB URL HTTP/2 tpcdnde88de.com/235tp/960x60.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 590 kB (590255 bytes)
Hash d9d8d54236add0a03997175e250e51ef
b65ebc88346d3a308dbf4791ade0637330df8895
81954cd3768276219bbf7aca8ce82881fbda51a1721ef78d559cdd7772800571
GET /235tp/960x60.gif HTTP/1.1
Host: tpcdnde88de.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:28 GMT
content-type: image/gif
content-length: 590255
last-modified: Wed, 15 Jun 2022 13:02:58 GMT
etag: "62a9d882-901af"
expires: Wed, 21 Dec 2022 08:57:29 GMT
cache-control: max-age=2592000
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
kvteee.top/68a7807de3933bf7079116fa9df99e6f.gif
200 OK 366 kB URL HTTP/2 kvteee.top/68a7807de3933bf7079116fa9df99e6f.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 366 kB (366444 bytes)
Hash 86371c51bf2086f3a40f0e438246b662
9da793de9c620485ee91b88413b256c69dc774c5
8155b44efd09301dca9ec4bdab8e3e6445d1564fe580edd5f7575c9289843ccf
GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1
Host: kvteee.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shjxjs.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 366444
last-modified: Fri, 19 Aug 2022 17:02:28 GMT
etag: "62ffc224-5976c"
expires: Sat, 26 Nov 2022 13:27:02 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2212900
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ejLNibId5svN5wWS6oab%2F2%2F5tqhw6ZFB63uwit2Q0B%2FWI%2FccC1%2FSapUflm48BbUhx7O9rG3jYHd9ziYGKfGaqz2vD6OafmeCYTkRTzu9mUB8gSRMIJpeeLTxybx6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76dece346ce97768-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 97ed645220914519878d8b7779aac6dc
39d995f2b83dbe6dce9b77c8cd68d35007720651
8bcfb3773745a8479a55d1cdef1f4ecf5c40b0a4c4fa3ff53677e4d6b3569852
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=86293
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:43 GMT
Etag: "637af960-116"
Expires: Wed, 23 Nov 2022 04:06:56 GMT
Last-Modified: Mon, 21 Nov 2022 04:06:56 GMT
Server: nginx
Content-Length: 278
ocsp.pki.goog/s/gts1p5/AQDLc79Bg-4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/AQDLc79Bg-4
IP
Hash 9fbe1f40d188a800db46d1c2618ec2d8
f3a34d3fac7cd240b8990fec075b64e9bec27d00
2d13957637a7cf628e4c29faa568b987cb686858e7075a690527b725264fbf48
POST /s/gts1p5/AQDLc79Bg-4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:08:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kaiyuan-advertising.oss-cn-hongkong.aliyuncs.com/960X60.gif
200 OK 254 kB URL HTTP/1.1 kaiyuan-advertising.oss-cn-hongkong.aliyuncs.com/960X60.gif
IP
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 254 kB (253519 bytes)
Hash f744e995971941b6a95fcd2636f5a545
ac9c1230e04eab9e31512d2afe440fe5f0367dc5
59b1a138fa72df587e61916179965cbd819f91aec53ce6ab606949a7e06b3063
GET /960X60.gif HTTP/1.1
Host: kaiyuan-advertising.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 22 Nov 2022 04:08:42 GMT
Content-Type: image/gif
Content-Length: 253519
Connection: keep-alive
x-oss-request-id: 637C4B4A533755313700B448
Accept-Ranges: bytes
ETag: "F744E995971941B6A95FCD2636F5A545"
Last-Modified: Thu, 13 Oct 2022 11:11:01 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17987192695826819902
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
Content-MD5: 90TplZcZQbapX80mNvWlRQ==
x-oss-server-time: 2
ggt999.oss-cn-hangzhou.aliyuncs.com/ky/ky96060a.gif
200 OK 361 kB URL HTTP/1.1 ggt999.oss-cn-hangzhou.aliyuncs.com/ky/ky96060a.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 361 kB (360564 bytes)
Hash 6ddb2c594cffa429b9a8d6e6d769cc55
249205769506cc866b2fd713c6a081bfda665ce6
97e69b0591caab530f2423032146f83d16a5e3ad35b0c0953c4be1c2e63e9ce8
GET /ky/ky96060a.gif HTTP/1.1
Host: ggt999.oss-cn-hangzhou.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 22 Nov 2022 04:08:42 GMT
Content-Type: image/gif
Content-Length: 360564
Connection: keep-alive
x-oss-request-id: 637C4B4A818A31363115FFA2
Accept-Ranges: bytes
ETag: "6DDB2C594CFFA429B9A8D6E6D769CC55"
Last-Modified: Sun, 06 Nov 2022 07:48:55 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8471982680050803013
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: bdssWUz/pCm5qNbm12nMVQ==
x-oss-server-time: 3
sz88.oss-cn-shenzhen.aliyuncs.com/js960x80%20.gif
200 OK 339 kB URL HTTP/1.1 sz88.oss-cn-shenzhen.aliyuncs.com/js960x80%20.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 339 kB (339049 bytes)
Hash 120f3a01e40b1e58017422e07a358e7b
201b8030f1dc57e1c5f503ab15459990f49c0850
f834cdc6d3baa837bcd3cb5dd42ddafbb903ccc07022dcca2822b451c6a0f7a1
GET /js960x80%20.gif HTTP/1.1
Host: sz88.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 22 Nov 2022 04:08:42 GMT
Content-Type: image/gif
Content-Length: 339049
Connection: keep-alive
x-oss-request-id: 637C4B4A5A8AEE3031A2F79C
Accept-Ranges: bytes
ETag: "120F3A01E40B1E58017422E07A358E7B"
Last-Modified: Sun, 20 Nov 2022 08:09:52 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11820530545471216528
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: Eg86AeQLHlgBdCLgejWOew==
x-oss-server-time: 1
sz88.oss-cn-shenzhen.aliyuncs.com/af/q960x80-6.gif
200 OK 562 kB URL HTTP/1.1 sz88.oss-cn-shenzhen.aliyuncs.com/af/q960x80-6.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 562 kB (562130 bytes)
Hash 8beed805ef37d0fa42646c105c8aadd8
48ce0717f037a6fb1f489ff1da3537a00ff0f47b
9df49f47b95763d2234554adf562f5a0ba5eb3910a9f7f01a5d90e5f425eccce
GET /af/q960x80-6.gif HTTP/1.1
Host: sz88.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 22 Nov 2022 04:08:42 GMT
Content-Type: image/gif
Content-Length: 562130
Connection: keep-alive
x-oss-request-id: 637C4B4A54280A36313C998B
Accept-Ranges: bytes
ETag: "8BEED805EF37D0FA42646C105C8AADD8"
Last-Modified: Tue, 27 Sep 2022 07:43:47 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15479893720264865523
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: i+7YBe830PpCZGwQXIqt2A==
x-oss-server-time: 1
p.qlogo.cn/qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7xHewExic0gnkb8ycBV8hScWAsnRQWRAJGLgqEqfiaFfFU/0
200 OK 231 kB URL HTTP/2 p.qlogo.cn/qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7xHewExic0gnkb8ycBV8hScWAsnRQWRAJGLgqEqfiaFfFU/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 231 kB (231270 bytes)
Hash 2f2c8ec52149276d3ef1c493494dcdd9
f6f8e0965653c402469862d8cdc7e57df1ddc846
a1274ed00e690cfe012e394ca855570f6ebb32e625385597f8ecb5110e444a08
GET /qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7xHewExic0gnkb8ycBV8hScWAsnRQWRAJGLgqEqfiaFfFU/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/gif
content-length: 231270
vary: Accept,Origin
last-modified: Mon, 26 Sep 2022 14:50:11 GMT
cache-control: max-age=2592000
x-delay: 127 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 231270
chid: 0
fid: 0
x-nws-log-uuid: 40b2e6b3-ea75-41d1-beae-5f7d3d9500b9
X-Firefox-Spdy: h2
yzf.qq.com/fsna/kf-file/kf_pic/20221120/KFPIC_0563943bbd858dcca_WXIMAGE_342716265df4488d9ee0578afc90d5c7.jpg
200 OK 0 B URL HTTP/2 yzf.qq.com/fsna/kf-file/kf_pic/20221120/KFPIC_0563943bbd858dcca_WXIMAGE_342716265df4488d9ee0578afc90d5c7.jpg
IP
GET /fsna/kf-file/kf_pic/20221120/KFPIC_0563943bbd858dcca_WXIMAGE_342716265df4488d9ee0578afc90d5c7.jpg HTTP/1.1
Host: yzf.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/jpeg
set-cookie: tgw_l7_route=f690564c543fe1be3bf9ecd86f047974; Expires=Tue, 22-Nov-2022 04:13:41 GMT; Path=/
server: nginx/1.12.2
last-modified: Sun, 20 Nov 2022 16:17:34 GMT
x-content-type-options: nosniff
x-xss-protection: 1
x-request-id: d21c10ba5d1f88c25ed60411c9b4d859
content-encoding: gzip
X-Firefox-Spdy: h2
img.u1669.com/images/63523ea35fe50f0585d3ef84.gif
302 Found 0 B URL HTTP/2 img.u1669.com/images/63523ea35fe50f0585d3ef84.gif
IP
GET /images/63523ea35fe50f0585d3ef84.gif HTTP/1.1
Host: img.u1669.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/3809564fecbe4e9c8845a85d95c7a81d
cache-control: max-age=3600
X-Firefox-Spdy: h2
img.u1773.com/images/636b34de14dd2ea30a790fe7.gif
302 Found 0 B URL HTTP/2 img.u1773.com/images/636b34de14dd2ea30a790fe7.gif
IP
GET /images/636b34de14dd2ea30a790fe7.gif HTTP/1.1
Host: img.u1773.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/4ba0eddc54134c619c5f6701dbc94c60
cache-control: max-age=3600
X-Firefox-Spdy: h2
u1102.com/d97fe322993444ccb8fa7cd5a76002c9.gif
200 OK 0 B URL HTTP/2 u1102.com/d97fe322993444ccb8fa7cd5a76002c9.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
GET /d97fe322993444ccb8fa7cd5a76002c9.gif HTTP/1.1
Host: u1102.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
etag: "635ce297-54ee0"
server: nginx
date: Tue, 22 Nov 2022 03:34:47 GMT
content-type: image/gif
last-modified: Sat, 29 Oct 2022 08:21:43 GMT
accept-ranges: bytes
x-cache: HIT from yd11_02-cdn-g01-la2-37
content-length: 347872
X-Firefox-Spdy: h2
yzf.qq.com/fsna/kf-file/kf_pic/20221120/KFPIC_49b7bab875a830319_WXIMAGE_0ea6a62bfc164e5fbfaf8afd9288c3d7.jpg
200 OK 0 B URL HTTP/2 yzf.qq.com/fsna/kf-file/kf_pic/20221120/KFPIC_49b7bab875a830319_WXIMAGE_0ea6a62bfc164e5fbfaf8afd9288c3d7.jpg
IP
GET /fsna/kf-file/kf_pic/20221120/KFPIC_49b7bab875a830319_WXIMAGE_0ea6a62bfc164e5fbfaf8afd9288c3d7.jpg HTTP/1.1
Host: yzf.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shjxjs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 04:08:42 GMT
content-type: image/jpeg
set-cookie: tgw_l7_route=f690564c543fe1be3bf9ecd86f047974; Expires=Tue, 22-Nov-2022 04:13:41 GMT; Path=/
server: nginx/1.12.2
last-modified: Sun, 20 Nov 2022 16:17:18 GMT
x-content-type-options: nosniff
x-xss-protection: 1
x-request-id: 3f9e21b8c6c16950f1e8f7e2d2a0ba3d
content-encoding: gzip
X-Firefox-Spdy: h2
23.224.194.178
104.21.234.198
3.36.126.81
103.170.15.47
47.75.19.37
104.110.17.24
47.110.23.69
93.184.220.29
43.154.254.32
47.246.44.205