Overview

URLnils-holgerson.com/
IP 172.121.89.17 (United States)
ASN#18779 EGIHOSTING
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-29 04:05:51 UTC
StatusLoading report..
IDS alerts0
Blocklist alert19
urlquery alerts No alerts detected
Tags None

Domain Summary (78)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
img.9219x.com (1) 0 No data No data 185.239.226.23 Unknown ranking
585227ybn.com (1) 0 No data No data 103.170.15.105 Unknown ranking
zerossl.ocsp.sectigo.com (7) 4049 No data No data 104.18.32.68
6937555.com (1) 0 2020-11-21 09:40:36 UTC 2021-01-28 05:04:40 UTC 104.149.145.170 Unknown ranking
e1.o.lencr.org (4) 6159 No data No data 23.36.76.226
img.2557u.com (1) 0 No data No data 185.239.226.23 Unknown ranking
kvkhhh.top (1) 0 2022-11-08 06:35:52 UTC 2022-11-28 15:52:00 UTC 104.21.57.36 Unknown ranking
539397377.com (1) 0 No data No data 47.75.19.145 Unknown ranking
8499225.com (1) 0 No data No data 162.209.128.164 Unknown ranking
www.nils-holgerson.com (4) 0 2013-08-19 01:22:20 UTC 2022-11-28 12:04:26 UTC 172.121.89.17 Unknown ranking
tt.1468tu.com (2) 0 No data No data 43.153.174.204 Unknown ranking
ob699.cc (1) 0 2022-09-25 21:28:39 UTC 2022-11-28 12:04:43 UTC 45.153.131.58 Unknown ranking
acoozzh.top (1) 439448 2022-01-10 01:59:44 UTC 2022-11-28 15:52:12 UTC 172.67.189.203
sszhan.oss-cn-shenzhen.aliyuncs.com (1) 0 2022-08-12 16:47:21 UTC 2022-11-28 12:04:30 UTC 120.77.166.119 Domain (aliyuncs.com) ranked at: 1959
p.qlogo.cn (2) 48578 2014-01-15 11:11:45 UTC 2020-05-03 00:28:53 UTC 43.129.255.47
628536nyv.com (1) 0 No data No data 103.170.15.105 Unknown ranking
dvcasha2.ocsp-certum.com (3) 71753 2014-11-27 08:04:42 UTC 2020-02-10 00:10:06 UTC 23.36.79.10
kveff.com (1) 0 2022-08-16 11:07:26 UTC 2022-11-29 01:45:47 UTC 64.32.13.142 Unknown ranking
sz88.oss-cn-shenzhen.aliyuncs.com (2) 0 2022-06-01 18:03:12 UTC 2022-11-29 01:45:47 UTC 120.77.166.72 Domain (aliyuncs.com) ranked at: 1959
339282bdb.com (2) 0 No data No data 45.61.212.118 Unknown ranking
i.ibb.co (1) 13485 2018-11-25 10:13:48 UTC 2022-11-28 09:04:05 UTC 162.19.58.160
si1.go2yd.com (2) 325918 2018-06-23 18:58:20 UTC 2020-04-26 02:29:18 UTC 163.171.140.79
nvhbbb.top (2) 0 2022-04-10 08:43:59 UTC 2022-11-29 02:05:34 UTC 104.21.55.74 Unknown ranking
img.1129555.com (1) 0 No data No data 185.239.226.23 Unknown ranking
static.qwahk.com (1) 0 No data No data 154.39.104.60 Unknown ranking
ocsp.digicert.com (16) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
nils-holgerson.com (1) 0 2016-05-06 14:31:28 UTC 2022-11-28 12:04:21 UTC 172.121.89.17 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 34.214.236.46
ocsp.buypass.com (4) 157566 2018-06-15 05:12:14 UTC 2020-04-24 21:44:29 UTC 23.36.76.129
lbfm.lbpictupian.com (27) 0 2022-10-09 16:47:38 UTC 2022-11-28 20:18:07 UTC 104.22.12.214 Unknown ranking
5199qq.com (1) 0 No data No data 45.61.212.47 Unknown ranking
5593qq.com (1) 0 2017-04-17 16:53:24 UTC 2017-09-11 10:27:49 UTC 103.170.15.115 Unknown ranking
zhibo128x.xyz (2) 0 No data No data 154.83.25.141 Unknown ranking
kvemm.com (2) 222018 2021-10-18 01:51:02 UTC 2022-11-29 01:23:35 UTC 45.154.214.206
api.79zxcv.com (3) 0 No data No data 18.141.190.97 Unknown ranking
ocsp.globalsign.com (2) 2075 2012-07-20 17:46:16 UTC 2020-05-02 20:58:10 UTC 104.18.20.226
push.zhanzhang.baidu.com (1) 57139 2015-07-22 05:44:02 UTC 2020-04-25 10:56:18 UTC 112.34.113.148
kvmaa.com (2) 0 2015-11-06 04:44:54 UTC 2022-11-29 02:05:33 UTC 170.178.176.170 Unknown ranking
fmlb.netlbtu.com (3) 187701 2021-09-14 11:57:06 UTC 2022-11-29 02:18:12 UTC 172.247.77.90
yzf.qq.com (2) 627844 No data No data 113.96.208.98
kvhiii.top (2) 0 2022-02-24 17:36:26 UTC 2022-11-28 15:09:06 UTC 104.21.234.203 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-28 05:55:58 UTC 34.102.187.140
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
223969ufy.com (1) 0 No data No data 103.170.15.95 Unknown ranking
ocsp.digicert.cn (4) 37572 No data No data 47.246.44.205
ocsp.sectigo.com (15) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 104.18.32.68
362728tdg.com (1) 0 No data No data 103.170.15.90 Unknown ranking
img.9197x.com (1) 0 No data No data 185.239.226.23 Unknown ranking
www.jxys88.net (3) 0 2022-01-15 01:49:35 UTC 2022-11-28 12:04:27 UTC 173.231.12.68 Unknown ranking
dimg04.c-ctrip.com (1) 139731 2014-05-08 16:11:11 UTC 2019-09-28 12:59:51 UTC 104.110.17.24
ocsp.pki.goog (2) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.35
pic.picnewsss.com (1) 0 2022-06-19 23:06:23 UTC 2022-11-28 15:52:00 UTC 23.225.139.251 Unknown ranking
r3.o.lencr.org (22) 344 No data No data 23.36.76.226
200.benbenys.com (1) 0 2022-11-10 04:20:23 UTC 2022-11-28 12:04:31 UTC 23.224.61.222 Unknown ranking
p3.douyinpic.com (7) 23536 No data No data 47.246.44.226
max002.top (1) 0 2022-11-22 10:48:42 UTC 2022-11-29 01:45:49 UTC 104.21.233.254 Unknown ranking
592773xgg.com (1) 0 No data No data 103.170.15.95 Unknown ranking
sysupload.csiteadmin.com (20) 0 No data No data 52.184.85.118 Unknown ranking
kvhxxx.top (2) 0 2022-05-01 01:23:06 UTC 2022-11-28 16:18:44 UTC 104.21.235.31 Unknown ranking
n0566.com (1) 0 2021-02-01 01:45:29 UTC 2021-02-01 01:45:29 UTC 20.222.119.28 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-28 05:53:26 UTC 34.117.237.239
hm.baidu.com (6) 8254 2012-05-26 08:38:45 UTC 2020-02-11 02:47:13 UTC 103.235.46.191
www.jxys16.xyz (10) 0 2022-08-17 05:55:43 UTC 2022-11-23 08:36:22 UTC 173.231.38.5 Unknown ranking
u1022.com (1) 0 2021-02-01 01:45:41 UTC 2021-02-01 01:45:41 UTC 103.170.15.60 Unknown ranking
img.9623x.com (1) 0 No data No data 185.239.226.23 Unknown ranking
img.9712x.com (1) 0 No data No data 185.239.226.23 Unknown ranking
taiwtp1.com (1) 0 2022-04-08 07:06:08 UTC 2022-11-28 20:18:09 UTC 220.128.218.220 Unknown ranking
imagedelivery.net (2) 255311 2021-09-20 12:34:55 UTC 2022-11-29 02:48:47 UTC 104.18.2.36
kzecc.com (1) 0 2017-01-29 04:39:36 UTC 2022-11-28 15:51:59 UTC 45.154.215.92 Unknown ranking
ocsp2.globalsign.com (5) 1544 2012-05-23 18:10:04 UTC 2020-03-15 21:19:16 UTC 104.18.20.226
3p8801.co (3) 0 2022-07-05 12:28:12 UTC 2022-11-29 01:45:46 UTC 107.148.202.17 Unknown ranking
api.share.baidu.com (1) 44629 2013-04-25 14:45:11 UTC 2020-05-14 13:49:44 UTC 182.61.240.101
kvevv.com (2) 0 2022-05-01 01:44:50 UTC 2022-11-29 02:19:23 UTC 45.150.164.88 Unknown ranking
www.yssydh.top (1) 0 2022-08-05 15:26:13 UTC 2022-11-28 12:04:31 UTC 104.21.23.48 Unknown ranking
kvezz.com (1) 237784 2021-10-17 08:32:09 UTC 2022-11-29 01:49:06 UTC 64.32.13.142
aliyun-static-oss.oss-cn-hongkong.aliyuncs.com (1) 0 2022-06-02 10:46:58 UTC 2022-11-28 12:04:31 UTC 47.56.33.49 Domain (aliyuncs.com) ranked at: 1959
img.2559u.com (1) 0 No data No data 185.239.226.23 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 223969ufy.com Sinkholed
2022-11-29 2 339282bdb.com Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 339282bdb.com Sinkholed
2022-11-29 2 79zxcv.com Sinkholed
2022-11-29 2 79zxcv.com Sinkholed
2022-11-29 2 362728tdg.com Sinkholed
2022-11-29 2 79zxcv.com Sinkholed
2022-11-29 2 628536nyv.com Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 585227ybn.com Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed
2022-11-29 2 jxys16.xyz Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.121.89.17
Date UQ / IDS / BL URL IP
2023-01-11 16:04:33 +0000 0 - 1 - 6 nils-holgerson.com/ 172.121.89.17
2023-01-07 06:04:40 +0000 0 - 4 - 8 nils-holgerson.com/ 172.121.89.17
2023-01-07 02:04:42 +0000 0 - 1 - 7 nils-holgerson.com/ 172.121.89.17
2023-01-05 04:04:56 +0000 0 - 4 - 5 nils-holgerson.com/ 172.121.89.17
2022-12-23 09:04:28 +0000 0 - 2 - 9 nils-holgerson.com/ 172.121.89.17


Last 5 reports on ASN: EGIHOSTING
Date UQ / IDS / BL URL IP
2023-02-02 02:18:44 +0000 0 - 4 - 1 ytjmg.com/ 172.120.175.145
2023-02-02 01:14:45 +0000 0 - 0 - 1 hereit1st.com/wolf-of-penny-stocks-membership/ 104.253.248.166
2023-02-02 01:14:43 +0000 0 - 0 - 1 hereit1st.com/forex-trading-updated-daily/ 104.253.248.166
2023-02-02 01:14:40 +0000 0 - 0 - 1 hereit1st.com/help-center-2/ 104.253.248.166
2023-02-01 21:41:49 +0000 0 - 0 - 34 natashaamon.com/ 142.252.232.5


Last 5 reports on domain: nils-holgerson.com
Date UQ / IDS / BL URL IP
2023-01-11 16:04:33 +0000 0 - 1 - 6 nils-holgerson.com/ 172.121.89.17
2023-01-07 06:04:40 +0000 0 - 4 - 8 nils-holgerson.com/ 172.121.89.17
2023-01-07 02:04:42 +0000 0 - 1 - 7 nils-holgerson.com/ 172.121.89.17
2023-01-05 04:04:56 +0000 0 - 4 - 5 nils-holgerson.com/ 172.121.89.17
2022-12-23 09:04:28 +0000 0 - 2 - 9 nils-holgerson.com/ 172.121.89.17


No other reports with similar screenshot

JavaScript

Executed Scripts (12)

Executed Evals (1)
#1 JavaScript::Eval (size: 474) - SHA256: 9535900244363e49fe3037b56b5794492da85e58a5af5a6e45074409015ac946
document.write('<title>93@�э�
        Pl� < /title><div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" height="100%" src="https:/ / www.jxys88.net / news / index.php "></iframe></div><style type="
        text / css ">html{width:100%;height:100%;}body {width:100%;height:100%;}</style>');

Executed Writes (4)
#1 JavaScript::Write (size: 455) - SHA256: 64e30e5b66ab752a8b3e31c0a921933b63a84c10d17af1ce6011c1d502462672
< title > 93@� э� Pl� < /title><div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" height="100%" src="https:/ / www.jxys88.net / news / index.php "></iframe></div><style type="
text / css ">html{width:100%;height:100%;}body {width:100%;height:100%;}</style>
#2 JavaScript::Write (size: 201) - SHA256: 2d7d346bf62ff160f8d7d20318bedeb9dc7c79d0e2845f6061de5beabda471ca
< style > # o63092 {
    animation - duration: 10000 ms;
    animation - iteration - count: infinite;
    animation - timing - function: linear;
}@
keyframes spin {
    from {
        transform: rotate(0 deg);
    }
    to {
        transform: rotate(360 deg);
    }
} < /style>
#3 JavaScript::Write (size: 328) - SHA256: 380ed21bcde40c675ea4aa1b4208659bcfec7172b3b42ba8c71961b354c91c28
< div class = "f63092"
id = "o63092"
style = "position: fixed; bottom: 52%; z-index: 19999 !important; right: 2px;" > < a target = "_blank"
href = "https://xinzzfdslkjkc111.com/e01/jxy.html" > < img src = "https://taiwtp1.com/xin/200200sas.gif"
style = "margin:10px;border-radius: 15px;border: solid 2px red;"
width = "90px"
height = "90px"
"></a></div>
#4 JavaScript::Write (size: 351) - SHA256: bc6eefa90005a569493948d8ae97575bf163beae520323be99102d7d8fb217a1
< div class = "f63092"
id = "o63092"
style = "position: fixed; bottom: 35%; z-index: 19999 !important; right: 2px;" > < a target = "_blank"
href = "https://kmf02lldh.cc" > < img src = "https://www.yssydh.top/upload/vod/20220727-1/216a680fcabdc4f622130059f8ea82da.gif"
style = "margin:10px;border-radius: 15px;border: solid 2px red;"
width = "90px"
height = "90px"
"></a></div>


HTTP Transactions (247)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6386
Expires: Tue, 29 Nov 2022 05:52:03 GMT
Date: Tue, 29 Nov 2022 04:05:37 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4108
Expires: Tue, 29 Nov 2022 05:14:05 GMT
Date: Tue, 29 Nov 2022 04:05:37 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6568
Cache-Control: max-age=116112
Date: Tue, 29 Nov 2022 04:05:37 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 12:20:49 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: v7Wq+KlF0cJ8sPlgPupBf7N4Cc5lGS/ILGsiN7bxYZ9VDU9iLgHCKKEZh3Lfd0aIZCOuMKyO1a6+nyN/3xb94w==
x-amz-request-id: KXXE7W40NBKFTSCV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 03:45:17 GMT
age: 1220
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 03:19:35 GMT
cache-control: public,max-age=3600
age: 2762
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET / HTTP/1.1 
Host: nils-holgerson.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.121.89.17
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 29 Nov 2022 04:05:37 GMT
Content-Length: 0
Connection: keep-alive
Location: http://www.nils-holgerson.com/index.php

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:38 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 03:08:56 GMT
cache-control: public,max-age=3600
age: 3402
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5060
Cache-Control: max-age=109537
Date: Tue, 29 Nov 2022 04:05:38 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:31:15 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /index.php HTTP/1.1 
Host: www.nils-holgerson.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.121.89.17
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 29 Nov 2022 04:05:37 GMT
Content-Length: 785
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Size:   785
Md5:    449979d226b4709e707902a1275adecd
Sha1:   bc5083da744f7892a81e1a630855e6250b5f3959
Sha256: 235f81865fe0e97383deb1b88df3ba218d51bfc6cedb0ecbf0ad24f7029f1c0c
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Zf1xzy8UIeS4S3AFbnBWPg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.214.236.46
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pFKbY2w+XH5qKTehVsqyuMhsoXE=

                                        
                                            GET /tj.js HTTP/1.1 
Host: www.nils-holgerson.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nils-holgerson.com/index.php

search
                                         172.121.89.17
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 29 Nov 2022 04:05:37 GMT
Content-Length: 520
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   520
Md5:    c641843bbee2dbe645c9de13d8f953ed
Sha1:   1a93b5d7b8540d5acbaae9c8bc00c16926a23588
Sha256: 4604c89ab81e21b0a8e7e762b60c0190dd44643056504ae5c28ebd2b4e739ed7
                                        
                                            GET /common.js HTTP/1.1 
Host: www.nils-holgerson.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nils-holgerson.com/index.php

search
                                         172.121.89.17
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 29 Nov 2022 04:05:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (438), with CRLF line terminators
Size:   738
Md5:    70670d0986c3d241b2799f9b5ae5e100
Sha1:   e0a9285c476b9339f8ee575c4cbc26ecfc4d0a8b
Sha256: 788c72241a91da39f72a02d61ea2da8aa6a57d0db6b1118e583ad166b61b1ea6
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.nils-holgerson.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nils-holgerson.com/index.php

search
                                         172.121.89.17
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Tue, 29 Nov 2022 04:05:38 GMT
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sun, 04 Dec 2022 04:05:38 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    7ef1f0a0093460fe46bb691578c07c95
Sha1:   2da3ffbbf4737ce4dae9488359de34034d1ebfbd
Sha256: 4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D80FA2C6B1557F7B0F5248B22F446DED80574518A0C28DDAF3A2D5318E37C652"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21573
Expires: Tue, 29 Nov 2022 10:05:12 GMT
Date: Tue, 29 Nov 2022 04:05:39 GMT
Connection: keep-alive

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:39 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 00:30:27 GMT
ETag: "c450389711c5206d2afa7a2760d18f9658f6a36c"
Last-Modified: Tue, 29 Nov 2022 00:30:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1202
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7718775b49c81c0a-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    c60e4318a49ff8976f2f06944b2a81de
Sha1:   c450389711c5206d2afa7a2760d18f9658f6a36c
Sha256: 99bcda1da3bb5added3a2d01acb8cc20c754ce86607bb3a6efe7f0722b6ac10f
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:39 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 00:30:27 GMT
ETag: "c450389711c5206d2afa7a2760d18f9658f6a36c"
Last-Modified: Tue, 29 Nov 2022 00:30:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1202
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7718775b59cd1c0a-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    c60e4318a49ff8976f2f06944b2a81de
Sha1:   c450389711c5206d2afa7a2760d18f9658f6a36c
Sha256: 99bcda1da3bb5added3a2d01acb8cc20c754ce86607bb3a6efe7f0722b6ac10f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4651
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:05:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4651
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:05:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4651
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:05:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4651
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:05:40 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5049b423-1bbd-4caa-891e-b46234fc1a6a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14856
x-amzn-requestid: 22ec3d7a-91f5-4b67-9621-a93b1e5d09e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYejFKxoAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d45c-34ffa40356825a715a7eb5cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:07:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dVt3gUrJDvRWXxbs32sGuoyZI0Qo3-Dlut29Sref8Qjy2NXrJkhvNg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:34:53 GMT
age: 1847
etag: "e0617845684a8f7586b37e8be8976bbe6a93563e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14856
Md5:    df665be3ae1347cb9bb1443a6a1a33e6
Sha1:   e0617845684a8f7586b37e8be8976bbe6a93563e
Sha256: 15155df8643daa0408633922e15691a3b00b393ee433e1162cf031024e84d0a4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9376
x-amzn-requestid: c52b3092-90d2-4289-b6e0-ab99c9d4710a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPmz3EVUoAMFWUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382eb4b-39f46c89238eff696e9f2dba;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:44:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ofQEhaEiX1vE25a_1xHeab9Px9zgGpk8omlX_aHmLE1oN1aZTPzWxQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:58:57 GMT
age: 22003
etag: "28c165bac8cf68cd1b0763c311aece00672cb3a5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9376
Md5:    cce27a1fe8c0222811a5ce0e7f89e1cb
Sha1:   28c165bac8cf68cd1b0763c311aece00672cb3a5
Sha256: 4530e34a47ef78c2c2b0d34a0511253a61f1927b192ab42f82361002ff10819e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3004
x-amzn-requestid: 1e6e228a-fb73-4ed3-881b-6b0e5c8297c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrFRXoAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-45059338501b45d943d7e08c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rb-NFzuOBQEOMHfs7L68ZBeBH_JMqKYfJhxWs4eNYq35L8duYylQdg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:07:34 GMT
age: 7086
etag: "035a1b4a2a7889787532ec2637d5c21e06daf672"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3004
Md5:    22e7d3e11e78242383e452adb9299016
Sha1:   035a1b4a2a7889787532ec2637d5c21e06daf672
Sha256: 990f18423bafc9cc3daaa1bd1290313b6cb3d3a391f642d01fd6797ad4fc9ca8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7479fbd-640b-4a65-ac00-893210a725b0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10445
x-amzn-requestid: fb9fc0d4-9f2e-4fab-a259-30300aacdc67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvuDGHaIAMFn_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc659-56786e9b754a48b30b5f79c7;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:06:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fkjT2irjF_lGK2IDx2nzFK13MgMQFXrtUIWv9lR9y-f6VT1bthJfyQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 14:02:53 GMT
age: 50567
etag: "12d90c36bd455b3b859fdb761b6ed49ea9f98f80"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10445
Md5:    c76e3c4cc159bda9b9e887fcd449ba51
Sha1:   12d90c36bd455b3b859fdb761b6ed49ea9f98f80
Sha256: fc2aad6b1ec65938249970e01a23d35a19cb9c9acbc3524586dd23f7bdaf9690
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:01:17 GMT
age: 3863
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4916
Md5:    83c1fedec73299637cc7dc47c48af758
Sha1:   2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
Sha256: 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:40:08 GMT
age: 73532
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10176
Md5:    03014221d7f49b50ffc2d1b0a0e75457
Sha1:   772d86ad983042a728ee3490630a9cf1134ad0dd
Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
                                        
                                            GET /hm.js?fec0eaa8fc52795617f18f518d42aaab HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nils-holgerson.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11254
Date: Tue, 29 Nov 2022 04:05:40 GMT
Etag: dbd0d637d4245ebcb14fdc4b5b4e40ec
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=802786CCF1F3F892; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (616)
Size:   11254
Md5:    7c479d65643e438564773e9191ab525a
Sha1:   c743db581dd95fd4d750efa6fd90b13df89201f7
Sha256: dedac9deceec5d977c41f2f3d3e41967e1c30b26af9d70471133ce6c1683d4e5
                                        
                                            GET /hm.js?ac926d0332f02f4f5a734812940af824 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nils-holgerson.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Date: Tue, 29 Nov 2022 04:05:40 GMT
Etag: 1681464ed6e6c240fc2c77a9e39eab08
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=8AA2654D8FAE1B27; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (619)
Size:   11257
Md5:    1c9d0ae4878529ae5829b42c71389224
Sha1:   9a5cdca3198ed7d1389db73ad92c8e1fc75d5e1c
Sha256: 5ddbc6ac2eb7e2eb0d93c62921e82210ef53b1d2c5a912b8de69a57f39a7115c
                                        
                                            GET /push.js HTTP/1.1 
Host: push.zhanzhang.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nils-holgerson.com/

search
                                         112.34.113.148
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Date: Tue, 29 Nov 2022 04:05:41 GMT
Etag: "4078521116"
Expires: Wed, 29 Nov 2023 04:05:41 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=F55F40F4A912719F3F8C761249FCFA68:FG=1; max-age=31536000; expires=Wed, 29-Nov-23 04:05:41 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   227
Md5:    e548b6ce15bb616c2bfba36e9cfbf307
Sha1:   a348285d9928a6548a57569f1fb9d62bdd747f33
Sha256: 7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=372047443&si=fec0eaa8fc52795617f18f518d42aaab&v=1.3.0&lv=1&sn=59545&r=0&ww=1280&u=http%3A%2F%2Fwww.nils-holgerson.com%2Findex.php&tt=%E4%B8%B9%E9%98%B3%E6%9D%80%E5%A7%A8%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nils-holgerson.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Tue, 29 Nov 2022 04:05:41 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A8CA89E4583F1777; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1751672479&si=ac926d0332f02f4f5a734812940af824&v=1.3.0&lv=1&sn=59545&r=0&ww=1280&u=http%3A%2F%2Fwww.nils-holgerson.com%2Findex.php&tt=%E4%B8%B9%E9%98%B3%E6%9D%80%E5%A7%A8%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nils-holgerson.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Tue, 29 Nov 2022 04:05:41 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=6306DE8221253103; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /news/data.php HTTP/1.1 
Host: www.jxys88.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys88.net/news/list.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.12.68
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:40 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            GET /template/m1938pc/html9/ads/1.gif HTTP/1.1 
Host: www.jxys16.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:42 GMT
content-length: 254
last-modified: Sat, 02 Apr 2022 12:20:12 GMT
etag: "62483f7c-fe"
expires: Thu, 29 Dec 2022 04:05:42 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 17\012- data
Size:   254
Md5:    b013f8fa3ec997fe20dc80b82af0ad0a
Sha1:   e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
Sha256: 119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /template/m1938pc/html9/ads/ob1.gif HTTP/1.1 
Host: www.jxys16.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:42 GMT
content-length: 193193
last-modified: Fri, 11 Nov 2022 06:41:02 GMT
etag: "636dee7e-2f2a9"
expires: Thu, 29 Dec 2022 04:05:42 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 90\012- data
Size:   193193
Md5:    a0f25aca4ee2af38f3d3f5cbfde1bdf8
Sha1:   252b04cdfaa6918b897fc8ef8ae759469ca831eb
Sha256: 89cb08a7d3e9821e1bda6a5c77b1e22d1d6feb91b4645be63ffa61c06709bff2

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /template/m1938pc/static/images/pic.png HTTP/1.1 
Host: www.jxys16.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/template/m1938pc/static/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:42 GMT
content-length: 90
last-modified: Fri, 14 Jan 2022 04:46:48 GMT
etag: "61e10038-5a"
expires: Thu, 29 Dec 2022 04:05:42 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   90
Md5:    5341dd3aa19c0eb3bc809f9150e3e833
Sha1:   7beaba24a698410e4ffc93357d82c6f683cbaba1
Sha256: f4ea9875d59d8391034d2c230808d5812fd183e2c83751288cea542747f5ef53

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /template/m1938pc/static/fonts/font_593233_jsu8tlct5shpk3xr.woff HTTP/1.1 
Host: www.jxys16.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jxys16.xyz/template/m1938pc/static/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:42 GMT
content-length: 13408
last-modified: Fri, 14 Jan 2022 04:47:30 GMT
etag: "61e10062-3460"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 13408, version 1.0\012- data
Size:   13408
Md5:    99af6debcdaba3e7ffe01b4c3cbccacb
Sha1:   4efda64b06cd7c294f6214623bcb634f3def3bd1
Sha256: 1106aebd6819da7203324abc443186658c8f54180a460ccc5b83553c5ce34f72

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /s.gif?l=http://www.nils-holgerson.com/index.php HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nils-holgerson.com/

search
                                         182.61.240.101
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Content-Length: 0
Date: Tue, 29 Nov 2022 04:05:42 GMT

                                        
                                            GET /hm.js?2ac4a2d34c34a270e029b4996d351332 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Date: Tue, 29 Nov 2022 04:05:42 GMT
Etag: bb8e8f74560dafe53217534ceb5e2abe
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=68131265B7AB7089; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (618)
Size:   11256
Md5:    e702f9692327f7ac7e6d1a07c9213f40
Sha1:   f2afad5e4d820835ffe66b8feed186d48f79de2e
Sha256: 1552c652f8d8866145d658146dfaaa85ebb5e3643b65c6dd2a738a5323a37768
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5632
Cache-Control: max-age=164849
Date: Tue, 29 Nov 2022 04:05:43 GMT
Etag: "63855008-118"
Expires: Thu, 01 Dec 2022 01:53:12 GMT
Last-Modified: Tue, 29 Nov 2022 00:19:20 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5632
Cache-Control: max-age=164849
Date: Tue, 29 Nov 2022 04:05:43 GMT
Etag: "63855008-118"
Expires: Thu, 01 Dec 2022 01:53:12 GMT
Last-Modified: Tue, 29 Nov 2022 00:19:20 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /ggIqxE6kP-B_dxnQquyUhg/477bc118-1084-4a76-3589-ef7a0dbdee00/public HTTP/1.1 
Host: imagedelivery.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.2.36
HTTP/2 200 OK
content-type: image/webp
                                        
date: Tue, 29 Nov 2022 04:05:43 GMT
content-length: 24176
cf-ray: 771877722ef7b500-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=172800
etag: "cfECSi5uQ1bVzCSelFGwcyrA"
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-images: internal=ok/- q=0 n=855 c=1+45 v=2022.10.4 l=24176
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   24176
Md5:    2ca0538b0b77324a38cf2b74f16cb6fe
Sha1:   0ef6374accaaedf856fe2532b8001519894e7fbf
Sha256: 2deb9e322a8b6fab37972c3d02c9da5ee672a9dbbe5b6f7282ba584ed025d9c4
                                        
                                            GET /ggIqxE6kP-B_dxnQquyUhg/2502307b-323b-4596-cdd7-ff8f19793f00/public HTTP/1.1 
Host: imagedelivery.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.2.36
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 29 Nov 2022 04:05:43 GMT
content-length: 308789
cf-ray: 771877723efdb500-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=172800
etag: "cf7jj0DExcr4Eulp_4fW43VFQZ8dO5Wny_BInlx8NnBQ"
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-images: internal=ok/- q=0 n=515 c=29+582 v=2022.11.4 l=308789
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "original is 182253B smaller"
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   308789
Md5:    799d622d8489838225bdf632d1ae4095
Sha1:   4f6c51fcc2b138919eaffddb4e0552eccd639540
Sha256: ef6eca5519381348b80b5a594d9463237e5df4c5d94f91690ec0caebb61931c8
                                        
                                            GET /58tu/405x204.gif HTTP/1.1 
Host: tt.1468tu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         43.153.174.204
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Date: Tue, 29 Nov 2022 04:05:43 GMT
Content-Length: 166
Connection: keep-alive
Location: https://tt.1468tu.com:1382/58tu/405x204.gif
Server: X-Y


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   166
Md5:    3ea1c8d079b38532a6e01a96216ba5e2
Sha1:   598d3ff91d3e252f1e13df8cf0348b270ff2da3f
Sha256: 87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
                                        
                                            GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=2141015825&si=2ac4a2d34c34a270e029b4996d351332&su=https%3A%2F%2Fwww.jxys88.net%2F&v=1.3.0&lv=1&sn=59547&r=0&ww=1268&u=https%3A%2F%2Fwww.jxys16.xyz%2F&tt=%E8%81%9A%E9%91%AB%E5%BD%B1%E8%A7%86 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Tue, 29 Nov 2022 04:05:43 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=43B2C0E014EDB32F; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "06739A41044DC193FBA2184DEE6F3E0C2A3FE39C13ED57B80847CD03026AAF7A"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4418
Expires: Tue, 29 Nov 2022 05:19:22 GMT
Date: Tue, 29 Nov 2022 04:05:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "FCCFA19F97DAB4686510892B89165F2391FF1CEC9C6A16EC597FE4FCFD74165D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1
Expires: Tue, 29 Nov 2022 04:05:45 GMT
Date: Tue, 29 Nov 2022 04:05:44 GMT
Connection: keep-alive

                                        
                                            GET /xxx12345.gif HTTP/1.1 
Host: ob699.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         45.153.131.58
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 19781
Last-Modified: Sat, 01 Oct 2022 06:45:45 GMT
Connection: keep-alive
ETag: "6337e219-4d45"
Expires: Thu, 29 Dec 2022 04:05:44 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 225 x 135\012- data
Size:   19781
Md5:    74f156899d26c1a1ef9108ee4023052d
Sha1:   3d2f15dc81ee27a7832947bbb59a7836ccc7f027
Sha256: b9d31d39b1bcf37b577c5b74c1b8742819a003052d35cdc72e829143e96f29f0
                                        
                                            GET /7546c860e55fa3bf22e5cd95994dd097.gif HTTP/1.1 
Host: kvevv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.150.164.88
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:44 GMT
content-length: 162
location: https://kvhxxx.top/7546c860e55fa3bf22e5cd95994dd097.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /4bf88adf466b90cef3686374a27fc0e2.gif HTTP/1.1 
Host: kvevv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.150.164.88
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:44 GMT
content-length: 162
location: https://kvhxxx.top/4bf88adf466b90cef3686374a27fc0e2.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /8fdce7479dd03f1ee73805e8d2e9bab8.gif HTTP/1.1 
Host: kzecc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.154.215.92
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:44 GMT
content-length: 162
location: https://kvkhhh.top/8fdce7479dd03f1ee73805e8d2e9bab8.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 16:32:08 GMT
Expires: Fri, 02 Dec 2022 16:32:07 GMT
Etag: "90476448b25e8e5fed72d8b497f1d24fbe54dff4"
Cache-Control: max-age=303382,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a7afeb511-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 03:39:04 GMT
Expires: Sun, 04 Dec 2022 03:39:03 GMT
Etag: "e60b44b493885b9e3bfcd727a512d8fded812887"
Cache-Control: max-age=429798,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a7ebd1bfe-OSL

                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 00:01:01 GMT
Expires: Tue, 06 Dec 2022 00:01:00 GMT
Etag: "f35a3271078f2eb3fa9c6e5ab5ab4d757ee2a457"
Cache-Control: max-age=589515,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a7e790b45-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 10:05:42 GMT
Expires: Sat, 03 Dec 2022 10:05:41 GMT
Etag: "2bf2252d9f68bdb1504969d1216a0e9f1873a865"
Cache-Control: max-age=366596,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a7a8bb51b-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 10:05:42 GMT
Expires: Sat, 03 Dec 2022 10:05:41 GMT
Etag: "2bf2252d9f68bdb1504969d1216a0e9f1873a865"
Cache-Control: max-age=366596,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a7eadfac4-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 15:19:39 GMT
Expires: Sat, 03 Dec 2022 15:19:38 GMT
Etag: "2f6e1dc63e1c9befda2c24cbbc4e0853fde41fb1"
Cache-Control: max-age=385433,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a7fc81c02-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 16:16:55 GMT
Expires: Sun, 04 Dec 2022 16:16:54 GMT
Etag: "3cfdf7e959e288d04fa8eecee461533178db4db2"
Cache-Control: max-age=475269,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a78d2b4e8-OSL

                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 19:09:56 GMT
Expires: Mon, 05 Dec 2022 19:09:55 GMT
Etag: "0d7779f9c077f597635e4809fe17c91899b06f48"
Cache-Control: max-age=572050,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777a7d09b50c-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87050CC8E0E155A6FE7FD11AE7270D58F539F9A022BE944778CAD0A17EBEF22F"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5772
Expires: Tue, 29 Nov 2022 05:41:56 GMT
Date: Tue, 29 Nov 2022 04:05:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 20:52:34 GMT
Expires: Fri, 02 Dec 2022 20:52:33 GMT
Etag: "7745b6c7971f36e45d31df200626183f63b8db3f"
Cache-Control: max-age=319008,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777abb17b511-OSL

                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 19:09:56 GMT
Expires: Mon, 05 Dec 2022 19:09:55 GMT
Etag: "0d7779f9c077f597635e4809fe17c91899b06f48"
Cache-Control: max-age=572050,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777aee8d0b45-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:31:14 GMT
Expires: Sun, 04 Dec 2022 15:31:13 GMT
Etag: "0ffef801a05eb8a92497aae04daeb6c2748de482"
Cache-Control: max-age=472528,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777aceca1bfe-OSL

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 03 Dec 2022 00:45:19 GMT
ETag: "fd98fdc9d46f65215757de37895b786623784d56"
Last-Modified: Tue, 29 Nov 2022 00:45:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2941
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7718777c4f1f0b65-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    0a5d3c4e22af4baafefcb8a9fc1e9e35
Sha1:   fd98fdc9d46f65215757de37895b786623784d56
Sha256: b807ce9d5ae1adfaaeb18d7c35e1f7bf235c9755f422f2efd1a1324644788c22
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C8AE8C1D1166B7A0D166FE89AA95C74C00FCD8EDC94AA95B5AEF8A2B33D87999"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18690
Expires: Tue, 29 Nov 2022 09:17:15 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            GET /da5dfac32ac34ba592b6f45c5de4a88c.gif HTTP/1.1 
Host: u1022.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.170.15.60
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: max-age=86400
etag: "63849d60-5d77a"
server: nginx
date: Mon, 28 Nov 2022 15:34:49 GMT
last-modified: Mon, 28 Nov 2022 11:37:04 GMT
accept-ranges: bytes
x-cache: HIT from yd11_02-cdn-g01-la2-50
content-length: 382842
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 100\012- data
Size:   382842
Md5:    3ee8c68d9bcee9dba9e18883f7a79dd7
Sha1:   ca6173103323ab2685f5c50c81c2e80d50583ab9
Sha256: 150795ba625225a034b7d362f7f69c1523bbbafb9820610a47b9abad1c030af9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.buypass.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.129
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: be39c122-ccd6-45e3-8661-331b1c7d6c60
Content-Length: 1700
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1700
Md5:    72e1b8e8311fd91dcbbb48eed0fb0fdf
Sha1:   d514b4cd65213600b793c05f717cd9d197d8b071
Sha256: b07c61ee5d6149db7e9754cdcf8e07731bd0a90586cad186630e33bdb60db4fd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.buypass.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.129
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 0fd4017d-9a7f-4af6-a24a-69adaad78e38
Content-Length: 1700
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1700
Md5:    411658a4ab6d7ab96f9908b9229eb87a
Sha1:   6bbe9d3fac3f7ee42dd02d6d9582a1e95c477aad
Sha256: 2de852bc9fec6187e95871146f30d6149aef31263efb11536f9050a618829cf1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.buypass.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.129
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 9d1cca09-c8d4-4187-8b4e-5a4da9017363
Content-Length: 1700
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1700
Md5:    9d7318bd0a78f7216a49d1cd2948ca4f
Sha1:   f2e634461918c36bf7811fdf0cdeba6779ee7e5b
Sha256: 8e85a8c88f1ed917da810e4716c5eec7ba2e1c3100ef4f6cb70b1a01ab7768e4
                                        
                                            GET /ddc7ee998e5442059a05a76f45a279b8.gif HTTP/1.1 
Host: 223969ufy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.170.15.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "63665362-57910"
Date: Thu, 24 Nov 2022 04:59:13 GMT
Server: nginx
Last-Modified: Sat, 05 Nov 2022 12:13:22 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-25
Content-Length: 358672


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   358672
Md5:    668143938c3bb811847d83330decd423
Sha1:   f86300da5d773b84bc65d3c901a4767fd8566c48
Sha256: a06c47f458fdbd01ba8ba0202fb615e94e2353d65098b480ede52a13a645f859

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.buypass.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.129
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 5ccfb261-98d8-4091-8673-1579d20b03aa
Content-Length: 1700
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1700
Md5:    fd3bbe00836de0a245ebb6d07b124292
Sha1:   29f057aa00d55971d86985201ac953bcf098ecbc
Sha256: 7c8141e1a582b5d0076e6f7a1be7c687bdb12d8f5a8f3bf247ac8908e7f7fb6a
                                        
                                            GET /e20f57018fba490b9af887342222147f.gif HTTP/1.1 
Host: 339282bdb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.61.212.118
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "635b939b-86f72"
Date: Mon, 28 Nov 2022 04:42:54 GMT
Server: nginx
Last-Modified: Fri, 28 Oct 2022 08:32:27 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-18
Content-Length: 552818


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   552818
Md5:    097e6fa9314192dc3dd55cb1c5023ee5
Sha1:   c30366c4c910616f1a3c1b773ffb4af967e20eb5
Sha256: db020d7293807326453f5848c0bf219e2b835f2530468a9d816a3c1c7941023a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Date: Tue, 29 Nov 2022 04:05:45 GMT
Last-Modified: Tue, 29 Nov 2022 00:18:51 GMT
ETag: "63854feb-1d7"
Expires: Thu, 01 Dec 2022 00:18:51 GMT
Cache-Control: max-age=159186
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669694745
Via: cache9.l2de2[4,3,200-0,M], cache9.l2de2[5,0], cache4.se1[25,24,200-0,M], cache4.se1[27,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 29 Nov 2022 04:05:45 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816696947452653789e

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 29 Nov 2022 04:05:45 GMT
Ali-Swift-Global-Savetime: 1669694745
Via: cache25.l2de2[3,3,200-0,M], cache25.l2de2[4,0], cache5.se1[27,26,200-0,M], cache5.se1[28,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 29 Nov 2022 04:05:45 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916696947452643740e

                                        
                                            GET /ec0e8c2b5d2a4082a1acaceabcfca983.gif HTTP/1.1 
Host: 592773xgg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.170.15.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "635ba261-8dadb"
Date: Fri, 25 Nov 2022 13:18:03 GMT
Server: nginx
Last-Modified: Fri, 28 Oct 2022 09:35:29 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-25
Content-Length: 580315


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   580315
Md5:    1a429adb0604b6dd52d269910a16df11
Sha1:   0e6e0b7135822c02ae159c14a1b4aebfa75b0982
Sha256: 819a4224605c47089d7456012a957beef9f0a59191a8a63e4c0aefa6c3ece6b7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F91B7D1CCD13D6C7965FB93977776E019B7C3755BD40B7E76CBD4DAB47C607C8"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4346
Expires: Tue, 29 Nov 2022 05:18:11 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            GET /111/x11.gif HTTP/1.1 
Host: 6937555.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         104.149.145.170
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Tue, 29 Nov 2022 04:05:44 GMT
Content-Length: 425627
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 11:21:10 GMT
ETag: "6332dca6-67e9b"
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 393 x 262\012- data
Size:   425627
Md5:    8bae222affa48844776828e91737c9ea
Sha1:   3c24ae989fed8a463e723b513634d6c96416a8ca
Sha256: 203d9927c0f470cc1b9e2116f2ffc23d3ede6acbdd657fe66aa7874526f2b5a3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9B348E405DA997965BBFB5A714755EBE7B05744F6E83E4C635E42D5FA9E282D1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=526
Expires: Tue, 29 Nov 2022 04:14:31 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            GET /4aa44d1866a149878b6b79cadb7ab527.gif HTTP/1.1 
Host: 5593qq.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.170.15.115
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "63032a8a-b6a86"
Date: Fri, 25 Nov 2022 07:56:30 GMT
Server: nginx
Last-Modified: Mon, 22 Aug 2022 07:04:42 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-45
Content-Length: 748166


--- Additional Info ---
Magic:  GIF image data, version 89a, 750 x 120\012- data
Size:   748166
Md5:    dc16c165d9da37bf4a9e9596a765425c
Sha1:   824e5729161352cd5f7b57faea8a32c54d35b410
Sha256: 4abb336ff1a1a08dc2963b708638359da654fadaf843669e4406d6ab348b4608
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9B348E405DA997965BBFB5A714755EBE7B05744F6E83E4C635E42D5FA9E282D1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=526
Expires: Tue, 29 Nov 2022 04:14:31 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 19:09:56 GMT
Expires: Mon, 05 Dec 2022 19:09:55 GMT
Etag: "0d7779f9c077f597635e4809fe17c91899b06f48"
Cache-Control: max-age=572049,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718777bcd6fb50c-OSL

                                        
                                            GET /view.php/61b977b3527d7c0e27e2af877b5a5c59.jpg HTTP/1.1 
Host: 200.benbenys.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         23.224.61.222
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 29 Nov 2022 04:05:44 GMT
Server: Apache
Expires: Thu, 29 Dec 2022 04:05:44 GMT
Pragma: cache
Cache-Control: max-age=2592000
Upgrade: h2
Connection: Upgrade, close
Content-Length: 57375


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=805, orientation=[*0*], datetime=MM, width=1080], progressive, precision 8, 1080x805, components 3\012- data
Size:   57375
Md5:    61b977b3527d7c0e27e2af877b5a5c59
Sha1:   4a1f0beee6c8215da2bfda76b5f1c87d62925bfc
Sha256: 945a7b57589fc601eb17079a589c721417a1307db96c103791138bce8b5a7fff
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6B1EC32A3CE6D986BA2693569191DF148E5B9EFF019A18336A98A955B0DFBE3D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11304
Expires: Tue, 29 Nov 2022 07:14:09 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0929458F0FF0DCECCB96BFC844263380C5424939C2E03A59BC4D71D764C4271C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21146
Expires: Tue, 29 Nov 2022 09:58:11 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "481C32F7F67F95E55A1FACFDDE3CDB7917E686D1BA1979F96089CB9D3B4F834A"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 29 Nov 2022 10:05:45 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0929458F0FF0DCECCB96BFC844263380C5424939C2E03A59BC4D71D764C4271C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21146
Expires: Tue, 29 Nov 2022 09:58:11 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F91B7D1CCD13D6C7965FB93977776E019B7C3755BD40B7E76CBD4DAB47C607C8"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10934
Expires: Tue, 29 Nov 2022 07:07:59 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            GET /upload/vod/20220727-1/216a680fcabdc4f622130059f8ea82da.gif HTTP/1.1 
Host: www.yssydh.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.23.48
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 47538
last-modified: Wed, 27 Jul 2022 08:34:24 GMT
etag: "62e0f890-b9b2"
expires: Sat, 03 Dec 2022 16:45:35 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2200810
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rshe3iay7kGwBUr61iNlh9k45FL7pEXCmyVkw5IbSpP%2FFsv54tC1OmRhTfiu51PaS%2B4ioYbrbykrRCDVAeO5FJhrjNREVrIC6tw%2FmYeuY9Kb1m%2Bf3br6V4YWmWlW8seCZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7718777f1918b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 150\012- data
Size:   47538
Md5:    238e06fae36a60963dd217adc895c9e4
Sha1:   feb1b8c405b5e162fb23a7727aedb83eae0a9e9f
Sha256: 321e056f1cd521d36cde0b3579d208fd0118f423b07b92622a215ca551639fce
                                        
                                            GET / HTTP/1.1 
Host: www.jxys16.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys88.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:41 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   173814
Md5:    f437b64daa2b03ee3be01ee8ed894355
Sha1:   f115511f38467e33b93bb9d67b8e39b582e43a74
Sha256: b9bff556eded4f0bafb0771ddc41c89f7f2cf201e3c96199774ae0c799715a8f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /get-image/0yFQ28gLGhP HTTP/1.1 
Host: si1.go2yd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         163.171.140.79
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 279676
server: Tengine
x-application-context: application
x-kss-request-id: 7619a86ae5664556a23b9964f031b63f
etag: "b25d41aed5450abed3b57ce91edeb1ef"
content-md5: sl1BrtVFCr7TtXzpHt6x7w==
last-modified: Mon, 28 Feb 2022 06:31:20 GMT
accept-ranges: bytes
age: 1
x-via: 1.1 PSbjzwdx5aa31:0 (Cdn Cache Server V2.0), 1.1 jszjsx22:12 (Cdn Cache Server V2.0), 1.1 PS-KHH-015lO119:7 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1cc96:6 (Cdn Cache Server V2.0)
x-ws-request-id: 63858519_PShlamstdAMS1vj92_8449-59657
access-control-allow-origin: *
ws-s2h-acc-level: 1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 600 x 350\012- data
Size:   279676
Md5:    b25d41aed5450abed3b57ce91edeb1ef
Sha1:   32246d3032e682f04be554c60fa343835bf7a1c9
Sha256: 3198df78ef5491bd63c4dbd8fea3604f34dad6baa285ea8629ec250954f405ba
                                        
                                            GET /get-image/0yFVWR9AM6k HTTP/1.1 
Host: si1.go2yd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         163.171.140.79
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 140259
x-application-context: application
x-kss-request-id: 42be03856f37421d8d1834ac0d22900d
etag: "4125d9bf66b1a755f42abaea805ee9af"
content-md5: QSXZv2axp1X0KrrqgF7prw==
last-modified: Mon, 28 Feb 2022 07:48:08 GMT
accept-ranges: bytes
server: KS3
age: 1
x-via: 1.1 PSbjwjBGP2vu136:9 (Cdn Cache Server V2.0), 1.1 PSzjnbsxsy229:10 (Cdn Cache Server V2.0), 1.1 PS-KHH-015lO119:3 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1se91:17 (Cdn Cache Server V2.0)
x-ws-request-id: 63858519_PShlamstdAMS1vj92_8449-59658
access-control-allow-origin: *
ws-s2h-acc-level: 1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 750 x 376\012- data
Size:   140259
Md5:    4125d9bf66b1a755f42abaea805ee9af
Sha1:   17232f64827beb19e2a717d1bdbf384b3e938249
Sha256: d3c1b29a4d2c0fa6fc41d308d6c110eeb868276c2a74697766283838ebe1f732
                                        
                                            GET /47a7724b974a47a0a7ff9b1c9af7a26c.gif HTTP/1.1 
Host: 339282bdb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.61.212.118
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "635b942d-1b9b4"
Date: Tue, 22 Nov 2022 18:11:26 GMT
Server: nginx
Last-Modified: Fri, 28 Oct 2022 08:34:53 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-18
Content-Length: 113076


--- Additional Info ---
Magic:  GIF image data, version 89a, 320 x 185\012- data
Size:   113076
Md5:    293a0887f1ab0b9517c19b77d51626dd
Sha1:   74adbd76d248f6cfc5cffdfaaaaaf942b69b080b
Sha256: e14931a1bebe13bda41f170c97f7c45f725c13854e3a907c1648a403818326eb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 343
ETag: "6276E91FB8F11D447C6EB8E1EF977B69DB6934FCC8793A479D195DB13DF23F0C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11850
Expires: Tue, 29 Nov 2022 07:23:15 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 343
ETag: "6276E91FB8F11D447C6EB8E1EF977B69DB6934FCC8793A479D195DB13DF23F0C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11850
Expires: Tue, 29 Nov 2022 07:23:15 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0929458F0FF0DCECCB96BFC844263380C5424939C2E03A59BC4D71D764C4271C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7446
Expires: Tue, 29 Nov 2022 06:09:51 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            GET /128/318X216.gif HTTP/1.1 
Host: zhibo128x.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         154.83.25.141
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Tue, 29 Nov 2022 04:05:07 GMT
Content-Length: 89870
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 08:04:23 GMT
ETag: "63145c07-15f0e"
Expires: Wed, 30 Nov 2022 00:43:29 GMT
Cache-Control: max-age=2592000
Via: 154.83.25.138
CDN-Cache: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 318 x 216\012- data
Size:   89870
Md5:    fcfb39891df6c04744982e2f8c67f6b7
Sha1:   7a667d860bab955b1e95bce9a455cc5555783076
Sha256: 534db09ef852e7d2de2fe879e2ea4447b28ae30d9093e3854da39ee604db801d
                                        
                                            GET /99d9b625f2ad0e82d1c36c0d0f18e725.gif HTTP/1.1 
Host: kvmaa.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         170.178.176.170
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 162
location: https://nvhbbb.top/99d9b625f2ad0e82d1c36c0d0f18e725.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /c70f7dd4a4c94432f7e7dfd8886c435b.gif HTTP/1.1 
Host: kvemm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.154.214.206
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 162
location: https://kvhiii.top/c70f7dd4a4c94432f7e7dfd8886c435b.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /0faf263b1025a51efcea7acd844cc402.gif HTTP/1.1 
Host: kvmaa.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         170.178.176.170
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 162
location: https://nvhbbb.top/0faf263b1025a51efcea7acd844cc402.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /800a83efcf662b60b2ec0c6bb37ce110.gif HTTP/1.1 
Host: kvezz.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         64.32.13.142
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 162
location: https://acoozzh.top/800a83efcf662b60b2ec0c6bb37ce110.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /sh/317.js HTTP/1.1 
Host: api.79zxcv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         18.141.190.97
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 463
Connection: keep-alive
Server: Tengine
X-Cache-Status: MISS


--- Additional Info ---
Magic:  ASCII text, with very long lines (463), with no line terminators
Size:   463
Md5:    4ada6e293a75c07ce69d0e9aa7cabe73
Sha1:   a17400b9941f0fa71105caac6ce7e18eea16b7c9
Sha256: 28713f042f2f12e794b78e37bb403cfa5ac34f9ebff8e2da457f2eb16db5f493

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "77C2410D58D53811AE7B701FF4C501B6A21C9AF6D27189170E725573CE07DB2F"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=749
Expires: Tue, 29 Nov 2022 04:18:14 GMT
Date: Tue, 29 Nov 2022 04:05:45 GMT
Connection: keep-alive

                                        
                                            GET /sh/328.js HTTP/1.1 
Host: api.79zxcv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         18.141.190.97
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 463
Connection: keep-alive
Server: Tengine
X-Cache-Status: MISS


--- Additional Info ---
Magic:  ASCII text, with very long lines (463), with no line terminators
Size:   463
Md5:    4ada6e293a75c07ce69d0e9aa7cabe73
Sha1:   a17400b9941f0fa71105caac6ce7e18eea16b7c9
Sha256: 28713f042f2f12e794b78e37bb403cfa5ac34f9ebff8e2da457f2eb16db5f493

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /800a83efcf662b60b2ec0c6bb37ce110.gif HTTP/1.1 
Host: acoozzh.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jxys16.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.67.189.203
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 739561
last-modified: Mon, 02 May 2022 19:20:49 GMT
etag: "62702f11-b48e9"
expires: Thu, 22 Dec 2022 17:58:07 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 554858
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GJ0Pd%2BRyZhmB6iP2n4bne1XmuVpqy2qzPiHNMSSnur6HuPa5JMB7Wm0dq39kidm7ldNtBGBK155%2FhiLffTrA7Uq2EJ%2FdwuC2RefOISg9Q4ChzMB2XgXUpjAAcEBeoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771877800840b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   739561
Md5:    5318e42d25e6b9b53726d8166248cc33
Sha1:   762b03c16562865a9a58a02dba471f78608376db
Sha256: b632e7a04d032c4853a8460e9d636ac032f697db8f50cfee6a6016587ed8f62c
                                        
                                            GET /images/0102y120009tf26vrA1E9.gif?proc=autoorient HTTP/1.1 
Host: dimg04.c-ctrip.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.110.17.24
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 151061
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=7726464
expires: Sun, 26 Feb 2023 14:20:09 GMT
date: Tue, 29 Nov 2022 04:05:45 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   151061
Md5:    89c820a186cb325d9979cdae663875eb
Sha1:   e9dbc77e9d46e03ebec28aaca2bf5e302767064f
Sha256: 9116f460b6f4c7d03cf9be95d414ba83d6bcba145a4f1eddd9decec6127e0ade
                                        
                                            GET /a-960x60.gif HTTP/1.1 
Host: 3p8801.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         107.148.202.17
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 49174
last-modified: Sat, 12 Nov 2022 07:32:42 GMT
etag: "636f4c1a-c016"
expires: Thu, 29 Dec 2022 04:05:45 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   49174
Md5:    bc918df261620170b7115cc2c1627bb9
Sha1:   59b4f2c3b1ae6fcc19becc440d212fa40cf3c15b
Sha256: 08f4f93ccef77488dbea402164b42335212bb9ecc09250f2d40d26f9dfe427db
                                        
                                            GET /0eddc09b941df608c7dbb65fd7344c05.gif HTTP/1.1 
Host: kvemm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.154.214.206
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 162
location: https://kvhiii.top/0eddc09b941df608c7dbb65fd7344c05.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /tL26d3m/240x140.gif HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.19.58.160
HTTP/2 404 Not Found
content-type: image/png
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 1031
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 4-bit colormap, non-interlaced\012- data
Size:   1031
Md5:    7325e2012a6cf941a6ea14f0061ff764
Sha1:   0d2ba63e280b979a98bc431bec8a7af985578769
Sha256: 63e3696c5e5e8b037e28e8fbef871184b0d1d60a7314c965b1426d9cce84dd69
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 03 Dec 2022 01:49:05 GMT
ETag: "83c6c19040243f9557381da2ea23151318e77b09"
Last-Modified: Tue, 29 Nov 2022 01:49:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7718777f0f8f0b65-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    2cc706a5f9e09fc0e8a1a52b930d00e7
Sha1:   83c6c19040243f9557381da2ea23151318e77b09
Sha256: 48f4753c03d844e325ad70adee36435463931ef82e1137dbe5f82a5fd9f335f7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=170358
Date: Tue, 29 Nov 2022 04:05:45 GMT
Etag: "63857b8f-1d7"
Expires: Thu, 01 Dec 2022 03:25:03 GMT
Last-Modified: Tue, 29 Nov 2022 03:25:03 GMT
Server: nginx
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 01:45:21 GMT
Expires: Sun, 04 Dec 2022 01:45:20 GMT
Etag: "6dbb2e1f1ffc56576314ef14da30c4d46b6a868f"
Cache-Control: max-age=422974,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771877800cd2b51b-OSL

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 03 Dec 2022 01:49:05 GMT
ETag: "83c6c19040243f9557381da2ea23151318e77b09"
Last-Modified: Tue, 29 Nov 2022 01:49:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 0
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771877806947b523-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    2cc706a5f9e09fc0e8a1a52b930d00e7
Sha1:   83c6c19040243f9557381da2ea23151318e77b09
Sha256: 48f4753c03d844e325ad70adee36435463931ef82e1137dbe5f82a5fd9f335f7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5799
Cache-Control: max-age=156356
Date: Tue, 29 Nov 2022 04:05:45 GMT
Etag: "63852e36-2d7"
Expires: Wed, 30 Nov 2022 23:31:41 GMT
Last-Modified: Mon, 28 Nov 2022 21:55:02 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5799
Cache-Control: max-age=156356
Date: Tue, 29 Nov 2022 04:05:45 GMT
Etag: "63852e36-2d7"
Expires: Wed, 30 Nov 2022 23:31:41 GMT
Last-Modified: Mon, 28 Nov 2022 21:55:02 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /obj/tos-cn-i-dy/50eb3499d51b44e38606d19d74344b42 HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.246.44.226
HTTP/2 200 OK
content-type: image/gif
                                        
server: Tengine
content-length: 420442
date: Thu, 17 Nov 2022 08:05:12 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 17 Nov 2022 08:04:55 GMT
nw-session-id: 20221117160455010175088205489D283Edffxv02dy
nw-session-trace: 2022-11-17T16:04:55.135790407+08:00 46
x-bdcdn-cache-status: TCP_HIT
x-length: 420442
x-powered-by: ImageX
x-response-date: Thu, 17 Nov 2022 16:04:55 GMT
x-tt-logid: 20221117160455010175088205489D283E
via: n150-056-038, cache1.l2de2[0,0,206-0,H], cache11.l2de2[1,0], cache11.l2de2[1,0], cache8.se1[0,0,200-0,H], cache3.se1[2,0]
x-request-ip: fdbd:dc02:22:591::147
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=2
x-tt-trace-host: 01307a3fb6122614a2cf2861b66f794cde44fb789caf024a9d7b2c6561afdf19f775a092f1c68726af9bc843af9d0ac960e24a539cf77cbcdda5d0e4291dcc3344458d0ed78fd87e483c6a160aeb1e5530716a4a1a22319dfa833dc91d61d824ef
x-response-lb: image
ali-swift-global-savetime: 1668672312
age: 1022433
x-cache: HIT TCP_MEM_HIT dirn:11:275132548
x-swift-savetime: Thu, 17 Nov 2022 08:34:25 GMT
x-swift-cachetime: 31534247
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9716696947456918476e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   420442
Md5:    7020ecb5ebdf5d2d41668f76d36f5982
Sha1:   30c768ceb1463fffc0145f1e73c808f8f6d2bb51
Sha256: 3a55db6e5e4fa541729efffaa932549e491e07af768e1c3c3d1dad65ae53a8bb
                                        
                                            GET /obj/tos-cn-i-dy/a2b80ab204704324a83fbd20f39ec3bb HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.246.44.226
HTTP/2 200 OK
content-type: image/gif
                                        
server: Tengine
content-length: 439790
date: Sat, 26 Nov 2022 13:16:32 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Sat, 26 Nov 2022 11:30:39 GMT
nw-session-id: 2022112619303901015013207634B66C26h2vnt03dy
nw-session-trace: 2022-11-26T19:30:39.564101929+08:00 31
x-bdcdn-cache-status: TCP_HIT
x-length: 439790
x-powered-by: ImageX
x-response-date: Sat, 26 Nov 2022 19:30:39 GMT
x-tt-logid: 2022112619303901015013207634B66C26
via: n150-059-155, cache1.l2de2[0,0,206-0,H], cache14.l2de2[1,0], cache14.l2de2[1,0], cache8.se1[0,0,200-0,H], cache3.se1[1,0]
x-request-ip: fdbd:dc02:22:88::209
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 017a400951cb8b1f6f99182a8c8a87682f36a7bc8c9d51c44eea0062d5621a593cf11ecf59e1d039d14eacf478f79a4f6c371b82af94314a1c2da27ab8970cef0e421d48454c58e7340acddc4faf3a396fa65def9cb218d02bc5986a2c25b010d8
x-response-lb: image
ali-swift-global-savetime: 1669468593
age: 226152
x-cache: HIT TCP_MEM_HIT dirn:11:451236523
x-swift-savetime: Sat, 26 Nov 2022 13:38:46 GMT
x-swift-cachetime: 31534667
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9716696947456978477e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   439790
Md5:    07ad6948d174b603a75e166a521bbb04
Sha1:   d08af2d0fc9693ce636e66cbb89277875d7954f4
Sha256: 40853d1d4eb09490225dfe79a563bcc574195734b42387a2a4043f854bc3ca2b
                                        
                                            GET /yy-960x60.gif HTTP/1.1 
Host: 3p8801.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         107.148.202.17
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 37300
last-modified: Sat, 12 Nov 2022 07:15:04 GMT
etag: "636f47f8-91b4"
expires: Thu, 29 Dec 2022 04:05:45 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   37300
Md5:    95ec3b09499f1a1828b7e7921f7fa2f5
Sha1:   ceff74a70c81395fcd3704fc94929968dc5d3a63
Sha256: 4cd52a6e9acb566d7bb83c792f04df294ac22c11645bdc0d8a6c9e19c5625644
                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 17:36:51 GMT
Expires: Fri, 02 Dec 2022 17:36:50 GMT
Etag: "d961b1e242f0945fd9e02e727878b7d047876742"
Cache-Control: max-age=307264,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77187780cfb10b45-OSL

                                        
                                            GET /obj/tos-cn-i-dy/5cd35a27ffb84b129a891385b65cc0a7 HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.246.44.226
HTTP/2 200 OK
content-type: image/gif
                                        
server: Tengine
content-length: 257486
date: Mon, 28 Nov 2022 09:44:26 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 28 Nov 2022 06:31:24 GMT
nw-session-id: 202211281431240101580372093E7C1EEEws92b03dy
nw-session-trace: 2022-11-28T14:31:24.068007357+08:00 32
x-bdcdn-cache-status: TCP_HIT
x-length: 257486
x-powered-by: ImageX
x-response-date: Mon, 28 Nov 2022 14:31:24 GMT
x-tt-logid: 202211281431240101580372093E7C1EEE
via: n150-057-105, cache16.l2de2[0,0,206-0,H], cache16.l2de2[32,0], cache16.l2de2[32,0], cache1.se1[0,0,200-0,H], cache3.se1[16,0]
x-request-ip: fdbd:dc02:22:591::147
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=16
x-tt-trace-host: 01df2d809375c40a2a727e6f3d348595ad4efd188921b8289a00259bc1a6de28cc8c96700253cff3538aeb893e37af7b1e1a652e35d62cc17aaf0fb48f84f7eaad75c3ed5f26eb9322352d59f34ac551eac65e94d52270da61aac91b838e681de4
x-response-lb: image
ali-swift-global-savetime: 1669628666
age: 66079
x-cache: HIT TCP_MEM_HIT dirn:4:235007224
x-swift-savetime: Mon, 28 Nov 2022 10:01:12 GMT
x-swift-cachetime: 31534994
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9716696947457058478e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   257486
Md5:    55d735ced9e7e36a0041464bf44ba65f
Sha1:   aa4662f343a0d5a8151441554993aad71103637c
Sha256: 4c2cb0687f63d736e4557cbe65bdeb10f836ba8ac7503a322c40ebb2187fb851
                                        
                                            GET /11-960x60.gif HTTP/1.1 
Host: 3p8801.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         107.148.202.17
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 242091
last-modified: Sat, 19 Nov 2022 11:26:07 GMT
etag: "6378bd4f-3b1ab"
expires: Thu, 29 Dec 2022 04:05:45 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   242091
Md5:    b9072e166e9ab28d08854aab05882d3b
Sha1:   a88df27293f6525b000cc1112084fe4f2cdd0e8c
Sha256: 1ad655eb5ad6ce6d519f757b4e78afc39cd41e892897faadf5610e11e3d437b2
                                        
                                            GET /33f557d8ed124da9b6a2642dac638bcd..gif HTTP/1.1 
Host: 362728tdg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.170.15.90
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "635b9147-67387"
Date: Tue, 22 Nov 2022 14:39:52 GMT
Server: nginx
Last-Modified: Fri, 28 Oct 2022 08:22:31 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-20
Content-Length: 422791


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   422791
Md5:    bdeb53a7d3c2f219a7ae903a7346cd91
Sha1:   e5349fa31f22ce3605b9256c0a6e37def92b13b6
Sha256: 316319f597bb6dd3d686c46a51e67693243868108b798fa8174f8a124b6422b4

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 03 Dec 2022 01:55:04 GMT
ETag: "703ba61cb928fc585c0cc2e870ce9e53dab82401"
Last-Modified: Tue, 29 Nov 2022 01:55:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771877807fde0b65-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    9ab45e9920220fcf9443b2bf81ba6a7d
Sha1:   703ba61cb928fc585c0cc2e870ce9e53dab82401
Sha256: e67172f708804662828bae9333bd568ddbe7d135e8f0a946dd070f5a3195ea55
                                        
                                            GET /upload/vod/2022/10-14/16/2omtifvgwvo16482omtifvgwvo282149.jpg HTTP/1.1 
Host: lbfm.lbpictupian.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.22.12.214
HTTP/2 200 OK
content-type: image/webp
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 5568
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6690
content-disposition: inline; filename="2omtifvgwvo16482omtifvgwvo282149.webp"
etag: "6349225c-1a22"
last-modified: Fri, 14 Oct 2022 08:48:28 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 7718777fafcb1bfe-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   5568
Md5:    187a056e67fd5cb46bc7c783f9a9fdac
Sha1:   4ee4e1bf29186fa2c4d5373fe121a6a6031a8737
Sha256: a02fab7d850232b8f4fb9bc943a441566f738d0d56012f677f5f32d847bdc171
                                        
                                            GET /upload/vod/2019/11-08/10/5uhe5rvsnvm10155uhe5rvsnvm1724067.jpg HTTP/1.1 
Host: lbfm.lbpictupian.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.22.12.214
HTTP/2 200 OK
content-type: image/webp
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 8224
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9431
content-disposition: inline; filename="5uhe5rvsnvm10155uhe5rvsnvm1724067.webp"
etag: "5dc4cfb5-24d7"
last-modified: Fri, 08 Nov 2019 02:15:17 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 7718777fafc71bfe-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   8224
Md5:    81267f0dd2a21a97169d2dff3bb67578
Sha1:   ec4b5545c42d0a756a2c5304979385195727d80f
Sha256: d2ccc3a3f54595284db2b42186999635433f6d4beab91a1ca15d54a8bbc51de2
                                        
                                            POST /s/gts1p5/dFBzDyqgPsM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 04:05:45 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 03 Dec 2022 01:55:04 GMT
ETag: "703ba61cb928fc585c0cc2e870ce9e53dab82401"
Last-Modified: Tue, 29 Nov 2022 01:55:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771877809959b523-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    9ab45e9920220fcf9443b2bf81ba6a7d
Sha1:   703ba61cb928fc585c0cc2e870ce9e53dab82401
Sha256: e67172f708804662828bae9333bd568ddbe7d135e8f0a946dd070f5a3195ea55
                                        
                                            GET /upload/vod/2019/11-08/10/hmdrg44c14i1016hmdrg44c14i5324103.jpg HTTP/1.1 
Host: lbfm.lbpictupian.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.22.12.214
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 11122
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11646, status=webp_bigger
etag: "5dc4d015-2d7e"
last-modified: Fri, 08 Nov 2019 02:16:53 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7718777fafc81bfe-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Size:   11122
Md5:    b022836144761d53fd172695cd436216
Sha1:   71dd9ccacd6072c9aeab040b290e151ff01e8d02
Sha256: 6e559b55fe38655bb5668daa0fd7125e23e6924d3562f7144e7fc7600bb41918
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Tue, 29 Nov 2022 04:05:45 GMT
Etag: "63852e36-2d7"
Server: ECS (amb/6BB1)
Content-Length: 727

                                        
                                            GET /upload/vod/2022/11-28/13/jjy5x0xieib1335jjy5x0xieib276308.jpg HTTP/1.1 
Host: lbfm.lbpictupian.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.22.12.214
HTTP/2 200 OK
content-type: image/webp
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 9100
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10082
content-disposition: inline; filename="jjy5x0xieib1335jjy5x0xieib276308.webp"
etag: "6384489f-2762"
last-modified: Mon, 28 Nov 2022 05:35:27 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 7718777fafd61bfe-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   9100
Md5:    0df8730f164c8ca030cae7a5f232d7d2
Sha1:   ddae230735be58dfa9e3c427bea78ea92aaa5bf7
Sha256: 682b5c4dd6447da8fdad3f93958c77f94479b0e747cebeec1bdf08d7a44123ce
                                        
                                            GET /upload/vod/2022/11-28/13/3cktbr5e43s13353cktbr5e43s286310.jpg HTTP/1.1 
Host: lbfm.lbpictupian.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys16.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.22.12.214
HTTP/2 200 OK
content-type: image/webp
                                        
date: Tue, 29 Nov 2022 04:05:45 GMT
content-length: 8564
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9688
content-disposition: inline; filename="3cktbr5e43s13353cktbr5e43s286310.webp"
etag: "638448a0-25d8"
last-modified: Mon, 28 Nov 2022 05:35:28 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 7718777fafd71bfe-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   8564
Md5:    846fc2e5c7fde4844189c7c5352c0e86
Sha1:   e00eca00bf7599eccaa69465e5ce3f61f1521440
Sha256: d26603230ebb610c61e8ac8209446feb6ec0e57a7eba6c0b05329982bbf3fa84
                                        
                                            GET /upload/vod/2022/11-28/13/03s1agsxfpo133503s1agsxfpo226296.jpg HTTP/1.1 
Host: lbfm.lbpictupian.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5