r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8056
Expires: Sat, 04 Feb 2023 04:11:25 GMT
Date: Sat, 04 Feb 2023 01:57:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6396
Expires: Sat, 04 Feb 2023 03:43:45 GMT
Date: Sat, 04 Feb 2023 01:57:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8428
Expires: Sat, 04 Feb 2023 04:17:37 GMT
Date: Sat, 04 Feb 2023 01:57:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 01:36:12 GMT
content-type: application/json
age: 1257
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3MGeKjXWoCuB/JLQrUMClMjPkw7YsMYKwB1AOHdG6QWCbKRX3SFdeoEQ8LjfIfBphZMzuvgdilI=
x-amz-request-id: SMQDSGRP4XX6R3W3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 01:52:39 GMT
age: 270
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
uggakaufen.net/hbb
301 Moved Permanently 0 B IP
ASN #398823 PEGTECHINC-AP-02
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hbb HTTP/1.1
Host: uggakaufen.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 01:57:13 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.uggakaufen.net/hbb
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:10 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 01:07:19 GMT
age: 2991
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.uggakaufen.net/hbb
200 OK 651 B IP
ASN #398823 PEGTECHINC-AP-02
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (687), with CRLF line terminators
Hash c318dfc915acb3fa3255939cc3b8f702
8d51c13c5e24485aba8b71b1d98bfa82ecb29787
e677a407fce4d52fb46bd7952168ca652607c6f3e997ca918a37e789eb1fe2f5
GET /hbb HTTP/1.1
Host: www.uggakaufen.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:13 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13773
Expires: Sat, 04 Feb 2023 05:46:43 GMT
Date: Sat, 04 Feb 2023 01:57:10 GMT
Connection: keep-alive
www.uggakaufen.net/common.js
200 OK 1.1 kB URL HTTP/1.1 www.uggakaufen.net/common.js
IP
ASN #398823 PEGTECHINC-AP-02
File type HTML document, ASCII text, with very long lines (389), with CRLF line terminators
Hash e76fa239f5b91e17b93cd981eefbe2e5
bc493da2145c33b1bfd03dad664e1a3d54a800dc
cfefe4e361499d352ca75b1be29f9dda7e59f058c01e88af7424e6d6383c13c1
GET /common.js HTTP/1.1
Host: www.uggakaufen.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.uggakaufen.net/hbb
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:14 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NNoJj2p9/XwONAZNVNL3tA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2++Jml8J/7anCdZ6B3O0yz07zEo=
www.uggakaufen.net/tj.js
200 OK 801 B IP
ASN #398823 PEGTECHINC-AP-02
File type ASCII text, with CRLF line terminators
Hash 49845246b5474410f84cc371860277be
e95c59cb06986e7604b3fd00940de0025a214213
16b39ec620fe9d8e17807a6248d8e14a2eb0b8eaa705ae03ec8ed023db214f65
GET /tj.js HTTP/1.1
Host: www.uggakaufen.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.uggakaufen.net/hbb
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:14 GMT
Content-Type: application/x-javascript
Content-Length: 801
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 97b27b07a7127a7750cf749ddfc45d76
869c4cc2f804f49f5727120a519438b0e49bdf58
ba977301416d8b3df4813911684775d5fa1f40c5142d6121bedcba2dfe4a4b95
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=157566
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:11 GMT
Etag: "63dd7ff5-117"
Expires: Sun, 05 Feb 2023 21:43:17 GMT
Last-Modified: Fri, 03 Feb 2023 21:43:17 GMT
Server: nginx
Content-Length: 279
cdn.bootscdn.net/ajax/libs/jquery/3.6.1/jquery.js
200 OK 350 B URL HTTP/2 cdn.bootscdn.net/ajax/libs/jquery/3.6.1/jquery.js
IP
File type ASCII text, with no line terminators
Hash f821bc4aaa9f98db037f5b1419e1cde6
2e1c5b16c3b3b3779569f7fe56b751377b54ff10
966a56d5aa011675bc31a3519b88e6ebf853b6ad78c46b2f3b2e6cc6f2502233
GET /ajax/libs/jquery/3.6.1/jquery.js HTTP/1.1
Host: cdn.bootscdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.uggakaufen.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:11 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
last-modified: Saturday, 04-Feb-2023 01:57:11 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xi%2BHGtUKnTIO6k5UFHfv30BPgXfAXNrR0kR%2BvqGwOS9YeLt21iDYM1NMSzqHv2Gm9jiAOBlaW1bDONa%2FBzWIMOkjAWs2qqWiOf5yoCxX4lyBOtd%2BImwdIbLvUKb1N%2FYRc%2FYx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793fcb489e1db50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 88001e831108248d887dda6d79c93e0c
593b09f13f2be46ef3ed093c6ff7d641b651f884
5745f145ee8aecdb16cdc1ecb144b19fc8394218099c04d42ff27d554cb07c43
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5745F145EE8AECDB16CDC1ECB144B19FC8394218099C04D42FF27D554CB07C43"
Last-Modified: Wed, 01 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14829
Expires: Sat, 04 Feb 2023 06:04:20 GMT
Date: Sat, 04 Feb 2023 01:57:11 GMT
Connection: keep-alive
www.uggakaufen.net/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.uggakaufen.net/favicon.ico
IP
ASN #398823 PEGTECHINC-AP-02
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.uggakaufen.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.uggakaufen.net/hbb
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:14 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Thu, 09 Feb 2023 01:57:14 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 715a144467eca9ded1ecd2d23677d90b
de5402b341f8d2216a378429a5e960e133645d4d
f7f3cff97ca72a710ff5d077afd182e63ed62587b68dd0bf2acb5b43187c4386
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 08 Feb 2023 00:45:02 GMT
ETag: "de5402b341f8d2216a378429a5e960e133645d4d"
Last-Modified: Sat, 04 Feb 2023 00:45:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 04 Feb 2023 01:57:11 GMT
Age: 1792
X-Served-By: cache-qpg1274-QPG, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 4
X-Timer: S1675475832.663215,VS0,VE0
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 715a144467eca9ded1ecd2d23677d90b
de5402b341f8d2216a378429a5e960e133645d4d
f7f3cff97ca72a710ff5d077afd182e63ed62587b68dd0bf2acb5b43187c4386
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 08 Feb 2023 00:45:02 GMT
ETag: "de5402b341f8d2216a378429a5e960e133645d4d"
Last-Modified: Sat, 04 Feb 2023 00:45:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 04 Feb 2023 01:57:11 GMT
Age: 1792
X-Served-By: cache-qpg1274-QPG, cache-bma1640-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 6
X-Timer: S1675475832.669171,VS0,VE0
api.share.baidu.com/s.gif?l=http://www.uggakaufen.net/hbb
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.uggakaufen.net/hbb
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.uggakaufen.net/hbb HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.uggakaufen.net/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Sat, 04 Feb 2023 01:57:11 GMT
www.ppmvapi111.com/news/index.html
200 OK 238 B URL HTTP/2 www.ppmvapi111.com/news/index.html
IP
File type HTML document, Unicode text, UTF-8 text
Hash d0fdb7c8063af8eec9cd182ae04fafb5
5513015439cf3ddd26bc370f1a23f581ddf924b2
5d65e4a49b2d9c83208a26ae2bbbf13c7107c365da7f2136ff081f73d94ebba8
GET /news/index.html HTTP/1.1
Host: www.ppmvapi111.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.uggakaufen.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:11 GMT
content-type: text/html
content-length: 238
last-modified: Sun, 29 Jan 2023 09:48:45 GMT
etag: "63d640fd-ee"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7881
Expires: Sat, 04 Feb 2023 04:08:33 GMT
Date: Sat, 04 Feb 2023 01:57:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7881
Expires: Sat, 04 Feb 2023 04:08:33 GMT
Date: Sat, 04 Feb 2023 01:57:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7881
Expires: Sat, 04 Feb 2023 04:08:33 GMT
Date: Sat, 04 Feb 2023 01:57:12 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b5c35cdff2fb0758db780212b0b1f77
edbb557a3bf57128467335685aebbd4831d802f8
e0fa59843073ba8bd171c66610bc1b3d59a1a94c4991e6023507b9453ca0edba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9349
x-amzn-requestid: ecd1913d-7dbe-4ffd-ba85-0549aab51a06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyayOGPlIAMFQ7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dda4da-6a9b8d146155fa8b6c1c02d6;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 00:20:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jGBEz2d-SXXPBZhwlJgR4w248y-NY2c-18euLre5PULjWUIfhfUmNQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 00:30:47 GMT
age: 5185
etag: "edbb557a3bf57128467335685aebbd4831d802f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGg5oAMFV-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:44 GMT
age: 13888
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:47:06 GMT
age: 15006
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 392b61306c346508d3ac4a2f28218f9c
d2de32b52e0d3f4fc6acaf687b3521294b01dc03
018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10253
x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GGv5IAMFu8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jBxNmhfAeUgxg8w4XpQHZ1QoN9GatdUV7V7r2tHd7YePJYPHpesd2Q==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:21 GMT
age: 13911
etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41580a501cc07c328e6ab6b167a110dc
a4dfa0f479b5f9a036b75b2eea6dffabd3a3486e
0fa45161e563101b3f1293f951a3edf84c88c9f3b29bed9b54f952ca325bf21d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7101
x-amzn-requestid: 479d8004-430a-45b9-99fa-11cbcc605a7c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EHxqoAMFaug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-25ac3c54427748bc191fd1ba;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1-NjCSeyrUAwvL2BDl1JXYK0WY0ze5FZz5-chZ6x2IEnDQBw9rEv6w==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:11:51 GMT
age: 13521
etag: "a4dfa0f479b5f9a036b75b2eea6dffabd3a3486e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f926cd4f39b1a10b152e5959b28ae29e
2b1982d21321071394e363888e007598e968fb35
a51b246a9aa5a2583cae7fd4f0a3bdf73f0b318b7838828d36ea5674a5f26753
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13309
x-amzn-requestid: f6a3f0f3-d91b-4f4d-8265-0f87742ba5d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyFeBFX4oAMFfpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd82bf-5808ceec265756c702d212dc;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:55:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WWjzs8W8GmSAM0-Uc8XBTxz67RJJCIzp3fBYhkoIWZ26UrobmZV8mw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:14:12 GMT
etag: "2b1982d21321071394e363888e007598e968fb35"
content-type: image/jpeg
age: 13380
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1f7f3c5623d9f9146eca892803765c81
6846a6cb15ca4d2f8075dcf16ce2589efdfcf588
e71f8eb43666787faaf2a617d73c2766bcbae21bda9d6c072454b13941c6a3bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E71F8EB43666787FAAF2A617D73C2766BCBAE21BDA9D6C072454B13941C6A3BC"
Last-Modified: Wed, 01 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7263
Expires: Sat, 04 Feb 2023 03:58:15 GMT
Date: Sat, 04 Feb 2023 01:57:12 GMT
Connection: keep-alive
hm.baidu.com/hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash 5fa205e186c689ed0cf7bb2e94444824
133a6cc3c71aaeec7d38cc25e468a6f512b160df
d50cb624f45278b1407025b1f688a6ae98819ff10b593da1659b6c721899f34f
GET /hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.uggakaufen.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 01:57:12 GMT
Etag: 0677244c9acca1db21f61a3a2fae8869
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=3A0012F5AAA1EFB0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.digicert.com/
200 OK 279 B IP
Hash b17d144d2eec6d6e3595c96453ebe6b4
b7ce1a8c564588450975a49f6c81866d4c41def9
684d973438c12601bb3a79e32ce6eeb141d2ad1a4abcbe33746972471fb4c44c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3043
Cache-Control: max-age=136105
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:12 GMT
Etag: "63dd203e-117"
Expires: Sun, 05 Feb 2023 15:45:37 GMT
Last-Modified: Fri, 03 Feb 2023 14:54:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b17d144d2eec6d6e3595c96453ebe6b4
b7ce1a8c564588450975a49f6c81866d4c41def9
684d973438c12601bb3a79e32ce6eeb141d2ad1a4abcbe33746972471fb4c44c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3043
Cache-Control: max-age=136105
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:12 GMT
Etag: "63dd203e-117"
Expires: Sun, 05 Feb 2023 15:45:37 GMT
Last-Modified: Fri, 03 Feb 2023 14:54:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b17d144d2eec6d6e3595c96453ebe6b4
b7ce1a8c564588450975a49f6c81866d4c41def9
684d973438c12601bb3a79e32ce6eeb141d2ad1a4abcbe33746972471fb4c44c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3043
Cache-Control: max-age=136105
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:12 GMT
Etag: "63dd203e-117"
Expires: Sun, 05 Feb 2023 15:45:37 GMT
Last-Modified: Fri, 03 Feb 2023 14:54:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b17d144d2eec6d6e3595c96453ebe6b4
b7ce1a8c564588450975a49f6c81866d4c41def9
684d973438c12601bb3a79e32ce6eeb141d2ad1a4abcbe33746972471fb4c44c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3043
Cache-Control: max-age=136105
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:12 GMT
Etag: "63dd203e-117"
Expires: Sun, 05 Feb 2023 15:45:37 GMT
Last-Modified: Fri, 03 Feb 2023 14:54:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b17d144d2eec6d6e3595c96453ebe6b4
b7ce1a8c564588450975a49f6c81866d4c41def9
684d973438c12601bb3a79e32ce6eeb141d2ad1a4abcbe33746972471fb4c44c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3043
Cache-Control: max-age=136105
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:12 GMT
Etag: "63dd203e-117"
Expires: Sun, 05 Feb 2023 15:45:37 GMT
Last-Modified: Fri, 03 Feb 2023 14:54:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
www.ppmv027.xyz/static/images/1.gif
200 OK 254 B URL HTTP/2 www.ppmv027.xyz/static/images/1.gif
IP
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
Analyzer Verdict Alert quad9 Sinkholed
GET /static/images/1.gif HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:12 GMT
content-type: image/gif
content-length: 254
last-modified: Tue, 15 Nov 2022 08:35:43 GMT
etag: "63734f5f-fe"
expires: Mon, 06 Mar 2023 01:57:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?1d17743632808b728a4c05b9d579a62a
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?1d17743632808b728a4c05b9d579a62a
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (620)
Hash 2aa012c01205b2260360a2c03c23f428
626fe607d1458b7a4bbde9047b55a2e8a3c9c5be
3943cf48562f5ed3029343705568ab82a0c88d3b6cfc6c27a9cbdc1e3e4fd1f1
GET /hm.js?1d17743632808b728a4c05b9d579a62a HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.uggakaufen.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 01:57:12 GMT
Etag: 875d5c92f74f9595a2db78fb92fb7fe4
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A33EEA881858A47B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
vip3.lbbf9.com/20220301/cnU9g8rl/1.jpg
200 OK 7.4 kB URL HTTP/1.1 vip3.lbbf9.com/20220301/cnU9g8rl/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 5fedbb433e66940be75b15c5fcce5c26
3fe4f0eea9087f97ab9586d25751f75f5a265507
ce930a9e2143c86ec7bf6bcc3d3709d8de73fea913491d9bb5682711997638df
GET /20220301/cnU9g8rl/1.jpg HTTP/1.1
Host: vip3.lbbf9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:12 GMT
Content-Type: application/octet-stream
Content-Length: 7414
Last-Modified: Tue, 01 Mar 2022 11:01:46 GMT
Connection: keep-alive
Content-Disposition: attachment; filename="1.jpg"
ETag: "621dfd1a-1cf6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Accept-Ranges: bytes
vip3.lbbf9.com/20220301/5IyYcoI5/1.jpg
200 OK 8.3 kB URL HTTP/1.1 vip3.lbbf9.com/20220301/5IyYcoI5/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 7dc2fa378f058c9a6abca22c178e0b38
824d92929796b73f62e60fa7c414a42b35c0931c
30700cfd4a3bc2b2c3d50d13623fccf5c2f82ccb8b986dab69bc4d56b21afe1a
GET /20220301/5IyYcoI5/1.jpg HTTP/1.1
Host: vip3.lbbf9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:12 GMT
Content-Type: application/octet-stream
Content-Length: 8255
Last-Modified: Tue, 01 Mar 2022 10:56:56 GMT
Connection: keep-alive
Content-Disposition: attachment; filename="1.jpg"
ETag: "621dfbf8-203f"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Accept-Ranges: bytes
vip3.lbbf9.com/20220301/hVRo1Abs/1.jpg
200 OK 7.5 kB URL HTTP/1.1 vip3.lbbf9.com/20220301/hVRo1Abs/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 6b6f675ff315020a194d42f817d05cdc
9487e0ca5612f48c6f3a1505c82fc931d7dbe260
5b961269d0266259a024508b6dc6ba105c3a7e973b97e74125f2a0aedf238dce
GET /20220301/hVRo1Abs/1.jpg HTTP/1.1
Host: vip3.lbbf9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:12 GMT
Content-Type: application/octet-stream
Content-Length: 7534
Last-Modified: Tue, 01 Mar 2022 11:00:56 GMT
Connection: keep-alive
Content-Disposition: attachment; filename="1.jpg"
ETag: "621dfce8-1d6e"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Accept-Ranges: bytes
vip3.lbbf9.com/20220301/jCW8R0HS/1.jpg
200 OK 6.6 kB URL HTTP/1.1 vip3.lbbf9.com/20220301/jCW8R0HS/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ccb977ff319928b44c25a47fe5435af0
554d8e282f121c4b49962049d7442a3c2187ed89
27174052ea81115f91de811a7475f3b0c9a06c1d9d1692e2967a6c6f935cca36
GET /20220301/jCW8R0HS/1.jpg HTTP/1.1
Host: vip3.lbbf9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:12 GMT
Content-Type: application/octet-stream
Content-Length: 6628
Last-Modified: Tue, 01 Mar 2022 12:54:31 GMT
Connection: keep-alive
Content-Disposition: attachment; filename="1.jpg"
ETag: "621e1787-19e4"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Accept-Ranges: bytes
lbfm.lbpictupian.com/upload/vod/2023/01/hc54nceyvym.jpg
200 OK 6.2 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/hc54nceyvym.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4a05bf2c16e523a810b0cd5c374f1fe1
7ecf4e34b53fc57944de2ff28c76c13fdba65ef0
f78915000c73e119648a1c721ec92441c87c10a418438995e77de12abc005daa
GET /upload/vod/2023/01/hc54nceyvym.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 6196
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8156
content-disposition: inline; filename="hc54nceyvym.webp"
etag: "63cf2dd1-1fdc"
last-modified: Tue, 24 Jan 2023 01:01:05 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526dd2b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/k5qy4551mkt.jpg
200 OK 7.2 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/k5qy4551mkt.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 17b750b2646baae16756796db43457ca
796c23fad1d9ee2ff0136898aab4f2988918e846
c854dd14b119265836884bbe7c24e6725febace62de863b6ae169016b29308dc
GET /upload/vod/2023/01/k5qy4551mkt.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 7178
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8124
content-disposition: inline; filename="k5qy4551mkt.webp"
etag: "63cf2dcd-1fbc"
last-modified: Tue, 24 Jan 2023 01:01:01 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526dd1b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/iitadlom2gs.jpg
200 OK 5.8 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/iitadlom2gs.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b1b0115af17224e60a7c21f45963a2a3
ee2e395e65145c545579f621d7fe2af0434af5a8
e2e248c31704f0bc7713dd962ce21b565fc079c1f784f4bdf6b0baf6a8c34c52
GET /upload/vod/2023/01/iitadlom2gs.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 5808
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7125
content-disposition: inline; filename="iitadlom2gs.webp"
etag: "63cf3062-1bd5"
last-modified: Tue, 24 Jan 2023 01:12:02 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526de3b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/gywkyb1p3kb.jpg
200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/gywkyb1p3kb.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 814d956fea0a09b32ba0440dcbd5374c
ae401d4c2cc9a980eb2f585aea6cc9c143c152e3
cc33eae8f18bb858b2d6e2fba11d10851d3b696d62f4de09d8093e1e1ec75fd5
GET /upload/vod/2023/01/gywkyb1p3kb.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 11280
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=12008
content-disposition: inline; filename="gywkyb1p3kb.webp"
etag: "63cf2de2-2ee8"
last-modified: Tue, 24 Jan 2023 01:01:22 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526dd7b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/qe51m5osg3y.jpg
200 OK 8.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/qe51m5osg3y.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 95993aa9e678ca41708977927a30b018
84c4bbde3a7a76da48f846f51ba21ae522ed1741
a48f98118d586f7165efa32ad5658f169ded07f9e999432bac0b4792986bc368
GET /upload/vod/2023/01/qe51m5osg3y.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 8710
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9643
content-disposition: inline; filename="qe51m5osg3y.webp"
etag: "63cf30dd-25ab"
last-modified: Tue, 24 Jan 2023 01:14:05 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526de0b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/4njbqp4ttqp.jpg
200 OK 5.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/4njbqp4ttqp.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a74d1d17cd0cd0b1273b483f1261e374
17f3df02d38477d19d6d3008ff92707da8b48cab
1834d1c9ff7933c684f96e10095d3cadbe175f4466b718e05604d374ef82149d
GET /upload/vod/2023/01/4njbqp4ttqp.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 5718
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8382
content-disposition: inline; filename="4njbqp4ttqp.webp"
etag: "63cf305e-20be"
last-modified: Tue, 24 Jan 2023 01:11:58 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526de2b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/jp2ucrhergv.jpg
200 OK 4.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/jp2ucrhergv.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9053500c486f90f94d263bb48cce746a
26b819e729af7a2241692fdc0fdf6a097bbc9e5e
0307d2919955c4da4e460101383df0292d843dd32d7b45b991d76f5fdab1a99c
GET /upload/vod/2023/01/jp2ucrhergv.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 4620
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7054
content-disposition: inline; filename="jp2ucrhergv.webp"
etag: "63cf30d8-1b8e"
last-modified: Tue, 24 Jan 2023 01:14:00 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526ddfb527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/vskau0y3i3d.jpg
200 OK 6.2 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/vskau0y3i3d.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c485ed6bfd23b12c669e1d1a893b243e
4acd205143f653ccbdf45c612fcd50444dac1957
fb02c9971f8f18c60a0b14882cb25960e6dcb7432c1f85d47ccaa277192b296c
GET /upload/vod/2023/01/vskau0y3i3d.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 6166
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8544
content-disposition: inline; filename="vskau0y3i3d.webp"
etag: "63cf30c7-2160"
last-modified: Tue, 24 Jan 2023 01:13:43 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526ddbb527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/cjflcq0v03o.jpg
200 OK 6.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/cjflcq0v03o.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cb49966374827b49812b04653717a7b0
ad75bab894f02e98968fdf23abf76f73bf4695a7
847881654d0b534fd062b9e2e374d62f2b2c2343bbe09b62e372746b78b36554
GET /upload/vod/2023/01/cjflcq0v03o.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 6572
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8807
content-disposition: inline; filename="cjflcq0v03o.webp"
etag: "63cf2dc8-2267"
last-modified: Tue, 24 Jan 2023 01:00:56 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526dd0b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/06-23/18/tlr4obxw1yk1806tlr4obxw1yk5410785.jpg
200 OK 13 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/06-23/18/tlr4obxw1yk1806tlr4obxw1yk5410785.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash f606db54fc126e66e0b485d92b224cac
e7bf0612653660e6218afd6a0fdec02fc5f15a77
d13615d0ba17cae59c664b45a46c3bfaa5c208d6c67273533ff4e9d7ed12e820
GET /upload/vod/2020/06-23/18/tlr4obxw1yk1806tlr4obxw1yk5410785.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 12751
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13304, status=webp_bigger
etag: "5ef1d43e-33f8"
last-modified: Tue, 23 Jun 2020 10:06:54 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526dcfb527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/dlyl1suizre.jpg
200 OK 7.0 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/dlyl1suizre.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12da7e9bcf00d611b667a4386cd1e5a5
0c0fe1725e9c3c249b64dfc879eada5dfe7b76bf
c63aed0f12f841f632d3141dcf82836ac9bc9672760be5f8c9d7db18edf862f5
GET /upload/vod/2023/01/dlyl1suizre.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 7020
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8122
content-disposition: inline; filename="dlyl1suizre.webp"
etag: "63cf2dd5-1fba"
last-modified: Tue, 24 Jan 2023 01:01:09 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526dd4b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/e40ucwmo2hx.jpg
200 OK 8.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/e40ucwmo2hx.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5e8374fc3226e16ecbd7efd117c15493
803aeff9230361f7be62632f32bdc2d2862f8d75
f00e85788bef3556c65006b761d8894ea967414e994d9e5fbb05374817709eef
GET /upload/vod/2023/01/e40ucwmo2hx.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 8070
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9329
content-disposition: inline; filename="e40ucwmo2hx.webp"
etag: "63cf30d4-2471"
last-modified: Tue, 24 Jan 2023 01:13:56 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526ddeb527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/3ah1tduw25o.jpg
200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/3ah1tduw25o.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b7a666120767ab38146da56598833d6e
9112fd2d367e40853b09f1c5414a405263ef7ba8
f73b3adcdda48323f1af0a4853716e735f64eff14681e4ee26e24deb552c883e
GET /upload/vod/2023/01/3ah1tduw25o.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 10022
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11040
content-disposition: inline; filename="3ah1tduw25o.webp"
etag: "63cf2dda-2b20"
last-modified: Tue, 24 Jan 2023 01:01:14 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526dd5b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/gwmbm0b3pnq.jpg
200 OK 5.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/gwmbm0b3pnq.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7c45aaea0f739d3a763db10058875014
abf63197fcddf44bafdc137821d997e4165b0dbf
0a7af11abbcbbe347ce162ad073e985a054df01f7578cb848138dda4ee35abbb
GET /upload/vod/2023/01/gwmbm0b3pnq.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 5736
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7004
content-disposition: inline; filename="gwmbm0b3pnq.webp"
etag: "63cf306f-1b5c"
last-modified: Tue, 24 Jan 2023 01:12:15 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526de6b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/wagbdfc2ttl.jpg
200 OK 7.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/wagbdfc2ttl.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash aa8e6e7d013ad64209c50a31f768c029
954f958ed7843e8c07ddd6e9a0eeb92632413b1b
200d26a469e205dbef3b679440e0d142cecbd39ebd846f78051b85165905188c
GET /upload/vod/2023/01/wagbdfc2ttl.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 7748
cf-bgj: imgq:85,h2pri
cf-polished: origSize=8265, status=webp_bigger
etag: "63cf306b-2049"
last-modified: Tue, 24 Jan 2023 01:12:11 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526de5b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/ev243td5uzq.jpg
200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/ev243td5uzq.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7f529428b66c51393aa185bfa61aebd8
71122f24a7c6992cf17d903fb0f4a8df079fc228
1237905b4d9d84151ffb813ad497971ccc1f537767d9250e93364a3f6489601e
GET /upload/vod/2023/01/ev243td5uzq.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/webp
content-length: 10472
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11334
content-disposition: inline; filename="ev243td5uzq.webp"
etag: "63cf30cf-2c46"
last-modified: Tue, 24 Jan 2023 01:13:51 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 793fcb526dddb527-OSL
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1218150253&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=8056&r=0&ww=1280&u=http%3A%2F%2Fwww.uggakaufen.net%2Fhbb&tt=%E5%AE%9C%E6%98%8C%E9%A9%B6%E7%88%B8%E5%BD%B1%E9%99%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1218150253&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=8056&r=0&ww=1280&u=http%3A%2F%2Fwww.uggakaufen.net%2Fhbb&tt=%E5%AE%9C%E6%98%8C%E9%A9%B6%E7%88%B8%E5%BD%B1%E9%99%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1218150253&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=8056&r=0&ww=1280&u=http%3A%2F%2Fwww.uggakaufen.net%2Fhbb&tt=%E5%AE%9C%E6%98%8C%E9%A9%B6%E7%88%B8%E5%BD%B1%E9%99%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.uggakaufen.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 01:57:12 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=150C7F32A294BF75; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
lbfm.lbpictupian.com/upload/vod/2020/06-23/18/4vhxnt0ixvt18064vhxnt0ixvt5210781.jpg
200 OK 13 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/06-23/18/4vhxnt0ixvt18064vhxnt0ixvt5210781.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 4471fca393359013e52ba35d3eb040c6
a7eefd21b5fd492aa96d5e688d57a8ae9fdff8c1
c100e8d9035beb4fbfb61e86cb7a672aecdbafea3005420a471f5cce07af350d
GET /upload/vod/2020/06-23/18/4vhxnt0ixvt18064vhxnt0ixvt5210781.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 13239
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13931, status=webp_bigger
etag: "5ef1d43d-366b"
last-modified: Tue, 23 Jun 2020 10:06:53 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb52ce0fb527-OSL
X-Firefox-Spdy: h2
www.ppmv027.xyz/
200 OK 22 kB IP
Hash a9e39ef27801f0027057cf705123e91b
49dcce8464589738841b6740e16918c489853e3a
1f5fdab1820e33e5d17c19b00b83c989d1d3165fe2169664db388cb8d902cb24
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmvapi111.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:12 GMT
content-type: text/html
last-modified: Fri, 03 Feb 2023 10:45:01 GMT
vary: Accept-Encoding
etag: W/"63dce5ad-9e57"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv027.xyz/js/top.js?adv=0.706642070733397
200 OK 588 B URL HTTP/2 www.ppmv027.xyz/js/top.js?adv=0.706642070733397
IP
File type HTML document, Unicode text, UTF-8 text
Hash add2d43fff1c9780af62656ec0de51f9
64adda4327ef9df8a60df4e760c19089370dc028
eb83c04e1e660929de5d79020e70557b8bb2e7783d100e72faa7ce2e3aff45e6
Analyzer Verdict Alert quad9 Sinkholed
GET /js/top.js?adv=0.706642070733397 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: application/javascript
content-length: 588
last-modified: Sat, 31 Dec 2022 06:13:26 GMT
etag: "63afd306-24c"
expires: Sat, 04 Feb 2023 13:57:13 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
vip3.lbbf9.com/20220301/Ce6ETcz1/1.jpg
200 OK 14 kB URL HTTP/1.1 vip3.lbbf9.com/20220301/Ce6ETcz1/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 42c441994ff7545d3ffbb9808289b4bb
1dedbdaacc7b72868a4db767ee32f1b75a990d43
f8c3193bd61fb74a6e0ba48bdbeb50db1c5d5df2ed4299c5e0b676d4ffcfcf9e
GET /20220301/Ce6ETcz1/1.jpg HTTP/1.1
Host: vip3.lbbf9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:12 GMT
Content-Type: application/octet-stream
Content-Length: 13882
Last-Modified: Tue, 01 Mar 2022 10:54:51 GMT
Connection: keep-alive
Content-Disposition: attachment; filename="1.jpg"
ETag: "621dfb7b-363a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Accept-Ranges: bytes
vip3.lbbf9.com/20220301/kG5uvVfT/1.jpg
200 OK 9.6 kB URL HTTP/1.1 vip3.lbbf9.com/20220301/kG5uvVfT/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash abdbd86b5b7b3cb6e67196976d3cabaa
7445c0a359bb411d7b11fdb996e452a2dc3c1d4b
e2a08dbd5322c33db0049b82d0809b2a152c4f2e1a121ce8338114569c4b4c5b
GET /20220301/kG5uvVfT/1.jpg HTTP/1.1
Host: vip3.lbbf9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:13 GMT
Content-Type: application/octet-stream
Content-Length: 9569
Last-Modified: Tue, 01 Mar 2022 13:56:51 GMT
Connection: keep-alive
Content-Disposition: attachment; filename="1.jpg"
ETag: "621e2623-2561"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Accept-Ranges: bytes
lbfm.lbpictupian.com/upload/vod/2021/06-22/17/ejgs5b5mhwf1748ejgs5b5mhwf444704.jpg
200 OK 5.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2021/06-22/17/ejgs5b5mhwf1748ejgs5b5mhwf444704.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash e82f2582b113508de42e6ef865d418d0
86ea51d2be35e59c26a11c6b5bb7e62ef1a4146c
9259447942265bd8dc1d885617b477f833d20532d6f2f42092d294bf832e969a
GET /upload/vod/2021/06-22/17/ejgs5b5mhwf1748ejgs5b5mhwf444704.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 5625
last-modified: Tue, 22 Jun 2021 09:48:44 GMT
etag: "60d1b1fc-15f9"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb525dceb527-OSL
X-Firefox-Spdy: h2
vip3.lbbf9.com/20220301/PmzAaoOT/1.jpg
200 OK 10 kB URL HTTP/1.1 vip3.lbbf9.com/20220301/PmzAaoOT/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash fa317b9cc83721a3b50370be5f311068
5886129d5514e7eea8279b7bf681d5e0a26b739b
b5e6d4158232362d994712d8add5dad4e528d6145b0498517d76c08bfd452656
GET /20220301/PmzAaoOT/1.jpg HTTP/1.1
Host: vip3.lbbf9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 01:57:13 GMT
Content-Type: application/octet-stream
Content-Length: 9953
Last-Modified: Tue, 01 Mar 2022 14:10:01 GMT
Connection: keep-alive
Content-Disposition: attachment; filename="1.jpg"
ETag: "621e2939-26e1"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Accept-Ranges: bytes
lbfm.lbpictupian.com/upload/vod/2021/06-22/17/avqsrfcrsia1750avqsrfcrsia094875.jpg
200 OK 8.4 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2021/06-22/17/avqsrfcrsia1750avqsrfcrsia094875.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash e9edc186c8841c7c6de28a7ae22a3bef
36b29629c2209261061695e6a5e81681166a5fce
35f4f0339fd08899486409fbe0f618fb9556daf45c9956d49e1edc8d118b1f2f
GET /upload/vod/2021/06-22/17/avqsrfcrsia1750avqsrfcrsia094875.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 8363
last-modified: Tue, 22 Jun 2021 09:50:09 GMT
etag: "60d1b251-20ab"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526de9b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/gowrelkelst.jpg
200 OK 12 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/gowrelkelst.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 78a8f4314aca42ba43d4a3215981c555
bf2f49626ba05b9a0490fe92f6863222ae62dba7
25ad97f8aa6796e35d4ddf892d74b4452352439552a8e963eb42b17d9ca2c8ae
GET /upload/vod/2023/01/gowrelkelst.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 11637
last-modified: Tue, 24 Jan 2023 01:12:23 GMT
etag: "63cf3077-2d75"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526de8b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/atvyg111b5c.jpg
200 OK 8.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/atvyg111b5c.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 7f5ccc0978bd6493dc1c6893d4ec93f7
0b480d3bd5b9aca07bd68672f2a0ee5e486d36a9
40d8064320dbcd1b444a08f1ffd2825ce0f93a962040a68492dd6178991be388
GET /upload/vod/2023/01/atvyg111b5c.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 8729
last-modified: Tue, 24 Jan 2023 01:01:18 GMT
etag: "63cf2dde-2219"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526dd6b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/bgrh3id0f13.jpg
200 OK 8.9 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/bgrh3id0f13.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 03d10ad119397bd83029c87a7ce0f6f8
c65ca68762cf5551739cb86835080b44aca899b0
2cc79d4340ad4a61e3e67327b1c584766602385c140eeba7a73108e378b97227
GET /upload/vod/2023/01/bgrh3id0f13.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 8919
last-modified: Tue, 24 Jan 2023 01:13:34 GMT
etag: "63cf30be-22d7"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526ddab527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/y3thzdzgpjc.jpg
200 OK 7.2 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/y3thzdzgpjc.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash f167ae3df57d52a311ca62454f0f1c35
036efe0cd5455a54331b871346c0f1e91c692a8b
c4e67ed967aaf639f51e8f97f77865a12b3b0145ab5d9741a7f6cd486897702e
GET /upload/vod/2023/01/y3thzdzgpjc.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 7158
last-modified: Tue, 24 Jan 2023 01:12:07 GMT
etag: "63cf3067-1bf6"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526de4b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2021/06-22/17/dved4adsgii1748dved4adsgii454709.jpg
200 OK 14 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2021/06-22/17/dved4adsgii1748dved4adsgii454709.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash d9fb89d4d8c074d26c32ca4be59a5b1f
28bfa417bc363744d6ee7fc0c47458324b0b5d59
65ddcdcb97d3e48552d357157002f0ed10bcb2cd784d045e91563001c7ac1cf2
GET /upload/vod/2021/06-22/17/dved4adsgii1748dved4adsgii454709.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 14536
last-modified: Tue, 22 Jun 2021 09:48:46 GMT
etag: "60d1b1fe-38c8"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb528dfbb527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/lmuluchhpt5.jpg
200 OK 5.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/lmuluchhpt5.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 304x405, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash 56a8f41e379a96e1fd7ade57b7832b3d
7470e9f1dcca2d1d406c6bbc26ed53c7d19b65ea
41d408f62229ba33b2bfbf0e0f3279cce7530683fb4c4395d4cd18c707dd0c8c
GET /upload/vod/2023/01/lmuluchhpt5.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 5606
last-modified: Tue, 24 Jan 2023 01:12:20 GMT
etag: "63cf3074-15e6"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526de7b527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/lxrjbalixmm.jpg
200 OK 8.8 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/lxrjbalixmm.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash 83e03ac86240ffa835f1f6c8d039440f
094d1f61f5c84fc64f74adbd4791f2c7bc9e2ed3
dc856514cb0a0333eb4e52dd0973a1f756f6a998c824d16bfe9d1bc8fa3180e9
GET /upload/vod/2023/01/lxrjbalixmm.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 8848
last-modified: Tue, 24 Jan 2023 01:13:46 GMT
etag: "63cf30ca-2290"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb526ddcb527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/06-23/18/4ja4havgu5q18064ja4havgu5q5310783.jpg
200 OK 13 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/06-23/18/4ja4havgu5q18064ja4havgu5q5310783.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 8e3400ffb92f0769b277836f710e54d2
761a3490325c7cb41bfe70b7d7e11e65d5c5cfa1
737df922debe2a14acf7c625aa669c3abaef6033fc10653cc8ef52002fc1c1bb
GET /upload/vod/2020/06-23/18/4ja4havgu5q18064ja4havgu5q5310783.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 13090
last-modified: Tue, 23 Jun 2020 10:06:53 GMT
etag: "5ef1d43d-3322"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb52de1db527-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2021/06-22/17/lcrpwj4fu5d1750lcrpwj4fu5d074869.jpg
200 OK 8.8 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2021/06-22/17/lcrpwj4fu5d1750lcrpwj4fu5d074869.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 5361e2df3259f75a89d3031cbcb7d570
fa5b9be0fb50a262a9f0564e05d9fd4562b7ceb1
f4a24ff45ca77d7d3fae80aed225c0a7e56fb15aee095a32619a52dc69c686c0
GET /upload/vod/2021/06-22/17/lcrpwj4fu5d1750lcrpwj4fu5d074869.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: image/jpeg
content-length: 8781
last-modified: Tue, 22 Jun 2021 09:50:07 GMT
etag: "60d1b24f-224d"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793fcb52be08b527-OSL
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1163356270&si=1d17743632808b728a4c05b9d579a62a&v=1.3.0&lv=1&sn=8056&r=0&ww=1280&u=http%3A%2F%2Fwww.uggakaufen.net%2Fhbb&tt=%E5%AE%9C%E6%98%8C%E9%A9%B6%E7%88%B8%E5%BD%B1%E9%99%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1163356270&si=1d17743632808b728a4c05b9d579a62a&v=1.3.0&lv=1&sn=8056&r=0&ww=1280&u=http%3A%2F%2Fwww.uggakaufen.net%2Fhbb&tt=%E5%AE%9C%E6%98%8C%E9%A9%B6%E7%88%B8%E5%BD%B1%E9%99%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1163356270&si=1d17743632808b728a4c05b9d579a62a&v=1.3.0&lv=1&sn=8056&r=0&ww=1280&u=http%3A%2F%2Fwww.uggakaufen.net%2Fhbb&tt=%E5%AE%9C%E6%98%8C%E9%A9%B6%E7%88%B8%E5%BD%B1%E9%99%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.uggakaufen.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 01:57:13 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=2AF9B53BFC265DF5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
dimg04.c-ctrip.com/images/0106a12000ae39u64C577.gif?proc=autoorient
200 OK 408 kB URL HTTP/2 dimg04.c-ctrip.com/images/0106a12000ae39u64C577.gif?proc=autoorient
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 408 kB (407956 bytes)
Hash 456052cfab11e5c1230c2b8b07b28937
b04dc3234615beefb7c12b1788be71b1f61f10a3
a9495c045c83eae51ff9edee2d31d707218b5542946d2466c4d8d806f323324e
GET /images/0106a12000ae39u64C577.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 407956
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=5380419
expires: Fri, 07 Apr 2023 08:30:52 GMT
date: Sat, 04 Feb 2023 01:57:13 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 0770ee8557cee901a50725bc6c866f2b
4b3bfa8952a1f2c7fb5e710914ef8406b85b78c1
0a186abe8989db037ab848278d31382c75eb932faf75a5d6790cb37ea7c723c8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:57:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 11:47:08 GMT
Expires: Fri, 10 Feb 2023 11:47:07 GMT
Etag: "4b3bfa8952a1f2c7fb5e710914ef8406b85b78c1"
Cache-Control: max-age=553193,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793fcb58ec8cb4f9-OSL
www.ppmv027.xyz/template/m1938pc/static/js/jquery.min.js
200 OK 38 kB URL HTTP/2 www.ppmv027.xyz/template/m1938pc/static/js/jquery.min.js
IP
Hash 49a139c882e0de263c4495caaf8725bc
19899f341c9685efde9be9a966e59c8fa3f71a99
a4185c30d2ccc9623486b01d60a7c4fbbaf3bde9a03ed940993a72c6433b9b7c
Analyzer Verdict Alert quad9 Sinkholed
GET /template/m1938pc/static/js/jquery.min.js HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:12 GMT
content-type: application/javascript
last-modified: Sat, 08 Jan 2022 14:07:34 GMT
vary: Accept-Encoding
etag: W/"61d99aa6-17b8b"
expires: Sat, 04 Feb 2023 13:57:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/351t5VZFA4M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/351t5VZFA4M
IP
Hash f47400d31717fb8eaa431d2422aa6843
e2e1b5ed1a9eb0729bdbb6856cbc6e58718728d8
0b786552dc549bc8d55a62ed10d5a3a4341e1e7e07b12e55ce0fceca8c9140d0
POST /s/gts1p5/351t5VZFA4M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ppmv027.xyz/js/wz2.js?adv=0.3517065526815951
200 OK 163 kB URL HTTP/2 www.ppmv027.xyz/js/wz2.js?adv=0.3517065526815951
IP
Size 163 kB (162794 bytes)
Hash 7c5cd0402aec6577b47d14a2afb50689
df9200746894dcfdb9cf0badc2fbb53a267ef356
6023961e5fb20b5c755c0e3ee00d938acb9d64092391dd417b18507e62fa4f75
Analyzer Verdict Alert quad9 Sinkholed
GET /js/wz2.js?adv=0.3517065526815951 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: application/javascript
last-modified: Wed, 01 Feb 2023 14:11:48 GMT
vary: Accept-Encoding
etag: W/"63da7324-d60"
expires: Sat, 04 Feb 2023 13:57:13 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/351t5VZFA4M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/351t5VZFA4M
IP
Hash f47400d31717fb8eaa431d2422aa6843
e2e1b5ed1a9eb0729bdbb6856cbc6e58718728d8
0b786552dc549bc8d55a62ed10d5a3a4341e1e7e07b12e55ce0fceca8c9140d0
POST /s/gts1p5/351t5VZFA4M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ppmv027.xyz/js/xx1.js?adv=0.7419825406321995
200 OK 15 kB URL HTTP/2 www.ppmv027.xyz/js/xx1.js?adv=0.7419825406321995
IP
Hash a6dc63f1f7d20c2b5a2968a3ba93af3d
f4b1f5a7081bdb6f3bcc5896f1f54497b958f1ba
9410043bf02ec5b7c6bac15bd14059f9ee4ef7ea6c878742124e3aae13b78d5f
Analyzer Verdict Alert quad9 Sinkholed
GET /js/xx1.js?adv=0.7419825406321995 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 09:03:21 GMT
vary: Accept-Encoding
etag: W/"63db7c59-cfc"
expires: Sat, 04 Feb 2023 13:57:13 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv027.xyz/js/250/1.js?adv=0.4055855247953809
200 OK 951 B URL HTTP/2 www.ppmv027.xyz/js/250/1.js?adv=0.4055855247953809
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (355)
Hash 714ade8da5213507976808bfac77b925
eab24e07306bd3a0243e783c3c2be9f160bace22
4d17673411c8e888e0254dcd71cb3f598a7f7638375c196ee89117b4f18de8a6
Analyzer Verdict Alert quad9 Sinkholed
GET /js/250/1.js?adv=0.4055855247953809 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:14 GMT
content-type: application/javascript
content-length: 951
last-modified: Sun, 22 Jan 2023 10:10:00 GMT
etag: "63cd0b78-3b7"
expires: Sat, 04 Feb 2023 13:57:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv027.xyz/template/m1938pc/images/video-mask.png
200 OK 107 B URL HTTP/2 www.ppmv027.xyz/template/m1938pc/images/video-mask.png
IP
File type PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced\012- data
Hash 6a5ee87ff75437cb480df839f36004fd
eac66370f99601cb7febef320c9540d4593cd856
c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa
Analyzer Verdict Alert quad9 Sinkholed
GET /template/m1938pc/images/video-mask.png HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:14 GMT
content-type: image/png
content-length: 107
last-modified: Tue, 04 Jan 2022 15:14:24 GMT
etag: "61d46450-6b"
expires: Mon, 06 Mar 2023 01:57:14 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv027.xyz/template/m1938pc/images/video-play.png
200 OK 1.6 kB URL HTTP/2 www.ppmv027.xyz/template/m1938pc/images/video-play.png
IP
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
Analyzer Verdict Alert quad9 Sinkholed
GET /template/m1938pc/images/video-play.png HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:14 GMT
content-type: image/png
content-length: 1567
last-modified: Tue, 04 Jan 2022 15:14:22 GMT
etag: "61d4644e-61f"
expires: Mon, 06 Mar 2023 01:57:14 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash c5751532af178903914d82b2ad1502b5
e02a93ae8035a62a91e79e5d722aade0ff9ce326
24590ce0327e97030c7f81d56e26a562410f86b93058ced50ccbb522300e52b9
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=87348
Date: Sat, 04 Feb 2023 01:57:14 GMT
Etag: "63dc6dae-1d7"
Expires: Sun, 05 Feb 2023 02:13:02 GMT
Last-Modified: Fri, 03 Feb 2023 02:13:02 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0Zl2tMQEgdYAjbbHwdG52O02lM838Tp3OxpkeKfTDb6-muFTNRBOvw==
www.ppmv027.xyz/js/250/2.js?adv=0.5200218606761413
200 OK 532 B URL HTTP/2 www.ppmv027.xyz/js/250/2.js?adv=0.5200218606761413
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (382)
Hash 06b1ee73f663b814b7d1acd3b01ec79f
6b5bdadc6d66e9fdcb8b9b8dc5ea1a0deb4dbb56
854e5c909093d5ab6e0c91203af3ed6021d249b3d5e2eed417ef0b132ec694c3
Analyzer Verdict Alert quad9 Sinkholed
GET /js/250/2.js?adv=0.5200218606761413 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:14 GMT
content-type: application/javascript
content-length: 532
last-modified: Sat, 19 Nov 2022 10:19:26 GMT
etag: "6378adae-214"
expires: Sat, 04 Feb 2023 13:57:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/P7Q7skpuqPQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/P7Q7skpuqPQ
IP
Hash e87fd42327e0528fbfbf4b4365a7888d
adcef9d23dc2546643b007c1a3254821c2637a39
d1843be2786bc0dd942cabf99a4f571f239716440f654e36185b4264f1e3dc8f
POST /s/gts1p5/P7Q7skpuqPQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 234b25ef02fe456c2342edce694c51c2
9d8fcaa0ec4e98017866ad4e1e4a9e85d5879205
fc3ac4c094c2d679921b9a85038bff36100e6a1dbbc80f120a8dea537ed0bdbe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC3AC4C094C2D679921B9A85038BFF36100E6A1DBBC80F120A8DEA537ED0BDBE"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15163
Expires: Sat, 04 Feb 2023 06:09:57 GMT
Date: Sat, 04 Feb 2023 01:57:14 GMT
Connection: keep-alive
www.ppmv027.xyz/js/250/3.js?adv=0.08792502743811914
200 OK 486 B URL HTTP/2 www.ppmv027.xyz/js/250/3.js?adv=0.08792502743811914
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (369)
Hash 4ce206cd22ea1ac05c3d229b392d2896
a8ca9dd8fb48bce78ccb44933d0c722401419fb3
c03b31145986256c54d4bcbfc2a0de7d1c5592b4ffb0517311bd0228ea4e39d9
Analyzer Verdict Alert quad9 Sinkholed
GET /js/250/3.js?adv=0.08792502743811914 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:14 GMT
content-type: application/javascript
content-length: 486
last-modified: Sat, 19 Nov 2022 10:19:33 GMT
etag: "6378adb5-1e6"
expires: Sat, 04 Feb 2023 13:57:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 13962d8d5d130e3e0f1d033f7f013030
aac46e299c92db12018d68718e4bba350076117e
f46821b0fc61f7e0b59df5b36c44c27c59bec93d78d944caa016b37854f68943
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1459
Server: nginx
Content-Type: application/ocsp-response
Expires: Tue, 07 Feb 2023 23:04:31 GMT
ETag: "aac46e299c92db12018d68718e4bba350076117e"
Last-Modified: Fri, 03 Feb 2023 23:04:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 04 Feb 2023 01:57:14 GMT
Age: 2189
X-Served-By: cache-qpg1239-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 1
X-Timer: S1675475835.666630,VS0,VE1
u23033.com/a74c56cdc17aee373fdc370a7e52e9ca.gif
200 OK 400 kB URL HTTP/2 u23033.com/a74c56cdc17aee373fdc370a7e52e9ca.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 400 kB (400264 bytes)
Hash b722c3905b96f11823e04826aafdd50e
68b63b572a042d40ab210aa313b7ebbc372be5a1
630c6a955789d5bb6311db75ce52e57ff4c12074ef5a5a080cf5459f907e9dc1
GET /a74c56cdc17aee373fdc370a7e52e9ca.gif HTTP/1.1
Host: u23033.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 400264
last-modified: Mon, 19 Dec 2022 08:05:22 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 23:49:04 GMT
etag: "b722c3905b96f11823e04826aafdd50e"
x-cache: Hit from cloudfront
via: 1.1 49b0629f9da8a770925ad02807586202.cloudfront.net (CloudFront)
x-amz-cf-pop: SIN52-C3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: DnVl6ayi7xFc2xg1mTbzOc3TO5XvOerC5dt6NOPmwDS9-pbSbCdPSw==
age: 7690
X-Firefox-Spdy: h2
www.ppmv027.xyz/js/xx3.js?adv=0.9546519169342328
200 OK 360 B URL HTTP/2 www.ppmv027.xyz/js/xx3.js?adv=0.9546519169342328
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 3e24852309978d1690e8c4809f989280
f590486d685ac8d4d2eba4f5fe1f3bf0beb723e7
a503f4a1ccd24a5e31dbfbbf18825476012481b775f1606f01275c0af15d1e58
Analyzer Verdict Alert quad9 Sinkholed
GET /js/xx3.js?adv=0.9546519169342328 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:14 GMT
content-type: application/javascript
content-length: 360
last-modified: Sat, 19 Nov 2022 10:18:53 GMT
etag: "6378ad8d-168"
expires: Sat, 04 Feb 2023 13:57:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
u23033.com/2b040b691e292fe538ff95a635a40c89.gif
200 OK 60 kB URL HTTP/2 u23033.com/2b040b691e292fe538ff95a635a40c89.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Hash fe65d46de7c05eef8cfb419c8e9cb2a3
7db2cc19fa830af594b8e9c38c8bedcba24a809e
9c24bc0612ba11d4cfd5323dc05eb8f4c9e9fba025f6e1e86578f3b15537333c
GET /2b040b691e292fe538ff95a635a40c89.gif HTTP/1.1
Host: u23033.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 60074
date: Fri, 03 Feb 2023 13:27:05 GMT
last-modified: Mon, 19 Dec 2022 07:58:21 GMT
etag: "fe65d46de7c05eef8cfb419c8e9cb2a3"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 49b0629f9da8a770925ad02807586202.cloudfront.net (CloudFront)
x-amz-cf-pop: SIN52-C3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: CntZCcRaN9RDlB__AIPZJPv5C4iCyShfpNZQfXNgkjD5JPcIp0nphA==
age: 45010
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 058ec5e79026ebe2e91dd64f33004b57
628ff7ad677559b04380332408092fa3b3c80361
b2688ca7859b7c0398f3fce6f40ca1648771da977c1eccbe9ac9e6d0cb946df7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B2688CA7859B7C0398F3FCE6F40CA1648771DA977C1ECCBE9AC9E6D0CB946DF7"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7580
Expires: Sat, 04 Feb 2023 04:03:34 GMT
Date: Sat, 04 Feb 2023 01:57:14 GMT
Connection: keep-alive
www.ppmv027.xyz/template/m1938pc/css/zui.css
200 OK 47 kB URL HTTP/2 www.ppmv027.xyz/template/m1938pc/css/zui.css
IP
Hash e7a5d750849ea5ab941f433e960a59ef
e1bc3399b70aaa96a97ca37f79a69231f34ad61a
474ec862e810970c6f9cf004fc6943ccc5305aff30ac003ab68cd6475dfc61ba
Analyzer Verdict Alert quad9 Sinkholed
GET /template/m1938pc/css/zui.css HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:12 GMT
content-type: text/css
last-modified: Sun, 13 Nov 2022 12:08:14 GMT
vary: Accept-Encoding
etag: W/"6370de2e-15b6c"
expires: Sat, 04 Feb 2023 13:57:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv027.xyz/js/250/4.js?adv=0.2070325751372688
200 OK 486 B URL HTTP/2 www.ppmv027.xyz/js/250/4.js?adv=0.2070325751372688
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (369)
Hash 4ce206cd22ea1ac05c3d229b392d2896
a8ca9dd8fb48bce78ccb44933d0c722401419fb3
c03b31145986256c54d4bcbfc2a0de7d1c5592b4ffb0517311bd0228ea4e39d9
Analyzer Verdict Alert quad9 Sinkholed
GET /js/250/4.js?adv=0.2070325751372688 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:14 GMT
content-type: application/javascript
content-length: 486
last-modified: Sat, 19 Nov 2022 10:19:41 GMT
etag: "6378adbd-1e6"
expires: Sat, 04 Feb 2023 13:57:14 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 4d4d389b580676bc575af360206f3f98
9a32e37a06dd5777f72eefee09d35b5ddc7488cb
261b00212aea862afbe9c5c787a1cde17a1406988a1e1d7c84993a80c122a82d
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=857
Date: Sat, 04 Feb 2023 01:57:15 GMT
Connection: keep-alive
X-N: S
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d766db62fa5a1c82629011521bd22f9d
1afa1508baf85805bcb69291e4d935c201b68b35
8e0d0fb22918917a9268c0b6523a378987f85fa4e8e3f94183fb17afb7cc76a6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8E0D0FB22918917A9268C0B6523A378987F85FA4E8E3F94183FB17AFB7CC76A6"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20968
Expires: Sat, 04 Feb 2023 07:46:43 GMT
Date: Sat, 04 Feb 2023 01:57:15 GMT
Connection: keep-alive
www.ppmv027.xyz/js/250/5.js?adv=0.9572400854325241
200 OK 429 B URL HTTP/2 www.ppmv027.xyz/js/250/5.js?adv=0.9572400854325241
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (345)
Hash b091ecd1c842b0f03f7c9898274a3bf9
4cfd13aebfcf6101c639e255b252a4993056b2d6
5fc0828eaba80bdde4e6d053fbe4007fa3b5a3400e82e43f0e08033998fad7a4
Analyzer Verdict Alert quad9 Sinkholed
GET /js/250/5.js?adv=0.9572400854325241 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: application/javascript
content-length: 429
last-modified: Sat, 19 Nov 2022 10:19:48 GMT
etag: "6378adc4-1ad"
expires: Sat, 04 Feb 2023 13:57:15 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0101c120009texk0w2379.gif?proc=autoorient
200 OK 1 B URL HTTP/2 dimg04.c-ctrip.com/images/0101c120009texk0w2379.gif?proc=autoorient
IP
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /images/0101c120009texk0w2379.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 1
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=2076748
expires: Tue, 28 Feb 2023 02:49:43 GMT
date: Sat, 04 Feb 2023 01:57:15 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
fadacaitp.com/68-960-120.gif
200 OK 288 kB URL HTTP/1.1 fadacaitp.com/68-960-120.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 288 kB (287519 bytes)
Hash 3d5e731d6365175f812cb186a1194fda
802d04669847c469ac67e6d5f36878f8fe85bf63
f21ad6b7f851d2128d3762bb073466153b7accddbfbd140444e6f282da42a75d
GET /68-960-120.gif HTTP/1.1
Host: fadacaitp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:57:14 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 25 Dec 2022 07:04:53 GMT
ETag: W/"63a7f615-6befc"
Expires: Sat, 04 Mar 2023 16:15:43 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
www.ppmv027.xyz/js/250/6.js?adv=0.6258298326851102
200 OK 454 B URL HTTP/2 www.ppmv027.xyz/js/250/6.js?adv=0.6258298326851102
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (366)
Hash fb969bfaceb99f1da30a8eeef7ef3f9c
d30202994b3fbd393bfa93cea12ddc7cf445ac0a
befa9bb57dc5ce8dce7d72153b95becb0b1408e127d7d4ccfe122da80928a2e6
Analyzer Verdict Alert quad9 Sinkholed
GET /js/250/6.js?adv=0.6258298326851102 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: application/javascript
content-length: 454
last-modified: Sat, 19 Nov 2022 10:19:55 GMT
etag: "6378adcb-1c6"
expires: Sat, 04 Feb 2023 13:57:15 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv027.xyz/js/xx4.js?adv=0.5761796935988672
200 OK 916 B URL HTTP/2 www.ppmv027.xyz/js/xx4.js?adv=0.5761796935988672
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash bd5e3af6c592753239f355e60ce2f3ef
6ace16da2fe5b94a940410f05e2152e09a5b3e3a
b5e6dd7d88f403621cff37dfd07e02a503e07bf6e77120afe138923e9f066c97
Analyzer Verdict Alert quad9 Sinkholed
GET /js/xx4.js?adv=0.5761796935988672 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: application/javascript
content-length: 916
last-modified: Sat, 19 Nov 2022 10:23:56 GMT
etag: "6378aebc-394"
expires: Sat, 04 Feb 2023 13:57:15 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
xinchacha2dv.ocsp-certum.com/
200 OK 1.5 kB URL HTTP/1.1 xinchacha2dv.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 2ceeb26ab106be6f415c07b86cda8ec2
7045ff4d2851c920934eb8373ef62d128d5864dc
13f47ee8bb58c2f855fc58a6ac3f1d0b8df5687874b20650731ccccdb35805ed
POST / HTTP/1.1
Host: xinchacha2dv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1538
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=859
Date: Sat, 04 Feb 2023 01:57:15 GMT
Connection: keep-alive
X-N: S
taiwtp1.com/xin/96080.gif
200 OK 122 kB URL HTTP/2 taiwtp1.com/xin/96080.gif
IP
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 960 x 80\012- data
Size 122 kB (122193 bytes)
Hash 4293cc73ff1bcc11cfb9a5582a08c8f5
a3307ecff7a2be9d0740c530d6325ff1ed355b8c
ee86f9a233f1b754a8c67ec8b9120f4c5b4df290396ca690d41d54e5b2d528b5
GET /xin/96080.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:50:13 GMT
content-type: image/gif
content-length: 122193
last-modified: Thu, 20 Oct 2022 07:11:02 GMT
etag: "6350f486-1dd51"
expires: Mon, 06 Mar 2023 01:50:13 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
587tuchuang.com/587z80.gif
200 OK 139 kB URL HTTP/1.1 587tuchuang.com/587z80.gif
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 139 kB (139025 bytes)
Hash 4751af930c8c7b33a61958356ca554f0
c0cfc5b499211aa4f43c5815630738d36013c1aa
68f1f41464e84af0d6078d951d3a3f479e6865bb641a6eed4ba969bb7067bb18
GET /587z80.gif HTTP/1.1
Host: 587tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:57:14 GMT
Content-Type: image/gif
Content-Length: 139025
Connection: keep-alive
Last-Modified: Wed, 21 Dec 2022 13:30:32 GMT
ETag: "63a30a78-21f11"
Expires: Fri, 03 Mar 2023 17:15:56 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
cdn.jsdelivr.net/gh/hututu-tech/IMG-gongfeng@main/2022/02/28/621ca037b2eee.gif
200 OK 230 kB URL HTTP/2 cdn.jsdelivr.net/gh/hututu-tech/IMG-gongfeng@main/2022/02/28/621ca037b2eee.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Size 230 kB (229476 bytes)
Hash f8998f5aadb216f104c45c9590f62b98
5d95ff1dd2a55590c0cb96fbefcc9e4b02f079ab
f89fb96c1e87d7a58859d4613ad676d1beda08009e5300babaa4cc181f167ce9
GET /gh/hututu-tech/IMG-gongfeng@main/2022/02/28/621ca037b2eee.gif HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/gif
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"38064-XZX/HdKlVZDAy5b778yeSwLweas"
accept-ranges: bytes
date: Sat, 04 Feb 2023 01:57:15 GMT
age: 18145
x-served-by: cache-fra-eddf8230038-FRA, cache-bma1650-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 229476
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 7d5155978b3111702fa2ab1da608e64d
096dd1b7c7fbc51306d7032210622f0a6c4bc161
506bf9bb3e4cbb75b3e3e61a814f0e375248e1690433df56c17be787f9d6f1b2
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1462
Content-Type: application/ocsp-response
Etag: "DBBD0F0B96F78DF43E14819EC63C7AC412B38D14"
Expires: Sat, 04 Feb 2023 13:00:00 UTC
Last-Modified: Sat, 04 Feb 2023 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
Accept-Ranges: bytes
Date: Sat, 04 Feb 2023 01:57:15 GMT
Via: 1.1 varnish
Age: 648
X-Served-By: cache-bma1631-BMA
X-Cache: HIT
X-Cache-Hits: 11
X-Timer: S1675475836.803507,VS0,VE0
www.ppmv027.xyz/ads/piaofu.js?adv=0.8083181105853277
404 Not Found 146 B URL HTTP/2 www.ppmv027.xyz/ads/piaofu.js?adv=0.8083181105853277
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert quad9 Sinkholed
GET /ads/piaofu.js?adv=0.8083181105853277 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
www.ppmv027.xyz/js/tongji.js?adv=0.6597072756282624
200 OK 254 B URL HTTP/2 www.ppmv027.xyz/js/tongji.js?adv=0.6597072756282624
IP
Hash 33bfe88fe108264906550fc71fee999b
ffcdd93706a63369148ac4df56096976d2540d5c
9d2d61329c0baa529f4d56116bf456f787f01d0194ff9c711afb6280a739562e
Analyzer Verdict Alert quad9 Sinkholed
GET /js/tongji.js?adv=0.6597072756282624 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: application/javascript
content-length: 254
last-modified: Sun, 01 Jan 2023 09:06:32 GMT
etag: "63b14d18-fe"
expires: Sat, 04 Feb 2023 13:57:15 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
qp.ezfxpuo.cn/960X60.gif
200 OK 254 kB IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 254 kB (253519 bytes)
Hash f744e995971941b6a95fcd2636f5a545
ac9c1230e04eab9e31512d2afe440fe5f0367dc5
59b1a138fa72df587e61916179965cbd819f91aec53ce6ab606949a7e06b3063
GET /960X60.gif HTTP/1.1
Host: qp.ezfxpuo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NgxFence
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: image/gif
content-length: 253519
x-oss-request-id: 63DCC16D4C8B373832AC955A
etag: "F744E995971941B6A95FCD2636F5A545"
last-modified: Tue, 29 Nov 2022 08:27:54 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17987192695826819902
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
content-md5: 90TplZcZQbapX80mNvWlRQ==
x-oss-server-time: 1
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?6391490fe039c3b8b30b2a81c74234a1
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?6391490fe039c3b8b30b2a81c74234a1
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash ffdc15d85d52c2f5dc36b5b67905118b
53d0b2f60298283736dd6c8b63c18bc515a0dfb1
8903060874e5a645f95508b595908e0f978c87573f56c4c294c99ead62c2c658
GET /hm.js?6391490fe039c3b8b30b2a81c74234a1 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 01:57:16 GMT
Etag: 196ea41f6f91fb4d3f64bca38ae7a1d5
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=CE5352F178059F0E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ldbbs.ldmnq.com/bbs/topic/images/2022-12/fe8be621-0064-4f6b-a049-12a9383fb388.gif
200 OK 118 kB URL HTTP/1.1 ldbbs.ldmnq.com/bbs/topic/images/2022-12/fe8be621-0064-4f6b-a049-12a9383fb388.gif
IP
ASN #133119 China Unicom IP network
File type GIF image data, version 89a, 960 x 60\012- data
Size 118 kB (118121 bytes)
Hash caaa592fad00ee9d8db810c6fdf0741d
90c218822bb4e8237f8d7ba5ddf73e63ce80fd13
d8307cc1c162ce82416d8dcc966b31fbe2e6834c0e7eaecf021a98baf1a16083
GET /bbs/topic/images/2022-12/fe8be621-0064-4f6b-a049-12a9383fb388.gif HTTP/1.1
Host: ldbbs.ldmnq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:57:15 GMT
Content-Type: image/gif
Content-Length: 118121
Connection: keep-alive
Server: openresty
Age: 467754
CloudServiceDiscount: CDN
Content-Encoding: utf-8
ETag: "caaa592fad00ee9d8db810c6fdf0741d"
Last-Modified: Wed, 21 Dec 2022 06:06:06 GMT
X-CCDN-CacheTTL: 2592000
nginx-hit: 1
via: CHN-HElangfang-AREACUCC1-CACHE58[3],CHN-HElangfang-AREACUCC1-CACHE7[0,TCP_HIT,1],CHN-SH-GLOBAL1-CACHE37[2],CHN-SH-GLOBAL1-CACHE68[0,TCP_HIT,1]
x-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSn3h3ekMh/L/uAER08VCWfGIuN53OUU
x-amz-request-id: 000001859E2E35DC9015BF23F032FCA1
x-amz-storage-class: STANDARD_IA
x-hcs-proxy-type: 1
x-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc
Accept-Ranges: bytes
hm.baidu.com/hm.js?889fe9c05f7b0f2db8ba49f0651b6f40
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?889fe9c05f7b0f2db8ba49f0651b6f40
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash b08c90e037d1c7853e88505e0e5f66e9
111799a5217757246801f424830c9499ea60c23c
edf6316d1a3c4e2b35ee54626a6a53233e0cd5896ab5e3d73069a881118cf1e2
GET /hm.js?889fe9c05f7b0f2db8ba49f0651b6f40 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 01:57:16 GMT
Etag: b68012a86a0d245b1a078d9b0beadba0
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=89E911A17DF26052; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=191369795&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8060&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=191369795&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8060&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=191369795&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8060&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 01:57:16 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=36F7404971BE9952; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1733840823&si=889fe9c05f7b0f2db8ba49f0651b6f40&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8060&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1733840823&si=889fe9c05f7b0f2db8ba49f0651b6f40&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8060&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1733840823&si=889fe9c05f7b0f2db8ba49f0651b6f40&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8060&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 01:57:16 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=32CF6114135773F3; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp.digicert.com/
200 OK 727 B IP
Hash b0a5f3a2175a98374fcbf23d57525136
22add6de2d7a815451837f2183ac2353f790ee6f
12614043a3226b5d048bec170d65c0052190cd76c83739d8cd48767211d8f0bd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:57:16 GMT
Etag: "63dd06ec-2d7"
Server: ECS (amb/6B72)
Content-Length: 727
hm.baidu.com/hm.js?ff71eabd2efc2666b0ecc7fda86ac140
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?ff71eabd2efc2666b0ecc7fda86ac140
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash 6ff11adaead239c7779b325a694111f4
9023b4d7fb9530ab65a96ea71192d963b2d69ded
e3baa50f4e7fa87fc94b1e7c0ab8a1ccc112dde2e8760cb1c9b52452707d60b2
GET /hm.js?ff71eabd2efc2666b0ecc7fda86ac140 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 01:57:16 GMT
Etag: 302769e5561ad9107e8e142a7b3dd14f
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=5160ADD432906C37; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
pure-stone.vip/mdt/gf.gif
200 OK 190 kB URL HTTP/1.1 pure-stone.vip/mdt/gf.gif
IP
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 750 x 120\012- data
Size 190 kB (189611 bytes)
Hash 061139d697c723793b2628fcb479bcf3
7c12fc3440fbadeaa00ce718bf6250fa54ba464c
c30daab324f66e0983dc9c6882b3c2ed6f847e128b2cb3e48ff28d82e992eb3f
GET /mdt/gf.gif HTTP/1.1
Host: pure-stone.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:57:15 GMT
Content-Type: image/gif
Content-Length: 189611
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 06:20:48 GMT
ETag: "63d4bec0-2e4ab"
Expires: Mon, 06 Mar 2023 01:26:53 GMT
Cache-Control: max-age=2592000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 7ab3aa9a6ae1ecb11461f433f45071b4
6dac6ad38ecc2a4738590f34bc956abb41d8b27f
2835d66ad83515b0b9af2f9e2c32eb1b318f4edfd95207b240308be54dd3e6a6
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sat, 04 Feb 2023 01:57:17 GMT
Last-Modified: Sat, 04 Feb 2023 00:18:52 GMT
ETag: "63dda46c-1d7"
Expires: Mon, 06 Feb 2023 00:18:52 GMT
Cache-Control: max-age=166895
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675475837
Via: cache11.l2de2[467,467,200-0,M], cache11.l2de2[468,0], cache8.se1[490,489,200-0,M], cache8.se1[491,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 04 Feb 2023 01:57:17 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c16754758368057016e
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=126014188&si=ff71eabd2efc2666b0ecc7fda86ac140&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8061&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=126014188&si=ff71eabd2efc2666b0ecc7fda86ac140&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8061&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=126014188&si=ff71eabd2efc2666b0ecc7fda86ac140&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=8061&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv027.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 01:57:17 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=F88A2A6816E25EEE; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0
200 OK 1.6 MB URL HTTP/2 p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 640 x 200\012- data
Size 1.6 MB (1607696 bytes)
Hash 9c26f4dcfdfa72ecdcbe3ea854547b4c
fed85b90734400d6810be2b07403f5c8a194a507
ebd842d015d6684a6995a73f1e81f0dea219815318f8993501da9ca79cca74d2
GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: image/gif
content-length: 1607696
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:45 GMT
cache-control: max-age=2592000
x-delay: 130714 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1607696
chid: 0
fid: 0
x-nws-log-uuid: f46783ba-3428-45ad-9e8c-8c9a403b7959
X-Firefox-Spdy: h2
si1.go2yd.com/get-image/0xmAGT9KS9C
200 OK 118 kB URL HTTP/2 si1.go2yd.com/get-image/0xmAGT9KS9C
IP
ASN #136958 China Unicom Guangdong IP network
File type GIF image data, version 89a, 640 x 200\012- data
Size 118 kB (117593 bytes)
Hash c4caa37b717580e8594587f32ca86470
a645ec82581a0b18f67444b62a062059adf78aa6
208bafb1df6fa8b7929896b30415514e2dc59312332ec26aff058767fa81f269
GET /get-image/0xmAGT9KS9C HTTP/1.1
Host: si1.go2yd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 04 Feb 2023 01:57:17 GMT
content-type: image/gif
content-length: 117593
last-modified: Thu, 10 Feb 2022 15:30:06 GMT
etag: "c4caa37b717580e8594587f32ca86470"
age: 491989
accept-ranges: bytes
x-application-context: application
x-kss-request-id: f130ut80n4hobs7go5ib5np8lk0gkchq
content-md5: xMqje3F1gOhZRYfzLKhkcA==
timing-allow-origin: *
ohc-global-saved-time: Sun, 29 Jan 2023 09:17:27 GMT
ohc-cache-hit: gz3un59 [2], suzix111 [2]
ohc-file-size: 117593
x-cache-status: HIT
X-Firefox-Spdy: h2
www.ppmv027.xyz/template/m1938pc/css/ate.css
200 OK 1.4 MB URL HTTP/2 www.ppmv027.xyz/template/m1938pc/css/ate.css
IP
Size 1.4 MB (1368915 bytes)
Hash 7a94605bb36bbd99b235899b34c2b593
b338c30079332fb5213e138afc30a6b2ba62aa6c
5164dd399c5ab2674990fb46ba76909e6525a29c4d2fc88ac19bb79cd6d8fc25
Analyzer Verdict Alert quad9 Sinkholed
GET /template/m1938pc/css/ate.css HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:12 GMT
content-type: text/css
last-modified: Tue, 04 Jan 2022 15:13:26 GMT
vary: Accept-Encoding
etag: W/"61d46416-126e4"
expires: Sat, 04 Feb 2023 13:57:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
200 OK 678 kB URL HTTP/2 p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
IP
ASN #133119 China Unicom IP network
File type GIF image data, version 89a, 270 x 160\012- data
Size 678 kB (677521 bytes)
Hash 94051cb1d1b77200b4462281a864b96e
e5b468a1b2f4bbdda1b6a3a0df2dcce6b3de7e06
d44d0d2dd188024b60ec38cb3f3ea10c080690175e923f90c9c2a2e862670c84
GET /img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image HTTP/1.1
Host: p26.toutiaoimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:57:17 GMT
content-type: image/gif
content-length: 677521
server: openresty
age: 19347492
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 30 Dec 2021 00:07:35 GMT
nw-session-id: 2021123008073501015013614530ADE9B0dprsv01tt
nw-session-trace: 2021-12-30T08:07:35.194015393+08:00 68
x-bdcdn-cache-status: TCP_HIT
x-ccdn-cachettl: 31536000
x-length: 677521
x-powered-by: ImageX
x-response-date: Thu, 30 Dec 2021 08:07:35 GMT
x-response-lb: image
x-tt-logid: 2021123008073501015013614530ADE9B0
nginx-hit: 1
server-timing: cdn-cache;desc=HIT, edge;dur=3
via: CHN-HElangfang-AREACUCC1-CACHE18[3],CHN-HElangfang-AREACUCC1-CACHE35[0,TCP_HIT,0],CHN-TJ-GLOBAL1-CACHE60[39],CHN-TJ-GLOBAL1-CACHE35[0,TCP_HIT,36]
x-hcs-proxy-type: 1
x-tt-trace-host: 016a2077e03b2041825c42669e9a23cec5ee04519515486308eb42b81315658df6aa5ed29ad219c7d25626d5b022cced5274c18183adcd43889f65e87a17fde2315b0226a7e5f07d4c19094125051b3e74699be800dd629619bc2141d5fb81fc89ccc76230d7d3e4f731a9d881f3cb16c4
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2
www.ppmv027.xyz/template/m1938pc/static/js/base1.js
200 OK 0 B URL HTTP/2 www.ppmv027.xyz/template/m1938pc/static/js/base1.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /template/m1938pc/static/js/base1.js HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:12 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 07:21:11 GMT
vary: Accept-Encoding
etag: W/"63afe2e7-153a"
expires: Sat, 04 Feb 2023 13:57:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
yhtuchuang.com/960x60.gif
200 OK 0 B URL HTTP/1.1 yhtuchuang.com/960x60.gif
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
GET /960x60.gif HTTP/1.1
Host: yhtuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:57:17 GMT
Content-Type: image/gif
Content-Length: 136404
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 15:07:02 GMT
ETag: "63d7dd16-214d4"
Expires: Fri, 03 Mar 2023 12:29:26 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
www.ppmv027.xyz/js/wz.js?adv=0.1748149803117901
200 OK 0 B URL HTTP/2 www.ppmv027.xyz/js/wz.js?adv=0.1748149803117901
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /js/wz.js?adv=0.1748149803117901 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:13 GMT
content-type: application/javascript
last-modified: Sat, 19 Nov 2022 10:18:43 GMT
vary: Accept-Encoding
etag: W/"6378ad83-d33"
expires: Sat, 04 Feb 2023 13:57:13 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv027.xyz/js/piaofu.js?adv=0.8020159591430985
200 OK 0 B URL HTTP/2 www.ppmv027.xyz/js/piaofu.js?adv=0.8020159591430985
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /js/piaofu.js?adv=0.8020159591430985 HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:15 GMT
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 06:46:05 GMT
vary: Accept-Encoding
etag: W/"63ce2d2d-15a4"
expires: Sat, 04 Feb 2023 13:57:15 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv027.xyz/template/m1938pc/static/js/jquery.lazyload.min.js
200 OK 0 B URL HTTP/2 www.ppmv027.xyz/template/m1938pc/static/js/jquery.lazyload.min.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /template/m1938pc/static/js/jquery.lazyload.min.js HTTP/1.1
Host: www.ppmv027.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv027.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:57:12 GMT
content-type: application/javascript
last-modified: Sat, 08 Jan 2022 14:08:24 GMT
vary: Accept-Encoding
etag: W/"61d99ad8-d35"
expires: Sat, 04 Feb 2023 13:57:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
38.53.112.199
220.128.218.220
8.210.109.27
45.89.209.162
183.255.106.33
104.110.17.24
54.169.200.51
47.246.44.205
93.184.220.29
0.0.0.0