r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b7407cc102d62a5acd5e61f8a79bed36
c2f4890a62454e514962b55b7fc14228339c8e90
be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5046
Expires: Wed, 08 Feb 2023 06:56:14 GMT
Date: Wed, 08 Feb 2023 05:32:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8253
Expires: Wed, 08 Feb 2023 07:49:41 GMT
Date: Wed, 08 Feb 2023 05:32:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15786
Expires: Wed, 08 Feb 2023 09:55:14 GMT
Date: Wed, 08 Feb 2023 05:32:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 04:34:12 GMT
content-type: application/json
age: 3476
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6ZCgb2rosA8zhCJxariscIFbMTlpXRfNYahxDqr4s5scaxx/L+NsHrdHLOWVJ9LgHy3aI2wGCsg=
x-amz-request-id: AKN8R7B5YQSJDYMP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 04:45:50 GMT
age: 2778
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 05:32:08 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.alegianderson.com/wordpress/wp-content/login.php
154.210.141.15200 OK 781 B URL HTTP/1.1 www.alegianderson.com/wordpress/wp-content/login.php
IP 154.210.141.15:0
ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash b3195f196f5fb00f38100e390a46a770
e4b3a0ad20e44e0ff02d715e0cd6868d1d41192f
149ae5648c9482be50f969cf6a719ed2753bf25fb8fcab4a5aecbd0fe8adb513
GET /wordpress/wp-content/login.php HTTP/1.1
Host: www.alegianderson.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:31:53 GMT
Content-Type: text/html
Content-Length: 781
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 05:14:52 GMT
age: 1036
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.alegianderson.com/common.js
154.210.141.15200 OK 330 B URL HTTP/1.1 www.alegianderson.com/common.js
IP 154.210.141.15:0
ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone
File type ASCII text, with CRLF line terminators
Hash dcc4a7fc1a6623af1af2f2518a5a8848
5bfa6fb1455e9c54bbbadf97c7b4e5ea888757cf
345a13ec66c1d33e5628c24614d561c5a4d5c12a85a7ce1df9d920bafa79c6c7
GET /common.js HTTP/1.1
Host: www.alegianderson.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.alegianderson.com/wordpress/wp-content/login.php
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:31:54 GMT
Content-Type: application/x-javascript
Content-Length: 330
Connection: keep-alive
www.alegianderson.com/tj.js
154.210.141.15200 OK 0 B URL HTTP/1.1 www.alegianderson.com/tj.js
IP 154.210.141.15:0
ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tj.js HTTP/1.1
Host: www.alegianderson.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.alegianderson.com/wordpress/wp-content/login.php
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:31:54 GMT
Content-Type: application/x-javascript
Content-Length: 0
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3061
Expires: Wed, 08 Feb 2023 06:23:09 GMT
Date: Wed, 08 Feb 2023 05:32:08 GMT
Connection: keep-alive
45.82.167.137/ksbofang.html?kkk
45.82.167.137200 OK 200 B URL HTTP/1.1 45.82.167.137/ksbofang.html?kkk
IP 45.82.167.137:0
File type HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash e94aa393088ad38d23f8dfe2202f2a46
82c042649bbaa9b4fcea3f5daf2e0fb453bc31c0
1f493db2ed017231eb79d30ee5f08025e138499b6a9a1c95f2b97655609d5793
Analyzer Verdict Alert quad9 Sinkholed
GET /ksbofang.html?kkk HTTP/1.1
Host: 45.82.167.137
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.alegianderson.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 05:32:09 GMT
Content-Type: text/html
Content-Length: 200
Last-Modified: Mon, 06 Feb 2023 15:43:09 GMT
Connection: keep-alive
ETag: "63e1200d-c8"
Accept-Ranges: bytes
push.services.mozilla.com/
54.149.242.38101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.242.38:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: icO7bXbet9L7f46YYIzucA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QQjHH1CdYSeMrObgZ7yq1Npg1Ro=
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18449
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 05:32:10 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18449
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 05:32:10 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18449
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 05:32:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 062e186a259eda97173695240a492c63
9b476a4ec219667f560b88199a3a4e4b0a93b579
d18570d3c4ada689b5c2a99b0783ce41c629bd125e6683cf225e01b7032f14a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12256
x-amzn-requestid: 1b959eb9-cf69-414c-b57b-4a63277d709c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvgx-EhgoAMF2wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc7b3f-2c58e8ac2aee8a8f409a93a0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 03:10:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mujn0m9G4SIcD-5qZiD5kaYHg8x3rDtx-jYus-hrWFx_UjWEMNM_Tw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 06:48:36 GMT
age: 81814
etag: "9b476a4ec219667f560b88199a3a4e4b0a93b579"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbe359ce6fb136add75c8f3d3cc06330
e6584afcf39b6fad21eccbcce95c6645b8e1b3b8
29478bf1b8168dc457bb7d298448a78e1040bd3aa80cbf11cfa37475568590d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3ed9aa0-a88e-4b92-a2bb-567735d813b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8170
x-amzn-requestid: d1ddb47f-3472-4015-8d55-72f435671f03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f5aSPHiroAMFpSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e070da-114975440d70915472cdba2f;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 03:15:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0w6JgtsKSRHLPJ3LyY6YUI8N7PS-gVlLuivQUq9jdyeYYm3STiJJIQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 04:34:33 GMT
age: 3457
etag: "e6584afcf39b6fad21eccbcce95c6645b8e1b3b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b327816bc2c6fd7291c75c693685d54
771070be61d0724b1c90ca86ea34c804bd7e501a
d45188239cacc7b228bc75ccc95afb48914aaa434c418cd5b786533e8b9cb983
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5708e132-62b1-4b5b-aa88-fe22e522eb0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6838
x-amzn-requestid: 54fc5ae9-d37a-46cf-97e0-d05de1417cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7QEsCoAMFY1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-40de6212468fcd0e78a93708;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mgfr5wO7Bj5BVjKYY7O0c4ogLognfq09QrA9khZROr2CVyOWgKTz1g==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:52:35 GMT
age: 27575
etag: "771070be61d0724b1c90ca86ea34c804bd7e501a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f31c82179856e39ee5fc43d7f0b685
5b37f807a19ffc80c0b9334e6d24d5bb717496ce
c099c91c6f2125a8a89ee6e9dc0e37e2c2c9914adadb2c8b77795063baa62037
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6805
x-amzn-requestid: ef7a879d-25be-42b0-a5c5-df6ad8f1482c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_R2FFv5IAMFZ7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c9c0-2f8fa7ef41b70de04cfb5ac6;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:59:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JxJrYYY7fMm_DCBcuC4OEdR62HL5VMvJbt_a6TWp4QfqN0qxgFgj-A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:06:50 GMT
etag: "5b37f807a19ffc80c0b9334e6d24d5bb717496ce"
content-type: image/jpeg
age: 26720
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 726928e5de19ef978faebbe933c34008
bdaba3ed0c7efb65de88af96063d830683c8499b
c6d208fcee052da80de1bf2dcccbbc48853511b8888c4777799ee676abba51b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8644
x-amzn-requestid: d6d71f42-f887-4ad0-a2b7-9073d3857b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjRHBFoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-57490f255d8d30a561fdcd3a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qfHMhMAdnYcOa0Xm23enTGXj4CQC-QFHV50Pq6QQdvM5YcIgUZVPRQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:54:36 GMT
etag: "bdaba3ed0c7efb65de88af96063d830683c8499b"
content-type: image/jpeg
age: 27454
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8a3fa4f1ec82d501942f9db3de2cb7d
b91c2aea7f2fb26131c8929b254c5596a1bb25ff
9d246eeab8ba04c775a03fd960c8859934a0accb737e845e89aba40bc573fdaa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb27041-48b2-474f-b9d5-f88e9e662723.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6342
x-amzn-requestid: b2b61a71-5326-4fc6-baba-7baad29cf7c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkbHfDIAMF5AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c482-5cc4028d01d05305637af317;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iIQAy6CQSvnvQ79UJ6ifJbs-0kEqUYe8OyCqPb2HSKxoDoLykOyaLg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:52:28 GMT
age: 27582
etag: "b91c2aea7f2fb26131c8929b254c5596a1bb25ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash d238194a1f1b0109613564cca8d6b6a5
b39ffbbc0dde8d9a02b97cd0a4ea01e62427f844
ab319cd511a23b386a7fd80288dde96893c0209e67a0f3bbb08ae3a47740c40d
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 05:32:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 12 Feb 2023 02:15:22 GMT
ETag: "b39ffbbc0dde8d9a02b97cd0a4ea01e62427f844"
Last-Modified: Wed, 08 Feb 2023 02:15:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 853
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7961fbb7685cb4fa-OSL
js.users.51.la/21277729.js
103.143.19.103200 OK 2.3 kB URL HTTP/1.1 js.users.51.la/21277729.js
IP 103.143.19.103:0
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with very long lines (4898)
Hash 8383f682965a13e57739972b2453e897
ef56a32c226525a7c22aa4d811c7827ec80a8d40
e1a1b8ebe7a9f4d36de688c7067e5a2bd6e50d7c7b34f54f3296f3b00e4f135a
GET /21277729.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://45.82.167.137/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: CloudWAF
Date: Wed, 08 Feb 2023 05:32:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=dbe2350ef300dfd69cc; path=/
HWWAFSESTIME=1675834328677; path=/
Cache-Control: max-age=360000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
js.jdypal.com/download/1725_0.html
23.225.104.213301 Moved Permanently 167 B URL HTTP/2 js.jdypal.com/download/1725_0.html
IP 23.225.104.213:0
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash 88d02511bdc42a5665aba74a00a37e11
2c2a7d90940788aa0a3faf2b4115d4ce876b1f4f
54b2aa909b09c868bf25af353e3717002809e82a140d06e2b2726c0812467c94
GET /download/1725_0.html HTTP/1.1
Host: js.jdypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://45.82.167.137/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
location: https://js.diangale.com/download/1725_0.html
server: Microsoft-IIS/10.0
date: Wed, 08 Feb 2023 05:32:11 GMT
content-length: 167
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f813484cbf9634ea766c38f79d0e5e1e
6b53c01a9b4df9862aa2a298140af1da30a20e7d
53544bd7360ab878bc910b4fca55f20821661045fef00ef63ad2a7f8862e05af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "53544BD7360AB878BC910B4FCA55F20821661045FEF00EF63AD2A7F8862E05AF"
Last-Modified: Tue, 07 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10921
Expires: Wed, 08 Feb 2023 08:34:13 GMT
Date: Wed, 08 Feb 2023 05:32:12 GMT
Connection: keep-alive
js.diangale.com/download/1725_0.html
58.215.157.223200 OK 19 kB URL HTTP/1.1 js.diangale.com/download/1725_0.html
IP 58.215.157.223:0
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type ASCII text, with very long lines (404), with CRLF line terminators
Hash 9898d75a9e112f7e5515bc5fa21b109c
8e950b0515f0d101e09a8d33a58fb4d00cd68cc5
5346192619b2a4b17ed6a862be0873fa31d8a6a3c99b5c08de8ff68d89a749ea
GET /download/1725_0.html HTTP/1.1
Host: js.diangale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://45.82.167.137/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=UTF-8
Content-Length: 19331
Connection: keep-alive
Date: Tue, 07 Feb 2023 10:10:56 GMT
Ali-Swift-Global-Savetime: 1675764657
Via: cache39.l2cn3048[0,0,200-0,H], cache70.l2cn3048[0,0], cache43.cn2175[0,0,200-0,H], cache13.cn2175[1,0]
Age: 69675
X-Cache: HIT TCP_MEM_HIT dirn:9:155537052
X-Swift-SaveTime: Tue, 07 Feb 2023 10:12:01 GMT
X-Swift-CacheTime: 604736
Timing-Allow-Origin: *
EagleId: 3ad79d2116758343329137318e
js.diangale.com/js/two/js/jquery.min.js
58.215.157.223200 OK 33 kB URL HTTP/1.1 js.diangale.com/js/two/js/jquery.min.js
IP 58.215.157.223:0
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type Unicode text, UTF-8 (with BOM) text, with very long lines (32086), with CRLF line terminators
Hash 59b122a7a8ab09d79766d64df82f28f7
0d0b9909c3b93843dcd46727fe174e388c851e57
9b7578ca2e9ae009170c0905728cff758a3d41dd93506b415720739e7af9d421
GET /js/two/js/jquery.min.js HTTP/1.1
Host: js.diangale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/download/1725_0.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=UTF-8
Content-Length: 33285
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Last-Modified: Mon, 01 Jan 1601 00:00:00 GMT
Accept-Ranges: bytes
ETag: "e0275cc10eada69c"
Date: Tue, 07 Feb 2023 00:55:04 GMT
Ali-Swift-Global-Savetime: 1675731304
Via: cache73.l2cn3048[70,80,200-0,M], cache49.l2cn3048[83,0], cache32.cn2175[0,0,200-0,H], cache11.cn2175[1,0]
Age: 103029
X-Cache: HIT TCP_MEM_HIT dirn:11:42371192
X-Swift-SaveTime: Tue, 07 Feb 2023 00:55:04 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: 3ad79d1f16758343332207997e
js.diangale.com/js/two/js/1725.js
58.215.157.223200 OK 2.3 kB URL HTTP/1.1 js.diangale.com/js/two/js/1725.js
IP 58.215.157.223:0
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type ASCII text, with very long lines (4898), with no line terminators
Hash 76ab7cf7d1665a38b6d0a129c717881c
7908356652710d1702179b7bf39c3e895ad6cd88
2da9e3e4aa45bb9065cf7712230bdcafd1b4a7ced12eb9ef349fbeb3a8d927e6
GET /js/two/js/1725.js HTTP/1.1
Host: js.diangale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/download/1725_0.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2306
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Last-Modified: Mon, 01 Jan 1601 00:00:00 GMT
Accept-Ranges: bytes
ETag: "34b1eb43802b77b4"
Date: Tue, 07 Feb 2023 10:10:57 GMT
Ali-Swift-Global-Savetime: 1675764657
Via: cache34.l2cn3048[0,0,200-0,H], cache71.l2cn3048[1,0], cache15.cn2175[0,0,200-0,H], cache13.cn2175[1,0]
Age: 69676
X-Cache: HIT TCP_MEM_HIT dirn:10:106439738
X-Swift-SaveTime: Tue, 07 Feb 2023 10:12:01 GMT
X-Swift-CacheTime: 604736
Timing-Allow-Origin: *
EagleId: 3ad79d2116758343334917536e
js.diangale.com/js/five/js/md5.js
58.215.157.223200 OK 2.9 kB URL HTTP/1.1 js.diangale.com/js/five/js/md5.js
IP 58.215.157.223:0
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type ASCII text, with CRLF line terminators
Hash c047125785fdb6aa40e5e8dba6a6d2fc
1ef4c2ec60fcde456a46e78477b7f6b6013bfd88
b08a609b693e7334ff6bbe8e329c645cc10f2369dd0b86f28add9883147aa5b3
GET /js/five/js/md5.js HTTP/1.1
Host: js.diangale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/download/1725_0.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2942
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Last-Modified: Mon, 01 Jan 1601 00:00:00 GMT
Accept-Ranges: bytes
ETag: "ffda5da30ac811d2"
Date: Tue, 07 Feb 2023 00:55:04 GMT
Ali-Swift-Global-Savetime: 1675731304
Via: cache52.l2cn3048[70,70,200-0,M], cache20.l2cn3048[71,0], cache35.cn2175[0,0,200-0,H], cache11.cn2175[1,0]
Age: 103029
X-Cache: HIT TCP_MEM_HIT dirn:9:1254278665
X-Swift-SaveTime: Tue, 07 Feb 2023 00:55:04 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: 3ad79d1f16758343337498192e
js.diangale.com/js/two/js/twojs.js
58.215.157.223200 OK 2.6 kB URL HTTP/1.1 js.diangale.com/js/two/js/twojs.js
IP 58.215.157.223:0
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type Unicode text, UTF-8 (with BOM) text, with very long lines (404), with CRLF line terminators
Hash a0b853ffbef93facf41300aa599b3b82
cb1dc3630a7b43c4b32ff701d7f56dfc94b03000
e09159c4ed267e199c0f451bb2b370364dbe2580a82194ad520856d539a795b5
GET /js/two/js/twojs.js HTTP/1.1
Host: js.diangale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/download/1725_0.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2585
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Last-Modified: Mon, 01 Jan 1601 00:00:00 GMT
Accept-Ranges: bytes
ETag: "15d0df19bcec5c0b"
Date: Tue, 07 Feb 2023 00:55:04 GMT
Ali-Swift-Global-Savetime: 1675731304
Via: cache20.l2cn3048[66,66,200-0,M], cache1.l2cn3048[68,0], cache18.cn2175[0,0,200-0,H], cache9.cn2175[1,0]
Age: 103029
X-Cache: HIT TCP_MEM_HIT dirn:10:244437550
X-Swift-SaveTime: Tue, 07 Feb 2023 00:55:04 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: 3ad79d1d16758343337554794e
X-Firefox-Early-Data: accepted
js.diangale.com/js/two/js/zhutongji.js
58.215.157.223200 OK 2.3 kB URL HTTP/1.1 js.diangale.com/js/two/js/zhutongji.js
IP 58.215.157.223:0
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type Unicode text, UTF-8 (with BOM) text, with very long lines (4898), with no line terminators
Hash c2dbe2cdaf0d152438a2e595409ea5de
be64c24b30349f26e7d644d8281c0868eba81b4f
ab08ca88d70e0062dbd6ccc46e93a0e7ec36b8ac12eb11dcb61ce04fac60c9a2
GET /js/two/js/zhutongji.js HTTP/1.1
Host: js.diangale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/download/1725_0.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2316
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Last-Modified: Mon, 01 Jan 1601 00:00:00 GMT
Accept-Ranges: bytes
ETag: "3b62847c6f4ae3b9"
Date: Tue, 07 Feb 2023 00:55:04 GMT
Ali-Swift-Global-Savetime: 1675731304
Via: cache44.l2cn3048[55,55,200-0,M], cache66.l2cn3048[57,0], cache43.cn2175[0,0,200-0,H], cache8.cn2175[1,0]
Age: 103029
X-Cache: HIT TCP_MEM_HIT dirn:11:56272326
X-Swift-SaveTime: Tue, 07 Feb 2023 00:55:04 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: 3ad79d1c16758343337628109e
X-Firefox-Early-Data: accepted
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a27a89b1ca5df3e852b7378417d23704
9e86746170264daf78c73beaba986297efe29e4d
b416cea04a66a0b96ddb42406d637f2258a2244b259fedbbe931707b482617d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B416CEA04A66A0B96DDB42406D637F2258A2244B259FEDBBE931707B482617D5"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2842
Expires: Wed, 08 Feb 2023 06:19:35 GMT
Date: Wed, 08 Feb 2023 05:32:13 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a27a89b1ca5df3e852b7378417d23704
9e86746170264daf78c73beaba986297efe29e4d
b416cea04a66a0b96ddb42406d637f2258a2244b259fedbbe931707b482617d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B416CEA04A66A0B96DDB42406D637F2258A2244B259FEDBBE931707B482617D5"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Wed, 08 Feb 2023 11:31:34 GMT
Date: Wed, 08 Feb 2023 05:32:14 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash 4c1cbaf3aadaa08b4d5276712460e9db
1dac1426e4dac59e0afd184da180704ed63eec9f
3305ecd1bb96c4b1c2f91a60a31e65fb11ffb02af47b3bae4281d828070c5a66
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 05:32:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 12 Feb 2023 01:43:29 GMT
ETag: "1dac1426e4dac59e0afd184da180704ed63eec9f"
Last-Modified: Wed, 08 Feb 2023 01:43:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1416
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7961fbcd4f5cb4fa-OSL
i.jhu655g.com/20220915/479abc23111894ef3f67b61653549550.pgs
42.81.245.1200 OK 12 kB URL HTTP/1.1 i.jhu655g.com/20220915/479abc23111894ef3f67b61653549550.pgs
IP 42.81.245.1:0
File type PNG image data, 299 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash a9ba4bbdb595541012d45c323779320f
ca2b7292e438eb90f71308c37d57e2cc2b516541
c0ce6ba60bc825f851e0e78805820bed2c7db2b0f3d086d96f750e65bcc5cd6f
GET /20220915/479abc23111894ef3f67b61653549550.pgs HTTP/1.1
Host: i.jhu655g.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 12288
Connection: keep-alive
Server: Default-server-KS-CLOUD-QD-MP-02-12
Date: Sat, 04 Feb 2023 11:33:40 GMT
Expires: Mon, 06 Mar 2023 11:33:40 GMT
Age: 323913
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token, Authorization, Token, X-Token
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
x-link-via: tjct06:443;qdmp02:80;
X-Cache-Status: HIT from KS-CLOUD-QD-MP-02-12, HIT from KS-CLOUD-TJ-CT-06-05
X-Cdn-Request-ID: dfb7018dd58d3a1cf3502c1a0f7ce744
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash dac5d9f8f4e590988caccd421722f3dd
e455f93d83b4fab5ab8766dc4c0b8b7ae213a3e6
ae63b5fcdaff7c072fd74dfe4d6b1a1f5b0f946a30f363760f4cb8e66b786615
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE63B5FCDAFF7C072FD74DFE4D6B1A1F5B0F946A30F363760F4CB8E66B786615"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2885
Expires: Wed, 08 Feb 2023 06:20:19 GMT
Date: Wed, 08 Feb 2023 05:32:14 GMT
Connection: keep-alive
i.jhu655g.com/20220102/278949dfc4f962e81b8df57fd09aef89.pgs
42.81.245.1200 OK 46 kB URL HTTP/1.1 i.jhu655g.com/20220102/278949dfc4f962e81b8df57fd09aef89.pgs
IP 42.81.245.1:0
File type PNG image data, 787 x 1045, 8-bit/color RGBA, non-interlaced\012- data
Hash cef756956439e1a6028f4387a0bbf5c7
01197b6e8c738953eff6f19d141501a43cc0dca0
06045c479a5b6d4c6443711156773680e96ba7f5a5b1f3f597d8342f6ee06f8b
GET /20220102/278949dfc4f962e81b8df57fd09aef89.pgs HTTP/1.1
Host: i.jhu655g.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 46080
Connection: keep-alive
Server: Default-server-KS-CLOUD-HUZ-MP-04-13
Date: Sat, 04 Feb 2023 11:33:39 GMT
Expires: Mon, 06 Mar 2023 11:33:39 GMT
Age: 323914
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token, Authorization, Token, X-Token
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
x-link-via: tjct06:443;huzmp04:80;
X-Cache-Status: HIT from KS-CLOUD-HUZ-MP-04-13, HIT from KS-CLOUD-TJ-CT-06-13
X-Cdn-Request-ID: dc0ab68261e92b3a0ead25228c1546f7
i.jhu655g.com/20220704/1986305dee5eb2eb1767d2e2cb3e1b51.jps
42.81.245.1200 OK 177 kB URL HTTP/1.1 i.jhu655g.com/20220704/1986305dee5eb2eb1767d2e2cb3e1b51.jps
IP 42.81.245.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x1845, components 3\012- data
Size 177 kB (177152 bytes)
Hash 046c19b7420ada44ea0d74ca47eb66bf
c2d7b26cc12cbc9e6706d048afdd94954f9e700e
58d4e78db06b2167621f43f71b9c7e9a1f5d56885bf408b9705486d314231ec8
GET /20220704/1986305dee5eb2eb1767d2e2cb3e1b51.jps HTTP/1.1
Host: i.jhu655g.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 177152
Connection: keep-alive
Server: Default-server-KS-CLOUD-TAIZ-MP-01-35
Date: Sat, 04 Feb 2023 11:33:41 GMT
Expires: Mon, 06 Mar 2023 11:33:41 GMT
Age: 323912
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token, Authorization, Token, X-Token
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
x-link-via: tjct06:443;taizmp01:80;
X-Cache-Status: HIT from KS-CLOUD-TAIZ-MP-01-35, HIT from KS-CLOUD-TJ-CT-06-01-L
X-Cdn-Request-ID: 2f498873bd27fac551e33063653a203f
ia.51.la/go1?id=21470073&rt=1675834386636&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1675834386636&tt=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&kw=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&cu=https%253A%252F%252Fjs.diangale.com%252Fdownload%252F1725_0.html&pu=http%253A%252F%252F45.82.167.137%252F
183.240.166.133200 0 B URL HTTP/1.1 ia.51.la/go1?id=21470073&rt=1675834386636&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1675834386636&tt=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&kw=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&cu=https%253A%252F%252Fjs.diangale.com%252Fdownload%252F1725_0.html&pu=http%253A%252F%252F45.82.167.137%252F
IP 183.240.166.133:0
ASN #56040 China Mobile communications corporation
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21470073&rt=1675834386636&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1675834386636&tt=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&kw=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&cu=https%253A%252F%252Fjs.diangale.com%252Fdownload%252F1725_0.html&pu=http%253A%252F%252F45.82.167.137%252F HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Content-Length: 0
Date: Wed, 08 Feb 2023 05:32:08 GMT
i.jhu655g.com/20220601/33170e232e823b8bf64e793a710449ac.pgs
42.81.245.1200 OK 113 kB URL HTTP/1.1 i.jhu655g.com/20220601/33170e232e823b8bf64e793a710449ac.pgs
IP 42.81.245.1:0
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 113 kB (112640 bytes)
Hash e1ef0522923b8bd838cd561bf01d8e10
310572481eb55f18bd9e17da17ed05f9c8ef00a5
d69d2a783c3f8ff424da20ce62f15a3e34be078a16365a0706559d1c2f676208
GET /20220601/33170e232e823b8bf64e793a710449ac.pgs HTTP/1.1
Host: i.jhu655g.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 112640
Connection: keep-alive
Server: Default-server-KS-CLOUD-SJZ-MP-04-20
Date: Sat, 04 Feb 2023 11:33:40 GMT
Expires: Mon, 06 Mar 2023 11:33:40 GMT
Age: 323913
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token, Authorization, Token, X-Token
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
x-link-via: tjct06:443;sjzmp04:80;
X-Cache-Status: HIT from KS-CLOUD-SJZ-MP-04-20, HIT from KS-CLOUD-TJ-CT-06-05
X-Cdn-Request-ID: d97f4a467957e8a6cf4b24dc98008a5c
ia.51.la/go1?id=21240093&rt=1675834386880&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=2&ekc=&sid=1675834386880&tt=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&kw=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&cu=https%253A%252F%252Fjs.diangale.com%252Fdownload%252F1725_0.html&pu=http%253A%252F%252F45.82.167.137%252F
183.240.166.133200 0 B URL HTTP/1.1 ia.51.la/go1?id=21240093&rt=1675834386880&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=2&ekc=&sid=1675834386880&tt=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&kw=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&cu=https%253A%252F%252Fjs.diangale.com%252Fdownload%252F1725_0.html&pu=http%253A%252F%252F45.82.167.137%252F
IP 183.240.166.133:0
ASN #56040 China Mobile communications corporation
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21240093&rt=1675834386880&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=2&ekc=&sid=1675834386880&tt=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&kw=%25E5%25B0%258F%25E9%25BB%2584%25E4%25B9%25A6%25E8%25A7%2586%25E9%25A2%2591&cu=https%253A%252F%252Fjs.diangale.com%252Fdownload%252F1725_0.html&pu=http%253A%252F%252F45.82.167.137%252F HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Content-Length: 0
Date: Wed, 08 Feb 2023 05:32:14 GMT
i.jhu655g.com/20220704/576b0ac14c749671636e22e4166dc26e.jps
42.81.245.1200 OK 278 kB URL HTTP/1.1 i.jhu655g.com/20220704/576b0ac14c749671636e22e4166dc26e.jps
IP 42.81.245.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x2732, components 3\012- data
Size 278 kB (278528 bytes)
Hash 44481423454da65b146996b20425651f
40ab1e3f89d8c936a7e8b15d2cfd3ae024c1dc9e
17c49cfbbc8157f6a41fea4a3bc8db08ad23abb61f8a7359cc9bc1ccb7e6fcb3
GET /20220704/576b0ac14c749671636e22e4166dc26e.jps HTTP/1.1
Host: i.jhu655g.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 278528
Connection: keep-alive
Server: Default-server-KS-CLOUD-LIS-MP-12-44
Date: Sat, 04 Feb 2023 11:33:41 GMT
Expires: Mon, 06 Mar 2023 11:33:41 GMT
Age: 323913
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token, Authorization, Token, X-Token
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
x-link-via: tjct06:443;lismp12:80;
X-Cache-Status: HIT from KS-CLOUD-LIS-MP-12-44, HIT from KS-CLOUD-TJ-CT-06-03
X-Cdn-Request-ID: fdea86d1c4c6d409e39f72ce029c3a24
i.jhu655g.com/20220704/01dda819766cf6bd66fdf398bbf0bdff.jps
42.81.245.1200 OK 258 kB URL HTTP/1.1 i.jhu655g.com/20220704/01dda819766cf6bd66fdf398bbf0bdff.jps
IP 42.81.245.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x2565, components 3\012- data
Size 258 kB (258048 bytes)
Hash 9ac0d5f82fd7d1f2c9e0322ad4b3e484
99dd2f2e056f0c67435f43b832c324dfb61533d1
d2a58ba9e433777f7db59cdee8ddcfc6a99ed73c01373654ac12e4d35810bd42
GET /20220704/01dda819766cf6bd66fdf398bbf0bdff.jps HTTP/1.1
Host: i.jhu655g.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 258048
Connection: keep-alive
Server: Default-server-KS-CLOUD-TAIZ-MP-01-29
Date: Sat, 04 Feb 2023 11:33:41 GMT
Expires: Mon, 06 Mar 2023 11:33:41 GMT
Age: 323913
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token, Authorization, Token, X-Token
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
x-link-via: tjct06:443;taizmp01:80;
X-Cache-Status: HIT from KS-CLOUD-TAIZ-MP-01-29, HIT from KS-CLOUD-TJ-CT-06-11
X-Cdn-Request-ID: 24f86c193663620d7e00552948ca5341
js.diangale.com/favicon.ico
58.215.157.223200 OK 1.9 kB URL HTTP/1.1 js.diangale.com/favicon.ico
IP 58.215.157.223:0
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 18635fbfcf32c70ba48c411970d6d4e4
fa5562b00e699f20da1e829f8aab78a319880b6e
383f871261c66de9f2e40bad2dcf87e4c4b29c59d5350db9b48afa3ca0e96c65
GET /favicon.ico HTTP/1.1
Host: js.diangale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.diangale.com/download/1725_0.html
Cookie: __tins__21470073=%7B%22sid%22%3A%201675834386636%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201675836186636%7D; __51cke__=; __51laig__=2; __tins__21240093=%7B%22sid%22%3A%201675834386880%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201675836186880%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Content-Length: 1911
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 09:48:18 GMT
Accept-Ranges: bytes
ETag: "c074aa6586ead71:0"
Date: Tue, 07 Feb 2023 00:55:07 GMT
Ali-Swift-Global-Savetime: 1675731307
Via: cache50.l2cn3048[59,58,200-0,M], cache33.l2cn3048[61,0], cache16.cn2175[0,0,200-0,H], cache11.cn2175[1,0]
Age: 103028
X-Cache: HIT TCP_MEM_HIT dirn:11:1117361214
X-Swift-SaveTime: Tue, 07 Feb 2023 00:55:07 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: 3ad79d1f16758343355348851e