2.5 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5151), with no line terminators
Hash 3b856a993e6eb0c9ba7fa424b0fb8313
ffe4530470bf2269f9bf1f9a08e0d47f84e0d47a
177a8274958eb733752084c9b314d8c98eded6e223bab4d6d5055c93e86c3ff9
GET / HTTP/1.1
Host: 252481.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx/1.20.2
date: Sun, 03 Dec 2023 02:37:37 GMT
content-type: text/html
last-modified: Mon, 16 Oct 2023 11:33:42 GMT
vary: Accept-Encoding
etag: W/"652d1f96-14b3"
cache-control: no-cache
content-encoding: gzip
via: 1.1 google
Transfer-Encoding: chunked
ocsp2.globalsign.com/gsorganizationvalsha2g2
1.5 kB URL ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash bae0a470ebf502e969401631fd220719
1eb1d985fff6af8c9e91117cf5fa476588537b7b
a28c5d1ab593a1dc66645e2b107b984c7b5f5dfa8641158c56f087b4adfc03a7
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 02:37:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 07 Dec 2023 01:35:10 GMT
ETag: "1eb1d985fff6af8c9e91117cf5fa476588537b7b"
Last-Modified: Sun, 03 Dec 2023 01:35:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 102
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82f86dc988960b65-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
1.5 kB URL ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash bae0a470ebf502e969401631fd220719
1eb1d985fff6af8c9e91117cf5fa476588537b7b
a28c5d1ab593a1dc66645e2b107b984c7b5f5dfa8641158c56f087b4adfc03a7
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 02:37:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 07 Dec 2023 01:35:10 GMT
ETag: "1eb1d985fff6af8c9e91117cf5fa476588537b7b"
Last-Modified: Sun, 03 Dec 2023 01:35:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 102
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82f86dc99ea35685-OSL
g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js
200 OK 15 kB URL GET HTTP/2 g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
Fingerprint21:DF:50:AB:CB:25:F1:C4:5F:84:6C:A7:C0:8B:88:2D:0C:25:5A:BD
ValidityThu, 29 Jun 2023 02:26:12 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File type Unicode text, UTF-8 text, with very long lines (39989), with no line terminators
Hash 995c173aa043d3cc1d774ca298a71b74
65b6edb7a721a8312de14f1dd78df2c6d13658b4
ed55450c5fd25afc4812912061a313704f155a507e302921a9513df81c9e493f
GET /woodpeckerx/jssdk/wpkReporter.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://252481.com
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 14747
date: Sun, 03 Dec 2023 02:33:37 GMT
vary: Accept-Encoding
x-oss-request-id: 656BE901CA02BA3638DAACFE
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17575337766638963859
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: mVwXOqBD08wdd0yimKcbdA==
x-oss-server-time: 2
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1701570817
via: cache3.l2de2[10,9,200-0,M], cache9.l2de2[11,0], cache9.l2de2[11,0], ens-cache3.de4[0,0,200-0,H], ens-cache4.de4[2,0]
age: 241
x-cache: HIT TCP_MEM_HIT dirn:10:319327599
x-swift-savetime: Sun, 03 Dec 2023 02:33:37 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff62b1c17015710581045639e
X-Firefox-Spdy: h2
g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js
200 OK 2.6 kB URL GET HTTP/2 g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
Fingerprint21:DF:50:AB:CB:25:F1:C4:5F:84:6C:A7:C0:8B:88:2D:0C:25:5A:BD
ValidityThu, 29 Jun 2023 02:26:12 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File type Unicode text, UTF-8 text, with very long lines (5721), with no line terminators
Hash 9f681b53980381f708c2787b4961b8e7
8fa2a66468a3db33ae1b10cdabd9de88c20211b9
ff81aa49e48452dc0d382124bf6277a29977a95743711b268eb7a76849cd225a
GET /woodpeckerx/jssdk/plugins/performance.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://252481.com
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 2591
date: Sun, 03 Dec 2023 02:34:06 GMT
vary: Accept-Encoding
x-oss-request-id: 656BE91E502B6E373408E803
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10730233764925966105
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: n2gbU5gDgfcIwnh7SWG45w==
x-oss-server-time: 20
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1701570846
via: cache25.l2de2[0,0,200-0,H], cache5.l2de2[1,0], cache5.l2de2[1,0], ens-cache4.de4[0,0,200-0,H], ens-cache4.de4[2,0]
age: 212
x-cache: HIT TCP_MEM_HIT dirn:10:135822819
x-swift-savetime: Sun, 03 Dec 2023 02:34:08 GMT
x-swift-cachetime: 598
timing-allow-origin: *
eagleid: 2ff62b1c17015710581065646e
X-Firefox-Spdy: h2
g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js
200 OK 2.4 kB URL GET HTTP/2 g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
Fingerprint21:DF:50:AB:CB:25:F1:C4:5F:84:6C:A7:C0:8B:88:2D:0C:25:5A:BD
ValidityThu, 29 Jun 2023 02:26:12 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File type Unicode text, UTF-8 text, with very long lines (5084), with no line terminators
Hash 2edd3ece2d4fdebb930c640f8011a567
bd2ff2c0a0e98a7ddb2449e2afe00a68d16ffc12
0be039408b767c620542ae7d66781537712fe8096253922e09fb3082a62730f8
GET /woodpeckerx/jssdk/plugins/globalerror.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://252481.com
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 2356
date: Sun, 03 Dec 2023 02:33:37 GMT
vary: Accept-Encoding
x-oss-request-id: 656BE901B3DB4D33395B7BB5
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16649164976846769012
x-oss-storage-class: Standard
cache-control: max-age=86400,s-maxage=600
content-md5: Lt0+zi1P3ruTDGQPgBGlZw==
x-oss-server-time: 2
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
ali-swift-global-savetime: 1701570817
via: cache3.l2de2[11,10,200-0,M], cache25.l2de2[14,0], cache25.l2de2[14,0], ens-cache3.de4[0,0,200-0,H], ens-cache4.de4[1,0]
age: 241
x-cache: HIT TCP_MEM_HIT dirn:8:257339676
x-swift-savetime: Sun, 03 Dec 2023 02:33:37 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff62b1c17015710581245693e
X-Firefox-Spdy: h2
image.uc.cn/s/uae/g/3o/berg/static/archer_index.3625ec6bca8fbb37d7f5.js
200 OK 10 kB URL GET HTTP/2 image.uc.cn/s/uae/g/3o/berg/static/archer_index.3625ec6bca8fbb37d7f5.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.uc.cn
Fingerprint61:39:F6:CE:73:81:DE:72:76:83:A5:D2:EA:76:10:98:DC:C2:47:67
ValidityThu, 05 Jan 2023 06:01:06 GMT - Tue, 06 Feb 2024 06:01:05 GMT
File type Unicode text, UTF-8 text, with very long lines (24206)
Hash 7ccce6c7fb6517a5de0a6d9f345d6333
89915b5a58e5ce235fa7ffa8a799e7d2e9dad7c0
1f38823b40033c73d58784b2f32ed2d86faf5693141c34d0a331c64402aedbe0
GET /s/uae/g/3o/berg/static/archer_index.3625ec6bca8fbb37d7f5.js HTTP/1.1
Host: image.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/javascript
content-length: 10319
date: Fri, 24 Nov 2023 19:38:01 GMT
vary: Accept-Encoding
expires: Sun, 28 Aug 2022 14:08:04 GMT
cache-control: max-age=8640000
etag: 45739637-7f40
access-control-allow-origin: *
content-encoding: gzip
ali-swift-global-savetime: 1700856523
via: cache2.l2fr1[0,0,200-0,H], cache37.l2fr1[0,0], cache5.es3[0,0,200-0,H], cache3.es3[1,0]
age: 66
x-cache: HIT TCP_MEM_HIT dirn:12:827548841
x-swift-savetime: Mon, 27 Nov 2023 05:36:23 GMT
x-swift-cachetime: 8433140
timing-allow-origin: *
eagleid: a3b5319717015710582392553e
X-Firefox-Spdy: h2
image.uc.cn/s/uae/g/3o/berg/static/index.a84da0673eccc37fa0f2.css
200 OK 937 B URL GET HTTP/2 image.uc.cn/s/uae/g/3o/berg/static/index.a84da0673eccc37fa0f2.css
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.uc.cn
Fingerprint61:39:F6:CE:73:81:DE:72:76:83:A5:D2:EA:76:10:98:DC:C2:47:67
ValidityThu, 05 Jan 2023 06:01:06 GMT - Tue, 06 Feb 2024 06:01:05 GMT
File type ASCII text, with very long lines (2179), with no line terminators
Hash 09bdfbcc9456faf8a85a94d44ef7734d
e3d00a7df14bc13abb5bd31caa58f1e4be17ede0
05ef687cb9294988df06df1c39cc1e84a26f29f26735c6948978347ed7927fc8
GET /s/uae/g/3o/berg/static/index.a84da0673eccc37fa0f2.css HTTP/1.1
Host: image.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/css
content-length: 937
date: Fri, 24 Nov 2023 20:08:43 GMT
vary: Accept-Encoding
expires: Sun, 28 Aug 2022 14:08:04 GMT
cache-control: max-age=8640000
etag: b589311b-883
access-control-allow-origin: *
content-encoding: gzip
ali-swift-global-savetime: 1700856523
via: cache11.l2fr1[0,0,200-0,H], cache30.l2fr1[1,0], cache10.es3[0,0,200-0,H], cache3.es3[0,0]
age: 66
x-cache: HIT TCP_MEM_HIT dirn:12:722460692
x-swift-savetime: Mon, 27 Nov 2023 05:36:23 GMT
x-swift-cachetime: 8433140
timing-allow-origin: *
eagleid: a3b5319717015710582472554e
X-Firefox-Spdy: h2
px.effirst.com/api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1701571063%26ud%3De2bc8653-bc59-454d-2443-52dab1679f5b%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce
200 OK 130 B URL GET HTTP/1.1 px.effirst.com/api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1701571063%26ud%3De2bc8653-bc59-454d-2443-52dab1679f5b%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce
IP
ASN #24547 Hebei Mobile Communication Company Limited
File type JSON data\012- , Unicode text, UTF-8 text
Hash bba929a8e9a79a4bbe78932e8c854db9
eea3d6f708fbdbf4d4fefef37d886eb1f7b12c5e
9d72c32cc70afc9d278e35321d3d7eedbc8f991784e60bf5397bba7dddbc93d4
GET /api/v1/jconfig?wpk-header=app%3Dberg-download%26tm%3D1701571063%26ud%3De2bc8653-bc59-454d-2443-52dab1679f5b%26sver%3D1.2.7%26sign%3Dc41e43c828c16c16a6eb1c9c1e68e8ce HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://252481.com
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Sun, 03 Dec 2023 02:37:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip
252481.com/favicon.ico
404 Not Found 153 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a53e183b2c571a68b246ad570b76da19
7eac95d26ba1e92a3b4d6fd47ee057f00274ac13
29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7
GET /favicon.ico HTTP/1.1
Host: 252481.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Cookie: __wpkreporterwid_=54a4e80a-1d0c-4b93-08ad-3d2f54915b37
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
server: nginx/1.20.2
date: Sun, 03 Dec 2023 02:37:39 GMT
content-type: text/html
Content-Length: 153
via: 1.1 google
track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=252481.com&url=http%3A%2F%2F252481.com%2F&cookie=__wpkreporterwid_%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37&time=1701571063786&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false<=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
200 33 B URL GET HTTP/1.1 track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=252481.com&url=http%3A%2F%2F252481.com%2F&cookie=__wpkreporterwid_%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37&time=1701571063786&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false<=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
IP
Certificate IssuerGlobalSign nv-sa
Subject*.uc.cn
Fingerprint61:39:F6:CE:73:81:DE:72:76:83:A5:D2:EA:76:10:98:DC:C2:47:67
ValidityThu, 05 Jan 2023 06:01:06 GMT - Tue, 06 Feb 2024 06:01:05 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 55199048ae64f13bfc67cd2fec307e1a
0febd20edc3ebbaa60bf312be0e1d977ddd3a319
7c677a0c1ba67a4335c821aa3af6031428be641e33887fc719ce8f52f926898d
GET /collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_cn&page_h5=page_loading_cn&keyword=&referrer=&host=252481.com&url=http%3A%2F%2F252481.com%2F&cookie=__wpkreporterwid_%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37&time=1701571063786&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false<=pageview&c_lt=pageview&event_id=2001&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv HTTP/1.1
Host: track.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Sun, 03 Dec 2023 02:37:39 GMT
Content-Type: image/avif;charset=UTF-8
Content-Length: 33
Connection: keep-alive
Server: Tengine/2.1.3_400
Cache-Control: no-cache
Access-Control-Allow-Origin: *
track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first<=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=252481.com&url=http%3A%2F%2F252481.com%2F&cookie=__wpkreporterwid_%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37&time=1701571063735&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
200 33 B URL GET HTTP/1.1 track.uc.cn/collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first<=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=252481.com&url=http%3A%2F%2F252481.com%2F&cookie=__wpkreporterwid_%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37&time=1701571063735&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv
IP
Certificate IssuerGlobalSign nv-sa
Subject*.uc.cn
Fingerprint61:39:F6:CE:73:81:DE:72:76:83:A5:D2:EA:76:10:98:DC:C2:47:67
ValidityThu, 05 Jan 2023 06:01:06 GMT - Tue, 06 Feb 2024 06:01:05 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 55199048ae64f13bfc67cd2fec307e1a
0febd20edc3ebbaa60bf312be0e1d977ddd3a319
7c677a0c1ba67a4335c821aa3af6031428be641e33887fc719ce8f52f926898d
GET /collect?appid=29351a4155a4&stat_a=berg&stat_b=download&ev_ct=berg_download&page=page_loading_first&page_h5=page_loading_first<=pageview&c_lt=pageview&event_id=2001&keyword=&referrer=&host=252481.com&url=http%3A%2F%2F252481.com%2F&cookie=__wpkreporterwid_%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37&time=1701571063735&entry=&_ua=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0&isUC=false&isQuark=false&is_duannei=false&uc_param_str=dsfrpfvedncpssntnwbipreimeutsv HTTP/1.1
Host: track.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Sun, 03 Dec 2023 02:37:39 GMT
Content-Type: image/avif;charset=UTF-8
Content-Length: 33
Connection: keep-alive
Server: Tengine/2.1.3_400
Cache-Control: no-cache
Access-Control-Allow-Origin: *
hm.baidu.com/hm.js?b150d8955dada51289c717fc938583d3
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?b150d8955dada51289c717fc938583d3
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (720)
Hash 7f4ac128959f7a31bd959ab191824aa7
3e8a17b69b2e10d1dce152adc1e1b88e49bfbb86
b9acd840b2f1a029e8e07392f490506ced18ebe466d4d73e89d8a73219894ff7
GET /hm.js?b150d8955dada51289c717fc938583d3 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11358
Content-Type: application/javascript
Date: Sun, 03 Dec 2023 02:37:40 GMT
Etag: 7a4d422fd9f054b51e1afd9c5407f998
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=FDBD58387139FCDF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1005745880&si=b150d8955dada51289c717fc938583d3&v=1.3.0&lv=1&sn=20326&r=0&ww=1280&u=http%3A%2F%2F252481.com%2F&tt=252481.com
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1005745880&si=b150d8955dada51289c717fc938583d3&v=1.3.0&lv=1&sn=20326&r=0&ww=1280&u=http%3A%2F%2F252481.com%2F&tt=252481.com
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1005745880&si=b150d8955dada51289c717fc938583d3&v=1.3.0&lv=1&sn=20326&r=0&ww=1280&u=http%3A%2F%2F252481.com%2F&tt=252481.com HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 03 Dec 2023 02:37:41 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=46BD1257D256C0F5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701571066911%26tm%3D1701571066%26ud%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37%26ver%3D2.44.0%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b
200 OK 20 B URL POST HTTP/1.1 px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701571066911%26tm%3D1701571066%26ud%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37%26ver%3D2.44.0%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b
IP
ASN #24547 Hebei Mobile Communication Company Limited
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
POST /api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701571066911%26tm%3D1701571066%26ud%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37%26ver%3D2.44.0%26type%3Dflow%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 899
Origin: http://252481.com
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Sun, 03 Dec 2023 02:37:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip
px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701571066929%26tm%3D1701571066%26ud%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37%26ver%3D2.44.0%26type%3Djsfsperf%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b
200 OK 20 B URL POST HTTP/1.1 px.effirst.com/api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701571066929%26tm%3D1701571066%26ud%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37%26ver%3D2.44.0%26type%3Djsfsperf%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b
IP
ASN #24547 Hebei Mobile Communication Company Limited
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
POST /api/v1/jssdk/upload?wpk-header=app%3Dberg-download%26cp%3Dnone%26de%3D4%26seq%3D1701571066929%26tm%3D1701571066%26ud%3D54a4e80a-1d0c-4b93-08ad-3d2f54915b37%26ver%3D2.44.0%26type%3Djsfsperf%26sver%3D1.2.7%26sign%3D9bf8a190ef82c5049df7b199c599c45b HTTP/1.1
Host: px.effirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1565
Origin: http://252481.com
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
HTTP/1.1 200 OK
Server: Tengine/2.1.3_400
Date: Sun, 03 Dec 2023 02:37:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE
Content-Encoding: gzip
pre-mpnewyear.uc.cn/iceberg/page/log?domain=252481.com&uc_param_str=dsdnfrpfbivesscpgimibtbmnijblauputogpintnwktprchmt
404 Not Found 0 B URL GET HTTP/2 pre-mpnewyear.uc.cn/iceberg/page/log?domain=252481.com&uc_param_str=dsdnfrpfbivesscpgimibtbmnijblauputogpintnwktprchmt
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.tanx.com
FingerprintF0:2F:16:5B:D1:19:2A:8F:20:E7:A2:C8:F4:4B:97:86:15:8E:E4:34
ValidityFri, 02 Jun 2023 06:02:03 GMT - Wed, 03 Jul 2024 05:56:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iceberg/page/log?domain=252481.com&uc_param_str=dsdnfrpfbivesscpgimibtbmnijblauputogpintnwktprchmt HTTP/1.1
Host: pre-mpnewyear.uc.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://252481.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 03 Dec 2023 02:37:41 GMT
content-type: application/json
server: Tengine
set-cookie: XSRF-TOKEN=b7731635-d265-4237-b8b9-1ae8e1fff628; Path=/; HttpOnly
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-encoding: gzip
eagleeye-traceid: 2107682817015710612818299ec3d9
X-Firefox-Spdy: h2
34.120.231.129
104.18.21.226
163.181.56.248
163.181.49.16
111.63.205.135
103.235.46.191