54.156.158.84200 OK 573 B URL User Request GET HTTP/1.1 IP 54.156.158.84:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (341), with CRLF line terminators
Hash 2530f06bce587d6e76e2ba8a0bb8ba4c
31897b229b5e9023cbd919cb3c8095aff8f38b8b
2f208f1c52d92ee32e82f8bde79d700072578244f84425ab1a47763fd1a3651a
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:13 GMT
Content-Type: text/html
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"648d4c8c-390"
Content-Encoding: gzip
54.156.158.84200 OK 573 B URL User Request GET HTTP/1.1 IP 54.156.158.84:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (341), with CRLF line terminators
Hash 2530f06bce587d6e76e2ba8a0bb8ba4c
31897b229b5e9023cbd919cb3c8095aff8f38b8b
2f208f1c52d92ee32e82f8bde79d700072578244f84425ab1a47763fd1a3651a
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:14 GMT
Content-Type: text/html
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"648d4c8c-390"
Content-Encoding: gzip
maximumaffirm.top/static/css/app.cf0e39aab4f35197c765f9124e761b51.css
54.156.158.84200 OK 8.1 kB URL GET HTTP/1.1 maximumaffirm.top/static/css/app.cf0e39aab4f35197c765f9124e761b51.css
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type ASCII text, with very long lines (8077), with no line terminators
Hash bb922d587caeec89b6ba9cb853bacb67
03e0c25feb3e12097d5aac550525b6f5aeaf05fa
dcc9fdc4ff4ed762c1a708cdca9d4e8d1ad94856fae572f4effb3b8c3961e801
GET /static/css/app.cf0e39aab4f35197c765f9124e761b51.css HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:14 GMT
Content-Type: text/css
Content-Length: 8077
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Connection: keep-alive
ETag: "648d4c8c-1f8d"
Accept-Ranges: bytes
maximumaffirm.top/static/js/manifest.ec71b4bd01cda44275b3.js
54.156.158.84200 OK 1.4 kB URL GET HTTP/1.1 maximumaffirm.top/static/js/manifest.ec71b4bd01cda44275b3.js
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type ASCII text, with very long lines (1428), with no line terminators
Hash 9652cd459742a0c1073a7e1a79a9d15f
cebb2be90c58e1de6f28cfeb57cd76957f4527c8
bafaa4c99eefebc2d9e96d57d9fa1d328707f7c4385181c66b7847c04152bf0c
GET /static/js/manifest.ec71b4bd01cda44275b3.js HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:14 GMT
Content-Type: application/javascript
Content-Length: 1428
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Connection: keep-alive
ETag: "648d4c8c-594"
Accept-Ranges: bytes
maximumaffirm.top/static/js/app.286e52311fec40b5848b.js
54.156.158.84200 OK 39 kB URL GET HTTP/1.1 maximumaffirm.top/static/js/app.286e52311fec40b5848b.js
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type Unicode text, UTF-8 text, with very long lines (37346), with no line terminators
Hash 76d2c103b5d53fd3ef735734017e3297
c50d8856a54640b7f69215bce93c61e39dba25b9
bc602b5786d6401b7ab098b1eba98a30b9f6089f5933287f5b08fc15b9845fa5
GET /static/js/app.286e52311fec40b5848b.js HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:14 GMT
Content-Type: application/javascript
Content-Length: 39362
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Connection: keep-alive
ETag: "648d4c8c-99c2"
Accept-Ranges: bytes
maximumaffirm.top/static/js/vendor.3055c5de54d09a441f23.js
54.156.158.84200 OK 149 kB URL GET HTTP/1.1 maximumaffirm.top/static/js/vendor.3055c5de54d09a441f23.js
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type ASCII text, with very long lines (34975)
Size 149 kB (149283 bytes)
Hash 1f1b574993608fde0e0cee25e6ea7ba4
5e097456a058b2fd709eed7d7eba2551aa928fee
0243f7f94209bc07132dddfb5ae163329ee36211326fe6257ba1f5fef1c43c44
GET /static/js/vendor.3055c5de54d09a441f23.js HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:14 GMT
Content-Type: application/javascript
Content-Length: 149283
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Connection: keep-alive
ETag: "648d4c8c-24723"
Accept-Ranges: bytes
maximumaffirm.top/favicon.ico
54.156.158.84404 Not Found 123 B URL GET HTTP/1.1 maximumaffirm.top/favicon.ico
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /favicon.ico HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
pv.sohu.com/cityjson?ie=utf-8
211.152.137.32200 OK 72 B URL GET HTTP/1.1 pv.sohu.com/cityjson?ie=utf-8
IP 211.152.137.32:443
Requested by http://maximumaffirm.top/
Certificate IssuerDigiCert Inc
Subjectwww.sohu.com
Fingerprint1B:C0:0F:9F:B3:3C:54:59:EB:82:01:CD:5D:11:B9:B4:E6:7E:61:AD
ValidityThu, 10 Aug 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with no line terminators
Hash a602ac9d03cffedc03fa841c9a12df5a
e42f39093e29f5c6c7aad8a973d69035e860659e
f5d09365810dd11ef1204b35bfede3158a07d5592a9c9cfa449dd534f9964aa9
GET /cityjson?ie=utf-8 HTTP/1.1
Host: pv.sohu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 72
X-NWS-LOG-UUID: 13021420436373228493
Connection: keep-alive
Server: OverSea_E0
Date: Mon, 27 Nov 2023 16:12:16 GMT
X-Cache-Lookup: Return Directly
Content-Type: application/json;charset=utf-8
maximumaffirm.top/static/js/1.3b3ec2beeb6cc4dd458a.js
54.156.158.84200 OK 1.4 kB URL GET HTTP/1.1 maximumaffirm.top/static/js/1.3b3ec2beeb6cc4dd458a.js
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type Unicode text, UTF-8 text, with very long lines (1347), with no line terminators
Hash 9866d9e04e56efe4a35ed84bb7dc400f
19de92abb35a3638216a6285eec522662cf3028b
ae75c290b9fdbfd80737e93768b6dc42b2a0991c0d4795c98db005de747b85eb
GET /static/js/1.3b3ec2beeb6cc4dd458a.js HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:16 GMT
Content-Type: application/javascript
Content-Length: 1363
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Connection: keep-alive
ETag: "648d4c8c-553"
Accept-Ranges: bytes
maximumaffirm.top/domainInfoAjax.php?domain=maximumaffirm.top
54.156.158.84200 OK 135 B URL GET HTTP/1.1 maximumaffirm.top/domainInfoAjax.php?domain=maximumaffirm.top
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type JSON data\012- , ASCII text, with no line terminators
Hash 66d4b7242dcbeb17bdc8b2ecc39f15da
9572fcf54a25f8f83ede3761e5a06934e544b761
583046f11091c4ca00dc7c7b69a8d77babddf5a5cab2d6372fa41a118a48feec
GET /domainInfoAjax.php?domain=maximumaffirm.top HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
maximumaffirm.top/static/img/wechat.f8677dc.png
54.156.158.84200 OK 27 kB URL GET HTTP/1.1 maximumaffirm.top/static/img/wechat.f8677dc.png
IP 54.156.158.84:80
Requested by http://maximumaffirm.top/
File type PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash f8677dc435a2792f31bf38fabdb39a4e
7ef89b6251e6135dbe2743a8ce54cfeb17819b22
15712feeb031247b94188416d181f4b6f26fcbf9fe3f19c869a7b459fffa652b
GET /static/img/wechat.f8677dc.png HTTP/1.1
Host: maximumaffirm.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 27 Nov 2023 16:12:17 GMT
Content-Type: image/png
Content-Length: 26575
Last-Modified: Sat, 17 Jun 2023 06:02:52 GMT
Connection: keep-alive
ETag: "648d4c8c-67cf"
Accept-Ranges: bytes
hm.baidu.com/hm.js?bd3e7cf142c59905cd30abcec611f180
103.235.46.191200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?bd3e7cf142c59905cd30abcec611f180
IP 103.235.46.191:443
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://maximumaffirm.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?bd3e7cf142c59905cd30abcec611f180 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Mon, 27 Nov 2023 16:12:18 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
s.now.cn/assets/expires/25.png
47.246.44.205301 Moved Permanently 248 B URL GET HTTP/2 s.now.cn/assets/expires/25.png
IP 47.246.44.205:443
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 96ec23de1770babf20d0d8acaf7d8b47
2f8e2b405cbafe509af0b2b5b10dcd87b71d6b7f
46a8080d8ef8b7e43ec77b41eaa47d7ca5611cefd7f9f31358079f36d3f16bf8
GET /assets/expires/25.png HTTP/1.1
Host: s.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: Tengine
content-type: text/html; charset=iso-8859-1
content-length: 248
location: https://www.now.cn/assets/expires/25.png
date: Mon, 27 Nov 2023 16:12:18 GMT
set-cookie: acw_tc=2ff62c9817011015377372948ec0e7832faab5ce58a5239cc7e399390b;path=/;HttpOnly;Max-Age=1800
ali-swift-global-savetime: 1701101538
via: cache2.l2de2[862,862,301-0,M], cache23.l2de2[865,0], cache5.se1[1082,1081,301-0,M], cache4.se1[1083,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 27 Nov 2023 16:12:18 GMT
x-swift-cachetime: 0
access-control-allow-methods: *
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62c9817011015377372948e
X-Firefox-Spdy: h2
s.now.cn/assets/expires/8.png
47.246.44.205301 Moved Permanently 247 B URL GET HTTP/2 s.now.cn/assets/expires/8.png
IP 47.246.44.205:443
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2fceadec732ea8e914ecb7350019bc12
6dec02aa92a35b42004d3d9e0491dc76e1d6b622
be808cbf726b76afd6fc4088597cfcd25b46ea68ed1632844357ff0b4222bad5
GET /assets/expires/8.png HTTP/1.1
Host: s.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: Tengine
content-type: text/html; charset=iso-8859-1
content-length: 247
location: https://www.now.cn/assets/expires/8.png
date: Mon, 27 Nov 2023 16:12:18 GMT
set-cookie: acw_tc=2ff62c9817011015378873293e80aee73220f6521e656f8dba6a12c75a;path=/;HttpOnly;Max-Age=1800
ali-swift-global-savetime: 1701101538
via: cache5.l2de2[898,898,301-0,M], cache9.l2de2[899,0], cache7.se1[960,960,301-0,M], cache4.se1[962,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 27 Nov 2023 16:12:18 GMT
x-swift-cachetime: 0
access-control-allow-methods: *
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62c9817011015378873293e
X-Firefox-Spdy: h2
s.now.cn/assets/expires/15.png
47.246.44.205301 Moved Permanently 248 B URL GET HTTP/2 s.now.cn/assets/expires/15.png
IP 47.246.44.205:443
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 014515ddef5d93401cf6b50593c6f10f
27875068da650dd4320c5a7cf8e75c3853e94727
64ca557c3aa46c89a3fcf9407604abc1cea69e4ee38f06c5a984bc256afa42f8
GET /assets/expires/15.png HTTP/1.1
Host: s.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: Tengine
content-type: text/html; charset=iso-8859-1
content-length: 248
location: https://www.now.cn/assets/expires/15.png
date: Mon, 27 Nov 2023 16:12:19 GMT
set-cookie: acw_tc=2ff62c9817011015378963320e1e532f1081a36d28f6b4fef2c73bdda9;path=/;HttpOnly;Max-Age=1800
ali-swift-global-savetime: 1701101539
via: cache12.l2de2[1525,1525,301-0,M], cache1.l2de2[1526,0], cache1.se1[1569,1568,301-0,M], cache4.se1[1571,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 27 Nov 2023 16:12:19 GMT
x-swift-cachetime: 0
access-control-allow-methods: *
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62c9817011015378963320e
X-Firefox-Spdy: h2
s.now.cn/assets/expires/22.png
47.246.44.205301 Moved Permanently 248 B URL GET HTTP/2 s.now.cn/assets/expires/22.png
IP 47.246.44.205:443
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 35e27f3e76c7c3422349d910a7ebb42e
c4352ab46a2b8b70964f1ad51a7d9a6314cc5e11
73f7652ae3299ce60b63357ecee2d5c3759e5515bf4b7ccf1021c8bdd0820c72
GET /assets/expires/22.png HTTP/1.1
Host: s.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: Tengine
content-type: text/html; charset=iso-8859-1
content-length: 248
location: https://www.now.cn/assets/expires/22.png
date: Mon, 27 Nov 2023 16:12:19 GMT
set-cookie: acw_tc=2ff62c9817011015377412964ec722000e820a794bf9da10082885b694;path=/;HttpOnly;Max-Age=1800
ali-swift-global-savetime: 1701101539
via: cache14.l2de2[1533,1532,301-0,M], cache16.l2de2[1535,0], cache3.se1[1737,1737,301-0,M], cache4.se1[1739,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 27 Nov 2023 16:12:19 GMT
x-swift-cachetime: 0
access-control-allow-headers: *
access-control-allow-methods: *
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62c9817011015377412964e
X-Firefox-Spdy: h2
s.now.cn/assets/expires/6.png
47.246.44.205301 Moved Permanently 247 B URL GET HTTP/2 s.now.cn/assets/expires/6.png
IP 47.246.44.205:443
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3bd6a0933e3ffa8fdc2ca00d6fd52bc8
3a44c43abb1339b7212fb6ce76a614c75b1deab4
7e898d2157a17d6bd9c4ace51d60fadd76cdfeec403da82f26f626253332380a
GET /assets/expires/6.png HTTP/1.1
Host: s.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://maximumaffirm.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: Tengine
content-type: text/html; charset=iso-8859-1
content-length: 247
location: https://www.now.cn/assets/expires/6.png
date: Mon, 27 Nov 2023 16:12:20 GMT
set-cookie: acw_tc=2ff62c9817011015377202908eab957691339f8c443fafc0a313be56c5;path=/;HttpOnly;Max-Age=1800
ali-swift-global-savetime: 1701101540
via: cache9.l2de2[2195,2194,301-0,M], cache15.l2de2[2196,0], cache1.se1[2411,2411,301-0,M], cache4.se1[2415,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 27 Nov 2023 16:12:20 GMT
x-swift-cachetime: 0
access-control-allow-methods: *
access-control-allow-headers: *
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62c9817011015377202908e
X-Firefox-Spdy: h2
www.now.cn/assets/expires/25.png
120.79.170.125200 OK 26 kB URL GET HTTP/1.1 www.now.cn/assets/expires/25.png
IP 120.79.170.125:443
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type PNG image data, 1200 x 140, 8-bit colormap, non-interlaced\012- data
Hash 9de34f0505c13b7c97300cd4e3988b03
f72d7e172794e52713c7b7b76faee53bb8e823eb
6c452442e99d12c3c1267f84164b52a7d61a08c9fc3afaaa1cf982f457937750
GET /assets/expires/25.png HTTP/1.1
Host: www.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://maximumaffirm.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Nov 2023 16:12:20 GMT
Content-Type: image/png
Content-Length: 26274
Connection: keep-alive
Set-Cookie: acw_tc=0bca38ca17011015401314812e9d0cd602fcfe9ba746402f1273ab260c9034;path=/;HttpOnly;Max-Age=1800
Server: Apache
Last-Modified: Tue, 21 Dec 2021 03:43:41 GMT
ETag: "66a2-5d39fcfb41ac4"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
www.now.cn/assets/expires/6.png
120.79.170.125200 OK 25 kB URL GET HTTP/1.1 www.now.cn/assets/expires/6.png
IP 120.79.170.125:443
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type PNG image data, 1200 x 140, 8-bit colormap, non-interlaced\012- data
Hash fe7d7554d0096dd47b7bd601d7eb6aee
570eb598ccc25ce2cb411a37114aec301c49dd1f
16bcc4f43903e38a4fb493ed3b08ff4ebf6eb35418029e740fe4d69841566c7b
GET /assets/expires/6.png HTTP/1.1
Host: www.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://maximumaffirm.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Nov 2023 16:12:20 GMT
Content-Type: image/png
Content-Length: 25182
Connection: keep-alive
Set-Cookie: acw_tc=0bca38ca17011015407174816e9d0c9deb50694d57760cc79194307fe8d432;path=/;HttpOnly;Max-Age=1800
Server: Apache
Last-Modified: Tue, 21 Dec 2021 03:43:41 GMT
ETag: "625e-5d39fcfb41eac"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
www.now.cn/assets/expires/15.png
120.79.170.125200 OK 55 kB URL GET HTTP/1.1 www.now.cn/assets/expires/15.png
IP 120.79.170.125:443
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type PNG image data, 1200 x 140, 8-bit colormap, non-interlaced\012- data
Hash 55e49e56bf7edae9432d8ae26fd38bda
d834e342454da0cd498a3bc744ceeed3134a9423
2f8882fa03f46b0aff8df944f1a1bd92ad025164496900e7ca8c83e15dff9a8c
GET /assets/expires/15.png HTTP/1.1
Host: www.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://maximumaffirm.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Nov 2023 16:12:20 GMT
Content-Type: image/png
Content-Length: 54756
Connection: keep-alive
Set-Cookie: acw_tc=0bca38ca17011015404103841e9cf4e05137f37bb573f0f3ccc8022e974d7c;path=/;HttpOnly;Max-Age=1800
Server: Apache
Last-Modified: Tue, 21 Dec 2021 03:43:41 GMT
ETag: "d5e4-5d39fcfb412f4"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
www.now.cn/assets/expires/22.png
120.79.170.125200 OK 100 kB URL GET HTTP/1.1 www.now.cn/assets/expires/22.png
IP 120.79.170.125:443
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type PNG image data, 1200 x 140, 8-bit/color RGBA, non-interlaced\012- data
Size 100 kB (100151 bytes)
Hash b3a3a1d5bb4443d133da95ed4d3eee0d
d9965d3e71216d1b11468c991de6e5e275061cd5
f8dc25ce127fe6dd3a5c5d5e0a466fa0d9d6cb96f134947755d662f080df132d
GET /assets/expires/22.png HTTP/1.1
Host: www.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://maximumaffirm.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Nov 2023 16:12:20 GMT
Content-Type: image/png
Content-Length: 100151
Connection: keep-alive
Set-Cookie: acw_tc=0bca38ca17011015404583439e9ce965e44b08115227124f85fbe7ca372dca;path=/;HttpOnly;Max-Age=1800
Server: Apache
Last-Modified: Fri, 10 Nov 2023 07:56:54 GMT
ETag: "18737-609c7a9efb1b5"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
www.now.cn/assets/expires/8.png
120.79.170.125200 OK 41 kB URL GET HTTP/1.1 www.now.cn/assets/expires/8.png
IP 120.79.170.125:443
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://maximumaffirm.top/
Certificate IssuerSectigo Limited
Subject*.now.cn
Fingerprint47:E6:6C:89:04:AA:43:07:F0:75:93:F7:16:85:84:1D:2B:9C:0D:2F
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type PNG image data, 1200 x 140, 8-bit colormap, non-interlaced\012- data
Hash 24dc1b24638711ae01ec90d7c83c5d94
d7ab9e9130fde16b5b683fb05dae591901c193d0
bb607a05ad695b90c22fde1d33a2e79e1c991f50ff836c041eff7b2b6976fdc9
GET /assets/expires/8.png HTTP/1.1
Host: www.now.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://maximumaffirm.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Nov 2023 16:12:21 GMT
Content-Type: image/png
Content-Length: 40960
Connection: keep-alive
Set-Cookie: acw_tc=0bca38ca17011015411754980e9d04e375236d1046305abcc6c628e5a0c3e3;path=/;HttpOnly;Max-Age=1800
Server: Apache
Last-Modified: Tue, 21 Dec 2021 03:43:41 GMT
ETag: "a000-5d39fcfb42294"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *