200 OK 9.0 kB URL User Request GET HTTP/1.1 IP
ASN #139021 West263 International Limited
File type HTML document, Unicode text, UTF-8 text, with very long lines (396), with CRLF line terminators
Hash c2695db461c48c1ec3bf43f634dfab9a
616dd73ba00153ec9dfcccca6290e95762667ecc
cbb810792a3df2908765911384deff3b7675a675213e08e35dad6e02d43755cf
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: bumygr.ilbottom.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: wts/1.7.0
Date: Thu, 18 Apr 2024 07:30:39 GMT
Content-Type: text/html
Last-Modified: Mon, 25 Mar 2024 03:17:52 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"6600ece0-9b66"
Expires: Thu, 18 Apr 2024 08:30:39 GMT
Cache-Control: max-age=3600
TTT: ALL
nocache: 1
REQ: 1
Content-Encoding: gzip
200 OK 9.0 kB URL User Request GET HTTP/1.1 IP
ASN #139021 West263 International Limited
File type HTML document, Unicode text, UTF-8 text, with very long lines (396), with CRLF line terminators
Hash c2695db461c48c1ec3bf43f634dfab9a
616dd73ba00153ec9dfcccca6290e95762667ecc
cbb810792a3df2908765911384deff3b7675a675213e08e35dad6e02d43755cf
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: bumygr.ilbottom.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: wts/1.7.0
Date: Thu, 18 Apr 2024 07:30:40 GMT
Content-Type: text/html
Last-Modified: Mon, 25 Mar 2024 03:17:52 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"6600ece0-9b66"
Expires: Thu, 18 Apr 2024 08:30:40 GMT
Cache-Control: max-age=3600
TTT: ALL
nocache: 1
REQ: 1
Content-Encoding: gzip
sdk.51.la/js-sdk-pro.min.js
200 OK 13 kB URL GET HTTP/1.1 sdk.51.la/js-sdk-pro.min.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://bumygr.ilbottom.top/
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (34110)
Hash 24bb520e9517f2ed3ed987b46aeaf723
846723563d7dd2bff3954f93633b11af0103adc8
d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 12846
Connection: keep-alive
Date: Wed, 17 Apr 2024 02:56:06 GMT
x-oss-request-id: 661F3A46A554993430118686
x-oss-cdn-auth: success
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1713322566
Via: cache15.l2de2[0,0,304-0,H], cache6.l2de2[0,0], ens-cache18.se2[0,0,200-0,H], ens-cache18.se2[1,0]
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:34 GMT
x-oss-hash-crc64ecma: 5143829838470429443
Content-Encoding: gzip
Age: 102871
X-Cache: HIT TCP_MEM_HIT dirn:10:322730086
X-Swift-SaveTime: Wed, 17 Apr 2024 02:56:06 GMT
X-Swift-CacheTime: 1296000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62ca617134254374382312e
expdomain.diymysite.com/Expired/jquery-1.11.3.min.js
200 OK 34 kB URL GET HTTP/1.1 expdomain.diymysite.com/Expired/jquery-1.11.3.min.js
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
Requested by http://bumygr.ilbottom.top/
File type JavaScript source, ASCII text, with very long lines (32097)
Hash 95deb70e6d44b9aff82a9aa853df478e
81f02cae78a2bae2f8d322b48c7031487561b8b2
0cbd13e09ab4714b4410dcf57848ccbc7b88bf38beafa311bc1186e2a9e510fb
GET /Expired/jquery-1.11.3.min.js HTTP/1.1
Host: expdomain.diymysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 09 Mar 2023 03:19:15 GMT
Accept-Ranges: bytes
ETag: "807b2ced3552d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 07:30:37 GMT
Content-Length: 33751
expdomain.diymysite.com/Expired/tips-icon.png
200 OK 11 kB URL GET HTTP/1.1 expdomain.diymysite.com/Expired/tips-icon.png
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
Requested by http://bumygr.ilbottom.top/
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Hash 8dc131426cac6941a0098e5a62d62f7d
eca4bc8c374a95f7c0b1d91e5e393488d380ba60
17ca419dba7dbb4578ae3b91cf47f44f587004ccf070521a4b9add925fa08fb3
GET /Expired/tips-icon.png HTTP/1.1
Host: expdomain.diymysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 09 Mar 2023 03:11:18 GMT
Accept-Ranges: bytes
ETag: "0fdcd03452d91:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 07:30:38 GMT
Content-Length: 11242
expdomain.diymysite.com/Expired/cloudhost-346x200.jpg
200 OK 39 kB URL GET HTTP/1.1 expdomain.diymysite.com/Expired/cloudhost-346x200.jpg
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
Requested by http://bumygr.ilbottom.top/
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 346x200, components 3
Hash 8109ae1da720807170abc469bd971bb8
92562c1bba56864e1a0ddefd9ac4c81d1f03d9ec
16309e571130a0beabcca5dea91f8f368504304054a2d54da81aed7afc0ed3bb
GET /Expired/cloudhost-346x200.jpg HTTP/1.1
Host: expdomain.diymysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 22 Aug 2023 06:38:05 GMT
Accept-Ranges: bytes
ETag: "80849434c3d4d91:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 07:30:38 GMT
Content-Length: 39404
expdomain.diymysite.com/Expired/cloudhost-750x350.jpg
200 OK 67 kB URL GET HTTP/1.1 expdomain.diymysite.com/Expired/cloudhost-750x350.jpg
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
Requested by http://bumygr.ilbottom.top/
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x350, components 3
Hash d40f3ed0f43921025704ab9ea2077cd8
fd087df739a2cba349c6ff2436e2e5ca80040e35
90021e6cf7a226b0bf8b9232f8250dabe2393b38f7510979de37a513eb224efb
GET /Expired/cloudhost-750x350.jpg HTTP/1.1
Host: expdomain.diymysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 22 Aug 2023 07:28:17 GMT
Accept-Ranges: bytes
ETag: "803edf37cad4d91:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 07:30:38 GMT
Content-Length: 67237
collect-v6.51.la/v6/collect?dt=4
403 0 B URL POST HTTP/1.1 collect-v6.51.la/v6/collect?dt=4
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://bumygr.ilbottom.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 402
Origin: http://bumygr.ilbottom.top
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403
Date: Thu, 18 Apr 2024 07:30:39 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=2dbb0c956de736521a785d43f6e2e8f61e7145ae253de577a7706bf631bb825f; Path=/; HttpOnly
acw_tc=ac11000117134254392181452ee6399cb2a98c24a06a9778fa6a8c04de81cb;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://bumygr.ilbottom.top
Access-Control-Allow-Credentials: true
expdomain.diymysite.com/Expired/com.jpg
200 OK 68 kB URL GET HTTP/1.1 expdomain.diymysite.com/Expired/com.jpg
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
Requested by http://bumygr.ilbottom.top/
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 346x200, components 3
Hash e14e54457a7d780a541f09561a7fde3f
7c7379bd00c7d6ca33260ad99b7f895b22c8e17e
dec2967d47845973c6879caaa92765e0973b2c00a714ddcec95c88689310f8e8
GET /Expired/com.jpg HTTP/1.1
Host: expdomain.diymysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 12 Oct 2022 04:56:58 GMT
Accept-Ranges: bytes
ETag: "049a8ef7ddd81:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 07:30:38 GMT
Content-Length: 68520
expdomain.diymysite.com/Expired/sites346x200.jpg
200 OK 34 kB URL GET HTTP/1.1 expdomain.diymysite.com/Expired/sites346x200.jpg
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
Requested by http://bumygr.ilbottom.top/
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 346x200, components 3
Hash 6d5e84aac711bae7059e35427f9a80a8
3770ce8c9dcac7c2f7d76bc601b166fee2359671
0500052aa0c305afbee1062744e88fc23072146d0b0b0da6aeb4a6a8c811d64c
GET /Expired/sites346x200.jpg HTTP/1.1
Host: expdomain.diymysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Thu, 29 Dec 2022 07:38:59 GMT
Accept-Ranges: bytes
ETag: "80abb9d581bd91:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 07:30:38 GMT
Content-Length: 34295
expdomain.diymysite.com/Expired/cloudhost-1080x200.jpg
200 OK 63 kB URL GET HTTP/1.1 expdomain.diymysite.com/Expired/cloudhost-1080x200.jpg
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
Requested by http://bumygr.ilbottom.top/
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1080x200, components 3
Hash 9a4fdbdf3475f62501c1c816c1f14959
78da310b1bc994afcc4e3230993324789f369bbb
a6fc57fd6b8486a132898ac0aa96f0e434d6ae46bf1d50717941676eab74fcf6
GET /Expired/cloudhost-1080x200.jpg HTTP/1.1
Host: expdomain.diymysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 22 Aug 2023 07:40:18 GMT
Accept-Ranges: bytes
ETag: "01d9fe5cbd4d91:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 07:30:38 GMT
Content-Length: 62768
bumygr.ilbottom.top/favicon.ico
200 OK 0 B URL GET HTTP/1.1 bumygr.ilbottom.top/favicon.ico
IP
ASN #139021 West263 International Limited
Requested by http://bumygr.ilbottom.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: bumygr.ilbottom.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Cookie: __vtins__K0V5Y2YAHiVadQcC=%7B%22sid%22%3A%20%22f64a5441-4dae-52fb-82d9-102da2a73f24%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201713427238771%2C%20%22ct%22%3A%201713425438771%7D; __51uvsct__K0V5Y2YAHiVadQcC=1; __51vcke__K0V5Y2YAHiVadQcC=d40e94c5-a6e3-57bd-b488-f705dc400c10; __51vuft__K0V5Y2YAHiVadQcC=1713425438776
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: wts/1.7.0
Date: Thu, 18 Apr 2024 07:30:42 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Thu, 09 Mar 2023 03:25:26 GMT
Connection: close
ETag: "640951a6-0"
Expires: Thu, 18 Apr 2024 08:30:42 GMT
Cache-Control: max-age=3600
TTT: ALL
nocache: 1
REQ: 1
Accept-Ranges: bytes
hm.baidu.com/hm.js?33bc6c472692b3b9b68528766bad6f3c
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?33bc6c472692b3b9b68528766bad6f3c
IP
Requested by http://bumygr.ilbottom.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type JavaScript source, ASCII text, with very long lines (622)
Hash 52afcd90b4ee5eb8c4a30230c9101003
6799f188dc5d08194d3a74bb087c36ae1e872d14
143057b6d5e6b1a69da2968ba1ffb5c85b0f37e4701337db4f17a6d0bfa11f76
GET /hm.js?33bc6c472692b3b9b68528766bad6f3c HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11260
Content-Type: application/javascript
Date: Thu, 18 Apr 2024 07:30:39 GMT
Etag: 4b5a27277cc7594484a4f28908147eaf
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=CB6CDD576180D7D7; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1376946547&si=33bc6c472692b3b9b68528766bad6f3c&v=1.3.0&lv=1&sn=12865&r=0&ww=1280&u=http%3A%2F%2Fbumygr.ilbottom.top%2F&tt=%E5%9F%9F%E5%90%8D%E5%88%B0%E6%9C%9F-%E5%9F%9F%E5%90%8D%E7%BB%AD%E8%B4%B9%E6%8F%90%E9%86%92
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1376946547&si=33bc6c472692b3b9b68528766bad6f3c&v=1.3.0&lv=1&sn=12865&r=0&ww=1280&u=http%3A%2F%2Fbumygr.ilbottom.top%2F&tt=%E5%9F%9F%E5%90%8D%E5%88%B0%E6%9C%9F-%E5%9F%9F%E5%90%8D%E7%BB%AD%E8%B4%B9%E6%8F%90%E9%86%92
IP
Requested by http://bumygr.ilbottom.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1376946547&si=33bc6c472692b3b9b68528766bad6f3c&v=1.3.0&lv=1&sn=12865&r=0&ww=1280&u=http%3A%2F%2Fbumygr.ilbottom.top%2F&tt=%E5%9F%9F%E5%90%8D%E5%88%B0%E6%9C%9F-%E5%9F%9F%E5%90%8D%E7%BB%AD%E8%B4%B9%E6%8F%90%E9%86%92 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bumygr.ilbottom.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 18 Apr 2024 07:30:40 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=4F8C305F72552980; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
103.120.80.158
47.246.44.239
211.149.163.201