| cloud.aaalamps.com/click?key=fe8f1c4caab5995cf5a8&visitor_id=810158853147598848&cost=0.003000&zoneid=6730761&campaignid=8015787&device=other&browser=chrome&os=android&osversion=unspecified_android&country=CN&language=zh&isp=chinaunicomipnetwork&user_activity=medium&browserversion=122®ion=6&useragent=Mozilla/5.0(Linux;Android10;K)AppleWebKit/537.36(KHTML,likeGecko)Chrome/122.0.0.0MobileSafari/537.36&connection.type=oc12&carrier=china_unicom-cn&countryname=China&adformat=onclick&banner=20557770&zone_type={zone_type}&survey_exit_type=other_survey_type&subzone_id=3281194 |  188.114.97.1 | 307 Temporary Redirect | 0 B |
URL User Request GET HTTP/2cloud.aaalamps.com/click?key=fe8f1c4caab5995cf5a8&visitor_id=810158853147598848&cost=0.003000&zoneid=6730761&campaignid=8015787&device=other&browser=chrome&os=android&osversion=unspecified_android&country=CN&language=zh&isp=chinaunicomipnetwork&user_activity=medium&browserversion=122®ion=6&useragent=Mozilla/5.0(Linux;Android10;K)AppleWebKit/537.36(KHTML,likeGecko)Chrome/122.0.0.0MobileSafari/537.36&connection.type=oc12&carrier=china_unicom-cn&countryname=China&adformat=onclick&banner=20557770&zone_type={zone_type}&survey_exit_type=other_survey_type&subzone_id=3281194 IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectaaalamps.com Fingerprint5D:2A:D4:AA:40:22:26:68:03:0A:B2:F3:3F:FA:61:A7:72:17:DA:C9 ValidityMon, 15 Apr 2024 08:41:01 GMT - Sun, 14 Jul 2024 08:41:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?key=fe8f1c4caab5995cf5a8&visitor_id=810158853147598848&cost=0.003000&zoneid=6730761&campaignid=8015787&device=other&browser=chrome&os=android&osversion=unspecified_android&country=CN&language=zh&isp=chinaunicomipnetwork&user_activity=medium&browserversion=122®ion=6&useragent=Mozilla/5.0(Linux;Android10;K)AppleWebKit/537.36(KHTML,likeGecko)Chrome/122.0.0.0MobileSafari/537.36&connection.type=oc12&carrier=china_unicom-cn&countryname=China&adformat=onclick&banner=20557770&zone_type={zone_type}&survey_exit_type=other_survey_type&subzone_id=3281194 HTTP/1.1
Host: cloud.aaalamps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sat, 04 May 2024 07:03:31 GMT
content-length: 0
location: http://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg
set-cookie: uclick=kbjZnFdbPtI11ealamCYsrdTbcJ365hlRvzgugNTtLi3eySlmG0ASaA3B8RuMpb3EW2/66A=; Max-Age=31536000; SameSite=Lax
bcid=coqtrgv9pkqc7381b3rg; Max-Age=31536000; SameSite=Lax
cid=coqtrgv9pkqc7381b3rg; Max-Age=31536000; SameSite=Lax
x-request-id: 35bc1e3e-c8ce-4cbc-a0da-76bb1fed1335
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bFCQoz3VnaA7siI7ZgrKDWsfAzlwSMfOyJzDe3VY0O5fsZipq3bUiNsQJAsEBaGglRucmCdfw6nyAaA2LnR7OoWpysgLF9UjF%2FMNosobgUUiCV0oEfN3gwDyj2y330yfFHAC7go%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e6a1a0eb9156a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.lzygamb.top/ |  134.122.132.8 | | 1.3 kB |
IP134.122.132.8:0 ASN#64050 BGPNET Global ASN
File typeHTML document, ASCII text, with very long lines (3329), with no line terminators Hashcb4bb971d0c2a5bb395d4664301777d6 f726430904df5a432b949a84ea356b2b783db5d9 0809ff9e113c7507b3ef622c93736cf0ea64d9bb66c7105d1ecbb325413dd03d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.lzygamb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 07:03:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| sdk.51.la/js-sdk-pro.min.js |  47.246.44.238 | 200 OK | 13 kB |
URL GET HTTP/1.1sdk.51.la/js-sdk-pro.min.js IP47.246.44.238:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (34110) Hash24bb520e9517f2ed3ed987b46aeaf723 846723563d7dd2bff3954f93633b11af0103adc8 d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 12846
Connection: keep-alive
Date: Sun, 21 Apr 2024 10:11:16 GMT
x-oss-request-id: 6624E644CC8CEC34394ACD92
x-oss-cdn-auth: success
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1713694276
Via: cache15.l2de2[0,0,304-0,H], cache4.l2de2[1,0], ens-cache18.se2[0,0,200-0,H], ens-cache4.se2[1,0]
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:34 GMT
x-oss-hash-crc64ecma: 5143829838470429443
Content-Encoding: gzip
Age: 1111936
X-Cache: HIT TCP_MEM_HIT dirn:11:314957921
X-Swift-SaveTime: Thu, 02 May 2024 02:56:26 GMT
X-Swift-CacheTime: 371690
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9817148062120573499e
|
|
| web.cdn.openinstall.io/openinstall.js | 43.152.140.143 | 200 OK | 17 kB |
URL GET HTTP/2web.cdn.openinstall.io/openinstall.js IP43.152.140.143:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerDigiCert Inc Subject*.cdn.openinstall.io FingerprintA8:1F:A2:F5:B6:BC:85:4E:71:E5:0F:92:A3:49:83:5C:39:5A:FE:E4 ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (47257), with no line terminators Hash3e27b22e91b4c1f72a3ddb9073eacca6 0838aa98ac6df1e3a009fa83b5a0f82ca1b59e37 f7028becf6fbf4219ab85e5765c7be34bdc81bd8fc1874ed563a9b8ed03d97c6
GET /openinstall.js HTTP/1.1
Host: web.cdn.openinstall.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 26 Apr 2024 10:14:55 GMT
content-encoding: gzip
etag: "3e27b22e91b4c1f72a3ddb9073eacca6"
content-type: application/javascript
date: Sat, 04 May 2024 02:03:09 GMT
server: tencent-cos
x-cos-hash-crc64ecma: 16352518748770619748
x-cos-request-id: NjYzNTk3NWRfZjFhYzE0MGJfOTM3ZV8zMTY0OTNh
content-length: 16985
accept-ranges: bytes
x-nws-log-uuid: 18005900230577585710
x-cache-lookup: Cache Hit
cache-control: max-age=7200
X-Firefox-Spdy: h2
|
|
| s4res.nicelift.cn/images/loading.bnc | 188.114.97.1 | 200 OK | 7.1 kB |
URL GET HTTP/3s4res.nicelift.cn/images/loading.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeGIF image data, version 89a, 48 x 48 Hash5333bd2c7a6602ad2fd74c349cf162af 2f596ce6cbf57fa27f58b986bcc8988193afc6eb 4995210a5a9f559400e0356a3c7f127b607c45be595da22dca6d2f93f3f2cbc8
GET /images/loading.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:33 GMT
content-type: application/octet-stream
content-length: 7050
last-modified: Thu, 28 Dec 2023 13:07:12 GMT
etag: "658d7300-1b8a"
expires: Sat, 01 Jun 2024 21:44:33 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 307611
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8P1S6k1ZgVYAfsBB8MN5bh6O7xAVZc%2FR7BR6QByttmK55%2BaDkpDKCeL1ZRAyryKm97Ak%2B264yvG08UsxGRa%2FHcUCkGRrW6XWd%2B8xFrJe7YPksmebhfl%2F2ekicOVUhp3CiLwz5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1afccdd569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/favicon.ico | 188.114.97.1 | 200 OK | 0 B |
URL GET HTTP/3s4res.nicelift.cn/favicon.ico IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:33 GMT
content-type: image/x-icon
content-length: 0
last-modified: Thu, 28 Dec 2023 10:35:42 GMT
etag: "658d4f7e-0"
expires: Tue, 09 Apr 2024 21:43:50 GMT
cache-control: max-age=604800
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 189080
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Ft%2FifkgKhmhQwTVfMe0DFVtLmhnIeD77y%2BvxadIWJ5iuF1aKluZH1SWkCm0M%2BIPB6dHbTnbViGACfbiHB9kb%2FnOV1RasediQHR013Uvvmj%2B8g1uT4OUoproysoq7l4EBsBAsFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1b08d83569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/logo192.bnc | 188.114.97.1 | 200 OK | 5.3 kB |
URL GET HTTP/3s4res.nicelift.cn/logo192.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typePNG image data, 192 x 192, 8-bit colormap, non-interlaced Hash33dbdd0177549353eeeb785d02c294af 7f4f2d68782a7fafceda84554ecab9b489877500 c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00
GET /logo192.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:33 GMT
content-type: application/octet-stream
content-length: 5347
last-modified: Tue, 05 Mar 2024 13:18:32 GMT
etag: "65e71ba8-14e3"
expires: Sat, 01 Jun 2024 19:10:54 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 270782
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2BXRhUsL1FBxJCKJgGdsagskalZRVCXnkhPaerh1SWWsei6ep7JukQAGq8CgtmSt5JxcUQPuQiIBeq9kHvTORD7hPtM2kLh1FFyGfMip2LH7pbdA83yRnjzcJQxEKsW6%2BahYqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1b08d81569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| zerossl.ocsp.sectigo.com/ |  104.18.38.233 | | 728 B |
URL zerossl.ocsp.sectigo.com/ IP104.18.38.233:0
Hash6eb4a74abafbba83c61b39d52f4416f0 cd1785d9e7e82a889327337ef2bfc5bc51ecb63d 2c73859f7e70b73c6c14ad1190356c4eeed65135f04fa7ba8528231988eafb0d
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 07:03:34 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Tue, 30 Apr 2024 20:01:16 GMT
Expires: Tue, 07 May 2024 20:01:15 GMT
Etag: "cd1785d9e7e82a889327337ef2bfc5bc51ecb63d"
Cache-Control: max-age=305260,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 87e6a1b9a8387130-OSL
|
|
| s4res.nicelift.cn/static/media/qr_bg.cd50cff3233698b6b996.bnc | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3s4res.nicelift.cn/static/media/qr_bg.cd50cff3233698b6b996.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typePNG image data, 664 x 860, 8-bit/color RGBA, non-interlaced Hashae0b6a57c2c5d495273ebe7dbdb2d436 b08b08c75fd14948b28d7da104e4e4169e60befb 2e2c1ba8ea897c59c725d97b0e461ded5e27d19b4b998c0e6d1e6fc5ba809f08
GET /static/media/qr_bg.cd50cff3233698b6b996.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 19111
last-modified: Mon, 01 Apr 2024 07:40:46 GMT
etag: "660a64fe-4aa7"
expires: Sat, 01 Jun 2024 17:26:48 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 270584
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f4Q8fHunLJvxFnNSvAF6YBy4tEN5N%2FcdAsgAKDEnG6A0%2FJMt1C02095TdTyy3fGIeB4hHl0%2Fz5o%2FLKBt68cdqS8viCY3qNUqdijxjmBGkoB4XurZkiRXZ1I%2BUfoyIVpgbg0Ovw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1be58c2569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/images/kefu.bnc | 188.114.97.1 | 200 OK | 115 kB |
URL GET HTTP/3s4res.nicelift.cn/images/kefu.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Size115 kB (114851 bytes) Hashace69ea60b07d4267b1aa24a5303416b d57661932652c01a85e5b4dadde41abe9d1dda08 e16075a3a44ba6567951022067724f6b1264192de5d90df4f53575e55b7ad507
GET /images/kefu.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 114851
last-modified: Thu, 28 Dec 2023 13:07:09 GMT
etag: "658d72fd-1c0a3"
expires: Mon, 01 Jul 2024 15:01:57 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 144098
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MYoFl520lyxtZrJWYPbVboBMHZZe62fyj64idO4ic1Y3q9KtTMON18Xf0UN4Uu4JcbRtoxL6E4Ns0YBFS5H%2F2E233nBbtr%2FoVgjP%2BnX4ggMWa%2Bh7a6CB0XT08mIb52byuf%2BxxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1be68d2569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/static/js/main.613bd658.js | 188.114.97.1 | 200 OK | 226 kB |
URL GET HTTP/2s4res.nicelift.cn/static/js/main.613bd658.js IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJavaScript source, ASCII text, with very long lines (65465) Size226 kB (226088 bytes) Hash54ae468f7c92534a04d6c4d204ae97b8 c07b264332cd97a4b34f6c0a923d44650f5d5dea b1a99b55b2fad6e24f489d47882ad7e1e2abc6e76e9e9d59c798ed91ce61e7f3
GET /static/js/main.613bd658.js HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:03:32 GMT
content-type: application/javascript
last-modified: Wed, 10 Apr 2024 09:52:42 GMT
etag: W/"6616616a-87e68"
expires: Sun, 09 Jun 2024 09:53:14 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 309287
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zh5BGkYYQohJhQCJhQy0YEyDehFryPwtgWGkXLMJaBVG4WPithr4Gs0j4xKkmy%2BD1o%2FHJJp8IVeaX%2Bco27NJhefYWyfy8jEAAq%2FthpysG0mQrffo6PiqoTW9law5n6NeiX0I3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1ab8afab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| s4res.nicelift.cn/upload_imgs/28cee580bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 256 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/28cee580bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 710x1064, components 3 Size256 kB (256087 bytes) Hash1b4669ef2462dd2f9c72b89ba683ef2f dfdc20e1b23f5f2da328c5698c53b25dddc67eef d37b6de5e82583b150e472ea844c960230d3a7aec73ee43ea005e4c9ce6a4c9b
GET /upload_imgs/28cee580bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 256087
last-modified: Tue, 30 Jan 2024 05:19:36 GMT
etag: "65b886e8-3e857"
expires: Sat, 01 Jun 2024 19:10:11 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 144381
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uAMAdGEw7pedjESgorrDNsnv%2BklHbGPPDpEdc%2FIJxLju4uJWBTM%2B0tYvmwYSTbQobIDT%2F4gHoTRAGB%2BmsnqKRoLuX6TBzDUltXkxaUtlZkD9pCYRSvJUQvQtz%2BnVrv1Bx%2FZppA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1be68d7569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sdk.51.la/event/js-sdk-event.min.js?u=null | 47.246.44.238 | 200 OK | 21 kB |
URL GET HTTP/1.1sdk.51.la/event/js-sdk-event.min.js?u=null IP47.246.44.238:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65308) Hash5b2d813e4bfc861988a078082199b9de aa0be99256f9bb6f12c1e47838e6f822714a380c 927638eed00ada53b754ddd8c200a30ed317d3606f5219d553b2c84eaf992041
GET /event/js-sdk-event.min.js?u=null HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.lzygamb.top
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 21348
Connection: keep-alive
Date: Sun, 28 Apr 2024 19:01:41 GMT
x-oss-request-id: 662E9D152A7519353725F018
x-oss-cdn-auth: success
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: Wy2BPkv8hhmIoHgIIZm53g==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1714330902
Via: cache23.l2de2[0,0,304-0,H], cache14.l2de2[1,0], ens-cache7.se2[0,0,200-0,H], ens-cache6.se2[0,0]
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:58 GMT
x-oss-hash-crc64ecma: 12997830976545422151
Content-Encoding: gzip
Age: 475313
X-Cache: HIT TCP_MEM_HIT dirn:11:261339121
X-Swift-SaveTime: Mon, 29 Apr 2024 00:22:19 GMT
X-Swift-CacheTime: 1276763
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9a17148062154378254e
|
|
| s4res.nicelift.cn/upload_imgs/4764a390bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 153 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/4764a390bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 960x540, components 3 Size153 kB (153227 bytes) Hash5f51002e02ca129278d42f9b5a9f10a8 8707e7cfa4884f700302114faaa853adceffdcba b5e96d65ea03b22dba41381ea3b8c917c35683aaf38bc77159f372181510635a
GET /upload_imgs/4764a390bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 153227
last-modified: Tue, 30 Jan 2024 05:20:27 GMT
etag: "65b8871b-2568b"
expires: Sat, 01 Jun 2024 17:16:54 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 144097
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vfvJgs%2FT0ckzn%2BQswrgmpJ5gAzapzm%2FVf7PDoItlcP22EH3wJY6bnhvW43woM5MFH9Uzdw4RPP4%2FJ4Lwu%2BFVFe2QcBO%2F9qm8c8CkZ4w0ZeKn8LsDe1irL7m5WxSJp7Tl6UjU7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1beb911569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sdk.51.la/event/js-sdk-event.min.js?u=KN77qxg4oA0zwm1d | 47.246.44.238 | 200 OK | 21 kB |
URL GET HTTP/1.1sdk.51.la/event/js-sdk-event.min.js?u=KN77qxg4oA0zwm1d IP47.246.44.238:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65308) Hash5b2d813e4bfc861988a078082199b9de aa0be99256f9bb6f12c1e47838e6f822714a380c 927638eed00ada53b754ddd8c200a30ed317d3606f5219d553b2c84eaf992041
GET /event/js-sdk-event.min.js?u=KN77qxg4oA0zwm1d HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.lzygamb.top
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 21348
Connection: keep-alive
Date: Mon, 22 Apr 2024 16:05:34 GMT
x-oss-request-id: 66268ACEA554993035608507
x-oss-cdn-auth: success
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: Wy2BPkv8hhmIoHgIIZm53g==
x-oss-server-time: 2
Ali-Swift-Global-Savetime: 1713801934
Via: cache1.l2de2[0,0,304-0,H], cache20.l2de2[1,0], ens-cache12.se2[0,0,200-0,H], ens-cache2.se2[1,0]
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:58 GMT
x-oss-hash-crc64ecma: 12997830976545422151
Content-Encoding: gzip
Age: 1004281
X-Cache: HIT TCP_HIT dirn:9:358683245
X-Swift-SaveTime: Mon, 22 Apr 2024 23:04:40 GMT
X-Swift-CacheTime: 1270854
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9617148062154328988e
|
|
| s4res.nicelift.cn/upload_imgs/aa0ad9b0bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 159 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/aa0ad9b0bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 960x540, components 3 Size159 kB (159086 bytes) Hash6fc2f5edb5f2e7f1cbe4de1219721442 8c17329522cae61705016af4fbd3ae2c0c2ff29d 7feac099072d78cc41596c66bf6534a9b2ce070e6bbef2b7305efdf66a451964
GET /upload_imgs/aa0ad9b0bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 159086
last-modified: Tue, 30 Jan 2024 05:23:13 GMT
etag: "65b887c1-26d6e"
expires: Sat, 01 Jun 2024 21:50:10 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271448
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pT4NDXBaFr2AunufZOyP%2FdjVLi873ae7E%2FS%2B%2FPNbS%2BnJjHUe%2FDTaP%2BN0RRZ0XUIM7seAPMPwyvq%2FR8QRzr5ygafkqGlsELPaVjDiPqIo10yPKj%2Bj%2BJPTWgRFRSdqL1oGBSfWOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1beb912569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/aba68850bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 186 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/aba68850bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 960x540, components 3 Size186 kB (186203 bytes) Hash6fa4fe672a23784c0482de6e645991b1 11ed22064c8fe6b23e5b1a010c172c79c63134df 8c27018d7174188c41732667acb6deb45237e059fe218708ecaf9b4132d4ab7c
GET /upload_imgs/aba68850bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 186203
last-modified: Tue, 30 Jan 2024 05:23:15 GMT
etag: "65b887c3-2d75b"
expires: Sat, 01 Jun 2024 19:10:11 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 144098
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H7B3XUObBbIpvRBf%2FjCFMY%2FfkGVk0GyAwF19mo377buItwRREtkvSG1DdN1CxJtgDJIXB5X1VojqC0QQKRpk512xbWBbqA6MfKahzRU99tBjQVpwn0GGf11LyfElMtPoi%2FnFTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1beb913569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/af49edd0bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 159 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/af49edd0bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 960x540, components 3 Size159 kB (159086 bytes) Hash6fc2f5edb5f2e7f1cbe4de1219721442 8c17329522cae61705016af4fbd3ae2c0c2ff29d 7feac099072d78cc41596c66bf6534a9b2ce070e6bbef2b7305efdf66a451964
GET /upload_imgs/af49edd0bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 159086
last-modified: Tue, 30 Jan 2024 05:23:22 GMT
etag: "65b887ca-26d6e"
expires: Sat, 01 Jun 2024 21:44:42 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271447
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bGsM6EhLE%2Bc95BRJlQrrfvZdp%2BOYgeCtalNla2BWfEn8BJJYJv4IeQdttmp7Vv0ok1Qni9piuaQNjXhinK0Te39jztm3hfxgr2JlcQQc3LMZb%2FlkFw%2FwtmxJN3STjMRTITvF5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1beb915569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/c944ee10bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 70 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/c944ee10bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 720x309, components 3 Hash0bb4f67e879753339aba3b0bc6187793 9198d0c17a6b3ba1d5218fe934a94c8d600cde84 30722f9f469d9a663b39ccbde124cbd30fc97b87b15eb35f5d09881bd40b8411
GET /upload_imgs/c944ee10bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 69956
last-modified: Tue, 30 Jan 2024 05:24:05 GMT
etag: "65b887f5-11144"
expires: Sat, 01 Jun 2024 19:10:11 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271444
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0t8i8N95nIibQv97EcXyr2jHZADb4596HSN%2FOINieDLDtV%2F1%2BStkc3J%2BOx31%2BmbGQj5re7hF2BOSAfd1HqULc35TNV%2FQ3b3INHvZg0Yc47AszOEvVOstbS90LdITQbJh7ONXgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1c01a6a569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/b802e670bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 127 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/b802e670bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 720x500, components 3 Size127 kB (126666 bytes) Hash7bd2a432e419d57926701ea16658e8f4 8716e69e16c90d315bdb9054785483d5a9cce7e6 e5d27367eb67e7e610b265a04f02c339c9dcb083e1dbcf15a126d84b882b13dc
GET /upload_imgs/b802e670bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 126666
last-modified: Tue, 30 Jan 2024 05:23:36 GMT
etag: "65b887d8-1eeca"
expires: Sat, 01 Jun 2024 19:10:11 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271442
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sT2TtrC2I2TC18jMAd82m7yUxWjCPX3niKwr465KNPUUr87sWYT9Vg255SjZtKpUeex%2BoD21EZSD2JOEcSDRNdKedcdWx22P8L1io1bjXZEfiwboFjwci6WQF%2FQo8E%2Fv6CgelA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1c01a6b569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/cbb06fd0bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 80 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/cbb06fd0bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 720x328, components 3 Hash0ebdbed533a413e02e490b5b4c0f9c0a cb24565fdd280477100f9e54e2c9eaea2019de4b 719bbe38648faaa8161fc8f8bfddddb5e5412188f1717a319e48729e6a903887
GET /upload_imgs/cbb06fd0bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 80191
last-modified: Tue, 30 Jan 2024 05:24:09 GMT
etag: "65b887f9-1393f"
expires: Sat, 01 Jun 2024 17:16:54 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GB6fMy8EBKpOdhieYbr%2FeqI0bOTu6Kz9QHc5vWG%2F66zhpMZQHHFPAUys9SA5LUP6ZfRdfdybRLNAXSRu1GKqb9EsYCgupS45rPCqk5WDqbVGWmCjftBfEwGX6%2FzW9kpGsGpwvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1c01a6c569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/cfe4cab0bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 98 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/cfe4cab0bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 720x358, components 3 Hash4ca68cdaf6ccd3b760bd0be21bb54289 7197f3bce145772b075921145467c325343e4a1f b6689f448545aba5fc920766b8048b3cfd9bbb725c95f7471276f45f252fb36e
GET /upload_imgs/cfe4cab0bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 97991
last-modified: Tue, 30 Jan 2024 05:24:16 GMT
etag: "65b88800-17ec7"
expires: Sat, 01 Jun 2024 21:50:10 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271440
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yO1DFhpOd9qX89o2e3NOy9xLPmAlSCKkwaRf%2BYb36mKJouOcpY6S%2F2PUl6OTOfwKFOQYINFm75fzLnGjTbGIJva9HB8%2FoYJB1Supy4Q35NZD3e%2Fhn3FeF7ynZe79TbkC%2BciKYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1c01a6e569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/d77289c0bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 93 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/d77289c0bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 720x385, components 3 Hash625a5942481f89bcd1eaa774df8be8d0 02f10c134346b18f14a867e5a77800bd82d0442d fd90d1cac138fc643ca70b43acd609a98aebc16d1af1b4e56bee2f06685b4ea8
GET /upload_imgs/d77289c0bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 92726
last-modified: Tue, 30 Jan 2024 05:24:29 GMT
etag: "65b8880d-16a36"
expires: Sat, 01 Jun 2024 19:10:11 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271439
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4esPgovAA6o6Ub%2Bt6IQ3p1GOnXQNTVKn0YdHvvJM%2BJMqtwZCiK1ixfNwkRNXNvLGTJmh7tFxVZqUk5PoFsa6XGHjxxVrwvfWv1CjJhAxpVljYNTygkSqMuJauCdQT6DynIkFtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1c01a70569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/d94cc800bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 91 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/d94cc800bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 720x351, components 3 Hash39a081ebad7e1677132318bc81030550 1515e2b30864535696c2795dae83d01322872e08 add844c9e519eeaeb6bf31a6bdad0625d3dbd5fd0f04e4a714863a2780f3e7ac
GET /upload_imgs/d94cc800bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 90643
last-modified: Tue, 30 Jan 2024 05:24:32 GMT
etag: "65b88810-16213"
expires: Sat, 01 Jun 2024 19:10:11 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 144097
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QYASvkRQ4CuDe5WON4MBzBIjYPJF9FVn2eLgp%2Bz4VrbxKt6DUpPbYPT34FL9cmlOTzHk3AjZEUqQwqjB8p6T0VdOyX5ANcy2Ei%2FjpwXwW3k%2F5pt%2BbMR4qMn3FBaJHXdXGLNtKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1c01a71569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/upload_imgs/defc5130bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 182 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/defc5130bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 960x540, components 3 Size182 kB (182403 bytes) Hash7b498f0f778eba3bbd96f4e2593a49d0 2cba88d6a14cd3b5b1ecea19662ba9b0e037e450 fe408e2544eb287ab18fa2977c5f643624e5dcaaebeb7e949a864d5c0375b39c
GET /upload_imgs/defc5130bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 182403
last-modified: Tue, 30 Jan 2024 05:24:42 GMT
etag: "65b8881a-2c883"
expires: Sat, 01 Jun 2024 19:10:11 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 271435
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f5pv9Kn7vGYetGFtjK7pzbEOy8pPj8KNdtF5UUnqw1bOaQBHODWGIivNkKOSGPd9cksBZwY8Y6b%2Fl4mh%2FSu9zl%2BFsXZmPSXt7kJs%2BvI2OgtNAzoe4L6HvautInhbrPWmhaoipg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1c01a73569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| web-t9zzm1.openinstall.io/web/t9zzm1/hyx2212/init?channelCode=hyx2212&av=0&cv=0&hash=%23%2Fyyd%3Fapp%3Dhy18%26tid%3D11%26n%3D2212%26ios%3D2212%26dl%3D0%26clickid%3Dcoqtrgv9pkqc7381b3rg&sw=p6Supg&sh=p6akog&sp=1 | 47.246.44.240 | 200 OK | 849 B |
URL POST HTTP/2web-t9zzm1.openinstall.io/web/t9zzm1/hyx2212/init?channelCode=hyx2212&av=0&cv=0&hash=%23%2Fyyd%3Fapp%3Dhy18%26tid%3D11%26n%3D2212%26ios%3D2212%26dl%3D0%26clickid%3Dcoqtrgv9pkqc7381b3rg&sw=p6Supg&sh=p6akog&sp=1 IP47.246.44.240:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerDigiCert, Inc. Subject*.openinstall.io Fingerprint54:4F:20:4F:35:4C:84:27:E7:5D:ED:28:50:34:87:D2:61:83:24:CE ValidityWed, 05 Jul 2023 00:00:00 GMT - Wed, 17 Jul 2024 23:59:59 GMT
Hash4c4cd02795e34372791b1765ce0a933c 987e2eb0db3c6d376f1e71be7ee536b8151e793a 6da70cbd012a1cb093e461f7bc965789393d769fd55877783f61646c16822040
POST /web/t9zzm1/hyx2212/init?channelCode=hyx2212&av=0&cv=0&hash=%23%2Fyyd%3Fapp%3Dhy18%26tid%3D11%26n%3D2212%26ios%3D2212%26dl%3D0%26clickid%3Dcoqtrgv9pkqc7381b3rg&sw=p6Supg&sh=p6akog&sp=1 HTTP/1.1
Host: web-t9zzm1.openinstall.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=utf-8
Content-Length: 91
Origin: http://www.lzygamb.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json;charset=utf-8
content-length: 849
date: Sat, 04 May 2024 07:03:36 GMT
access-control-allow-origin: http://www.lzygamb.top
vary: Origin
access-control-allow-credentials: true
set-cookie: op-mid=13303407778181; Max-Age=315360000; Expires=Tue, 02-May-2034 07:03:36 GMT; Path=/
v-app-t9zzm1=1; Max-Age=315360000; Expires=Tue, 02-May-2034 07:03:36 GMT; Path=/web/t9zzm1/
via: cache1.l2nm125-4[6,0], cache12.l2de2[161,0], ens-cache13.se2[182,0]
timing-allow-origin: *
eagleid: 2ff62ca117148062159465129e
X-Firefox-Spdy: h2
|
|
| collect-v6.51.la/v6/collect?dt=4 |  203.107.86.226 | 400 | 0 B |
URL POST HTTP/1.1collect-v6.51.la/v6/collect?dt=4 IP203.107.86.226:80 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 282
Origin: http://www.lzygamb.top
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400
Date: Sat, 04 May 2024 07:03:36 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=e6216baf664edde636147fdef41d9f0d85436f6bd1920d9fd04b874297f5ad0a; Path=/; HttpOnly
acw_tc=ac11000117148062160393626e5387bcdcbdc4cfede435215a82140625ed7e;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://www.lzygamb.top
Access-Control-Allow-Credentials: true
|
|
| collect-v6.51.la/v6/collect?dt=4 | 203.107.86.226 | 400 | 0 B |
URL POST HTTP/1.1collect-v6.51.la/v6/collect?dt=4 IP203.107.86.226:80 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 293
Origin: http://www.lzygamb.top
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403
Date: Sat, 04 May 2024 07:03:36 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=84944bb3f702944509e24baed76e54775b848f1062275ec0e8e458e18dddeecd; Path=/; HttpOnly
acw_tc=ac11000117148062160981029eb87e9170bd5c46c129771290d44fe5e12da5;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://www.lzygamb.top
Access-Control-Allow-Credentials: true
|
|
| s4res.nicelift.cn/upload_imgs/20d39790bf2f11ee91ffc5a0c8c0981a.bnc | 188.114.97.1 | 200 OK | 53 kB |
URL GET HTTP/3s4res.nicelift.cn/upload_imgs/20d39790bf2f11ee91ffc5a0c8c0981a.bnc IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typePNG image data, 720 x 151, 8-bit/color RGBA, non-interlaced Hash955d8e97d620449963e0ae20255f8f48 3ad4263189297396e1354baeeed61dec498a37ae 268b28effee8efeadd483948c13f159a6b5d5ded8c2433ba9596b3e4bb68ab15
GET /upload_imgs/20d39790bf2f11ee91ffc5a0c8c0981a.bnc HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/octet-stream
content-length: 52663
last-modified: Tue, 30 Jan 2024 05:19:23 GMT
etag: "65b886db-cdb7"
expires: Sat, 01 Jun 2024 17:16:54 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 144097
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vghcDbKFg4K%2BM7FqL27ZYVcNlIeuOLg2dWNfizcMpJp2J2cyjgqeDcp7EUTFZ5WnppdUIaqYusA91pmarduv7fkNtQxmpFT1Mr6UfwCow2ZWEOWjRl6pB%2BZS1J6tpGu6obTj3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1be68d5569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| s4res.nicelift.cn/static/css/main.dedc73d0.css | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/2s4res.nicelift.cn/static/css/main.dedc73d0.css IP188.114.97.1:443
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerGoogle Trust Services LLC Subjectnicelift.cn FingerprintF3:F2:6B:AC:2D:88:19:EB:0A:87:EC:7E:BB:7D:E5:17:8C:62:49:7B ValidityThu, 04 Apr 2024 04:32:47 GMT - Wed, 03 Jul 2024 04:32:46 GMT
File typeASCII text, with very long lines (21827), with no line terminators Hashadce5b00e291eb88d5d06ee8cd2806f9 a1ed4e1de675c4e9a4ca227d250c5acb2b447220 326aff9bbf7c32f8661cdf9718e69161d9252b3a2a551d34de40bc7ebb0fda92
GET /static/css/main.dedc73d0.css HTTP/1.1
Host: s4res.nicelift.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:03:32 GMT
content-type: text/css
last-modified: Mon, 01 Apr 2024 07:40:45 GMT
etag: W/"660a64fd-5543"
expires: Sat, 01 Jun 2024 21:44:45 GMT
cache-control: max-age=5184000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: HIT
age: 309288
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oCZdn5u5gRMK5HGoaeYTfD5LSgY2rSWmLc1A3WAA6O3JonfuEZVMhRocRe1vcQoMedeb%2FlfLOfskw8xCxVrPZxepGeJOi5%2FatCBJcJ%2F9UXkfRu2N7wmnpekR90KOKXt%2FxqIrvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e6a1ab8b02b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| | 134.122.132.8 | 200 OK | 3.3 kB |
URL User Request GET HTTP/1.1IP134.122.132.8:80 ASN#64050 BGPNET Global ASN
File typeHTML document, ASCII text, with very long lines (3459), with no line terminators Hash2e058f3adedd0fa43d2fe5f6374a4638 167a864b68db0b0d49bedc3c3571e71ba9a31051 a9693acb1d6219a74568d3e826582570f498757c478c29ad0025367506dc827d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.lzygamb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 07:03:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| landapi-v4.bao265.com/lapi/config?n=2212&ios=2212&app=hy18&cfg=&cb=&page_route=yyd&tid=11 | 134.122.132.8 | 200 OK | 1.8 kB |
URL GET HTTP/2landapi-v4.bao265.com/lapi/config?n=2212&ios=2212&app=hy18&cfg=&cb=&page_route=yyd&tid=11 IP134.122.132.8:443 ASN#64050 BGPNET Global ASN
Requested byhttp://www.lzygamb.top/#/yyd?app=hy18&tid=11&n=2212&ios=2212&dl=0&clickid=coqtrgv9pkqc7381b3rg CertificateIssuerZeroSSL Subject*.bao265.com Fingerprint28:F8:74:68:C2:D0:4D:79:1C:96:6C:A6:F9:9D:CE:53:6B:AE:86:52 ValidityThu, 22 Feb 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1956), with no line terminators Hash657d95dc1aab777ae1baf443f43272cc 0b49644ed186c3fe502867e0803b9ab698b8695b bf68226f6cf071230900ae286289aa33f8fa9f8abcaf22b104d9501283ea645f
GET /lapi/config?n=2212&ios=2212&app=hy18&cfg=&cb=&page_route=yyd&tid=11 HTTP/1.1
Host: landapi-v4.bao265.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.lzygamb.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:03:35 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0