Overview

URL yaojkd.com/
IP156.226.188.247
ASNSun Network Hong Kong Limited - HongKong Backbone
Location Seychelles
Report completed2022-09-18 19:46:49 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-18 2 xxootv.top Sinkholed


Files

No files detected



Passive DNS (37)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS zerossl.ocsp.sectigo.com (2) 4049 2020-05-09 19:05:29 UTC 2022-09-18 06:43:16 UTC 172.64.155.188
mnemonic passive DNS pic.picnewsss.com (1) 0 2022-06-14 11:57:58 UTC 2022-09-18 14:13:09 UTC 23.225.139.251 Unknown ranking
mnemonic passive DNS p.qlogo.cn (8) 48578 2014-01-15 11:11:45 UTC 2022-09-18 11:49:25 UTC 43.129.255.47
mnemonic passive DNS yaojkd.com (1) 0 2019-06-07 19:16:53 UTC 2022-09-18 15:16:26 UTC 156.226.188.247 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (9) 86 2012-05-21 07:02:23 UTC 2022-09-18 11:46:24 UTC 93.184.220.29
mnemonic passive DNS kvemm.com (1) 222018 2021-10-18 01:51:02 UTC 2022-09-18 15:58:56 UTC 45.154.214.239
mnemonic passive DNS images.xxootv.top (1) 0 2022-06-09 20:47:47 UTC 2022-09-16 21:15:59 UTC 45.207.13.180 Unknown ranking
mnemonic passive DNS hm.baidu.com (10) 8254 2012-05-26 08:38:45 UTC 2022-09-18 09:41:13 UTC 103.235.46.191
mnemonic passive DNS fmlb.netlbtu.com (37) 187701 2021-09-14 11:57:06 UTC 2022-09-18 12:04:26 UTC 104.21.235.174
mnemonic passive DNS zhibo128x1.xyz (1) 0 2022-09-06 23:50:01 UTC 2022-09-18 11:49:25 UTC 154.83.25.141 Unknown ranking
mnemonic passive DNS yaoji666.oss-cn-hongkong.aliyuncs.com (1) 0 2022-07-12 23:48:19 UTC 2022-09-16 21:15:58 UTC 47.75.19.91 Domain (aliyuncs.com) ranked at: 1959
mnemonic passive DNS uu99k.com (1) 0 2021-02-04 07:26:26 UTC 2022-09-17 18:12:52 UTC 23.225.89.147 Unknown ranking
mnemonic passive DNS vesdsp.com (1) 0 2022-07-06 03:53:54 UTC 2022-09-16 21:15:59 UTC 103.170.15.66 Unknown ranking
mnemonic passive DNS si1.go2yd.com (1) 325918 2017-02-02 11:37:19 UTC 2022-09-18 11:49:25 UTC 58.254.180.65
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-18 06:05:25 UTC 143.204.55.25
mnemonic passive DNS www.yaojkd.com (4) 0 2019-06-07 19:16:53 UTC 2021-11-12 08:43:31 UTC 156.226.188.247 Unknown ranking
mnemonic passive DNS ocsp.globalsign.com (2) 2075 2012-05-25 06:20:55 UTC 2022-09-18 05:19:30 UTC 104.18.21.226
mnemonic passive DNS ocsp.sectigo.com (3) 487 2018-12-17 11:31:55 UTC 2022-09-18 14:37:21 UTC 104.18.32.68
mnemonic passive DNS e1.o.lencr.org (1) 6159 2021-08-20 07:36:30 UTC 2022-09-18 08:12:25 UTC 23.36.77.32
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-09-18 12:39:06 UTC 143.204.55.115
mnemonic passive DNS r3.o.lencr.org (14) 344 2020-12-02 08:52:13 UTC 2022-09-18 05:00:37 UTC 23.36.77.32
mnemonic passive DNS p3.douyinpic.com (2) 23536 2020-12-18 11:20:50 UTC 2022-09-18 11:49:26 UTC 47.246.44.231
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-18 04:48:15 UTC 34.117.237.239
mnemonic passive DNS n7181.com (1) 0 2022-07-03 12:37:11 UTC 2022-09-16 21:15:58 UTC 45.61.212.121 Unknown ranking
mnemonic passive DNS img.cuphf.xyz (1) 0 2022-07-12 16:14:16 UTC 2022-09-17 19:56:32 UTC 23.225.228.58 Unknown ranking
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-18 06:05:26 UTC 52.89.17.198
mnemonic passive DNS acoossf.top (1) 562622 2021-11-14 08:32:45 UTC 2022-09-18 14:26:57 UTC 104.21.235.170
mnemonic passive DNS taiwtp1.com (4) 0 2022-04-08 07:06:08 UTC 2022-09-18 12:04:26 UTC 220.128.218.220 Unknown ranking
mnemonic passive DNS mang.tiryakioyun.com (2) 0 2022-03-21 04:49:54 UTC 2022-09-18 14:24:07 UTC 20.205.43.35 Unknown ranking
mnemonic passive DNS ocsp2.globalsign.com (3) 1544 2012-05-21 07:12:19 UTC 2022-09-18 05:51:54 UTC 104.18.20.226
mnemonic passive DNS 3p8801.co (4) 0 2022-07-05 12:28:12 UTC 2022-09-16 21:15:58 UTC 137.175.35.2 Unknown ranking
mnemonic passive DNS push.zhanzhang.baidu.com (1) 57139 2015-07-22 05:44:02 UTC 2022-09-18 09:41:13 UTC 182.61.201.93
mnemonic passive DNS api.share.baidu.com (1) 44629 2013-04-25 14:45:11 UTC 2022-09-18 09:41:15 UTC 182.61.201.94
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-18 04:20:51 UTC 34.120.237.76
mnemonic passive DNS www.mgcqnd.xyz (9) 0 2022-05-28 03:55:56 UTC 2022-09-16 15:34:51 UTC 173.231.17.185 Unknown ranking
mnemonic passive DNS ocsp.digicert.cn (2) 37572 2020-03-20 17:45:56 UTC 2022-09-18 09:51:35 UTC 47.246.44.205
mnemonic passive DNS img.x967.xyz (1) 0 2022-07-18 13:04:45 UTC 2022-09-16 21:15:59 UTC 23.225.228.58 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 156.226.188.247

Date UQ / IDS / BL URL IP
2022-09-18 19:46:49 +0000
0 - 0 - 1 yaojkd.com/ 156.226.188.247

Last 5 reports on ASN: Sun Network Hong Kong Limited - HongKong Backbone

Date UQ / IDS / BL URL IP
2022-12-04 02:29:37 +0000
0 - 0 - 2 yljh.iyhost.com/index.php/vod/detail/id/26934.html 154.222.97.198
2022-12-03 19:27:18 +0000
0 - 0 - 1 qzenfood.com/ 156.226.174.230
2022-12-02 16:21:22 +0000
0 - 0 - 4 www.fishingatcabo.com/food/65951912.html 156.234.205.30
2022-12-02 10:24:12 +0000
0 - 0 - 4 shpeineng.com/ 156.234.161.61
2022-12-02 02:16:32 +0000
0 - 0 - 3 hl-photo.com/ 156.234.172.50

Last 1 reports on domain: yaojkd.com

Date UQ / IDS / BL URL IP
2022-09-18 19:46:49 +0000
0 - 0 - 1 yaojkd.com/ 156.226.188.247

Last 2 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-09-18 21:23:53 +0000
0 - 0 - 1 zetajuice.com/ 156.226.169.234
2022-09-16 15:02:35 +0000
0 - 0 - 1 www.cleeth.com/index.php 156.255.162.186


JavaScript

Executed Scripts (16)


Executed Evals (0)


Executed Writes (7)

#1 JavaScript::Write (size: 187, repeated: 1) - SHA256: b369455e1836b256f6870bf8ca5352feabe0f12957891834d3adcd1ca30fdf4b

                                        < iframe src = " https://mang.tiryakioyun.com/news/index.php"
frameborder = "0"
style = "border:0;width: 100%; text-align: center; border: medium none; height:100%;max-height: 4000px;" > < /iframe>
                                    

#2 JavaScript::Write (size: 6, repeated: 1) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 201, repeated: 1) - SHA256: 2d7d346bf62ff160f8d7d20318bedeb9dc7c79d0e2845f6061de5beabda471ca

                                        < style > # o63092 {
    animation - duration: 10000 ms;
    animation - iteration - count: infinite;
    animation - timing - function: linear;
}@
keyframes spin {
    from {
        transform: rotate(0 deg);
    }
    to {
        transform: rotate(360 deg);
    }
} < /style>
                                    

#4 JavaScript::Write (size: 322, repeated: 1) - SHA256: 2954b88fb53320801530057b59b7688e297b76a48aa3626bb5558dbdb1b77ec9

                                        < div class = "f63092"
id = "o63092"
style = "position: fixed; bottom: 52%; z-index: 19999 !important; right: 2px;" > < a target = "_blank"
href = "https://zzvcljljfd222.com/85/mguo.html" > < img src = "https://taiwtp1.com/img/200200.gif"
style = "margin:10px;border-radius: 15px;border: solid 2px red;"
width = "90px"
height = "90px"
"></a></div>
                                    

#5 JavaScript::Write (size: 103, repeated: 1) - SHA256: 53db339b0b80637f13dfc63813d7366c899cebe0db896602886ece619163d82e

                                        < meta id = "viewport"
name = "viewport"
content = "user-scalable=no,width=device-width, initial-scale=1.0" / >
                                    

#6 JavaScript::Write (size: 77, repeated: 1) - SHA256: 235f11ebdcfb5a9e00906afc39c11efbaeed816b9040567cd61f18f9ce7242d4

                                        < style > html, body {
    widht: 100 % ;height: 100 % ;overflow: hidden;clear: both;
} < /style>
                                    

#7 JavaScript::Write (size: 87, repeated: 1) - SHA256: 83bb85f2af78f20867aaf309bc56288e88127d3f3b84f855555664ce0a217fe9

                                        < div style = "width:100%;height:100%;position:absolute;top:0;left:0;z-index:2147483647;" >
                                    


HTTP Transactions (142)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 18 Sep 2022 19:02:57 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HILRm_XqRuYGydh-phz1x60CkxgiNkTAFLZzrKR3uDQL6gm_0eDoFg==
Age: 2620


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8315
Expires: Sun, 18 Sep 2022 22:05:13 GMT
Date: Sun, 18 Sep 2022 19:46:38 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.25
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y0FEpWUn1madh9uYnHklsbVD4JswNINjwkOwdZmL9qK12GAdZ8JEaw==
age: 54685
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:38 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 18 Sep 2022 19:03:22 GMT
Expires: Sun, 18 Sep 2022 19:07:47 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oRPkMPj2AFHedbK3sWbG09x3wYfB49jST3OQBJW1JSns0PH6nNaPgA==
Age: 2596


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: yaojkd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         156.226.188.247
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 18 Sep 2022 19:46:40 GMT
Content-Length: 0
Connection: keep-alive
Location: http://www.yaojkd.com/

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1738
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:38 GMT
Last-Modified: Sun, 18 Sep 2022 19:17:40 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oxcmNgIKwiNJc0uGIV5K1Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.89.17.198
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xbOxf/UC3zBh/+M7zi234oVHEiA=

                                        
                                            GET / HTTP/1.1 
Host: www.yaojkd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         156.226.188.247
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 18 Sep 2022 19:46:41 GMT
Content-Length: 781
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Size:   781
Md5:    e5ec280698127133a2dd4c14d0b5ca82
Sha1:   6ebc840e2929aff4a28ad5001f5b33746aa9baf2
Sha256: 570f52f1960206dbde209a1f52cdf106393a36c7e2eb9d745b689d04ed66e76d
                                        
                                            GET /common.js HTTP/1.1 
Host: www.yaojkd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yaojkd.com/

                                         
                                         156.226.188.247
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 18 Sep 2022 19:46:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (389), with CRLF line terminators
Size:   1104
Md5:    3b08372f4773c8e7854234aaef938077
Sha1:   b65315c1d4fc673034b770705bf00746f6028d72
Sha256: da0eb85cdaddf869c83f127036841ec2f4ce694d949092f46afc01e23086bcd5
                                        
                                            GET /tj.js HTTP/1.1 
Host: www.yaojkd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yaojkd.com/

                                         
                                         156.226.188.247
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 18 Sep 2022 19:46:41 GMT
Content-Length: 524
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   524
Md5:    74c613b5c0f8b6fc74922ea1f649bb22
Sha1:   90a03259c907410b45dc7aff91693dcd8a4d44bc
Sha256: 19b89c0dfcc1864d1e0a3d5bda205d6f9079bd986717f2f1d21316f1397794aa
                                        
                                            GET /push.js HTTP/1.1 
Host: push.zhanzhang.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yaojkd.com/

                                         
                                         182.61.201.93
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Date: Sun, 18 Sep 2022 19:46:39 GMT
Etag: "4078521116"
Expires: Mon, 18 Sep 2023 19:46:39 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=3351BE274454B4244164DAB5A0CC26D1:FG=1; max-age=31536000; expires=Mon, 18-Sep-23 19:46:39 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   227
Md5:    e548b6ce15bb616c2bfba36e9cfbf307
Sha1:   a348285d9928a6548a57569f1fb9d62bdd747f33
Sha256: 7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
                                        
                                            GET /s.gif?l=http://www.yaojkd.com/ HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yaojkd.com/

                                         
                                         182.61.201.94
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Content-Length: 0
Date: Sun, 18 Sep 2022 19:46:39 GMT

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4317
Expires: Sun, 18 Sep 2022 20:58:37 GMT
Date: Sun, 18 Sep 2022 19:46:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4317
Expires: Sun, 18 Sep 2022 20:58:37 GMT
Date: Sun, 18 Sep 2022 19:46:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4317
Expires: Sun, 18 Sep 2022 20:58:37 GMT
Date: Sun, 18 Sep 2022 19:46:40 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5827
x-amzn-requestid: 9f179e66-3c6f-4e53-94f2-989bf32a6b90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl7gyHvboAMFSzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632572d1-799e74a63288269b79170d58;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:10:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9firpBGLDHkjq_CJX01tbyPPS9OXPsTfzC0dLioWt1Axg7Vw5LQ0xg==
via: 1.1 497370ec058751eb0d9251f66d50af5e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:15:02 GMT
age: 45098
etag: "4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5827
Md5:    29f4a52fb629dce4ef8038d4df7ea58a
Sha1:   4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0
Sha256: 32cee35b22110b83738f49f49edb6efcedb54fe793d5ccc900004e16e3fefda3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5133
x-amzn-requestid: 01f39c0a-c86f-4057-a505-20200819203c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YioKkFrFoAMFhMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632420a9-5821f44144b61475180ec961;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:07:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3tByM8rVW_WxdiBUCfXzxZWjMvH2PB2VQ290D-DLITqly6QQQKBNSw==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:13:29 GMT
age: 45191
etag: "b2aaf019e083443a6404c262206ee2e981d3165c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5133
Md5:    56ade9172e883c777dd974ca879bceba
Sha1:   b2aaf019e083443a6404c262206ee2e981d3165c
Sha256: c8407ad191143d2d947464b357d8426efb334cb165c4fa5ca01573d8f7ca7b76
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7788
x-amzn-requestid: 2cb48f87-8b72-4ff7-b041-a6e704b854a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIP2-HFHoAMFssA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319935f-693e2f2e5a0bcd9f690f21fa;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:01:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wxZ383nT9n_SBMH4D_k--23G7tb-2pQV0yDcUMvD17woMHbc2rx-NQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:53:55 GMT
age: 75165
etag: "e139a0974317212f094fdbe59e26ca5cf6b9e56d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7788
Md5:    7a22ab7dcdf50f4a297b8e117d336eae
Sha1:   e139a0974317212f094fdbe59e26ca5cf6b9e56d
Sha256: 9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fa6db45-871c-41e1-be1d-bc188fa9419b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8005
x-amzn-requestid: 2ce67f7f-9a03-4f4d-b06c-ec0de59c2854
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6KhH9PoAMFh2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263d76-6aeeee3217540c5863913912;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:34:46 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: K_ZInDx3OZbVvpWZ5vnimzx-Dk5twaTGv9VGXMZHFpZ0YN7lKZ_5HQ==
via: 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:57:48 GMT
etag: "04fb3179255ba5ec897ffc4581966945cc9fe2ca"
age: 78532
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8005
Md5:    f2e5759fd404a039955868b121bbd075
Sha1:   04fb3179255ba5ec897ffc4581966945cc9fe2ca
Sha256: 42623d1a0f52682db915b075a894d8cd18f2b53efc7815304b0304841536cf35
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6869
x-amzn-requestid: 8d5cf972-bd9a-42b8-ba33-5dd05191e9f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6u1GspIAMF9vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263e5e-12430c8c7122a3594aba8949;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: leqr7rYJyeBFlYuFM2D-wGJfb7_w-5HbW2Y1aHwjTzZ9_4MTFybNaA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:08:03 GMT
age: 77917
etag: "451c1f67948e45909e636828e3d2a3099de922f0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6869
Md5:    51d067e534c477ce996b3e806f6a132e
Sha1:   451c1f67948e45909e636828e3d2a3099de922f0
Sha256: e13318949733eb7992695c61570cc8b2961d881a8343c677a77cd035e787bbaf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11919
x-amzn-requestid: 2f547c1f-2f5d-4707-8f6c-fe9dfff51383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfS4FI9oAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145ab-3c967f2653d06c1c079f88c1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Q6pjncaouCXUu0Pz7v6xF_8ClxxVypUSeggW23Z-UTsPamKCTgwjmA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:00:17 GMT
age: 78383
etag: "786c333cf08456aea446a55c547520572e1c2df9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11919
Md5:    f003d8b6e12692fb16dddd6827deead8
Sha1:   786c333cf08456aea446a55c547520572e1c2df9
Sha256: d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:40 GMT
Content-Length: 728
Connection: keep-alive
Last-Modified: Sat, 17 Sep 2022 11:27:45 GMT
Expires: Sat, 24 Sep 2022 11:27:44 GMT
Etag: "f81f7f923526d6a735f7bda626ae251630c19422"
Cache-Control: max-age=487863,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74cc96c908ed1c12-OSL

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:40 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 22 Sep 2022 18:56:57 GMT
ETag: "06b7cdbd9b46b0f8b2dba7cf4442859189cc77bc"
Last-Modified: Sun, 18 Sep 2022 18:56:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 838
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc96ca78f8b517-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    ef903b2395f21c658b1b4c1f0c067ba8
Sha1:   06b7cdbd9b46b0f8b2dba7cf4442859189cc77bc
Sha256: 5eee98e4ed044288e9eddd0bcb5c7499019fb8d5a468913933ae5486fb290ba1
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:40 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 22 Sep 2022 18:56:57 GMT
ETag: "06b7cdbd9b46b0f8b2dba7cf4442859189cc77bc"
Last-Modified: Sun, 18 Sep 2022 18:56:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 838
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc96ca7cfb1c02-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    ef903b2395f21c658b1b4c1f0c067ba8
Sha1:   06b7cdbd9b46b0f8b2dba7cf4442859189cc77bc
Sha256: 5eee98e4ed044288e9eddd0bcb5c7499019fb8d5a468913933ae5486fb290ba1
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.yaojkd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yaojkd.com/

                                         
                                         156.226.188.247
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sun, 18 Sep 2022 19:46:42 GMT
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Fri, 23 Sep 2022 19:46:42 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    7ef1f0a0093460fe46bb691578c07c95
Sha1:   2da3ffbbf4737ce4dae9488359de34034d1ebfbd
Sha256: 4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
                                        
                                            GET /hm.js?7c9dcd90dd99ab82edb3ceb22d5bcbf2 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yaojkd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11340
Date: Sun, 18 Sep 2022 19:46:40 GMT
Etag: 1c1c723f2667d5284433fa7d11c57a86
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=021E967B7026915A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (627)
Size:   11340
Md5:    972ec36226184e73d9dd5225001a8ef1
Sha1:   12f66de844aee68e133bd7629b63e5ca8d5c4610
Sha256: 3f684584a211d71f06fc3f5e788d3a0d0a9c97000e2b38302280bef3d9f59e82
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B79DDA573F7A8D3048F6427E3A2B04DE565F21F44B342A1A4E94B21EBBC773AC"
Last-Modified: Sun, 18 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17725
Expires: Mon, 19 Sep 2022 00:42:06 GMT
Date: Sun, 18 Sep 2022 19:46:41 GMT
Connection: keep-alive

                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1152076021&si=7c9dcd90dd99ab82edb3ceb22d5bcbf2&v=1.2.97&lv=1&sn=55478&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.yaojkd.com%2F&tt=%E4%BA%B3%E5%B7%9E%E7%AB%99%E6%83%B6%E5%A8%B1%E4%B9%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yaojkd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 18 Sep 2022 19:46:42 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=E0EA12491DF8F047; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.js?2107c53676d8b23c2b876048405f5d94 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yaojkd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11339
Date: Sun, 18 Sep 2022 19:46:41 GMT
Etag: ad36a5f28f4a553c1127f31d4d72dc92
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=0CB434CB78E9FEB5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (626)
Size:   11339
Md5:    33b5abd8ffa68b94ab83a5efd2280f42
Sha1:   747d2cb1060be7aa36e4727b9e1d7dde72021e09
Sha256: 6f16d4e0fda9cf6b178e467166950dada0cda3bad10685ef3d759789b896589f
                                        
                                            GET /template/m1938pc/images/1.gif HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:42 GMT
content-length: 254
last-modified: Fri, 07 May 2021 10:47:38 GMT
etag: "60951aca-fe"
expires: Tue, 18 Oct 2022 19:46:42 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 17\012- data
Size:   254
Md5:    b013f8fa3ec997fe20dc80b82af0ad0a
Sha1:   e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
Sha256: 119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
                                        
                                            GET /template/m1938pc/html9/ad/zxf8.js HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:42 GMT
content-length: 641
last-modified: Fri, 22 Jul 2022 08:35:23 GMT
etag: "62da614b-281"
expires: Mon, 19 Sep 2022 07:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size:   641
Md5:    b840c26fe2ad5f5fed93a1422e810847
Sha1:   2e682ed0739aa6258b57deeb01e3b013edc0022d
Sha256: e86ced398e2f16d4e3bc271378f9abc9961bbecc17d58ad9399733a61aa3f7b6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9DB7570DAA89A1C9211C7FA48CE90CEE115B1C855598AFEF6F18B5F6CEA48BD0"
Last-Modified: Sat, 17 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10545
Expires: Sun, 18 Sep 2022 22:42:27 GMT
Date: Sun, 18 Sep 2022 19:46:42 GMT
Connection: keep-alive

                                        
                                            GET /ec9fcd758df74f805f29f72e8545d13b.gif HTTP/1.1 
Host: kvemm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         45.154.214.239
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:42 GMT
content-length: 162
location: https://acoossf.top/ec9fcd758df74f805f29f72e8545d13b.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:42 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Sep 2022 15:00:17 GMT
Expires: Sun, 25 Sep 2022 15:00:16 GMT
Etag: "abdcda1be4e69ca4bfcc830cb4482b0b88340200"
Cache-Control: max-age=587013,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74cc96d98a790b69-OSL

                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1869434890&si=2107c53676d8b23c2b876048405f5d94&v=1.2.97&lv=1&sn=55479&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.yaojkd.com%2F&tt=%E4%BA%B3%E5%B7%9E%E7%AB%99%E6%83%B6%E5%A8%B1%E4%B9%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yaojkd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 18 Sep 2022 19:46:42 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A8F7B5B456FBEFEC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:42 GMT
Ali-Swift-Global-Savetime: 1663530402
Via: cache16.l2de2[486,486,200-0,M], cache16.l2de2[487,0], cache4.se1[509,508,200-0,M], cache4.se1[510,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 18 Sep 2022 19:46:42 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816635304024071986e

                                        
                                            GET /news/data.php HTTP/1.1 
Host: mang.tiryakioyun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mang.tiryakioyun.com/news/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.205.43.35
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx/1.21.6
date: Sun, 18 Sep 2022 19:46:41 GMT
vary: Accept-Encoding
content-encoding: gzip
x-country: NO
x-cache: BYPASS@waxm3g7zj00000f
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF, LF line terminators
Size:   80313
Md5:    8ff3d3021ecb5610963ee882a3410b69
Sha1:   442df2de63d6a1e971e7eb1b883efb3c03b2e32a
Sha256: 77fd3387fd98a461f2b9b58a963ec507ef621e14c85304f1375a832c12511d2d
                                        
                                            GET /template/m1938pc/css/ate.css HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:42 GMT
last-modified: Fri, 18 Jun 2021 13:51:35 GMT
vary: Accept-Encoding
etag: W/"60cca4e7-126e4"
expires: Mon, 19 Sep 2022 07:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   6390
Md5:    35d82c247304adaa2fd8849c08936468
Sha1:   f72991e4e67c5c40c2d3d4ea238ea31fa455adbc
Sha256: ea9947a813c5bac10b93f00e1ee86c793072a30b13a13d4816f2c7cc060171d4
                                        
                                            GET /ec9fcd758df74f805f29f72e8545d13b.gif HTTP/1.1 
Host: acoossf.top
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mgcqnd.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.170
HTTP/2 200 OK
content-type: image/gif
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 902313
last-modified: Sat, 12 Mar 2022 15:17:28 GMT
etag: "622cb988-dc4a9"
expires: Mon, 17 Oct 2022 20:46:43 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 82800
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2F0hgnVCMks771SHsPrM9b4RFIx35cVT5fGxelkXH0YY0p0x7f0NzDZ%2FLGB%2BQ4%2Bhw9zcTcGPxmbmGqeR7u1hpZQWQy66jCLqR%2BVxojoCXtKHMPLZyEEcX55nDa32aw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dacc7575b1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   902313
Md5:    8b4a95ea7cfbb7fb4d2b18efca5145f3
Sha1:   d2966ecbeb7369620cce5dbcd15d0fe591d79648
Sha256: dd5ff25f4d6931bd3d2ef86c1a8901853ee2503fd2d6edb264a61abb37c2b002
                                        
                                            GET /template/m1938pc/images/video-mask.png HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 107
last-modified: Fri, 07 May 2021 10:47:36 GMT
etag: "60951ac8-6b"
expires: Tue, 18 Oct 2022 19:46:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced\012- data
Size:   107
Md5:    6a5ee87ff75437cb480df839f36004fd
Sha1:   eac66370f99601cb7febef320c9540d4593cd856
Sha256: c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa
                                        
                                            GET /template/m1938pc/images/video-play.png HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 1567
last-modified: Fri, 07 May 2021 10:47:38 GMT
etag: "60951aca-61f"
expires: Tue, 18 Oct 2022 19:46:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Size:   1567
Md5:    be7ca0a4a7c0317398a11162b1e09b75
Sha1:   5dbe6a02524cfbf5f5111478a71f91a9259056b5
Sha256: cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
                                        
                                            GET /template/m1938pc/html9/advertised/advertised.json?refresh=2022918Sun%20Sep%2018%202022%2019:46:24%20GMT+0000%20(Coordinated%20Universal%20Time) HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 3218
last-modified: Tue, 30 Aug 2022 09:27:10 GMT
etag: "630dd7ee-c92"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with CRLF line terminators
Size:   3218
Md5:    82824af6b9b6b5f4af4c324cbaee3af1
Sha1:   6749c6b517225d41ff1d611fce32e157d2829bd3
Sha256: 8861a70718411bed741d32f7e6fcf43eec49f7df095ba2f3bffb77fbb634338b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:43 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Sep 2022 03:55:48 GMT
Expires: Sun, 25 Sep 2022 03:55:47 GMT
Etag: "f15f202dca24527d3476d6a0c9cd5ef5799a3ee1"
Cache-Control: max-age=547143,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74cc96dc9e4a0b69-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6257
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:43 GMT
Last-Modified: Sun, 18 Sep 2022 18:02:26 GMT
Server: ECS (amb/6B9C)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3087
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:43 GMT
Last-Modified: Sun, 18 Sep 2022 18:55:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6257
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:43 GMT
Last-Modified: Sun, 18 Sep 2022 18:02:26 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3087
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:43 GMT
Last-Modified: Sun, 18 Sep 2022 18:55:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:43 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 22 Sep 2022 17:02:57 GMT
ETag: "c72a0f0f54b5c6aab3c86561c11a9b7256cc42e7"
Last-Modified: Sun, 18 Sep 2022 17:02:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 976
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc96dd4a010b49-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    f98b443bbf4cf2bc581f5f0651072862
Sha1:   c72a0f0f54b5c6aab3c86561c11a9b7256cc42e7
Sha256: 7068e3c2172612a4c3c5dd8ec82bf26c99eac400eb8fb1d04f8b404e8a471df6
                                        
                                            GET /upload/vod/2019/11-08/04/lklc22wtyip0421lklc22wtyip1010164.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9704
cf-bgj: h2pri
etag: "3fb6e3e4a895d51:0"
last-modified: Thu, 07 Nov 2019 20:21:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5666
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PrJg4u7mEgXFHVX5D82e6vQ9xAzpboLOeJKGLnNn7lrAbgi0ltq%2FS9g5Z%2FgdwQunW5Oith5Jem2foXalsiRmKoCio5I9Yn%2B8EAUdmHWC8pxv7GCHXjuBG6q6D5LiveaR%2F5Pj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd3d590722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9704
Md5:    6b9aea1c8871efb99537906e2dc0d684
Sha1:   cfa59de130d8d843b73eb8070a2760307bd96002
Sha256: 57dc1305f67f10ca2ee89887facc73581ca38eb64a247ee6d6ae57a31f5869f0
                                        
                                            GET /upload/vod/2019/11-08/04/bcp1f4w2lf00422bcp1f4w2lf04610301.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 12443
cf-bgj: h2pri
etag: "ba863d1ea995d51:0"
last-modified: Thu, 07 Nov 2019 20:22:46 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6612
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BWF4hlPBo3ip4YCdz%2FGb150tze%2Fnxhay3uaAKp991Au6Vn7YcsSt2VXEnjbYUXQkLTtVMzKZyMO4hoYjC3wd8KK0Zo5Lg7Wj7XhQYvj6Yb6E17cw9rJ%2F7x9cqfLsElHrgfJN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd3d5d0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   12443
Md5:    9c76c1097d6f21497a1a6a6714df1152
Sha1:   054d48a0acb17226d72b58b4dbef3439a9007cc6
Sha256: be97aa9f12fe839126f0249a7838517a68e4069040c25afdb88bf8d5c9f71190
                                        
                                            GET /upload/vod/2019/11-08/04/aepla40gkd10420aepla40gkd15410140.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 6483
cf-bgj: h2pri
etag: "cdae7bdba895d51:0"
last-modified: Thu, 07 Nov 2019 20:20:54 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2570
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0XlaQmVbQnyCOj1SXMlbclR5jepLM82FT8wF6zqtTPdO%2BxmHiNAmHCeikehx7GcrbMDyx5WUVjcp%2BO3B2PSBF9bv6e8l6l5ckiUzQgzjNG%2BualWgHDNtNiFCo18r7LodwwQ8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd3d580722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   6483
Md5:    1c31c9c762cf066fafe0baaf590c6cce
Sha1:   09ad079788ec0478453913286d1abbb6421c7b51
Sha256: 207d0f098f3ff67c2e1e831c31b347c6b67cd49aa5c18a5be07a696c04b6fe76
                                        
                                            GET /upload/vod/2022/09-18/12/wb3l3jeb4qb1226wb3l3jeb4qb335841.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 8078
cf-bgj: h2pri
etag: "46783bd516cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:33 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TKfJIfpZLvBVgYqlKbG5tGcPIhPpetFXpVPM9XY9QbgEZonIHiwRf4oNn0AZ0ff2KUKzamiLKbkHnf%2FCCN2WYohaDK2usQaoEFbcr%2FNEDX8MKN3lHzduSWUbUsLfNrQJ0ulr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd3d530722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8078
Md5:    69d98b6f06e7818e0b912b1c2b35e49d
Sha1:   75224d0107b88e5f8b5f51aa3f4284455260c08f
Sha256: 032a7d21d4a88008e144e5134d2830c7fdf86898c8db9855e5104e2149d19482
                                        
                                            GET /news/index.php HTTP/1.1 
Host: mang.tiryakioyun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yaojkd.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         20.205.43.35
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx/1.21.6
date: Sun, 18 Sep 2022 19:46:40 GMT
vary: Accept-Encoding
content-encoding: gzip
x-country: NO
x-cache: BYPASS@waxm3g7zj00000f
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7402
Md5:    099ec6a9f3760f34bae9ad34e8ae05ff
Sha1:   e3cbb79ecb60d0c10a2570718144246890849859
Sha256: cb9c1883c499c9e793b61b5366618b4799f26587062cc59ad537603f6757d6a3
                                        
                                            GET /upload/vod/2019/11-08/04/3bifaihemqk04233bifaihemqk3410367.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 8232
cf-bgj: h2pri
etag: "6d88813aa995d51:0"
last-modified: Thu, 07 Nov 2019 20:23:34 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 402
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mh175tc94f2gg3ZXFxYQ29iigMwzIYT67Ylylo%2FjGINGx6%2B3EVXo7IejnAIBRIIE7AGoj7BKXNQFNSPV2kRdQBtV59A0SgYn7A%2FOV2%2FQtwVFbZK9b%2FwEPGEz3JnzQ6EBLdjq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd3d5f0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8232
Md5:    a73d451f434199bc32ac4e47adacd8b9
Sha1:   7b4511ba696b941fc53d7b57d6e7f9b7dec252b9
Sha256: 332ba1e012d64de5a52bb7aac59def04af52caf739c16ccdbc21624bd441944e
                                        
                                            GET /upload/vod/2020/08-03/18/yzo1jeyck5u1802yzo1jeyck5u53805.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 7907
cf-bgj: h2pri
etag: "35f1f7407d69d61:0"
last-modified: Mon, 03 Aug 2020 10:02:53 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3363
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GBl2I%2B3XhGANiAp0UV6atoVGylZxxE76aUGIhmdQCQa73mCTXxpO6X1%2FWAn2nAFewxrgLZGuApSDg12VmvNOLRCvIc9ilbrZAvx8OVd0ln2p%2Fyn65GUqFNysVqnNFzd1J0Yp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d8e0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7907
Md5:    13068738fb79cdaa0cb5cc5a289f6460
Sha1:   c35bc9fcf5866132235be45c0167fe40cbf3a009
Sha256: 79440cee1f391c9bbd2110e98ed30e15a5db405bf326a7f6d521eccd4f1f7bc1
                                        
                                            GET /upload/vod/2022/09-18/13/evxhwc52xd51302evxhwc52xd5236127.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9071
cf-bgj: h2pri
etag: "a7c1c7d61bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:02:23 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6669
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pO9F14JGt5cNYpUDiALVxrVP1wdLfP%2BMqoFZ5eH%2F%2BpcaELAquuWFvAXiW96i8k34EaA5GTrLnPSQgpjdUkhtIcKPR%2BXkIhVmGhpyBdCFS6uVYjovK8LO%2BEXJbyXwU4wNRWXX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd3d600722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Size:   9071
Md5:    d5e047ec6be444bc33bf45efbebe4867
Sha1:   f44c625da5e903a547f77bef34c3b2457652c8ac
Sha256: feb648be4f5a841ef5b36eb012f4fd1019cd676f334d416e52a92d0967f02cb2
                                        
                                            GET /upload/vod/2020/08-03/18/1qfhxu45q2l18021qfhxu45q2l54811.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 8097
cf-bgj: h2pri
etag: "ca757d417d69d61:0"
last-modified: Mon, 03 Aug 2020 10:02:54 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3363
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iacD0qUVQZ3jz%2BGagbqQAEgec6gUAwMg3ed3hfslkU54JA4pJyE2iBSO8p8031QP092Av34A1s4tUAp4Pz7cvVKoqsk2dfq1579OOZXJV7Z1b3JOj7PBzLt16bP%2BU9zFKz8P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d8f0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8097
Md5:    282eef133d233c5824c845090cf33aea
Sha1:   db514d552cfd09de887edaa8fb20245ba9367192
Sha256: 8237e039d7c42850cfb4e7351c2449a536da02657b59a368bdc040557f99887d
                                        
                                            GET /upload/vod/2022/09-18/13/fdqockghnzx1301fdqockghnzx066041.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 8870
cf-bgj: h2pri
etag: "783bfa91bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yHcyna1CzlUljr54mCEcjv17MliV2rPuB6dUTase9B4tBb0Qb%2BiFztloGGTnVIwnCuWjj5%2BOG4kQBSb8ybEcZTXStSHkJZe7pGmrX64AzbWDcH%2BENlTIoBXiI7WbqtrR6iA7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d880722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8870
Md5:    02bb2f03e004c58f8c131222a3d327d4
Sha1:   5549899e0365038ac5bacca9672e3a5892f01aa3
Sha256: 5cb5f8f1fef1ede1eb32cedf5963bc402b0c869721ab39fc691bc8449d66c82c
                                        
                                            GET /upload/vod/2020/08-03/18/ctsk51eiqw51802ctsk51eiqw555817.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9273
cf-bgj: h2pri
etag: "c283c427d69d61:0"
last-modified: Mon, 03 Aug 2020 10:02:55 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3EVEV0Wqz4HSRMLBBmVfgxv%2BljCkz11XtkyeCT4a%2Fl4r8andVL4HMoU9sYHVKLs%2BGV8pDdyN8uSpp6pWS7AEneJkzy6tmNNPeA6CzFBNQlmhXl2QQbWjV4YqUegXzPC5Ox3N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d900722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9273
Md5:    7d1ef202d21da87056dd6e67184cc899
Sha1:   f9c2aec87aba914ca18856bf24630bb2ad76d2a9
Sha256: e9401a0afbbbce49556ee62164156ba1fc42ab8bd1ce4541c42b33b5a5efb989
                                        
                                            GET /upload/vod/2019/11-08/04/e0adlpy1ggn0422e0adlpy1ggn1510257.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 11893
cf-bgj: h2pri
etag: "aa5166ba995d51:0"
last-modified: Thu, 07 Nov 2019 20:22:15 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5666
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hfwih5qBLtDcnGXOWLH0focyaV4VUiQ3uDH41o1VgK%2FMbM9XAs2ebQlZyHYwHcWLN71NTMSdpRenfntDTve2si4ExqGXJWqwTq2%2BJ7U2mUtA%2BBoTDXSsq6Bt167o9ZsfEl9W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd3d5b0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11893
Md5:    7b1186c5b83abf23aa1554194f6ad4fa
Sha1:   429ee1d15f6fae40d705374461e3837e5dd7143a
Sha256: dac03612c4ed9b01a8e6c28653e094328ccfcf3c8ab42df03755fa80effb658c
                                        
                                            GET /upload/vod/2022/09-18/13/2wabyjrn1td13022wabyjrn1td246129.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 12173
cf-bgj: h2pri
etag: "45a84fd71bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:02:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j6WrTTMWcMp8d%2BXP1yykrQ3kI2ftYhLN8aKIRJds4RKe0wLjd0LyiAFf4pSEgsBXwqLROB7klPkZjl%2BYvMvJNPNF8XSDKBZDA3W2KY7DnSp2a8ihhB0amAbdBwZd4zEuuBN0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d7e0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Size:   12173
Md5:    d9104bb097207a3cb42a9ba65c950f20
Sha1:   da59345fb86b0c4be55bf230e464f8cbe75055c9
Sha256: e65bf669799516786bc6586a5115113e5c9797267d6237d853b8e6c749851cdd
                                        
                                            GET /upload/vod/2022/09-18/13/jyr1vvarqxo1302jyr1vvarqxo256131.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 12529
cf-bgj: h2pri
etag: "3818e1d71bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:02:25 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6669
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RSLsfyfzHn1Vqp7ZGkGJ0QfJad%2FeV9FQuEmSDCUDoAMNzClqgOmRK4EAkiK0vXsulqE1B8V8rn9L%2FhZ0z6mQoDASwTS1jDLD6%2F6kPeVEnYFs4snhwWaqN8mB5RSzG49OVQcE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d7f0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Size:   12529
Md5:    a8bf5b5c05834772e34ea8a891710e23
Sha1:   32c22e9ccbce19e9dafb28fd4b20f8ed645679bc
Sha256: 1ae29d567c5f8ab90a76576d53f75efe1c69e2250eea137b7a3c5f1cdf00d119
                                        
                                            GET /upload/vod/2022/09-18/13/hvo5vfuucr11301hvo5vfuucr1356081.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9846
cf-bgj: h2pri
etag: "c66242ba1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:35 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IHBvR1i2y57El%2BEXV%2BnkojkwW8DeVrLw%2F1U5Nv8WjxAPxfseNjgoXAetmByz%2FJPtC2%2FM2FkxVJzg4VdLpjbpWhpMWVYrOG730LqnZLWgU6HO45KuezhNiSyQyk12wwjC5ROG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d800722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size:   9846
Md5:    046eb55bcd7430bb48848758976dc109
Sha1:   cb049ad6242e54f42016a199e513ba490dcbbd11
Sha256: ed31050af6cc4157726cf7b80a94f97c20d5e47257b5532f46d8d0e15ea49cdd
                                        
                                            GET /upload/vod/2022/09-18/13/0jg31xtcc0m13010jg31xtcc0m386087.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 11046
cf-bgj: h2pri
etag: "d0f0debb1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:38 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uhqJIZFSz3UmI%2FkstXug7n3aXJJqZEPZPha00MNhKrYyPgULepIq2tRihHE%2Fnl7VXZJ1vy26EtgbC0E2FPZdQMDQtzt%2B2xunsJux2AQZGXJMWG7G6pUqBouOZESswoXIQ4rU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d810722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size:   11046
Md5:    991849838856226a056b06b3eb702e3e
Sha1:   344b30c7dd3157bc128e133f331c3fe5a67b72c4
Sha256: e5a6ac53b461c9311bea993fd6077712bb3f463a797175497ba06148fd50b4d1
                                        
                                            GET /upload/vod/2022/09-18/13/0q2ql2cdblx13010q2ql2cdblx406091.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 10478
cf-bgj: h2pri
etag: "9ef2f3bc1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:40 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2570
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qIs5dWEJx7Ni1EljgozqJ8LD%2BfHSkXmzcuOeKqlny6cB720FPSvI%2BvhJOffhQfSnedKjr6czVr0C%2F4Nfq7kOIO76rzQFH9vZTT46yDZlq%2B66IL8k54BIa1fNFhj7HgShYGBn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d830722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size:   10478
Md5:    29ebbfa0db3e37b074b99b1814b173a5
Sha1:   32c8e880f84fbcda68dacd93c8b77e1075d620ee
Sha256: e5087b5bb3c29723aad7d49e6f1549350de6d656422fff312cc921da83ba1d96
                                        
                                            GET /upload/vod/2022/09-18/13/dnkmwmudig51301dnkmwmudig5046037.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 7843
cf-bgj: h2pri
etag: "4af8e9a71bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:04 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h37Q5vdbtwP6EpxIi9QPCU3X46q%2FxF0NumCFXNL2GZzI9Hc%2F9IoCDdeiHHDIaPRzkSqxNtsy3B9EfufLeLUV837D0AV%2FG41W4G6p%2Fyis511nvbq9y8gptlAy4hAazhdjilSp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d850722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7843
Md5:    bbffeb709423dc0ff2221628f182c020
Sha1:   a9f7ccae2b0127563cce0329cfff87b1120edc0a
Sha256: b0e80eecb3b184b358b75133c9026f98b0efea7c6e829c744b1dcca8a86b5b40
                                        
                                            GET /upload/vod/2022/09-18/13/dt1thhwl5wl1301dt1thhwl5wl056039.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9267
cf-bgj: h2pri
etag: "2d1b6da81bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:05 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PSDoL0iUefGQlEw0TJRhZlzB1FLVEbDLfRrI%2BOq%2FEYfekLtG%2F1JKFEOO0VqOhodwslEPmcJMdK45KdTf8Ki6lQhruzIfR8%2FjnnEWIx8CPtbAE%2FjrTmrJWXZsDG2KdX3VD3Tn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d870722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9267
Md5:    ad4517eff3f949a1e836b97324b70d2c
Sha1:   a726b6395801bc8260372ae1007043f659a54cee
Sha256: f91cb25c0c368bbd3e6c39911771b073b6a158d7d8a8ba950948ed6ac9e1115d
                                        
                                            GET /upload/vod/2022/09-18/13/2yepwnnl4aq13012yepwnnl4aq076043.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 8721
cf-bgj: h2pri
etag: "edbf94a91bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:07 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fU4BfpOb%2FpC%2BgBOOtm2JdOPGXzGtJl6M2gSAYdtLZD%2B%2F3T9hHPg4qjuB06rvfRhRYuyMBYucJ6JvVevrx2Gq2w0%2BqHVLatB7VJTW2OPZ6%2BdmFEYZ7%2B5kkyYB%2BT0%2Fza8UhtKn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d890722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8721
Md5:    c0b4deef3b7b6e455c3dabd4373e971b
Sha1:   01b2e03544228cc38144e88fd75b8de31e8e6bcc
Sha256: 4e254e0452b7b1d02f74c05bb5e3b84d7190632e76098d01339c72e2da9e2678
                                        
                                            GET /upload/vod/2022/09-18/13/ysus02qugpp1301ysus02qugpp086045.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9122
cf-bgj: h2pri
etag: "457b1aaa1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:08 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U%2FT%2FuZWxAYZGjInT%2BKoeOZBtmekIIo01zQjBlJ97Itt6pw%2B30gcw4shFneDR3NBneqCloFpCrms467K8i1n5G2TsXwwjdx0tHC5RnijCyQoMYM8ZjGs0foLrKi5pb7EBHE76"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d8a0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9122
Md5:    f6d65c635c33ed84c3d20b9fe8e0ba73
Sha1:   53322f675b9d5fed33727ce5c7ca563a26580cea
Sha256: cba331a8de5f714ca097aeb155e14d6dbbfc53b314bc793ed0e000d4eae2aa9a
                                        
                                            GET /upload/vod/2022/09-18/13/1gtvxulq0nu13011gtvxulq0nu096047.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 7181
cf-bgj: h2pri
etag: "980a0aa1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:09 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HEBqqSuRb4rygCGj8zF8breH41RQJ4LoQ7nohZiBVztTPjMnePVE4gdHiqXMBz5a1dujddusjx%2BgRb1hr4eVFwpI9U%2BZw324lASdsvFtd%2Bmt1MV4lIXQYNgWw%2BeSltR4a496"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d8b0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7181
Md5:    36be1f2b24491b56fd8d6e7ea5f9715c
Sha1:   1be456f0ef06e94e25394a48468f444770a89b05
Sha256: 6cbb7388287d11c3c14be43ecde3588a3639edb0642c1646dbbce0a6283efba1
                                        
                                            GET /upload/vod/2020/08-03/18/ey5y1dqdsuu1802ey5y1dqdsuu50781.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 11695
cf-bgj: h2pri
etag: "c52df03e7d69d61:0"
last-modified: Mon, 03 Aug 2020 10:02:50 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SCPqAZYP3aOLxcZpY6p92NPyNhnM53CuUUe%2Filwx4bjeUBMzcd1OhGxFhRhGVGQa6LWnMkR9%2BKv0Bd2QDLd%2Bp23jOMvB1T4vt8giuWSkN3lx6AFc%2F4S1av1UeC3Zj7bTMdIU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d920722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11695
Md5:    d66dc58bc61e355110670d05fddb0ba7
Sha1:   813c8306b21d29d3600316bd7421e1c903705675
Sha256: 2a88141257a76b777d9145c48ff65f1d5e7bb47a88a8684da52624337564ac3a
                                        
                                            GET /upload/vod/2020/08-03/18/52dkakaggmq180252dkakaggmq50787.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9074
cf-bgj: h2pri
etag: "571653f7d69d61:0"
last-modified: Mon, 03 Aug 2020 10:02:50 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bgs6JsyHwOHjarCceWTsfec0N16GIVi9UWiaKShOlMiU0Lt%2B25ViG3%2FjhVA5YhgQyR5HzBeKtCsCXfSHhJMSEySk7RDvNR6OdPbADN1QApsR9eoaKuzv%2B5iZz1I41CVNzf%2Fq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d930722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9074
Md5:    c5945ef92abd18b533613e810d1e34d8
Sha1:   95f60993099b34bf35095c9e7309b4028f8ccf56
Sha256: fbb395c763f92dffc1828c4a32136a6e40247b8e7d25a098598eee2df7afe048
                                        
                                            GET /upload/vod/2020/08-03/18/hksmeuisbki1802hksmeuisbki51793.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 10637
cf-bgj: h2pri
etag: "c34aef3f7d69d61:0"
last-modified: Mon, 03 Aug 2020 10:02:51 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2925
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c4EoPdsJL%2FkW4n%2FPyU40hUB%2BHvCWk0VVRkecm9TRvuSXTahMYFTCFodr1JZgYY%2B8X4FmQfW6ug2E252IePMIuo0y82W2w1yOQDaZYJlJUK27BedllpcDaQ637uKM0BH%2BA%2FTI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d940722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   10637
Md5:    a529e5de3144c4baf514924de49e8e79
Sha1:   cff295edf40edbd1b738a47bcb5b71f7783ccf50
Sha256: 9aff5423ad93bd4361f4a2141dc7f848d3da58577881e288672b66a87eeaf860
                                        
                                            GET /upload/vod/2022/09-18/12/zdhgtozmfgw1226zdhgtozmfgw345843.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 10734
cf-bgj: h2pri
etag: "a2ac8d516cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:34 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1HZb5iT8qn4VWr7B7FyRsqx5UKKZU3P5aEZCYsmW5Js3JE9gLxOO0tAgW%2Fo5YfYZha8zWm6OIwdcugLkD%2Fy%2Bl5FrCrnUgI9b8vMvdaEJeXr4ElxhAOAjcX%2BPkSM9s5OxnwtX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d970722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   10734
Md5:    24f7146b16579faf73280a2599383807
Sha1:   5c7506c0e44672811872780f542f0c107f8d45cb
Sha256: f006decd71b946fb558f7444a9a86f75f05a86fe2019450c763e8572f864c76c
                                        
                                            GET /upload/vod/2022/09-18/12/14amajvkzy3122614amajvkzy3355845.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 8187
cf-bgj: h2pri
etag: "b41050d616cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:35 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6pQyA3E%2BvlJBhAwcBmK1NWUL2JqLMrSNjkvnFqPm4DCEe6JMEyGBRgPTNHPAKTvL7UkKpmUTCgQx9ZEaMkxZXI75ltJMsr5R2e7C1uBp6EnJHZhxEBQ7sAb8YnWIW5yPZ82"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d980722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8187
Md5:    aa60bfc4b8b851ad2d839526b1a42a32
Sha1:   7f3fc08751aa6454deb53b2ea35955fbff88e026
Sha256: ebd59b8e74aab6e64b96d98426816042364e2c44fb712e3f903a68975b1bc73a
                                        
                                            GET /upload/vod/2022/09-18/12/vevuc1gdwfu1226vevuc1gdwfu365847.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 10348
cf-bgj: h2pri
etag: "d959dad616cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:36 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b2TPUZni05lZBEHjz3xMnH8BPS67Ii%2FJrFg0MEOEFvV%2Bl0XbkcYb0FoULw5QNUUY29FbOysDkptRq2r3kI643r7fmnnMpTX%2B3qbDs318oXOySiRtOxQyj2vsFcnTZZEVi7Em"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d990722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   10348
Md5:    d16379ca1ebfc0e17916dde0a9302507
Sha1:   f2b4016eef05b226e763d3f26017e1e5a810d1d1
Sha256: f499a23fec8ee10af245c774d54580431dc234bf4df9564a0b41c5551a817943
                                        
                                            GET /upload/vod/2022/09-18/12/p4ohr0lfdsj1226p4ohr0lfdsj375851.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 2137
cf-bgj: h2pri
etag: "6013f6d716cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:38 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JFCxbtCjmkRpnmIEWRQm6fXYIyDWvZGLEzROB4978AAjZG2YEBp3U7Dbabyy3qCbHmgO%2FTsGLuw8JfdHjagqSYUOaKyX6zwKtxeIMptwZty%2F3wV55%2FPFG2VHDG5z4SBMjaIN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d9c0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   2137
Md5:    f60a2be3954157becbae17516ecf8b6a
Sha1:   84bcb66fd793a4a067d48b22d315a9346fbd037c
Sha256: bffd81f1242115693f3df34da9a8dbdba864d73d6186ca212a2189e0cd25cd67
                                        
                                            GET /upload/vod/2022/09-18/13/3j25ivzmcx113023j25ivzmcx1206121.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 6108
cf-bgj: h2pri
etag: "34222dd51bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:02:20 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6845
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9unNg5E56wlE3zXLj0qFW7onEi%2BiDYSFg1r2EqtDyOellvJbVsqNBhjlgbb8X1qKPykaC2XKwCkI324tXtyj1IeVBhCo9%2FaVE%2FMicjQDT69%2BNAKXlbbx%2F0Y%2F%2FNi%2FRp0M60mL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5da20722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Size:   6108
Md5:    5f6ce35f8b0c0bbfe7e37f0b9f65404d
Sha1:   47834a5c6e32c7b1b6c23462f93282305bd6a49b
Sha256: 86b72355c4055cf5a42cefbab6b191e0f9aecc231e921cea989884c0fc37e428
                                        
                                            GET /upload/vod/2022/09-18/13/ko10sxaghbm1302ko10sxaghbm216123.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 8025
cf-bgj: h2pri
etag: "9ea6b2d51bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:02:21 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 35
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lWDX%2B4REIwaKyFIry%2Bdt3gsUsGFTM7UdbnkvZg6mnsFt7%2ByRd0kwnYTv8gdinWtb9Mljl0YhWTyuSYI1ImYjJuX8lxnWBH%2BBGTN6ZuDIRE2emEkDS%2Fk2VWM7JhpKKv66Ia%2FF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5da40722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Size:   8025
Md5:    dcc1be4235a97b91e3fe66b55ef330b7
Sha1:   b388ec6bba9d3a67832b8056a50cdde9af10ce79
Sha256: 44dec2fa56349c4cd09c7b1f163e1713f567efd8df9a8517769685e2dd8a6769
                                        
                                            GET /upload/vod/2022/09-18/13/4uiavexse1e13014uiavexse1e366083.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 11173
cf-bgj: h2pri
etag: "2d70d1ba1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:36 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SE69SIwPtVK4DZ0%2B4kXC7IQrO%2BHAA4qt%2F9FOxTQpixOCXukqQNWJZTgQSy2r8p%2BHldgwBypMPIC6yFM9INuKKW9abG7zhoeNXu10atV5FbRxB3jSDNnbP53rFm7E3pBDz1pp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5da50722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size:   11173
Md5:    c6c2740b98e24a084d2c0e3a1f6aa5a6
Sha1:   bb196ef8c9cfbf510c9619f19352b7344e4cd1cf
Sha256: 3293b06bd92b3faa45f43d3bb815dde713371b2c7b18acedeb7633de22439305
                                        
                                            GET /upload/vod/2022/09-18/13/iefqazvnahr1301iefqazvnahr396089.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 11017
cf-bgj: h2pri
etag: "41a969bc1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:39 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DCLQ550IUEicM1fjhvIfTVFmBHT6i%2BJxT%2F8v1Yrit0nk5XUIPsWzhmIS1ylvKClOsi%2FOD6UAiByXLrQqiWdZUNQYrr3UcvCHwHdVWEjsK6TzYO%2BYohfiIumcveVF4mWTCoSi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d820722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size:   11017
Md5:    adaf5c869a9bded192711d1020e47aaf
Sha1:   8eb2801da9a4581c67d02874dfc0608b34da2f83
Sha256: fb0608cbf445de3bb6ba94698243583501315f17f017461bcafb0da99a16b8cc
                                        
                                            GET /upload/vod/2022/09-18/12/hoqhlkzueqf1226hoqhlkzueqf365849.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9994
cf-bgj: h2pri
etag: "d37b5dd716cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:37 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eFRH6RfAJoao%2Fivjank6vpObqkFWlD149g0waQ4aw1NraQ8PfMYLWNo%2FbL7j0YDeSWOugyU%2BBfMAw4o4i%2BTcQitIPPLh9kw%2FVPPnERMv%2F2v2DrqjyBftRybRcPzBaA2t8Hvc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5d9a0722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9994
Md5:    e1f597c22c84ba3a12f6c3c12d3df077
Sha1:   926f7efa8ca7250f344b8ec8f1c4cac055a53723
Sha256: 4314f523206a90f2c3923a768adae7fa34351cc04c132f4f0e60f25a7d69dfff
                                        
                                            GET /upload/vod/2022/09-18/13/2sgshvngsgg13012sgshvngsgg376085.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 10998
cf-bgj: h2pri
etag: "fcf356bb1bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:01:37 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2842
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6IiZAU0G4KGpj2gfP2P4RGtRbn89WSZfuoKq7OO0OXlcshjpK%2FMsrn%2BpJCYe1a45kR7jAc8luqENRHJggjeF8%2B2B53ytaLs1HYOYqtw5%2BwBZX3s6rlYg9%2B66T8NeQPW4%2FVaQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5da70722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Size:   10998
Md5:    14d53539e3f371796565b0cdd05445c0
Sha1:   bc0e7c8f2e64a5c51b7b7afe4d29d39f82be67af
Sha256: eb2c97e99fb4c6d1396432f5c9f97c77dfa91bdf024b844b7e35da3dda26360f
                                        
                                            GET /upload/vod/2022/09-18/12/phxd4hruldx1226phxd4hruldx385853.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 11367
cf-bgj: h2pri
etag: "d7277ed816cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:38 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GW2y%2BfXH%2Bw4AD%2F%2Fo%2FJC%2Ftne3WLYTZ08Yu4zWpIs76EWwPJ2k71WgGHzBiA0GTjqV%2Fe%2B5aefC%2F00V9FLk9Ymn2eC14vGxMtu2Cs2X6sOQ3smzqrSgOvHCXvq5odZ%2B2humFoTH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd5da80722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11367
Md5:    a4cbbcdd4ec1e677fd0433177e84de31
Sha1:   b3e7b2ca50af1f8abc46aafa9c22dc04e99c3d4a
Sha256: f7eb5b9a99c295989a9dcef75576bf649630f1de62ebc1137218d940dfb7a502
                                        
                                            GET /upload/vod/2022/09-18/13/xbyc1w3nfss1302xbyc1w3nfss226125.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 9691
cf-bgj: h2pri
etag: "508d3ad61bcbd81:0"
last-modified: Sun, 18 Sep 2022 05:02:22 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 34
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vApWYBE%2BVt%2Fhn1Zi5oI9MA3s2UJdR1Q9UJ97qViDqPIk8qeaKLbwKdIqw7oRreFPnn5cDtUrPlrCV761C%2B3suhR1UQA%2FKhSjzSON9oRj76fcJeRG6ezAYCL9R8W%2FoEyJxGrk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96dd6dc60722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Size:   9691
Md5:    e4a9fc8d5e33f022738488fc221a038e
Sha1:   33ebb2835a52affea89d47b1555527701795676e
Sha256: 0d5efba9a02db56071ab6485c323e8083ef5212baa171a51da4dda13b40e3a79
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6257
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:43 GMT
Last-Modified: Sun, 18 Sep 2022 18:02:26 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CEA0DEC5956E80A49D7E3FBC08AFC5D2431512C5E2498284351AAA680E2594A8"
Last-Modified: Fri, 16 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4619
Expires: Sun, 18 Sep 2022 21:03:42 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "EB3BE6466050395AD49AEC95463EF70645C3BA5BCF335C94B640DF7D36D9357B"
Last-Modified: Sat, 17 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12617
Expires: Sun, 18 Sep 2022 23:17:00 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            GET /upload/vod/2022/09-18/12/2c1vunkmmgw12262c1vunkmmgw395855.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.174
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 11979
cf-bgj: h2pri
etag: "c94a1d916cbd81:0"
last-modified: Sun, 18 Sep 2022 04:26:39 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H5zN71vqvNFOdw5OwO%2BzlgTGScBjQXjaql7JfhLQxZD1hLrkbiKUXaMnsyPiHT3jPYqunJQT7mkeTHBRVaRtC3YfFftEzro8BazRmTRHAGylvkDoOOgIhYTQXtApTITtWD%2Bg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cc96de2f980722-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11979
Md5:    81e0a87673f8ab33229951140a58b1eb
Sha1:   b8a3ed0e359e02b33fa80135d3e0a340365947f4
Sha256: 017961c2ac85bb30a3262ae2e1c0bb950e2e501e9fc255a239aba9d252355302
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:43 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 22 Sep 2022 17:02:57 GMT
ETag: "c72a0f0f54b5c6aab3c86561c11a9b7256cc42e7"
Last-Modified: Sun, 18 Sep 2022 17:02:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 976
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc96de4b310b49-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    f98b443bbf4cf2bc581f5f0651072862
Sha1:   c72a0f0f54b5c6aab3c86561c11a9b7256cc42e7
Sha256: 7068e3c2172612a4c3c5dd8ec82bf26c99eac400eb8fb1d04f8b404e8a471df6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8B7645E554AB0D3561939B51FBFE1DD16E953A2C3ED90DC142E142DDACC97303"
Last-Modified: Fri, 16 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18522
Expires: Mon, 19 Sep 2022 00:55:25 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F5D1896A8CE4D72B47A97C9A9EEE775E2718322431D99570F702E3FA15840575"
Last-Modified: Sat, 17 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7829
Expires: Sun, 18 Sep 2022 21:57:12 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8B7645E554AB0D3561939B51FBFE1DD16E953A2C3ED90DC142E142DDACC97303"
Last-Modified: Fri, 16 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18522
Expires: Mon, 19 Sep 2022 00:55:25 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "95F1A7756EA6013BF074D60CFC5D5D5A6C735ABD76CE6BBE31D3A5015108DCB5"
Last-Modified: Sat, 17 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4224
Expires: Sun, 18 Sep 2022 20:57:07 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "95F1A7756EA6013BF074D60CFC5D5D5A6C735ABD76CE6BBE31D3A5015108DCB5"
Last-Modified: Sat, 17 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4224
Expires: Sun, 18 Sep 2022 20:57:07 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6257
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:43 GMT
Last-Modified: Sun, 18 Sep 2022 18:02:26 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "95F1A7756EA6013BF074D60CFC5D5D5A6C735ABD76CE6BBE31D3A5015108DCB5"
Last-Modified: Sat, 17 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4224
Expires: Sun, 18 Sep 2022 20:57:07 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:43 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 22 Sep 2022 16:28:01 GMT
ETag: "dca6d9b729a04f8ebb0957e564dbc4cba084709f"
Last-Modified: Sun, 18 Sep 2022 16:28:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2673
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc96defc2b0b49-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    595821a3469e36aec60a4182c2630292
Sha1:   dca6d9b729a04f8ebb0957e564dbc4cba084709f
Sha256: 88663ca8659d190ac1a116dad0349c0206cce14ba124b3481cd1ba77d20cd5ba
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:43 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 16 Sep 2022 01:06:42 GMT
Expires: Fri, 23 Sep 2022 01:06:41 GMT
Etag: "5c2b7e48584cedd28dbd37152e3189daeca72458"
Cache-Control: max-age=364197,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74cc96de990a0b69-OSL

                                        
                                            GET /hm.js?6f39cfb7fb3d2a5a22dc71959e2f8ddf HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11339
Date: Sun, 18 Sep 2022 19:46:43 GMT
Etag: e4d3196a1ae3d2bcd4b2776b54ea3b4e
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=1900F3C437C733CF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (626)
Size:   11339
Md5:    b633c27bd068771fdec334e38ef06d97
Sha1:   24b66d9fdfba95594365ed13ef589f5a61d7f042
Sha256: 1197c2fb30dec05f44274e94e39c5c3a79ec19477cb383177841509da0840cef
                                        
                                            GET / HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mang.tiryakioyun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:42 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   113824
Md5:    f95100d8f3d8c3cebe2bad520ba44553
Sha1:   9c966ddf3e0be4437d784d98f91681d3a4642991
Sha256: a17f61b9fbd6f5dacc789a829d2d59cec688ea80ecfd39f253eec459cedf57a9
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0C20F667C32A0C9FD8D0AD0F129D3989BD6A6BB9703B492722D2A91FB0E3FE80"
Last-Modified: Fri, 16 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4418
Expires: Sun, 18 Sep 2022 21:00:21 GMT
Date: Sun, 18 Sep 2022 19:46:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 18 Sep 2022 19:46:44 GMT
Content-Length: 728
Connection: keep-alive
Last-Modified: Thu, 15 Sep 2022 21:58:06 GMT
Expires: Thu, 22 Sep 2022 21:58:05 GMT
Etag: "6efb213f41e3f8bc5e2b777410a2875150838521"
Cache-Control: max-age=352880,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74cc96e03ff81c12-OSL

                                        
                                            GET /hm.js?a3bf9acdbb11a6af7d201180b0d6dd7a HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11343
Date: Sun, 18 Sep 2022 19:46:43 GMT
Etag: 52fb3165a4ac3b2bce0a6da3ac4dae3a
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=8C528567BFC1F48D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (630)
Size:   11343
Md5:    f405792f0491e59941901527b73eb871
Sha1:   6b208a742179d36427c057781c5142ee8c92bf20
Sha256: 9d00b7b8ce261948cec2a82ad1426ab4927a75d9d6a8b002948e17bfbfe8a045
                                        
                                            GET /hm.js?4c5f9fce4824f9c3d3f694403480c46f HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11343
Date: Sun, 18 Sep 2022 19:46:43 GMT
Etag: 6ed1b1d51f4dbaab080b014e6851b62f
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=468E20DDCC95AB2B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (630)
Size:   11343
Md5:    76fc319e988aea24cf31175e0b087aba
Sha1:   8c73e6350d783e2ee969ce2d7e53d51592c74f24
Sha256: 5a30d46931f65e9f3bacf00665d618d1b7948ee8a9a52f37ab337312580b782f
                                        
                                            GET /image/1-640X200.gif HTTP/1.1 
Host: uu99k.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.225.89.147
HTTP/2 200 OK
content-type: image/gif
                                        
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 117717
last-modified: Wed, 07 Sep 2022 12:58:57 GMT
etag: "63189591-1cbd5"
expires: Sun, 09 Oct 2022 21:42:26 GMT
cache-control: max-age=2592000
server: cdn-ddos-cc
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 640 x 200\012- data
Size:   117717
Md5:    90a809e02687e4f28872e33f66cd33b1
Sha1:   e878a5b152fd19e45108395805b9f3176b5fbfd1
Sha256: 3439fbaf8a34b02ea3ba9bf59892d702e615318ee526b9252cca882b880ce00a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:44 GMT
Ali-Swift-Global-Savetime: 1663530404
Via: cache3.l2de2[477,477,200-0,M], cache3.l2de2[478,0], cache4.se1[499,499,200-0,M], cache4.se1[500,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 18 Sep 2022 19:46:44 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816635304036643151e

                                        
                                            GET /73baa2446a9d453aa94fdaf9e9494fc2.gif HTTP/1.1 
Host: vesdsp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         103.170.15.66
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: max-age=86400
etag: "63188936-6cad4"
server: nginx
date: Sun, 11 Sep 2022 01:48:03 GMT
last-modified: Wed, 07 Sep 2022 12:06:14 GMT
accept-ranges: bytes
x-cache: HIT from yd11_02-cdn-g01-la2-56
content-length: 445140
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   445140
Md5:    8dc9eeb6e2f698ff336e098bf7c002a6
Sha1:   5be86ef65976a88e36ad3f30fe64d700f1883e0d
Sha256: 0de22c84ec1ac628f800ba4c39c5967868975d2cfc7d00d9244a6431925b9454
                                        
                                            GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=496412083&si=6f39cfb7fb3d2a5a22dc71959e2f8ddf&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.2.97&lv=1&sn=55480&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.mgcqnd.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 18 Sep 2022 19:46:44 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=FCD7922AAD589E12; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hg960x60.gif HTTP/1.1 
Host: 3p8801.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         137.175.35.2
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:48:55 GMT
content-length: 138679
last-modified: Sat, 23 Jul 2022 12:26:47 GMT
etag: "62dbe907-21db7"
expires: Tue, 18 Oct 2022 19:48:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   138679
Md5:    f0f206683c8403cc9c134ed746fa4aa2
Sha1:   6d0059005833ac269f9a33b50a87ed96529d0f71
Sha256: bdac228698ca07ca09d425b490a0bbe754e8f1a7f6da45ab1377c4edf9dcd38f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5075
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:44 GMT
Last-Modified: Sun, 18 Sep 2022 18:22:09 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 19:46:44 GMT
Server: ECS (amb/6B9D)
Content-Length: 727

                                        
                                            GET /obj/tos-cn-i-dy/85753eb21cd54e14aa7843f762cd0d11 HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         47.246.44.231
HTTP/2 200 OK
content-type: image/gif
                                        
server: Tengine
content-length: 454806
date: Sat, 27 Aug 2022 14:42:26 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Sat, 27 Aug 2022 13:26:45 GMT
nw-session-id: 202208272126450102080352140A7068A2j6fpx01dy
nw-session-trace: 2022-08-27T21:26:45.540738746+08:00 45
x-bdcdn-cache-status: TCP_HIT
x-length: 454806
x-powered-by: ImageX
x-response-date: Sat, 27 Aug 2022 21:26:45 GMT
x-tt-logid: 202208272126450102080352140A7068A2
via: n204-097-238, cache16.l2de2[0,13,206-0,H], cache4.l2de2[14,0], cache4.l2de2[15,0], cache2.se1[0,0,200-0,H], cache2.se1[1,0]
x-request-ip: fdbd:dc01:26:287::163
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 015f385d3fc56128f1a4291cfc24ba5beb6bb050174f8a4bde30a2f8504ba2b81d1af23526cac1a55c0544ba65e9a8f06af049aa6fb10d31566b09af1a690e91ed58ef22652af931b4a5db136e17599b70de2d2d794a56a990b6237e8c4a9c7dfc
x-response-lb: image
ali-swift-global-savetime: 1661611346
age: 1919058
x-cache: HIT TCP_MEM_HIT dirn:3:39098984
x-swift-savetime: Wed, 31 Aug 2022 14:32:57 GMT
x-swift-cachetime: 31190969
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9616635304043827056e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 640 x 480\012- data
Size:   454806
Md5:    a2adfb182a1e1629ab484d90b72f23c8
Sha1:   0301a7d9e60d54dd13e1cb528a0b22546790c026
Sha256: 7bcc06c7b13d9e1ffbff6e5b627b209b91556b3dcd39c8181f99548f150fc89b
                                        
                                            GET /128/960X60A.gif HTTP/1.1 
Host: zhibo128x1.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         154.83.25.141
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Sun, 18 Sep 2022 19:46:43 GMT
Content-Length: 538695
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 05:47:13 GMT
ETag: "6316dee1-83847"
Expires: Mon, 17 Oct 2022 09:08:31 GMT
Cache-Control: max-age=2592000
Via: 154.83.25.138
CDN-Cache: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   538695
Md5:    79a6bd621e989d305866cf3da25f3ead
Sha1:   43ff7c41e2e6fd4a9944bb5a6ad62673c1c079ba
Sha256: f0a59f510fc36a5570a8af24e87662bca9e0dd4225f39f72f0d94881505fa4f8
                                        
                                            GET /obj/tos-cn-i-dy/6bf175bd1d2243bba1a8fc1918ef7fbc HTTP/1.1 
Host: p3.douyinpic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         47.246.44.231
HTTP/2 200 OK
content-type: image/gif
                                        
server: Tengine
content-length: 670683
date: Tue, 13 Sep 2022 21:37:17 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Tue, 13 Sep 2022 13:28:41 GMT
nw-session-id: 2022091321284101013105707129C010C7d5mxx02dy
nw-session-trace: 2022-09-13T21:28:41.591336607+08:00 63
x-bdcdn-cache-status: TCP_HIT
x-length: 670683
x-powered-by: ImageX
x-response-date: Tue, 13 Sep 2022 21:28:41 GMT
x-tt-logid: 2022091321284101013105707129C010C7
via: n132-078-086, cache23.l2de2[0,0,206-0,H], cache9.l2de2[2,0], cache9.l2de2[2,0], cache3.se1[0,0,200-0,H], cache2.se1[1,0]
x-request-ip: fdbd:dc03:8:577::23
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 01cd6e94f1c933a302071a43dab825eccd72d6dea726a222772e511c98221f62d060ae36ccc72926b4ad84ae9a93b62c0acd97464c0a9c1b01858bac1dcb99975070e195bc6e6ca9dd20daae1c7d7467339447c9ff2910f867baf2e3067c1cccb5
x-response-lb: image
ali-swift-global-savetime: 1663105037
age: 425367
x-cache: HIT TCP_MEM_HIT dirn:11:72755278 mlen:0
x-swift-savetime: Sun, 18 Sep 2022 08:44:00 GMT
x-swift-cachetime: 31150397
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9616635304044077084e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 640 x 480\012- data
Size:   670683
Md5:    61c09a981829377054623156baf850e6
Sha1:   5cd5e1eaf04ef37423d10627843e7343f6d9cf1b
Sha256: 5db0fc0627b1e799b901b2b8b9776554140691b3a0af637830583ce11ebd5732
                                        
                                            GET /tu-pic/240-140.gif HTTP/1.1 
Host: pic.picnewsss.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.225.139.251
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: max-age=2592000
date: Sun, 18 Sep 2022 17:20:56 GMT
etag: "1663521656"
expires: Tue, 18 Oct 2022 17:20:56 GMT
last-modified: Sun, 18 Sep 2022 17:20:56 GMT
server: nginx
x-cache: HIT, policy, disk
content-length: 149597
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 240 x 140\012- data
Size:   149597
Md5:    f2d3e1a6f8899994610ab814f64bf078
Sha1:   9523d6eba5dd1ab466b5b2968d5d6231161e6ae6
Sha256: 06e958cd3720c7f7afb07142bc76c2b531df3aab1a58ef6d5f3a789f3cad0177
                                        
                                            GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=157993714&si=a3bf9acdbb11a6af7d201180b0d6dd7a&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.2.97&lv=1&sn=55481&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.mgcqnd.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 18 Sep 2022 19:46:44 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=21E335D0BED2CB45; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /%E7%9A%87%E5%86%A0240x240.gif HTTP/1.1 
Host: 3p8801.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         137.175.35.2
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:48:55 GMT
content-length: 113483
last-modified: Sun, 24 Jul 2022 09:37:56 GMT
etag: "62dd12f4-1bb4b"
expires: Tue, 18 Oct 2022 19:48:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 240 x 240\012- data
Size:   113483
Md5:    06e653b16b8380bd8ff599d09204f83b
Sha1:   02c928506c30bda05419ed0220617770c435dc7a
Sha256: afb56e7d5879a7ba5561a8b3d3e7454241e51ed81aab742826b418932720ef89
                                        
                                            GET /3p960x60.gif HTTP/1.1 
Host: 3p8801.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         137.175.35.2
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:48:55 GMT
content-length: 310536
last-modified: Sat, 23 Jul 2022 12:26:45 GMT
etag: "62dbe905-4bd08"
expires: Tue, 18 Oct 2022 19:48:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   310536
Md5:    25791847d9df13fa1bcd1c1c232449cd
Sha1:   b9b8702ec91f5d683f5aaa6a72d39cadfea2750a
Sha256: fb565694838c6ec0d6dede124d6b53576ea4c07aaee17cbbd1ea41dc200d62e7
                                        
                                            GET /3P-240x240.gif HTTP/1.1 
Host: 3p8801.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         137.175.35.2
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:48:55 GMT
content-length: 322371
last-modified: Sun, 24 Jul 2022 09:37:58 GMT
etag: "62dd12f6-4eb43"
expires: Tue, 18 Oct 2022 19:48:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 240 x 240\012- data
Size:   322371
Md5:    10b590fb68b248b758ae345f3cc33961
Sha1:   9e13b8044dc3e6bfcf6156977a32403f672b71c3
Sha256: ee081d5613e4bafe5733342028b1518f676b9572319146f2197463836993391e
                                        
                                            GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1007630178&si=4c5f9fce4824f9c3d3f694403480c46f&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.2.97&lv=1&sn=55481&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.mgcqnd.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 18 Sep 2022 19:46:44 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=496EB274E1400884; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /gg/960X60.gif HTTP/1.1 
Host: yaoji666.oss-cn-hongkong.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         47.75.19.91
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: AliyunOSS
Date: Sun, 18 Sep 2022 19:46:43 GMT
Content-Length: 95856
Connection: keep-alive
x-oss-request-id: 632775A323C0543436B5CE69
Accept-Ranges: bytes
ETag: "57557D6B489D522D480D9B82CE29DB65"
Last-Modified: Sat, 09 Jul 2022 12:37:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15928828585404051914
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
Content-MD5: V1V9a0idUi1IDZuCzinbZQ==
x-oss-server-time: 1


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   95856
Md5:    57557d6b489d522d480d9b82ce29db65
Sha1:   da2d3b35f0c9534e84e50310aeafe73173037315
Sha256: 4b96548579c0d9b380b10ce78bdb3e8edfd35e180519b319c6b1181e7b325952
                                        
                                            GET /img/96060.gif HTTP/1.1 
Host: taiwtp1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         220.128.218.220
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:45:02 GMT
content-length: 46855
last-modified: Wed, 09 Mar 2022 07:10:56 GMT
etag: "62285300-b707"
expires: Tue, 18 Oct 2022 19:45:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   46855
Md5:    2b9c30b086d03d90a45a9174aef7b408
Sha1:   e87dbe76669e2f402826dd598bb047d793b1e20c
Sha256: f1eb3044b464fb4b4b8f3e081295bc19cc4cddc9361adb34ad7fb73b93b25de6
                                        
                                            GET /admin/202208/630634f18a75e.jpg HTTP/1.1 
Host: images.xxootv.top
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         45.207.13.180
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:44 GMT
content-length: 25706
last-modified: Wed, 24 Aug 2022 14:25:54 GMT
etag: "630634f2-646a"
expires: Tue, 18 Oct 2022 19:46:44 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 280x249, components 3\012- data
Size:   25706
Md5:    003320de6bd2223be46a8d7e078a0a45
Sha1:   fc08ff33a5d7080674882770038a92384a1bc366
Sha256: 7ea0cfacef2fe5c94c4bf16a4b0a79a98009775e0b777adb11bafc1cbfcf2880

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /get-image/0xmAGT9KS9C HTTP/1.1 
Host: si1.go2yd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         58.254.180.65
HTTP/2 200 OK
content-type: image/gif
                                        
server: JSP3/2.0.14
date: Sun, 18 Sep 2022 19:46:44 GMT
content-length: 117593
last-modified: Thu, 10 Feb 2022 15:30:06 GMT
etag: "c4caa37b717580e8594587f32ca86470"
age: 215424
accept-ranges: bytes
x-application-context: application
x-kss-request-id: f130ut80n4hobs7go5ib5np8lk0gkchq
content-md5: xMqje3F1gOhZRYfzLKhkcA==
timing-allow-origin: *
ohc-cache-hit: gz3un59 [2], jnuncache59 [2], suzix111 [2]
ohc-file-size: 117593
x-cache-status: HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 640 x 200\012- data
Size:   117593
Md5:    c4caa37b717580e8594587f32ca86470
Sha1:   a645ec82581a0b18f67444b62a062059adf78aa6
Sha256: 208bafb1df6fa8b7929896b30415514e2dc59312332ec26aff058767fa81f269
                                        
                                            GET /img/200200.gif HTTP/1.1 
Host: taiwtp1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         220.128.218.220
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:45:02 GMT
content-length: 75259
last-modified: Wed, 09 Mar 2022 04:51:10 GMT
etag: "6228323e-125fb"
expires: Tue, 18 Oct 2022 19:45:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   75259
Md5:    03c13356e00c2033df2c88cb919251eb
Sha1:   f3a334a0366ddda6a87034f7d6c889c4d159dc8d
Sha256: 0c184e206259e8d0c54d3fc12d3d5332e9f6ff5f0404630fcb2daefe65fe1bfe
                                        
                                            GET /img/960160.gif HTTP/1.1 
Host: taiwtp1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         220.128.218.220
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:45:02 GMT
content-length: 165614
last-modified: Mon, 02 May 2022 05:20:34 GMT
etag: "626f6a22-286ee"
expires: Tue, 18 Oct 2022 19:45:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 160\012- data
Size:   165614
Md5:    499d402cf727956bcdb1a229ff10c05e
Sha1:   95bbdda00299532dab6ca13cec744d21c0f7ae26
Sha256: 20be363fb9c4cc867e6d5467daff447c1e9aa10feabda9fd943672b6672aeff9
                                        
                                            GET /d35467f31a1e415dbf061087c8c283d5.gif HTTP/1.1 
Host: n7181.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         45.61.212.121
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "62e67b07-a6dd2"
Date: Sun, 18 Sep 2022 19:46:44 GMT
Server: nginx
Last-Modified: Sun, 31 Jul 2022 12:52:23 GMT
Accept-Ranges: bytes
X-Cache: MISS from cloud-us2-cdnb-21
Content-Length: 683474


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   683474
Md5:    ba813a4b9580b3da278e68a1c3e3a954
Sha1:   6d843c3c02ad3270abd575c460ec26ed615578f4
Sha256: 574301fcb45a6820cf36903b271324e32c210c335539d8f1a406f000e1f0e72e
                                        
                                            GET /img/600400.gif HTTP/1.1 
Host: taiwtp1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         220.128.218.220
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 18 Sep 2022 19:45:02 GMT
content-length: 304522
last-modified: Mon, 02 May 2022 05:20:33 GMT
etag: "626f6a21-4a58a"
expires: Tue, 18 Oct 2022 19:45:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 600 x 400\012- data
Size:   304522
Md5:    e0a34183ace6e0dff373311780daecf4
Sha1:   48e4233e415d464e22ac1ff3d2135d20e4c31eb8
Sha256: eb3c73f48295ec7129fef667fd2734e038849817160510ea8cd01a4481aa0652
                                        
                                            GET /hy_personal/3e28f14aa0516842a2a1f3945a2210b49144b40fc03636f83fb6c3af33f4bb83/0.gif HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 177086
vary: Accept,Origin
last-modified: Fri, 13 May 2022 00:56:15 GMT
cache-control: max-age=2592000
x-delay: 30568 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 177086
chid: 0
fid: 0
x-nws-log-uuid: 98a94dd2-40f0-4e89-b7b9-403240231e0f
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 650 x 200\012- data
Size:   177086
Md5:    be83c16833e7818983eb893bfd657c71
Sha1:   0673c1fa8bb28651d23ab90b1f23323ea0bd1a96
Sha256: bd5f35daa2a7ac9430a7d1ab942fd88c2645b9bfaf0bba60f151f2efb9d0837c
                                        
                                            GET /hy_personal/3e28f14aa05168424fa80afa512d4767c40b66114c992edbcaac2af9d9ba2182/0.png HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 121197
vary: Accept,Origin
last-modified: Mon, 18 Jul 2022 15:24:44 GMT
cache-control: max-age=2592000
x-delay: 80 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 121197
chid: 0
fid: 0
x-nws-log-uuid: 7340f42e-16fb-41b8-843d-fb5f962b8e8a
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 650 x 350\012- data
Size:   121197
Md5:    c333d9318beb5b59bc7fd1dbe71ed7f3
Sha1:   7f59fbc05d4302bc5768755ed10aa58932bf8c7a
Sha256: 58ae8f93dc8f4805de239cc27796b1a97bd67acd9ef72cd7f0ed73119175d4f5
                                        
                                            GET /hy_personal/3e28f14aa051684245c4e0cfebfbd4b58a032ac4afb4e3c2b8b36dd7d3e56948/0.png HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 456390
vary: Accept,Origin
last-modified: Mon, 18 Jul 2022 17:11:26 GMT
cache-control: max-age=2592000
x-delay: 61793 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 456390
chid: 0
fid: 0
x-nws-log-uuid: 3179e182-e790-4f6f-987c-720597052164
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 650 x 350\012- data
Size:   456390
Md5:    24f8d711ff99c1b9e8eda597e520496d
Sha1:   0349e3b205f0e62dd5aa818e856efe8e7e1fe1d2
Sha256: 9079d8c7d39c6db6ab2e3421748cdfd1a55366b99304d2670fc3cfd48252f363
                                        
                                            GET /hy_personal/3e28f14aa051684245c4e0cfebfbd4b50a56a24a513385a602ad3f28c6b7e75d/0.png HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:44 GMT
content-length: 688878
vary: Accept,Origin
last-modified: Mon, 18 Jul 2022 16:38:19 GMT
cache-control: max-age=2592000
x-delay: 267 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 688878
chid: 0
fid: 0
x-nws-log-uuid: 05a82403-e4ae-4dba-9a39-96c88884b815
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   688878
Md5:    38adb06da8d7db34d62dfc1760cda2dd
Sha1:   862c5ecedd5add094b8dfb22c3087b09493a312a
Sha256: 89521c87c1fe061e63fb523bb11f2a328e9202574d73aa4c4e17de8a8f301c58
                                        
                                            GET /hy_personal/3e28f14aa051684245c4e0cfebfbd4b5ae29f1c75b96bd0a83bebaafdd18bfca/0.png HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:44 GMT
content-length: 1296026
vary: Accept,Origin
last-modified: Mon, 18 Jul 2022 17:08:22 GMT
cache-control: max-age=2592000
x-delay: 86554 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1296026
chid: 0
fid: 0
x-nws-log-uuid: bebfba4a-c559-4815-8440-70fe4c0451fc
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   1296026
Md5:    5f356028e5e94176f56a75568e49ae20
Sha1:   3796c4c950687811a1d1f80fd9e31e718bda0f85
Sha256: c6d85123315be8a70786b6699f59eecff590bc8fbf1a48a477bcb2cacd660320
                                        
                                            GET /images/62fbb66bab3ecbe918ac81f1.gif HTTP/1.1 
Host: img.x967.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.225.228.58
HTTP/2 302 Found
                                        
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/6bf175bd1d2243bba1a8fc1918ef7fbc
cache-control: max-age=3600
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /template/m1938pc/css/zui.css HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:42 GMT
last-modified: Thu, 28 Apr 2022 06:25:58 GMT
vary: Accept-Encoding
etag: W/"626a3376-164b5"
expires: Mon, 19 Sep 2022 07:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /template/m1938pc/js/jquery.config.js HTTP/1.1 
Host: www.mgcqnd.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         173.231.17.185
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sun, 18 Sep 2022 19:46:42 GMT
last-modified: Fri, 11 Mar 2022 04:27:08 GMT
vary: Accept-Encoding
etag: W/"622acf9c-1469"
expires: Mon, 19 Sep 2022 07:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /hy_personal/3e28f14aa05168424fa80afa512d47670c98e6ee97c11a60ad0f9c35a38b4b7f/0.png HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:44 GMT
content-length: 988610
vary: Accept,Origin
last-modified: Mon, 18 Jul 2022 15:22:35 GMT
cache-control: max-age=2592000
x-delay: 498 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 988610
chid: 0
fid: 0
x-nws-log-uuid: 9c72f648-155a-4f1a-89aa-e34f89e64297
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /hy_personal/3e28f14aa051684245c4e0cfebfbd4b564bf8a82fe24d215c37baf794f0f8b71/0.png HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 2668995
vary: Accept,Origin
last-modified: Mon, 18 Jul 2022 17:04:56 GMT
cache-control: max-age=2592000
x-delay: 144164 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 2668995
chid: 0
fid: 0
x-nws-log-uuid: 96514439-272b-4b29-a760-eae570a4d169
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /images/62f786e81cd529cdb973c2b0.gif HTTP/1.1 
Host: img.cuphf.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.225.228.58
HTTP/2 302 Found
                                        
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/85753eb21cd54e14aa7843f762cd0d11
cache-control: max-age=3600
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0 HTTP/1.1 
Host: p.qlogo.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgcqnd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         43.129.255.47
HTTP/2 200 OK
content-type: image/gif
                                        
server: Qnginx/1.4.4
date: Sun, 18 Sep 2022 19:46:43 GMT
content-length: 1362871
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:47 GMT
cache-control: max-age=2592000
x-delay: 739 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1362871
chid: 0
fid: 0
x-nws-log-uuid: 1b04851c-92c9-4136-bbf4-202da37c3b87
X-Firefox-Spdy: h2


--- Additional Info ---