GET mabarvip189.com/wp-content/themes/EvolLzd/assets/nc.js?t=18507
104.21.32.1200 OK 221 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/nc.js?t=18507
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (32041)
First Seen 2023-08-15
Last Seen 2025-08-02
Times Seen 43420
Size 221 kB (221174 bytes)
MD5 11998461d3d77dde9e7ef72a65e08429
SHA1 3863ac62c17ae5e0de527e1a8eeaea40e07c2531
SHA256 994aae2408fa3aaca7faec5f32d6b0245012786ee65eec40df3ab54b48992b0a
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/nc.js?t=18507 HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 53271
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ePWPzXpRwoRE%2FHN0%2BcE7DDQRq809D5au5TFJinUrRMNnfD6FhDxghw23I5yLCEsDpjAm182SZcSLXHh12UAIfLjDt2em%2FX%2F8WzsS2QY%3D"}]}
cf-ray: 9643eff4c9e656b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS member.lazada.co.id/user/api/getCsrfToken
47.246.165.111200 OK 634 B URL
member.lazada.co.id/user/api/getCsrfToken
IP / ASN
47.246.165.111
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 634 B (634 bytes)
MD5 82b6a25cb634be192b3c41ed6886b5a1
SHA1 1f365ed98fc33095c80aec8fa1253a7d177b24da
SHA256 b4a1f14c232a2c837f8e857618e0e6db6cab106659617d759ecac3b17c179f0a
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.com
Fingerprint 61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
Validity Fri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
OPTIONS /user/api/getCsrfToken HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-csrf-token,x-requested-with
Referer: https://mabarvip189.com/
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:22 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://mabarvip189.com
access-control-allow-headers: content-type,x-csrf-token,x-requested-with
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 2101406f17533655623694451e0f43
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01qvF2hw1lWoZrnGZev_!!6000000004827-2-tps-96-70.png
104.21.32.1200 OK 9.9 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01qvF2hw1lWoZrnGZev_!!6000000004827-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48123
Size 9.9 kB (9860 bytes)
MD5 2025ccc5c1080f0a0a4d2768ac63e1bf
SHA1 a4f180053433648878829f7499247a5b6725110f
SHA256 352048753e300041b1f4a748cde42beb808d76c42d634490ee9f8a902bcf38d8
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01qvF2hw1lWoZrnGZev_!!6000000004827-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 9860
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lHOm5j%2BrVvDdHnJylCGnZ3CFQne8YbaxTgFSFKiLvpPCSua6BzGOBuT5r7dDQNH8Aeyk6dFFrhIJZ1Ek1emZePltcMZ%2FTYrww1ebM%2Fmh3qqfVAFSos1zr%2BKeuQT%2BZW3zkO0%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff52bb8b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4085&min_rtt=0&rtt_var=5483&sent=116&recv=123&lost=0&retrans=0&sent_bytes=29107&recv_bytes=14215&delivery_rate=1172433&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1539&inflight_dur=50&x=40"
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
38.54.123.58200 OK 11 kB URL
g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
IP / ASN
38.54.123.58
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 10748, version 1.0
First Seen 2023-04-06
Last Seen 2025-08-02
Times Seen 57440
Size 11 kB (10748 bytes)
MD5 ece6673e477b4d7aca12f04dace5ed60
SHA1 f8ff7fbe231448a58d3989d84803dd66851b9988
SHA256 4352380f92ce7f9a4a4a23306b992bed10055dbfffe90987cc72083e583fc280
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/lzdfe/static/0.0.29/Roboto/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: font/woff2
content-length: 10748
server: openresty
strict-transport-security: max-age=360000; includeSubDomains
x-oss-request-id: 6878F57AFCD56A33384BCBF8
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15489323926058991130
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 7OZnPkd7TXrKEvBNrOXtYA==
x-oss-server-time: 73
x-source-scheme: https
eagleeye-traceid: a3b55c9817527576260396646e
timing-allow-origin: *
via: EU-FRA-marseille-EDGE3-CACHE6[2],EU-FRA-marseille-EDGE3-CACHE9[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE5[3],EU-FRA-paris-GLOBAL1-CACHE22[0,TCP_HIT,3],cache9.l2fr1[0,0,200-0,H], cache27.l2fr1[1,0], ens-cache1.gb9[0,0,200-0,H], ens-cache22.gb9[0,0]
ali-swift-global-savetime: 1752757626
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 13:07:07 GMT
x-swift-cachetime: 604799
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5f3aa17533619070068855e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 718cd66b391b68ab3fdf7b8e31488c0f
nginx-hit: 1
age: 1205
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdmod/im/5.0.103/index.css
38.54.123.58200 OK 245 kB URL
g.lazcdn.com/g/lzdmod/im/5.0.103/index.css
IP / ASN
38.54.123.58
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (65532), with CRLF line terminators
First Seen 2024-10-06
Last Seen 2025-08-01
Times Seen 3552
Size 245 kB (244906 bytes)
MD5 14b211d7861f6a1763b0dd277ea8c2aa
SHA1 4019c5c68e764aa307813f0b08d909790f001dcf
SHA256 61b6ef664087f09af2647aff7f3f84d65b5b211ec2c12ddd0c49209081839ee0
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/lzdmod/im/5.0.103/index.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:29 GMT
content-type: text/css
content-length: 27545
server: openresty
strict-transport-security: max-age=360000; includeSubDomains
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6880C4DB6E38A1303971AF47
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14591324892757161546
x-oss-storage-class: Standard
content-md5: Z1IsRfjPNqU5SC7NfanFDA==
x-oss-server-time: 5
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5f3a717532694666941839e
timing-allow-origin: *
via: EU-FRA-marseille-EDGE3-CACHE2[4],EU-FRA-marseille-EDGE3-CACHE7[0,TCP_HIT,2],EU-FRA-paris-GLOBAL1-CACHE16[12],EU-FRA-paris-GLOBAL1-CACHE27[9,TCP_MISS,10],cache17.l2fr1[643,663,200-0,M], cache38.l2fr1[665,0], ens-cache13.gb9[0,0,200-0,H], ens-cache14.gb9[0,0]
ali-swift-global-savetime: 1753269467
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Wed, 23 Jul 2025 11:17:47 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5f3a217533558714214802e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 1e5015d737fe31381b3729a0583e5058
nginx-hit: 1
age: 9698
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/bl.js
104.21.32.1200 OK 42 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/bl.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (41828), with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 56033
Size 42 kB (41828 bytes)
MD5 e31ead706e55b7c4c100d87a5928f099
SHA1 5acc29a266fd91e1bb438bc2b7851d97468a5617
SHA256 caa17208ba4e8fc27121fb29036b6f39ae9d31778a453df5ed9f32cba2bf3197
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/bl.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 13990
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=g5kweTZLmTUWr%2BylqhfTS3XIMdxvl22seCLvviORpPQCP9nbnKMUpAtSwoytcKlcGRWCH%2BgVhBOvwMiUrT6gS4MyeyH0UEWMnqynyLo%3D"}]}
cf-ray: 9643eff4c9f156b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01Wdetn224xMIRNihao_!!6000000007457-2-tps-34-34.png
104.21.32.1200 OK 476 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01Wdetn224xMIRNihao_!!6000000007457-2-tps-34-34.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
First Seen 2023-05-29
Last Seen 2025-08-02
Times Seen 49498
Size 476 B (476 bytes)
MD5 d9a89a501e57d0cbac81ea4a054dcfb2
SHA1 6b8079fecc67d2ac01c0574bc6f7db479be07cb5
SHA256 79224ccc77d1f0025f05756e8d5635604018ffea20be8f1568e4ed421c5f567a
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01Wdetn224xMIRNihao_!!6000000007457-2-tps-34-34.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=00ZaxmsRoh1sUUGiePP6UlT4Wmb2c7wOdQYZeLGY4fObB4UfTRvaVHPNz8ySJqeouJ2FDOypa0NI4lIAO81poLsz1kmRaKOOM8d8Xhi0LN3JNrWPOjDBljF7xlaxXl3q88Q%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff56bc1b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=132&recv=125&lost=0&retrans=0&sent_bytes=45907&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1550&inflight_dur=62&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN011gka8L1E0PIZlHK7e_!!6000000000289-2-tps-34-34.png
104.21.32.1200 OK 1.9 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN011gka8L1E0PIZlHK7e_!!6000000000289-2-tps-34-34.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
First Seen 2023-05-29
Last Seen 2025-08-02
Times Seen 49206
Size 1.9 kB (1892 bytes)
MD5 1247b00414a4c921c17e520f81b9aee4
SHA1 f6ceb3c012dd4c758a4e700c8ec2500ab1d52749
SHA256 d8a77cdf2b32f27183512a5d20d99d5d708433cf6fb45d3ef0beb8aec61fa9e7
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN011gka8L1E0PIZlHK7e_!!6000000000289-2-tps-34-34.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 1892
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NGsun5WOUUN176IOuvyPhTyNAcMoWgJcoPjwpqBM8RNr76r5davZ5hHtWBd4ersNmlLXMFVCGYWJAjx0mKHB3HPFb7Hu7GlVlevhB24WNN4gBblg4fRSkneqPaLZPYLywsQ%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff57bc6b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=0&rtt_var=3611&sent=142&recv=128&lost=0&retrans=0&sent_bytes=56354&recv_bytes=14449&delivery_rate=1874974&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=20954&unsent_bytes=0&cid=5e5df1a717089c66&ts=1560&inflight_dur=72&x=40"
GET g.alicdn.com/??/AWSC/AWSC/awsc.js,/sd/baxia-entry/baxiaCommon.js
23.36.76.193200 OK 29 kB URL
g.alicdn.com/??/AWSC/AWSC/awsc.js,/sd/baxia-entry/baxiaCommon.js
IP / ASN
23.36.76.193
#20940 Akamai International B.V.
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (28679)
First Seen 2025-07-18
Last Seen 2025-07-29
Times Seen 1536
Size 29 kB (28688 bytes)
MD5 85d8d765929412930fa039ca19e4dc5f
SHA1 0fab5d62cb052b5a28ac5ac7d28ab711d6fde31f
SHA256 53ebcd3cb30324d11c3522dc204edbdf769db5cf264ded295790185b680ce2d7
Certificate Info
Issuer DigiCert Inc
Subject air.alistatic.com
Fingerprint 78:85:B5:87:7C:5C:3B:C4:0F:07:09:DE:05:43:BE:9A:50:DD:95:1F
Validity Thu, 05 Jun 2025 00:00:00 GMT - Tue, 14 Apr 2026 23:59:59 GMT
GET /??/AWSC/AWSC/awsc.js,/sd/baxia-entry/baxiaCommon.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: Tengine
x-oss-request-id: 6882260CD3D7CB39330E336A
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4932443255767040059
x-oss-storage-class: Standard
Content-MD5: Z2mAusSr893VhYiMvuFUZg==
x-oss-server-time: 2
x-bucket-code: 3
Content-Encoding: gzip
Ups-Target-Key: cdn-relay.vipserver
X-protocol: HTTP/1.1
EagleEye-TraceId: 210386a117533598841405881e2076
Strict-Transport-Security: max-age=0
s-brt: 15
s-rt: 16
Content-Length: 10943
Cache-Control: max-age=1522, s-maxage=3600
Date: Thu, 24 Jul 2025 13:59:22 GMT
Connection: keep-alive
Vary: Accept-Encoding
SERVED-FROM: 23.36.76.189
Network_Info: NO_OSLO_50304
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 23.36.76.193
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/pc.js
104.21.32.1200 OK 74 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/pc.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-06-03
Last Seen 2025-08-02
Times Seen 54461
Size 74 kB (74177 bytes)
MD5 9bdefd73dc25b84bfe8d9917b6120020
SHA1 006f41d33d4a21eadbfe250e569b140a63fd5469
SHA256 73a8360e318e76b752e953261326592e2ed9be1c1da0b6dbc9dd527e8f76830d
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/pc.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Cookie: lwrid=AgGYPLtDhCk4fnCjl1GJVWh29Hw3; _bl_uid=IzmdOd54hXyg3XleL2wyjjFe7j2X; _uab_collina=175336556564757159536524; tfstk=geDXypVa3k4rm4wOfSxPdNLLUAww43JFCGZtxcBVX-exCRgs5l5ZgRyR2ozr3ro4Hico8DBq3I2NCt2gBe8eLpo-mR296hdcfrm-qlKzDe4o0i2gBe8yLpommR0vbdI9C0K70kCTBSBAy3ZLbRBY6tCRyz48BRetW0K7jzUTBR39_dW7fIarcHs-K7ncDyoYPOBteSVb5mCNBOH7cS1mDziq0YZbGyP9rgBZCDit38GCWInQEvPZePTRBocKlYwxHL_Y4jIzu9zC8w51VWXTVsxWV1fgwrRAqMT-MlNYqoaeV31FsSEuVy-WV1fgMuqb83t5T1f..; xlly_s=1; isg=BO_vsl0-2-TxJt_YzZLUdezYfQr5lEO22f3icwF8i95lUA9SCWTTBu0C1tjuMxsu; lwrtk=AAIEaIKsuwAEOEtkrABrMdER8KL6fQDskQXx1EKkYzrYCsXMq5K8D/I=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:26 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xITtRVadphOoDrm1%2BGEHy1qb%2BaGYdDho1qJ%2F%2BUJpMuyhPMhsmP9fYCnLxykC4wyTNaq48HhyXSycV1K9bKqj30YqOa6%2BY4fdVJneh5X0YdvcXBhVdQWnd62YorAgOCuz4rQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
age: 7
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 9643f0270e68b4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1732&min_rtt=0&rtt_var=1182&sent=601&recv=206&lost=0&retrans=0&sent_bytes=639312&recv_bytes=20695&delivery_rate=19883077&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=27697&unsent_bytes=0&cid=5e5df1a717089c66&ts=8536&inflight_dur=317&x=40"
POST arms-retcode-sg.aliyuncs.com/r.png?t=error×=1&page=%2F&tag=&release=&environment=prod&begin=1753365562393&cate=TypeError&msg=can%27t%20access%20property%20%22ready%22%2C%20H%20is%20undefined&stack=%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9384%0A%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9395%0A&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js&line=1&col=9384&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j6&post_res=
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=error×=1&page=%2F&tag=&release=&environment=prod&begin=1753365562393&cate=TypeError&msg=can%27t%20access%20property%20%22ready%22%2C%20H%20is%20undefined&stack=%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9384%0A%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9395%0A&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js&line=1&col=9384&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j6&post_res=
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
POST /r.png?t=error×=1&page=%2F&tag=&release=&environment=prod&begin=1753365562393&cate=TypeError&msg=can%27t%20access%20property%20%22ready%22%2C%20H%20is%20undefined&stack=%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9384%0A%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9395%0A&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js&line=1&col=9384&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j6&post_res= HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 298
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:30 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET fourier.taobao.com/rp?ext=51&data=jm_null&random=8205184417419226&href=https%3A%2F%2Fmabarvip189.com%2F&protocol=https:&callback=jsonpCallback
123.183.232.34200 OK 1.4 kB URL
fourier.taobao.com/rp?ext=51&data=jm_null&random=8205184417419226&href=https%3A%2F%2Fmabarvip189.com%2F&protocol=https:&callback=jsonpCallback
IP / ASN
123.183.232.34
#141771 China Telecom
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (1441), with no line terminators
First Seen 2023-07-13
Last Seen 2025-08-02
Times Seen 55848
Size 1.4 kB (1441 bytes)
MD5 8af8a0f23331af9be132b12dd8d9626d
SHA1 874603d29b0664147d9d19262587f5cf0bfa7bc2
SHA256 29b7217acb615f118fba97483fb6909f81af614d76294e7e1a4bc1d3d2506c9a
Certificate Info
Issuer GlobalSign nv-sa
Subject tfe.alibaba.com
Fingerprint 2A:E7:3A:AD:21:93:AF:7D:07:7B:ED:C0:D4:25:1B:59:27:BF:EA:34
Validity Wed, 19 Mar 2025 08:54:01 GMT - Mon, 05 Jan 2026 02:01:01 GMT
GET /rp?ext=51&data=jm_null&random=8205184417419226&href=https%3A%2F%2Fmabarvip189.com%2F&protocol=https:&callback=jsonpCallback HTTP/1.1
Host: fourier.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:24 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
server: Tengine
cache-control: no-store
access-control-allow-credentials: true
use-raw: true
bxuuid: {"login-token":"5c6f38bc9e760c1637b8c6501f06626c___273523___cff2cffa6696606563f93cb2f1619225"}
bxpunish: 1
x5-punish-cache: miss
content-encoding: gzip
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN019tUhkL1abQnOURPrd_!!6000000003348-2-tps-96-70.png
104.21.32.1200 OK 4.3 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN019tUhkL1abQnOURPrd_!!6000000003348-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48131
Size 4.3 kB (4287 bytes)
MD5 fdc2018fbe00ad6e19532c80102001d7
SHA1 f1e8e27bb35e2765a0e705d0e8bbcbcdf8609dad
SHA256 2e5551d5b65b23e629b9b510cd5796475f98e91e65cb02b647b978864b7755b4
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN019tUhkL1abQnOURPrd_!!6000000003348-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 4287
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsLVbJylhC80zdGR0pSVi06eH6jRUpMfTVhVizB%2BUvU2fscxqmusfm2zPPwVamumdKoojCrLcIh2wnY8Yqogowo4Ehr0HBz8MLiKcLfR%2BcqEqwZ0Qn%2FlWfymbcfass8eJQw%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff53bbdb4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=124&recv=125&lost=0&retrans=0&sent_bytes=36223&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1543&inflight_dur=54&x=40"
GET pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
216.58.207.194200 OK 164 kB URL
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP / ASN
216.58.207.194
#15169 GOOGLE
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (4327)
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 164 kB (164415 bytes)
MD5 e7c2c3c04661a48b768f10556eb75bd3
SHA1 47fe77a1ba10eb45dd6758286eba828f44853b46
SHA256 fb4e15d96453a7d6ae7f1fbfe4a5072593660e131055d1d412436048a8475ed3
Certificate Info
Issuer Google Trust Services
Subject *.g.doubleclick.net
Fingerprint F1:ED:20:12:BD:23:CD:08:FA:D3:32:4F:8E:79:71:2D:1D:99:40:DC
Validity Mon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mabarvip189.com/
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Thu, 24 Jul 2025 13:59:25 GMT
expires: Thu, 24 Jul 2025 13:59:25 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 7391370917195826956
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 54127
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01mFypLB1jt8eRUFBC0_!!6000000004605-2-tps-96-70.png
104.21.32.1200 OK 8.4 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01mFypLB1jt8eRUFBC0_!!6000000004605-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48116
Size 8.4 kB (8434 bytes)
MD5 83aeec0f1dba3faf7ef3025a29ec7dc5
SHA1 a513b681989acda9d22cfcf585acbdb930c2e5ca
SHA256 dd01e976e33293fc04ce0ebe4aeaf7cbb5da3cc0d71ef82f551f4d38b38c63a4
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01mFypLB1jt8eRUFBC0_!!6000000004605-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 8434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zE7FNPcq%2BLHQ06VbA2jkoA8liyjVEr%2Bt878AprKcUI54IPzTLj1I2TeUNa3%2Bp9M%2BZvAI0ITSiQROQvjRkOLZEagSiU9MUc%2Fm1Wkgj18HzMYJQeaP07h0uDcPJbn6To7OOL8%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff53bbbb4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4085&min_rtt=0&rtt_var=5483&sent=120&recv=123&lost=0&retrans=0&sent_bytes=31907&recv_bytes=14215&delivery_rate=1172433&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1540&inflight_dur=52&x=40"
POST arms-retcode-sg.aliyuncs.com/r.png?t=api×=1&page=%2F&tag=&release=&environment=prod&api=mtop.global.detail.web.getDetailInfo&success=0&time=4266&code=ERROR&msg=%7B%22ret%22%3A%5B%22ABORT%3A%3A%C3%A6%C5%BD%C2%A5%C3%A5%C2%8F%C2%A3%C3%A5%C2%BC%E2%80%9A%C3%A5%C2%B8%C2%B8%C3%A9%E2%82%AC%E2%82%AC%C3%A5%E2%80%A1%C2%BA%22%5D%2C%22retJson%22%3A-1%2C%22errorCode%22%3A%7B%22key%22%3A%22ABORT%22%2C%22displayMessage%22%3A%22%C3%A6%C5%BD%C2%A5%C3%A5%C2%8F%C2%A3%C3%A5%C2%BC%E2%80%9A%C3%A5%C2%B8%C2%B8%C3%A9%E2%82%AC%E2%82%AC%C3%A5%E2%80%A1%C2%BA%22%7D%7D&traceId=&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&domain=&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j9&post_res=
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=api×=1&page=%2F&tag=&release=&environment=prod&api=mtop.global.detail.web.getDetailInfo&success=0&time=4266&code=ERROR&msg=%7B%22ret%22%3A%5B%22ABORT%3A%3A%C3%A6%C5%BD%C2%A5%C3%A5%C2%8F%C2%A3%C3%A5%C2%BC%E2%80%9A%C3%A5%C2%B8%C2%B8%C3%A9%E2%82%AC%E2%82%AC%C3%A5%E2%80%A1%C2%BA%22%5D%2C%22retJson%22%3A-1%2C%22errorCode%22%3A%7B%22key%22%3A%22ABORT%22%2C%22displayMessage%22%3A%22%C3%A6%C5%BD%C2%A5%C3%A5%C2%8F%C2%A3%C3%A5%C2%BC%E2%80%9A%C3%A5%C2%B8%C2%B8%C3%A9%E2%82%AC%E2%82%AC%C3%A5%E2%80%A1%C2%BA%22%7D%7D&traceId=&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&domain=&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j9&post_res=
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
POST /r.png?t=api×=1&page=%2F&tag=&release=&environment=prod&api=mtop.global.detail.web.getDetailInfo&success=0&time=4266&code=ERROR&msg=%7B%22ret%22%3A%5B%22ABORT%3A%3A%C3%A6%C5%BD%C2%A5%C3%A5%C2%8F%C2%A3%C3%A5%C2%BC%E2%80%9A%C3%A5%C2%B8%C2%B8%C3%A9%E2%82%AC%E2%82%AC%C3%A5%E2%80%A1%C2%BA%22%5D%2C%22retJson%22%3A-1%2C%22errorCode%22%3A%7B%22key%22%3A%22ABORT%22%2C%22displayMessage%22%3A%22%C3%A6%C5%BD%C2%A5%C3%A5%C2%8F%C2%A3%C3%A5%C2%BC%E2%80%9A%C3%A5%C2%B8%C2%B8%C3%A9%E2%82%AC%E2%82%AC%C3%A5%E2%80%A1%C2%BA%22%7D%7D&traceId=&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&domain=&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j9&post_res= HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:30 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01ENOAXK1UR05CB9iwA_!!6000000002513-2-tps-96-70.png
104.21.32.1200 OK 7.1 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01ENOAXK1UR05CB9iwA_!!6000000002513-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48152
Size 7.1 kB (7098 bytes)
MD5 7e44fb65f568f4664de0b40c407d7956
SHA1 f253a79f0042f85bb301d8e8ebdb40121fcaa9a7
SHA256 34b8804296d8073ac8158e2454e97b39977344498ff18fdc591878d4a0acf4ec
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01ENOAXK1UR05CB9iwA_!!6000000002513-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 7098
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YNCJyCL6PYCLUzNo7OsJ5fV7cZMctMWmcvlm6fJLOULNJF55fz9C8OZnZffYsDloTr3%2FRQrvt3iiYOaVZzgJndaGnEMQkUkiEqlxyDI3T%2BCsiYOZbkHrKgOFlplcdqIryjA%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff52bbab4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4085&min_rtt=0&rtt_var=5483&sent=112&recv=123&lost=0&retrans=0&sent_bytes=23507&recv_bytes=14215&delivery_rate=1172433&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1535&inflight_dur=46&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/pc-mod.css
104.21.32.1200 OK 137 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/pc-mod.css
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (65532), with CRLF line terminators
First Seen 2024-08-14
Last Seen 2025-08-02
Times Seen 50500
Size 137 kB (136794 bytes)
MD5 1952aa6fb1be87726e9458038df98843
SHA1 f60be3d75a74da45d09d70fb822cb77cbfefd27a
SHA256 0c84e192095dee0121011bea0c0b0f674bd0621edd7317e92022a827f520856a
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/pc-mod.css HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/css
content-length: 23037
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FCvltNW5cx59QTSo47tN4Ik0l1G5gY1T28IqC7H9amk%2Br4P%2Fd8Lir6eCQA8CqC1oKLRiVbPby3s8n%2BGG%2FXnmU5dj7RaxUmpTvXRYYrA%3D"}]}
cf-ray: 9643eff4c9d756b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/aplus_int.js
104.21.32.1200 OK 16 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/aplus_int.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (15430), with CRLF line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1202
Size 16 kB (15612 bytes)
MD5 0fe9e1b16b69ce0cf84c8936b41ab795
SHA1 490f5c09325702214c67882eee864af9bd4801fa
SHA256 ab744888d90a3adfaecc1c3860a73c05f55ba25600861e486d39a988eda875dc
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/aplus_int.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 5949
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jqtH8qMlpBqCXhojJ8s%2B%2FalYvaxeqjdcuWuMEC3K2JD%2FWcgIKfV%2BvGKSyb9w2ViXYnmxcgGcJIAix9DH867FCq9LXB3TYpMfsRaulnA%3D"}]}
cf-ray: 9643eff4c9ef56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01Y8JAuA1pB4EhCiF0K_!!6000000005321-2-tps-96-70.png
104.21.32.1200 OK 7.8 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01Y8JAuA1pB4EhCiF0K_!!6000000005321-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48081
Size 7.8 kB (7843 bytes)
MD5 f87442c995a605164dcff8b32c7bac9e
SHA1 cc6c778e82111ae03773caef53241a16151d2075
SHA256 ca437af32df2c4d2419cacb3b959fc506bc9aa42c514ed5c25093105983fdff6
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01Y8JAuA1pB4EhCiF0K_!!6000000005321-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 7843
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TDVwV3jZbz2MNGzoYwRCYDcR42nhE9WHlq7JbxA4qTad%2FX0y%2BxTvVsHMU6Xgas51vRoqPZXbehe0OKNZEeE2Ox2%2Br3VDHcnS2RUDiLcVCNDdhAcwXq4qTIqTR5rG%2FRGcRmE%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff51bb7b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=558&rtt_var=6510&sent=101&recv=120&lost=0&retrans=0&sent_bytes=9136&recv_bytes=14075&delivery_rate=240345&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1298&inflight_dur=38&x=40"
OPTIONS member.lazada.co.id/user/api/getCsrfToken
47.246.165.111200 OK 634 B URL
member.lazada.co.id/user/api/getCsrfToken
IP / ASN
47.246.165.111
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 634 B (634 bytes)
MD5 ea036e652f1c5a669ce6498c5c5186fd
SHA1 1457d9a1e81233508c3512e211fa9a14546d5d08
SHA256 4ba1e36ad3aee4790bc0008533715211a0929b8fe5553052ea4987ee75afa589
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.com
Fingerprint 61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
Validity Fri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
OPTIONS /user/api/getCsrfToken HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-csrf-token,x-requested-with
Referer: https://mabarvip189.com/
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:22 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://mabarvip189.com
access-control-allow-headers: content-type,x-csrf-token,x-requested-with
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 2101406f17533655624084452e0f43
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
HEAD arms-retcode-sg.aliyuncs.com/r.png?t=resourceError×=1&page=%2F&tag=&release=&environment=prod&begin=1753365568936&src=https%3A%2F%2Fmabarvip189.com%2Freact-dom.js&node_name=script&xpath=html.%20%3E%20head.%20%3E%20script.&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&z=mdhgl2je
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=resourceError×=1&page=%2F&tag=&release=&environment=prod&begin=1753365568936&src=https%3A%2F%2Fmabarvip189.com%2Freact-dom.js&node_name=script&xpath=html.%20%3E%20head.%20%3E%20script.&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&z=mdhgl2je
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
HEAD /r.png?t=resourceError×=1&page=%2F&tag=&release=&environment=prod&begin=1753365568936&src=https%3A%2F%2Fmabarvip189.com%2Freact-dom.js&node_name=script&xpath=html.%20%3E%20head.%20%3E%20script.&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&z=mdhgl2je HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mabarvip189.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:30 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
POST arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365568937&cate=Error&msg=Script%20error%20for%20%22react-dom%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jf&post_res=
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365568937&cate=Error&msg=Script%20error%20for%20%22react-dom%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jf&post_res=
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
POST /r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365568937&cate=Error&msg=Script%20error%20for%20%22react-dom%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jf&post_res= HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 5075
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:30 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1b43RtrvpK1RjSZFqXXcXUVXa.png
104.21.32.1200 OK 19 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1b43RtrvpK1RjSZFqXXcXUVXa.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
First Seen 2023-10-16
Last Seen 2025-08-02
Times Seen 49476
Size 19 kB (19149 bytes)
MD5 ea19428365bcd34d1bd8f3141a85a873
SHA1 03439c89d831bcabc262d385445d4260304ccd63
SHA256 44b879ed47dcd5b43719b2b529fcd3ba868fe20ee38b0f0b277cdbce801227b2
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/TB1b43RtrvpK1RjSZFqXXcXUVXa.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 19149
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dWHvpDmJuHqkb1fsRRq3wq%2FymRrn%2BWKQwYmIAEhsSbHBA0QUbo%2BpkIb0%2BuobkradBX%2Fs2NlqetY2Z99r7dGt3tg2tFWkiw7Mg4q1tVA%3D"}]}
cf-ray: 9643eff4ea3256b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/9174453f-455e-4e30-87d2-bd90239e6994.png
104.21.32.1200 OK 6.4 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/9174453f-455e-4e30-87d2-bd90239e6994.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
First Seen 2023-10-16
Last Seen 2025-08-01
Times Seen 29358
Size 6.4 kB (6407 bytes)
MD5 bbd381387a522d6f2b6828fb4df103aa
SHA1 4c642941b598d1be605ea7a813a82acef2e06e70
SHA256 c72efb3b01662a094b0aef72c88c73d515cf39cab73c55e91b041cf3a04d4e58
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/9174453f-455e-4e30-87d2-bd90239e6994.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 6407
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VjQVSZbG%2Fgog04FOv1ViKNG10Ac%2BiGbb%2BosEs%2BYGS24Gf%2BEz3BK0U6%2FEwkc7OQq8%2BFWnn5mAD5DfXSjQAF9Zdk8La%2FPD5Y%2Bm%2B17JDtU3R0OfbdSg2XXgvwbMCblzuEjyZ9M%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff50bb1b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4085&min_rtt=0&rtt_var=5483&sent=110&recv=123&lost=0&retrans=0&sent_bytes=20707&recv_bytes=14215&delivery_rate=1172433&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1534&inflight_dur=45&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/alichat.js
104.21.32.1200 OK 61 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/alichat.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (51794)
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 24156
Size 61 kB (60949 bytes)
MD5 15a060108aeae08822567a29e7f6965f
SHA1 4abe0872031b8f44f00653197fb9414be0917b44
SHA256 ddef1520fd2834426eef8ec09bb4c7a331d2b3bd81c08825e1a9b9c6dcecc27a
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/alichat.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Cookie: lwrid=AgGYPLtDhCk4fnCjl1GJVWh29Hw3; _bl_uid=IzmdOd54hXyg3XleL2wyjjFe7j2X
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:22 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5hWSW0aaE%2FOcwolaXTlrTrnj%2BfJ6Wd2a6RICSzF%2FydPlSyxSL1CCsAz1F3%2B6Vu%2FOASooaQb7ir7Njp4dRfzlrkNUEKtR6KMCU2XJUeNLh93AonGbAonBKbA5SUn%2B%2BnvHO78%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643f00dfccab4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1499&min_rtt=0&rtt_var=1063&sent=577&recv=197&lost=0&retrans=0&sent_bytes=614557&recv_bytes=18696&delivery_rate=16684741&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=32634&unsent_bytes=0&cid=5e5df1a717089c66&ts=4917&inflight_dur=265&x=40"
OPTIONS ase.aliexpress.com/upload/web/info
47.246.146.202200 OK 0 B URL
ase.aliexpress.com/upload/web/info
IP / ASN
47.246.146.202
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.aliexpress.com
Fingerprint 32:59:24:0C:B0:DF:02:84:AF:2D:BF:46:36:BF:59:96:C8:42:F9:6B
Validity Wed, 14 May 2025 07:47:02 GMT - Mon, 15 Jun 2026 07:41:06 GMT
OPTIONS /upload/web/info HTTP/1.1
Host: ase.aliexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mabarvip189.com/
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:25 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://mabarvip189.com
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
server: Tengine/Aserver
eagleeye-traceid: 211b8f9b17533655658062929e77ef
strict-transport-security: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/uploads/2025/07/mabarvip189.webp
104.21.32.1200 OK 176 kB URL
mabarvip189.com/wp-content/uploads/2025/07/mabarvip189.webp
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp
First Seen 2025-07-12
Last Seen 2025-07-27
Times Seen 68
Size 176 kB (175758 bytes)
MD5 a747a1fb7288146dec3d5ad0ae94f68d
SHA1 41338c531432832351e24e79dd38bf2850866e60
SHA256 1bdd75d64a15e34fb57ad877b3a3867aeb60a88929e144a1f22f030e694c504c
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/uploads/2025/07/mabarvip189.webp HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/webp
content-length: 175758
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 09:15:09 GMT
accept-ranges: bytes
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FLA9l5PFE7hPnwOenJPVI6x3H%2Bz3%2FRz4mHC%2FM1uv5cNqKmcvQJKrMHzNbNJXox3yu6yiQWrIDEZbL%2FiMBLJ2OeF9tNxDP4FncNjqxsM%3D"}]}
cf-ray: 9643eff4a9a856b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/next.min.js
104.21.32.1200 OK 932 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/next.min.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (32077)
First Seen 2023-03-08
Last Seen 2025-08-02
Times Seen 52717
Size 932 kB (931662 bytes)
MD5 e89190474b7dc4b988edbb405ff0cd32
SHA1 e9f418799d20cd8bcdb5eab3ef9c562b2e39da2c
SHA256 07aef6cb37f4d696f2dc269aea4e6646c8514c999105855a16d5199834d172b0
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/next.min.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 184194
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lHlfLjOTyI2N5Qm0hl7AjmmTHtHnHQGiuhO3vX2PBM1RJJyi930PNOxIQbZgmm99AaGlurduO0wAhJBdmtCxl9Mge0dMhwruAHafXCI%3D"}]}
cf-ray: 9643eff4da0856b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo6.js
104.21.32.1200 OK 2.1 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo6.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (2118), with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 26475
Size 2.1 kB (2118 bytes)
MD5 12ff6103c2d49bf3220254168787da66
SHA1 ee2c9b09031bae4ab6b75f6b6dab07a38b49277b
SHA256 64205e0c13306d03d4193cfc721dfb14615b12a43b56a59418450a92242e3206
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo6.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u95rilQA8BuAakRw%2Fq8PHpZC506wZ86fBdZF7CcaJtiWmLsezPDlChbhQrvUrc3VmsM47T0or97D5o1cyXkO7cyZwbtYTOKOo4UENHQNmEyQJlaTTp582F6RQ%2FvLT65f20w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643eff59bccb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=0&rtt_var=3611&sent=148&recv=128&lost=0&retrans=0&sent_bytes=61388&recv_bytes=14449&delivery_rate=1874974&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=20954&unsent_bytes=0&cid=5e5df1a717089c66&ts=1564&inflight_dur=76&x=40"
GET laz-g-cdn.alicdn.com/lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/font_482437_i9tqljab236p3nmi.woff
38.54.123.57200 OK 50 kB URL
laz-g-cdn.alicdn.com/lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/font_482437_i9tqljab236p3nmi.woff
IP / ASN
38.54.123.57
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format, TrueType, length 49860, version 1.0
First Seen 2023-06-03
Last Seen 2025-08-02
Times Seen 53133
Size 50 kB (49860 bytes)
MD5 9ed0a9af13e99f4a094d3667c7bfb071
SHA1 e8c1a8ddde34f6f1fc5adacc1a24a29cab98c1db
SHA256 e31ffa4ab077866db78d07241dddd66d8930229f67f42350ec8c8cbf278a539a
Certificate Info
Issuer GlobalSign nv-sa
Subject laz-g-cdn.alicdn.com
Fingerprint A5:45:B9:D4:07:B7:25:BF:8B:2F:B5:D1:76:4B:72:0B:04:FD:10:91
Validity Tue, 22 Apr 2025 02:21:08 GMT - Sun, 24 May 2026 02:21:07 GMT
GET /lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/font_482437_i9tqljab236p3nmi.woff HTTP/1.1
Host: laz-g-cdn.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: font/woff
content-length: 49860
server: openresty
x-oss-request-id: 6868EAC80835C33033DF01AE
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12542599084261558410
x-oss-storage-class: Standard
content-md5: ntCprxPpn0oJTTZnx7+wcQ==
x-oss-server-time: 18
access-control-allow-origin: *
x-source-scheme: https
via: EU-FRA-marseille-EDGE3-CACHE1[2],EU-FRA-marseille-EDGE3-CACHE8[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE16[3],EU-FRA-paris-GLOBAL1-CACHE21[0,TCP_HIT,2],ens-cache22.l2nu20-20[0,0,200-0,H], ens-cache59.l2nu20-20[1,0], ens-cache4.l2hk11[0,0,200-0,H], ens-cache2.l2hk11[2,0], cache31.l2fr1[0,0,200-0,H], cache14.l2fr1[1,0], ens-cache30.fr6[0,0,200-0,H], ens-cache6.fr6[1,0]
ali-swift-global-savetime: 1751706312
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Sat, 05 Jul 2025 09:06:16 GMT
x-swift-cachetime: 3536
timing-allow-origin: *
eagleid: a3b5fd9a17517071699282243e
x-ccdn-expires: 1216799
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 7de7b83c2e6b121b756f3aab3a5ef5aa
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
age: 1375235
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/uploads/2025/07/MABARVIP189.png
104.21.32.1200 OK 36 kB URL
mabarvip189.com/wp-content/uploads/2025/07/MABARVIP189.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 834 x 187, 8-bit/color RGBA, non-interlaced
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 36 kB (35706 bytes)
MD5 4ef79585fedcbaf3fff32b4d44288028
SHA1 39e3b8d423b1c0b29372ed099e91c12dac2aac26
SHA256 b0d6ded9b0e60ea68fa3c0132fa5c1fbfeab77c1065a5004eea7b23d1ce7d663
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/uploads/2025/07/MABARVIP189.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 35706
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 09:15:05 GMT
accept-ranges: bytes
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rSEvnR%2FaM5zDvD%2FLKO3LAPZ09JWJJ87FkREc50iRH%2FigyLYIa2ssiWytMC33qCcIhaCzoI8UGK%2B2k5hk%2F8qyRD3EFRDYZlr4fbegK6A%3D"}]}
cf-ray: 9643eff4fa3c56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1lbmoqYr1gK0jSZR0XXbP8XXa-340-200.png
104.21.32.1200 OK 6.6 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1lbmoqYr1gK0jSZR0XXbP8XXa-340-200.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 340 x 200, 8-bit colormap, non-interlaced
First Seen 2023-05-05
Last Seen 2025-08-02
Times Seen 39615
Size 6.6 kB (6579 bytes)
MD5 8343dc273f135d150649d5f2a7040e22
SHA1 11d2781f43b240835a8746ab79ea8276b5474e15
SHA256 3ffff47c6c9f5d002661a268eeaa579218f8c1800f2b12a7c29c810e5cbf5464
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/TB1lbmoqYr1gK0jSZR0XXbP8XXa-340-200.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 6579
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SAVEpNES3MjgwXn0iO0ePopT7vXjualVo1s14MsJDB9pur2KH%2BWoIoBDiL870cJ%2FVyxpn0ntFFE3Ff%2FcAFqlm4UbwE9dfpDHF7CQc6GSGQT0audfrjIIbyeNYMybkyTTjVE%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff55bbfb4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2908&min_rtt=0&rtt_var=4066&sent=136&recv=126&lost=0&retrans=0&sent_bytes=48777&recv_bytes=14356&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1558&inflight_dur=70&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo5.js
104.21.32.1200 OK 9.5 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo5.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (9453), with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 25683
Size 9.5 kB (9453 bytes)
MD5 6279b5eeafddf309e44b2842d458ee5c
SHA1 98c53753ef3c7b6594c95b1b30308490c98f29e9
SHA256 ff06575b33329109bd181fd9a2e620cea5f6490db4df2e10eff70638c5c9a5e2
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo5.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ztL6KHO00HlmHTy%2B6vroH%2Ft62QsyXG8yIhOFCfWxZdL45VdQNbWNxq1UaIuauXVMVNH6j1URUzT5llK8JXy%2BfHK2y%2F8aLGllETtcI%2FTgbVsF2QfCjcOttiRoY2Ug3G2B7I%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643eff58bcab4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=0&rtt_var=3611&sent=142&recv=128&lost=0&retrans=0&sent_bytes=56354&recv_bytes=14449&delivery_rate=1874974&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=20954&unsent_bytes=0&cid=5e5df1a717089c66&ts=1562&inflight_dur=72&x=40"
GET member.lazada.co.id/user/api/getUser
47.246.165.111200 OK 624 B URL
member.lazada.co.id/user/api/getUser
IP / ASN
47.246.165.111
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 624 B (624 bytes)
MD5 30811c8b8978ddfe56831f599d5cb25e
SHA1 e9705379998c3f4796fa5f5cd286383405850d1b
SHA256 ecc015e923535783d4dea8fcefaff96a6ee5a1c24bdd8a1a393938052af1fdcb
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.com
Fingerprint 61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
Validity Fri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
GET /user/api/getUser HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-TOKEN: eb3380311eeee
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=UTF-8
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:24 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://mabarvip189.com
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 2140e7af17533655644662486e10b4
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo.js
104.21.32.1200 OK 570 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (30996), with CRLF line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1225
Size 570 kB (570245 bytes)
MD5 d33c0ac6cad9e89975c97915b41d7e8a
SHA1 aa976bc0b0eef7205879b513e60990cf02ae43e9
SHA256 b8e965f27255c77a49ec05f5febceb56c69c92abef8eb5e8f11997dd89207b08
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 134748
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=74DF%2FryBmbt88fWjQdjuL8iHXSjf%2FvFObPoO%2FT%2FndIccIPrFZoBcGiv78ZkZ94l6X%2BHtGzzd3MmvH28NMbOMC3F7tgvgD5Bz%2FdSnLv8%3D"}]}
cf-ray: 9643eff4b9bb56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1jyJMv.H1gK0jSZSyXXXtlpXa-184-120.png
104.21.32.1200 OK 6.2 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1jyJMv.H1gK0jSZSyXXXtlpXa-184-120.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 184 x 120, 8-bit colormap, non-interlaced
First Seen 2023-05-05
Last Seen 2025-08-02
Times Seen 39637
Size 6.2 kB (6179 bytes)
MD5 5a878340f3d6fcbd2286aba8ce992d37
SHA1 85adfa61f988fc2e519e5a309d04265023c1e9d3
SHA256 a0cc1b2660da8fe09c2aad9634a4ef2562e374dfcd47358b070fb139dc6bface
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/TB1jyJMv.H1gK0jSZSyXXXtlpXa-184-120.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 6179
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3JF7l9j5TnsKmHS4ohHaYTTYa4friCeGzCViHNJ5Qhc%2BR1Xqoa8aOeK4TL%2BpXZOasFrktZtbjE2joElHU2MdfbuR6Hsyd%2F%2FWi5EHshqD7wvnT17UwdPJPrdLRXz3s6zuuhs%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff55bc0b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=132&recv=125&lost=0&retrans=0&sent_bytes=45907&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1553&inflight_dur=62&x=40"
GET laz-g-cdn.alicdn.com/lzdfe/static/0.0.37/iconfont-hp.woff
38.54.123.57200 OK 9.9 kB URL
laz-g-cdn.alicdn.com/lzdfe/static/0.0.37/iconfont-hp.woff
IP / ASN
38.54.123.57
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format, TrueType, length 9904, version 1.0
First Seen 2023-05-05
Last Seen 2025-08-02
Times Seen 55405
Size 9.9 kB (9904 bytes)
MD5 d20883c6726bfde9255665ea51c33f67
SHA1 ce37f7e211df8667755b92bffe55e32105f7c171
SHA256 1fe8f44a5484673e59c667febe3b6ed1cacbff991e45a146748e5886aa9e6a21
Certificate Info
Issuer GlobalSign nv-sa
Subject laz-g-cdn.alicdn.com
Fingerprint A5:45:B9:D4:07:B7:25:BF:8B:2F:B5:D1:76:4B:72:0B:04:FD:10:91
Validity Tue, 22 Apr 2025 02:21:08 GMT - Sun, 24 May 2026 02:21:07 GMT
GET /lzdfe/static/0.0.37/iconfont-hp.woff HTTP/1.1
Host: laz-g-cdn.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: font/woff
content-length: 9904
server: openresty
x-oss-request-id: 6868E41B1B39F7313605CBCD
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17242847704197017710
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 0giDxnJr/eklVmXqUcM/Zw==
x-oss-server-time: 12
x-source-scheme: https
via: EU-FRA-marseille-EDGE3-CACHE1[2],EU-FRA-marseille-EDGE3-CACHE11[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE5[4],EU-FRA-paris-GLOBAL1-CACHE11[0,TCP_HIT,3],ens-cache28.l2nu20-20[0,0,200-0,H], ens-cache25.l2nu20-20[1,0], ens-cache20.l2hk11[0,0,200-0,H], ens-cache35.l2hk11[0,0], cache10.l2fr1[0,0,200-0,H], cache8.l2fr1[0,0], ens-cache14.fr6[0,0,200-0,H], ens-cache21.fr6[2,0]
ali-swift-global-savetime: 1751704603
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Sat, 05 Jul 2025 08:38:11 GMT
x-swift-cachetime: 3512
timing-allow-origin: *
eagleid: a3b5fda917517068892205355e
x-ccdn-expires: 935830
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 2dc1fd342a18c1246af2b9686fde7fc7
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
age: 1656204
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
X-Firefox-Spdy: h2
POST arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365570629&cate=Error&msg=unsupported%20site&stack=Ft%3C%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341738%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341768%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A429797%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A885%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A896%0A&file=https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js&line=1&col=1341738&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jk&post_res=
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365570629&cate=Error&msg=unsupported%20site&stack=Ft%3C%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341738%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341768%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A429797%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A885%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A896%0A&file=https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js&line=1&col=1341738&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jk&post_res=
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
POST /r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365570629&cate=Error&msg=unsupported%20site&stack=Ft%3C%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341738%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341768%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A429797%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A885%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A896%0A&file=https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js&line=1&col=1341738&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jk&post_res= HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 638
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:34 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1x8lvhHj1gK0jSZFuXXcrHpXa.png
104.21.32.1200 OK 15 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1x8lvhHj1gK0jSZFuXXcrHpXa.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
First Seen 2023-05-31
Last Seen 2025-08-01
Times Seen 30075
Size 15 kB (14608 bytes)
MD5 436f973ccf5d8ab22b6e0638ba4c16c2
SHA1 6c925136b759ff507b06c1b9c4db2922b8eff0d4
SHA256 08b0407cb259c1a2371a2dfad3659d7938480b41375802252944d58b30854d3f
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/TB1x8lvhHj1gK0jSZFuXXcrHpXa.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 14608
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=g5s1OyuiVl%2F0yzFexqdjyrL4lWXMFdBpj%2B9OaZrX%2FU5ddJrHqKBXWCYawSpZ4QEtV6WfwNE4%2FcdotRcxD9w%2BHL0UsdR24nIVLXDYJKw%3D"}]}
cf-ray: 9643eff4fa5056b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET laz-g-cdn.alicdn.com/lzdfe/static/0.0.48/iconfont-hp.woff
38.54.123.57200 OK 11 kB URL
laz-g-cdn.alicdn.com/lzdfe/static/0.0.48/iconfont-hp.woff
IP / ASN
38.54.123.57
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format, TrueType, length 10800, version 1.0
First Seen 2023-05-05
Last Seen 2025-08-01
Times Seen 54662
Size 11 kB (10800 bytes)
MD5 e7efeb5a44735dbc279376552cd36f0c
SHA1 6fbf95afd6bd4b5ceaa90e0a988ee379b0ce1536
SHA256 4c4d8e923e008e615f10407b2992418005e89555259fc3c048d7424a058584ba
Certificate Info
Issuer GlobalSign nv-sa
Subject laz-g-cdn.alicdn.com
Fingerprint A5:45:B9:D4:07:B7:25:BF:8B:2F:B5:D1:76:4B:72:0B:04:FD:10:91
Validity Tue, 22 Apr 2025 02:21:08 GMT - Sun, 24 May 2026 02:21:07 GMT
GET /lzdfe/static/0.0.48/iconfont-hp.woff HTTP/1.1
Host: laz-g-cdn.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: font/woff
content-length: 10800
server: openresty
x-oss-request-id: 6868E2A09C6AF033334CCCA7
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11084093574867788336
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 5+/rWkRzXbwnk3ZVLNNvDA==
x-oss-server-time: 19
x-source-scheme: https
via: EU-FRA-marseille-EDGE3-CACHE1[2],EU-FRA-marseille-EDGE3-CACHE8[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE4[2],EU-FRA-paris-GLOBAL1-CACHE8[0,TCP_HIT,2],ens-cache25.l2nu20-20[0,0,200-0,H], ens-cache56.l2nu20-20[0,0], ens-cache2.l2hk11[31,32,200-0,M], ens-cache21.l2hk11[33,0], cache25.l2fr1[279,279,200-0,M], cache3.l2fr1[281,0], ens-cache35.fr6[0,0,200-0,H], ens-cache4.fr6[3,0]
ali-swift-global-savetime: 1751704224
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Sat, 05 Jul 2025 08:31:31 GMT
x-swift-cachetime: 3533
timing-allow-origin: *
eagleid: a3b5fd9817517071933567565e
x-ccdn-expires: 2293452
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 302d60e05cd8718b695b1a906e477666
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
age: 298582
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
X-Firefox-Spdy: h2
GET g.alicdn.com/secdev/sufei_data/3.9.14/index.js
23.36.76.193200 OK 18 kB URL
g.alicdn.com/secdev/sufei_data/3.9.14/index.js
IP / ASN
23.36.76.193
#20940 Akamai International B.V.
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (17754), with no line terminators
First Seen 2023-09-23
Last Seen 2025-08-02
Times Seen 63487
Size 18 kB (17754 bytes)
MD5 b9a5a9592db7e29feb4cc5e8814dea21
SHA1 7efbde36c1131ebd7b51ae536eb087a8cebdbb7e
SHA256 f4425a89ec24254262bc3d81a838890e5c9740428e28cd96e520c5bf8ddffa4c
Certificate Info
Issuer DigiCert Inc
Subject air.alistatic.com
Fingerprint 78:85:B5:87:7C:5C:3B:C4:0F:07:09:DE:05:43:BE:9A:50:DD:95:1F
Validity Thu, 05 Jun 2025 00:00:00 GMT - Tue, 14 Apr 2026 23:59:59 GMT
GET /secdev/sufei_data/3.9.14/index.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 7398
Server: Tengine
x-oss-request-id: 68625C8CD5460937354444FC
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12593839585633272550
x-oss-storage-class: Standard
Content-Encoding: gzip
Content-MD5: mYdC0z0rPw0pY52mKJdpuQ==
x-oss-server-time: 21
x-bucket-code: 3
Ups-Target-Key: cdn-relay.vipserver
X-protocol: HTTP/1.1
EagleEye-TraceId: 211b427e17512766844763104e1fce
Strict-Transport-Security: max-age=0
s-brt: 28
s-rt: 28
SERVED-FROM: 2.23.186.216
Cache-Control: max-age=97911119
Expires: Wed, 30 Aug 2028 19:31:23 GMT
Date: Thu, 24 Jul 2025 13:59:24 GMT
Connection: keep-alive
Vary: Accept-Encoding
Network_Info: NO_OSLO_50304
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 23.36.76.193
GET 7g1k3y.tdum.alibaba.com/dss.js
47.246.146.53200 OK 52 B URL
7g1k3y.tdum.alibaba.com/dss.js
IP / ASN
47.246.146.53
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 52 B (52 bytes)
MD5 b5d43f45f0c57f997682cd2a0aaebf03
SHA1 418ebb6473790d6b8262ffbaa77712211eb8dfe8
SHA256 2c6585b5337f51b0b2cee24ea89f3faff8389f83718548c1b2e5f88647523895
Certificate Info
Issuer GlobalSign nv-sa
Subject *.alibaba.com
Fingerprint 5D:34:66:EE:A8:8C:B2:D4:AF:90:98:90:65:36:B3:C7:5F:E8:4D:5B
Validity Tue, 11 Mar 2025 05:07:02 GMT - Sun, 12 Apr 2026 05:01:06 GMT
GET /dss.js HTTP/1.1
Host: 7g1k3y.tdum.alibaba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:26 GMT
content-type: application/javascript
server: Tengine
vary: Accept-Encoding
content-encoding: gzip
ups-target-key: umid-web.vipserver.global
x-protocol: HTTP/2.0
eagleeye-traceid: 21039b5317533655669864696e1e46
strict-transport-security: max-age=31536000
s-brt: 2
s-rt: 3
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/alichat.css
104.21.32.1200 OK 914 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/alichat.css
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (910), with CRLF line terminators
First Seen 2024-05-20
Last Seen 2025-08-01
Times Seen 22523
Size 914 B (914 bytes)
MD5 a509975673a452b33e1c17ba587a4fd8
SHA1 cfb00b8d692eb9e71e154233d9eaaa7f29ef189b
SHA256 0f01f3eb1c5ec217214530aabed7b1fbaa1b36ae9e47be680104b8c46a76b340
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/alichat.css HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Cookie: lwrid=AgGYPLtDhCk4fnCjl1GJVWh29Hw3; _bl_uid=IzmdOd54hXyg3XleL2wyjjFe7j2X
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:23 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKPlNqfGhqpk03rjmMY5mR2rlKPnVCVMUAZKbSc%2BTo5xhjdWbu7uC0QN0a9xtKzAlcQMThdFZiJ1WV%2FB%2BpTCFSyb5rtBpA%2F1QgUOiz2PXR6jb8EOfClArFvpXs9%2FA6n17K8%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:23 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643f00e0ccbb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1591&min_rtt=0&rtt_var=981&sent=578&recv=198&lost=0&retrans=0&sent_bytes=615259&recv_bytes=18741&delivery_rate=16684741&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=32634&unsent_bytes=0&cid=5e5df1a717089c66&ts=5058&inflight_dur=288&x=40"
104.21.32.1200 OK 454 kB IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Resource Info
File type HTML document, Unicode text, UTF-8 text, with very long lines (4696)
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 454 kB (454282 bytes)
MD5 d60af0493f18c31feb744acf492f056d
SHA1 4df54dc12843dd050695bdadb38c81a4793cdd6b
SHA256 008642c5781cdd2952d0db3a173f9c7246af42e9247700881e5237db0a75a505
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET / HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:17 GMT
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=edge
link: <https://mabarvip189.com/wp-json/>; rel="https://api.w.org/", <https://mabarvip189.com/wp-json/wp/v2/pages/10>; rel="alternate"; title="JSON"; type="application/json", <https://mabarvip189.com/>; rel=shortlink
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kwXYj3gBO5XKoNnYj3C%2FL%2BpgcYePAIQKfoy5EgzXwaIxk3pn%2Bb73aONBy1vrTKt0VG3H27nXgOUNet%2BLzIi6lBsduXMaK%2BiJS4MiYEE%3D"}]}
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9643efddfff456b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo2.css
104.21.32.1200 OK 39 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo2.css
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (39435), with CRLF line terminators
First Seen 2024-08-14
Last Seen 2025-08-02
Times Seen 52006
Size 39 kB (39439 bytes)
MD5 4860926722ff0e0db37ce1d83f273764
SHA1 b87d39c6fcdcaac124295f9be89d9df97a1d60e3
SHA256 c49104f9d604c252ba5569ca38580bc4c1d4588672ebfbeddb41742dc3470f6b
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo2.css HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/css
content-length: 6844
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=QCc105cCrViTwS7naSukD9mb%2Fowc0y%2Fi4wuhjj5lWJbBNPS9xI5W0LbfDn06UQEOjMjjwreoYOMEPI247WUoKRl8wVXPltNiB5bwZRs%3D"}]}
cf-ray: 9643eff4da0e56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01RNizk522j2cPtaRjc_!!6000000007155-2-tps-96-70.png
104.21.32.1200 OK 7.7 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01RNizk522j2cPtaRjc_!!6000000007155-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-05-05
Last Seen 2025-08-02
Times Seen 48246
Size 7.7 kB (7663 bytes)
MD5 fd4c95d34e0fb7a0ea098e2816aed427
SHA1 1819b9b759b018db77fb60269309a3ccb43011cd
SHA256 d34efe5f1f7f0c134024c2e86b03ec10f231ff41e91910cf7ac6696515dad147
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01RNizk522j2cPtaRjc_!!6000000007155-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 7663
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ifD4S91ifkTkF1ERNC3KNGKJ34HeK2rUr%2BJb3DHrbNbBiSOVYo6kPVSMPx1MOcW1MP92wGGdXLbVjKp%2Fn8kFN1xWR7T%2Biq01WVx5SR3mJvW4CXRhHWchZiWTI6rvfuNjxY%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff51bb6b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4085&min_rtt=0&rtt_var=5483&sent=108&recv=123&lost=0&retrans=0&sent_bytes=17907&recv_bytes=14215&delivery_rate=1172433&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1533&inflight_dur=45&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index2.css
104.21.32.1200 OK 7.3 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index2.css
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (7252), with CRLF line terminators
First Seen 2024-08-14
Last Seen 2025-08-02
Times Seen 51184
Size 7.3 kB (7256 bytes)
MD5 006001ba402d502f054f7e4bafb9a44e
SHA1 ae1963e915e14e333300261885e1c46b0c07fefa
SHA256 90566aed73a2035c2f72f2fbfcba62d0cf31270bb81853e441cb8d84bad7b8bd
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index2.css HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7MymWfxrNWpgcUIoKXmaWaaYgiBofqmgOZuXHFxGWwUG%2FfVomSWqAcNLLIByj24y%2B29MzijWo1fZK3jeNrNIQOE6sYYp7Tjg%2FbEoFK2fGE9PCcH7FuOrzNz%2FS4OX1RBBhrg%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643eff51bb5b4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=0&rtt_var=3611&sent=150&recv=128&lost=0&retrans=0&sent_bytes=63306&recv_bytes=14449&delivery_rate=1874974&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=20954&unsent_bytes=0&cid=5e5df1a717089c66&ts=1565&inflight_dur=76&x=40"
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
38.54.123.58200 OK 11 kB URL
g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
IP / ASN
38.54.123.58
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 10748, version 1.0
First Seen 2023-04-06
Last Seen 2025-08-02
Times Seen 57440
Size 11 kB (10748 bytes)
MD5 ece6673e477b4d7aca12f04dace5ed60
SHA1 f8ff7fbe231448a58d3989d84803dd66851b9988
SHA256 4352380f92ce7f9a4a4a23306b992bed10055dbfffe90987cc72083e583fc280
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/lzdfe/static/0.0.29/Roboto/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:27 GMT
content-type: font/woff2
content-length: 10748
server: openresty
strict-transport-security: max-age=360000; includeSubDomains
x-oss-request-id: 6878F57AFCD56A33384BCBF8
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15489323926058991130
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 7OZnPkd7TXrKEvBNrOXtYA==
x-oss-server-time: 73
x-source-scheme: https
eagleeye-traceid: a3b55c9817527576260396646e
timing-allow-origin: *
via: EU-FRA-marseille-EDGE3-CACHE16[2],EU-FRA-marseille-EDGE3-CACHE9[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE5[3],EU-FRA-paris-GLOBAL1-CACHE22[0,TCP_HIT,3],cache9.l2fr1[0,0,200-0,H], cache27.l2fr1[1,0], ens-cache1.gb9[0,0,200-0,H], ens-cache22.gb9[0,0]
ali-swift-global-savetime: 1752757626
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 13:07:07 GMT
x-swift-cachetime: 604799
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5f3aa17533619070068855e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 762bac317e46d2085f3d681902272d09
nginx-hit: 1
age: 1211
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=2&_t=-10189140681&tag=&type=jserror&category=sys&msg=ReferenceError%3A%20feloader%20is%20not%20defined&file=https%3A%2F%2Fmabarvip189.com%2F&line=3941&col=1&stack=%40https%3A%2F%2Fmabarvip189.com%2F%3A3941%3A1%0A&sampling=1&spm=a2o4j.pdp_revamp
59.82.121.55200 OK 0 B URL
retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=2&_t=-10189140681&tag=&type=jserror&category=sys&msg=ReferenceError%3A%20feloader%20is%20not%20defined&file=https%3A%2F%2Fmabarvip189.com%2F&line=3941&col=1&stack=%40https%3A%2F%2Fmabarvip189.com%2F%3A3941%3A1%0A&sampling=1&spm=a2o4j.pdp_revamp
IP / ASN
59.82.121.55
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.taobao.com
Fingerprint 5C:5A:6F:AD:91:BE:B9:C3:31:C9:DE:6A:49:4B:AC:B5:A6:CD:8F:1D
Validity Wed, 07 May 2025 06:41:02 GMT - Mon, 08 Jun 2026 06:41:01 GMT
GET /r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=2&_t=-10189140681&tag=&type=jserror&category=sys&msg=ReferenceError%3A%20feloader%20is%20not%20defined&file=https%3A%2F%2Fmabarvip189.com%2F&line=3941&col=1&stack=%40https%3A%2F%2Fmabarvip189.com%2F%3A3941%3A1%0A&sampling=1&spm=a2o4j.pdp_revamp HTTP/1.1
Host: retcode.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:32 GMT
content-type: image/png
content-length: 183
server: Tengine
last-modified: Tue, 07 Apr 2020 08:58:03 GMT
accept-ranges: bytes
ups-target-key: retcode.taobao.com
x-protocol: HTTP/2.0
eagleeye-traceid: 213e063117533655721255079e0d78
strict-transport-security: max-age=31536000
s-brt: 0
s-rt: 1
X-Firefox-Spdy: h2
GET retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140723&tag=&type=jserror&category=sys&msg=Error%3A%20Script%20error%20for%20%22react-dom%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&sampling=1&spm=a2o4j.pdp_revamp
59.82.121.55200 OK 0 B URL
retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140723&tag=&type=jserror&category=sys&msg=Error%3A%20Script%20error%20for%20%22react-dom%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&sampling=1&spm=a2o4j.pdp_revamp
IP / ASN
59.82.121.55
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.taobao.com
Fingerprint 5C:5A:6F:AD:91:BE:B9:C3:31:C9:DE:6A:49:4B:AC:B5:A6:CD:8F:1D
Validity Wed, 07 May 2025 06:41:02 GMT - Mon, 08 Jun 2026 06:41:01 GMT
GET /r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140723&tag=&type=jserror&category=sys&msg=Error%3A%20Script%20error%20for%20%22react-dom%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&sampling=1&spm=a2o4j.pdp_revamp HTTP/1.1
Host: retcode.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:32 GMT
content-type: image/png
content-length: 183
server: Tengine
last-modified: Tue, 07 Apr 2020 08:58:03 GMT
accept-ranges: bytes
ups-target-key: retcode.taobao.com
x-protocol: HTTP/2.0
eagleeye-traceid: 213e063117533655723195115e0d78
strict-transport-security: max-age=31536000
s-brt: 0
s-rt: 1
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/pc-mod.js
104.21.32.1200 OK 811 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/pc-mod.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1213
Size 811 kB (810951 bytes)
MD5 6aa12d1f8d59f68bfc48188d794f5fbf
SHA1 79f684960906182274087e0996368ec5b99fae54
SHA256 3635d6628941fb762eaa4e038fdcd71e83cbbc2390d1896412a21f99e6daf6f0
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/pc-mod.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 195769
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h8yQiIrAboNj%2BZ3OiFSC9sJb3U0R5N6UXrGLtmi1QrpTFQa6xM9QO3TG7DjkPUqYELqiEk0x9lwpQnR63aPV8tT6CAoHh9%2B8py1nqBI%3D"}]}
cf-ray: 9643eff4c9dc56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET lzd-img-global.slatic.net/g/tps/tfs/TB1nQJUcwmTBuNjy1XbXXaMrVXa-986-930.png
23.251.63.10200 OK 108 kB URL
lzd-img-global.slatic.net/g/tps/tfs/TB1nQJUcwmTBuNjy1XbXXaMrVXa-986-930.png
IP / ASN
23.251.63.10
#62468 HKCLOUDX
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 986 x 930, 8-bit colormap, non-interlaced
First Seen 2023-05-05
Last Seen 2025-08-02
Times Seen 56313
Size 108 kB (108546 bytes)
MD5 dd3d5eccd48c2eca13d74effb06ac4c7
SHA1 f8f191e59241a14eab12f0c8d0bb6143e8257f01
SHA256 291eb640c321aaa04e6923e874643621f29ce8d9e0317e15d7367bb8a363735e
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/tps/tfs/TB1nQJUcwmTBuNjy1XbXXaMrVXa-986-930.png HTTP/1.1
Host: lzd-img-global.slatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/png
content-length: 108546
accept-ranges: bytes
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
age: 36379
ali-swift-global-savetime: 1731757085
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: max-age=3888000, s-maxage=3888000
cdn-type: kds
content-md5: 3T1ezNSMLsoT107/sGrExw==
eagleid: a3b5239817353772479878629e
etag: "DD3D5ECCD48C2ECA13D74EFFB06AC4C7"
expires: Wed, 08 Oct 2025 17:45:35 GMT
last-modified: Tue, 10 Sep 2024 02:07:50 GMT
nginx-hit: 1
timing-allow-origin: *
x-bdcdn-cache-status: TCP_HIT
x-cache-status: HIT from KS-CLOUD-XG-FOREIGN-12-05, HIT from KS-CLOUD-XG-FOREIGN-31-03
x-ccdn-cachettl: 8640000
x-ccdn-expires: 8501149
x-hcs-proxy-type: 1
x-oss-cdn-auth: success
x-request-id: 236db6754ba6387d9e2ee7804cb5fa78
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-swift-cachetime: 3209528
x-swift-savetime: Sun, 24 Nov 2024 08:05:57 GMT
x-tt-trace-tag: id=5
date: Thu, 24 Jul 2025 13:59:21 GMT
X-Firefox-Spdy: h2
GET g.alicdn.com/lzd_sec/epssw/0.0.33/epssw.js
23.36.76.193200 OK 338 kB URL
g.alicdn.com/lzd_sec/epssw/0.0.33/epssw.js
IP / ASN
23.36.76.193
#20940 Akamai International B.V.
Requested by https://mabarvip189.com/
Resource Info
File type data
First Seen 2025-02-28
Last Seen 2025-08-01
Times Seen 12662
Size 338 kB (337534 bytes)
MD5 5371b0d4c7f2ae612a7fd7f3b6179e8d
SHA1 b58511ad726a86d0e88b678ecd152a3ebcb48b87
SHA256 4a46effe9f78aa36defccb30ee0e78687cc58df1a9a83a15569b70f532a1eb38
Certificate Info
Issuer DigiCert Inc
Subject air.alistatic.com
Fingerprint 78:85:B5:87:7C:5C:3B:C4:0F:07:09:DE:05:43:BE:9A:50:DD:95:1F
Validity Thu, 05 Jun 2025 00:00:00 GMT - Tue, 14 Apr 2026 23:59:59 GMT
GET /lzd_sec/epssw/0.0.33/epssw.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 127366
Server: Tengine
x-oss-request-id: 686ED94873EA4130358896A6
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11339859731977351
x-oss-storage-class: Standard
Content-Encoding: gzip
Content-MD5: +prQ4k7LkDHYA9z9M6wV+w==
x-oss-server-time: 38
x-bucket-code: 3
Ups-Target-Key: cdn-relay.vipserver
X-protocol: HTTP/1.1
EagleEye-TraceId: 21039b5317520950485904434e1cf1
Strict-Transport-Security: max-age=0
s-brt: 45
s-rt: 47
Cache-Control: max-age=1321486, s-maxage=86400
Expires: Fri, 08 Aug 2025 21:04:08 GMT
Date: Thu, 24 Jul 2025 13:59:22 GMT
Connection: keep-alive
Vary: Accept-Encoding
SERVED-FROM: 23.36.76.175
Network_Info: NO_OSLO_50304
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 23.36.76.193
GET fourier.taobao.com/ts?url=&token=BHR0oiLHoCW2XzRpgvsflIsxRjvmTZg33mSJog7VAP-CeRTDNl1oxyo__SmhmtCP&cna=&ext=1
123.183.232.34200 OK 0 B URL
fourier.taobao.com/ts?url=&token=BHR0oiLHoCW2XzRpgvsflIsxRjvmTZg33mSJog7VAP-CeRTDNl1oxyo__SmhmtCP&cna=&ext=1
IP / ASN
123.183.232.34
#141771 China Telecom
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject tfe.alibaba.com
Fingerprint 2A:E7:3A:AD:21:93:AF:7D:07:7B:ED:C0:D4:25:1B:59:27:BF:EA:34
Validity Wed, 19 Mar 2025 08:54:01 GMT - Mon, 05 Jan 2026 02:01:01 GMT
GET /ts?url=&token=BHR0oiLHoCW2XzRpgvsflIsxRjvmTZg33mSJog7VAP-CeRTDNl1oxyo__SmhmtCP&cna=&ext=1 HTTP/1.1
Host: fourier.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:26 GMT
content-type: image/gif
content-length: 0
server: Tengine
X-Firefox-Spdy: h2
GET g.alicdn.com/AWSC/fireyejs/1.231.61/fireyejs.js
23.36.76.193200 OK 461 kB URL
g.alicdn.com/AWSC/fireyejs/1.231.61/fireyejs.js
IP / ASN
23.36.76.193
#20940 Akamai International B.V.
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-07-09
Last Seen 2025-08-02
Times Seen 2570
Size 461 kB (460609 bytes)
MD5 b6438fd1e1cf271117330232c0e1c1cb
SHA1 a2bf22f081d21b6759d10eba03e68aab4f6e0ec5
SHA256 f2b20a5c5ccc3a18f8045ba80ab1f8ae174cd6a282a5d6b19a1079b51f714175
Certificate Info
Issuer DigiCert Inc
Subject air.alistatic.com
Fingerprint 78:85:B5:87:7C:5C:3B:C4:0F:07:09:DE:05:43:BE:9A:50:DD:95:1F
Validity Thu, 05 Jun 2025 00:00:00 GMT - Tue, 14 Apr 2026 23:59:59 GMT
GET /AWSC/fireyejs/1.231.61/fireyejs.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 192995
Server: Tengine
x-oss-request-id: 686CFC59989F1539370AED54
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17247550246201688318
x-oss-storage-class: Standard
Content-Encoding: gzip
Content-MD5: k6XYxMHuUbgB80RiWkg4Ww==
x-oss-server-time: 9
x-bucket-code: 3
Ups-Target-Key: cdn-relay.vipserver
X-protocol: HTTP/1.1
EagleEye-TraceId: 210397ac17519729537478296e1c7a
Strict-Transport-Security: max-age=0
s-brt: 15
s-rt: 16
Cache-Control: max-age=1199387, s-maxage=86400
Expires: Thu, 07 Aug 2025 11:09:13 GMT
Date: Thu, 24 Jul 2025 13:59:26 GMT
Connection: keep-alive
Vary: Accept-Encoding
SERVED-FROM: 23.36.76.175
Network_Info: NO_OSLO_50304
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 23.36.76.193
HEAD arms-retcode-sg.aliyuncs.com/r.png?t=pv×=1&page=%2F&tag=&release=&environment=prod&begin=1753365569836&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&dt=MABARVIP189%20~%20Cuan%20Mode%20On%20with%20Friendlies%20Online&dr=&dpr=1.00&de=utf-8&ul=id-ID&sr=1280x1024&vp=1280x1024&ct=&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2ji
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=pv×=1&page=%2F&tag=&release=&environment=prod&begin=1753365569836&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&dt=MABARVIP189%20~%20Cuan%20Mode%20On%20with%20Friendlies%20Online&dr=&dpr=1.00&de=utf-8&ul=id-ID&sr=1280x1024&vp=1280x1024&ct=&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2ji
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
HEAD /r.png?t=pv×=1&page=%2F&tag=&release=&environment=prod&begin=1753365569836&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&dt=MABARVIP189%20~%20Cuan%20Mode%20On%20with%20Friendlies%20Online&dr=&dpr=1.00&de=utf-8&ul=id-ID&sr=1280x1024&vp=1280x1024&ct=&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2ji HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mabarvip189.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:30 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo2.js
104.21.32.1200 OK 64 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo2.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (62257), with no line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1205
Size 64 kB (63830 bytes)
MD5 ad0e9a2d5fc54c731d2e6404d5423b0a
SHA1 99c988af4cd9e6f07a7afd9f43e2883b320c44ae
SHA256 a0a62661ff3c9ece0acd074cadd56315d2f0a8b6ea82f60b0169171bba3d537b
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo2.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 17244
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DwYNfi%2B3aSbReA2sZN2pKpjHVnzB3BP4Mup6nfDp1C6%2B1bB%2BHdS%2Bb04RAYOrKDdWvuMHTHLUITRHckIyGSiD0PXrUlUFe7hBZEir%2FS0%3D"}]}
cf-ray: 9643eff4b9c456b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index.umd.es5.production.js
104.21.32.1200 OK 252 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index.umd.es5.production.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65484), with no line terminators
First Seen 2024-08-03
Last Seen 2025-08-01
Times Seen 13107
Size 252 kB (252347 bytes)
MD5 b92fb45cab5d26d6e906b78306f7cce0
SHA1 7cc14ecdbe17592d248ec7e227a5ad5212b4f6c0
SHA256 990293abfec9d49d5a48a84a63c8ed0d68341263f38c3a6505d15689b88bf959
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index.umd.es5.production.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BZfEYmpYBQIg1u4PkUVeYuID9ouXl0rtxtqSl71yARqlRETQdkUTlOmJjORxshh164SYSesHwIhH5XrqBLJd9FiOg2Z6uBX42Wrs07za31P7SX7LISfZTHfwN0dhTjp0%2FC8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643eff50bb2b4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1680&min_rtt=0&rtt_var=1096&sent=224&recv=140&lost=0&retrans=0&sent_bytes=140812&recv_bytes=15040&delivery_rate=2118949&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=31660&unsent_bytes=0&cid=5e5df1a717089c66&ts=1742&inflight_dur=131&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN011Ya3Kg1OSw3sg81tm_!!6000000001705-2-tps-96-70.png
104.21.32.1200 OK 6.0 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN011Ya3Kg1OSw3sg81tm_!!6000000001705-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48138
Size 6.0 kB (5990 bytes)
MD5 05a0832064e6d46eafea10e5ac9f96cf
SHA1 d28077383314ee082499d493cf889e1809b4a72e
SHA256 1c7dc518bff241df97f82393487d5bca438a2983073ea7607c75f3d10a7c9095
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN011Ya3Kg1OSw3sg81tm_!!6000000001705-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 5990
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNSBTQuxFVbjwDOF8Wo8r7PgmnxRe2EOnr3g7hUtvNi5pioaO0UsrnkyWcTPB48c2ddhlQ%2FJ%2BPKpZ9%2FvDik61QUhaoxcvLErA%2BT1n3cx20JkNeN%2BXP%2BJ9f9I5OnRggoImj8%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff53bbcb4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3622&min_rtt=0&rtt_var=5039&sent=120&recv=124&lost=0&retrans=0&sent_bytes=31907&recv_bytes=14262&delivery_rate=1172433&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1541&inflight_dur=53&x=40"
GET lzd-img-global.slatic.net/g/tps/tfs/TB1xEeTdBGw3KVjSZFDXXXWEpXa-75-66.png
23.251.63.10200 OK 634 B URL
lzd-img-global.slatic.net/g/tps/tfs/TB1xEeTdBGw3KVjSZFDXXXWEpXa-75-66.png
IP / ASN
23.251.63.10
#62468 HKCLOUDX
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 75 x 66, 8-bit colormap, non-interlaced
First Seen 2023-05-05
Last Seen 2025-08-02
Times Seen 39219
Size 634 B (634 bytes)
MD5 8f08398904421ce9c19035d18d940e3c
SHA1 33273d2e9f1463c5faa46a3077b1f21b62dd4b12
SHA256 32163dcdb6eccb0b804c76800614b1545e19cb65627842b47d5d9921340741c4
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/tps/tfs/TB1xEeTdBGw3KVjSZFDXXXWEpXa-75-66.png HTTP/1.1
Host: lzd-img-global.slatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/png
content-length: 634
accept-ranges: bytes
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
age: 36598
ali-swift-global-savetime: 1742383983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
cache-control: max-age=3888000, s-maxage=3888000
cdn-type: kds
content-md5: jwg5iQRCHOnBkDXRjZQOPA==
eagleid: a3b523a817460891144196365e
etag: "8F08398904421CE9C19035D18D940E3C"
expires: Wed, 30 Jul 2025 08:45:14 GMT
last-modified: Mon, 09 Sep 2024 02:51:47 GMT
nginx-hit: 1
timing-allow-origin: *
x-bdcdn-cache-status: TCP_HIT
x-cache-status: HIT from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-31-01
x-ccdn-cachettl: 8640000
x-ccdn-expires: 4414826
x-hcs-proxy-type: 1
x-oss-cdn-auth: success
x-request-id: b333e4cddfa37f210befd72cc2758a4c
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-swift-cachetime: 2848922
x-swift-savetime: Mon, 31 Mar 2025 12:11:01 GMT
x-tt-trace-tag: id=5
date: Thu, 24 Jul 2025 13:59:21 GMT
X-Firefox-Spdy: h2
POST ase.aliexpress.com/upload/web/info
47.246.146.202200 OK 64 B URL
ase.aliexpress.com/upload/web/info
IP / ASN
47.246.146.202
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type JSON text data
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 64 B (64 bytes)
MD5 1b0d08114520fadf97514ce5fb370919
SHA1 39237bd86057f97db5d0a0a7d0de3d3e1bea5c67
SHA256 7e37ef9b68c2e16a0113ac9b8f0a89f2422fd7cf856218335e80d2a99a902e5f
Certificate Info
Issuer GlobalSign nv-sa
Subject *.aliexpress.com
Fingerprint 32:59:24:0C:B0:DF:02:84:AF:2D:BF:46:36:BF:59:96:C8:42:F9:6B
Validity Wed, 14 May 2025 07:47:02 GMT - Mon, 15 Jun 2026 07:41:06 GMT
POST /upload/web/info HTTP/1.1
Host: ase.aliexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json; charset=UTF-8
Content-Length: 658
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:25 GMT
content-type: application/json
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://mabarvip189.com
access-control-allow-credentials: true
content-encoding: gzip
server: Tengine/Aserver
eagleeye-traceid: 211b8f9b17533655658512931e77ef
strict-transport-security: max-age=0
timing-allow-origin: *
X-Firefox-Spdy: h2
POST arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365568932&cate=Error&msg=Script%20error%20for%20%22react%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jc&post_res=
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365568932&cate=Error&msg=Script%20error%20for%20%22react%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jc&post_res=
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
POST /r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365568932&cate=Error&msg=Script%20error%20for%20%22react%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2jc&post_res= HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 5071
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:30 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo3.js
104.21.32.1200 OK 121 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo3.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (42504), with CRLF line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1198
Size 121 kB (120933 bytes)
MD5 401ecc46ff7ceec1ba8ea0e6caefa77d
SHA1 25c23ad9ab2c63b3b61a928ba34eb3df29f14811
SHA256 2df4ab30f711c9a80d88922058081aa736162cfb5b32208cf3674b8bde476393
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo3.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 36632
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=scPYDGFn%2FDVjSISDBIOajFQhgbG9Pcwz8g949xSQAAK3Ef84ULFQm6eLD1YO4U2MnkpX4YUxL%2Bn4GvD8xtC6oJf3CA42VWTBVhOKxEY%3D"}]}
cf-ray: 9643eff4b9c656b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index.js
104.21.32.1200 OK 4.4 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (4360), with no line terminators
First Seen 2023-03-14
Last Seen 2025-08-02
Times Seen 41419
Size 4.4 kB (4360 bytes)
MD5 585f01b138b311211ed74a1887076eef
SHA1 a2b7842d9c2389df0a6a138851fd14ecff2e8ad0
SHA256 7e4dbdd0c5823c3ae9f4b5768d6abec547046b1ca985c0c8a4c8ba444dc2293a
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 1606
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OD7n745Mv0S1h4AmSHr3NF5zbJ5w7Gk1zT7%2FyzQDYVKpUaUXB9gL9cs1Sx1GRNbMlwgco3fdeCRYv4XiOuMwM5kVmlQfnT80NqOvz%2B4%3D"}]}
cf-ray: 9643eff4d9f556b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01zt1zOu1zsFnzoIWje_!!6000000006769-2-tps-34-34.png
104.21.32.1200 OK 314 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01zt1zOu1zsFnzoIWje_!!6000000006769-2-tps-34-34.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
First Seen 2023-05-29
Last Seen 2025-08-02
Times Seen 48233
Size 314 B (314 bytes)
MD5 86f51bd9177d52c5f2e6425e98d95cf0
SHA1 30b0520aed734b206f0f421b241e7168fac215d4
SHA256 4810ae2a6d9cfc4603201912516cc79e41b5470319925b428ab8daaae7daa82c
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01zt1zOu1zsFnzoIWje_!!6000000006769-2-tps-34-34.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 314
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XzsrXVk3%2F8T%2FOePswtCy2dU2mc%2BKtZTVm8%2FxEBW%2B7vaVZ5w%2F0sE5n3J%2Fj0eNInu%2BDW%2BfjFxIduUZPZYOy5XGH7k74lQgY2pf3OKlHLbltqkuS15yaZWeQj0M3WQpobpPrCw%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff56bc3b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=132&recv=125&lost=0&retrans=0&sent_bytes=45907&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1552&inflight_dur=62&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01b9cK511pjsP40xyAX_!!6000000005397-2-tps-34-34.png
104.21.32.1200 OK 590 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01b9cK511pjsP40xyAX_!!6000000005397-2-tps-34-34.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
First Seen 2023-06-27
Last Seen 2025-08-02
Times Seen 48124
Size 590 B (590 bytes)
MD5 2f1eecdd317c2a880392ad9fdc2ac832
SHA1 48320603f6f647322e50ba4753093a95fcc5ed58
SHA256 1c5ee33a75c5dcf1762c990271036927804c334533fbaa0bef7fc50c4da49ca4
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01b9cK511pjsP40xyAX_!!6000000005397-2-tps-34-34.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 590
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9QwQ6F7hZcvJOUYVT6WHpP%2BLirDHHq8YNVh0Vz43qtg4y1DtK7e39Ln2PCme9%2Bg6cVU7rcPWhb%2BtgbYyLiMg%2Ba2l0d5e843ZfNCWJqrtbw4rPQW5T0ATHjwzMWw%2BaoA3Nj0%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff56bc5b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=132&recv=125&lost=0&retrans=0&sent_bytes=45907&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1552&inflight_dur=62&x=40"
OPTIONS acs-m.lazada.co.id/h5/mtop.global.detail.web.getdetailinfo/1.0/?jsv=2.5.1&appKey=24677475&t=1753365562137&sign=a5a2d80c14ddf267b99ed43aad6c399a&api=mtop.global.detail.web.getDetailInfo&v=1.0&type=originaljson&isSec=1&AntiCreep=true&timeout=20000&dataType=json&sessionOption=AutoLoginOnly&x-i18n-language=id&x-i18n-regionID=ID
47.246.167.246200 OK 0 B URL
acs-m.lazada.co.id/h5/mtop.global.detail.web.getdetailinfo/1.0/?jsv=2.5.1&appKey=24677475&t=1753365562137&sign=a5a2d80c14ddf267b99ed43aad6c399a&api=mtop.global.detail.web.getDetailInfo&v=1.0&type=originaljson&isSec=1&AntiCreep=true&timeout=20000&dataType=json&sessionOption=AutoLoginOnly&x-i18n-language=id&x-i18n-regionID=ID
IP / ASN
47.246.167.246
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.com
Fingerprint 61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
Validity Fri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
OPTIONS /h5/mtop.global.detail.web.getdetailinfo/1.0/?jsv=2.5.1&appKey=24677475&t=1753365562137&sign=a5a2d80c14ddf267b99ed43aad6c399a&api=mtop.global.detail.web.getDetailInfo&v=1.0&type=originaljson&isSec=1&AntiCreep=true&timeout=20000&dataType=json&sessionOption=AutoLoginOnly&x-i18n-language=id&x-i18n-regionID=ID HTTP/1.1
Host: acs-m.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: entrance,x-i18n-language,x-i18n-regionid
Referer: https://mabarvip189.com/
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:23 GMT
content-type: application/json
content-length: 7
server: Tengine/Aserver
s-rt: 2
x-aserver-sret: SUCCESS
eagleeye-traceid: 2140d12d17533655636982708eb616
X-Firefox-Spdy: h2
GET ynuf.aliapp.org/w/wu.json
124.239.14.252200 OK 190 B URL
ynuf.aliapp.org/w/wu.json
IP / ASN
124.239.14.252
#4134 Chinanet
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 190 B (190 bytes)
MD5 b18466357e0ca3157b1f1b3dadc51770
SHA1 5332fde07397f72f9d1cd06030a5e15d076e2bff
SHA256 b867eaed6674061b1c65724eca6943cd5746979b540d388ca364c3dc82530cdd
Certificate Info
Issuer GlobalSign nv-sa
Subject *.alibabachengdun.com
Fingerprint FC:28:B7:B3:30:25:A2:56:64:E2:FA:2B:0A:63:06:F4:A2:61:65:C3
Validity Thu, 13 Mar 2025 06:00:01 GMT - Thu, 04 Sep 2025 00:00:00 GMT
GET /w/wu.json HTTP/1.1
Host: ynuf.aliapp.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
date: Thu, 24 Jul 2025 13:59:29 GMT
content-type: text/javascript;charset=utf-8
content-length: 190
x-application-context: umid-web:cn-prod:7001
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Accept,X-PINGARUNER,CONTENT-TYPE,X-Requested-With
etag: T2gA-dM92QYrP9G45_6cFO36xgbU674ioRE7dJb3fTQBILZ6dwtryNdZc0XyOnDczes=
cache-control: no-cache
set-cookie: cbc=T2gA7eWSj98OMx1GYVVF3FNgD3GMA9WmQkN92IsYHCSA3nmqRIEB2E3lKU78gP_DvYU=; Max-Age=31536000; Expires=Fri, 24-Jul-2026 13:59:29 GMT; Domain=ynuf.aliapp.org; Path=/
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01EShTwh1uKIMLn9AjA_!!6000000006018-0-tps-34-34.jpg
104.21.32.1200 OK 1.2 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01EShTwh1uKIMLn9AjA_!!6000000006018-0-tps-34-34.jpg
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 34x34, components 3
First Seen 2024-10-04
Last Seen 2025-08-02
Times Seen 37039
Size 1.2 kB (1189 bytes)
MD5 25af287e867164172f028fedeefd74de
SHA1 5b7194ecbeb20809949e2a1a4e59c755fb4ac9f8
SHA256 5c29a4d5eadca9d201ad4c2d3dbf4d5d3bcffea3b794baa7880531230a136722
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01EShTwh1uKIMLn9AjA_!!6000000006018-0-tps-34-34.jpg HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/jpeg
content-length: 1189
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=70i6AvLCsadN95PKTNdlRdnfT%2BGPeHE8pBOP3jFNV1%2FqZ5zSSc5t3JJwwMC%2Bw4cs0jbhl1SS6xpYvLAqXpzpvAXOKfHp%2FHZWrGy5F4cnKzrpGjyQ2Udz7TmyWT1gIXQObV8%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff58bc9b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2908&min_rtt=0&rtt_var=4066&sent=136&recv=126&lost=0&retrans=0&sent_bytes=48777&recv_bytes=14356&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1558&inflight_dur=70&x=40"
POST arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365562401&cate=ReferenceError&msg=feloader%20is%20not%20defined&stack=%40https%3A%2F%2Fmabarvip189.com%2F%3A3941%3A1%0A&file=https%3A%2F%2Fmabarvip189.com%2F&line=3941&col=1&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j7&post_res=
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365562401&cate=ReferenceError&msg=feloader%20is%20not%20defined&stack=%40https%3A%2F%2Fmabarvip189.com%2F%3A3941%3A1%0A&file=https%3A%2F%2Fmabarvip189.com%2F&line=3941&col=1&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j7&post_res=
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
POST /r.png?t=error×=2&page=%2F&tag=&release=&environment=prod&begin=1753365562401&cate=ReferenceError&msg=feloader%20is%20not%20defined&stack=%40https%3A%2F%2Fmabarvip189.com%2F%3A3941%3A1%0A&file=https%3A%2F%2Fmabarvip189.com%2F&line=3941&col=1&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&dl=https%3A%2F%2Fmabarvip189.com%2F&z=mdhgl2j7&post_res= HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 115
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:30 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01uOZizA1UOFhot1z5u_!!6000000002507-2-tps-96-70.png
104.21.32.1200 OK 11 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01uOZizA1UOFhot1z5u_!!6000000002507-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48157
Size 11 kB (11068 bytes)
MD5 7d00202d7766c61acf99433e2a99bc6e
SHA1 819a071137728d5d9d39c9a6bd7e9a63d3747133
SHA256 67f535f6ea005ed45055bca2126b8421d3b32ec55aed99528d71c71b4d53b3ec
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01uOZizA1UOFhot1z5u_!!6000000002507-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 11068
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iAykWGXPVx%2Bgv7pEsK%2FokXRyKkxJ4qI%2FsJDo%2BzN9F5w79n%2B9%2BnxHy5U1UW8QWg9L%2FLiVaOfIDo%2Fq919dje9iC7P2SyDzI3M1Aa64KBmKnRMuPAu1s%2BWRWqFT9bar3jKpsf0%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff55bbeb4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=128&recv=125&lost=0&retrans=0&sent_bytes=41823&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1548&inflight_dur=58&x=40"
HEAD arms-retcode-sg.aliyuncs.com/r.png?t=resourceError×=1&page=%2F&tag=&release=&environment=prod&begin=1753365568929&src=https%3A%2F%2Fmabarvip189.com%2Freact.js&node_name=script&xpath=html.%20%3E%20head.%20%3E%20script.&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&z=mdhgl2jb
8.222.203.130200 OK 0 B URL
arms-retcode-sg.aliyuncs.com/r.png?t=resourceError×=1&page=%2F&tag=&release=&environment=prod&begin=1753365568929&src=https%3A%2F%2Fmabarvip189.com%2Freact.js&node_name=script&xpath=html.%20%3E%20head.%20%3E%20script.&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&z=mdhgl2jb
IP / ASN
8.222.203.130
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.arms.aliyuncs.com
Fingerprint 42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
Validity Thu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
HEAD /r.png?t=resourceError×=1&page=%2F&tag=&release=&environment=prod&begin=1753365568929&src=https%3A%2F%2Fmabarvip189.com%2Freact.js&node_name=script&xpath=html.%20%3E%20head.%20%3E%20script.&sr=1280x1024&vp=1280x1024&ct=&uid=IzmdOd54hXyg3XleL2wyjjFe7j2X&sid=3wm2Id9whqdgFwl722qtjzblyszk&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=v0mj9dO8h9wgX6lF7290jmdc2z9L&sampling=1&z=mdhgl2jb HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mabarvip189.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:31 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index3.js
104.21.32.1200 OK 9.4 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index3.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (9397), with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 13392
Size 9.4 kB (9397 bytes)
MD5 4cb003cd0321a12dd25e47f63a3fde90
SHA1 7fd0813fd71cd2fa729a3aeb398fca7ab86708c1
SHA256 40a49d28a9db56e836ecbeb6d23880b8672446aa5a447238d71249942abad0b9
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index3.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BJZXrtQ4zMcewQVM8zGsc7McrFbcd4N%2BFK4FX33Up7cca6gLuZIZT4z%2BzDArUNKHTeZ%2BaPjk03D27l%2F%2F6yUcrsG2zXc5FN1uTw18gWpizQChAvF%2BHgTkCW2fSkhjlOQZyMc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643eff58bcbb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=132&recv=125&lost=0&retrans=0&sent_bytes=45907&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1556&inflight_dur=62&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index4.js
104.21.32.1200 OK 5.9 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index4.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (5853), with no line terminators
First Seen 2025-02-28
Last Seen 2025-08-01
Times Seen 12791
Size 5.9 kB (5853 bytes)
MD5 c87ff2361e1d378ffc3146c73b5e68b1
SHA1 f9fc4a6bd66ce744bc87cf05388f70e31846b57a
SHA256 5c2d29cf1cb5d0ad5183760decc227971c17de66e85a8838a5e666feb5e97a1c
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index4.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lE8SvSijLs%2FKVx2H4KM99F0weY7DGEcvwcQfyLtLiEYagIkNZ%2FYDPF5kgjl8P7ARrp%2Ff0BSY%2FUqcvThshv%2ByClV0rgiuioRtIy8xhxZ41US5zFxqyW4DjNvNIJ7Gcqts4EQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643eff59bcdb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=0&rtt_var=3611&sent=148&recv=128&lost=0&retrans=0&sent_bytes=61388&recv_bytes=14449&delivery_rate=1874974&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=20954&unsent_bytes=0&cid=5e5df1a717089c66&ts=1564&inflight_dur=76&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo.js
104.21.32.1200 OK 570 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (30996), with CRLF line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1225
Size 570 kB (570245 bytes)
MD5 d33c0ac6cad9e89975c97915b41d7e8a
SHA1 aa976bc0b0eef7205879b513e60990cf02ae43e9
SHA256 b8e965f27255c77a49ec05f5febceb56c69c92abef8eb5e8f11997dd89207b08
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1PRVEJdTHi2haAZc5WQkubAYMQnn0eT3IZQ%2BQ6gAA6rgO7Jd3M1RQ4Zr5qTrlqh6xpi3nw%2BVrdFzciuPw4SlF%2FFq%2Bu8xIdy7Vm4VMxpbKSe7%2FCSxKBO4afxP4fVvOChD%2FJ0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
age: 1
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 9643f0070c6fb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=717&min_rtt=0&rtt_var=281&sent=469&recv=188&lost=0&retrans=0&sent_bytes=471021&recv_bytes=17687&delivery_rate=13347761&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=28809&unsent_bytes=0&cid=5e5df1a717089c66&ts=3412&inflight_dur=221&x=40"
GET g.lazcdn.com/g/lzdmod/im/5.0.103/index.js
38.54.123.58200 OK 1.6 MB URL
g.lazcdn.com/g/lzdmod/im/5.0.103/index.js
IP / ASN
38.54.123.58
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2024-03-03
Last Seen 2025-08-01
Times Seen 4337
Size 1.6 MB (1596227 bytes)
MD5 fe8a4f876a581db83f4e729d76fc4523
SHA1 7812e4a1d28c3a8d09b08228c0f2e3f695b7d0d2
SHA256 32c0b6900d44bd735cd38525479c69eda41737d0df884a17afb7d48d3e95e9f4
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/lzdmod/im/5.0.103/index.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:29 GMT
content-type: application/javascript
content-length: 512333
server: openresty
strict-transport-security: max-age=360000; includeSubDomains
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 687CD72DD09235393153BF8E
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9519915325589339289
x-oss-storage-class: Standard
content-md5: /opPh2pYHbg/TnKddvxFIw==
x-oss-server-time: 7
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319717530120122378168e
timing-allow-origin: *
via: EU-FRA-marseille-EDGE3-CACHE2[4],EU-FRA-marseille-EDGE3-CACHE10[0,TCP_HIT,3],EU-FRA-paris-GLOBAL1-CACHE8[6],EU-FRA-paris-GLOBAL1-CACHE24[0,TCP_HIT,3],cache29.l2fr1[0,0,200-0,H], cache3.l2fr1[1,0], ens-cache9.gb9[19,19,200-0,M], ens-cache1.gb9[21,0]
ali-swift-global-savetime: 1753012013
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 24 Jul 2025 11:48:55 GMT
x-swift-cachetime: 259078
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5f39517533577351461802e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 18b570bf2f46f8fe1c98ccc433c86790
nginx-hit: 1
age: 7553
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/pc.css
104.21.32.1200 OK 6.5 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/pc.css
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (6449), with CRLF line terminators
First Seen 2024-08-14
Last Seen 2025-08-02
Times Seen 50557
Size 6.5 kB (6453 bytes)
MD5 17fbadd502b81b226f140e2626b59882
SHA1 418a3bb9c84482cf5c6eabcb251496ec79a5c00b
SHA256 f025608eb81037815a5c2de7868b0d941819fee8a0dbff8052703c7bfecd4c16
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/pc.css HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/css
content-length: 1529
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xd4gEh1eRA2vgudAaQo501qbxXg4QiBA4s5TyTh5eakr2dcYSrCsRr6PnQRfKBOebS6oH7cA%2B1dpOuVC2BfbhfHtKHMQzQagrZME4jE%3D"}]}
cf-ray: 9643eff4b9d156b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index.umd.es5.production_002.js
104.21.32.1200 OK 737 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index.umd.es5.production_002.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2024-03-03
Last Seen 2025-08-01
Times Seen 12414
Size 737 kB (737208 bytes)
MD5 a0662a0fcb2e159cdefbfcdc85bcfd3a
SHA1 94473e4db39bb2690f3e68b9a7c163eafba09b9b
SHA256 6b1534dfb1a5be524c6c7c19270fbdc233425dfed6d26c837d484c2ee3fe0eb8
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index.umd.es5.production_002.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hZFP%2BMrSLdatKc1KHWdwX%2BomxkpzLl1q0aRDpo1O2QFFz%2FPh3cQNW%2BJIycLX6ycbHpOSuWe5Mu8pGsR7zoEGnaeXzs9voH3gTZqQpaaWE7ltDJ8wwraF7Tw%2BjJ1vsjISoDg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643eff50bb3b4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1596&min_rtt=0&rtt_var=988&sent=234&recv=141&lost=0&retrans=0&sent_bytes=154106&recv_bytes=15085&delivery_rate=2118949&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=31660&unsent_bytes=0&cid=5e5df1a717089c66&ts=1749&inflight_dur=138&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/7b17449b7b047a1f1a859a29ec996e97.png
104.21.32.1200 OK 445 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/7b17449b7b047a1f1a859a29ec996e97.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 30 x 30, 8-bit colormap, non-interlaced
First Seen 2023-10-14
Last Seen 2025-08-02
Times Seen 45268
Size 445 B (445 bytes)
MD5 7b17449b7b047a1f1a859a29ec996e97
SHA1 a28237a603e659bef0d1cee483afcfd7407bd26b
SHA256 446511f4b5d743bbca5bf59a103dea39a9106bcafa82d804846b121426113f7e
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/7b17449b7b047a1f1a859a29ec996e97.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 445
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFUOQ7QQ9DSgGKzmA7gqBfgSxMlF3iicBbrJ6DBUR64Wl8%2BUi4gGnLPECS3WwFncHUJftBbKIa9GPKmj10t4Z0miJQLuHvilyEVSfq7TM94MKlMBtPa3rHGOmcLCBBjjr1Y%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff51bb4b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4085&min_rtt=0&rtt_var=5483&sent=112&recv=123&lost=0&retrans=0&sent_bytes=23507&recv_bytes=14215&delivery_rate=1172433&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1535&inflight_dur=46&x=40"
GET lab-js-abtest.lazada.com/abtest/h5/config/online/v1/lazada-lab-trade-payment/metaInfo.json?t=1753365560942
90.84.160.25403 Forbidden 345 B URL
lab-js-abtest.lazada.com/abtest/h5/config/online/v1/lazada-lab-trade-payment/metaInfo.json?t=1753365560942
IP / ASN
90.84.160.25
#2285 Orange
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF, LF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 345 B (345 bytes)
MD5 fa19254edb115b41cf247109b353a10c
SHA1 c65028b6bc3c65eae9cd945f26c41d72203705cf
SHA256 493328f00b0a07012fa99ce81439f096a115ad0fa695959b72c4dad65844242f
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.vn
Fingerprint 0F:F4:0D:93:B3:F8:02:10:10:F9:23:43:45:DF:D8:43:C6:15:30:0B
Validity Fri, 27 Dec 2024 04:26:09 GMT - Wed, 28 Jan 2026 04:26:08 GMT
GET /abtest/h5/config/online/v1/lazada-lab-trade-payment/metaInfo.json?t=1753365560942 HTTP/1.1
Host: lab-js-abtest.lazada.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: openresty
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: text/html
x-ccdn-req-id-46b1: 14c48abc479df168225b773e66271f89
content-length: 345
via: EU-FRA-marseille-EDGE1-CACHE4[1]
access-control-allow-origin: https://*.lazada.co.id,https://*.lazada.com.ph,https://*.lazada.co.th,https://*.lazada.vn,https://*.lazada.sg,https://*.lazada.com.my,https://*.daraz.com.bd,https://*.daraz.pk,https://*.daraz.lk,https://*.daraz.com.np,https://*.shop.com.mm
strict-transport-security: max-age=360000
alt-svc: h3=":443"; ma=2592000
x-ccdn-forbid-code: 020200
X-Firefox-Spdy: h2
GET g.alicdn.com/AWSC/et/1.83.8/et_f.js
23.36.76.193200 OK 262 kB URL
g.alicdn.com/AWSC/et/1.83.8/et_f.js
IP / ASN
23.36.76.193
#20940 Akamai International B.V.
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-03-11
Last Seen 2025-08-01
Times Seen 50263
Size 262 kB (262136 bytes)
MD5 fdc8d3c63a356d45a6af4495199742dd
SHA1 b03b109bc585dc4e8e29982cde4195dbacb3af2e
SHA256 0ab55e76a88a3662447e678025d70e9367eb0c0a5d14948440013c3670ad545d
Certificate Info
Issuer DigiCert Inc
Subject air.alistatic.com
Fingerprint 78:85:B5:87:7C:5C:3B:C4:0F:07:09:DE:05:43:BE:9A:50:DD:95:1F
Validity Thu, 05 Jun 2025 00:00:00 GMT - Tue, 14 Apr 2026 23:59:59 GMT
GET /AWSC/et/1.83.8/et_f.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 91020
Server: Tengine
x-oss-request-id: 686389DA2547D43832BDC12C
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12424508067849186430
x-oss-storage-class: Standard
Content-Encoding: gzip
Content-MD5: EMxYD13f00uUcyuVOeMQDA==
x-oss-server-time: 44
x-bucket-code: 3
Ups-Target-Key: cdn-relay.vipserver
X-protocol: HTTP/1.1
EagleEye-TraceId: 211b427e17513538185863352e1c95
Strict-Transport-Security: max-age=0
s-brt: 49
s-rt: 50
SERVED-FROM: 23.36.76.189
Cache-Control: max-age=580254, s-maxage=86400
Expires: Thu, 31 Jul 2025 07:10:18 GMT
Date: Thu, 24 Jul 2025 13:59:24 GMT
Connection: keep-alive
Vary: Accept-Encoding
Network_Info: NO_OSLO_50304
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 23.36.76.193
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01bSHOIg1O2N9lO20XK_!!6000000001647-2-tps-34-34.png
104.21.32.1200 OK 533 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01bSHOIg1O2N9lO20XK_!!6000000001647-2-tps-34-34.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
First Seen 2023-05-29
Last Seen 2025-08-02
Times Seen 48178
Size 533 B (533 bytes)
MD5 8fd8c875435d9f1b2160aa2a9994cf42
SHA1 932831ffec70a345d5c0b4daad315d0915edaa37
SHA256 7e1588c6fa7175777e2fdf34c17895bb0b2ce24583ab591eadc1c024a5a056d7
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01bSHOIg1O2N9lO20XK_!!6000000001647-2-tps-34-34.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 533
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lpQ1sWMUe5VMarbC1v%2FgncO4FdA584hvPzk2IQpXS1JhP1c%2BJVYMmSNz1%2BybglLcWYGb3SLd5WEOVdLvBCjL2UlCprkeSEubcQH3qenjW0b6%2FnO6br9yPZ0W8ispH3yB%2F50%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff57bc7b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3183&min_rtt=0&rtt_var=3611&sent=142&recv=128&lost=0&retrans=0&sent_bytes=56354&recv_bytes=14449&delivery_rate=1874974&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=20954&unsent_bytes=0&cid=5e5df1a717089c66&ts=1561&inflight_dur=72&x=40"
GET mabarvip189.com/wp-content/uploads/2025/07/cropped-cropped-favicon.png
104.21.32.1200 OK 40 kB URL
mabarvip189.com/wp-content/uploads/2025/07/cropped-cropped-favicon.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 40 kB (40427 bytes)
MD5 e6a43a526798804e957f9d2a328c6f88
SHA1 05ab33a15b732a163f2c0c74d029d6a24acc27b9
SHA256 407ac644272d9b3a52352ec38620df719f8121f598ca09082755300998d9f6ce
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/uploads/2025/07/cropped-cropped-favicon.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:20 GMT
content-type: image/png
content-length: 40427
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2FVu9i5Bvze2sCDWPZEW5XEeeblwU%2FGGfK0hZQv4HOmp3kObtEInzPXiJDBCuMumjASl3pZlYd13IPq%2FrLZQpxl%2BtI8TZAHgjqWrmYLCOkYyos1NyDyZZKEQWWQFaMGbXqE%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 09:19:22 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
age: 1
cf-cache-status: HIT
cf-ray: 9643f003bc54b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1069&min_rtt=0&rtt_var=619&sent=437&recv=177&lost=0&retrans=0&sent_bytes=428946&recv_bytes=16983&delivery_rate=10220485&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=43030&unsent_bytes=0&cid=5e5df1a717089c66&ts=2882&inflight_dur=216&x=40"
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
38.54.123.58200 OK 11 kB URL
g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
IP / ASN
38.54.123.58
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 10788, version 1.0
First Seen 2023-04-06
Last Seen 2025-08-02
Times Seen 56316
Size 11 kB (10788 bytes)
MD5 709f6f90c7d493cd16b8cd087df492ab
SHA1 8fb2a4d035a6f1a5290dc14b4cba324d558f1205
SHA256 b79781efede37903be212fcdf63955e41c8649e678b6b83adf824459d240a188
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:27 GMT
content-type: font/woff2
content-length: 10788
server: openresty
strict-transport-security: max-age=360000; includeSubDomains
x-oss-request-id: 68822EC459263E36367D5FCC
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9556587264596756474
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: cJ9vkMfUk80WuM0IffSSqw==
x-oss-server-time: 28
x-source-scheme: https
eagleeye-traceid: a3b5619a17533621151597227e
timing-allow-origin: *
via: EU-FRA-marseille-EDGE3-CACHE16[5],EU-FRA-marseille-EDGE3-CACHE1[0,TCP_HIT,4],EU-FRA-paris-GLOBAL1-CACHE11[13],EU-FRA-paris-GLOBAL1-CACHE2[9,TCP_MISS,12],cache24.l2fr1[0,0,200-0,H], cache11.l2fr1[1,0], ens-cache13.gb9[0,0,200-0,H], ens-cache20.gb9[1,0]
ali-swift-global-savetime: 1753362116
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 24 Jul 2025 13:03:01 GMT
x-swift-cachetime: 604735
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5f3a817533643697351566e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 3075c7a630d6e80260e582ba03a8109c
nginx-hit: 1
age: 1198
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo.css
104.21.32.1200 OK 412 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo.css
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type ASCII text, with very long lines (65532), with CRLF line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1226
Size 412 kB (412222 bytes)
MD5 f102098a1eed84091f3a05f57d8c64aa
SHA1 8ca131c8d3a04c5834aba6ac5fd4485f1788b35d
SHA256 9a7c13f82f3de4c18ac025b56a18ebcd839084981cfda7963605ec90ef1ca01f
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo.css HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/css
content-length: 41230
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XAkPSLpcPJcqA6pbKBuHjAXnPZ9Kj0MWHKt2l08EVKEygX9qfHn0Hkbc%2FRCnpxwhHr1WztqaAvqR1YJsylrM%2BcpN0v3dn9mTBTyh7kk%3D"}]}
cf-ray: 9643eff4d9fe56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/combo4.js
104.21.32.1200 OK 224 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/combo4.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (32023), with CRLF line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1222
Size 224 kB (223827 bytes)
MD5 a963f11ce1733b690c9cfe73e94b54bb
SHA1 76535f5c2725f90e0fe37109d27d73e83102766b
SHA256 524c1c66d608fb2811acd3ef6936a2252e8ef8f0b952b63f452f028997c7795d
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/combo4.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 70664
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YY6GIVC%2Fu0ZZql6EVUhMAQ%2BvbfJy1dNIBS1MiT7FJOy5oNierddgjr6pkEZAeb7xIEhh6wT6PwD%2FlzbFe1HdeGcFawyWcaKCGJaSBws%3D"}]}
cf-ray: 9643eff4da0456b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/uploads/2025/07/cropped-cropped-favicon.png
104.21.32.1200 OK 40 kB URL
mabarvip189.com/wp-content/uploads/2025/07/cropped-cropped-favicon.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 40 kB (40427 bytes)
MD5 e6a43a526798804e957f9d2a328c6f88
SHA1 05ab33a15b732a163f2c0c74d029d6a24acc27b9
SHA256 407ac644272d9b3a52352ec38620df719f8121f598ca09082755300998d9f6ce
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/uploads/2025/07/cropped-cropped-favicon.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 40427
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 09:19:22 GMT
accept-ranges: bytes
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cfFVdV9cJpx3ekOpQq0aUdjjFN24UXH%2F0FUC9B9qw2xaeIcqmKBm82rsSnKmN3Nn0HzYCe8MFhNJfCB3uxbYeYfHZxKSa2jin8VUUdk%3D"}]}
cf-ray: 9643eff4fa4356b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1Je4vhRr0gK0jSZFnXXbRRXXa.png
104.21.32.1200 OK 15 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/TB1Je4vhRr0gK0jSZFnXXbRRXXa.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
First Seen 2023-05-31
Last Seen 2025-08-01
Times Seen 30001
Size 15 kB (14823 bytes)
MD5 0193ee42c3f06bd5b224a582f4c4667a
SHA1 7ca25c4323aa49f9ca89486d5f113a42b1a02fee
SHA256 6696f079f6cd081ea7eaa78a189b7ce7244d00b8f649d87fa01b6126ab4581fb
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/TB1Je4vhRr0gK0jSZFnXXbRRXXa.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 14823
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8FG0DkMGNYNnyqjb27ff5khrjTE%2BKuie7d2%2BFhQAwstwoTJ%2BHJWog2TTsQetxg0WvihzrT2MCWuJIBMuU7uqsU%2BpYmXmINDRgYuREZ0%3D"}]}
cf-ray: 9643eff4fa4b56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN0193C9ay1QIykTmUlwk_!!6000000001954-2-tps-34-34.png
104.21.32.1200 OK 818 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN0193C9ay1QIykTmUlwk_!!6000000001954-2-tps-34-34.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
First Seen 2023-05-29
Last Seen 2025-08-02
Times Seen 48243
Size 818 B (818 bytes)
MD5 ccd8a92cf0b406e88dce9bcc61e97eb3
SHA1 7052c4c90179593c11231f414af3971666eb1b64
SHA256 9756b9d29ce32ca935095424fbcef5588e4baa9c33c89cbd37aba40778c6eedc
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN0193C9ay1QIykTmUlwk_!!6000000001954-2-tps-34-34.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 818
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HQQau2HAJQMLkWoGjdpF001YNUY7%2FPTEI3lMikPbrKr2ctOehH8lJJ4CY8hcWBqLdnVhGAdPSnh7OhzaFRPLZeKMqA0SyY3VAJVlr5gaT2Ih6Pa9Qgm%2BDwoiggF%2BH1Gc8w%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff57bc8b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=132&recv=125&lost=0&retrans=0&sent_bytes=45907&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1557&inflight_dur=62&x=40"
GET mabarvip189.com/react-dom.js
104.21.32.1404 Not Found 0 B URL
mabarvip189.com/react-dom.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /react-dom.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Cookie: lwrid=AgGYPLtDhCk4fnCjl1GJVWh29Hw3; _bl_uid=IzmdOd54hXyg3XleL2wyjjFe7j2X; _uab_collina=175336556564757159536524; tfstk=geDXypVa3k4rm4wOfSxPdNLLUAww43JFCGZtxcBVX-exCRgs5l5ZgRyR2ozr3ro4Hico8DBq3I2NCt2gBe8eLpo-mR296hdcfrm-qlKzDe4o0i2gBe8yLpommR0vbdI9C0K70kCTBSBAy3ZLbRBY6tCRyz48BRetW0K7jzUTBR39_dW7fIarcHs-K7ncDyoYPOBteSVb5mCNBOH7cS1mDziq0YZbGyP9rgBZCDit38GCWInQEvPZePTRBocKlYwxHL_Y4jIzu9zC8w51VWXTVsxWV1fgwrRAqMT-MlNYqoaeV31FsSEuVy-WV1fgMuqb83t5T1f..; xlly_s=1; isg=BO_vsl0-2-TxJt_YzZLUdezYfQr5lEO22f3icwF8i95lUA9SCWTTBu0C1tjuMxsu; lwrtk=AAIEaIKsuwAEOEtkrABrMdER8KL6fQDskQXx1EKkYzrYCsXMq5K8D/I=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 24 Jul 2025 13:59:28 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oceeIM258RSoR%2By%2FqLkDZRS7uC12FeQ97vnBLY0yypCc3%2FQP%2FF8Zd%2F9HFKp0WARQpKLLtNFEVtT0UHEmd5CtZ1VJlsEQAgc4f%2FWeBbpgebSYKMqY0qUo0xXoJ2NGusVHjco%3D"}],"group":"cf-nel","max_age":604800}
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0, no-store, private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=edge
link: <https://mabarvip189.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
content-encoding: br
cf-ray: 9643f02fbeecb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1468&min_rtt=0&rtt_var=897&sent=642&recv=212&lost=0&retrans=0&sent_bytes=690106&recv_bytes=22295&delivery_rate=19883077&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=27697&unsent_bytes=0&cid=5e5df1a717089c66&ts=10883&inflight_dur=333&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01DGonqR1H5qmpBI2hf_!!6000000000707-2-tps-96-70.png
104.21.32.1200 OK 8.9 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01DGonqR1H5qmpBI2hf_!!6000000000707-2-tps-96-70.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
First Seen 2023-08-17
Last Seen 2025-08-02
Times Seen 48097
Size 8.9 kB (8912 bytes)
MD5 3a7c8800aa21df1416ca309341d0c4b7
SHA1 cf72ac3a1dfb31d5ac92032b888dc47d98774df1
SHA256 f832556bf78ff9accfed3397e84ca5f850b544599beeb4db5086a447d29e2ed5
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01DGonqR1H5qmpBI2hf_!!6000000000707-2-tps-96-70.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 8912
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8qTmU4xTPiP%2FgM4KlNWdJamlMDhwA1GBsBTjYMEt4eqSLuAclYeL1NnnuGay1R11m%2BDrPM18mX7n06NJMI4Q6m4P6La2bq8sGMwyEysqkn9TdHDJwWIniCvr%2Bef38SMH1Fw%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff52bb9b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3228&min_rtt=0&rtt_var=4566&sent=132&recv=125&lost=0&retrans=0&sent_bytes=45907&recv_bytes=14309&delivery_rate=1465542&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=5e5df1a717089c66&ts=1552&inflight_dur=62&x=40"
GET g.lazcdn.com/g/lzdfe/static/0.0.44/iconfont-hp.woff
38.54.123.58200 OK 10 kB URL
g.lazcdn.com/g/lzdfe/static/0.0.44/iconfont-hp.woff
IP / ASN
38.54.123.58
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format, TrueType, length 10376, version 1.0
First Seen 2023-05-05
Last Seen 2025-08-01
Times Seen 55067
Size 10 kB (10376 bytes)
MD5 0eace0677309ca4896ff5e2bf56efe6c
SHA1 c1982d2df0551f8b2293d6c025a2379cd893cd18
SHA256 72035184dc490d665f8bb7295ce6d6a8fb65e7e0ab370820708b24d54f9f5e51
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/lzdfe/static/0.0.44/iconfont-hp.woff HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:22 GMT
content-type: font/woff
content-length: 10376
server: openresty
strict-transport-security: max-age=360000; includeSubDomains
x-oss-request-id: 687901C88F0E09323072FA56
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 131960460927145503
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: DqzgZ3MJykiW/14r9W7+bA==
x-oss-server-time: 16
x-source-scheme: https
eagleeye-traceid: a3b55cee17527607759064024e
timing-allow-origin: *
via: EU-FRA-marseille-EDGE3-CACHE6[2],EU-FRA-marseille-EDGE3-CACHE10[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE12[3],EU-FRA-paris-GLOBAL1-CACHE10[0,TCP_HIT,2],cache19.l2fr1[0,0,200-0,H], cache13.l2fr1[0,0], ens-cache18.gb9[0,0,200-0,H], ens-cache7.gb9[4,0]
ali-swift-global-savetime: 1752760776
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 13:59:52 GMT
x-swift-cachetime: 604784
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5f39b17533621159772616e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 123c506511ec5381058767fa0af90472
nginx-hit: 1
age: 2950
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET mabarvip189.com/react.js
104.21.32.1404 Not Found 0 B URL
mabarvip189.com/react.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /react.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Cookie: lwrid=AgGYPLtDhCk4fnCjl1GJVWh29Hw3; _bl_uid=IzmdOd54hXyg3XleL2wyjjFe7j2X; _uab_collina=175336556564757159536524; tfstk=geDXypVa3k4rm4wOfSxPdNLLUAww43JFCGZtxcBVX-exCRgs5l5ZgRyR2ozr3ro4Hico8DBq3I2NCt2gBe8eLpo-mR296hdcfrm-qlKzDe4o0i2gBe8yLpommR0vbdI9C0K70kCTBSBAy3ZLbRBY6tCRyz48BRetW0K7jzUTBR39_dW7fIarcHs-K7ncDyoYPOBteSVb5mCNBOH7cS1mDziq0YZbGyP9rgBZCDit38GCWInQEvPZePTRBocKlYwxHL_Y4jIzu9zC8w51VWXTVsxWV1fgwrRAqMT-MlNYqoaeV31FsSEuVy-WV1fgMuqb83t5T1f..; xlly_s=1; isg=BO_vsl0-2-TxJt_YzZLUdezYfQr5lEO22f3icwF8i95lUA9SCWTTBu0C1tjuMxsu; lwrtk=AAIEaIKsuwAEOEtkrABrMdER8KL6fQDskQXx1EKkYzrYCsXMq5K8D/I=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 24 Jul 2025 13:59:28 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2BovVvan8QrWDz4nkKdThZ33L%2BKUkVgVP1gO0mXtF6FnxbgbrYbAHcQ4xpGxYfUnVRCQWQh9BdKUx%2BCEwmrzVkFanQnizRx08mqBPzo2TTCHlkeX9U4g815JZ2CHnS9AuEk%3D"}],"group":"cf-nel","max_age":604800}
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0, no-store, private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=edge
link: <https://mabarvip189.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
content-encoding: br
cf-ray: 9643f02fbeebb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1468&min_rtt=0&rtt_var=897&sent=639&recv=212&lost=0&retrans=0&sent_bytes=687223&recv_bytes=22295&delivery_rate=19883077&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=27697&unsent_bytes=0&cid=5e5df1a717089c66&ts=10880&inflight_dur=333&x=40"
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
38.54.123.58200 OK 11 kB URL
g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
IP / ASN
38.54.123.58
#138915 Kaopu Cloud HK Limited
Requested by https://mabarvip189.com/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 10788, version 1.0
First Seen 2023-04-06
Last Seen 2025-08-02
Times Seen 56316
Size 11 kB (10788 bytes)
MD5 709f6f90c7d493cd16b8cd087df492ab
SHA1 8fb2a4d035a6f1a5290dc14b4cba324d558f1205
SHA256 b79781efede37903be212fcdf63955e41c8649e678b6b83adf824459d240a188
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazcdn.com
Fingerprint AE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
Validity Fri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
GET /g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: font/woff2
content-length: 10788
server: openresty
strict-transport-security: max-age=360000; includeSubDomains
x-oss-request-id: 68822EC459263E36367D5FCC
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9556587264596756474
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: cJ9vkMfUk80WuM0IffSSqw==
x-oss-server-time: 28
x-source-scheme: https
eagleeye-traceid: a3b5619a17533621151597227e
timing-allow-origin: *
via: EU-FRA-marseille-EDGE3-CACHE6[2],EU-FRA-marseille-EDGE3-CACHE1[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE11[13],EU-FRA-paris-GLOBAL1-CACHE2[9,TCP_MISS,12],cache24.l2fr1[0,0,200-0,H], cache11.l2fr1[1,0], ens-cache13.gb9[0,0,200-0,H], ens-cache20.gb9[1,0]
ali-swift-global-savetime: 1753362116
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 24 Jul 2025 13:03:01 GMT
x-swift-cachetime: 604735
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5f3a817533643697351566e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 2f70f0756b8a45d31fdded7d3acb90b1
nginx-hit: 1
age: 1192
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET member.lazada.co.id/user/api/getCsrfToken
47.246.165.111200 OK 634 B URL
member.lazada.co.id/user/api/getCsrfToken
IP / ASN
47.246.165.111
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 634 B (634 bytes)
MD5 e8da95ce80ee2cb76a7bf1b1c4ddc3a6
SHA1 f62fd20aed3cf9323ec432e560c0760cb4e0b8a6
SHA256 350d939dc143c6e522f1fd2a696f0875abf274bc9bd568903e32042844b4d92b
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.com
Fingerprint 61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
Validity Fri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
GET /user/api/getCsrfToken HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-TOKEN: eb3380311eeee
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:22 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://mabarvip189.com
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 2140e7af17533655626911233e10b4
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET member.lazada.co.id/user/api/getCsrfToken
47.246.165.111200 OK 634 B URL
member.lazada.co.id/user/api/getCsrfToken
IP / ASN
47.246.165.111
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 634 B (634 bytes)
MD5 281c529211424d4aef035a9cda52c74d
SHA1 c12264f9dc85e36053114bbc0fbe6d4f01b73524
SHA256 6b9c530541d2265f5abac26a809cd66f9bdfe731a58e5f93a1a3ee24d74291bf
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.com
Fingerprint 61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
Validity Fri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
GET /user/api/getCsrfToken HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-TOKEN: eb3380311eeee
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:22 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://mabarvip189.com
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 2140e7af17533655629491405e10b4
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET g.alicdn.com/??/sd/baxia/2.5.31/baxiaCommon.js
23.36.76.193200 OK 37 kB URL
g.alicdn.com/??/sd/baxia/2.5.31/baxiaCommon.js
IP / ASN
23.36.76.193
#20940 Akamai International B.V.
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (37062)
First Seen 2025-05-26
Last Seen 2025-08-02
Times Seen 49684
Size 37 kB (37289 bytes)
MD5 d92f78ccaaa2616aa3eb54e89d7032e5
SHA1 1291a7d5ec73b551114f5175cfd05c747b827928
SHA256 cc219d27d7e2ab0b6416fd4a1475fdedcd5b710123506903a526f72a4d208156
Certificate Info
Issuer DigiCert Inc
Subject air.alistatic.com
Fingerprint 78:85:B5:87:7C:5C:3B:C4:0F:07:09:DE:05:43:BE:9A:50:DD:95:1F
Validity Thu, 05 Jun 2025 00:00:00 GMT - Tue, 14 Apr 2026 23:59:59 GMT
GET /??/sd/baxia/2.5.31/baxiaCommon.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: Tengine
x-oss-request-id: 68637848712A583835193B6B
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8518556844306691727
x-oss-storage-class: Standard
Content-MD5: 2S94zKqiYWqj61TonXAy5Q==
x-oss-server-time: 2
x-bucket-code: 3
Content-Encoding: gzip
Ups-Target-Key: cdn-relay.vipserver
X-protocol: HTTP/1.1
EagleEye-TraceId: 210397ac17513493206268147e1e05
Strict-Transport-Security: max-age=0
s-brt: 12
s-rt: 13
Content-Length: 13819
Cache-Control: max-age=575756, s-maxage=86400
Date: Thu, 24 Jul 2025 13:59:24 GMT
Connection: keep-alive
Vary: Accept-Encoding
SERVED-FROM: 23.36.76.175
Network_Info: NO_OSLO_50304
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: FW_IP
FW_IP: 23.36.76.193
GET fourier.alibaba.com/ts?url=&token=gMpkyhAn-5qIWauAMK6SNikVVXlOFT6CaeedJ9QEgZ7fw0GIN6PeyHSz87-F-eYAlefIVwQF-eKewQDtB3t5d97EWAH9gsTdMLbUJ9W53PNC-eDtB3tPd9utWApdOmSA8wWUawPqmMI_z9yPTmbVxGNUze8EmmjCuwWFLe-qmM_2_nrPSpJJ32biGaYX9B9cq_bwqtwUIK2OZN-PoJSXngb17370LJpcq_bwbe0uCgJhqIJFNjgkqGxMUtpEY7jDgCJhFKSyPSPwdiwC0Dp0OSCPcibtqq-O2_SfmNnmm5NCaisPWmm0OW1PcibtmmV_O_Sf4NC..&cna=undefined&ext=1
47.246.165.124200 OK 0 B URL
fourier.alibaba.com/ts?url=&token=gMpkyhAn-5qIWauAMK6SNikVVXlOFT6CaeedJ9QEgZ7fw0GIN6PeyHSz87-F-eYAlefIVwQF-eKewQDtB3t5d97EWAH9gsTdMLbUJ9W53PNC-eDtB3tPd9utWApdOmSA8wWUawPqmMI_z9yPTmbVxGNUze8EmmjCuwWFLe-qmM_2_nrPSpJJ32biGaYX9B9cq_bwqtwUIK2OZN-PoJSXngb17370LJpcq_bwbe0uCgJhqIJFNjgkqGxMUtpEY7jDgCJhFKSyPSPwdiwC0Dp0OSCPcibtqq-O2_SfmNnmm5NCaisPWmm0OW1PcibtmmV_O_Sf4NC..&cna=undefined&ext=1
IP / ASN
47.246.165.124
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.alibaba.com
Fingerprint 5D:34:66:EE:A8:8C:B2:D4:AF:90:98:90:65:36:B3:C7:5F:E8:4D:5B
Validity Tue, 11 Mar 2025 05:07:02 GMT - Sun, 12 Apr 2026 05:01:06 GMT
GET /ts?url=&token=gMpkyhAn-5qIWauAMK6SNikVVXlOFT6CaeedJ9QEgZ7fw0GIN6PeyHSz87-F-eYAlefIVwQF-eKewQDtB3t5d97EWAH9gsTdMLbUJ9W53PNC-eDtB3tPd9utWApdOmSA8wWUawPqmMI_z9yPTmbVxGNUze8EmmjCuwWFLe-qmM_2_nrPSpJJ32biGaYX9B9cq_bwqtwUIK2OZN-PoJSXngb17370LJpcq_bwbe0uCgJhqIJFNjgkqGxMUtpEY7jDgCJhFKSyPSPwdiwC0Dp0OSCPcibtqq-O2_SfmNnmm5NCaisPWmm0OW1PcibtmmV_O_Sf4NC..&cna=undefined&ext=1 HTTP/1.1
Host: fourier.alibaba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:26 GMT
content-type: image/gif
content-length: 0
server: Tengine/Aserver
eagleeye-traceid: 21010c7f17533655669851059e732f
strict-transport-security: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
GET retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140734&tag=&type=jserror&category=sys&msg=Error%3A%20unsupported%20site&file=https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js&line=1&col=1341738&stack=Ft%3C%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341738%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341768%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A429797%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A885%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A896%0A&sampling=1&spm=a2o4j.pdp_revamp
59.82.121.55200 OK 0 B URL
retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140734&tag=&type=jserror&category=sys&msg=Error%3A%20unsupported%20site&file=https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js&line=1&col=1341738&stack=Ft%3C%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341738%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341768%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A429797%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A885%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A896%0A&sampling=1&spm=a2o4j.pdp_revamp
IP / ASN
59.82.121.55
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.taobao.com
Fingerprint 5C:5A:6F:AD:91:BE:B9:C3:31:C9:DE:6A:49:4B:AC:B5:A6:CD:8F:1D
Validity Wed, 07 May 2025 06:41:02 GMT - Mon, 08 Jun 2026 06:41:01 GMT
GET /r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140734&tag=&type=jserror&category=sys&msg=Error%3A%20unsupported%20site&file=https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js&line=1&col=1341738&stack=Ft%3C%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341738%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A1341768%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A429797%0Ao%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A91%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A885%0A%40https%3A%2F%2Fg.lazcdn.com%2Fg%2Flzdmod%2Fim%2F5.0.103%2Findex.js%3A1%3A896%0A&sampling=1&spm=a2o4j.pdp_revamp HTTP/1.1
Host: retcode.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:32 GMT
content-type: image/png
content-length: 183
server: Tengine
last-modified: Tue, 07 Apr 2020 08:58:03 GMT
accept-ranges: bytes
ups-target-key: retcode.taobao.com
x-protocol: HTTP/2.0
eagleeye-traceid: 213e063117533655723335119e0d78
strict-transport-security: max-age=31536000
s-brt: 1
s-rt: 2
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01D6oQr31GPG1ONK9jd_!!6000000000614-2-tps-34-34.png
104.21.32.1200 OK 466 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/O1CN01D6oQr31GPG1ONK9jd_!!6000000000614-2-tps-34-34.png
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
First Seen 2023-05-29
Last Seen 2025-08-02
Times Seen 47300
Size 466 B (466 bytes)
MD5 36139dcc95bc03041783afc5b8fe13e2
SHA1 968a2961def725ced068e82d4c7bd8ab8c46e6f0
SHA256 1e2f353551fb6fe07ca35850dbe5075a6bf0568ac138f3e007c9b4b721557958
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/O1CN01D6oQr31GPG1ONK9jd_!!6000000000614-2-tps-34-34.png HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: image/png
content-length: 466
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BsA8JzEhVsd2D95sKY4Vh%2B%2FBodMGwVL1Zu6FELo4zUbO3F3M16kDKygXxsGVOPkaGMmTajRDm1HsR1EyTstvRItNxQQOhbqd4hdIgaZUpBtyj1NMYEsWzl7Bp0AkYqhP0zQ%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9643eff56bc2b4fd-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3443&min_rtt=0&rtt_var=4120&sent=138&recv=127&lost=0&retrans=0&sent_bytes=50754&recv_bytes=14403&delivery_rate=1874974&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=18084&unsent_bytes=0&cid=5e5df1a717089c66&ts=1559&inflight_dur=71&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index6.js
104.21.32.1200 OK 7.1 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index6.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (7063), with CRLF line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1213
Size 7.1 kB (7065 bytes)
MD5 d8edb98cdc312218f5ba7320ba7677cb
SHA1 c929731aa02f33022951570c62e09855953e5176
SHA256 4fffa3c3c13ee9a906a5d721949dc27fd23203e489c5670ceebb09e1bde98a2f
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index6.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Cookie: lwrid=AgGYPLtDhCk4fnCjl1GJVWh29Hw3; _bl_uid=IzmdOd54hXyg3XleL2wyjjFe7j2X
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:24 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ylo3aTpXDkoSH2%2B5FYAJbvlRMjIt3pE2CiKQ9P77GKdjncywEHqFWujukPAemv3Vs8UuxgNDQ8dxCkg0WSsDYtGNpbLajgXRP8CiM83hvo7WObMuBi1O9owS3AxA%2F0sd9A0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643f017fd85b4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1547&min_rtt=0&rtt_var=1083&sent=595&recv=203&lost=0&retrans=0&sent_bytes=635859&recv_bytes=19242&delivery_rate=19883077&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=27697&unsent_bytes=0&cid=5e5df1a717089c66&ts=6874&inflight_dur=313&x=40"
OPTIONS member.lazada.co.id/user/api/getUser
47.246.165.111200 OK 624 B URL
member.lazada.co.id/user/api/getUser
IP / ASN
47.246.165.111
#45102 Alibaba US Technology Co., Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 624 B (624 bytes)
MD5 ef240be201b2b3864e9cba835a6ed665
SHA1 95c05bd9320de4dea3686b6839b804d0913231da
SHA256 4c00877a930e02a2a2d08d3033898247d806a0772aa4a11e350b133c015cfcee
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.com
Fingerprint 61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
Validity Fri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
OPTIONS /user/api/getUser HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-csrf-token,x-requested-with
Referer: https://mabarvip189.com/
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:24 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://mabarvip189.com
access-control-allow-headers: content-type,x-csrf-token,x-requested-with
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 2101406f17533655642604464e0f43
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140722&tag=&type=jserror&category=sys&msg=Error%3A%20Script%20error%20for%20%22react%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&sampling=1&spm=a2o4j.pdp_revamp
59.82.121.55200 OK 0 B URL
retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140722&tag=&type=jserror&category=sys&msg=Error%3A%20Script%20error%20for%20%22react%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&sampling=1&spm=a2o4j.pdp_revamp
IP / ASN
59.82.121.55
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.taobao.com
Fingerprint 5C:5A:6F:AD:91:BE:B9:C3:31:C9:DE:6A:49:4B:AC:B5:A6:CD:8F:1D
Validity Wed, 07 May 2025 06:41:02 GMT - Mon, 08 Jun 2026 06:41:01 GMT
GET /r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140722&tag=&type=jserror&category=sys&msg=Error%3A%20Script%20error%20for%20%22react%22%2C%20needed%20by%3A%20https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fpc.js%0Ahttps%3A%2F%2Frequirejs.org%2Fdocs%2Ferrors.html%23scripterror&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js&line=9&col=1795&stack=makeError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1795%0AonScriptError%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A17084%0AEventListener.handleEvent*req.load%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A3528%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A16680%0Aload%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A10087%0Afetch%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A9888%0Acheck%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A11152%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13242%0Aenable%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A15790%0Aenable%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A13099%0Abind%2F%3C%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3.js%3A9%3A1542%0Aeach%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Fcombo3&sampling=1&spm=a2o4j.pdp_revamp HTTP/1.1
Host: retcode.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:32 GMT
content-type: image/png
content-length: 183
server: Tengine
last-modified: Tue, 07 Apr 2020 08:58:03 GMT
accept-ranges: bytes
ups-target-key: retcode.taobao.com
x-protocol: HTTP/2.0
eagleeye-traceid: 213e063117533655721325081e0d78
strict-transport-security: max-age=31536000
s-brt: 1
s-rt: 2
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/pc.js
104.21.32.1200 OK 74 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/pc.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-06-03
Last Seen 2025-08-02
Times Seen 54461
Size 74 kB (74177 bytes)
MD5 9bdefd73dc25b84bfe8d9917b6120020
SHA1 006f41d33d4a21eadbfe250e569b140a63fd5469
SHA256 73a8360e318e76b752e953261326592e2ed9be1c1da0b6dbc9dd527e8f76830d
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/pc.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 18630
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=TcTXEVYbSj2fMzJERGw62Kuu23apmtb7b2UJ%2Fj2sYXXqCGEu3JgFr0SVFwl9J31iayzS6u4zmLuee3bnr8mU4jNrO90nQS2Px%2BRgwOA%3D"}]}
cf-ray: 9643eff4b9d556b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index2.js
104.21.32.1200 OK 82 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index2.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-10-16
Last Seen 2025-08-02
Times Seen 49741
Size 82 kB (81573 bytes)
MD5 1663855fe3963805db3cdd7fb08ea591
SHA1 b4b99318bdb2bcf37de40386cb4f2eb38d865638
SHA256 49760473597b8b5964e4956f746fa8e098419b34f81f1236abb104e2e8ea9d1d
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index2.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/javascript
content-length: 19118
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tXVX3ECb9kfbK49LiCwwlrgTLCJHsvy9boQo%2FjZIz82fJSi%2F2ZS0pLZ%2B2BI5F4Tq5Qw8OuPK%2BGG0cCFY9%2BKRTgceigZ1461nCgmN4%2Fw%3D"}]}
cf-ray: 9643eff4ea1b56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET lab-js-abtest.lazada.com/abtest/h5/config/online/v1/lazada-lab-trade-payment/metaInfo.json?t=1753365561052
90.84.160.25403 Forbidden 345 B URL
lab-js-abtest.lazada.com/abtest/h5/config/online/v1/lazada-lab-trade-payment/metaInfo.json?t=1753365561052
IP / ASN
90.84.160.25
#2285 Orange
Requested by https://mabarvip189.com/
Resource Info
File type HTML document, ASCII text, with CRLF, LF line terminators
First Seen 2025-07-24
Last Seen 2025-07-24
Times Seen 1
Size 345 B (345 bytes)
MD5 87ee69a1505d26a3b77088e124146b17
SHA1 f328de18ee1657f55fe1dd4a6f5785fa27085f22
SHA256 a2db89638833717cc6a1c846bd24cd8081b40d3ddbbef035d502cbbf1818914b
Certificate Info
Issuer GlobalSign nv-sa
Subject *.lazada.vn
Fingerprint 0F:F4:0D:93:B3:F8:02:10:10:F9:23:43:45:DF:D8:43:C6:15:30:0B
Validity Fri, 27 Dec 2024 04:26:09 GMT - Wed, 28 Jan 2026 04:26:08 GMT
GET /abtest/h5/config/online/v1/lazada-lab-trade-payment/metaInfo.json?t=1753365561052 HTTP/1.1
Host: lab-js-abtest.lazada.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mabarvip189.com
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: openresty
date: Thu, 24 Jul 2025 13:59:21 GMT
content-type: text/html
x-ccdn-req-id-46b1: 620fc74723e1a77f0b80ebd351127185
content-length: 345
via: EU-FRA-marseille-EDGE1-CACHE4[1]
access-control-allow-origin: https://*.lazada.co.id,https://*.lazada.com.ph,https://*.lazada.co.th,https://*.lazada.vn,https://*.lazada.sg,https://*.lazada.com.my,https://*.daraz.com.bd,https://*.daraz.pk,https://*.daraz.lk,https://*.daraz.com.np,https://*.shop.com.mm
strict-transport-security: max-age=360000
alt-svc: h3=":443"; ma=2592000
x-ccdn-forbid-code: 020200
X-Firefox-Spdy: h2
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index5.js
104.21.32.1200 OK 81 kB URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index5.js
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (64987), with no line terminators
First Seen 2025-05-22
Last Seen 2025-08-01
Times Seen 1208
Size 81 kB (80723 bytes)
MD5 6a7c10ac6cd1af920817cdf3e8be9abf
SHA1 d7a5e02abb272ea6e1b6c5b8090e00be7cf12949
SHA256 0fc5464d030673cb77d75b2d1788db795671c7aee0110f5a85eeb89f39194ca1
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index5.js HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Cookie: lwrid=AgGYPLtDhCk4fnCjl1GJVWh29Hw3; _bl_uid=IzmdOd54hXyg3XleL2wyjjFe7j2X; _uab_collina=175336556564757159536524; tfstk=geDXypVa3k4rm4wOfSxPdNLLUAww43JFCGZtxcBVX-exCRgs5l5ZgRyR2ozr3ro4Hico8DBq3I2NCt2gBe8eLpo-mR296hdcfrm-qlKzDe4o0i2gBe8yLpommR0vbdI9C0K70kCTBSBAy3ZLbRBY6tCRyz48BRetW0K7jzUTBR39_dW7fIarcHs-K7ncDyoYPOBteSVb5mCNBOH7cS1mDziq0YZbGyP9rgBZCDit38GCWInQEvPZePTRBocKlYwxHL_Y4jIzu9zC8w51VWXTVsxWV1fgwrRAqMT-MlNYqoaeV31FsSEuVy-WV1fgMuqb83t5T1f..; xlly_s=1; isg=BO_vsl0-2-TxJt_YzZLUdezYfQr5lEO22f3icwF8i95lUA9SCWTTBu0C1tjuMxsu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 24 Jul 2025 13:59:27 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=omwY1RuqtX%2FaNYM0cSsnQU6Q1MVQpLiL9%2FnAhrx1Pi6sG462sxNCCRkRZNPemi6aT1fHJjQrnjy75tGaZkxU1Lol2kabeNsgMfN2s2uImZm7xXMgW3TxrI8fsBQ7lJWq6aE%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9643f0269e5cb4fd-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1481&min_rtt=0&rtt_var=1103&sent=617&recv=208&lost=0&retrans=0&sent_bytes=660272&recv_bytes=20784&delivery_rate=19883077&ss_exit_cwnd=18072&ss_exit_reason=2&cwnd=27697&unsent_bytes=0&cid=5e5df1a717089c66&ts=9338&inflight_dur=328&x=40"
GET mabarvip189.com/wp-content/themes/EvolLzd/assets/index.css
104.21.32.1200 OK 0 B URL
mabarvip189.com/wp-content/themes/EvolLzd/assets/index.css
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject mabarvip189.com
Fingerprint 04:98:67:0D:8F:06:BF:61:EA:44:C9:FE:CF:6C:69:8C:F1:C1:0B:EB
Validity Wed, 23 Jul 2025 05:46:40 GMT - Tue, 21 Oct 2025 06:45:20 GMT
GET /wp-content/themes/EvolLzd/assets/index.css HTTP/1.1
Host: mabarvip189.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:19 GMT
content-type: text/css
content-length: 2193
cache-control: public, max-age=604800
expires: Thu, 31 Jul 2025 13:59:19 GMT
last-modified: Wed, 23 Jul 2025 08:35:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=F4v3gT6A6zYc2VsXrL0IjsMLVIFpStZGnacse3OaoEnCJO2yEQ13eQTvG2sP3OHzxVkVXAYEr%2BmZSGphwXTfcd%2BmrQCGfkSqWjnBDK4%3D"}]}
cf-ray: 9643eff4ea1656b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140670&tag=&type=jserror&category=sys&msg=TypeError%3A%20can%27t%20access%20property%20%22ready%22%2C%20H%20is%20undefined&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js&line=1&col=9384&stack=%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9384%0A%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9395%0A&sampling=1&spm=a2o4j.pdp_revamp
59.82.121.55200 OK 0 B URL
retcode.taobao.com/r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140670&tag=&type=jserror&category=sys&msg=TypeError%3A%20can%27t%20access%20property%20%22ready%22%2C%20H%20is%20undefined&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js&line=1&col=9384&stack=%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9384%0A%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9395%0A&sampling=1&spm=a2o4j.pdp_revamp
IP / ASN
59.82.121.55
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by https://mabarvip189.com/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606760
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.taobao.com
Fingerprint 5C:5A:6F:AD:91:BE:B9:C3:31:C9:DE:6A:49:4B:AC:B5:A6:CD:8F:1D
Validity Wed, 07 May 2025 06:41:02 GMT - Mon, 08 Jun 2026 06:41:01 GMT
GET /r.png?uid=0514d105-050a-4e01-9f4f-fe643f8650bb&userNick=×=1&_t=-10189140670&tag=&type=jserror&category=sys&msg=TypeError%3A%20can%27t%20access%20property%20%22ready%22%2C%20H%20is%20undefined&file=https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js&line=1&col=9384&stack=%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9384%0A%40https%3A%2F%2Fmabarvip189.com%2Fwp-content%2Fthemes%2FEvolLzd%2Fassets%2Findex3.js%3A1%3A9395%0A&sampling=1&spm=a2o4j.pdp_revamp HTTP/1.1
Host: retcode.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mabarvip189.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 24 Jul 2025 13:59:33 GMT
content-type: image/png
content-length: 183
server: Tengine
last-modified: Tue, 07 Apr 2020 08:58:03 GMT
accept-ranges: bytes
ups-target-key: retcode.taobao.com
x-protocol: HTTP/2.0
eagleeye-traceid: 213e063117533655730405257e0d78
strict-transport-security: max-age=31536000
s-brt: 0
s-rt: 1
X-Firefox-Spdy: h2