xiaobao.lanhuatv.com/template/mytheme/statics/image/20231112/dae2cd518.png
188.114.96.1 5.8 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/image/20231112/dae2cd518.png
IP 188.114.96.1:0
File type PNG image data, 162 x 56, 8-bit/color RGBA, non-interlaced\012- data
Hash 37eb6ad50de05f464210a93d72df079b
bc2e1b432e317d82eccfc367496a599ba1905d42
463178ec2626c71685b9cd67b512646b46790628e45a371d494a0b62b156d8bd
GET /template/mytheme/statics/image/20231112/dae2cd518.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 5828
last-modified: Sat, 11 Nov 2023 19:03:57 GMT
etag: "654fd01d-16c4"
expires: Sun, 17 Dec 2023 16:17:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 899880
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ypmk5R4%2Bjz0RpWkL4qbEcTPMBLlZ0ra1nBbmsq43gs6K7gKDeMgYy4EIoxFIRS15Fdst8vydu2o2wb4m7d%2BNl3%2Be6MS6VWTgZjGfbdyHYdY3mtfLaIshngTW3iJVzkh%2Bt%2BD8Y4NLVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e6aec569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231124-1/48f5553ec56f379cdd28805f71576dfb.png
188.114.96.1 1.1 MB URL xiaobao.lanhuatv.com/upload/vod/20231124-1/48f5553ec56f379cdd28805f71576dfb.png
IP 188.114.96.1:0
File type PNG image data, 1902 x 633, 8-bit/color RGBA, non-interlaced\012- data
Size 1.1 MB (1149051 bytes)
Hash 3d7b107ba9c9918c7e3c048586cfa1de
59c3ab4d0695ed2f408fca02f9c7d44a6b3de1af
485aef3e2463991ffb96ec1a84a89dca73272838d134cfdf34641aa4571d4c8b
GET /upload/vod/20231124-1/48f5553ec56f379cdd28805f71576dfb.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1149051
last-modified: Thu, 23 Nov 2023 16:12:29 GMT
etag: "655f79ed-11887b"
expires: Fri, 29 Dec 2023 05:23:42 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VKtmX26alk5QQ0k%2B1kZ64qS57GPk4RRPqSNtBfNpgORDrjln2FXmFpj0xH6w5iFYMmZbhFlKPAwrq%2FLsNIofXCWojh4DmxE1JvHKtptTZe19NhwWCVvKAaYFcpIOT2zLEL2XkToNaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e6afc569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231116-1/e0eca6d950ab1711d5fc679918a4ff4b.png
188.114.96.1 1.1 MB URL xiaobao.lanhuatv.com/upload/vod/20231116-1/e0eca6d950ab1711d5fc679918a4ff4b.png
IP 188.114.96.1:0
File type PNG image data, 1877 x 624, 8-bit/color RGBA, non-interlaced\012- data
Size 1.1 MB (1052909 bytes)
Hash d39363a8cc4953793bc2ed8f04c22d03
b2aa77c08cfeb4939b12155558aba5dd1110bf63
152b8a1169843a89d50797cbacce5d06aee2652a2ddf8b2464df2145b2692873
GET /upload/vod/20231116-1/e0eca6d950ab1711d5fc679918a4ff4b.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1052909
last-modified: Wed, 15 Nov 2023 17:19:17 GMT
etag: "6554fd95-1010ed"
expires: Thu, 28 Dec 2023 04:53:25 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IQ1yI3Z%2FawE2cRTCC6JsQfGojIJjQ7K%2B6I%2Fd3mOz7fIf0hWaD%2BiEoP3DnSyvWi12%2F3030WloammmYRQdItkDGDiZV8cv9t75NRKimBzpYB%2FrMA5zhgxtC05Ief8uIu3sHXmn4Swbow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7aff569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231120-1/adcf8af1e53885a816eedd86d9f1c992.png
188.114.96.1 684 kB URL xiaobao.lanhuatv.com/upload/vod/20231120-1/adcf8af1e53885a816eedd86d9f1c992.png
IP 188.114.96.1:0
File type PNG image data, 1920 x 639, 8-bit/color RGBA, non-interlaced\012- data
Size 684 kB (683669 bytes)
Hash 2bb22de895597dad70e76cd05c3b3702
a94cf4ffd8dbbe7e884e6dab68e1521186d844ef
5a87de0d5f69ee0f89d139f9880d9b09e1fafb81cf991d8ba2a5ab0f19408b3e
GET /upload/vod/20231120-1/adcf8af1e53885a816eedd86d9f1c992.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 683669
last-modified: Mon, 20 Nov 2023 15:14:49 GMT
etag: "655b77e9-a6e95"
expires: Fri, 22 Dec 2023 00:20:57 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FJMt8OlEbBweEJYgOQzgkF6RgeZDHsIItrxsM1q9Ebj5yZKIsFgkQnN7lt6Vn2kTFMCfaVcWNxXLtXZXhzOprAOMBtBWxFzFxcciuWWvNUUq%2BxCNo1ny%2F%2FG6zGW1D3OjLCaisxsmQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b05569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231113-1/0a76b8949cb216cfc60ce437bd59068b.png
188.114.96.1 1.6 MB URL xiaobao.lanhuatv.com/upload/vod/20231113-1/0a76b8949cb216cfc60ce437bd59068b.png
IP 188.114.96.1:0
File type PNG image data, 1887 x 634, 8-bit/color RGBA, non-interlaced\012- data
Size 1.6 MB (1591216 bytes)
Hash fb53728002252228697f81edef1a5b8c
a6786eeb1aaf06b50702cb87fa423df8d6bac81c
70f51b3e9e3a309c4512953b0b00db6a670f46c5d20255568ae26d6a90c3521c
GET /upload/vod/20231113-1/0a76b8949cb216cfc60ce437bd59068b.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1591216
last-modified: Mon, 13 Nov 2023 10:28:40 GMT
etag: "6551fa58-1847b0"
expires: Sun, 31 Dec 2023 07:33:18 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4EMItQTBWQvGnIUmB%2FCKOlGjR%2BQXH%2BDBIYLOHztAcV0pbxFU%2BlwU4Ir9JBNtduQlx8X8w%2Fnu%2FZMYqid%2B7qbANo%2Bef4cP78ITon1J%2FfwtEB%2BNyxRHGqTQrclS7WJE3tODKZc9eGkr4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b00569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/qq.png
188.114.96.1 17 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/qq.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash d75acbe210fa793f370a446925443407
d5754ae3e03cfbe280fca56500a965bee281c2f3
ff7900e49cec526ff5ebfb8f8ef20b065b59795593c01b45da845724059d09f8
GET /template/mytheme/statics/logo/qq.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 17016
last-modified: Mon, 18 Dec 2017 09:47:00 GMT
etag: "5a378e94-4278"
expires: Sat, 30 Dec 2023 03:49:30 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HA5Y6go9d2jcyMbNbmi74nUazGpKwje%2FIVb9r6vP3SQ5kI3WOiImQjMKo3WXCU7%2BOvI0PicUb%2FTRVSjJF0oAX%2F17R%2F6ZJ%2FoTCefaiQqHQRfZQuyvjMcIn5U2H5HtTGjX%2BywYGnoIkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b0c569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/tudou.png
188.114.96.1 14 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/tudou.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash dfe3ea0a53c667de815d1e7b9ec44e04
beed36b5a0248d37a9fbf7c42bc6f4c5ae69a704
af756f4c03d0dffb88154ed420027acb6c58e9909ba153bad9c029d97c5a2a6b
GET /template/mytheme/statics/logo/tudou.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 14262
last-modified: Mon, 18 Dec 2017 09:47:18 GMT
etag: "5a378ea6-37b6"
expires: Fri, 29 Dec 2023 02:24:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zchtlKoa1aQMFgBg%2FToCwzpjiuas2JxmM0vzODaNjT%2BkSpUjAwSM6BqXKTjn7aKzMCV9wcndhWdRipsoXkH6XoGBV2%2BB1Ts8CD7WJN924QnE8w3uRpBM%2FamSpcZYCMxNtCHb%2BsY2lQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b28569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/letv.png
188.114.96.1 12 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/letv.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash b5cf0b266c7f4f4958f18b025f084321
ba074e4cbacf8b7e9ec720a91a4c33cb2400af01
87c6a226efdbfdabf882dafb1fca6f128b3f2e385619dfa8c94dea5148f072be
GET /template/mytheme/statics/logo/letv.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 12389
last-modified: Mon, 18 Dec 2017 09:47:14 GMT
etag: "5a378ea2-3065"
expires: Sat, 30 Dec 2023 05:06:34 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fcchV%2BFHoKBAqIRG7bJL63Vg1MCZd%2FhSj7gsP%2FBuPoLKdC4zhlDzuxTOXhgGkqaEC3qZ%2BGEV52u9aUd6r%2BSSx%2BaViliCLVXqV7XPhCO6oEpvypeYBlajjjW7KLQHe8QwfOUhyYz4vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b2e569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/ku6.png
188.114.96.1 15 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/ku6.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ded27db9f03e27a9a5cd92195793173
807accf7fd48b2457754a1fde9c5ae5c1526d00b
4b2ef23eae2438a1938cddc5c86e1a9ff5e8c19819acea7b674bdaad724b50e5
GET /template/mytheme/statics/logo/ku6.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 15081
last-modified: Mon, 18 Dec 2017 09:48:02 GMT
etag: "5a378ed2-3ae9"
expires: Tue, 02 Jan 2024 22:37:47 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2f9FGN9kFYQ2ykPn7okRh%2BPubVxFRYR2YPYorfRGhZ7%2FO9VoPwPRUo6KUAVfEI2bSYxpSBFHHlCgXuSJSh%2FN0lm8yUDL4%2F7JA1mRz4i1a0o7QfxpdKkItZ0ea00ll%2BB0WkNoFe%2FcXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b31569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/wasu.png
188.114.96.1 10 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/wasu.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 919ffbfc749b8cbd36ef47cbdb144b69
16b7d59649f89838103f3acd95fa7d92acc084d3
f2726b4de47bee4d73947ec6e8cf70e848f7ba38ae0c95c8e404176c0049eeb8
GET /template/mytheme/statics/logo/wasu.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 10082
last-modified: Mon, 18 Dec 2017 09:48:08 GMT
etag: "5a378ed8-2762"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F2bdkkICLY%2F3G5sOnrJeYRCJgZ8l3QWSyp268xlwNNc1FLB1rjK9L3vIUKFws%2BILfaYDSrVG%2FpKA1qr2BI6UMZhmoL%2F2ERtmYCy0ENNYaQhy0oVAJf4rO36NzbItbatAa%2BXI2iRl0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b32569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/kankan.png
188.114.96.1 19 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/kankan.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 145b895c062b9b195c785f0a0ce073c9
42e1aa33a759024e82ab96edfc0bef382f5cb3ed
9c3edd1a44c68e1adb3e501b03ad9e92daed6efe637a017ce578d6d6c7713490
GET /template/mytheme/statics/logo/kankan.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 18598
last-modified: Mon, 18 Dec 2017 09:47:30 GMT
etag: "5a378eb2-48a6"
expires: Fri, 22 Dec 2023 00:16:26 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j9JxDnSzWlsDJAxUqZb9Fu%2BWkRtZTPQYgNtLNTDAf1DEbqLbLbmZDYgVpWSWRj3wLQTS7nwyTX4Be8NX386n5%2ByecACuCd%2FFrAMuPkvEnruJXotQkJK1KnKkivC6iIoIFDX2wB6xFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b33569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/baofeng.png
188.114.96.1 4.4 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/baofeng.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 215d4fcc24b5e39d25ef82a9fa391424
f1303e60445accd81234d134a1e9047858fb9746
fbe56515e82f7551837571415942c75d336531e6986ac45bfd122c8943133aaa
GET /template/mytheme/statics/logo/baofeng.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 4435
last-modified: Mon, 18 Dec 2017 09:47:20 GMT
etag: "5a378ea8-1153"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=duW%2FngeyR%2BBmvilZ%2FcfFKnEmZ8eoLBtjpJKg5QAMo6qkMu4%2FjwSE%2BmKWHiQIxR%2Fn6JZEJRJMQWzXgar9qCSf%2FTetZ0MdCgryOZLkYsM9vFmlh%2BrKxLGwoNZg0l%2B5Z7dhKbMTZMadpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b34569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/fengxing.png
188.114.96.1 5.5 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/fengxing.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e99165dd4e0ac7bd662ec8b88096765
62704e7564aff65ed82f0bc571800adc71c6c494
281b1d23220ee44197df6ae7435466a8070ae073c37244ac08e86aa34c13d317
GET /template/mytheme/statics/logo/fengxing.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 5544
last-modified: Mon, 18 Dec 2017 09:47:58 GMT
etag: "5a378ece-15a8"
expires: Sun, 31 Dec 2023 09:31:08 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jc3FHSIQk6dwhSsVxpRQPlGQdrGm3LqQOMYwrDFBxmeF25P4Ap4aagLkIdB%2BVyA8x7ivsg4LycCjMfigfThMwTlZzx3w9M%2Bt9wGIDRuJfun1QUG1ae4OO%2B3Nt68ARL67wscW4ubRQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b36569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/1905.png
188.114.96.1 12 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/1905.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 0da295b4cee1533166d3a8a8dd993049
ccb39dc81fd84c99f192d59b0186f2c873edc214
4606a84de78bed26e47e7c67a7b7dc02065c7bb1bcd79d35acdba0ad10d7b19f
GET /template/mytheme/statics/logo/1905.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 12064
last-modified: Mon, 18 Dec 2017 09:47:24 GMT
etag: "5a378eac-2f20"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w%2Fl%2Bjaj%2F5f%2FAJwKEffpLfEN8kqVg2KgbTh4JVDo%2F4GrxdSBKUf5UR7T8jBsApizfEQt0EzOnXde8vABCFuQLP7Tl6mzetDxV%2BTbaeSe%2BCHZ87v1KjmPZZDtCA6YGUKXpODQ8xZKnUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b38569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/cntv.png
188.114.96.1 16 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/cntv.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash f961e8cfb852e707fbe80bad97f30dc3
808ef7d7027ea9515d89e17797abab62ae2699ff
7977093681d17bae0d91fe77baf9b00e04eac412b4afe7b637dc92b01b4a2e4b
GET /template/mytheme/statics/logo/cntv.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 16111
last-modified: Mon, 18 Dec 2017 09:48:30 GMT
etag: "5a378eee-3eef"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EwGmKBV7WlywQ3cI9cH%2FCD0FMtFAu%2BRdp4jKX6Z8dJmGjHFvGHFi6XCj8YSZwh4P6fKbdCv7CaQaDt6Nfgutk24g%2FPNFqQA5kdNziapxG7Aau%2BL%2F1elpmY7ggH%2Bt1aKcWCTYBcU%2FUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e9b39569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/acfun.png
188.114.96.1 4.4 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/acfun.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash ee854328ed864039345f53b28215d8fd
430ba182ac9ba4d51cb9b6b7223b762f0cc24ef3
4f1ede5fc23f9b931a3e4396f96ff2cc33bc7dfd8f5d1d890f55d2c64d923ce4
GET /template/mytheme/statics/logo/acfun.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 4372
last-modified: Mon, 18 Dec 2017 09:48:34 GMT
etag: "5a378ef2-1114"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kGzsD%2B%2BOi89NNd3Au%2Fy614DrsTiUkbV5F9Ss3PJMRkhqw9iCOF50J4Fm7Zey8TfhEbucg2%2FZ4CDToIMW9UMfahgfnFH1YTyFZtwYBxm%2BYsj1YHhumzhWkYD%2FSPJVNcARgnbcCfnWcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e9b3b569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/sina.png
188.114.96.1 5.9 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/sina.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 35e7edf53a984f738c0ac34c8fae9b01
ded5651b21abea3305e28cbeac7434f66a14347b
1bf559dcbb6bb73eac1d4c623062435471829ea81ab6970f1575fb0220c0d230
GET /template/mytheme/statics/logo/sina.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 5880
last-modified: Mon, 18 Dec 2017 09:48:12 GMT
etag: "5a378edc-16f8"
expires: Wed, 20 Dec 2023 00:26:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8JHRepkNsg%2BfFm1KBChY1vK4WNIMeohGF1lA2CZTNy1HlWIis1yS8pxA2Q2oOOop3vDmd%2BOsKDqOmOqNpVzxeQIri9OYOrztsb0rDpWLLV2i2Ia%2BxlcP65pUuZgg%2FlbZLb37Jd%2BrQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e9b48569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/56.png
188.114.96.1 7.3 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/56.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 1932e151fbe7402697b614672d82c1c5
f6495a28c740cfbce23c66b34a2e0079840c537a
667d152885b79ef8c608ce07b7fcd70efb0b9ba4f48e423987741fc4c26e800b
GET /template/mytheme/statics/logo/56.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 7315
last-modified: Mon, 18 Dec 2017 09:47:56 GMT
etag: "5a378ecc-1c93"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R1etIwsQfU8jqFxqK8F6AfGHaunLK%2BH%2F2axTh%2F7uesmErD1LWX4VxFKXZ7zPJ1MzQEq4jRhgDqYouLSuIDSGsdQtU27j%2FcakVQ8cw1BqQsGCt5MmheyDhIYJsyOfP%2F0uvhly2QxPHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e9b4c569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/aipai.png
188.114.96.1 11 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/aipai.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash ddae4e54e809e5e22eb9fef93eaaa37d
4dbffe7cb7879196b8c38999c2c8f9ff3f440408
4e07b65b25da52c67656d2c84afd76ec921185ba267426a9d067be097d5f5839
GET /template/mytheme/statics/logo/aipai.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 10613
last-modified: Mon, 18 Dec 2017 09:48:42 GMT
etag: "5a378efa-2975"
expires: Fri, 22 Dec 2023 02:03:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X2hNbvlADAh27jLlViEyIwUKcCrvry42XDQSozSyf%2FymfOUYX7o6buX5%2FexYnT3PIfpdCJuQlpWD5PLTKe6UqteU6riGM5QTvSYWZj07aYgTND5G0E6KIHtAOPVx6dkeuQBU0XHxPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1eab58569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/baomihua.png
188.114.96.1 16 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/baomihua.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 44306434a6442587c9af533027943c73
a7fbd2bd3e8a8dd16a1836402a00e377291ca239
17569c04112284cf3224b64b9b36059b94005bf4f6337ce495453a60b312fb74
GET /template/mytheme/statics/logo/baomihua.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 16107
last-modified: Mon, 18 Dec 2017 09:48:18 GMT
etag: "5a378ee2-3eeb"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D3gfADzXQ8nwVlGX4zvxLrzZDTKAz8LtQxEpILBcRSzywK8FOfCx0hPrl1cOtDsU%2FWTphXnf%2FYXPkROBJ7STOv4hkPcSU0fdg4TMIBYQS06HkQgWssoAkDFcAA10dpksfZldOwVCsw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1eab5a569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/bilibili.png
188.114.96.1 4.9 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/bilibili.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a22ab5c490169aa48f115b1481616a8b
7a395bbbe9532b4225a6b675231765ad55e53513
5dd2ef707a3c303ed3212ef1638379b6b0be24ea90f213d5eeb12f35c048cece
GET /template/mytheme/statics/logo/bilibili.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 4850
last-modified: Mon, 18 Dec 2017 09:48:38 GMT
etag: "5a378ef6-12f2"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hhttzvBNarsmhSIEfMZnEnoCEahLbZTXPW1MaTONx1LUQzc%2Br%2BRmDDmQEYrdz5yOv7ZfU5c9y1HVOPcLLpmj9P4aCJiZO157D07FqBAL2fxj2plAHUN3%2Fl3M92oJ8LAAM48u9OY7qQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1eab5b569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/kankannews.png
188.114.96.1 9.2 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/kankannews.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 2ff550748af66b55f591042e5bd7a7da
1e0cbe0976c2f17e8bdc5808c8adf2a89caa5a7a
21c008a5ea87127010c1c5441d0c9e7599349d2b4ce28e616c1597a7b4c5549e
GET /template/mytheme/statics/logo/kankannews.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 9202
last-modified: Mon, 18 Dec 2017 09:48:24 GMT
etag: "5a378ee8-23f2"
expires: Wed, 20 Dec 2023 00:26:49 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H59GPxK0Nu76CCAIur7InzLJ34xNvjj0GCoSCwVFGm%2BkK0%2BzNwR447wMicpc%2BiYMK0MmEsI9b3aAEGFMIFdLSFEav6%2B4963IZkLjlp5qZQDOYPiz%2FyirD5JHjvpSs%2BFsXK9gX9UYQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1eab5d569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231112-1/20f9cf0374f86652ec98faea82997ac3.png
188.114.96.1 2.7 MB URL xiaobao.lanhuatv.com/upload/vod/20231112-1/20f9cf0374f86652ec98faea82997ac3.png
IP 188.114.96.1:0
File type PNG image data, 1919 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size 2.7 MB (2683935 bytes)
Hash 8d54d1d9a29ebc63e68d2105bddba230
e1dd87bea94791d4525ec59757c80068ad3703ad
520465b5c5c73ee4454f40597a27ae4bf24ed0155e9e6024904ff4a59ed5baf3
GET /upload/vod/20231112-1/20f9cf0374f86652ec98faea82997ac3.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 2683935
last-modified: Sun, 12 Nov 2023 13:09:25 GMT
etag: "6550ce85-28f41f"
expires: Sun, 31 Dec 2023 08:31:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y6dXfNCUs6XAiROEHkdSsun4bunbGWnvumifwoYLDRL41FytcEDqmqeal0%2FWRt%2Bzy8kQ60ULPQ9oko2bkkvrslWGoOsiClBv4w0ABhnUUynn3OGuvYS1uLw2Hh3BxMfw6UaideEErg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e6afd569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/youku.png
188.114.96.1 12 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/youku.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash e73f83b6ae4b12ec96e2b5350763a8fc
bbd9c6b98c34b388ff428c8519d4ee5f28f75ab6
b776e8bcfe6846bb626cf536f72a4b2b432fedae9e4128cde4ef1fd09dcf8109
GET /template/mytheme/statics/logo/youku.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 11611
last-modified: Mon, 18 Dec 2017 09:47:04 GMT
etag: "5a378e98-2d5b"
expires: Thu, 04 Jan 2024 07:22:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YR0X7I97%2F2xissBAscVcNtDFtjFviX6xFho8E4DjwV2lRCodL%2FBl1sMrGkHOuavJcvTF8wu8dJMLQX7WOXJ0hJwu890zm8KqHPwUeO724YH5z0g1GnizAINochyyDkQrCGGIi6vrkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b10569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/iqiyi.png
188.114.96.1 6.4 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/iqiyi.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 4dcf746956e332a4ab199af4a1e5c514
8bb0dafa250cd202c92422363788aad6d71b95a0
9e115f47fdef65ff1093958e861f62069072a39a61bfec3481dddbfb92e1fe14
GET /template/mytheme/statics/logo/iqiyi.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 6433
last-modified: Mon, 18 Dec 2017 09:46:56 GMT
etag: "5a378e90-1921"
expires: Fri, 22 Dec 2023 02:03:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ENpr0iA%2BdpxcUrSvpDiNm%2FLUxkDqQSgNfHkgksWXXlzz6Z9daBT9vdBu4vbgOBRV78dHerVBU7hgnlwh79JkysGbvK102ozdRn5qilaPmu6SycxJSQuatyIpYiEf7aD4%2FngOp6u39Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b12569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/sohu.png
188.114.96.1 24 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/sohu.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 88e6837e4c71240c844fbe1d9e3f956a
fcc0de96657f0819256c61e2ef03de82d9597102
52bc1306e1148480287a62ff096e2a16b2f7a2cc094ea6a6163101be10d08eea
GET /template/mytheme/statics/logo/sohu.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 23625
last-modified: Mon, 18 Dec 2017 09:48:14 GMT
etag: "5a378ede-5c49"
expires: Wed, 03 Jan 2024 03:51:01 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dHp3dnQvV%2Fpcg0DSP9eRCX%2BoTXC7G5Z6aIfaOsl6jEnJaQ1xN9OEbjjdbqv8%2FvTRGHhQjrU05pYuABsyDT15l6lUWaZlRj5xlSabEvDuaFHOuNKVT6XT6ULe3J6nCnCdZp0jbJo2tA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b17569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/mg.png
188.114.96.1 15 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/mg.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 091717266142c80822d0904edfe19d17
7db2fc5b9c878fdc5710bb91e844a763a830d2bf
28b05c1415bfb86311865c19d865b855d7ee56e48555c4f16cc13af71ca98efc
GET /template/mytheme/statics/logo/mg.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 14876
last-modified: Mon, 18 Dec 2017 09:47:10 GMT
etag: "5a378e9e-3a1c"
expires: Tue, 02 Jan 2024 22:37:47 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sXdazVmlPFu5gsj7RvXjGI41ndb4n%2FLaijaLf%2F8m8837XYDcWELePwi3DYfsJNFUUWFOUkjASwwlTLJ8zyDEiFL7ycyR1fJqKF460VUs8LIPZvdwBhdP7OXHRr4j%2BKpP6gAKdPOXzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b18569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/pptv.png
188.114.96.1 9.1 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/pptv.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 92ae3bf02f737804c1464f8e2b4a4a4d
31d2e2e2d1047a82618218f757773d38e3bc2b5d
e7c8d4eeb6a6096468f4374692dd5ae64b00aa932e1b7e6e50a0303b8295adf3
GET /template/mytheme/statics/logo/pptv.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 9143
last-modified: Mon, 18 Dec 2017 09:47:34 GMT
etag: "5a378eb6-23b7"
expires: Sun, 31 Dec 2023 04:43:20 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=phf9D%2FkMXToUfTZk3KAVB%2BxqxVjzGtorrGKvHe6UuWGmnS4vCLs8gULeOIj%2B3nrLvDtJnsJcu5IR8ibofALdTqDr%2BqNnTWcTHvo0uK%2BOaDGX7K7Xaa2Cdk5NR3nsxV0i%2FZUkossO7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e8b24569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/yinyuetai.png
188.114.96.1 16 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/yinyuetai.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash d1d5e98d7aeb81566a297b983ba917d0
87043dfc8b608e1d8ae41a258af5b2905d8e18de
929b72dbafe38071a736ec7c6bb48d04c031e63b7b1b39956049a222e9a8551c
GET /template/mytheme/statics/logo/yinyuetai.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 15905
last-modified: Mon, 18 Dec 2017 09:47:36 GMT
etag: "5a378eb8-3e21"
expires: Wed, 03 Jan 2024 21:05:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2hR3%2Bvt%2FHXlZQ%2Bm9ROtyMbtilSDb7kO5iUUFvBpic4oBZiQLldWwwTIvBTuDspNaZ9RGoa9k0a%2FgvOgaSuE89b2bTi4C5bQAhCA5ioiEh1nuDSBlSOddOy2MdK5C4kU6aQDrUfhu3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1ebb60569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/logo/tangdou.png
188.114.96.1 6.4 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/logo/tangdou.png
IP 188.114.96.1:0
File type PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash b57f175cce01fbe5f0208eed7ae6f4ae
b9e9e5d8d3e21fad24d9b77ced886a2d1037193e
3d6797a76e7eaafab2e05d19ed9da58116507e8858943cc27e07428ea9ad8de1
GET /template/mytheme/statics/logo/tangdou.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:54 GMT
content-type: image/png
content-length: 6425
last-modified: Mon, 18 Dec 2017 09:48:26 GMT
etag: "5a378eea-1919"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h36U27HaKGLysBl41jU8cpRZSusGFENYLPQ2Ohjhss%2B4I4G4RCkoO%2Fcu%2BPATfwISYS7V3djcUhMrogind2Y6dgnpPZxhzKy2nUhBwO3UZRDvwI3NegEL82wrEF7KhW01KuXLvVdo2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1ebb61569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon6.png
188.114.96.1 1.6 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon6.png
IP 188.114.96.1:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a39c8fa013edc4604379f9bfdf6e69c
a67372f4ee4458423460cd0952113bb044d1f8e6
e392289f294dbff1ebbe2b732e51687705001811a80406b88aef2a0d3d0d1188
GET /template/mytheme/statics/icon/icon6.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1621
last-modified: Sun, 30 Jun 2019 15:29:14 GMT
etag: "5d18d54a-655"
expires: Sun, 17 Dec 2023 16:17:11 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 677226
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tzjj7%2FRFxX24nAjVf7ZD52L0Z4hh6rJERHDQ0kIGrH3MDSBC89uOrFMqZPwJGoYA17twj5cV57VNOvk%2BCFROheacbwAVh3q0QeglVTC%2BY3%2FZDJoIzSACMfqS%2F5lK3XdOpubc7kM4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1edb92569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon1_on.png
188.114.96.1 1.5 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon1_on.png
IP 188.114.96.1:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash af828ea64997def7dff91ab72dc0d9a0
d357c1b89e807fe6ccd58cd5563b8c23b0de269d
a955e44f36c851ecad95ecb45bbd071cb60e1d9a9cfc9cbbf3408b057920f35e
GET /template/mytheme/statics/icon/icon1_on.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1503
last-modified: Sun, 21 Jan 2018 11:21:00 GMT
etag: "5a64779c-5df"
expires: Fri, 29 Dec 2023 06:06:34 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ll6W2hYOwBQuCrNnuGfZ1OvnhMgx1NVt6sMK%2FbJ0aXFTSsgXQjFNXKfnhFp4amfObjVd5TSR1LPh1i3zSWDKhVRKz%2BKWseO07TlrjUx%2BhJMGLJOroUuGGxQN3oyVn784tK5WfPcGEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1eeba3569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon2.png
188.114.96.1 1.6 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon2.png
IP 188.114.96.1:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ecc95a7e778389c81969a98351f0575
70cd8c9c24516dd6ccd2a3590b43ae3dae8af58d
2d6e386fdf34d684502e9ac6eda29973ddc9ed5cd2f4085bba771d8783cf9b69
GET /template/mytheme/statics/icon/icon2.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1554
last-modified: Sun, 30 Jun 2019 15:27:52 GMT
etag: "5d18d4f8-612"
expires: Sun, 17 Dec 2023 16:17:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 1029040
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F8avFlMBpMebwCWxkf7Xe2%2F%2B7HGRyEa3z9CYy3OMA37y1ZEY17pJ3p35yNV5G%2B8edyUxLgIpPdUZnwpv%2FkRHN1hPrSA0cRyaZtJ%2FBhlxXieVDN6kKk2Sws1oQrSh%2Fj58ibtb3SLG5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1efbb7569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon3.png
188.114.96.1 1.6 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon3.png
IP 188.114.96.1:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 93ff48d1e69585324f10fa12ece8a14b
2b0bc5f82ef55df09ae1212b59c30d285e8a8b97
faec5511ac674d8d69338c26288e02db68b2457f49d6159751a6b9f866ab5789
GET /template/mytheme/statics/icon/icon3.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1607
last-modified: Sun, 30 Jun 2019 15:28:12 GMT
etag: "5d18d50c-647"
expires: Sun, 17 Dec 2023 16:17:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 677226
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4wKXwssFhNDiv8A3dNYkbngBbmEcACYQ8HcIvgcTQAxXpj%2BpeBux5p8rErKXVpIz3JIB%2B3qEn%2FPQkNW%2BUFOQOI3G7fbC7pKdB%2BneNJF8vWbPkYEYbfqlquIauMJzgmbNDZrfCyG7vw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1efbb9569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon4.png
188.114.96.1 1.6 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon4.png
IP 188.114.96.1:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 95dba054c97e2d41af544d404ecaae63
c2696664f637519f51b66aecaff53c149ddd325f
fab6d4b90df60ef04bc932f070b3b8687cddf72c777a693505436fba85cdb720
GET /template/mytheme/statics/icon/icon4.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1607
last-modified: Sun, 30 Jun 2019 15:28:30 GMT
etag: "5d18d51e-647"
expires: Sun, 17 Dec 2023 16:17:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 677226
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BkSwY3MjpjS9m96dU7LOTZS38TCGdpDnSd3KSM4IAVhlRvB55VRJrdghjzCJCS%2FWnvr9mWzEOML4fzhj%2Fx7hn890O0Tsf3AklSYF0nf9qVTWhHzl455tFNExpLqYi2nYZlpqyyxwUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1f0bcd569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon5.png
188.114.96.1 1.5 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/icon/icon5.png
IP 188.114.96.1:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash cadbed9833d9b27b6d3e0ee4c6ac3b36
264f73f0222ed59bb02b2e339f0b460f5ee4c824
69cdfd5f83e42679d90dd2fb916ea1825a7da59a7d3462753fdfd9cc360dfe93
GET /template/mytheme/statics/icon/icon5.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1472
last-modified: Sun, 30 Jun 2019 15:28:58 GMT
etag: "5d18d53a-5c0"
expires: Sun, 17 Dec 2023 16:17:13 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 677226
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nv4RQXs66S5HtyPV2j1j85LK0rUP4M7MzNdk8mVf%2Fa%2F5u%2Bevij5u4FlYlFmcLldYhFnQDMIEGOZTekDDIBtSp09FLvUFfgcO4i42HnmM%2Bw8%2BO8RcEXwnIItJTWcqP8VCsHHw5ummUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1f0bce569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231118-1/57fbddf85185b60e2fcd0881eaa9308b.png
188.114.96.1 2.2 MB URL xiaobao.lanhuatv.com/upload/vod/20231118-1/57fbddf85185b60e2fcd0881eaa9308b.png
IP 188.114.96.1:0
File type PNG image data, 1917 x 637, 8-bit/color RGBA, non-interlaced\012- data
Size 2.2 MB (2161693 bytes)
Hash 89c75dea8f5a1a4b683e278e0c2e2d47
b33374e1ee15b8929b98981cfdb5e1beef2a686f
26e11592b8b118eea538c515b04d2df263db30b5c84d92a71131604d7d3420fc
GET /upload/vod/20231118-1/57fbddf85185b60e2fcd0881eaa9308b.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 2161693
last-modified: Fri, 17 Nov 2023 16:04:58 GMT
etag: "65578f2a-20fc1d"
expires: Fri, 29 Dec 2023 07:22:42 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kfvZMa0n7k5fVjfdJ6NSZenZoSbNzjYUYej0pHidzEaimgeIVtlThpG8%2Ff4ducVgNmSKl4faA0HIOCiFLWgc%2FfpCs2GLvlrC9eo%2FjgwAvifqNkRlCyyCWQpchkZUrqllZKZPNMZ89A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b0a569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/fonts/fontawesome-webfont.woff2?v=4.7.0
188.114.96.1 77 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 188.114.96.1:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /template/mytheme/statics/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/template/mytheme/statics/css/mytheme-font.css?v=2.8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:54 GMT
content-type: font/woff2
content-length: 77160
last-modified: Thu, 03 Nov 2016 03:08:04 GMT
etag: "581aaa14-12d68"
strict-transport-security: max-age=0; includeSubDomains; preload
cache-control: max-age=300
cf-cache-status: HIT
age: 2062
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nvUSAqEdF0q9O92qUMLsNw7DCjmtzOzS9gnBU5cVwRd14B217OuYS6%2BORWwvNycyE6wiCAN43NoIqMZU50pDT%2FD06rZLC%2BMkC87yfMdnwnzqRb0lngS%2BoKPYnx63ZORMh1Sh1dAlOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe22787f569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/image/20230212/d6aea6a9f.png
188.114.96.1 6.7 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/image/20230212/d6aea6a9f.png
IP 188.114.96.1:0
File type PNG image data, 220 x 325, 8-bit/color RGBA, non-interlaced\012- data
Hash 972ab07fbea239e94b2c1e552c1bb8bb
ce5a05a16c74cc8479199291fa9be7303541045e
b2ef110abb29a233daa9ac545814cc37f0ffd36e061bcbc72547825b4711aae8
GET /template/mytheme/statics/image/20230212/d6aea6a9f.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:54 GMT
content-type: image/png
content-length: 6725
last-modified: Sun, 12 Feb 2023 15:18:15 GMT
etag: "63e90337-1a45"
expires: Sun, 17 Dec 2023 16:17:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 866897
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WPAjSDnNxYhkYaZV7ySX6MQ0o%2FsWzuM3l5sBXx60i0rxbeHUs7HcUsI0yXfKgswdR%2Fqk42DVaJVBcRa1YhLSjYOM3huI6QcPe7fzGW3%2Fr21tom9geyMzvWXS504Ca12%2B0HBm6w0%2Bgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe22787c569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/img/play.png
188.114.96.1 2.5 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/img/play.png
IP 188.114.96.1:0
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 10a11cc31a1fe5126ae5f1e359679cbb
7d30dcc97bb4aed52948a5b040b4fa63149a405e
82b4aac50bdda11a5069442a4a6f593f4f3debbc2a4499b919d61691301c5537
GET /template/mytheme/statics/img/play.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/template/mytheme/statics/css/mytheme-ui.css?v=2.8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:54 GMT
content-type: image/png
content-length: 2457
last-modified: Thu, 25 Jan 2018 02:24:02 GMT
etag: "5a693fc2-999"
expires: Sun, 17 Dec 2023 16:17:23 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 910249
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0umpNQG3jEjPTpa8tM3MtfQ%2B5%2FokGeaDyGHXYRR0p2SAJwet2HvuNwGui4X%2FPA%2B2%2Bu8jh8CGwPiS3jaUojYRNzSCm8hLBrcVAJH6NDDhiHzi8K11KMNQnLpHwmjCVoNiekbK6o7FNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe22787e569c-OSL
alt-svc: h3=":443"; ma=86400
ocsp.trust-provider.cn/
119.36.90.164 599 B IP 119.36.90.164:0
ASN #4837 CHINA UNICOM China169 Backbone
Hash c1d5200068aa043d24ecae3c34a1be49
ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092
29554c7a03f7220745f239de3bb3f3e787651db152a095019e927bf83d5bb5af
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 05 Dec 2023 08:41:56 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: HIT
CF-RAY: 8308a2711dc2230e-SJC
ETag: "ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092"
Expires: Sun, 10 Dec 2023 22:38:06 GMT
Last-Modified: Sun, 03 Dec 2023 22:38:07 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01hW9188:1 (Cdn Cache Server V2.0), 1.1 PS-000-01k7g70:10 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 656ee254_PS-000-015v471_10716-35054
via: n173-114-140.bdcdn-hbxtcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701765716bf8d4604664b81018a53946f06ead864
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=7, edge;dur=0
ocsp.trust-provider.cn/
119.36.90.164 599 B IP 119.36.90.164:0
ASN #4837 CHINA UNICOM China169 Backbone
Hash c1d5200068aa043d24ecae3c34a1be49
ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092
29554c7a03f7220745f239de3bb3f3e787651db152a095019e927bf83d5bb5af
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 05 Dec 2023 08:41:56 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: HIT
CF-RAY: 82ff7d9f8c075167-HKG
ETag: "ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092"
Expires: Sun, 10 Dec 2023 22:38:06 GMT
Last-Modified: Sun, 03 Dec 2023 22:38:07 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 ianxun10:4 (Cdn Cache Server V2.0), 1.1 CS-000-01hW9188:1 (Cdn Cache Server V2.0), 1.1 PS-000-01VkG8:11 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 656ee254_PS-000-01fG29_27788-25719
via: n173-114-140.bdcdn-hbxtcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701765716f5d4feaa23d081b7e39e3a22d883fc2c
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=7, edge;dur=0
ocsp.trust-provider.cn/
119.36.90.164 599 B IP 119.36.90.164:0
ASN #4837 CHINA UNICOM China169 Backbone
Hash c1d5200068aa043d24ecae3c34a1be49
ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092
29554c7a03f7220745f239de3bb3f3e787651db152a095019e927bf83d5bb5af
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 05 Dec 2023 08:41:56 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: HIT
CF-RAY: 8308a2711dc2230e-SJC
ETag: "ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092"
Expires: Sun, 10 Dec 2023 22:38:06 GMT
Last-Modified: Sun, 03 Dec 2023 22:38:07 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01hW9188:1 (Cdn Cache Server V2.0), 1.1 PS-000-01k7g70:10 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 656ee254_PS-000-01k7g70_35510-46435
via: n173-114-139.bdcdn-hbxtcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 170176571656e5d10f19ba2fb572c4979c01274dc0
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=7, edge;dur=0
ocsp.trust-provider.cn/
119.36.90.164 599 B IP 119.36.90.164:0
ASN #4837 CHINA UNICOM China169 Backbone
Hash c1d5200068aa043d24ecae3c34a1be49
ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092
29554c7a03f7220745f239de3bb3f3e787651db152a095019e927bf83d5bb5af
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 05 Dec 2023 08:41:56 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: HIT
CF-RAY: 8308a2711dc2230e-SJC
ETag: "ce8424b88b3e21ccdf3eb08a24f9fadcb8cd4092"
Expires: Sun, 10 Dec 2023 22:38:06 GMT
Last-Modified: Sun, 03 Dec 2023 22:38:07 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01hW9188:1 (Cdn Cache Server V2.0), 1.1 PS-000-01k7g70:10 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 656ee254_PS-000-015v471_11108-22730
via: n173-114-139.bdcdn-hbxtcu.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701765716913c6ef96e90fef48836997e3cbed533
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=10, edge;dur=0
pc.stgowan.com/pc/rich-tf.js
110.249.196.101 410 B URL pc.stgowan.com/pc/rich-tf.js
IP 110.249.196.101:0
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with CRLF line terminators
Hash 68b3003b15cb3b94c10a2551651f2766
5e25704676e00e78fcfaf4fa68b24b9e4556e506
cd535f7a6b72bea4f06c439b3d436f9b65523d90a5786365a7f153a8d2700109
GET /pc/rich-tf.js HTTP/1.1
Host: pc.stgowan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Mon, 29 May 2023 10:47:58 GMT
Content-Encoding: gzip
Etag: "647482de-3bf"
Server: nginx/1.16.0
Date: Mon, 06 Nov 2023 01:36:18 GMT
Content-Type: application/javascript
Content-Length: 410
Accept-Ranges: bytes
X-NWS-LOG-UUID: 12112111200310675516
Connection: keep-alive
X-Cache-Lookup: Cache Hit
pc.stgowan.com/pc/fixed-tf.js
110.249.196.101 492 B URL pc.stgowan.com/pc/fixed-tf.js
IP 110.249.196.101:0
ASN #4837 CHINA UNICOM China169 Backbone
File type HTML document, ASCII text, with CRLF line terminators
Hash 17a8d8dd30dae65894381b3a804befbb
d4a13e3b5a6ab0081d5ff77bd695e59362ed8b4c
a1b56ba3bdc95501ca8c212e32ae1e6173a65a9aa6c5f2a9ef9b290a29723d45
GET /pc/fixed-tf.js HTTP/1.1
Host: pc.stgowan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 22 Feb 2023 09:26:31 GMT
Content-Encoding: gzip
Etag: "63f5dfc7-4d8"
Server: nginx/1.16.0
Date: Tue, 21 Nov 2023 19:20:28 GMT
Content-Type: application/javascript
Content-Length: 492
Accept-Ranges: bytes
X-NWS-LOG-UUID: 13490266350688273986
Connection: keep-alive
X-Cache-Lookup: Cache Hit
xiaobao.lanhuatv.com/upload/vod/20231123-1/f109aede8017ee51de8f2ecd7b9029cc.png
188.114.96.1 1.4 MB URL xiaobao.lanhuatv.com/upload/vod/20231123-1/f109aede8017ee51de8f2ecd7b9029cc.png
IP 188.114.96.1:0
File type PNG image data, 1920 x 639, 8-bit/color RGBA, non-interlaced\012- data
Size 1.4 MB (1434598 bytes)
Hash f944ff16ced618cc34cc0bbd3a1c3edd
0efa57b9167f453ad321a1e6e520af664771fda7
e5e10cf39c260337ead929afb569d44ac041044b70aea19ed71573eb23b65362
GET /upload/vod/20231123-1/f109aede8017ee51de8f2ecd7b9029cc.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 1434598
last-modified: Wed, 22 Nov 2023 17:37:29 GMT
etag: "655e3c59-15e3e6"
expires: Sat, 30 Dec 2023 04:40:04 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1hk8vw%2FuahZW%2FKiw4ssp6uBe6BUZhX0wdLUsDywdmPF3bxm6bVoUtaVj%2B%2FabwS%2Fks8c1PBvdEebwvkrKm1KhmdCCFjCTcMfIhbVwcBFxYG0k49alOxJH5yEXCcIEu%2BgN0guhw3sQHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b04569c-OSL
alt-svc: h3=":443"; ma=86400
pc.stgowan.com/pc_w/m_fixed.js
110.249.196.101 3.3 kB URL pc.stgowan.com/pc_w/m_fixed.js
IP 110.249.196.101:0
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with very long lines (1205)
Hash d5c7f2e02fcb0c6793d5120881c3a378
4e35e20f4c8d4c73c80c0fcefe8d76c5f8b4ec83
f93e2b263999e3fe1a9a7d5c1ccedd60f7c0042180ad86faff144e4335252316
GET /pc_w/m_fixed.js HTTP/1.1
Host: pc.stgowan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 02:31:54 GMT
Content-Encoding: gzip
Etag: "65557f1a-39da"
Server: nginx/1.16.0
Date: Thu, 16 Nov 2023 02:35:21 GMT
Content-Type: application/javascript
Content-Length: 3292
Accept-Ranges: bytes
X-NWS-LOG-UUID: 2707702392838886940
Connection: keep-alive
X-Cache-Lookup: Cache Hit
xiaobao.lanhuatv.com/template/mytheme/statics/image/20230212/bd9299949.png
188.114.96.1 5.5 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/image/20230212/bd9299949.png
IP 188.114.96.1:0
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 217eff127d6495a9b9d85543b9028622
2609b84de2f1c4236e93b45606f1a14d6478caa6
a1d8fc385ee6e0fb9068dc793e8375a5a9d1a94184a0fb986dc489c21c1075d2
GET /template/mytheme/statics/image/20230212/bd9299949.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/png
content-length: 5538
last-modified: Sun, 12 Feb 2023 15:18:19 GMT
etag: "63e9033b-15a2"
expires: Sun, 17 Dec 2023 16:17:23 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 522999
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UiT%2F442SRwOwzBTg%2FvOKYcLapvxw3iOYMlmYn%2FegW3VDcJ53IJpBpVdtQxFRBPJLP2Uyfwng4bTSgtmz1qBn9eWnh6p4Ht%2BRDBwXEIafdGvyXrs39yCHdY6UBCaVoGdg3V5jdoYUCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe352c90569c-OSL
alt-svc: h3=":443"; ma=86400
www.lanhuatv.com/upload/vod/20231117-1/dd46dad3b4fa2f26f295e74fef405f31.jpg
188.114.96.1 25 kB URL www.lanhuatv.com/upload/vod/20231117-1/dd46dad3b4fa2f26f295e74fef405f31.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x377, components 3\012- data
Hash 5dbf952ad75a4eced9e4eea7ca4e0ad5
acc33a56e94d7c43df3e5d2a09687dce6cefc879
908941ff07a8fccf09e62f24065c046d42f4e082304214262a7e93bd4242cc56
GET /upload/vod/20231117-1/dd46dad3b4fa2f26f295e74fef405f31.jpg HTTP/1.1
Host: www.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 24664
last-modified: Fri, 17 Nov 2023 10:45:04 GMT
etag: "65574430-6058"
expires: Tue, 26 Dec 2023 02:15:47 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 557305
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b8%2FxUBnERrWRZGap32%2FY2F2Z%2BErK1evpM8wpjWnmYlPklisLHTPWFe3Wu8Qi9e3ZeSKoiweKfRsDaYSd7X%2FcDc9KS12ssKf5BacLDf6Q828wN6kbN%2BGiNWYTy4aIuD2i3f7K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe357cd5569c-OSL
alt-svc: h3=":443"; ma=86400
www.lanhuatv.com/upload/vod/20230806-1/60622d9b6f2ef548d5a4f3a9a2aa03a8.jpg
188.114.96.1 100 kB URL www.lanhuatv.com/upload/vod/20230806-1/60622d9b6f2ef548d5a4f3a9a2aa03a8.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x810, components 3\012- data
Size 100 kB (100322 bytes)
Hash 589084c330b0b5e409ceffc97d495265
583b969bf95251311120864fae3c4c02f944cc36
6be3af5951d49d8008bbd352847e7edd9e2ddb166ecdeb605a3a0131251664c6
GET /upload/vod/20230806-1/60622d9b6f2ef548d5a4f3a9a2aa03a8.jpg HTTP/1.1
Host: www.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 100322
last-modified: Sun, 06 Aug 2023 15:30:05 GMT
etag: "64cfbc7d-187e2"
expires: Sun, 31 Dec 2023 00:53:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 58344
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Ss9mrzlJdpN9Uhu7sROSmPz8ps96UB%2BQHlMRjllrm8EqG%2Bv3QP7P95diToUu%2BgswevfQjQO0r%2BtGeCIzKl%2FSECzBVeUdc3G99kwdU7ymAVZSdLIuNVf1V9jKSb83GQCp8Mw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe357cd2569c-OSL
alt-svc: h3=":443"; ma=86400
www.lanhuatv.com/upload/vod/20230720-1/d92c4fc34ca39138417a320901b5df28.jpg
188.114.96.1 526 kB URL www.lanhuatv.com/upload/vod/20230720-1/d92c4fc34ca39138417a320901b5df28.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 770x1080, components 3\012- data
Size 526 kB (526384 bytes)
Hash 3cf175d113550c6822f4409b1220a0e9
67c371284a3ee88738a88e35577521d3667df248
3f3e9592822012fce071dcef2fd8fa2fee148159052db19b4a104455b75803b7
GET /upload/vod/20230720-1/d92c4fc34ca39138417a320901b5df28.jpg HTTP/1.1
Host: www.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 526384
last-modified: Thu, 20 Jul 2023 03:00:39 GMT
etag: "64b8a357-80830"
expires: Sat, 30 Dec 2023 04:04:17 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 319795
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sv%2BxXR9NCmbqYJPO5HWx%2FXGvT12Kbtl3uOUQEnW9dTtzcwIPD0MQo8daOhgaNINh3E5sgl8bt2tiUjL7w3ePKjn0ZJbgLCN2VSzJMJUIr0iP8P7uqNImsQD1%2BhNTtVz2n4DG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe357cd7569c-OSL
alt-svc: h3=":443"; ma=86400
www.lanhuatv.com/upload/vod/20230121-1/b6b85316d9b843b9fd03a69181bbfe13.jpg
188.114.96.1 100 kB URL www.lanhuatv.com/upload/vod/20230121-1/b6b85316d9b843b9fd03a69181bbfe13.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x960, components 3\012- data
Size 100 kB (100034 bytes)
Hash 7701c4126815e2c0a816c9770efce03d
2f0cca5aa67f22d0f6808902aac885e070d9b5af
ee224c122e2944c772693b56dcd3352a2e6b28da44740e892582f6bbf3663fa8
GET /upload/vod/20230121-1/b6b85316d9b843b9fd03a69181bbfe13.jpg HTTP/1.1
Host: www.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 100034
last-modified: Sat, 21 Jan 2023 02:48:01 GMT
etag: "63cb5261-186c2"
expires: Sun, 17 Dec 2023 16:17:30 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 643991
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pmqTLLiIdYwBVm%2FPq3w7%2B5pvQ88hyWVg%2FYfK0xSQ5LLKa4wEcaTqLpNbcgXr7%2BgJYMfJb85cQSCC8Za42qGO4Eqnszfuc3BQO%2FZPam5YkrTXy6WqzwQRVKnO57iH9NhfvrPz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe357cda569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/js/layer/theme/default/icon.png
188.114.96.1 12 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/js/layer/theme/default/icon.png
IP 188.114.96.1:0
File type PNG image data, 210 x 61, 8-bit/color RGBA, non-interlaced\012- data
Hash 551539f873d9ebe0792b120a9867d399
fe47ec617507e9ce5f6ce7ac9b179a3c9231882b
99942159547fc45a02ddeb5af9570b6c870b18c36f83fd53ccb7c0644d346c89
GET /template/mytheme/statics/js/layer/theme/default/icon.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/template/mytheme/statics/js/layer/theme/default/layer.css?v=3.1.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/png
content-length: 11493
last-modified: Tue, 05 Dec 2017 03:57:24 GMT
etag: "5a261924-2ce5"
expires: Sun, 17 Dec 2023 16:17:21 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 1096826
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DPisG7biPz%2BdgYirR5ZLgMfVVPeRrWxEbMzOAj2jrq%2F7qyzXOS5IuNZhJda53RXr9FygrDUVBre2yVyIel60mYf9lriQF5yvs3%2BG8zDdeCloxUR7zx8030HaGouCrX%2FOmMveXszjvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe362dd4569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231123-1/9c4139bdb324b344ed692841b80ae955.jpg
188.114.96.1 145 kB URL xiaobao.lanhuatv.com/upload/vod/20231123-1/9c4139bdb324b344ed692841b80ae955.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 342x478, components 3\012- data
Size 145 kB (144884 bytes)
Hash 56827b9ad04ff0acc81d69a14bb5657b
1d41395e4180ccc27b8fca4f26d7f15aefe10c36
2b340a5052cbdc481e9c829781fa80b3ce2aa9362183d5f9aa135ee35072c15b
GET /upload/vod/20231123-1/9c4139bdb324b344ed692841b80ae955.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 144884
last-modified: Thu, 23 Nov 2023 06:40:03 GMT
etag: "655ef3c3-235f4"
expires: Sun, 24 Dec 2023 23:56:56 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 655418
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tSahGGRb25cUFLBLn%2BHh9A2C6caLvLGtUqVNYKGhYpfl35z9uvq6qIRw7LkzFTDEn%2FT9HUBKLkKOFt5A8BshUfSEmU%2BDjH1s%2FJc66n7L3jQ%2BqfS0dMbMz1jbjebnyXh9RGu8B3QPZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe36fe93569c-OSL
alt-svc: h3=":443"; ma=86400
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
104.16.56.101 35 kB URL static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP 104.16.56.101:0
File type gzip compressed data, from Unix\012- data
Hash 122043e067c838e085a82dcfa487d4b4
86504c3bbab3d481e5e2d5d1c5e2136c69be6e5e
d2cd1643aed4f5d015699a882602e7d867eeeb83ccd5a7ee926ab87565e8b869
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 830afe1f5e1d56bb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
xiaobao.lanhuatv.com/upload/vod/20231127-1/eb5ec7369433e0c1fcc7e68ab57bb1d9.jpg
188.114.96.1 2.0 MB URL xiaobao.lanhuatv.com/upload/vod/20231127-1/eb5ec7369433e0c1fcc7e68ab57bb1d9.jpg
IP 188.114.96.1:0
File type PNG image data, 770 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 2.0 MB (2002496 bytes)
Hash 308371da901c34b6134f2a6ee2e64313
681ada8d8701d1e1bd65694de5f9591ddb474659
1d6d3888b095b487ab9009c99e6a3bfdfd8bab642c78171debb92324265e96e2
GET /upload/vod/20231127-1/eb5ec7369433e0c1fcc7e68ab57bb1d9.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 2002496
last-modified: Mon, 27 Nov 2023 11:40:06 GMT
etag: "65648016-1e8e40"
expires: Fri, 29 Dec 2023 04:18:14 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 135241
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WiiGuJ6tIq1GsZCJkSNdBGzz3YB9z93gUGTU9OlrFzGzwUUQWuEJ3MxlML1ldBVlNAnlbnRwFa50FJRDNE2dKWa4VIBZHjkOPfD7Eso7iyWd9XykxnEZigHs3bfoVptK5wN89SNuEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe36ee8a569c-OSL
alt-svc: h3=":443"; ma=86400
pc.stgowan.com/pc_w/m_rich.js
110.249.196.101 11 kB URL pc.stgowan.com/pc_w/m_rich.js
IP 110.249.196.101:0
ASN #4837 CHINA UNICOM China169 Backbone
File type Unicode text, UTF-8 text, with very long lines (1524)
Hash e80192ef7328f7505e5df8ed240f453d
a12644f4c65b25a6f5e8a742fa57d0f5194b4b83
c3109d15e6e45764ed4ab6fad1d22a1daf0c7bb4f6cc79520a81c90ef1606eb9
GET /pc_w/m_rich.js HTTP/1.1
Host: pc.stgowan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Mon, 04 Dec 2023 07:56:48 GMT
Content-Encoding: gzip
Etag: "656d8640-a27b"
Server: nginx/1.16.0
Date: Mon, 04 Dec 2023 07:57:33 GMT
Content-Type: application/javascript
Content-Length: 11083
Accept-Ranges: bytes
X-NWS-LOG-UUID: 3892290358055923318
Connection: keep-alive
X-Cache-Lookup: Cache Hit
xiaobao.lanhuatv.com/upload/vod/20231117-1/dd46dad3b4fa2f26f295e74fef405f31.jpg
188.114.96.1 25 kB URL xiaobao.lanhuatv.com/upload/vod/20231117-1/dd46dad3b4fa2f26f295e74fef405f31.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x377, components 3\012- data
Hash 5dbf952ad75a4eced9e4eea7ca4e0ad5
acc33a56e94d7c43df3e5d2a09687dce6cefc879
908941ff07a8fccf09e62f24065c046d42f4e082304214262a7e93bd4242cc56
GET /upload/vod/20231117-1/dd46dad3b4fa2f26f295e74fef405f31.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 24664
last-modified: Fri, 17 Nov 2023 10:45:04 GMT
etag: "65574430-6058"
expires: Thu, 28 Dec 2023 04:02:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 500844
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QqB7KZV6cUmDP8prSKY0zr94Ef8X%2BQ0ccBHCyiKYZCRRHcCido4sKgYoca7dCLX0wcM%2BSL24FTQJf7WrKMDTRsYUCI7lXLYBl8u5uuOYMnjMXR%2F0CpA36M3Q5CSUCgfo6R67HYdO4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe373ec5569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231123-1/c45c7302da8adfa60cc962212bf7a696.jpg
188.114.96.1 105 kB URL xiaobao.lanhuatv.com/upload/vod/20231123-1/c45c7302da8adfa60cc962212bf7a696.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 426x597, components 3\012- data
Size 105 kB (105088 bytes)
Hash 2ac86b9a2c543d2314a339d44bd503cb
6c724cfa5457332aafd11ccd698bdaf12fbf2215
5867fe0440a5784abeb5b5d5b0a569fb050adc77bd23cab2401601788bebadd8
GET /upload/vod/20231123-1/c45c7302da8adfa60cc962212bf7a696.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 105088
last-modified: Wed, 22 Nov 2023 17:32:10 GMT
etag: "655e3b1a-19a80"
expires: Mon, 01 Jan 2024 10:25:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cFyIShCZyG3pM6Np8jso4o4r8gMVPrzRrf5Lhn0vkWPc48lDxYbx6xGV0qYgY0YeJT7ldwXTkji0PmPmmLDatS8Sx4CrxTnxs4a%2BPmOkbvbY2%2F3OmHWV4Z6qCiG7wcb8kuHdT5yJ%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe373ece569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231123-1/47d54292f95d35fc0efb66aa9cce4982.webp
188.114.96.1 432 kB URL xiaobao.lanhuatv.com/upload/vod/20231123-1/47d54292f95d35fc0efb66aa9cce4982.webp
IP 188.114.96.1:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 432 kB (432454 bytes)
Hash b0a89d13e46bc22155c0a2d931640c24
f772904abb326fcba620220a4bc1c87b020d0955
58e924d43854069a4747aec1aca1070818b3bc5e8abdfb2caab862a35e3e9a4b
GET /upload/vod/20231123-1/47d54292f95d35fc0efb66aa9cce4982.webp HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/webp
content-length: 432454
last-modified: Wed, 22 Nov 2023 16:15:35 GMT
etag: "655e2927-69946"
strict-transport-security: max-age=0; includeSubDomains; preload
cache-control: max-age=300
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xvqNB03Xdbv%2B0zekzypeLb6eI9n6bMvS%2FgXKbL1P%2B%2FfkBt%2FVJpp6I%2FSt%2BQgbDURDMDrI5J1HBp9xg5fqD%2BS884UKlMWeSc8E0VA6Ak6dacF1c8DH9%2BV0KhBAfUwsSHbHpw1RB%2Blieg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe370ea4569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyJUU1JUIwJThGJUU1JUFFJTlEJUU1JUJEJUIxJUU5JTk5JUEyJTIwLSUyMCVFNiVCNSVCNyVFNSVBNCU5NiVFNSU4RCU4RSVFNCVCQSVCQSVFNyU5QSU4NCVFNSU5QyVBOCVFNyVCQSVCRiVFOCVBNyU4NiVFOSVBMiU5MSVFNSVBQSU5MiVFNCVCRCU5MyVFNSVCOSVCMyVFNSU4RiVCMCUyQyVFNiVCNSVCNyVFOSU4NyU4RiVFOSVBQiU5OCVFNiVCOCU4NSVFNSU5QyVBOCVFNyVCQSVCRiVFOCVBNyU4NiVFOSVBMiU5MSVFOCVBNyU4MiVFNyU5QyU4QiUyMiUyQyUyMnglMjIlM0EwLjE0MTE5MTA4MDUxNjUzMzg0JTJDJTIydyUyMiUzQTEyODAlMkMlMjJoJTIyJTNBMTAyNCUyQyUyMmolMjIlM0ExMDI0JTJDJTIyZSUyMiUzQTEyODAlMkMlMjJsJTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZ4aWFvYmFvLmxhbmh1YXR2LmNvbSUyRiUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=
188.114.96.1 368 kB URL xiaobao.lanhuatv.com/cdn-cgi/zaraz/s.js?z=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
IP 188.114.96.1:0
File type ASCII text, with very long lines (4085)
Size 368 kB (367591 bytes)
Hash 44ce3ec39a2bb8cbf9b106f4a07d84f0
ac6a7698c21dfccfaf934c0d49b4ff8d64afd393
98ff94300a625bdba06e6fe1ebbad4b8502f2f6597a3d3fab7822e867335c7c5
GET /cdn-cgi/zaraz/s.js?z=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 HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: https://xiaobao.lanhuatv.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Set-Cookie, Cache-Control
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-max-age: 600
set-cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; Domain=lanhuatv.com; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_kAhD__counter=1; Domain=lanhuatv.com; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_kAhD__ga4sid=2074575789; Domain=lanhuatv.com; Path=/; Max-Age=1800; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_kAhD__session_counter=1; Domain=lanhuatv.com; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; Domain=lanhuatv.com; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; Domain=lanhuatv.com; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_kAhD__let=1701765717540; Domain=lanhuatv.com; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cAqZP%2BB2I53rcmSehehN6sgVy3oTTGLR3%2ByjGSgFmhnyKF0CVUZJasrraHANgbZwGTr%2BnCP0Xnp5fSpCBeaf%2BwxNh2gJB5vIeCwCxC4QHKbdVoBYqvTXggX%2FjWf3mTvvEzZmIUAtag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe369e46569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231115-1/383dde87d1c00e819be7261f85c9a3f0.jpg
188.114.96.1 143 kB URL xiaobao.lanhuatv.com/upload/vod/20231115-1/383dde87d1c00e819be7261f85c9a3f0.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 342x478, components 3\012- data
Size 143 kB (142914 bytes)
Hash 4659f7c219cf019882b44767b8d43e2c
e8ab3103bbabac244c87b9d9b88b7b0bcab4ef82
c4f047ecc5c3d2e00742710a0a2ba051a29cbcc61d1981f77d170fdfb85a9c4b
GET /upload/vod/20231115-1/383dde87d1c00e819be7261f85c9a3f0.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 142914
last-modified: Wed, 15 Nov 2023 04:25:52 GMT
etag: "65544850-22e42"
expires: Sat, 30 Dec 2023 00:00:21 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 135241
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QcXJQAQT31fmHn0hVFWr3da8MJL5NN3R7%2B%2BJPWFTVbYWjMA7INcywNFVa3K%2BoQLEk3IKE83ApUXR1OEL8KKyqigvpMg8E5OvHHt9LKw6p9ZvW58PRyAoa7b1A%2BAwjQTWQkl6DQ4brQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe374ee8569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231127-1/93fdcc894ffdb07e81a94b2e2d6096ae.png
188.114.96.1 115 kB URL xiaobao.lanhuatv.com/upload/vod/20231127-1/93fdcc894ffdb07e81a94b2e2d6096ae.png
IP 188.114.96.1:0
File type PNG image data, 211 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size 115 kB (115375 bytes)
Hash 40ecfc1283b562cda0d0a818f986947c
8e2dd958c4c8d0a996671ad7202f43e8f98108f1
d6558bd425a7cae3a7d9e751a04a0183977a7e8945cfc3f6c8fd643607b2a279
GET /upload/vod/20231127-1/93fdcc894ffdb07e81a94b2e2d6096ae.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/png
content-length: 115375
last-modified: Mon, 27 Nov 2023 10:37:25 GMT
etag: "65647165-1c2af"
expires: Fri, 29 Dec 2023 14:22:08 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W2%2Fh14HA2HyF%2F5cHdTV3d6VfxJelhmzO%2BNWcB4W%2BmEGjvJT2mtHWWNLDSMpQmwQ%2BY%2FEH2FztQfmLvDSTnuxko862ot3uqNHmRsCuNisLAs9jf%2BOSEuHcwvkZsGfVdjRwhtv7RkWRHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe375ef4569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231113-1/91639e0d7cd8c0e40c7c58b8edaf2a04.jpg
188.114.96.1 142 kB URL xiaobao.lanhuatv.com/upload/vod/20231113-1/91639e0d7cd8c0e40c7c58b8edaf2a04.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x959, components 3\012- data
Size 142 kB (142114 bytes)
Hash 723727b308d6248ffae7e472a963a487
babaf3126b0cf81ca20f1c99e081a1adb9226722
7e046662d65db5139c709ecb8c43d700fa88f5c606ff2309938a441173b45798
GET /upload/vod/20231113-1/91639e0d7cd8c0e40c7c58b8edaf2a04.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 142114
last-modified: Mon, 13 Nov 2023 14:30:05 GMT
etag: "655232ed-22b22"
expires: Wed, 20 Dec 2023 05:54:22 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pn62AbCWo8detcD5Wyy1e2HtCCLH1UDhJRR95fkRylfn55LmoA8aslYwDh%2FZG84KcQaxFKH9TinGvYx1g8kj%2ByhcT25AbsZ6Hol113XDWmIotDDg1s%2FICTHvcnnTGuq%2BYYL9W5CY9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe372ebd569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20230613-1/1320fc650cb9ad124c8abce015c4501c.jpg
188.114.96.1 170 kB URL xiaobao.lanhuatv.com/upload/vod/20230613-1/1320fc650cb9ad124c8abce015c4501c.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1369x1920, components 3\012- data
Size 170 kB (170510 bytes)
Hash 2e954dbddffd307dadad104fd38f290d
bd5c26b23a478c88b5de9d45a6af193cd2bcada9
c72918b9e68597c86414d7453f1e541d88bb85ec8933791721d3030b87f89190
GET /upload/vod/20230613-1/1320fc650cb9ad124c8abce015c4501c.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 170510
last-modified: Tue, 13 Jun 2023 01:04:21 GMT
etag: "6487c095-29a0e"
expires: Mon, 01 Jan 2024 23:50:11 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 128310
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ghA3Vhjj8T004hQs24huJWINOAysBr9HUAz2mVml3lsPWIjhvf7DKmZ24DawiHd3Yak8KbPo%2FkSWDJLc6pfTmdjW%2FIHsHX1BIfmD%2BJYnt%2F6WExzU9OsgkdQnvx75CBtMCPmgKVa6RA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe375ef5569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20230925-1/654900ae9b04e2e4831167df79860dd2.jpg
188.114.96.1 67 kB URL xiaobao.lanhuatv.com/upload/vod/20230925-1/654900ae9b04e2e4831167df79860dd2.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x763, components 3\012- data
Hash cafd16dae059f233ad53da16c1036f73
f0876e2cacaa5c092b537ea82b07b9a9822541be
ed14e88557d7b304d60adc86d0969a0eb5b0eeae4b38b54036a9f1324e142acb
GET /upload/vod/20230925-1/654900ae9b04e2e4831167df79860dd2.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 67132
last-modified: Mon, 25 Sep 2023 14:00:07 GMT
etag: "65119267-1063c"
expires: Sat, 30 Dec 2023 03:58:29 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TmYn7pyg2%2FEN3su58zc6r4sNTbwL4OThvlFj9mVL5RGTWIkyphAh%2FDY2ydL%2Bqgvehr3sf0zyoBUve0GmlQrCJBnDzbPoLb%2FMBLTU872kaETabSSZUSeuWF4%2Fj%2Fu5Z6ansAbMBOOSWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe375ef8569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231203-1/6524e15cc3acebcd359da7d779a955a4.png
188.114.96.1 112 kB URL xiaobao.lanhuatv.com/upload/vod/20231203-1/6524e15cc3acebcd359da7d779a955a4.png
IP 188.114.96.1:0
File type PNG image data, 196 x 283, 8-bit/color RGBA, non-interlaced\012- data
Size 112 kB (111548 bytes)
Hash 87228e5ff82df3041b4fa7536945d170
1601ab2a027515a8d3d0b4a6543fdf83d2a545ce
9737a493c18d846432de687790fe2ee8a51a4127605c73bd8ff5d762a9ead557
GET /upload/vod/20231203-1/6524e15cc3acebcd359da7d779a955a4.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/png
content-length: 111548
last-modified: Sat, 02 Dec 2023 16:34:43 GMT
etag: "656b5ca3-1b3bc"
expires: Tue, 02 Jan 2024 22:37:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o7AD7IUeTBSDu%2B58wcYNmYnUg3fIaowWLN2DfWFV1jjRpwk0aj5GDtbET6FFnyfQ53eKpqDGd8HAqTuah7BHN9NJgRsFvnwwBepcN4RYRADHYhe58D9xYb%2FcSy4reFhNUNgrJoKxMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe376f10569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231203-1/49106c217b1e82d437d7d2df819d3b42.png
188.114.96.1 115 kB URL xiaobao.lanhuatv.com/upload/vod/20231203-1/49106c217b1e82d437d7d2df819d3b42.png
IP 188.114.96.1:0
File type PNG image data, 198 x 281, 8-bit/color RGBA, non-interlaced\012- data
Size 115 kB (114790 bytes)
Hash fa99ee55d5743ebe3a3ec8441ca07358
df20806abbff1e5edb18a0e4142e251d2f441cc4
93225388c7a5736ce749f06fedc06ee28e2800a2144589ac2091ead0afd62286
GET /upload/vod/20231203-1/49106c217b1e82d437d7d2df819d3b42.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/png
content-length: 114790
last-modified: Sat, 02 Dec 2023 16:26:08 GMT
etag: "656b5aa0-1c066"
expires: Mon, 01 Jan 2024 16:27:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nu%2FDc%2FzJEDs83m4pbLm28dC6ggBJyvmGrC%2FqKKez%2Fi%2BR%2FU7sc1d7%2FecADFcveO1LMqUL%2B%2F2RDl%2FkNwX%2FNeZLw%2BDPe0WXuQjBHCBBPzKw0HSYIGCiDvUCdi%2FBci75AA%2F1VogISWfT2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe377f19569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231020-1/87743ad6c12ead246bcebba55581fe7b.jpg
188.114.96.1 91 kB URL xiaobao.lanhuatv.com/upload/vod/20231020-1/87743ad6c12ead246bcebba55581fe7b.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x810, components 3\012- data
Hash 9b61a7bfb42e5093f7c073e86a4c06bc
f7b976efd2b62d122709fa7e29d15de815c84915
7d0418322d6012d87ad7d2377b4796c6c7acee9f4575f0b5be1e6af71a53e377
GET /upload/vod/20231020-1/87743ad6c12ead246bcebba55581fe7b.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 90989
last-modified: Fri, 20 Oct 2023 09:00:03 GMT
etag: "65324193-1636d"
expires: Sat, 30 Dec 2023 10:38:23 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8WY9KYsCZGOqGtmOZDi1MWtf6US8WZC%2FQy8JNEvM57xEWTiFnfgNiDNrJ7edIMzDbfKktwCYRZmQLI0Wu8NXxLEefPJSMhfOFWmF2kSxxc5PWyu89xWCWWvCqH4ohTNESHBRer7%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe377f1c569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231205-1/5f44b7bc4bc4c49156c06444aad52a74.jpg
188.114.96.1 95 kB URL xiaobao.lanhuatv.com/upload/vod/20231205-1/5f44b7bc4bc4c49156c06444aad52a74.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x756, components 3\012- data
Hash 6b0eb97973593b62db2339e4cb051fa1
e83884441e27455a25cecca4bbc14ac06faee5d7
4dbfdeb252309c466537db24ad8dbc5e123c892214533e7eb5e8683f9d34bb83
GET /upload/vod/20231205-1/5f44b7bc4bc4c49156c06444aad52a74.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 95318
last-modified: Tue, 05 Dec 2023 08:30:09 GMT
etag: "656edf91-17456"
expires: Thu, 04 Jan 2024 08:33:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jeqNlo6gximx527wClk1J1M7pfbLbFO5vKQZ1oG%2FCOQYd3%2BXpln9fV72gnTKTS%2Bwxjds7q6VCkL%2FpORFmvIgPK%2FhHqbQX6NTdrT1rABJhOZkLDKlGqF9j%2F8GszOGrVOE34VlH7bsxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe377f28569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231205-1/5276f3ba63f4c6fe0dbec63041d39761.jpg
188.114.96.1 64 kB URL xiaobao.lanhuatv.com/upload/vod/20231205-1/5276f3ba63f4c6fe0dbec63041d39761.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x766, components 3\012- data
Hash 435fd4502efdbbfb988dfa8450d46e5b
65246556f5a2276ae43be2d85fd673cdf5e68092
cd3bb414b3ef3bf29ffeaf3183f8907eb1d0b36dc494aed85b036558a7bcd378
GET /upload/vod/20231205-1/5276f3ba63f4c6fe0dbec63041d39761.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 64094
last-modified: Tue, 05 Dec 2023 08:30:05 GMT
etag: "656edf8d-fa5e"
expires: Thu, 04 Jan 2024 08:33:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YGFz%2BtwVUYbMW8B2PixvJN6mNoV%2BjcFAPSWvVSaeJgNse4a42sYKLNUJT8jIj68A3LwAyczj5e6B%2F4mdv3WF6PgHIBMllLEDJoFpRW3182Wmgmr0mnN%2F0XEKq0mToGKCcYlYc4Jy0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe37ffcc569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231205-1/8f28b1affaed72b07458eba79ebafbf5.jpg
188.114.96.1 94 kB URL xiaobao.lanhuatv.com/upload/vod/20231205-1/8f28b1affaed72b07458eba79ebafbf5.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x756, components 3\012- data
Hash ee1da7792500156b56e781a515681b35
edae015596fc62bfb650bc0f1bfcf0eb8419b56f
957a9d782683adcbed8317b5f81d35bd8c1db05d730d7fdc64b2fd98adfa0ca7
GET /upload/vod/20231205-1/8f28b1affaed72b07458eba79ebafbf5.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 93655
last-modified: Tue, 05 Dec 2023 08:00:05 GMT
etag: "656ed885-16dd7"
expires: Thu, 04 Jan 2024 08:01:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SXTjHzfay4mklandUEruz%2F9%2BySshJGmSCAdibJV5eiN2O3XiqwJy5GMO400hyV%2B7eAVzW1bBhwggtQU3M9vlmhqnPv6WaDzhSPO0P%2FW3Szxk98Q5KhLBMe1rwzJkO5xQgxhe6%2B%2Bvmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe37ffce569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231205-1/06b256a20a8aa38dfdbe34e591c77641.jpg
188.114.96.1 50 kB URL xiaobao.lanhuatv.com/upload/vod/20231205-1/06b256a20a8aa38dfdbe34e591c77641.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 260x364, components 3\012- data
Hash f0cf4ae8e8fbf2457c92dd32614b50e8
c6c9e738c373f465304b3e40b3fe117f7ecda492
b7f5ca3f19fade004faf4d11af88bd68ec1ec101cea6ce994a21b664d06ac233
GET /upload/vod/20231205-1/06b256a20a8aa38dfdbe34e591c77641.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 49508
last-modified: Tue, 05 Dec 2023 03:45:05 GMT
etag: "656e9cc1-c164"
expires: Thu, 04 Jan 2024 03:51:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0a4eKr6xCtnP2KuhBaA3iropLKDn61BThYarmr2RVrOwkbPiLPI31ha4XNUWV3EZXcphecbMLjx8WTXyn79kV9Z%2F6VaO1XAQAvIzN4r94ubwJLRd%2Bjw9CU0HTwwn3Zm9KYjTP8LtMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe37ffcf569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/js/language.js
188.114.96.1 144 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/js/language.js
IP 188.114.96.1:0
File type Unicode text, UTF-8 text, with very long lines (2586)
Size 144 kB (143902 bytes)
Hash 8ef8f27f5e2ab65a53ea1c2d69e2babd
cfb6393fd991f6c9c89ab5c13a961f3ae9f3b2f8
fe9b8845303dc5e4aeb79351c048531a3a288f19b62b387c8db1acec5155a517
GET /template/mytheme/statics/js/language.js HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=15417
etag: W/"5e734d90-3c39"
expires: Tue, 05 Dec 2023 18:34:43 GMT
last-modified: Thu, 19 Mar 2020 10:46:40 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
age: 2061
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MdOl79Vrh3LxGFo7hxm122QdM21WtzPr8%2FOcbYcyyGI%2BsyiVKqwNlw%2FCg%2Bmh1fJZ2OLuUvAoe1UrjsiSS%2Fyq%2FT6eRiqJHkqTD4eoOd0j7p7Y9Z11ZyvyDY%2BT7Mvge8XebIAu0A0cow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1f1be7569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231025-1/b7e8dbf4eceaf3161adbbb09c49bec88.jpg
188.114.96.1 163 kB URL xiaobao.lanhuatv.com/upload/vod/20231025-1/b7e8dbf4eceaf3161adbbb09c49bec88.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x959, components 3\012- data
Size 163 kB (163446 bytes)
Hash 834bde4cf12ef05f526b230bd4b91e7b
24414264ca8c7e06a3cb3dd122b638026fe49051
437fd1f2b95130bc01edf88a8dc0c89847cded1882334d002e0c5c9858be7fd8
GET /upload/vod/20231025-1/b7e8dbf4eceaf3161adbbb09c49bec88.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 163446
last-modified: Wed, 25 Oct 2023 04:30:05 GMT
etag: "653899cd-27e76"
expires: Wed, 03 Jan 2024 04:03:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8PdZacKBZMQ0sgF6BwbWLg8GIgWTEmeAbP465YQccmuj6TRZoPeDze6UNiO%2FzP26t1qe4D1OwrAgNGaMye%2B4EwQsyUOP%2BDPAIDM8UI8z9Fm12hWxFm5dgrflzx24UozdqCauLCZEzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe371eb4569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231205-1/9d948d0b177fd8da831cbb2d797843e3.jpg
188.114.96.1 88 kB URL xiaobao.lanhuatv.com/upload/vod/20231205-1/9d948d0b177fd8da831cbb2d797843e3.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 540x716, components 3\012- data
Hash e306caead58a7d7f0d6796c6e58d6328
15480e5d6d5898ed84dc6e55f97b4e9d1d9bd268
ee770a1cc9876e2ba19882542cbfe0a32d8fab40dfb480ad169cae575bac7e8a
GET /upload/vod/20231205-1/9d948d0b177fd8da831cbb2d797843e3.jpg HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: google-analytics_v4_kAhD__engagementStart=1701765717540; google-analytics_v4_kAhD__counter=1; google-analytics_v4_kAhD__ga4sid=2074575789; google-analytics_v4_kAhD__session_counter=1; google-analytics_v4_kAhD__ga4=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD___z_ga_audiences=0f3217e1-4016-484f-afa9-92523c5dcdf3; google-analytics_v4_kAhD__let=1701765717540
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:57 GMT
content-type: image/jpeg
content-length: 88481
last-modified: Tue, 05 Dec 2023 08:30:07 GMT
etag: "656edf8f-159a1"
expires: Thu, 04 Jan 2024 08:33:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ky%2FZ%2F1FDwUeS%2BqSoPG%2BJPTiTgx0MvCDeDidohWELMc9mVZ1N%2FpkqvwrBcGncWHllzwRVFixmIUmGcHKUNGHdYa1TvxzkWkUPn17oHA%2F9M%2FAnFTe48B2jnfAZJQbjz%2B9s%2F%2FjAEpw8Ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe37ffcb569c-OSL
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/template/mytheme/statics/js/layer/theme/default/layer.css?v=3.1.1
188.114.96.1 3.4 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/js/layer/theme/default/layer.css?v=3.1.1
IP 188.114.96.1:0
File type ASCII text, with very long lines (14367), with no line terminators
Hash 911151b7e1e27f69861f816f649c5767
eaf539f1d9eaaaaa23c041ef0089e392278cedd3
e4a4388efca6e5be9e54fcaadf59a389b4c26233bb7a0f53ab67b8da4c1b2d06
GET /template/mytheme/statics/js/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:54 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
etag: W/"5a261924-381f"
expires: Tue, 05 Dec 2023 19:37:52 GMT
last-modified: Tue, 05 Dec 2017 03:57:24 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
age: 2062
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ck9SSYXVrT5xYhZ6PAAfpWTBVnL4ZUsLsWWs3MdEhrcifRfF2xpoF9%2FRO3uZ523k5feQDaDqkHPRwjJ%2BQY4vmTWa0ziPJKwkZMCKCWMoVvPYU31yhFksMCpduYdXM5GFJKiLu0yGOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe213ec9569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
xiaobao.lanhuatv.com/upload/vod/20231116-1/871744e52a2b500d0c92d446dd0989ce.png
188.114.96.1 2.7 MB URL xiaobao.lanhuatv.com/upload/vod/20231116-1/871744e52a2b500d0c92d446dd0989ce.png
IP 188.114.96.1:0
File type PNG image data, 1920 x 641, 8-bit/color RGBA, non-interlaced\012- data
Size 2.7 MB (2681421 bytes)
Hash 5b2ccfe721d9d0ccd80e18639a393e2a
d76f05c67989800484e8b7f9c371e03b7b2d8678
c6f59f5c0f4508e41c379a08dca9b03bc552d73ddd75af3bb3bf61063d89a8a4
GET /upload/vod/20231116-1/871744e52a2b500d0c92d446dd0989ce.png HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: image/png
content-length: 2681421
last-modified: Thu, 16 Nov 2023 08:01:38 GMT
etag: "6555cc62-28ea4d"
expires: Fri, 29 Dec 2023 05:59:18 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jo7eIFq25HFvhyyCjsxzaPGIvXoefWUJV61tMUGT%2BhnPXOD22toDBxfBclVbqrypIjPehhM9pSwWceDyrwErcBOFHYq09luY0BaGWLPeAjkJKWV1%2Fgv50e2rBgXgQV5FtdGEljLC1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e7b07569c-OSL
alt-svc: h3=":443"; ma=86400
gravelyjovialelemental.com/a5001f046e9c17ed829baee93fd339c8/invoke.js
192.243.61.227 11 kB URL gravelyjovialelemental.com/a5001f046e9c17ed829baee93fd339c8/invoke.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (29601), with no line terminators
Hash fe92bac078a9310b3e3ea6e1ebe256c3
ae6722a4da7786e1f892fbcc409222b0e1fd0dde
0d2c0a8ac7bcc2d27c35b17363d84cc01fc154c449f4e835ed8cf7633ae01176
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a5001f046e9c17ed829baee93fd339c8/invoke.js HTTP/1.1
Host: gravelyjovialelemental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4906de91acf5968680979d857d627a0e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
gravelyjovialelemental.com/c730617d7cbc4d09c9c9855c32d629e1/invoke.js
192.243.61.227 11 kB URL gravelyjovialelemental.com/c730617d7cbc4d09c9c9855c32d629e1/invoke.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (29607), with no line terminators
Hash 5e49f95c393fca56b2da2e772c596958
b6b4426a70d18624e1a914b53f09bd47254153b6
97988816cfd857dbe62c728be51af116ec658534bed615d11a7cff6219083c50
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /c730617d7cbc4d09c9c9855c32d629e1/invoke.js HTTP/1.1
Host: gravelyjovialelemental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cc10ce21ae1166ce4b7248617b9dd35a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
gravelyjovialelemental.com/04126837f1a847c59e602ed15311f297/invoke.js
192.243.61.227 11 kB URL gravelyjovialelemental.com/04126837f1a847c59e602ed15311f297/invoke.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (29628), with no line terminators
Hash 46188c3d0f6822fda2e5a97867865fb8
481a255a6aac4c08af8f55686890769a7bf934ef
79058f2c407a242c2557de53b26359ada11d6ec9095af90c7dbb47553a1839c9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /04126837f1a847c59e602ed15311f297/invoke.js HTTP/1.1
Host: gravelyjovialelemental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 197af2f158bd797ced7ecb9e3266f45c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
gravelyjovialelemental.com/7fb713bbd562547aacb46dcad30752bc/invoke.js
192.243.61.227 11 kB URL gravelyjovialelemental.com/7fb713bbd562547aacb46dcad30752bc/invoke.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (29595), with no line terminators
Hash 4f0daf799a1cdb9aa01cb10d5c4967e6
dd4b5707b441b733d911a8b499b9430df32405d3
27adf2771cd45c40cd1666ce80a37355dba85f59fa54689627c5c465b29a9c08
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /7fb713bbd562547aacb46dcad30752bc/invoke.js HTTP/1.1
Host: gravelyjovialelemental.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7690b36f8b960e0080f203afb01b1488
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
p.51gowan.com/s.json?s=8037
121.12.125.23 1.5 kB URL p.51gowan.com/s.json?s=8037
IP 121.12.125.23:0
File type JSON data\012- , ASCII text, with very long lines (1487), with no line terminators
Hash 3940c48342d05129c3863daa139cdaee
d4e5c7ac8b31b40fec65fa7dc96976edc8453ed6
17ebc3702c316f13bb1cd9c527c410d5e3b606a922ee0d4dc1f5301fe7ad3a61
GET /s.json?s=8037 HTTP/1.1
Host: p.51gowan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.16.0
Date: Tue, 05 Dec 2023 08:41:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.6
Access-Control-Allow-Origin: *
sdk.51.la/js-sdk-pro.min.js
203.107.86.226 13 kB URL sdk.51.la/js-sdk-pro.min.js
IP 203.107.86.226:0
File type Unicode text, UTF-8 text, with very long lines (34110)
Hash 12b38788244af30e6f2b43ac1e0905c6
8c57c30de889c77a4ace4e4ce33a46005868e0ca
c54ff899b5b9f90bd2ecc4dd87d877e87562f8c739ba2c167ccb61f02096abfa
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 08:41:58 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: aliyungf_tc=fa333b51b792db27b6ebd49ba8b1a78657e3f319d0bd580ce7fef59c27f306ac; Path=/; HttpOnly
Server: openresty
Cache-Control: no-store
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
xiaobao.lanhuatv.com/template/mytheme/statics/js/jquery.autocomplete.js
188.114.96.1 5.1 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/js/jquery.autocomplete.js
IP 188.114.96.1:0
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (2111)
Hash ee2530b1aba0d1c0f32eb04f0c30c938
d1f869c36d52ef1f747cf5c14b5a4bc525c7529b
52e7bf84a99fd42086e607f87648277067a158af8819d9862bcc6e5fa2c7d59a
GET /template/mytheme/statics/js/jquery.autocomplete.js HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=25224
etag: W/"5d0b5982-6288"
expires: Tue, 05 Dec 2023 19:37:52 GMT
last-modified: Thu, 20 Jun 2019 10:01:38 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
age: 2061
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=24ilXrcwRuVLXCDAQFKc9qHs5wRnjS2%2BCVedg%2B7LqYRUKd45PSr95b2Tv%2FyuuGALrQTMJ4dtYqX4u7Zftwkb469mhBraOzqLS0y4kJRWUHnuxhYZy1%2B8oe9zQRcS6s5DsdfzQiRawQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e6af0569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 24a776b1f2e9d3fff472472cff5e9b16
38a6b9ce7b18c9204f5ace875325ca74c863d1a9
108f3caa2c7db8c122fcea5f02f4f0f1e058d4da8e913dc2b4e8ace4e5a50e81
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 08:41:58 GMT
Last-Modified: Tue, 05 Dec 2023 07:14:30 GMT
Server: ECAcc (ska/F791)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GOA_V-oGdVbLYb9a0luIRfrW6ILKHiOXPBvWcW7fT23xCUKvmYHvZA==
Age: 5248
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 24a776b1f2e9d3fff472472cff5e9b16
38a6b9ce7b18c9204f5ace875325ca74c863d1a9
108f3caa2c7db8c122fcea5f02f4f0f1e058d4da8e913dc2b4e8ace4e5a50e81
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 08:41:58 GMT
Last-Modified: Tue, 05 Dec 2023 07:14:30 GMT
Server: ECAcc (ska/F791)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: co2eAGvSjUv8FEA60KjaeBn-Zf3JBWvOffEAHQRLbXdZpOtXEiXEvw==
Age: 5248
xiaobao.lanhuatv.com/template/mytheme/statics/css/mytheme-color.css?v=2.8
188.114.96.1 1.9 kB URL xiaobao.lanhuatv.com/template/mytheme/statics/css/mytheme-color.css?v=2.8
IP 188.114.96.1:0
File type Unicode text, UTF-8 text, with very long lines (4520)
Hash 7898f7683b1d11e2ad078c1920482d71
644ae4571209f8de87707b4af0fc73df0320182f
21ee8ff10bdd79213fcbaff079bc48773990a8e7cd8c331803846c1a46d319d7
GET /template/mytheme/statics/css/mytheme-color.css?v=2.8 HTTP/1.1
Host: xiaobao.lanhuatv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 08:41:53 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=5432
etag: W/"654fde57-1538"
expires: Tue, 05 Dec 2023 17:18:51 GMT
last-modified: Sat, 11 Nov 2023 20:04:39 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
age: 2061
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sOXI%2FtFMilWzYxR%2FWKDKc3BYe8536BhYRd3cpHAZm3VxKmTG6FyJBUv1XgiDZDKl72%2FacQElHe80%2F89s301z5gkliviVkzWprAlGU9Za4cgQ%2FOifZGbcl0EZVR3iThz%2FzR4hn5LH6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830afe1e4ac2569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
proftrafficcounter.com/stats
18.184.210.76 40 B URL proftrafficcounter.com/stats
IP 18.184.210.76:0
File type ASCII text, with no line terminators
Hash 6ee59a2ed287a967be6503b946f5f56f
f66cbee99536b5216733f9ad69dba0b65b58e4b1
82b331b2f59319ec3da029bf048ce72e3f5c937fc929a98063fba669982ee9e7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:41:58 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xiaobao.lanhuatv.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=5a2a0ff8-c3ee-4400-84f2-d16b122b3224:3:1; expires=Fri, 02 Dec 2033 08:41:58 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
18.184.210.76 40 B URL proftrafficcounter.com/stats
IP 18.184.210.76:0
File type ASCII text, with no line terminators
Hash f2cc0e1e66d331c198a6890828436bd8
6e33760f4b795f5631de4baf95d80dba5f92874b
468a42e3aad8a19ba7800678eab4b84dd7388aa234b4b8189ffd88f5fc52bbe7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:41:58 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xiaobao.lanhuatv.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=446d8c12-7bce-4d70-bdf0-874f15aee1f5:2:1; expires=Fri, 02 Dec 2033 08:41:58 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
18.184.210.76 40 B URL proftrafficcounter.com/stats
IP 18.184.210.76:0
File type ASCII text, with no line terminators
Hash f09cc16223d4d9beee62322e565818a0
7c502999fd330173533a877793ebdd5991e25667
221627987b1fa664e950c0054c87c6da589799e80adb8864dfc83f8ea61cdc8f
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:41:58 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xiaobao.lanhuatv.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=fcde28ba-768b-4cd6-82f9-1da464562eb8:1:1; expires=Fri, 02 Dec 2033 08:41:58 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
18.184.210.76 40 B URL proftrafficcounter.com/stats
IP 18.184.210.76:0
File type ASCII text, with no line terminators
Hash dbc43115ef4f7d4e0a0b461cdb8f9dec
4549ec159a3c18834ad21328bc6ed5d7e231472c
c9daf4b706b93e38c6cee4781593be2de29a7fd9715f77de41f8f273ca21f11b
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:41:58 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xiaobao.lanhuatv.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=eaad1a75-b5ff-493a-af1d-94ce6b559a1d:2:1; expires=Fri, 02 Dec 2033 08:41:58 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
p.51gowan.com/s.json?s=8036
183.61.171.240 1.6 kB URL p.51gowan.com/s.json?s=8036
IP 183.61.171.240:0
File type JSON data\012- , ASCII text, with very long lines (1617), with no line terminators
Hash bd332e79d23f1e19712a75bcb8297976
52b59f54470091b98e5093d517f35c5c937d3a6d
72fb626cbefb6c9fe5c79895ad5dbc91fb650b7e02254971de7def04ae2909c9
GET /s.json?s=8036 HTTP/1.1
Host: p.51gowan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.16.0
Date: Tue, 05 Dec 2023 08:41:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.6
Access-Control-Allow-Origin: *
pc.stgowan.com/pc_w/fixedGame.js
110.249.196.101 1.4 kB URL pc.stgowan.com/pc_w/fixedGame.js
IP 110.249.196.101:0
ASN #4837 CHINA UNICOM China169 Backbone
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 7dac89565fae11647c98fed752549904
a2f429a9b1da32e2956f2dc9f3e6137349b95ac7
b64c6b196b74c93dc834587c42d2879343fbfeab6f800902c216f19b99847d39
GET /pc_w/fixedGame.js HTTP/1.1
Host: pc.stgowan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Fri, 17 Nov 2023 09:33:26 GMT
Content-Encoding: gzip
Etag: "65573366-1183"
Server: nginx/1.16.0
Date: Fri, 17 Nov 2023 09:36:53 GMT
Content-Type: application/javascript
Content-Length: 1438
Accept-Ranges: bytes
X-NWS-LOG-UUID: 16486461768552015208
Connection: keep-alive
X-Cache-Lookup: Cache Hit
heartlessrigid.com/watch.872743049587.js?key=c730617d7cbc4d09c9c9855c32d629e1&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=446d8c12-7bce-4d70-bdf0-874f15aee1f5%3A2%3A1
173.233.137.60 0 B URL heartlessrigid.com/watch.872743049587.js?key=c730617d7cbc4d09c9c9855c32d629e1&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=446d8c12-7bce-4d70-bdf0-874f15aee1f5%3A2%3A1
IP 173.233.137.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.872743049587.js?key=c730617d7cbc4d09c9c9855c32d629e1&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=446d8c12-7bce-4d70-bdf0-874f15aee1f5%3A2%3A1 HTTP/1.1
Host: heartlessrigid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Location: https://heartlessrigid.com/watch.872743049587.js?key=c730617d7cbc4d09c9c9855c32d629e1&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=446d8c12-7bce-4d70-bdf0-874f15aee1f5%3A2%3A1&shu=c26860b73110eba9ca62c61d9802f2af75c9b4fb7aae34752ca61cb18003c8abb418c475c2c093edf5e6ec81169ddea6256d40ef598255d38c690b739becb488845f6b41b8573bc8f7256985e93c34fb4ca5031136999c40aee0147af51e093db1&pst=1701765779&rmtc=t
Set-Cookie: u_pl=21278867; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMTI3ODg2NywiayI6ImM3MzA2MTdkN2NiYzRkMDljOWM5ODU1YzMyZDYyOWUxIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozMjAwNzYyLCJwaWQiOjEyNTc0ODIsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjo1LCJwdCI6NCwicGsiOiJ5dGhia3R6bXQiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly94aWFvYmFvLmxhbmh1YXR2LmNvbS8iLCJhciI6W119fQ.SimyWpiY-H3hn9z4OJnMLHqNeVhdcn6D8euKJvU_1L0; expires=Tue, 05 Dec 2023 08:42:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6cfae24d32f59ef1c5842511562a8929
Strict-Transport-Security: max-age=0; includeSubdomains
heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
173.233.137.60 0 B URL heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
IP 173.233.137.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1 HTTP/1.1
Host: heartlessrigid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Location: https://heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=d67f885d7e9ad94af4d7665f4d4923a5ef0254fd830e86ceedb3dd96c02bcae9edf064d22c1dae6fb3753b8084630e95e890a2177de020b7719b87c705684541311e7afc0a03fa5b330516216e462ea6405f155745313f0c1713af7ff91afb767f3141&pst=1701765779&rmtc=t
Set-Cookie: u_pl=20659491; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.QK1mh4k3iJTXMUFg2zWhJdI3gLCk0xPGUtzfIawVvmo; expires=Tue, 05 Dec 2023 08:42:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 02cd9785cc75628f4d1aa6160c97d5bb
Strict-Transport-Security: max-age=0; includeSubdomains
omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=fcde28ba-768b-4cd6-82f9-1da464562eb8%3A1%3A1
173.233.137.44 0 B URL omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=fcde28ba-768b-4cd6-82f9-1da464562eb8%3A1%3A1
IP 173.233.137.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=fcde28ba-768b-4cd6-82f9-1da464562eb8%3A1%3A1 HTTP/1.1
Host: omitpollenending.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Location: https://omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=fcde28ba-768b-4cd6-82f9-1da464562eb8%3A1%3A1&shu=32c2d540b85ad3d42befe1c71b63d60b308a7bb825a481823bc969cdd5e9bd1bfd9b60a66efa1af315adee0b0e3eb2b0c817bca82fb924138ac5007f67b77974849e17e0b9fd3f7202603f9b6881f9b5afed55dfb1f61116bc58f5f085e4&pst=1701765779&rmtc=t
Set-Cookie: u_pl=21278782; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.8QDJoAw9bOeK4bKESmPf84or5ufLruyPWA2sFd2ynp8; expires=Tue, 05 Dec 2023 08:42:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 78406005a9b1542a02039b5e792c6d24
Strict-Transport-Security: max-age=0; includeSubdomains
ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=5a2a0ff8-c3ee-4400-84f2-d16b122b3224%3A3%3A1
173.233.137.60 0 B URL ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=5a2a0ff8-c3ee-4400-84f2-d16b122b3224%3A3%3A1
IP 173.233.137.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=5a2a0ff8-c3ee-4400-84f2-d16b122b3224%3A3%3A1 HTTP/1.1
Host: ardentlyexposureflushed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Location: https://ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=5a2a0ff8-c3ee-4400-84f2-d16b122b3224%3A3%3A1&shu=698408ddf998db60c153dc926a0402da36fcbd027b54708010f8ba9e0e0e899df0ebddb3428f2e4599488ed2b3bade91d50aa0d2610970464c812069e2b97e7f7c40680eb132d178cab9e58f8eb5b8edf95ceb7d93779f7495973b9c6ce2&pst=1701765779&rmtc=t
Set-Cookie: u_pl=21278623; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.6H9TDVYoSb89F3wpZwaldtXM26I28QacwCjW9gS8u2w; expires=Tue, 05 Dec 2023 08:42:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6f00013d51057c55f1f65864f4ebc60e
Strict-Transport-Security: max-age=0; includeSubdomains
heartlessrigid.com/watch.872743049587.js?key=c730617d7cbc4d09c9c9855c32d629e1&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=446d8c12-7bce-4d70-bdf0-874f15aee1f5%3A2%3A1&shu=c26860b73110eba9ca62c61d9802f2af75c9b4fb7aae34752ca61cb18003c8abb418c475c2c093edf5e6ec81169ddea6256d40ef598255d38c690b739becb488845f6b41b8573bc8f7256985e93c34fb4ca5031136999c40aee0147af51e093db1&pst=1701765779&rmtc=t
173.233.137.60 644 B URL heartlessrigid.com/watch.872743049587.js?key=c730617d7cbc4d09c9c9855c32d629e1&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=446d8c12-7bce-4d70-bdf0-874f15aee1f5%3A2%3A1&shu=c26860b73110eba9ca62c61d9802f2af75c9b4fb7aae34752ca61cb18003c8abb418c475c2c093edf5e6ec81169ddea6256d40ef598255d38c690b739becb488845f6b41b8573bc8f7256985e93c34fb4ca5031136999c40aee0147af51e093db1&pst=1701765779&rmtc=t
IP 173.233.137.60:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (604)
Hash d698e7b053309cdbaa008e08bfa2fb8d
a0a6ce90bcae0a3cfe66101d6fc5888f9786e8da
85a9a34bcc0a6ba4c68132eca05b6aa403fb90adac658e59f08108e4400beb9f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.872743049587.js?key=c730617d7cbc4d09c9c9855c32d629e1&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=446d8c12-7bce-4d70-bdf0-874f15aee1f5%3A2%3A1&shu=c26860b73110eba9ca62c61d9802f2af75c9b4fb7aae34752ca61cb18003c8abb418c475c2c093edf5e6ec81169ddea6256d40ef598255d38c690b739becb488845f6b41b8573bc8f7256985e93c34fb4ca5031136999c40aee0147af51e093db1&pst=1701765779&rmtc=t HTTP/1.1
Host: heartlessrigid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=20659491; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMDY1OTQ5MSwiayI6IjdmYjcxM2JiZDU2MjU0N2FhY2I0NmRjYWQzMDc1MmJjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoyOTk4NTE1LCJwaWQiOjEyNTc0ODIsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjoyMywicHQiOjQsInBrIjoicHdoYnZpZzAiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly94aWFvYmFvLmxhbmh1YXR2LmNvbS8iLCJhciI6W119fQ.QK1mh4k3iJTXMUFg2zWhJdI3gLCk0xPGUtzfIawVvmo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20659491,21278867; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uid_id2=446d8c12-7bce-4d70-bdf0-874f15aee1f5:2:1; expires=Tue, 12 Dec 2023 08:41:59 GMT; secure; SameSite=None
iprc7c97af7cb22236ad46aa689fd018b5ce=2717340; expires=Wed, 06 Dec 2023 10:41:59 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
pdhtkv5=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs5=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e94355eb100ab8ed9b5611d21ceeaee2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=d67f885d7e9ad94af4d7665f4d4923a5ef0254fd830e86ceedb3dd96c02bcae9edf064d22c1dae6fb3753b8084630e95e890a2177de020b7719b87c705684541311e7afc0a03fa5b330516216e462ea6405f155745313f0c1713af7ff91afb767f3141&pst=1701765779&rmtc=t
173.233.137.60 2.1 kB URL heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=d67f885d7e9ad94af4d7665f4d4923a5ef0254fd830e86ceedb3dd96c02bcae9edf064d22c1dae6fb3753b8084630e95e890a2177de020b7719b87c705684541311e7afc0a03fa5b330516216e462ea6405f155745313f0c1713af7ff91afb767f3141&pst=1701765779&rmtc=t
IP 173.233.137.60:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2618)
Hash a4705a98c23780d15079ce2360e6b864
35bddb439b372b2c0283f01572adba0133f87718
4a8f6225f56815c61cc7fa51a7b621785d698092c806bb1af86ffde2f333aaae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=d67f885d7e9ad94af4d7665f4d4923a5ef0254fd830e86ceedb3dd96c02bcae9edf064d22c1dae6fb3753b8084630e95e890a2177de020b7719b87c705684541311e7afc0a03fa5b330516216e462ea6405f155745313f0c1713af7ff91afb767f3141&pst=1701765779&rmtc=t HTTP/1.1
Host: heartlessrigid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=20659491; ain=eyJhbGciOiJIUzI1NiJ9.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.QK1mh4k3iJTXMUFg2zWhJdI3gLCk0xPGUtzfIawVvmo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=eaad1a75-b5ff-493a-af1d-94ce6b559a1d:2:1; expires=Tue, 12 Dec 2023 08:41:59 GMT; secure; SameSite=None
iprc5a765962494ae1c6d8a8a1c06d63ff98=3569808; expires=Tue, 05 Dec 2023 12:41:59 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
pdhtkv23=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs23=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ad85a31d7059db97287a49bb6610ed81
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=fcde28ba-768b-4cd6-82f9-1da464562eb8%3A1%3A1&shu=32c2d540b85ad3d42befe1c71b63d60b308a7bb825a481823bc969cdd5e9bd1bfd9b60a66efa1af315adee0b0e3eb2b0c817bca82fb924138ac5007f67b77974849e17e0b9fd3f7202603f9b6881f9b5afed55dfb1f61116bc58f5f085e4&pst=1701765779&rmtc=t
173.233.137.44 644 B URL omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=fcde28ba-768b-4cd6-82f9-1da464562eb8%3A1%3A1&shu=32c2d540b85ad3d42befe1c71b63d60b308a7bb825a481823bc969cdd5e9bd1bfd9b60a66efa1af315adee0b0e3eb2b0c817bca82fb924138ac5007f67b77974849e17e0b9fd3f7202603f9b6881f9b5afed55dfb1f61116bc58f5f085e4&pst=1701765779&rmtc=t
IP 173.233.137.44:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (603)
Hash 90874b128e9426bf5d20de0c90b14f75
7fbfcf615d8ba82f1daa36bcb35084909be5abaf
447c85bd52570543144c7227a776c02f81143005e98fad279cdfb251dd23a0c4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=fcde28ba-768b-4cd6-82f9-1da464562eb8%3A1%3A1&shu=32c2d540b85ad3d42befe1c71b63d60b308a7bb825a481823bc969cdd5e9bd1bfd9b60a66efa1af315adee0b0e3eb2b0c817bca82fb924138ac5007f67b77974849e17e0b9fd3f7202603f9b6881f9b5afed55dfb1f61116bc58f5f085e4&pst=1701765779&rmtc=t HTTP/1.1
Host: omitpollenending.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21278782; ain=eyJhbGciOiJIUzI1NiJ9.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.8QDJoAw9bOeK4bKESmPf84or5ufLruyPWA2sFd2ynp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=fcde28ba-768b-4cd6-82f9-1da464562eb8:1:1; expires=Tue, 12 Dec 2023 08:41:59 GMT; secure; SameSite=None
iprc46e08637bad8f3ff0dc7172a19428e73=2717343; expires=Wed, 06 Dec 2023 10:41:59 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
pdhtkv23=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs23=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 40620fe07d82d5ef784dcdb32d15a9d5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=5a2a0ff8-c3ee-4400-84f2-d16b122b3224%3A3%3A1&shu=698408ddf998db60c153dc926a0402da36fcbd027b54708010f8ba9e0e0e899df0ebddb3428f2e4599488ed2b3bade91d50aa0d2610970464c812069e2b97e7f7c40680eb132d178cab9e58f8eb5b8edf95ceb7d93779f7495973b9c6ce2&pst=1701765779&rmtc=t
173.233.137.60 2.1 kB URL ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=5a2a0ff8-c3ee-4400-84f2-d16b122b3224%3A3%3A1&shu=698408ddf998db60c153dc926a0402da36fcbd027b54708010f8ba9e0e0e899df0ebddb3428f2e4599488ed2b3bade91d50aa0d2610970464c812069e2b97e7f7c40680eb132d178cab9e58f8eb5b8edf95ceb7d93779f7495973b9c6ce2&pst=1701765779&rmtc=t
IP 173.233.137.60:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2629)
Hash 8b30d18a2269deca982497bb83d2d6f9
d88aa182df0653d03c116231e14ff8f0a1175d40
2bdfe93339bce3462204fd15b9281cd8262cf53e5343b4bb697496c5e624bb83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=5a2a0ff8-c3ee-4400-84f2-d16b122b3224%3A3%3A1&shu=698408ddf998db60c153dc926a0402da36fcbd027b54708010f8ba9e0e0e899df0ebddb3428f2e4599488ed2b3bade91d50aa0d2610970464c812069e2b97e7f7c40680eb132d178cab9e58f8eb5b8edf95ceb7d93779f7495973b9c6ce2&pst=1701765779&rmtc=t HTTP/1.1
Host: ardentlyexposureflushed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xiaobao.lanhuatv.com
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21278623; ain=eyJhbGciOiJIUzI1NiJ9.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.6H9TDVYoSb89F3wpZwaldtXM26I28QacwCjW9gS8u2w
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=5a2a0ff8-c3ee-4400-84f2-d16b122b3224:3:1; expires=Tue, 12 Dec 2023 08:41:59 GMT; secure; SameSite=None
iprc5a765962494ae1c6d8a8a1c06d63ff98=3569808; expires=Tue, 05 Dec 2023 12:41:59 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
pdhtkv23=true; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs23=1; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: af242f8f723b45059040265f5b8056c8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
173.233.137.60 0 B URL heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
IP 173.233.137.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1 HTTP/1.1
Host: heartlessrigid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: u_pl=20659491,21278867; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMDY1OTQ5MSwiayI6IjdmYjcxM2JiZDU2MjU0N2FhY2I0NmRjYWQzMDc1MmJjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoyOTk4NTE1LCJwaWQiOjEyNTc0ODIsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjoyMywicHQiOjQsInBrIjoicHdoYnZpZzAiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly94aWFvYmFvLmxhbmh1YXR2LmNvbS8iLCJhciI6W119fQ.QK1mh4k3iJTXMUFg2zWhJdI3gLCk0xPGUtzfIawVvmo; uid_id2=eaad1a75-b5ff-493a-af1d-94ce6b559a1d:2:1; iprc7c97af7cb22236ad46aa689fd018b5ce=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; iprc5a765962494ae1c6d8a8a1c06d63ff98=3569808; pdhtkv23=true; uncs23=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Credentials: true
Location: https://heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=546186d99a2952021117594179e2c71463d2e081fe2eacb341eebbd5e66a825032530ab75e5634303d6361f595d120bd7b6ef6bdaf23fdc2d7793858207aaab39dde465eba644ba34b20b99b4a06af502081d7662b0e897ebf090e03df0c4edea3&pst=1701765779&rmtc=t
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.N4hqxBSyoZW1rUv0u3W7vwmUwF1yf0AjSAQOBOrmaGw; expires=Tue, 05 Dec 2023 08:42:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 67165a0c003b46efc06d931f8df8c1cf
Strict-Transport-Security: max-age=0; includeSubdomains
omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
173.233.137.44 0 B URL omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
IP 173.233.137.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1 HTTP/1.1
Host: omitpollenending.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: u_pl=21278782; ain=eyJhbGciOiJIUzI1NiJ9.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.8QDJoAw9bOeK4bKESmPf84or5ufLruyPWA2sFd2ynp8; uid_id2=fcde28ba-768b-4cd6-82f9-1da464562eb8:1:1; iprc46e08637bad8f3ff0dc7172a19428e73=2717343; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Credentials: true
Location: https://omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=75bc0016681e43bf2eaf3e8f57cfee29e053685618cb9523518a4c74cf47b1c1b226a56f711c84a6f1d9247f21719cc4f472dc0e812bfd66d544d9a56ec95281dd07b5eeaac71fa94b213d971a0a32b32700260f7c23a3d13a9acee1c16750&pst=1701765779&rmtc=t
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMTI3ODc4MiwiayI6IjA0MTI2ODM3ZjFhODQ3YzU5ZTYwMmVkMTUzMTFmMjk3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozMjAyNDUwLCJwaWQiOjEyNTc0ODIsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjoyMywicHQiOjQsInBrIjoiczFya250Y2Q1ZiIsInQiOjF9LCJ1Ijp7InUiOjIsImF1IjoyLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOmZhbHNlLCJyIjoiaHR0cHM6Ly94aWFvYmFvLmxhbmh1YXR2LmNvbS8iLCJhciI6W119fQ.JjIUL1JjeoKAqqSA3AH10IW7GhvccTxCU7qLzsH1MxY; expires=Tue, 05 Dec 2023 08:42:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 50e76636f5d0c1aefd3f20af7bb3aa0d
Strict-Transport-Security: max-age=0; includeSubdomains
ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
173.233.137.60 0 B URL ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1
IP 173.233.137.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1 HTTP/1.1
Host: ardentlyexposureflushed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Cookie: u_pl=21278623; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMTI3ODYyMywiayI6ImE1MDAxZjA0NmU5YzE3ZWQ4MjliYWVlOTNmZDMzOWM4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozMjAwNzYyLCJwaWQiOjEyNTc0ODIsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MSwiYWlkIjoyMywicHQiOjQsInBrIjoibjFpeHM2eWM5ZSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3hpYW9iYW8ubGFuaHVhdHYuY29tLyIsImFyIjpbXX19.6H9TDVYoSb89F3wpZwaldtXM26I28QacwCjW9gS8u2w; uid_id2=5a2a0ff8-c3ee-4400-84f2-d16b122b3224:3:1; iprc5a765962494ae1c6d8a8a1c06d63ff98=3569808; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Credentials: true
Location: https://ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=1d27f34c0463be03e7bd84b24e7a5572436bb682e6b9f69307c7d0fc5338e76e6448a06f43e5e1bfe4d930a17d0a65e7eda6fdaacdb083a420316b1905171e9f7f37dab0288eeda5fbdb566f1d51bc35b5259bb486507ddf6e3d185ee828e65e71&pst=1701765779&rmtc=t
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.Jk_wHfP9EtGXBX3d_ccie9GqVC4hM_uNPBwpCPhcaJA; expires=Tue, 05 Dec 2023 08:42:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bb0550ad9a25cc54cc815d78161bfa2a
Strict-Transport-Security: max-age=0; includeSubdomains
ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=1d27f34c0463be03e7bd84b24e7a5572436bb682e6b9f69307c7d0fc5338e76e6448a06f43e5e1bfe4d930a17d0a65e7eda6fdaacdb083a420316b1905171e9f7f37dab0288eeda5fbdb566f1d51bc35b5259bb486507ddf6e3d185ee828e65e71&pst=1701765779&rmtc=t
173.233.137.60 643 B URL ardentlyexposureflushed.com/watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=1d27f34c0463be03e7bd84b24e7a5572436bb682e6b9f69307c7d0fc5338e76e6448a06f43e5e1bfe4d930a17d0a65e7eda6fdaacdb083a420316b1905171e9f7f37dab0288eeda5fbdb566f1d51bc35b5259bb486507ddf6e3d185ee828e65e71&pst=1701765779&rmtc=t
IP 173.233.137.60:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (603)
Hash b3a6c1be522e905ca7c3c28d2a7e33a8
8cb054d915638f292851e5693047e943ca0491e8
d590463c7c445047705a7fad9da2c8560209de31a8cee5974161f374dc80134b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1443642686032.js?key=a5001f046e9c17ed829baee93fd339c8&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=1d27f34c0463be03e7bd84b24e7a5572436bb682e6b9f69307c7d0fc5338e76e6448a06f43e5e1bfe4d930a17d0a65e7eda6fdaacdb083a420316b1905171e9f7f37dab0288eeda5fbdb566f1d51bc35b5259bb486507ddf6e3d185ee828e65e71&pst=1701765779&rmtc=t HTTP/1.1
Host: ardentlyexposureflushed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21278623; ain=eyJhbGciOiJIUzI1NiJ9.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.Jk_wHfP9EtGXBX3d_ccie9GqVC4hM_uNPBwpCPhcaJA; uid_id2=5a2a0ff8-c3ee-4400-84f2-d16b122b3224:3:1; iprc5a765962494ae1c6d8a8a1c06d63ff98=3569808; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=eaad1a75-b5ff-493a-af1d-94ce6b559a1d:2:1; expires=Tue, 12 Dec 2023 08:41:59 GMT; secure; SameSite=None
iprc46e08637bad8f3ff0dc7172a19428e73=2717343; expires=Wed, 06 Dec 2023 10:41:59 GMT; secure; SameSite=None
uncs=2; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs23=2; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b932295eab73fc949c10445c0ba6ab41
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=546186d99a2952021117594179e2c71463d2e081fe2eacb341eebbd5e66a825032530ab75e5634303d6361f595d120bd7b6ef6bdaf23fdc2d7793858207aaab39dde465eba644ba34b20b99b4a06af502081d7662b0e897ebf090e03df0c4edea3&pst=1701765779&rmtc=t
173.233.137.60 2.1 kB URL heartlessrigid.com/watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=546186d99a2952021117594179e2c71463d2e081fe2eacb341eebbd5e66a825032530ab75e5634303d6361f595d120bd7b6ef6bdaf23fdc2d7793858207aaab39dde465eba644ba34b20b99b4a06af502081d7662b0e897ebf090e03df0c4edea3&pst=1701765779&rmtc=t
IP 173.233.137.60:0
File type HTML document, ASCII text, with very long lines (2612)
Hash 462381ae9c3ea1d569569a3ad2f0944d
8fa66bcadf19fcb8ab6e09c91b0fdfae24d90872
7fec8428e65bc7c0109d6d78808b0521e0de794b4658cf70114417417daadd1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1309583561302.js?key=7fb713bbd562547aacb46dcad30752bc&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=546186d99a2952021117594179e2c71463d2e081fe2eacb341eebbd5e66a825032530ab75e5634303d6361f595d120bd7b6ef6bdaf23fdc2d7793858207aaab39dde465eba644ba34b20b99b4a06af502081d7662b0e897ebf090e03df0c4edea3&pst=1701765779&rmtc=t HTTP/1.1
Host: heartlessrigid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=20659491,21278867; ain=eyJhbGciOiJIUzI1NiJ9.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.N4hqxBSyoZW1rUv0u3W7vwmUwF1yf0AjSAQOBOrmaGw; uid_id2=eaad1a75-b5ff-493a-af1d-94ce6b559a1d:2:1; iprc7c97af7cb22236ad46aa689fd018b5ce=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; iprc5a765962494ae1c6d8a8a1c06d63ff98=3569808; pdhtkv23=true; uncs23=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=eaad1a75-b5ff-493a-af1d-94ce6b559a1d:2:1; expires=Tue, 12 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs=2; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs23=2; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 205991661b43df2bfd3b2b7b7ae4ff5e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=75bc0016681e43bf2eaf3e8f57cfee29e053685618cb9523518a4c74cf47b1c1b226a56f711c84a6f1d9247f21719cc4f472dc0e812bfd66d544d9a56ec95281dd07b5eeaac71fa94b213d971a0a32b32700260f7c23a3d13a9acee1c16750&pst=1701765779&rmtc=t
173.233.137.44 2.1 kB URL omitpollenending.com/watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=75bc0016681e43bf2eaf3e8f57cfee29e053685618cb9523518a4c74cf47b1c1b226a56f711c84a6f1d9247f21719cc4f472dc0e812bfd66d544d9a56ec95281dd07b5eeaac71fa94b213d971a0a32b32700260f7c23a3d13a9acee1c16750&pst=1701765779&rmtc=t
IP 173.233.137.44:0
File type HTML document, ASCII text, with very long lines (2592)
Hash d3dfd0b8bce77878b1057214669689bf
4d1ab5605c76040e37efe5be7f944afd434628e6
737faa699bda32d9ea4bf0d2eed501d1a54aa87625a4a69fa30f9f47ce2a6f0e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1681546765429.js?key=04126837f1a847c59e602ed15311f297&kw=%5B%22%E5%B0%8F%E5%AE%9D%E5%BD%B1%E9%99%A2%22%2C%22-%22%2C%22%E6%B5%B7%E5%A4%96%E5%8D%8E%E4%BA%BA%E7%9A%84%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E5%AA%92%E4%BD%93%E5%B9%B3%E5%8F%B0%22%2C%22%E6%B5%B7%E9%87%8F%E9%AB%98%E6%B8%85%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E8%A7%82%E7%9C%8B%22%5D&refer=https%3A%2F%2Fxiaobao.lanhuatv.com%2F&tz=0&dev=e&res=14.3095&uuid=eaad1a75-b5ff-493a-af1d-94ce6b559a1d%3A2%3A1&shu=75bc0016681e43bf2eaf3e8f57cfee29e053685618cb9523518a4c74cf47b1c1b226a56f711c84a6f1d9247f21719cc4f472dc0e812bfd66d544d9a56ec95281dd07b5eeaac71fa94b213d971a0a32b32700260f7c23a3d13a9acee1c16750&pst=1701765779&rmtc=t HTTP/1.1
Host: omitpollenending.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xiaobao.lanhuatv.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21278782; ain=eyJhbGciOiJIUzI1NiJ9.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.JjIUL1JjeoKAqqSA3AH10IW7GhvccTxCU7qLzsH1MxY; uid_id2=fcde28ba-768b-4cd6-82f9-1da464562eb8:1:1; iprc46e08637bad8f3ff0dc7172a19428e73=2717343; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:41:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Origin: https://xiaobao.lanhuatv.com/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=eaad1a75-b5ff-493a-af1d-94ce6b559a1d:2:1; expires=Tue, 12 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs=2; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
uncs23=2; expires=Wed, 06 Dec 2023 08:41:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7f74c2b6466b008fdd76742f6c7a6543
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
conqueredallrightswell.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=21278623
192.243.59.13 1.4 kB URL conqueredallrightswell.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=21278623
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (484)
Hash f8f1088902a4648e7d1e8eac5c3c26e6
62531fa1cbfcb2a1a235fa6f026d8caf0791bb28
583f06eccdc1dbb9d31a5f0e849551d24b4f4e7bf4247237b9c4dde51bd7825b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=21278623 HTTP/1.1
Host: conqueredallrightswell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xiaobao.lanhuatv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 08:42:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Wed, 06 Dec 2023 08:42:00 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.44zQI2mul5XbtqFKKeKWsV-ku1EHKj0_xvVUsg_T6Ak; expires=Tue, 05 Dec 2023 08:43:00 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8a08f52d98160c1e32f5657d9df3dfff
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
conqueredallrightswell.com/api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTIxMjc4NjIzJnBzdD0xNzAxNzY1NzgwJnJlZmVyPWh0dHBzJTNBJTJGJTJGeGlhb2Jhby5sYW5odWF0di5jb20lMkYmcm10Yz10JnNodT0zNmVlYmUwYTY0NGJmNTA1OWE3OWQ2ZDAzY2Y2ZThjYzAyOGI3ZjBmOTc3MGEwNzU4NDI3YmEzOGI5MGEzMTUxYzE2ZTc1NzJjOGE1ZmM1YjFlMjI1MDAzODYxODkyYTQzNWVhMTY2MzM0ZDNmYWIzNjRmOWM4MjFlMzE0MjE1YWFhNTkxM2VhN2NhNjk0MTc4MGEzM2U1NmE4NjE4ZWUzOTQxM2YyZWQ0YWYzN2E5MjI1NjVjY2UwZDlhMzQ1&uuid=&pii=&in=false
173.233.137.52302 Found 0 B URL User Request GET HTTP/1.1 conqueredallrightswell.com/api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTIxMjc4NjIzJnBzdD0xNzAxNzY1NzgwJnJlZmVyPWh0dHBzJTNBJTJGJTJGeGlhb2Jhby5sYW5odWF0di5jb20lMkYmcm10Yz10JnNodT0zNmVlYmUwYTY0NGJmNTA1OWE3OWQ2ZDAzY2Y2ZThjYzAyOGI3ZjBmOTc3MGEwNzU4NDI3YmEzOGI5MGEzMTUxYzE2ZTc1NzJjOGE1ZmM1YjFlMjI1MDAzODYxODkyYTQzNWVhMTY2MzM0ZDNmYWIzNjRmOWM4MjFlMzE0MjE1YWFhNTkxM2VhN2NhNjk0MTc4MGEzM2U1NmE4NjE4ZWUzOTQxM2YyZWQ0YWYzN2E5MjI1NjVjY2UwZDlhMzQ1&uuid=&pii=&in=false
IP 173.233.137.52:443
Certificate IssuerLet's Encrypt
Subjectconqueredallrightswell.com
Fingerprint9E:C2:75:0A:08:52:CB:97:0C:C6:54:67:5E:6F:7F:C9:D8:00:28:1C
ValidityTue, 14 Nov 2023 16:14:39 GMT - Mon, 12 Feb 2024 16:14:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTIxMjc4NjIzJnBzdD0xNzAxNzY1NzgwJnJlZmVyPWh0dHBzJTNBJTJGJTJGeGlhb2Jhby5sYW5odWF0di5jb20lMkYmcm10Yz10JnNodT0zNmVlYmUwYTY0NGJmNTA1OWE3OWQ2ZDAzY2Y2ZThjYzAyOGI3ZjBmOTc3MGEwNzU4NDI3YmEzOGI5MGEzMTUxYzE2ZTc1NzJjOGE1ZmM1YjFlMjI1MDAzODYxODkyYTQzNWVhMTY2MzM0ZDNmYWIzNjRmOWM4MjFlMzE0MjE1YWFhNTkxM2VhN2NhNjk0MTc4MGEzM2U1NmE4NjE4ZWUzOTQxM2YyZWQ0YWYzN2E5MjI1NjVjY2UwZDlhMzQ1&uuid=&pii=&in=false HTTP/1.1
Host: conqueredallrightswell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://conqueredallrightswell.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.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.44zQI2mul5XbtqFKKeKWsV-ku1EHKj0_xvVUsg_T6Ak; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 08:42:01 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=16122660
Set-Cookie: pdhtkv=true; expires=Wed, 06 Dec 2023 08:42:01 GMT
uncs=1; expires=Wed, 06 Dec 2023 08:42:01 GMT
pdhtkv28=true; expires=Wed, 06 Dec 2023 08:42:01 GMT
uncs28=1; expires=Wed, 06 Dec 2023 08:42:01 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 37bd2040655893c9c5ef450960f164e5
Strict-Transport-Security: max-age=0; includeSubdomains
adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=16122660
13.107.246.67307 Temporary Redirect 0 B URL User Request GET HTTP/2 adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=16122660
IP 13.107.246.67:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerTrustwave Holdings, Inc.
Subjectaffiliates.kindredplc.com
Fingerprint9C:1F:91:86:77:41:76:62:71:CD:11:FD:80:70:B7:83:58:47:BF:4F
ValidityThu, 17 Aug 2023 06:39:43 GMT - Fri, 16 Aug 2024 06:38:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=16122660 HTTP/1.1
Host: adserving.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://www.unibet.com/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; domain=.unibet.com; expires=Thu, 05-Dec-3022 08:42:01 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-azure-ref: 0WeJuZQAAAABddPUHRynySLPmoJXzjctfU1ZHMjBFREdFMDUxNQAyZDk5MzlkMy05NTUxLTQ2ZmYtOGEyNi01ZWZmY2FhMWQ5OGM=
x-cache: CONFIG_NOCACHE
date: Tue, 05 Dec 2023 08:42:01 GMT
content-length: 0
X-Firefox-Spdy: h2
www.unibet.com/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950
85.184.96.28301 Moved Permanently 0 B URL User Request GET HTTP/2 www.unibet.com/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950
IP 85.184.96.28:443
ASN #47171 Unibet Services Limited
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950 HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 05 Dec 2023 08:42:01 GMT
content-length: 0
location: https://www.unibet.com:443/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950
set-cookie: JSESSIONID=node0k41v47c8clvvp17ja7vjaoup7805315.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict
__ucbt=node0k41v47c8clvvp17ja7vjaoup7; Path=/; Domain=.unibet.com; Expires=Thu, 04-Dec-2025 08:42:01 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr=ST.0.T; Path=/; Domain=.unibet.com; Expires=Thu, 04-Dec-2025 08:42:01 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr_ref="https://conqueredallrightswell.com/"; Path=/; Domain=.unibet.com; Expires=Thu, 04-Dec-2025 08:42:01 GMT; Max-Age=63072000; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
netwid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
CLAIM_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affiliateId=1; Path=/; Domain=.unibet.com; Secure; SameSite=None
B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; Path=/; Domain=.unibet.com; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BID=37950; Path=/; Domain=.unibet.com; Secure; SameSite=None
PID=68246908; Path=/; Domain=.unibet.com; Secure; SameSite=None
CHID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; Path=/; Domain=.unibet.com; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BOCAID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
PRODUCT_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; Path=/; Domain=.unibet.com; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
clientId=polopoly_desktop; Domain=www.unibet.com; Path=/; SameSite=None; Secure
referer: https://conqueredallrightswell.com/
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Tue, 05 Dec 2023 08:42:01 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
X-Firefox-Spdy: h2
www.unibet.com/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950
85.184.96.28301 Moved Permanently 0 B URL User Request GET HTTP/2 www.unibet.com/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950
IP 85.184.96.28:443
ASN #47171 Unibet Services Limited
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950 HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 05 Dec 2023 08:42:01 GMT
content-length: 0
location: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Tue, 05 Dec 2023 08:42:01 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/gambling-commission.png
104.18.43.104302 Found 0 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/gambling-commission.png
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nu/pop/sportsbook/multisports/gambling-commission.png HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Tue, 05 Dec 2023 08:42:02 GMT
content-length: 0
location: https://www.unibet.com/
vary: Accept-Encoding
server: cloudflare
cf-ray: 830afe52d98e5685-OSL
X-Firefox-Spdy: h2
a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
85.184.96.5200 OK 957 B URL GET HTTP/2 a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
IP 85.184.96.5:443
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash e19225e3eb562a3b6a86f7b8b47c38fb
ce3eb55448afd8fc9dfa4ac82f8743a009d5e142
c152526a02cb050650847e999ae141eae985472fbf73c5a843160b3b6bb06f79
GET /unibet/bannerflow/scripts/master_tag.js HTTP/1.1
Host: a1s-cdn.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: application/javascript
content-length: 957
last-modified: Mon, 25 Apr 2022 12:18:31 GMT
etag: "3bd-5dd799309c310"
cache-control: max-age=1800, public, must-revalidate
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s-cdn.unibet.com; Path=/; SameSite=None; Secure
accept-ranges: bytes
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
104.18.43.104200 OK 5.7 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
Hash cd7901ab004cbe23cf68ae6b0486a998
11c4422439ed8b081e672eceef735ed1fcad6e90
01d6d6271e9cfda8348fcde699bbb334310b6ba858f1d01fbe2b08b6ceba6c1b
GET /nu/pop/sportsbook/multisports/1-styles.css HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: text/css; charset=utf-8
cf-ray: 830afe5299385685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 442442
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702AA0A0C4"
last-modified: Wed, 13 Sep 2023 15:43:24 GMT
vary: Accept-Encoding
content-md5: zXkBqwBMviPPaK5rBIapmA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: dda9c37d-401e-0010-5ea4-13d76a000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/1-main.js
104.18.43.104200 OK 2.0 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/1-main.js
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 04fc48de78cbfc5d1557e9df399c7733
e1bf77a4fef1943b0eab404c4abbe9477cb373e0
4c6d70ebaf667a642560297cdca94fa760d3624e1f4cab0da08711f0c492fed6
GET /nu/pop/sportsbook/multisports/1-main.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 830afe52993e5685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 264564
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702E1B3700"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: BPxI3njL/F0VV+nfOZx3Mw==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 0799503c-801e-0042-7d02-19ab82000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
142.250.74.74200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP 142.250.74.74:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:51:14 GMT
expires: Fri, 29 Nov 2024 02:51:14 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 453048
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/read_json.js
104.18.43.104200 OK 1.9 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/read_json.js
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type HTML document, ASCII text
Hash ac64b59c98bbe50cf69b6c98fa39585c
0a5cc9fb43b8a208481baaf752dbd504078a764b
28ac02c7302149814ed1c1b8a31b96e1ea94247c3b64888a598f66955d28312c
GET /nu/pop/sportsbook/multisports/read_json.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 830afe5299425685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 359111
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702E25208C"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: rGS1nJi75Qz2m2yY+jlYXA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 348b4653-601e-0038-3c49-0cb6c2000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500
142.250.74.106200 OK 1.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500
IP 142.250.74.106:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 92457ba59072051a2146d5be9eae8fa5
fe55d66167d48aec4b1204515b32ea9f783cd3f0
6cec6a163c2a3eee293b56f26d27029613fe74776a1746da7acc955823107283
GET /css?family=Roboto:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 08:42:02 GMT
date: Tue, 05 Dec 2023 08:42:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/gambling-commission.png
104.18.43.104302 Found 0 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/gambling-commission.png
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nu/pop/sportsbook/multisports/gambling-commission.png HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Tue, 05 Dec 2023 08:42:02 GMT
content-length: 0
location: https://www.unibet.com/
vary: Accept-Encoding
server: cloudflare
cf-ray: 830afe549ba85685-OSL
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/css/all.css
172.64.141.13200 OK 114 kB URL GET HTTP/2 use.fontawesome.com/releases/v5.7.1/css/all.css
IP 172.64.141.13:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (54456), with no line terminators
Size 114 kB (114144 bytes)
Hash 7b1d7f457d056ace7b230b587b9f3753
4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b
9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf
GET /releases/v5.7.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
last-modified: Fri, 22 Sep 2023 01:45:49 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 2320743
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pswXx1Y8G2Tuh9ZCAijT6FcKSMYiCl2dQ9t3zyTrHWQkPYDivGq6u%2F3g8JGjFdOAdKP6QIcZaCE%2BE3FUv9yFFo1pnxD%2FDq5yA7Xewdrw1vFCJw%2FIo9UBcFiQ4GNnIlwHGAnEMvHj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830afe53de64889e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/utv-logo.svg
104.18.43.104200 OK 11 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/utv-logo.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (807), with no line terminators
Hash 41acdc0efbe24c5e799972ff33c90259
1e5df73ad5bfb5f075815bcb520fabe2e107fe2d
1a91fab46f128a63c74943fe6db7de41509d69ae9f4e36aab9f984cac94fa451
GET /nu/pop/sportsbook/multisports/utv-logo.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52a9575685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 527449
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702B2489E0"
last-modified: Wed, 13 Sep 2023 15:43:25 GMT
vary: Accept-Encoding
content-md5: QazcDvviTF55mXL/M8kCWQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 83e30576-601e-0028-58a9-1673aa000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:43:03 GMT
expires: Tue, 03 Dec 2024 23:43:03 GMT
cache-control: public, max-age=31536000
age: 32339
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/app-sports-icon.svg
104.18.43.104200 OK 84 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/app-sports-icon.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (15888), with no line terminators
Hash 2e6f9dbfba55dfa91376da363e813261
b14b92d60cdf76622b9f91b3a56c7a8d98649c23
ec5264587927f5d20d839f8f7d97e98e8dd4d9cce69ffd27a0d63d13d2102498
GET /nu/pop/sportsbook/multisports/app-sports-icon.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52b95e5685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 361769
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702DCB4E58"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: Lm+dv7pV36kTdto2PoEyYQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 76cbcfd3-901e-004e-01cc-1c3c8a000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
142.250.74.163200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 142.250.74.163:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:05:31 GMT
expires: Fri, 29 Nov 2024 05:05:31 GMT
cache-control: public, max-age=31536000
age: 444991
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.163200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.163:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:07 GMT
expires: Fri, 29 Nov 2024 04:53:07 GMT
cache-control: public, max-age=31536000
age: 445735
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PF2RVHC
142.250.74.104200 OK 67 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PF2RVHC
IP 142.250.74.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (25136)
Hash 18741bbbbd17d26c435c81b70c913939
3ad23462cd8cf236f227e380aa7e787620faf7eb
07e018747cd9d5bc69d93c46ec368bd01d1a03e83f681982657268d0eac51ca7
GET /gtm.js?id=GTM-PF2RVHC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 08:42:02 GMT
expires: Tue, 05 Dec 2023 08:42:02 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67306
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
104.18.43.104200 OK 4.9 kB URL User Request GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
IP 104.18.43.104:443
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 698db77e2969bc8a7dcc14c21599b6b6
f7c29015d733283c62501bea89afd820eab643bf
168998f26593c8e933cf84a5d32762413177d1a72b1caa35a07cf721a4060e7e
GET /nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908 HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:01 GMT
content-type: text/html; charset=utf-8
cf-ray: 830afe508f125685-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=900, immutable
last-modified: Wed, 13 Sep 2023 15:43:24 GMT
vary: Accept-Encoding
content-md5: aY23filpvIp9zBTCFZm2tg==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 81d350e7-901e-0003-7a56-27f366000000
x-ms-version: 2014-02-14
set-cookie: btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D;max-age=2592000; domain=.unibet.com;path=/;secure;samesite=none;httponly
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg
104.16.80.126200 OK 4.9 kB URL GET HTTP/2 cdn.bannerflow.com/resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg
IP 104.16.80.126:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1D:7A:63:AD:26:C4:EA:3F:E9:47:1D:1D:DE:FF:EF:66:52:E5:DD:F7
ValidityThu, 09 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4999), with no line terminators
Hash 7506851c12654bfc54bb813a52957b68
b88e0179a85912068c3480f522a8b0958a23046c
0217e3f9fd1201390e06eee878ccbf84feba0077e7cdd01754170f78e18c274d
GET /resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: FAAw5O0EvruykoHDQoRDMA==
last-modified: Fri, 27 Nov 2020 14:00:02 GMT
etag: W/"0x8D892DCBC6EB927"
x-ms-request-id: 90577b5d-e01e-0026-0f98-165a1a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 365
vary: Accept-Encoding
server: cloudflare
cf-ray: 830afe57a82c5699-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/Unibet_Pro_2020.woff2
104.18.43.104200 OK 11 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/Unibet_Pro_2020.woff2
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 10924, version 1.0\012- data
Hash 0ea5bcff84ae44840b6e9c9d12c8b963
6c827e1adb18775d2fdfbbbfef63cc9b66243ed2
b4e210ac58fe8fb176e24c58ffdbd0e7b40dded1314769dbcebdc413998b882b
GET /nu/pop/sportsbook/multisports/Unibet_Pro_2020.woff2 HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: font/woff2
content-length: 10924
cf-ray: 830afe54cbd75685-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 455215
cache-control: public, max-age=900, immutable
etag: "0x8DBB4702DB224D1"
last-modified: Wed, 13 Sep 2023 15:43:29 GMT
vary: Accept-Encoding
content-md5: DqW8/4SuRIQLbpydEsi5Yw==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 079c49b7-601e-0028-537f-0c73aa000000
x-ms-version: 2014-02-14
server: cloudflare
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/unibet-logo.svg
104.18.43.104200 OK 3.2 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/unibet-logo.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (3287), with no line terminators
Hash 910a470c87e6907732caefbe1b43f25c
709f3846db3c983a502d081a17c95404c545141c
c1912c86d189996a4995f3c142f73f88150fd922a203f914e1a17992f07a2db5
GET /nu/pop/sportsbook/multisports/unibet-logo.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52a9555685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 533874
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702B55A494"
last-modified: Wed, 13 Sep 2023 15:43:25 GMT
vary: Accept-Encoding
content-md5: cw5jdwcrd9gLyjDZb7Y7Jw==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 862f85ee-201e-005b-777e-1e2b39000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg
104.16.80.126200 OK 25 kB URL GET HTTP/2 cdn.bannerflow.com/resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg
IP 104.16.80.126:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1D:7A:63:AD:26:C4:EA:3F:E9:47:1D:1D:DE:FF:EF:66:52:E5:DD:F7
ValidityThu, 09 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7857f5fa35651d9795bac512238caaf4
107c2b86078dd49ffd18c76724bd290018719037
bf1b321fe365e6fdb5429bcebb8a6b5b9ed554d84f4eced5e69cc31038455a81
GET /resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: eFf1+jVlHZeVusUSI4yq9A==
last-modified: Mon, 07 Dec 2020 10:23:00 GMT
etag: W/"0x8D89A9A12E2A33B"
x-ms-request-id: b31b4379-501e-0041-450f-134ae6000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 429
vary: Accept-Encoding
server: cloudflare
cf-ray: 830afe57b83e5699-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/icon-expert.svg
104.18.43.104200 OK 966 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/icon-expert.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1004), with no line terminators
Hash 60530a8226b6f89fbd6e188cd9bdb2fc
5ff9b1d4f00eb8dc12ecb50e0a87abadf144a17d
1c0ec6dc6f122167b6c09d4cafb6ab7312fa4908ba74693ea7105730a5a2ed93
GET /nu/pop/sportsbook/multisports/icon-expert.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52c9865685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 457455
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702CE70450"
last-modified: Wed, 13 Sep 2023 15:43:28 GMT
vary: Accept-Encoding
content-md5: Z4302O+bSqlX5UM92U+35A==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: aee50919-501e-006e-6628-0d472d000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/icon-sports.svg
104.18.43.104200 OK 1.5 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/icon-sports.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1513), with no line terminators
Hash 49bb8022b31261533a9fc360618129c2
35ab11ba839506015fe62c50a79bf3aff01d049c
559f2bd484ade1ad03ed79c5a5de1604fe9acc174164d3fd28d68eff7acbe2b3
GET /nu/pop/sportsbook/multisports/icon-sports.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52d98d5685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 348820
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702D1E3897"
last-modified: Wed, 13 Sep 2023 15:43:28 GMT
vary: Accept-Encoding
content-md5: Kch+tYuo05USS5JaESq1rA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 89ff6622-901e-005e-7ca4-16f9e2000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.unibet.com/kindred_snow/s3.7.0/kindred_s.js
85.184.96.28200 OK 74 kB URL GET HTTP/2 www.unibet.com/kindred_snow/s3.7.0/kindred_s.js
IP 85.184.96.28:443
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
File type ASCII text, with very long lines (65378)
Hash 3fb00dbb8acb3c68fd5ddb674f22bb88
cf7bc4f71f0ff66037ac2e564963ff4c2737e766
7d3d84e73da67922341950d1542a5a5da2420ea18026e314a9aec22f631e4246
GET /kindred_snow/s3.7.0/kindred_s.js HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=BLP.1.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; clientId=polopoly_desktop; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: application/javascript
last-modified: Mon, 04 Dec 2023 14:00:57 GMT
vary: Accept-Encoding
etag: W/"656ddb99-12240"
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
content-encoding: gzip
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/favicon.ico
104.18.43.104200 OK 421 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/favicon.ico
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash ad2d9f441c6692a806c7b427bb3e536d
4978e1ffc5b62c3e2231d22aeb8f7ac679764abe
95efe0e48a145adb6c6c385cecb0e2a7a3dd2e9a3f7a01ca0647e373602770ed
GET /nu/pop/sportsbook/multisports/favicon.ico HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/x-icon
cf-ray: 830afe560d495685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 527378
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702ABA666E"
last-modified: Wed, 13 Sep 2023 15:43:24 GMT
vary: Accept-Encoding
content-md5: rS2fRBxmkqgGx7Qnuz5TbQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: ac00a8bf-d01e-0002-5b3a-14acba000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
104.16.80.126200 OK 1.1 kB URL GET HTTP/2 cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
IP 104.16.80.126:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1D:7A:63:AD:26:C4:EA:3F:E9:47:1D:1D:DE:FF:EF:66:52:E5:DD:F7
ValidityThu, 09 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1065), with no line terminators
Hash 8994f187d31c33e41e6af6c078d8b4f3
e65a39fb2b4d56343b2af57a19ba38612eaa262f
e4f28e35c66413fc59cb5bdb97c30fd7de981c9408b0f38068c3f71661f52872
GET /resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: DtBEzXf8HuXNecd90Rx/1w==
last-modified: Fri, 27 Nov 2020 14:00:01 GMT
etag: W/"0x8D892DCBC244A27"
x-ms-request-id: 850b18b8-b01e-003b-137b-0c57a6000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 572
vary: Accept-Encoding
server: cloudflare
cf-ray: 830afe57d84c5699-OSL
content-encoding: br
X-Firefox-Spdy: h2
a1s.unibet.com/orval/tracking/lastclick.min.js
85.184.96.5200 OK 1.8 kB URL GET HTTP/2 a1s.unibet.com/orval/tracking/lastclick.min.js
IP 85.184.96.5:443
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
File type ASCII text, with very long lines (1881), with no line terminators
Hash 695e4c30089ed5d35b5096257b69bbec
64897f4cdac1a6e4f5d6ed9dcb8b246e3b942841
40fab43e8fa29c9c648a5d56139fe8c35b1fbfb5c826d2fd58c4ceec7a548206
GET /orval/tracking/lastclick.min.js HTTP/1.1
Host: a1s.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 05 Aug 2022 12:55:24 GMT
etag: W/"705-5e57dfac7ede0"
cache-control: max-age=1800, public, must-revalidate
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s.unibet.com; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/com-payments.svg
104.18.43.104200 OK 32 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/com-payments.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bf06fba2ca517eddb1cc60ed26f47758
d184102516fbb91e198b99a09ac6f739d13d836d
6a91f72758fb0426e2cf9b5f36432666b620d80d825989e9dd6175a251c78475
GET /nu/pop/sportsbook/multisports/com-payments.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52d98f5685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 527525
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702B7E8320"
last-modified: Wed, 13 Sep 2023 15:43:26 GMT
vary: Accept-Encoding
content-md5: vwb7ospRft2xzGDtJvR3WA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: a95fdfb0-e01e-0019-5dda-1592b9000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.unibet.com/
85.184.96.28200 OK 0 B IP 85.184.96.28:443
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; clientId=polopoly_desktop; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: text/html;charset=utf-8
x-request-id: 889164e9a30f65802e12f055de283eb0
x-ua-compatible: IE=Edge,chrome=1,requiresActiveX=true
cache-control: public, max-age=0, s-maxage=60
expires: Tue, 05 Dec 2023 08:43:02 GMT
vary: accept-encoding
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/google-play-ro.svg
104.18.43.104200 OK 5.7 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/google-play-ro.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5942), with no line terminators
Hash e78a89d4d455992dad24f8d5a66e1d25
bff521852ffdf8934c26a627aaea680d84cd08bb
cba1b2c9cc48a01ef1a542ec799e6005cedf390479ad761b3840c999b6ed8b70
GET /nu/pop/sportsbook/multisports/google-play-ro.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52c9715685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 445294
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702DDE5E49"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: 2fR27yW0b9kBp/ebW9u59A==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: e2bacc6f-401e-0010-6202-1cd76a000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
bannerflow-feed-builder.azurewebsites.net/api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no
104.40.147.180200 OK 4.7 kB URL GET HTTP/2 bannerflow-feed-builder.azurewebsites.net/api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no
IP 104.40.147.180:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
Fingerprint0A:12:F7:66:D9:79:A1:83:48:0D:FC:30:BC:F5:BD:27:AF:F4:1A:84
ValidityTue, 01 Aug 2023 09:55:22 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (5178), with no line terminators
Hash 631915d845ca82d33ab60022714e1ff6
30f782357bfb04d2a311b19a4e116c7a0d00253a
225138234c65e4185b4d10ccddffeec9f5b674156fb2ca1819f5a89baf92f4a0
GET /api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no HTTP/1.1
Host: bannerflow-feed-builder.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Tue, 05 Dec 2023 08:42:02 GMT
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-expose-headers: Request-Context
cache-control: no-cache
content-encoding: gzip
expires: -1
pragma: no-cache
set-cookie: ARRAffinity=48768a3b039304e9b1fa7ae91a032ba86cf010beddc152b2be007691832f4002;Path=/;HttpOnly;Secure;Domain=bannerflow-feed-builder.azurewebsites.net
ARRAffinitySameSite=48768a3b039304e9b1fa7ae91a032ba86cf010beddc152b2be007691832f4002;Path=/;HttpOnly;SameSite=None;Secure;Domain=bannerflow-feed-builder.azurewebsites.net
vary: Accept-Encoding
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:f631c08e-9610-47b7-82c9-c925628cdde1
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/app-store-ro.svg
104.18.43.104200 OK 13 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/app-store-ro.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1356)
Hash 7a982245aa6326903b0e7893885e42fb
47fa69cfed4819f23a8764170e04f5744bd47cd6
18b0e4aa1e8678befe4e7db06e054447b9f96684d817b6424a6b8824042a45fb
GET /nu/pop/sportsbook/multisports/app-store-ro.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52b9635685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 449597
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702DD4C2C5"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: epgiRapjJpA7DniTiF5C+w==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: f0a9fb76-d01e-005f-5e18-15a63e000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2
172.64.141.13200 OK 74 kB URL GET HTTP/2 use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2
IP 172.64.141.13:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998\012- data
Hash 3638e62ea50e6f5859b6a15276c25c87
f5aa1a463e223a294a42b314e1c63a614d594ec0
9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9
GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: font/woff2
content-length: 74320
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "3638e62ea50e6f5859b6a15276c25c87"
last-modified: Fri, 22 Sep 2023 01:45:51 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 524023
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aL72BqxHmGOsmxiIwkNX5BikXfHkBHif3ZVVoTsqvn58sYvmum9GEScA3Oq7QDEu4bdYiuY%2BH1OU54jiqoFIk%2Bavdx5dfL%2B3MaOyCz8upFm1h%2FHJUAk0XgUvmzn2aQHJkXrv5kqZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830afe54efa0889e-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.unibet.com/
85.184.96.28200 OK 0 B IP 85.184.96.28:443
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; clientId=polopoly_desktop; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: text/html;charset=utf-8
x-request-id: d07eb812362ffcb3d7c7bb074600cc22
x-ua-compatible: IE=Edge,chrome=1,requiresActiveX=true
cache-control: public, max-age=0, s-maxage=60
expires: Tue, 05 Dec 2023 08:40:50 GMT
vary: accept-encoding
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/icon-trust.svg
104.18.43.104200 OK 1.1 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/icon-trust.svg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1092), with no line terminators
Hash 72ece8ff11191ced6c715b6dffb50c8e
f31de9cc333fe23b895c701ac6bfe4a9388f456a
e51fdf1e222c2590c5436e649fbe707d5f80e6b3888bca1509510b9504b43949
GET /nu/pop/sportsbook/multisports/icon-trust.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/svg+xml
cf-ray: 830afe52c97c5685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 453833
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702CDF8B61"
last-modified: Wed, 13 Sep 2023 15:43:28 GMT
vary: Accept-Encoding
content-md5: 9k4H3E55HXB5I94VinrUOQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: edf675d7-401e-005d-54c3-0b1886000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/custom.js
104.18.43.104200 OK 5.9 kB URL GET HTTP/2 welcome.unibet.com/custom.js
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type ASCII text, with very long lines (6078), with no line terminators
Hash f1d301b9a66fabf51fc0630bdcaf0bf8
45100e61056b88ffd1f2f4bc02f393cda328b595
9f86f4c23e72c39fe76f986ada1f7649af6abc8a1da08760e287498c84c772d5
GET /custom.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: application/javascript
cf-ray: 830afe52a9525685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 455310
etag: W/"0x8DA115DA300B0C1"
last-modified: Tue, 29 Mar 2022 08:25:09 GMT
vary: Accept-Encoding
content-md5: e/Aekt1V1fopj1X7y5r9MA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: b3159e82-501e-0041-530e-134ae6000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/1-background-black.jpg
104.18.43.104200 OK 98 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/1-background-black.jpg
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x936, components 3\012- data
Hash 8e6d9af5ef1badfe9295b8fc96793c28
e37cdf4093dc0a47246be7360e7945f91991f073
de89de8196b23a00db8e35bca40fdb4253d970492a31396d5861c2e99d691407
GET /nu/pop/sportsbook/multisports/1-background-black.jpg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: image/jpeg
content-length: 98453
cf-ray: 830afe54abb55685-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 356567
cache-control: public, max-age=900, immutable
etag: "0x8DBB4702B1549FF"
last-modified: Wed, 13 Sep 2023 15:43:25 GMT
vary: Accept-Encoding
content-md5: jm2a9e8brf6Slbj8lnk8KA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 0ff811ce-901e-0013-7152-1c360e000000
x-ms-version: 2014-02-14
server: cloudflare
X-Firefox-Spdy: h2
welcome.unibet.com/widget/betslip/betslip.js
104.18.43.104200 OK 15 kB URL GET HTTP/2 welcome.unibet.com/widget/betslip/betslip.js
IP 104.18.43.104:443
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type ASCII text, with very long lines (693)
Hash 5770dc60397ffb834d1280aa7bcebbd0
f0bbf2136b83babe5a8f70eeff2308279e9a0d3a
42e08e8d4858e610d87679ab66e8a7cf4b575614c0aa1423d8a1c0245bda9a52
GET /widget/betslip/betslip.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701765721390)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C2023125842%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210668866114%7c1%22%7d%5d; __ucbt=node0k41v47c8clvvp17ja7vjaoup7; uniattr=ST.0.T; uniattr_ref="https://conqueredallrightswell.com/"; affiliateId=1; B-TAG=127656177_C42D5ACD28F1457BAA84E771E53DAB2D; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fconqueredallrightswell.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C42D5ACD28F1457BAA84E771E53DAB2D%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; btag=127656177_C42D5ACD28F1457BAA84E771E53DAB2D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 08:42:02 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 830afe545b485685-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 347902
cache-control: public, max-age=900, immutable
etag: W/"0x8D67ACF6D112CB5"
last-modified: Tue, 15 Jan 2019 09:54:22 GMT
vary: Accept-Encoding
content-md5: V3DcYDl/+4NNEoCqe8670A==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 5135171d-601e-0075-7649-0c792e000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2