Report - hir.berfinturizm.com/

Report Overview

Submitted URL
hir.berfinturizm.com/
IP
104.164.124.66
ASN
#18779 EGIHOSTING
Submitted
2023-02-01 15:15:52
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
gcdn.myxypt.com	unknown	2021-08-05T08:45:46Z	2023-03-06T08:41:29Z	1.2 kB	24 kB	124.236.103.52
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
hir.berfinturizm.com	unknown	2023-01-22T14:44:40Z	2023-02-01T14:39:25Z	2.0 kB	45 kB	104.164.124.66
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	52.34.129.187
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	60 kB	34.120.237.76
ocsp.trust-provider.cn	unknown	2022-02-10T09:18:30Z	2023-03-13T07:40:56Z	1.4 kB	6.0 kB	47.246.44.205
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	1.7 kB	4.4 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
cdn.myxypt.com	972904	2021-08-03T08:26:17Z	2023-03-06T08:41:29Z	14 kB	5.9 MB	58.215.157.212

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-01	medium	hir.berfinturizm.com/	Phishing
2023-02-01	medium	hir.berfinturizm.com/jquery.min.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	hir.berfinturizm.com/jquery.min.js	718 B	2023-03-07	2023-09-20
Pretty URL hir.berfinturizm.com/jquery.min.js IP 104.164.124.66 ASN #18779 EGIHOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:01:50 Last Seen2023-09-20 05:19:12 Times Seen20 Hash 63b555950114a71611140688c110fde0 bc48cf4b58a06eed37938d6965613f5ceccd91de 38248ee5c42d0aa0f6aaf3bbb34af4e6fa0d34e3a0a505c63cb52851063465dc Loading...

		Size	First Seen	Last Seen
	#1 Write - edb33addf02a55e1d73f124cd294917c	133 B	2023-03-07	2023-09-20
Pretty Observations First Seen2023-03-07 15:01:50 Last Seen2023-09-20 05:19:12 Times Seen12 Hash edb33addf02a55e1d73f124cd294917c e4d73ea67f99dc7a43837d26ecee93da1f4e550d ae8d509a0c93002e94a5dc0fa92e59fa7a4c942acd37ce11c4f00c1bd3a1fd90 Loading...

HTTP Transactions (67)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10838
Expires: Wed, 01 Feb 2023 18:16:18 GMT
Date: Wed, 01 Feb 2023 15:15:40 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12634
Expires: Wed, 01 Feb 2023 18:46:14 GMT
Date: Wed, 01 Feb 2023 15:15:40 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 14:43:25 GMT
content-type: application/json
age: 1935
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5601
Expires: Wed, 01 Feb 2023 16:49:01 GMT
Date: Wed, 01 Feb 2023 15:15:40 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: mEaxgCa+rHCyG728vCP6mVETOVMAqmGZbw+EqrV+5Yak0HFl8T5QjtnThhMkBKU9+BzgXY7Jr3s=
x-amz-request-id: 8FJ7ZTE8J3YKQ1HK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 14:51:36 GMT
age: 1444
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 15:15:40 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

hir.berfinturizm.com/

104.164.124.66

200 OK

14 kB

URL HTTP/1.1
hir.berfinturizm.com/
IP
104.164.124.66:0
ASN
#18779 EGIHOSTING

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8737)
Size
14 kB (14516 bytes)
Hash
9e601a41c70921f0bd09341e7a0c1629
ee11f38c8bfe191274a9ab2f3ced19f71ae26d00
fb48576ce13b2faa290e68d5bc648ff88082567ef6de559570a38c86e8e30a20

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: hir.berfinturizm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 15:17:43 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

hir.berfinturizm.com/jquery.min.js

104.164.124.66

200 OK

718 B

URL HTTP/1.1
hir.berfinturizm.com/jquery.min.js
IP
104.164.124.66:0
ASN
#18779 EGIHOSTING

File type
ASCII text, with very long lines (717)
Size
718 B (718 bytes)
Hash
63b555950114a71611140688c110fde0
bc48cf4b58a06eed37938d6965613f5ceccd91de
38248ee5c42d0aa0f6aaf3bbb34af4e6fa0d34e3a0a505c63cb52851063465dc

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /jquery.min.js HTTP/1.1
Host: hir.berfinturizm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 15:17:44 GMT
Content-Type: application/javascript
Content-Length: 718
Last-Modified: Thu, 14 Jul 2022 03:55:15 GMT
Connection: keep-alive
ETag: "62cf93a3-2ce"
Expires: Wed, 01 Feb 2023 16:17:44 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

hir.berfinturizm.com/template/default/assets/css/app.css

104.164.124.66

200 OK

16 kB

URL HTTP/1.1
hir.berfinturizm.com/template/default/assets/css/app.css
IP
104.164.124.66:0
ASN
#18779 EGIHOSTING

File type
ASCII text, with very long lines (925)
Size
16 kB (15765 bytes)
Hash
e2da2fa4379064216811d821cb1ce71b
0d25f3af1d6b40ef59b084392b369b2ad18a2b39
4039db7bba2c3b867434dd028182b7285ee9858973aa8b715d16241c6b0eedb0

HTTP Headers

GET /template/default/assets/css/app.css HTTP/1.1
Host: hir.berfinturizm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 15:17:44 GMT
Content-Type: text/css;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

hir.berfinturizm.com/template/default/assets/css/animate.min.css

104.164.124.66

200 OK

5.0 kB

URL HTTP/1.1
hir.berfinturizm.com/template/default/assets/css/animate.min.css
IP
104.164.124.66:0
ASN
#18779 EGIHOSTING

File type
ASCII text, with very long lines (832)
Size
5.0 kB (5020 bytes)
Hash
2d9e4ca1e0a2e6ae4914bbf92a31ce4b
5cde1f2be02560e23acdd9ce1f799c1e136116a2
f6c718c4fd765dba1d6b7da8fefcddcd1194d7757e1574e53e0f90727a9b5d75

HTTP Headers

GET /template/default/assets/css/animate.min.css HTTP/1.1
Host: hir.berfinturizm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 15:17:44 GMT
Content-Type: text/css;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

hir.berfinturizm.com/template/default/assets/css/main.css

104.164.124.66

200 OK

4.8 kB

URL HTTP/1.1
hir.berfinturizm.com/template/default/assets/css/main.css
IP
104.164.124.66:0
ASN
#18779 EGIHOSTING

File type
Unicode text, UTF-8 text
Size
4.8 kB (4785 bytes)
Hash
de29f3db36261fe5471577ebc3f334ad
90de42acf98b77a8f73a2d76d86fbaf1174877ea
9e03986b79da06b90cc32c5f8bf7496031223547234bf2b3032bcd56858b2e45

HTTP Headers

GET /template/default/assets/css/main.css HTTP/1.1
Host: hir.berfinturizm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 15:17:44 GMT
Content-Type: text/css;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 14:41:42 GMT
age: 2039
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7819
Expires: Wed, 01 Feb 2023 17:26:00 GMT
Date: Wed, 01 Feb 2023 15:15:41 GMT
Connection: keep-alive

push.services.mozilla.com/

52.34.129.187

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.34.129.187:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FTmwEwLh3cvCHpk5Is0jjA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mooDFBj1fd6TUj5ZQ42l9FRLdjI=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4511
Expires: Wed, 01 Feb 2023 16:30:54 GMT
Date: Wed, 01 Feb 2023 15:15:43 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6819 bytes)
Hash
ec7e808a5e82552c46c3417a5b32b836
f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd
f16d982224dfeb0753eaf9d4eb87d80fd1111f682fd8fa36f3177aad5bf926a4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6819
x-amzn-requestid: a0368695-4182-40bd-9a28-c50ae783a7a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRHGnoAMF0Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-624285eb16110b8c2360dec5;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: daAf58GNG6Oy-ov_8TUeXnTcvZyW5eL_qwWz7dapr2Sy_5XSiS-3Mw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:56 GMT
age: 63167
etag: "f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8597 bytes)
Hash
27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 12:57:00 GMT
age: 8323
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (14041 bytes)
Hash
78fe9a77211d6f9a462f625af0c6f9bc
ac0b58423d7578e7a1b60a62220c0a57924dda82
e047466c3ae0a55509f4ace49d0476f94271b5a25e71caa3b06ec468a238b652

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14041
x-amzn-requestid: 2be6655d-3b0e-4e65-b44b-11682610b640
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRGFpIAMFbMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-5554d18d5db235913afa77a2;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jJHVbOXepgkVHjuNJG9wPcMjDcGbAc-NIpv_KUECG6c-AnJZoIW0zg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:56 GMT
age: 63167
etag: "ac0b58423d7578e7a1b60a62220c0a57924dda82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8735 bytes)
Hash
23db22ce2120fbb0ae6109e1a046062d
2068c8d9a5bc30a17be658e198e26c64a80703cf
f307ba6c4929d9f0c9354334b7baea878da379138489d9689bb777c4da308dab

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: f466c962-7b12-4923-a4be-7ff9fce372a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaWFP_IAMF9wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-7a8c027d58f5b9132bb68a33;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XtqfgDxskGIUmZdRj2nrGDpo9KvECk528eLZV29xNx3h7CLOu49mnQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:19 GMT
age: 63204
etag: "2068c8d9a5bc30a17be658e198e26c64a80703cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5736 bytes)
Hash
2998f7f50ac0eec931c348e8a0fb0c60
f5e411cda74cb7fb4a662f4787e9543b9749c8b5
0c81413a819e379212bf757b1c9469415aec2ac8fdf47f94ff23c420a1da20e1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5736
x-amzn-requestid: 895ee89b-8d2e-42f9-a392-466557f8a0d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffEtEGk_oAMFYPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e7ed-026a1b0d79dc7eb572317bd2;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:28:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4yxwz2MFTdpb8I56VVbFU2Zz0qG_uHcYc3aDtn6boQPjhw7UFLLnYw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 10:37:09 GMT
age: 16714
etag: "f5e411cda74cb7fb4a662f4787e9543b9749c8b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9600 bytes)
Hash
3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 02:29:58 GMT
age: 45945
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.trust-provider.cn/

47.246.44.205

200 OK

600 B

URL HTTP/1.1
ocsp.trust-provider.cn/
IP
47.246.44.205:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
600 B (600 bytes)
Hash
f724dc907d5fbab69be9e278d326fc14
0119ac68106a3691cff0741a73d70a85058bae6c
c62d00f3fa58715632e5f907f7c1b59475eba13502b2bb440f3786b4489dab62

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Wed, 01 Feb 2023 15:15:43 GMT
last-modified: Mon, 30 Jan 2023 13:37:59 GMT
expires: Mon, 06 Feb 2023 13:37:58 GMT
etag: "0119ac68106a3691cff0741a73d70a85058bae6c"
cache-control: max-age=575869,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 792ba4e478a05b6e-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1675264543
via: cache1.l2de2[233,233,200-0,H], cache11.l2de2[235,0], cache3.se1[316,315,200-0,M], cache5.se1[318,0], cache4.se1[319,0]
age: 0
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Wed, 01 Feb 2023 15:15:43 GMT
x-swift-cachetime: 1800
timing-allow-origin: *, *
eagleid: 2ff62c9816752645433336963e, 2ff62c9816752645433336963e

ocsp.trust-provider.cn/

47.246.44.205

200 OK

600 B

URL HTTP/1.1
ocsp.trust-provider.cn/
IP
47.246.44.205:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
600 B (600 bytes)
Hash
f724dc907d5fbab69be9e278d326fc14
0119ac68106a3691cff0741a73d70a85058bae6c
c62d00f3fa58715632e5f907f7c1b59475eba13502b2bb440f3786b4489dab62

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Wed, 01 Feb 2023 15:15:43 GMT
last-modified: Mon, 30 Jan 2023 13:37:59 GMT
expires: Mon, 06 Feb 2023 13:37:58 GMT
etag: "0119ac68106a3691cff0741a73d70a85058bae6c"
cache-control: max-age=575869,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 792ba4e478a05b6e-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1675264543
via: cache1.l2de2[233,228,200-0,C], cache3.l2de2[230,0], cache5.se1[317,316,200-0,C], cache5.se1[318,0], cache1.se1[321,0]
age: 0
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Wed, 01 Feb 2023 15:15:43 GMT
x-swift-cachetime: 1800
timing-allow-origin: *, *
eagleid: 2ff62c9516752645433331845e, 2ff62c9516752645433331845e

ocsp.trust-provider.cn/

47.246.44.205

200 OK

600 B

URL HTTP/1.1
ocsp.trust-provider.cn/
IP
47.246.44.205:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
600 B (600 bytes)
Hash
f724dc907d5fbab69be9e278d326fc14
0119ac68106a3691cff0741a73d70a85058bae6c
c62d00f3fa58715632e5f907f7c1b59475eba13502b2bb440f3786b4489dab62

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Wed, 01 Feb 2023 15:15:43 GMT
last-modified: Mon, 30 Jan 2023 13:37:59 GMT
expires: Mon, 06 Feb 2023 13:37:58 GMT
etag: "0119ac68106a3691cff0741a73d70a85058bae6c"
cache-control: max-age=575869,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 792ba4e478a05b6e-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1675264543
via: cache1.l2de2[233,228,200-0,C], cache3.l2de2[230,0], cache5.se1[317,316,200-0,C], cache5.se1[318,0], cache5.se1[323,0]
age: 0
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Wed, 01 Feb 2023 15:15:43 GMT
x-swift-cachetime: 1800
timing-allow-origin: *, *
eagleid: 2ff62c9916752645433353787e, 2ff62c9916752645433353787e

ocsp.trust-provider.cn/

47.246.44.205

200 OK

600 B

URL HTTP/1.1
ocsp.trust-provider.cn/
IP
47.246.44.205:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
600 B (600 bytes)
Hash
f724dc907d5fbab69be9e278d326fc14
0119ac68106a3691cff0741a73d70a85058bae6c
c62d00f3fa58715632e5f907f7c1b59475eba13502b2bb440f3786b4489dab62

HTTP Headers

POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Wed, 01 Feb 2023 15:15:43 GMT
last-modified: Mon, 30 Jan 2023 13:37:59 GMT
expires: Mon, 06 Feb 2023 13:37:58 GMT
etag: "0119ac68106a3691cff0741a73d70a85058bae6c"
cache-control: max-age=575869,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 792ba4e478a05b6e-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1675264543
via: cache1.l2de2[233,228,200-0,C], cache3.l2de2[230,0], cache5.se1[317,317,200-0,M], cache5.se1[319,0], cache2.se1[321,0]
age: 0
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Wed, 01 Feb 2023 15:15:43 GMT
x-swift-cachetime: 1800
timing-allow-origin: *, *
eagleid: 2ff62c9616752645433344893e, 2ff62c9616752645433344893e

gcdn.myxypt.com/libs/jquery.validator.css

124.236.103.52

200 OK

1.0 kB

URL HTTP/1.1
gcdn.myxypt.com/libs/jquery.validator.css
IP
124.236.103.52:0
ASN
#134760 Shijiazhuang IDC network, CHINANET Hebei province

File type
ASCII text, with very long lines (3479)
Size
1.0 kB (1020 bytes)
Hash
883b598f91c463f4d1e68d12e1d110e9
d7a3a38a66a11a84dc37495ddca20c46ba1a4b6b
bf5095f8afbeb7dc312da1fb3489fec43decb10ead16c2c189041b63da5e9314

HTTP Headers

GET /libs/jquery.validator.css HTTP/1.1
Host: gcdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hir.berfinturizm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 01 Feb 2023 15:15:43 GMT
Content-Type: text/css
Content-Length: 1020
Connection: keep-alive
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Age: 1482058
Cache-Control: public, max-age=31536000
Content-Disposition: inline; filename="jquery.validator.css"; filename*=utf-8''jquery.validator.css
Content-Encoding: gzip
Content-Md5: OBA6UY20JWNopKcg+/gNFQ==
Content-Transfer-Encoding: binary
Etag: "Fna-D7DH3oCnX0F09nA9W9MfXhfc.gz"
Last-Modified: Wed, 09 Dec 2020 07:22:28 GMT
Vary: Accept-Encoding
X-Log: X-Log
X-M-Log: QNM:cdn-cache-dls-hbsjz-sjz-8;QNM3
X-M-Reqid: GRJHU4G0v
X-Qiniu-Zone: 0
X-Qnm-Cache: Hit
X-Reqid: yqEAAADo7WwQsjMX
X-Svr: IO

gcdn.myxypt.com/libs/owl.carousel.css

124.236.103.52

200 OK

1.1 kB

URL HTTP/1.1
gcdn.myxypt.com/libs/owl.carousel.css
IP
124.236.103.52:0
ASN
#134760 Shijiazhuang IDC network, CHINANET Hebei province

File type
ASCII text, with very long lines (3184)
Size
1.1 kB (1065 bytes)
Hash
4d366d8eac27925945f234c64a39e795
80401dfb1c1b224dedcd9e9e8a359316810880a5
946ec527e12af0042f86c2a979b61c585136b00b260490fc28eef47423828923

HTTP Headers

GET /libs/owl.carousel.css HTTP/1.1
Host: gcdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hir.berfinturizm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 01 Feb 2023 15:15:43 GMT
Content-Type: text/css
Content-Length: 1065
Connection: keep-alive
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Age: 11786
Cache-Control: public, max-age=31536000
Content-Disposition: inline; filename="owl.carousel.css"; filename*=utf-8''owl.carousel.css
Content-Encoding: gzip
Content-Md5: snUqhQ1E9QA2Yo7q7zv8+g==
Content-Transfer-Encoding: binary
Etag: "FvukY1PPkEUO89NioSPx568-jFYe.gz"
Last-Modified: Wed, 09 Dec 2020 07:22:28 GMT
Vary: Accept-Encoding
X-Log: X-Log
X-M-Log: QNM:cdn-cache-dls-hbsjz-sjz-8;QNM3
X-M-Reqid: T6RKE5nH8
X-Qiniu-Zone: 0
X-Qnm-Cache: Hit
X-Reqid: aNYAAAC5ItCBsT8X
X-Svr: IO

gcdn.myxypt.com/libs/bootstrap.css

124.236.103.52

200 OK

20 kB

URL HTTP/1.1
gcdn.myxypt.com/libs/bootstrap.css
IP
124.236.103.52:0
ASN
#134760 Shijiazhuang IDC network, CHINANET Hebei province

File type
ASCII text, with very long lines (65371)
Size
20 kB (19707 bytes)
Hash
746bb180cb6c20f7b3d741ff8f3bc6b4
e9b851f274a38feaa521ed09d86e30b90c54f676
f57e0cc0a8a573534b95998020b0936e650898eec4d38f1d2b780286e70d06a5

HTTP Headers

GET /libs/bootstrap.css HTTP/1.1
Host: gcdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hir.berfinturizm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 01 Feb 2023 15:15:43 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Age: 796885
Cache-Control: public, max-age=31536000
Content-Disposition: inline; filename="bootstrap.css"; filename*=utf-8''bootstrap.css
Content-Encoding: gzip
Content-Md5: 7Du1KgDhdqcYHUVN/66iGQ==
Content-Transfer-Encoding: binary
Etag: "FmUn2L8-HpNourjHtg9WvAH6Ov1o.gz"
Last-Modified: Wed, 09 Dec 2020 07:22:28 GMT
Vary: Accept-Encoding
X-Log: X-Log
X-M-Log: QNM:cdn-cache-dls-hbsjz-sjz-5;QNM3
X-M-Reqid: hguEp0Yzm
X-Qiniu-Zone: 0
X-Qnm-Cache: Hit
X-Reqid: _0sAAAAlKtl25zwX
X-Svr: IO

hir.berfinturizm.com/source/include/imagecode.php?act=verifycode&width=138&height=34

104.164.124.66

200 OK

2.5 kB

URL HTTP/1.1
hir.berfinturizm.com/source/include/imagecode.php?act=verifycode&width=138&height=34
IP
104.164.124.66:0
ASN
#18779 EGIHOSTING

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality"\012- data
Size
2.5 kB (2450 bytes)
Hash
f581962fb8cc9f8314e044594a8534b2
7c5bb32904d0cbc3729872dc187d1270e137acb6
f4b959ee1df5e970aa7940b962d36e697affb82c1ce64f7e2687f5644c13c305

HTTP Headers

GET /source/include/imagecode.php?act=verifycode&width=138&height=34 HTTP/1.1
Host: hir.berfinturizm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 15:17:47 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip

cdn.myxypt.com/8afd86ba/21/04/e4c0435b48f628634d3710da21d44809255fa0cf.jpg

58.215.157.212

200 OK

35 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/e4c0435b48f628634d3710da21d44809255fa0cf.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:09 15:10:12], baseline, precision 8, 334x211, components 3\012- data
Size
35 kB (34667 bytes)
Hash
2445da6d5cd5f22de8d83d8e2a4ed9df
02f36fbdb2dce69b3cbf2dfcbd5894a99740ea45
1517176bb9e4904dd86ecb311323bef673579b81bd86a4a5d8870265fcc4c729

HTTP Headers

GET /8afd86ba/21/04/e4c0435b48f628634d3710da21d44809255fa0cf.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 34667
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A79B4813435C71365
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "2445DA6D5CD5F22DE8D83D8E2A4ED9DF"
Last-Modified: Fri, 09 Apr 2021 07:14:57 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17963530514675145182
x-oss-storage-class: Standard
Content-MD5: JEXabVzV8i3o2D2OKk7Z3w==
x-oss-server-time: 69
Ali-Swift-Global-Savetime: 1675207690
Via: cache23.l2cn3036[94,93,200-0,M], cache16.l2cn3036[94,0], cache42.cn2175[0,0,200-0,H], cache32.cn2175[2,0]
Age: 56854
X-Cache: HIT TCP_HIT dirn:9:750252661
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3416752645445114542e

cdn.myxypt.com/8afd86ba/21/04/1417d217684a6b8a7e638a3272c7b58ac59cf930.jpg

58.215.157.212

200 OK

35 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/1417d217684a6b8a7e638a3272c7b58ac59cf930.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:09 15:11:23], baseline, precision 8, 334x211, components 3\012- data
Size
35 kB (34954 bytes)
Hash
0784499a9fd276c0a3efaf39eb595964
f7940610217164c8e9a529c89a440eb31adc1ccc
80bfe8ad348436a1f8cd5ba22c7900227dc6a15393e3e108720299e89b0ba241

HTTP Headers

GET /8afd86ba/21/04/1417d217684a6b8a7e638a3272c7b58ac59cf930.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 34954
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A5BE45538398E1720
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "0784499A9FD276C0A3EFAF39EB595964"
Last-Modified: Fri, 09 Apr 2021 07:15:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14763246713552659533
x-oss-storage-class: Standard
Content-MD5: B4RJmp/SdsCj768561lZZA==
x-oss-server-time: 77
Ali-Swift-Global-Savetime: 1675207690
Via: cache52.l2cn3036[98,98,200-0,M], cache36.l2cn3036[99,0], cache45.cn2175[0,0,200-0,H], cache28.cn2175[4,0]
Age: 56854
X-Cache: HIT TCP_HIT dirn:9:773514968
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3016752645445293539e

cdn.myxypt.com/8afd86ba/21/04/b73fc6cb13e67859fe3b97c0f7e1e6d77f4c8def.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

15 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/b73fc6cb13e67859fe3b97c0f7e1e6d77f4c8def.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x199, components 3\012- data
Size
15 kB (15201 bytes)
Hash
05ef70192e83cd60481ff68fe7c0712c
770a4bad65ea6c18c375aad68abb19463ddf392f
8586c7a8f78efdd920959a83f734557c6fc7a3c5ed1090dde34a4d92534040fb

HTTP Headers

GET /8afd86ba/21/04/b73fc6cb13e67859fe3b97c0f7e1e6d77f4c8def.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15201
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A4090AD2963239B0DBAF
x-oss-cdn-auth: success
ETag: "9D1B9D84B754C0E22C93DFF649753EE4"
Last-Modified: Tue, 06 Apr 2021 07:03:35 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 76
x-oss-hash-crc64ecma: 4572833680367380644
Ali-Swift-Global-Savetime: 1675207689
Via: cache58.l2cn3036[102,102,200-0,M], cache41.l2cn3036[103,0], cache26.cn2175[0,9,200-0,H], cache32.cn2175[10,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:11:812302882
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3416752645450365654e

cdn.myxypt.com/8afd86ba/21/04/b9c8382716df3e1e4c0beb98ce568c6ce8e0d202.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

24 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/b9c8382716df3e1e4c0beb98ce568c6ce8e0d202.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x199, components 3\012- data
Size
24 kB (24228 bytes)
Hash
eeb3d52999668761a860788081300323
624f67b0ae2f3a79f572359a92d8cc14843b956e
2b0255786f1bdec8c49cde3cce6d13c0bc64ea188762fc3b2bf65f1e32145211

HTTP Headers

GET /8afd86ba/21/04/b9c8382716df3e1e4c0beb98ce568c6ce8e0d202.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 24228
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A409F0A40832377AB2D8
x-oss-cdn-auth: success
ETag: "D2CBDC529BC702770DF8F21B7EFD286E"
Last-Modified: Tue, 06 Apr 2021 07:03:14 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 102
x-oss-hash-crc64ecma: 6876964395476585865
Ali-Swift-Global-Savetime: 1675207689
Via: cache58.l2cn3036[122,122,200-0,M], cache51.l2cn3036[124,0], cache39.cn2175[0,0,200-0,H], cache28.cn2175[10,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:9:1158959732
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3016752645450804740e

cdn.myxypt.com/8afd86ba/21/04/b11826f88c273887104ddd4a21c7f2fa9def7efe.jpg

58.215.157.212

200 OK

199 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/b11826f88c273887104ddd4a21c7f2fa9def7efe.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:17:33], baseline, precision 8, 631x410, components 3\012- data
Size
199 kB (198947 bytes)
Hash
9dc47911e6293487b1ae61ce7133d79a
75bd64f378f63ae8892e2ac61f87b05578d7357e
192a12e39fad889d6a71ee47ef5d9b30f384b98fb8de3fb6c263130a17be39b5

HTTP Headers

GET /8afd86ba/21/04/b11826f88c273887104ddd4a21c7f2fa9def7efe.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 198947
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A4099F5C513036E780A3
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "9DC47911E6293487B1AE61CE7133D79A"
Last-Modified: Tue, 06 Apr 2021 06:20:37 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5390865039950382352
x-oss-storage-class: Standard
Content-MD5: ncR5EeYpNIexrmHOcTPXmg==
x-oss-server-time: 79
Ali-Swift-Global-Savetime: 1675207689
Via: cache75.l2cn3036[102,102,200-0,M], cache72.l2cn3036[104,0], cache26.cn2175[0,0,200-0,H], cache35.cn2175[2,0]
Age: 56855
X-Cache: HIT TCP_HIT dirn:10:822991319
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645442524371e

cdn.myxypt.com/8afd86ba/21/04/2b2921ddbf0d9d70747dbde8160ff52e89cf0a5b.jpg

58.215.157.212

200 OK

33 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/2b2921ddbf0d9d70747dbde8160ff52e89cf0a5b.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:09 15:13:30], baseline, precision 8, 334x211, components 3\012- data
Size
33 kB (33438 bytes)
Hash
8d2e298a3cfc85dd60f2e3940f498219
ecf9ca5b50e3a1d84964678cb9cbf543b9c16683
92d293b52b07cdfbaaba9f04c626553a8d9921249b7324c2c7fa4bdef79e094d

HTTP Headers

GET /8afd86ba/21/04/2b2921ddbf0d9d70747dbde8160ff52e89cf0a5b.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 33438
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40AC3952C3630E19EE8
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "8D2E298A3CFC85DD60F2E3940F498219"
Last-Modified: Fri, 09 Apr 2021 07:15:38 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13668487909907374184
x-oss-storage-class: Standard
Content-MD5: jS4pijz8hd1g8uOUD0mCGQ==
x-oss-server-time: 161
Ali-Swift-Global-Savetime: 1675207690
Via: cache6.l2cn3036[181,181,200-0,M], cache56.l2cn3036[182,0], cache39.cn2175[0,0,200-0,H], cache28.cn2175[1,0]
Age: 56855
X-Cache: HIT TCP_HIT dirn:10:1189440230
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3016752645453645309e

cdn.myxypt.com/8afd86ba/21/04/c8253b2d474a7a1176708a855c1e5210248725c1.jpg

58.215.157.212

200 OK

33 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/c8253b2d474a7a1176708a855c1e5210248725c1.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:09 15:14:19], baseline, precision 8, 334x211, components 3\012- data
Size
33 kB (33184 bytes)
Hash
de09b0c6703bd11581c1a511f6d73a24
6bfe0adb18e41b1f7e520d55decd31845ca1b601
201fd1a5e5382ad054712b38bd6b73e36eb8441d5ca5fd5a3d693df62745e600

HTTP Headers

GET /8afd86ba/21/04/c8253b2d474a7a1176708a855c1e5210248725c1.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 33184
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A3E9D1A3236991119
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "DE09B0C6703BD11581C1A511F6D73A24"
Last-Modified: Fri, 09 Apr 2021 07:15:47 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9648891888430758400
x-oss-storage-class: Standard
Content-MD5: 3gmwxnA70RWBwaUR9tc6JA==
x-oss-server-time: 62
Ali-Swift-Global-Savetime: 1675207690
Via: cache23.l2cn3036[90,89,200-0,M], cache52.l2cn3036[90,0], cache8.cn2175[0,0,200-0,H], cache35.cn2175[2,0]
Age: 56855
X-Cache: HIT TCP_HIT dirn:11:372342909
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645455727311e

cdn.myxypt.com/8afd86ba/21/09/d9efd2451d3de535050746abd1b8794b2741abf4.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

209 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/d9efd2451d3de535050746abd1b8794b2741abf4.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 614x550, components 3\012- data
Size
209 kB (209013 bytes)
Hash
446c20d903a8b1d52abebbf0c6f5b748
e4a6ea262ac4c0e919510529d5c468653aac51a7
e814286c278191de877d16db0318d55ea4a3115312dbe6daec83551812fe98e5

HTTP Headers

GET /8afd86ba/21/09/d9efd2451d3de535050746abd1b8794b2741abf4.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 209013
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A408DBD4F832369C68C2
x-oss-cdn-auth: success
ETag: "64153E1EC3C81AE6E56603257689304E"
Last-Modified: Wed, 15 Sep 2021 01:35:17 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 89
x-oss-hash-crc64ecma: 15778645493655694520
Ali-Swift-Global-Savetime: 1675207689
Via: cache60.l2cn3036[100,113,200-0,M], cache34.l2cn3036[114,0], cache12.cn2175[0,0,200-0,H], cache31.cn2175[3,0]
Age: 56855
X-Cache: HIT TCP_HIT dirn:9:865574574
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3316752645445192086e

cdn.myxypt.com/8afd86ba/21/09/76fe002c5cecda741a13a37e8d1c87c7f9ab2dc9.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

219 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/76fe002c5cecda741a13a37e8d1c87c7f9ab2dc9.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 614x550, components 3\012- data
Size
219 kB (219244 bytes)
Hash
43ff87eb6c4ac7d9ec89d8448f7b964e
d9e505af550836d714653a5c8d1c0d854afd4729
cd7313cd985084ff89c702489abc0fbca18b63f1571fdec45990cbeb7bc26a5b

HTTP Headers

GET /8afd86ba/21/09/76fe002c5cecda741a13a37e8d1c87c7f9ab2dc9.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 219244
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:08 GMT
x-oss-request-id: 63D9A40847C6173932DCCD8B
x-oss-cdn-auth: success
ETag: "D24F9A2390109C38A4C16B60CA63F74E"
Last-Modified: Wed, 15 Sep 2021 01:43:23 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 124
x-oss-hash-crc64ecma: 7797561467533938626
Ali-Swift-Global-Savetime: 1675207688
Via: cache21.l2cn3036[146,165,200-0,M], cache11.l2cn3036[166,0], cache34.cn2175[0,0,200-0,H], cache30.cn2175[2,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:9:50020685
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:08 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3216752645445278769e

cdn.myxypt.com/8afd86ba/21/04/8d426831be88799645adfa626b9f6b0a04b2df8c.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

22 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/8d426831be88799645adfa626b9f6b0a04b2df8c.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x199, components 3\012- data
Size
22 kB (22017 bytes)
Hash
e0713c225073f114bc773d869de5f4a6
a33b9aca9f8d52d64acba87bc22e22795778f643
29edeeb01564bdf785d4a32014e56a9507d1618589c45422934f36d273c38fae

HTTP Headers

GET /8afd86ba/21/04/8d426831be88799645adfa626b9f6b0a04b2df8c.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 22017
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A40963EA8B3335DA256C
x-oss-cdn-auth: success
ETag: "3F2E84C1CE3A6793407FE547EE077873"
Last-Modified: Tue, 06 Apr 2021 07:01:58 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 77
x-oss-hash-crc64ecma: 2269994189239245706
Ali-Swift-Global-Savetime: 1675207689
Via: cache18.l2cn3036[99,99,200-0,M], cache64.l2cn3036[101,0], cache34.cn2175[0,0,200-0,H], cache28.cn2175[1,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:11:1469491754
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3016752645456425979e

cdn.myxypt.com/8afd86ba/21/04/a332b25281c09d13284e745547a43b8a741a5f92.jpg

58.215.157.212

200 OK

236 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/a332b25281c09d13284e745547a43b8a741a5f92.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:18:10], baseline, precision 8, 631x410, components 3\012- data
Size
236 kB (236007 bytes)
Hash
229573346fb7ae786f6326dbb7901398
b39fc5b4a400994236f659a091b9d2c0da28908a
854a14fe9fabf3de395c08075ddfe0ef0f3bce0af32c868843cf304949a2e1dc

HTTP Headers

GET /8afd86ba/21/04/a332b25281c09d13284e745547a43b8a741a5f92.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 236007
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A4292EA3833BDC5A8
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "229573346FB7AE786F6326DBB7901398"
Last-Modified: Tue, 06 Apr 2021 06:20:49 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9130626134096202611
x-oss-storage-class: Standard
Content-MD5: IpVzNG+3rnhvYybbt5ATmA==
x-oss-server-time: 62
Ali-Swift-Global-Savetime: 1675207690
Via: cache18.l2cn3036[116,117,200-0,M], cache32.l2cn3036[118,0], cache35.cn2175[0,0,200-0,H], cache29.cn2175[3,0]
Age: 56854
X-Cache: HIT TCP_HIT dirn:10:231819727
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3116752645445378532e

cdn.myxypt.com/8afd86ba/21/04/3058f2070eedd0e823bc8305b10d8312ea297d33.jpg

58.215.157.212

200 OK

222 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/3058f2070eedd0e823bc8305b10d8312ea297d33.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:17:03], baseline, precision 8, 631x410, components 3\012- data
Size
222 kB (221756 bytes)
Hash
a951f5b7c864e5610bb4477aef1139dd
b866de7c1df8d711543a65442c2a00de991dcea7
86281e102ba98b488c1c936a297677df3e5440b332d38ee15271fdf8a25ea0c4

HTTP Headers

GET /8afd86ba/21/04/3058f2070eedd0e823bc8305b10d8312ea297d33.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 221756
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A409BDCDCF38315A660B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "A951F5B7C864E5610BB4477AEF1139DD"
Last-Modified: Tue, 06 Apr 2021 06:20:24 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6841150109400361460
x-oss-storage-class: Standard
Content-MD5: qVH1t8hk5WELtEd67xE53Q==
x-oss-server-time: 151
Ali-Swift-Global-Savetime: 1675207689
Via: cache5.l2cn3036[174,194,200-0,M], cache33.l2cn3036[196,0], cache38.cn2175[0,0,200-0,H], cache32.cn2175[3,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:10:111886629
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3416752645453086236e

cdn.myxypt.com/8afd86ba/21/09/036932551634af77aa53d025fd09421e5d692c69.jpg

58.215.157.212

200 OK

90 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/036932551634af77aa53d025fd09421e5d692c69.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=380, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 600x380, components 3\012- data
Size
90 kB (89600 bytes)
Hash
228ef525283890aa18c52d7db1518105
9992215f13326d9eb69544b77adf0f4da4f8d6a4
e46e9dce88b1c3da89c052b38e355c82c47e43fe843e97ccf29f6dfbe679647c

HTTP Headers

GET /8afd86ba/21/09/036932551634af77aa53d025fd09421e5d692c69.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 89600
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A409A1602B323983BDC3
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "228EF525283890AA18C52D7DB1518105"
Last-Modified: Wed, 15 Sep 2021 01:17:51 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13218623769157309502
x-oss-storage-class: Standard
Content-MD5: Io71JSg4kKoYxS19sVGBBQ==
x-oss-server-time: 111
Ali-Swift-Global-Savetime: 1675207689
Via: cache1.l2cn3036[135,173,200-0,M], cache39.l2cn3036[173,0], cache15.cn2175[0,0,200-0,H], cache35.cn2175[3,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:11:363160712
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645458417900e

cdn.myxypt.com/8afd86ba/21/04/f083f56eba79a04fa086a12168fd4ee5e19e7897.jpg

58.215.157.212

200 OK

209 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/f083f56eba79a04fa086a12168fd4ee5e19e7897.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:19:06], baseline, precision 8, 631x410, components 3\012- data
Size
209 kB (209167 bytes)
Hash
c7e838d0ad4610bd164f76a24dc72467
0bacbbc2df300977eb44aac97e1492c995e470ee
5980dccc4756aef997404914605a4c93a78963f7da4f759638a88e57816b4972

HTTP Headers

GET /8afd86ba/21/04/f083f56eba79a04fa086a12168fd4ee5e19e7897.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 209167
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A2B654B3438A0E03A
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "C7E838D0AD4610BD164F76A24DC72467"
Last-Modified: Tue, 06 Apr 2021 06:21:11 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15945498889588185158
x-oss-storage-class: Standard
Content-MD5: x+g40K1GEL0WT3aiTcckZw==
x-oss-server-time: 155
Ali-Swift-Global-Savetime: 1675207690
Via: cache14.l2cn3036[181,211,200-0,M], cache32.l2cn3036[212,0], cache39.cn2175[0,0,200-0,H], cache30.cn2175[3,0]
Age: 56855
X-Cache: HIT TCP_HIT dirn:9:1177440989
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3216752645458873556e

cdn.myxypt.com/8afd86ba/21/04/3bb699e32e9020581849bd3536560f4f0de44222.jpg

58.215.157.212

200 OK

472 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/3bb699e32e9020581849bd3536560f4f0de44222.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=700, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x700, components 3\012- data
Size
472 kB (471915 bytes)
Hash
f33a338c600da7ca7000a1372a10e059
4ecc84cdfb804134dd6e6b8e8f004970481da6ad
ad7e08d6c1726a6739bda178c39b402d22df9e365de4399b776a0afd56493aad

HTTP Headers

GET /8afd86ba/21/04/3bb699e32e9020581849bd3536560f4f0de44222.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 471915
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:07 GMT
x-oss-request-id: 63D9A40792AF9434374460C6
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "F33A338C600DA7CA7000A1372A10E059"
Last-Modified: Tue, 06 Apr 2021 06:29:35 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11201206951544572457
x-oss-storage-class: Standard
Content-MD5: 8zozjGANp8pwAKE3KhDgWQ==
x-oss-server-time: 65
Ali-Swift-Global-Savetime: 1675207687
Via: cache68.l2cn3036[79,79,200-0,M], cache8.l2cn3036[80,0], cache45.cn2175[0,0,200-0,H], cache29.cn2175[4,0]
Age: 56858
X-Cache: HIT TCP_HIT dirn:10:771634537
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:07 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3116752645459573617e

cdn.myxypt.com/8afd86ba/21/04/23c809545d3df1a4ed449665302f7ab89ea1435f.jpg

58.215.157.212

200 OK

276 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/23c809545d3df1a4ed449665302f7ab89ea1435f.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:16:37], baseline, precision 8, 631x410, components 3\012- data
Size
276 kB (275736 bytes)
Hash
0a6aede4260052fa1b37a234a4ff8ccb
09aa78648d4fb133de1f9e167034fb65a45ef524
4a302f6c8a826b0cc611e240de400174360ee1c89b40f1292035a85ff9675d4d

HTTP Headers

GET /8afd86ba/21/04/23c809545d3df1a4ed449665302f7ab89ea1435f.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 275736
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A4092D1F2934364F4376
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "0A6AEDE4260052FA1B37A234A4FF8CCB"
Last-Modified: Tue, 06 Apr 2021 06:20:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15609781611922869451
x-oss-storage-class: Standard
Content-MD5: Cmrt5CYAUvobN6I0pP+Myw==
x-oss-server-time: 81
Ali-Swift-Global-Savetime: 1675207689
Via: cache48.l2cn3036[105,118,200-0,M], cache8.l2cn3036[119,0], cache8.cn2175[0,0,200-0,H], cache32.cn2175[3,0]
Age: 56857
X-Cache: HIT TCP_HIT dirn:9:322905960
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3416752645461077691e

cdn.myxypt.com/8afd86ba/21/09/a879477bf50ae7bb93093937976125413a4a01b6.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

274 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/a879477bf50ae7bb93093937976125413a4a01b6.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 614x550, components 3\012- data
Size
274 kB (274340 bytes)
Hash
c10bf0c10f8b7d12999328f55ddb08e2
12f4d64af2ddc514773ff9be6c6441021e005ba8
d35e34eb463276e0b439df058a0c4b1ab537284ac54e23be94ca1f932cc6d3a2

HTTP Headers

GET /8afd86ba/21/09/a879477bf50ae7bb93093937976125413a4a01b6.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 274340
Connection: keep-alive
Date: Tue, 31 Jan 2023 20:05:49 GMT
x-oss-request-id: 63D9749D8ADC673130FE274D
x-oss-cdn-auth: success
ETag: "FC629B22B9FFFFCF6F9990BE249E4DA8"
Last-Modified: Wed, 15 Sep 2021 01:45:38 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 98
x-oss-hash-crc64ecma: 2339470649530551973
Ali-Swift-Global-Savetime: 1675195549
Via: cache49.l2cn3036[124,131,200-0,M], cache61.l2cn3036[132,0], cache28.cn2175[0,0,200-0,H], cache35.cn2175[3,0]
Age: 68997
X-Cache: HIT TCP_HIT dirn:11:87006260
X-Swift-SaveTime: Tue, 31 Jan 2023 20:05:49 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645461168597e

cdn.myxypt.com/8afd86ba/21/04/aab9f9fac318a6732d0db69759e5700e3960d34e.jpg

58.215.157.212

200 OK

34 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/aab9f9fac318a6732d0db69759e5700e3960d34e.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:09 15:12:10], baseline, precision 8, 334x211, components 3\012- data
Size
34 kB (34505 bytes)
Hash
89d7ea0ca96488b8ca6eb290ea60a630
e2309efa406ba420d782b76eeba185d78f0d667c
2300c1110d901d3879a03f1af450c9da682214ae07af7a67474560c32191e20a

HTTP Headers

GET /8afd86ba/21/04/aab9f9fac318a6732d0db69759e5700e3960d34e.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 34505
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40AC0503937330AD425
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "89D7EA0CA96488B8CA6EB290EA60A630"
Last-Modified: Fri, 09 Apr 2021 07:15:17 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1881183054115472451
x-oss-storage-class: Standard
Content-MD5: idfqDKlkiLjKbrKQ6mCmMA==
x-oss-server-time: 180
Ali-Swift-Global-Savetime: 1675207690
Via: cache77.l2cn3036[191,191,200-0,M], cache34.l2cn3036[192,0], cache42.cn2175[0,0,200-0,H], cache30.cn2175[1,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:10:711627370
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3216752645464364727e

cdn.myxypt.com/8afd86ba/21/04/345cf8bd3c93d50ca5be007e37910bfc0e8363f7.jpg

58.215.157.212

200 OK

33 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/345cf8bd3c93d50ca5be007e37910bfc0e8363f7.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:09 15:12:51], baseline, precision 8, 334x211, components 3\012- data
Size
33 kB (32745 bytes)
Hash
8283b55cfcc414b1d5ce0248dcb9947b
d91497d505ba388bbb62954e790cc3252fb045e9
42a6b409f259956b9172ca17753f82561237a3f5dcf0defc89cd71bc7ed8fe8b

HTTP Headers

GET /8afd86ba/21/04/345cf8bd3c93d50ca5be007e37910bfc0e8363f7.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 32745
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A5EA59C3532E415ED
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "8283B55CFCC414B1D5CE0248DCB9947B"
Last-Modified: Fri, 09 Apr 2021 07:15:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 18040557891968336110
x-oss-storage-class: Standard
Content-MD5: goO1XPzEFLHVzgJI3LmUew==
x-oss-server-time: 99
Ali-Swift-Global-Savetime: 1675207690
Via: cache53.l2cn3036[122,121,200-0,M], cache16.l2cn3036[122,0], cache1.cn2175[0,0,200-0,H], cache29.cn2175[1,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:9:20029421
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3116752645465384745e

cdn.myxypt.com/8afd86ba/21/04/e443603368656d8f0bec3e36c61969b56033f5ee.jpg

58.215.157.212

200 OK

200 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/e443603368656d8f0bec3e36c61969b56033f5ee.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:18:31], baseline, precision 8, 631x410, components 3\012- data
Size
200 kB (199459 bytes)
Hash
82c4053bbd6f3df3465d8e49498c11e8
0f20a43e616a7bea3f7ebba506e34a3c208d4157
7d0c5d1b46688e125d550878aa47256cb07ab5eb6b8b1cadef9f64632ee46dc0

HTTP Headers

GET /8afd86ba/21/04/e443603368656d8f0bec3e36c61969b56033f5ee.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 199459
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A2336C43832CCBAE8
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "82C4053BBD6F3DF3465D8E49498C11E8"
Last-Modified: Tue, 06 Apr 2021 06:21:00 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7335306365674054657
x-oss-storage-class: Standard
Content-MD5: gsQFO71vPfNGXY5JSYwR6A==
x-oss-server-time: 188
Ali-Swift-Global-Savetime: 1675207690
Via: cache45.l2cn3036[203,215,200-0,M], cache53.l2cn3036[217,0], cache24.cn2175[0,0,200-0,H], cache31.cn2175[2,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:10:1304215155
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3316752645466046294e

cdn.myxypt.com/8afd86ba/21/04/d7611b8c471e6964aa0bb2a3cec2a521b57b6a09.png

58.215.157.212

200 OK

6.3 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/d7611b8c471e6964aa0bb2a3cec2a521b57b6a09.png
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
PNG image data, 68 x 58, 8-bit/color RGBA, non-interlaced\012- data
Size
6.3 kB (6297 bytes)
Hash
c166e5c249ac34faca057ab5cf214adf
7236b877e688545be67a78c7a91ebe7724349dbd
4abcccc59a005b4edd3faedbb6099502db11685838c8e96191cf2148861071b2

HTTP Headers

GET /8afd86ba/21/04/d7611b8c471e6964aa0bb2a3cec2a521b57b6a09.png HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 6297
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:07 GMT
x-oss-request-id: 63D9A407EEC74234305739A5
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "C166E5C249AC34FACA057AB5CF214ADF"
Last-Modified: Fri, 02 Apr 2021 01:33:31 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17328630132474725325
x-oss-storage-class: Standard
Content-MD5: wWblwkmsNPrKBXq1zyFK3w==
x-oss-server-time: 88
Ali-Swift-Global-Savetime: 1675207687
Via: cache3.l2cn3036[116,116,200-0,M], cache20.l2cn3036[117,0], cache20.cn2175[0,0,200-0,H], cache35.cn2175[2,0]
Age: 56859
X-Cache: HIT TCP_HIT dirn:10:1379228705
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:07 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645466471675e

cdn.myxypt.com/8afd86ba/21/04/ef4f5065cdd803a7e7b65c3fc83b6e75d8c080f5.png

58.215.157.212

200 OK

6.0 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/ef4f5065cdd803a7e7b65c3fc83b6e75d8c080f5.png
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
PNG image data, 64 x 58, 8-bit/color RGBA, non-interlaced\012- data
Size
6.0 kB (6011 bytes)
Hash
14af234331e99134aad1203a4424df09
cf002ae74830866eb688473c141e6e1ab71adea2
db1954009d370c3fbc90cbff8dc76359f018e26b92fffe9355c0ba8efe65c95d

HTTP Headers

GET /8afd86ba/21/04/ef4f5065cdd803a7e7b65c3fc83b6e75d8c080f5.png HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 6011
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:08 GMT
x-oss-request-id: 63D9A408A1602B383964B9C3
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "14AF234331E99134AAD1203A4424DF09"
Last-Modified: Fri, 02 Apr 2021 01:33:31 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11379817493674562155
x-oss-storage-class: Standard
Content-MD5: FK8jQzHpkTSq0SA6RCTfCQ==
x-oss-server-time: 80
Ali-Swift-Global-Savetime: 1675207688
Via: cache13.l2cn3036[106,106,200-0,M], cache43.l2cn3036[108,0], cache29.cn2175[0,0,200-0,H], cache32.cn2175[2,0]
Age: 56858
X-Cache: HIT TCP_HIT dirn:10:603620234
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:08 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3416752645466368849e

cdn.myxypt.com/8afd86ba/21/04/571526af148317c9d23118771e95cced9180fb4c.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

27 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/571526af148317c9d23118771e95cced9180fb4c.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x199, components 3\012- data
Size
27 kB (26712 bytes)
Hash
a17bfe65f723201e715528006fc3a6c0
65d95647dae37c181464d81cde3b4107890b9add
f6aa664c27ef8185676499ac66ef6d1cf701e0084a37d73c42be2a4cc17eab48

HTTP Headers

GET /8afd86ba/21/04/571526af148317c9d23118771e95cced9180fb4c.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 26712
Connection: keep-alive
Date: Tue, 31 Jan 2023 11:54:21 GMT
x-oss-request-id: 63D9016D2851783937C0AFC1
x-oss-cdn-auth: success
ETag: "7B03E197E52CDBD4781568BCBFE0F569"
Last-Modified: Tue, 06 Apr 2021 07:05:08 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 123
x-oss-hash-crc64ecma: 3085602283244814644
Ali-Swift-Global-Savetime: 1675166061
Via: cache27.l2cn3036[0,0,200-0,H], cache55.l2cn3036[1,0], cache40.cn2175[0,0,200-0,H], cache30.cn2175[1,0]
Age: 98485
X-Cache: HIT TCP_HIT dirn:10:129775365
X-Swift-SaveTime: Tue, 31 Jan 2023 22:49:40 GMT
X-Swift-CacheTime: 2552681
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3216752645467105369e

cdn.myxypt.com/8afd86ba/21/04/508c1631a63458403c9e13a808792dea694cfe05.jpg

58.215.157.212

200 OK

568 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/508c1631a63458403c9e13a808792dea694cfe05.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:08 14:16:26], baseline, precision 8, 1920x700, components 3\012- data
Size
568 kB (568203 bytes)
Hash
351f304c1b11fd7c4aa8ddcf530b8117
fd4010f7e985057d9a64eada43435e99ed03bc2b
019cb32fbc400248169d42da7611ca696201989e1105afbacc47b18c619ca373

HTTP Headers

GET /8afd86ba/21/04/508c1631a63458403c9e13a808792dea694cfe05.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 568203
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:07 GMT
x-oss-request-id: 63D9A40744A24C3738D058C2
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "351F304C1B11FD7C4AA8DDCF530B8117"
Last-Modified: Thu, 08 Apr 2021 06:17:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8960606722802089220
x-oss-storage-class: Standard
Content-MD5: NR8wTBsR/XxKqN3PUwuBFw==
x-oss-server-time: 209
Ali-Swift-Global-Savetime: 1675207687
Via: cache55.l2cn3036[230,262,200-0,M], cache18.l2cn3036[263,0], cache18.cn2175[0,0,200-0,H], cache28.cn2175[4,0]
Age: 56858
X-Cache: HIT TCP_HIT dirn:9:740451970
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:07 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3016752645459196608e

cdn.myxypt.com/8afd86ba/21/09/32e1a05fcd2532eb2f3d2163c7f9e9eae5ba3db1.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

230 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/32e1a05fcd2532eb2f3d2163c7f9e9eae5ba3db1.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 614x550, components 3\012- data
Size
230 kB (230194 bytes)
Hash
b10f175bc768a6f32c844880467317a3
b16598952b32d198ef60da632408e0d3d873167f
81113218552c8d723fc8d3b7150a69b26c51edb0c63b17992780337d1b0d9b60

HTTP Headers

GET /8afd86ba/21/09/32e1a05fcd2532eb2f3d2163c7f9e9eae5ba3db1.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 230194
Connection: keep-alive
Date: Tue, 31 Jan 2023 12:51:34 GMT
x-oss-request-id: 63D90ED6528A2F393252B514
x-oss-cdn-auth: success
ETag: "F0C286072878D9C1C1D8E04F2F393CF8"
Last-Modified: Wed, 15 Sep 2021 01:19:35 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 158
x-oss-hash-crc64ecma: 4205431939455724261
Ali-Swift-Global-Savetime: 1675169494
Via: cache14.l2cn3036[170,171,200-0,M], cache43.l2cn3036[172,0], cache8.cn2175[0,84,200-0,H], cache29.cn2175[91,0]
Age: 95052
X-Cache: HIT TCP_HIT dirn:9:322870401
X-Swift-SaveTime: Tue, 31 Jan 2023 12:51:34 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3116752645468235360e

cdn.myxypt.com/8afd86ba/21/04/55db1b97ee251f073076fc2f5b30fff2fb5824e4.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

48 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/55db1b97ee251f073076fc2f5b30fff2fb5824e4.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x299, components 3\012- data
Size
48 kB (47569 bytes)
Hash
56382f9d8bc109a90576573891f5721d
8f2185224c9876e27f62d26fbfa8d6d8942bec2e
2fb2f25f628a22d80b86bdce1549062ef3d2804fdea047e7e57dbfa061f960aa

HTTP Headers

GET /8afd86ba/21/04/55db1b97ee251f073076fc2f5b30fff2fb5824e4.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 47569
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40A8873C533344D15F7
x-oss-cdn-auth: success
ETag: "3982A66F02B1A96057B817D9DD23EDA9"
Last-Modified: Thu, 08 Apr 2021 05:14:10 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 211
x-oss-hash-crc64ecma: 16125237478134017230
Ali-Swift-Global-Savetime: 1675207690
Via: cache2.l2cn3036[234,234,200-0,M], cache76.l2cn3036[235,0], cache45.cn2175[0,0,200-0,H], cache31.cn2175[1,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:11:693965351
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3316752645469967151e

cdn.myxypt.com/8afd86ba/21/04/a92c8187dc4b69833daac21260b0897d9513240c.jpg

58.215.157.212

200 OK

91 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/a92c8187dc4b69833daac21260b0897d9513240c.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:13:10], baseline, precision 8, 383x460, components 3\012- data
Size
91 kB (90852 bytes)
Hash
fa1b74b671bb2014714fd6df307eb0af
5b085a1b9962e3e48c8fdf145f3e9025dad0f806
523de736e0b04741f5580a4b4bb6037d49ed1651806d51d35efab5ac50e6b200

HTTP Headers

GET /8afd86ba/21/04/a92c8187dc4b69833daac21260b0897d9513240c.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 90852
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:10 GMT
x-oss-request-id: 63D9A40AB5B388363764164C
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "FA1B74B671BB2014714FD6DF307EB0AF"
Last-Modified: Tue, 06 Apr 2021 06:13:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2416870572648010846
x-oss-storage-class: Standard
Content-MD5: +ht0tnG7IBRxT9bfMH6wrw==
x-oss-server-time: 76
Ali-Swift-Global-Savetime: 1675207690
Via: cache78.l2cn3036[97,97,200-0,M], cache3.l2cn3036[98,0], cache5.cn2175[0,0,200-0,H], cache35.cn2175[2,0]
Age: 56856
X-Cache: HIT TCP_HIT dirn:9:257963091
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:10 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645470012497e

cdn.myxypt.com/8afd86ba/21/09/58638614d137c4dceca63d5322b7df10d4602902.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

296 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/58638614d137c4dceca63d5322b7df10d4602902.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 614x550, components 3\012- data
Size
296 kB (296415 bytes)
Hash
44d5d7297ffb5397c766b4884f3ad082
ecaafb73c45eb1c73346a6f15dd6e1a113d26274
1d0800ab597d41aededc7546ed4af9a3acac7c2a536515284c33d6bf4ec03278

HTTP Headers

GET /8afd86ba/21/09/58638614d137c4dceca63d5322b7df10d4602902.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 296415
Connection: keep-alive
Date: Tue, 31 Jan 2023 09:10:40 GMT
x-oss-request-id: 63D8DB10EBE1D338387E257B
x-oss-cdn-auth: success
ETag: "D32CA29ED54161899B0645390A2F29A6"
Last-Modified: Wed, 15 Sep 2021 01:44:22 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 194
x-oss-hash-crc64ecma: 1512550911059804446
Ali-Swift-Global-Savetime: 1675156240
Via: cache25.l2cn3036[220,250,200-0,M], cache23.l2cn3036[251,0], cache18.cn2175[0,0,200-0,H], cache32.cn2175[3,0]
Age: 108307
X-Cache: HIT TCP_HIT dirn:9:745106228
X-Swift-SaveTime: Tue, 31 Jan 2023 09:10:40 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3416752645469991649e

cdn.myxypt.com/8afd86ba/21/04/162847e367d3a48bbd6d86376a4636c320c12758.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

22 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/162847e367d3a48bbd6d86376a4636c320c12758.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x199, components 3\012- data
Size
22 kB (21716 bytes)
Hash
2f242ce65963611b499c9832b1a89e42
20db1447855237d27bca2bf2f77b5bb0e1fb69a0
a9bfd123d580e966a11e6c5943f25f7ee9126fefc68e1983cc61faadf2131abc

HTTP Headers

GET /8afd86ba/21/04/162847e367d3a48bbd6d86376a4636c320c12758.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 21716
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A409EAC5D2343814DF35
x-oss-cdn-auth: success
ETag: "3BECB5F9FA7E6EC08B447EDEF02397DA"
Last-Modified: Tue, 06 Apr 2021 07:02:23 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 116
x-oss-hash-crc64ecma: 3847218816774333012
Ali-Swift-Global-Savetime: 1675207689
Via: cache47.l2cn3036[135,136,200-0,M], cache6.l2cn3036[136,0], cache12.cn2175[0,0,200-0,H], cache28.cn2175[1,0]
Age: 56858
X-Cache: HIT TCP_HIT dirn:10:840842452
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3016752645470278982e

cdn.myxypt.com/8afd86ba/21/04/925282659f9942663f4c9ccbce3df2dd963b5d60.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

12 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/925282659f9942663f4c9ccbce3df2dd963b5d60.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x199, components 3\012- data
Size
12 kB (11792 bytes)
Hash
c6afc0d606a350374bc902ece5c2f8cb
6e895a9369c591f4fe6b40ff97bc874fdd6af22f
ea14336f5f75ac4a9377d7f6d9a62bef316884cb4b15581c302da344b3666e2b

HTTP Headers

GET /8afd86ba/21/04/925282659f9942663f4c9ccbce3df2dd963b5d60.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 11792
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A409F062343332B5CDFD
x-oss-cdn-auth: success
ETag: "40B2D6455A5520D82B67021ADB74F8AF"
Last-Modified: Tue, 06 Apr 2021 07:02:52 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 74
x-oss-hash-crc64ecma: 8804495567987608935
Ali-Swift-Global-Savetime: 1675207689
Via: cache2.l2cn3036[91,91,200-0,M], cache63.l2cn3036[92,0], cache28.cn2175[0,0,200-0,H], cache29.cn2175[1,0]
Age: 56858
X-Cache: HIT TCP_HIT dirn:11:89305628
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3116752645472096164e

cdn.myxypt.com/8afd86ba/21/04/07a4e1c4721a32922088e65dd3cbf61888538fc7.jpg

58.215.157.212

200 OK

44 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/07a4e1c4721a32922088e65dd3cbf61888538fc7.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:22:30], baseline, precision 8, 119x119, components 3\012- data
Size
44 kB (44230 bytes)
Hash
0994eb66f03441f2df5a16e9fbf2a81f
10f4fd8f57e5c1a2b912665a477d9f0014f1499d
4cd43925ccd77b6257f70a6069d622022d6c69753f906f238309e390e3f3209a

HTTP Headers

GET /8afd86ba/21/04/07a4e1c4721a32922088e65dd3cbf61888538fc7.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 44230
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:07 GMT
x-oss-request-id: 63D9A407802E91323676F879
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "0994EB66F03441F2DF5A16E9FBF2A81F"
Last-Modified: Tue, 06 Apr 2021 06:22:46 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12306590161544360567
x-oss-storage-class: Standard
Content-MD5: CZTrZvA0QfLfWhbp+/KoHw==
x-oss-server-time: 97
Ali-Swift-Global-Savetime: 1675207687
Via: cache26.l2cn3036[117,117,200-0,M], cache2.l2cn3036[118,0], cache33.cn2175[0,0,200-0,H], cache31.cn2175[1,0]
Age: 56860
X-Cache: HIT TCP_HIT dirn:10:702464365
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:07 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3316752645472667850e

cdn.myxypt.com/8afd86ba/21/09/7fad1471380bd5e3db896d90e7fc4e4862d80e96.png

58.215.157.212

200 OK

27 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/7fad1471380bd5e3db896d90e7fc4e4862d80e96.png
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
PNG image data, 346 x 104, 8-bit/color RGBA, non-interlaced\012- data
Size
27 kB (27311 bytes)
Hash
1a201e338d72d0d3d7f43c48cb7bb27c
0c32204a59764d7b4c78a5e75dd552cf3f6c61af
a79f16585e71339495e78d7d369efd7c849ae5e1ad6964f2fac82b81c99665ef

HTTP Headers

GET /8afd86ba/21/09/7fad1471380bd5e3db896d90e7fc4e4862d80e96.png HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 27311
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:03 GMT
x-oss-request-id: 63D9A403AB8D9034317FB210
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "1A201E338D72D0D3D7F43C48CB7BB27C"
Last-Modified: Mon, 13 Sep 2021 00:54:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11330764556811669683
x-oss-storage-class: Standard
Content-MD5: GiAeM41y0NPX9DxIy3uyfA==
x-oss-server-time: 83
Ali-Swift-Global-Savetime: 1675207683
Via: cache8.l2cn3036[94,94,200-0,M], cache45.l2cn3036[95,0], cache34.cn2175[0,0,200-0,H], cache35.cn2175[2,0]
Age: 56864
X-Cache: HIT TCP_HIT dirn:9:32242770
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:03 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645472723128e

cdn.myxypt.com/8afd86ba/21/09/b5ecddc581f911042315d4ce9882b098bd7f36a2.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800

58.215.157.212

200 OK

304 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/09/b5ecddc581f911042315d4ce9882b098bd7f36a2.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 614x550, components 3\012- data
Size
304 kB (303636 bytes)
Hash
c0876a7010d146f18e6121c68d5be503
405913ec556de9c52408fe4474364cb0ce0ab4b4
5d71ecadf4ab39fb65d0741cbe3845cff687540b5abda71625eb26121afd0f1a

HTTP Headers

GET /8afd86ba/21/09/b5ecddc581f911042315d4ce9882b098bd7f36a2.jpg?x-oss-process=image/resize,m_lfit,h_800,w_800 HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 303636
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:08 GMT
x-oss-request-id: 63D9A40855A1A638384209A7
x-oss-cdn-auth: success
ETag: "8AB71CBCAF8E4BF0F902486F3600BD19"
Last-Modified: Wed, 15 Sep 2021 01:48:11 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 123
x-oss-hash-crc64ecma: 4082578355382204456
Ali-Swift-Global-Savetime: 1675207688
Via: cache38.l2cn3036[146,152,200-0,M], cache19.l2cn3036[153,0], cache2.cn2175[0,0,200-0,H], cache32.cn2175[2,0]
Age: 56859
X-Cache: HIT TCP_HIT dirn:9:113686030
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:08 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3416752645472732208e

cdn.myxypt.com/8afd86ba/21/04/a54c4b0bee4f54df0fccb8afa231c42c52516f4c.png

58.215.157.212

200 OK

6.5 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/a54c4b0bee4f54df0fccb8afa231c42c52516f4c.png
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
PNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced\012- data
Size
6.5 kB (6506 bytes)
Hash
36f11ca6428e13f3bcda74b5cb647b8d
ddbeaab1c3f6987acfc76e787e9be0d466e27bde
856beadbf82e19ba2998205fd011dac8ab271f086b1083ff02a031ef99821df4

HTTP Headers

GET /8afd86ba/21/04/a54c4b0bee4f54df0fccb8afa231c42c52516f4c.png HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 6506
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:08 GMT
x-oss-request-id: 63D9A4087262F43631BBCF7E
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "36F11CA6428E13F3BCDA74B5CB647B8D"
Last-Modified: Fri, 02 Apr 2021 01:33:31 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4150162434125485804
x-oss-storage-class: Standard
Content-MD5: NvEcpkKOE/O82nS1y2R7jQ==
x-oss-server-time: 73
Ali-Swift-Global-Savetime: 1675207688
Via: cache41.l2cn3036[93,93,200-0,M], cache53.l2cn3036[94,0], cache28.cn2175[0,0,200-0,H], cache28.cn2175[1,0]
Age: 56859
X-Cache: HIT TCP_HIT dirn:11:89282518
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:08 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3016752645473071648e

cdn.myxypt.com/8afd86ba/21/04/b0f68e3554b6c10f350062b348024a11b0350e3c.jpg

58.215.157.212

200 OK

184 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/b0f68e3554b6c10f350062b348024a11b0350e3c.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:16:05], baseline, precision 8, 631x410, components 3\012- data
Size
184 kB (183952 bytes)
Hash
c1ce3eb54814675a080cdb92311696c2
08eadab5a3628d5042c05f94f665b06989cca972
58f125e5e3989849f2af67f93f5222f1e08cfc794e6c98ca07dc1fca31e4ca47

HTTP Headers

GET /8afd86ba/21/04/b0f68e3554b6c10f350062b348024a11b0350e3c.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 183952
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A409BA82AD373761C6A4
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "C1CE3EB54814675A080CDB92311696C2"
Last-Modified: Tue, 06 Apr 2021 06:19:55 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16515372274863890604
x-oss-storage-class: Standard
Content-MD5: wc4+tUgUZ1oIDNuSMRaWwg==
x-oss-server-time: 70
Ali-Swift-Global-Savetime: 1675207689
Via: cache56.l2cn3036[91,111,200-0,M], cache80.l2cn3036[112,0], cache31.cn2175[0,0,200-0,H], cache29.cn2175[2,0]
Age: 56858
X-Cache: HIT TCP_HIT dirn:10:767836877
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3116752645474956917e

cdn.myxypt.com/8afd86ba/21/04/51bbc4fc704a504819818ba8e5f84bc5763bb95d.png

58.215.157.212

200 OK

6.9 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/51bbc4fc704a504819818ba8e5f84bc5763bb95d.png
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data
Size
6.9 kB (6948 bytes)
Hash
7cad7abc1e645ad915987dd075df19d3
41c9f05b4e5ab9975b029abb7847e843eb462e64
926415f2d291d62fc42b17fc0ffe1e18e4d0ecc24fe1a2725d4fdc4cfe7b76d2

HTTP Headers

GET /8afd86ba/21/04/51bbc4fc704a504819818ba8e5f84bc5763bb95d.png HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 6948
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:07 GMT
x-oss-request-id: 63D9A407C428EB3036794EF2
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "7CAD7ABC1E645AD915987DD075DF19D3"
Last-Modified: Fri, 02 Apr 2021 01:33:31 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14564813445119787592
x-oss-storage-class: Standard
Content-MD5: fK16vB5kWtkVmH3Qdd8Z0w==
x-oss-server-time: 90
Ali-Swift-Global-Savetime: 1675207687
Via: cache36.l2cn3036[109,109,200-0,M], cache65.l2cn3036[110,0], cache7.cn2175[0,0,200-0,H], cache35.cn2175[2,0]
Age: 56860
X-Cache: HIT TCP_HIT dirn:11:1160710267
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:07 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3716752645475383770e

cdn.myxypt.com/8afd86ba/21/04/03155f4a01d98c170fc9c85c6f8760421ee108d4.jpg

58.215.157.212

200 OK

900 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/03155f4a01d98c170fc9c85c6f8760421ee108d4.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:15 10:29:36], baseline, precision 8, 1920x700, components 3\012- data
Size
900 kB (900454 bytes)
Hash
a3003a93cb676e01683f89e61ef7385a
d31138763212459b78cd04549373adad8bdca994
08bc30bd7116f3034dd4ddc789c5b0d7e643a2f4b4c35badbb3601fcd0c9e8c4

HTTP Headers

GET /8afd86ba/21/04/03155f4a01d98c170fc9c85c6f8760421ee108d4.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 900454
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:07 GMT
x-oss-request-id: 63D9A407EBE1D339364C102E
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "A3003A93CB676E01683F89E61EF7385A"
Last-Modified: Thu, 15 Apr 2021 02:31:31 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2008323149160625335
x-oss-storage-class: Standard
Content-MD5: owA6k8tnbgFoP4nmHvc4Wg==
x-oss-server-time: 79
Ali-Swift-Global-Savetime: 1675207687
Via: cache45.l2cn3036[91,116,200-0,M], cache61.l2cn3036[117,0], cache4.cn2175[0,1,200-0,H], cache30.cn2175[3,0]
Age: 56860
X-Cache: HIT TCP_HIT dirn:11:1537113081
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:07 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3216752645470006000e

cdn.myxypt.com/8afd86ba/21/04/e22a0e84059f20919229461aecfeab8745e57f79.jpg

58.215.157.212

200 OK

263 kB

URL HTTP/1.1
cdn.myxypt.com/8afd86ba/21/04/e22a0e84059f20919229461aecfeab8745e57f79.jpg
IP
58.215.157.212:0
ASN
#23650 AS Number for CHINANET jiangsu province backbone

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:06 14:15:35], baseline, precision 8, 631x410, components 3\012- data
Size
263 kB (263149 bytes)
Hash
a98c6d320c72b06cee5fc358d2e9cab7
e160a41573c0a49bd17f68bc7bb586af279237dd
bca939661a207fef8c02e8da613d8ec9ff0e52a0f12cd4ebde9f9c6c92cc1aa7

HTTP Headers

GET /8afd86ba/21/04/e22a0e84059f20919229461aecfeab8745e57f79.jpg HTTP/1.1
Host: cdn.myxypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hir.berfinturizm.com/

HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 263149
Connection: keep-alive
Date: Tue, 31 Jan 2023 23:28:09 GMT
x-oss-request-id: 63D9A409C428EB3835BB5BF2
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "A98C6D320C72B06CEE5FC358D2E9CAB7"
Last-Modified: Tue, 06 Apr 2021 06:19:41 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 550380394184624928
x-oss-storage-class: Standard
Content-MD5: qYxtMgxysGzuX8NY0unKtw==
x-oss-server-time: 201
Ali-Swift-Global-Savetime: 1675207689
Via: cache9.l2cn3036[224,243,200-0,M], cache13.l2cn3036[244,0], cache5.cn2175[0,1,200-0,H], cache31.cn2175[3,0]
Age: 56859
X-Cache: HIT TCP_HIT dirn:10:221995901
X-Swift-SaveTime: Tue, 31 Jan 2023 23:28:09 GMT
X-Swift-CacheTime: 2592000
Cache-Control: public,max-age=86400
Timing-Allow-Origin: *
EagleId: 3ad79d3316752645482351898e

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (67)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP