erotichorizon.com/2010/11
142.234.25.180301 Moved Permanently 0 B URL HTTP/1.1 erotichorizon.com/2010/11
IP 142.234.25.180:0
ASN #395954 LEASEWEB-USA-LAX-11
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2010/11 HTTP/1.1
Host: erotichorizon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 23:45:32 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.erotichorizon.com/2010/11
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5250
Expires: Sat, 14 Jan 2023 01:13:07 GMT
Date: Fri, 13 Jan 2023 23:45:37 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 4826412809ac0196f13ac1ef44e357e5
793c81d2f90cfaa245dc89fc7a6090cbee846b26
11be07342f3aa4e059ddc3149337895d55bc71e30ad045dc72e4cca4be4c6951
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11BE07342F3AA4E059DDC3149337895D55BC71E30AD045DC72E4CCA4BE4C6951"
Last-Modified: Wed, 11 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8528
Expires: Sat, 14 Jan 2023 02:07:45 GMT
Date: Fri, 13 Jan 2023 23:45:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 22:48:52 GMT
content-type: application/json
age: 3405
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 0f4ecf4f26be1ba09e61135b1b488bf4
f16b8277e00033bc990a8bcce54b693cb3c87d62
3018c2a228f0a894d217e8e8b0b8dd060527f06879cd2f469bac6c8766acbbf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6168
Expires: Sat, 14 Jan 2023 01:28:25 GMT
Date: Fri, 13 Jan 2023 23:45:37 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Q+1FXcUulkSzy0n0rt8AnNK8W6xbJzpotGLq7hy7N31JDcYCgcPPjmkbe0aqwEZ0668WHBle7do=
x-amz-request-id: 7G6Z112NG35BCN3K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 22:54:42 GMT
age: 3055
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:37 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.erotichorizon.com/2010/11
142.234.25.180200 OK 785 B URL HTTP/1.1 www.erotichorizon.com/2010/11
IP 142.234.25.180:0
ASN #395954 LEASEWEB-USA-LAX-11
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash 11809697727ba8dc25440ff5cfda98d6
a23f1f20b71bb0c4b41d3b29a81b247cb961ced8
6267013ac5c7c8b174a1409c69e4c398dcfc9dfb3340c5153bf302e1b9153b34
GET /2010/11 HTTP/1.1
Host: www.erotichorizon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 23:45:32 GMT
Content-Type: text/html
Content-Length: 785
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 23:17:25 GMT
age: 1692
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.erotichorizon.com/tj.js
142.234.25.180200 OK 520 B URL HTTP/1.1 www.erotichorizon.com/tj.js
IP 142.234.25.180:0
ASN #395954 LEASEWEB-USA-LAX-11
File type ASCII text, with CRLF line terminators
Hash 7358a04de46471b05c92e003b57988e5
65567a01ef78543f5a008d45e10652befa6527bb
8e10fd900c9df750cfc2536009e66e074c6ec58a05857eebc388ea6e30ca0f73
GET /tj.js HTTP/1.1
Host: www.erotichorizon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.erotichorizon.com/2010/11
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 23:45:33 GMT
Content-Type: application/x-javascript
Content-Length: 520
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2907
Cache-Control: max-age=122975
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:45:38 GMT
Etag: "63c11f26-1d7"
Expires: Sun, 15 Jan 2023 09:55:13 GMT
Last-Modified: Fri, 13 Jan 2023 09:06:46 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.erotichorizon.com/common.js
142.234.25.180200 OK 1.1 kB URL HTTP/1.1 www.erotichorizon.com/common.js
IP 142.234.25.180:0
ASN #395954 LEASEWEB-USA-LAX-11
File type HTML document, ASCII text, with very long lines (389), with CRLF line terminators
Hash 3b08372f4773c8e7854234aaef938077
b65315c1d4fc673034b770705bf00746f6028d72
da0eb85cdaddf869c83f127036841ec2f4ce694d949092f46afc01e23086bcd5
GET /common.js HTTP/1.1
Host: www.erotichorizon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.erotichorizon.com/2010/11
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 23:45:33 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
push.services.mozilla.com/
54.149.51.98101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.51.98:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fWWEkxLwfjLYQkD9uhXDIA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0bp/LUHxje/o5RG5aMFJNtc7UaI=
push.zhanzhang.baidu.com/push.js
180.101.212.103200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP 180.101.212.103:0
ASN #134770 CHINANET Jiangsu province Suzhou taihu IDC network
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.erotichorizon.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Fri, 13 Jan 2023 23:45:38 GMT
Etag: "4078521116"
Expires: Sat, 13 Jan 2024 23:45:38 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=6C41891840C7E22FEA64F4862211943E:FG=1; max-age=31536000; expires=Sat, 13-Jan-24 23:45:38 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 4e932894eed6d3accb03f5154669dafb
924c925b894853c163fb714e6e33711a0a98928f
86bdf6b9c4fec2b924646ec7d4ee78dc8dec26c7d429e2c50b1ac2b69c66eed6
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 17 Jan 2023 22:50:38 GMT
ETag: "924c925b894853c163fb714e6e33711a0a98928f"
Last-Modified: Fri, 13 Jan 2023 22:50:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1455
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 789201b92a20fac8-OSL
api.share.baidu.com/s.gif?l=http://www.erotichorizon.com/2010/11
182.61.201.93200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.erotichorizon.com/2010/11
IP 182.61.201.93:0
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.erotichorizon.com/2010/11 HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.erotichorizon.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Fri, 13 Jan 2023 23:45:38 GMT
ocsp.buypass.com/
23.33.119.18200 OK 1.7 kB IP 23.33.119.18:0
ASN #20940 Akamai International B.V.
Hash 20919a445e511f807e516580df50c2d0
306d865ed4466431e1d2d6249e956e512391c159
0e7053dec505b222d8ced51e7cd54994f017384a1ce1299322843fac80c8d438
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: cd6ed13f-dc8b-4422-abe7-f0e1858b598f
Content-Length: 1701
Date: Fri, 13 Jan 2023 23:45:39 GMT
Connection: keep-alive
www.erotichorizon.com/favicon.ico
142.234.25.180200 OK 1.2 kB URL HTTP/1.1 www.erotichorizon.com/favicon.ico
IP 142.234.25.180:0
ASN #395954 LEASEWEB-USA-LAX-11
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.erotichorizon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.erotichorizon.com/2010/11
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 23:45:34 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Wed, 18 Jan 2023 23:45:34 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12410
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 23:45:39 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12410
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 23:45:39 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12410
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 23:45:39 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3c35722c1c8a0b7a17b5a48a352aa64
4a939794eb33d9fb1b2cc56ca92f683a7d28e407
073d355bfc201c7feb4af2d1fac623fe7803f081c28467fa72b363074b0446a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2ecf6b3-8443-4b47-96b6-2695fa885f0d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7437
x-amzn-requestid: 0efc1457-5919-4244-9837-6e75d03ef1d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAd0F0poAMF6PA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7abe-24df70ad7e1811a744a7c9de;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezdnQ-2RPpSESm42QCywHIZf4AmanMmy2f19NcUhzQ-PRjsFQfLNkg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:43:23 GMT
age: 72136
etag: "4a939794eb33d9fb1b2cc56ca92f683a7d28e407"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44dfed94-1e38-4105-8fc7-5ab0ae001cdd.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44dfed94-1e38-4105-8fc7-5ab0ae001cdd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6df192c1053dbe9de29f29608e76dabe
b4a13de14cfeca5113726f4e08cf25285bcc35c8
c55be5facddfb5d5e3147ec009300761b1e60ac8c8f2ec066c9c91ef4832a02a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44dfed94-1e38-4105-8fc7-5ab0ae001cdd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7466
x-amzn-requestid: 9c471b0d-4db5-4571-9913-0c372594a239
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAczGcZoAMFZ0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ab8-249769bd788217df7c2b35d6;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:12:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wVx0mfwLJHF2SuJ1IXeMa147-LKz97Yb1BBte9P1o3-tu_9yI5Fv9w==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:22:49 GMT
age: 73370
etag: "b4a13de14cfeca5113726f4e08cf25285bcc35c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bdac0d6-7d4b-4e77-9fbc-5dcf33fc638a.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bdac0d6-7d4b-4e77-9fbc-5dcf33fc638a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8bdba0ca076fa791ec52ec0e4e027b4
12afab38222862ba209a98d987fef719e600b07b
e58f850d503e4f5b56823462127764a17da6440cd2d37a346ec17be7813e4e66
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bdac0d6-7d4b-4e77-9fbc-5dcf33fc638a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3497
x-amzn-requestid: 013f020a-c72e-485c-811a-4c572e630533
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAeIEcJoAMFplg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ac0-4fd3db5779b55eb408dbfaa9;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ci5ocOFweQjGoKKSDZ4-mwW61DdicIybKEvfHS6GcBLM-7AUTRQEKg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:43:23 GMT
age: 72136
etag: "12afab38222862ba209a98d987fef719e600b07b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00c5167d-4d7e-40fb-86f7-00c3c61a3d8a.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00c5167d-4d7e-40fb-86f7-00c3c61a3d8a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c06b9b83ee9dbe95b329ed2aa7590ea7
a0589b0ba31279219ed4e8143980dcb4badd81b0
78273bc40a06cf4805d7dc7cb3a9d10d11d61e31c5606f621b0f49ef6fa1fb6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00c5167d-4d7e-40fb-86f7-00c3c61a3d8a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7796
x-amzn-requestid: f429dfb8-42f9-40d0-88e5-8fff853da5b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAlCGu4IAMFUgg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7aec-2fc65c774e4f2caa72a3f63f;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uVHUlBIoLQmwXrFL9VTyUK5HpteNUOj9P4rtMYJlSWDfdQ5LZD3dpQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:43:23 GMT
age: 72136
etag: "a0589b0ba31279219ed4e8143980dcb4badd81b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mang.tiryakioyun.com/news/index.php
20.187.123.222200 OK 8.9 kB URL HTTP/2 mang.tiryakioyun.com/news/index.php
IP 20.187.123.222:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 0d8c8ae6dde551c2aa34c69554c151a0
dec8bf0d81b9847fd631ce58111a173e1f9c49e0
0e296ae422f4a7a50ab630d8d0979eb146cf4006df9b820bfa8d1ef9bd2010c9
GET /news/index.php HTTP/1.1
Host: mang.tiryakioyun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.erotichorizon.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 13 Jan 2023 23:45:39 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
x-country: NO
x-cache: BYPASS@waxm3g7zj00000f
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: 9f388939-cfb7-432e-a921-e9188736bb45
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eTw5QGZ6oAMFxQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b7c83b-4f9d5bfc30e5ee126333d54e;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 07:05:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KYm3Isapf3670wIeWAet4FHx_jth_lxT3hNJONRFP-fyEUdrxL4-8w==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 12:37:32 GMT
age: 40087
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?48667e817552d4e858dad2bea2b28d59
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?48667e817552d4e858dad2bea2b28d59
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (619)
Hash 010142a3cd5e8c54999296ecb4cfb46b
bb997514db54dce6c7842635e8bccdca9e50f37a
a9a713f162cddb2bb0ba0eccb33e72cddc68bb51840c9f1d012fca782f2860c5
GET /hm.js?48667e817552d4e858dad2bea2b28d59 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.erotichorizon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Fri, 13 Jan 2023 23:45:39 GMT
Etag: 66de22689cad14badbc27c689ba3012f
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A8C2F6F2771001BA; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?2107c53676d8b23c2b876048405f5d94
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?2107c53676d8b23c2b876048405f5d94
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (618)
Hash 2475b9933bc4f1b596025565fcafdb52
227fb14cd6c3c1f82c59f947e056664a5c223362
e4ebf17c92d8d554e386da1a0aa6dac5902c288d3430833c7714782412655728
GET /hm.js?2107c53676d8b23c2b876048405f5d94 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.erotichorizon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Content-Type: application/javascript
Date: Fri, 13 Jan 2023 23:45:39 GMT
Etag: e6f06101431394e6ac54c95eaa03e094
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=3973F57B16437EB0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1524765977&si=48667e817552d4e858dad2bea2b28d59&v=1.3.0&lv=1&sn=20694&r=0&ww=1280&u=http%3A%2F%2Fwww.erotichorizon.com%2F2010%2F11&tt=%E6%98%8C%E5%90%89%E6%88%8F%E5%81%8C%E7%BD%91%E7%BB%9C%E7%A7%91%E6%8A%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1524765977&si=48667e817552d4e858dad2bea2b28d59&v=1.3.0&lv=1&sn=20694&r=0&ww=1280&u=http%3A%2F%2Fwww.erotichorizon.com%2F2010%2F11&tt=%E6%98%8C%E5%90%89%E6%88%8F%E5%81%8C%E7%BD%91%E7%BB%9C%E7%A7%91%E6%8A%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1524765977&si=48667e817552d4e858dad2bea2b28d59&v=1.3.0&lv=1&sn=20694&r=0&ww=1280&u=http%3A%2F%2Fwww.erotichorizon.com%2F2010%2F11&tt=%E6%98%8C%E5%90%89%E6%88%8F%E5%81%8C%E7%BD%91%E7%BB%9C%E7%A7%91%E6%8A%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.erotichorizon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 13 Jan 2023 23:45:40 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=C632F787041F6CE7; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1960657499&si=2107c53676d8b23c2b876048405f5d94&v=1.3.0&lv=1&sn=20694&r=0&ww=1280&u=http%3A%2F%2Fwww.erotichorizon.com%2F2010%2F11&tt=%E6%98%8C%E5%90%89%E6%88%8F%E5%81%8C%E7%BD%91%E7%BB%9C%E7%A7%91%E6%8A%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1960657499&si=2107c53676d8b23c2b876048405f5d94&v=1.3.0&lv=1&sn=20694&r=0&ww=1280&u=http%3A%2F%2Fwww.erotichorizon.com%2F2010%2F11&tt=%E6%98%8C%E5%90%89%E6%88%8F%E5%81%8C%E7%BD%91%E7%BB%9C%E7%A7%91%E6%8A%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1960657499&si=2107c53676d8b23c2b876048405f5d94&v=1.3.0&lv=1&sn=20694&r=0&ww=1280&u=http%3A%2F%2Fwww.erotichorizon.com%2F2010%2F11&tt=%E6%98%8C%E5%90%89%E6%88%8F%E5%81%8C%E7%BD%91%E7%BB%9C%E7%A7%91%E6%8A%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.erotichorizon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 13 Jan 2023 23:45:40 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=6DA9C6F4AB10CC95; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f7141ea3daccc0785a1954c6b53efc65
db22a581c9d80e2c65a8c504217c99200b46a80b
7a5b7ec1c6c01e9f6154b46e877deafb143914d673f13e537eb0e439d08d42b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7A5B7EC1C6C01E9F6154B46E877DEAFB143914D673F13E537EB0E439D08D42B0"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14611
Expires: Sat, 14 Jan 2023 03:49:11 GMT
Date: Fri, 13 Jan 2023 23:45:40 GMT
Connection: keep-alive
z4a.net/images/2022/10/17/960-60-0.gif
104.21.234.235200 OK 198 kB URL HTTP/2 z4a.net/images/2022/10/17/960-60-0.gif
IP 104.21.234.235:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 198 kB (198523 bytes)
Hash 785b488cd18db17252bbc6e2e90d15fb
733a0183c583aaac34ffd5b1019d4a6ca25434c6
01982c41cd3165a9490c613aee197531461568a26d6691509076dfcb7c5438a4
GET /images/2022/10/17/960-60-0.gif HTTP/1.1
Host: z4a.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: image/gif
content-length: 198523
expires: Tue, 17 Oct 2023 07:38:56 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 7661205
last-modified: Mon, 17 Oct 2022 07:38:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xu8434GuVP6CZnYF2Vh69WIYkTZiUOoYitzbKtjUnrEaMnZb8JLhO7a7amxIJv%2FIpD4XAEJR6gmnqSyFumK%2Bws4yZeOf9xhFVy%2FtOIKbn3XOxKPy66Ueow6L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789201c88d3471e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
z4a.net/images/2023/01/11/YL960x60.gif
104.21.234.235200 OK 154 kB URL HTTP/2 z4a.net/images/2023/01/11/YL960x60.gif
IP 104.21.234.235:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 154 kB (153648 bytes)
Hash 9dba57370346d55925673f34e7b0f3bd
748523fa5829dd2d77a14fedc720fe784c9a5603
59d9f14d0e0b4d6083f3c7b7959fd39bd6d7279892e5d9969c8ae06eae7821d7
GET /images/2023/01/11/YL960x60.gif HTTP/1.1
Host: z4a.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: image/gif
content-length: 153648
expires: Thu, 11 Jan 2024 07:35:11 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 231030
last-modified: Wed, 11 Jan 2023 07:35:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sDPbbLuEHjQqMzttG595IJ740ruhGZXD1dz0NFO%2FhE4FGBGWQaRCJlc1YxjEq2oh2hKkNHZ34LWA%2B0KfX%2FSz8owBLUkc0ocuHAlPcepGwlpseTItDEIovCJT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789201c89d4471e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
z4a.net/images/2022/12/25/960x60.gif
104.21.234.235200 OK 169 kB URL HTTP/2 z4a.net/images/2022/12/25/960x60.gif
IP 104.21.234.235:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 169 kB (168777 bytes)
Hash 729a348b918f6435c5a38c8938a81587
f82b088813167cd5396bf74feedb4d8e35612dcf
cd580979947876de1d553e460e57bd4d7b432c682097f67c6249b667eb3c6726
GET /images/2022/12/25/960x60.gif HTTP/1.1
Host: z4a.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: image/gif
content-length: 168777
expires: Mon, 25 Dec 2023 05:57:09 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1705712
last-modified: Sun, 25 Dec 2022 05:57:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ggQae%2FAjlKEURIW2cT9y2F80DEys3laC4tZ70Pxe7A7GZi%2BwntaknqFST5fv2Tum%2FmZIFuAUj2tnD5GxDNRAo8CEAjgVJZA%2Bjhs%2FWrge6eX49%2FplajPD7Y9e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789201c88d3671e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
z4a.net/images/2022/10/17/960-60.gif
104.21.234.235200 OK 227 kB URL HTTP/2 z4a.net/images/2022/10/17/960-60.gif
IP 104.21.234.235:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 227 kB (226581 bytes)
Hash 68199d1d30e08ef7fba5ecc5af4d9548
3978b7653bca5c630c7b8d7aa06366d56eeaa7a1
7bbd0bd6239be8c6c5762c11822e2d4ca30cbabaae992af2e94cad2338c7de65
GET /images/2022/10/17/960-60.gif HTTP/1.1
Host: z4a.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: image/gif
content-length: 226581
expires: Thu, 02 Nov 2023 21:48:47 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 6227813
last-modified: Wed, 02 Nov 2022 21:48:48 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=92qbX3tAgm5zD81yMWemB%2FIBgJg53aY8JXQzQP7MdpttyKW3uFhbvCA5De%2FT4uaCWjNrTWyNGOmTvstVD3UM8KQNW0uc%2FBCZMWu%2F%2B74OHo3qBSVuOBVdstM5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789201c89d4171e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.mgydbn.xyz/template/m1938pc/images/1.gif
173.231.17.185200 OK 254 B URL HTTP/2 www.mgydbn.xyz/template/m1938pc/images/1.gif
IP 173.231.17.185:0
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /template/m1938pc/images/1.gif HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: image/gif
content-length: 254
last-modified: Fri, 07 May 2021 10:47:38 GMT
etag: "60951aca-fe"
expires: Sun, 12 Feb 2023 23:45:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
z4a.net/images/2022/10/16/960x60.gif
104.21.234.235200 OK 451 kB URL HTTP/2 z4a.net/images/2022/10/16/960x60.gif
IP 104.21.234.235:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 451 kB (451409 bytes)
Hash 0b79d0bdb91d08fe6e58da26af40a3d2
75f37e1aa43e309adbf1e6050c994e6216be694e
6acbe8704cafa212528bf8299e534e5b4906be6653ae25627bb8cd7ad356b9ae
GET /images/2022/10/16/960x60.gif HTTP/1.1
Host: z4a.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: image/gif
content-length: 451409
expires: Wed, 15 Nov 2023 22:49:37 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 5100964
last-modified: Tue, 15 Nov 2022 22:49:37 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pu8cOV1tkdJPn30NevJJhQ%2FjMzJLSskul8RBAsIXjWfZXUDQskA0iCLPtNA%2BnFpyWk513gkiv%2Bmhzcn6zG9MU9%2FQaLsR2O8wjNPzsLMgWGQw1NBQoPDwEB2L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789201c88d3571e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
z4a.net/images/2022/12/24/960x60.gif
104.21.234.235200 OK 757 kB URL HTTP/2 z4a.net/images/2022/12/24/960x60.gif
IP 104.21.234.235:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 757 kB (757280 bytes)
Hash 523c68cd99730f120739d8f1403cf9ee
51ca0560db90938c56b06459f27617d28ff3ced1
d0941961397a8b9522585f220e9a27c8f0c9ef7b8f1f736dc71be302d28db71e
GET /images/2022/12/24/960x60.gif HTTP/1.1
Host: z4a.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: image/gif
content-length: 757280
expires: Sun, 24 Dec 2023 08:58:52 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1781209
last-modified: Sat, 24 Dec 2022 08:58:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7D4QL5%2FK3xbLvXIh7revQA5m1HZRKR953V86CLbRxxCKAjMFRxgaTLmEQuc9edGA7PJmXrkhX3Y3ZndFNWO%2F4feNe%2BbdN8fXw7kRnsDaTf5hT%2FWrJHzYdUrC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789201c88d3371e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.cn/
47.246.44.205200 OK 471 B IP 47.246.44.205:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash c51fd1f64958cab526795ae317e49bc4
0adefefa44adaf1d1178b219b6a2f5bee23688d5
40f4334a3d5ea87fda09d00c28f127117e066e353ce23c703a1e5572c0f48a12
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 13 Jan 2023 23:45:42 GMT
Ali-Swift-Global-Savetime: 1673653542
Via: cache19.l2de2[4,4,200-0,M], cache19.l2de2[5,0], cache4.se1[26,26,200-0,M], cache4.se1[27,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 23:45:42 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816736535427126921e
xinchacha2dv.ocsp-certum.com/
95.101.10.107200 OK 1.5 kB URL HTTP/1.1 xinchacha2dv.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash e2a63e6d4cb15bae8fb1d8189fb29310
110684619f590d0c8f1c365f4438f88f5e943f68
9f2d06cf843c6796cc5bc1aeefa86c3765ec1367eb844b338e619c3f535fea47
POST / HTTP/1.1
Host: xinchacha2dv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1538
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=889
Date: Fri, 13 Jan 2023 23:45:42 GMT
Connection: keep-alive
X-N: S
si1.go2yd.com/get-image/0xmAGT9KS9C
163.171.140.79200 OK 118 kB URL HTTP/2 si1.go2yd.com/get-image/0xmAGT9KS9C
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 640 x 200\012- data
Size 118 kB (117593 bytes)
Hash c4caa37b717580e8594587f32ca86470
a645ec82581a0b18f67444b62a062059adf78aa6
208bafb1df6fa8b7929896b30415514e2dc59312332ec26aff058767fa81f269
GET /get-image/0xmAGT9KS9C HTTP/1.1
Host: si1.go2yd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:42 GMT
content-type: image/gif
content-length: 117593
server: Tengine
x-application-context: application
x-kss-request-id: 9a211df897c146b99866a236ff549e2f
etag: "c4caa37b717580e8594587f32ca86470"
content-md5: xMqje3F1gOhZRYfzLKhkcA==
last-modified: Thu, 10 Feb 2022 15:30:06 GMT
accept-ranges: bytes
age: 1
x-via: 1.1 PSbjwjBGP2ih137:4 (Cdn Cache Server V2.0), 1.1 PSzjnbsxkx232:7 (Cdn Cache Server V2.0), 1.1 tb118:13 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1cc96:12 (Cdn Cache Server V2.0)
x-ws-request-id: 63c1ed26_PShlamstdAMS1wt94_42069-60866
access-control-allow-origin: *
ws-s2h-acc-level: 1
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
172.64.155.188200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 172.64.155.188:0
Hash 5bb0eaf27e92e86cc0c2a3ad624a8a9f
b74f9042212b98a448a6aee256099523bb0fee14
90010b4f6fbf4a489a24654925e988ccb95d1156a7bc49e4c3aa317d761a838b
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:42 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Wed, 11 Jan 2023 15:23:54 GMT
Expires: Wed, 18 Jan 2023 15:23:53 GMT
Etag: "b74f9042212b98a448a6aee256099523bb0fee14"
Cache-Control: max-age=401290,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 789201d1aca4b51e-OSL
ocsp.digicert.cn/
47.246.44.205200 OK 471 B IP 47.246.44.205:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash a2b58aa457238d05f1f7e46966a9f5d2
9dbdeca8080752ab64d4c37a5d3567a028fa8001
b9b0c4b7ae54fb38b0325c8c24c93da10197335f2aaf90a54ea902b2cea0e4f0
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 13 Jan 2023 23:45:42 GMT
Last-Modified: Fri, 13 Jan 2023 12:37:00 GMT
ETag: "63c1506c-1d7"
Expires: Sun, 15 Jan 2023 12:37:00 GMT
Cache-Control: max-age=132678
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1673653542
Via: cache26.l2de2[188,188,200-0,M], cache26.l2de2[189,0], cache5.se1[211,210,200-0,M], cache5.se1[213,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 23:45:42 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916736535426863333e
cdn.staticfile.org/jquery/1.9.1/jquery.js
47.246.44.211200 OK 80 kB URL HTTP/1.1 cdn.staticfile.org/jquery/1.9.1/jquery.js
IP 47.246.44.211:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash a3932a941cb998342ce964fdd83697f1
1b0e6eca41925e7cd470ea29b16cea49c1ec58af
8e7c4734517c05d78c341883dc3ad3ee4167b9d09dd63e91cf4087311194a2ab
GET /jquery/1.9.1/jquery.js HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 80123
Connection: keep-alive
Date: Fri, 13 Jan 2023 06:35:35 GMT
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Cache-Control: public, max-age=31536000
Etag: "FpJXr9LUbDoYnsDUCkVyJwHUfpyl.gz"
Vary: Accept-Encoding
X-Reqid: EZQAAADfDhnRyjkX
X-Svr: IO
X-Qiniu-Zone: 0
X-Log: X-Log
Accept-Ranges: bytes
Content-Disposition: inline; filename="jquery.js"; filename*=utf-8''jquery.js
Content-Transfer-Encoding: binary
Last-Modified: Tue, 16 Feb 2016 04:22:55 GMT
Ali-Swift-Global-Savetime: 1673591736
Via: cache15.l2de2[0,0,304-0,H], cache1.l2de2[1,0], cache7.se1[0,0,200-0,H], cache3.se1[1,0]
Content-Encoding: gzip
Age: 61806
X-Cache: HIT TCP_MEM_HIT dirn:5:128981630
X-Swift-SaveTime: Fri, 13 Jan 2023 06:56:01 GMT
X-Swift-CacheTime: 85175
Timing-Allow-Origin: *
EagleId: 2ff62c9716736535429086407e
dimg04.c-ctrip.com/images/0105c12000ae3a0t3DD7A.gif?proc=autoorient
104.110.17.24200 OK 489 kB URL HTTP/2 dimg04.c-ctrip.com/images/0105c12000ae3a0t3DD7A.gif?proc=autoorient
IP 104.110.17.24:0
File type GIF image data, version 89a, 960 x 80\012- data
Size 489 kB (488987 bytes)
Hash 6a7d54ecdc2d1cce357d304db217ccec
03a803d54b6a1dd16cba5d73bf4e732d8b7be263
7cd4479b97a015f11a04b2d7d94fbe78030a7e0e3de457bf72abdbf53235c7d8
GET /images/0105c12000ae3a0t3DD7A.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 488987
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=7123810
expires: Thu, 06 Apr 2023 10:35:53 GMT
date: Fri, 13 Jan 2023 23:45:43 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
www.mgydbn.xyz/template/m1938pc/images/video-mask.png
173.231.17.185200 OK 107 B URL HTTP/2 www.mgydbn.xyz/template/m1938pc/images/video-mask.png
IP 173.231.17.185:0
File type PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced\012- data
Hash 6a5ee87ff75437cb480df839f36004fd
eac66370f99601cb7febef320c9540d4593cd856
c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa
GET /template/m1938pc/images/video-mask.png HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/png
content-length: 107
last-modified: Fri, 07 May 2021 10:47:36 GMT
etag: "60951ac8-6b"
expires: Sun, 12 Feb 2023 23:45:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.mgydbn.xyz/template/m1938pc/images/video-play.png
173.231.17.185200 OK 1.6 kB URL HTTP/2 www.mgydbn.xyz/template/m1938pc/images/video-play.png
IP 173.231.17.185:0
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/m1938pc/images/video-play.png HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/png
content-length: 1567
last-modified: Fri, 07 May 2021 10:47:38 GMT
etag: "60951aca-61f"
expires: Sun, 12 Feb 2023 23:45:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 936f0f1623d8e0c94ca1430d2fa7615b
46c60641ab8c782ae44d3ce6807a3b60616eedc5
4586da70447d84ccc2ce9b2a5ebc35224632e4fc0dad443c801708cce5b6080e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4586DA70447D84CCC2CE9B2A5EBC35224632E4FC0DAD443C801708CCE5B6080E"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14142
Expires: Sat, 14 Jan 2023 03:41:25 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 936f0f1623d8e0c94ca1430d2fa7615b
46c60641ab8c782ae44d3ce6807a3b60616eedc5
4586da70447d84ccc2ce9b2a5ebc35224632e4fc0dad443c801708cce5b6080e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4586DA70447D84CCC2CE9B2A5EBC35224632E4FC0DAD443C801708CCE5B6080E"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14142
Expires: Sat, 14 Jan 2023 03:41:25 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 936f0f1623d8e0c94ca1430d2fa7615b
46c60641ab8c782ae44d3ce6807a3b60616eedc5
4586da70447d84ccc2ce9b2a5ebc35224632e4fc0dad443c801708cce5b6080e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4586DA70447D84CCC2CE9B2A5EBC35224632E4FC0DAD443C801708CCE5B6080E"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14142
Expires: Sat, 14 Jan 2023 03:41:25 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 936f0f1623d8e0c94ca1430d2fa7615b
46c60641ab8c782ae44d3ce6807a3b60616eedc5
4586da70447d84ccc2ce9b2a5ebc35224632e4fc0dad443c801708cce5b6080e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4586DA70447D84CCC2CE9B2A5EBC35224632E4FC0DAD443C801708CCE5B6080E"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14142
Expires: Sat, 14 Jan 2023 03:41:25 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 936f0f1623d8e0c94ca1430d2fa7615b
46c60641ab8c782ae44d3ce6807a3b60616eedc5
4586da70447d84ccc2ce9b2a5ebc35224632e4fc0dad443c801708cce5b6080e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4586DA70447D84CCC2CE9B2A5EBC35224632E4FC0DAD443C801708CCE5B6080E"
Last-Modified: Wed, 11 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14142
Expires: Sat, 14 Jan 2023 03:41:25 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
lbfm.lbpictupian.com/upload/vod/2023/01/klgh23nwsdc.jpg
104.22.12.214200 OK 6.8 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/klgh23nwsdc.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f406ede8bb0dd36ff116d3668c93ebaf
b2b3f6c9eb43ce629d91d1c88c441bbb3cf3541c
41ad66bd83aa0e290eb3abe068655e73e418959bb301da29871a28192053efa7
GET /upload/vod/2023/01/klgh23nwsdc.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6838
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8835
content-disposition: inline; filename="klgh23nwsdc.webp"
etag: "63bfcda2-2283"
last-modified: Thu, 12 Jan 2023 09:06:42 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 940
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a3f1c16-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 502ff8b1039c7b1442b94352cd31fcbe
5012b7894d62b9f42fb6a8b2213eddfbbb4f859e
5456eec0a9afd9ab7e0b770c523cf556452f4894ced2987375f7f7404873be37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5456EEC0A9AFD9AB7E0B770C523CF556452F4894CED2987375F7F7404873BE37"
Last-Modified: Wed, 11 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20298
Expires: Sat, 14 Jan 2023 05:24:01 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
lbfm.lbpictupian.com/upload/vod/2023/01/4e5p5af2tit.jpg
104.22.12.214200 OK 8.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/4e5p5af2tit.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e432036b39a383568545262cee44b1eb
fcd1264bcf8ba5dbfd7e50659a102a619f9d556a
5e43b3f7bcb36ffa68aaca7c2e2e8b9d74185354b29be4644bbbb16cb8092d37
GET /upload/vod/2023/01/4e5p5af2tit.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 8112
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9931
content-disposition: inline; filename="4e5p5af2tit.webp"
etag: "63bfcdb8-26cb"
last-modified: Thu, 12 Jan 2023 09:07:04 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 940
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a441c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/yrnm22luvd3.jpg
104.22.12.214200 OK 8.3 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/yrnm22luvd3.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ffe216c7b00aeb300a9423b3667ef8ec
9f8b7e84e6a388001a6c407825a196c9cf4f925d
60b5737f3d986bd5f2a01f8c632a8ebf20cf65b822f6c87ed1c07c406aee5bb4
GET /upload/vod/2023/01/yrnm22luvd3.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 8316
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9499
content-disposition: inline; filename="yrnm22luvd3.webp"
etag: "63bfcdb3-251b"
last-modified: Thu, 12 Jan 2023 09:06:59 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1503
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a431c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/hkmnwobpwld.jpg
104.22.12.214200 OK 3.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/hkmnwobpwld.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f01c198b69f77a390af54f3b564eddfc
d0dd84c79bab4ac1d9a814c888c7c925d5dccdb6
da4edb8bb2f456a888a9ea2a397494af6fadf11f49048afc2c46fdf2195209c4
GET /upload/vod/2023/01/hkmnwobpwld.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 3072
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=5152
content-disposition: inline; filename="hkmnwobpwld.webp"
etag: "63bfcda6-1420"
last-modified: Thu, 12 Jan 2023 09:06:46 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1503
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a411c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/4omwo4y0kcg.jpg
104.22.12.214200 OK 8.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/4omwo4y0kcg.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 15e8b9d297a1ad9ceaa898916f29e9c1
9f194501da3682ec63395a60461c01891a49997a
f412c4194a33adbcc01dc1ca016d427146bcf449c0fe6395af90dcec995a6fa2
GET /upload/vod/2023/01/4omwo4y0kcg.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 8144
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9306
content-disposition: inline; filename="4omwo4y0kcg.webp"
etag: "63bfcdae-245a"
last-modified: Thu, 12 Jan 2023 09:06:54 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3287
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a421c16-OSL
X-Firefox-Spdy: h2
www.mgydbn.xyz/template/m1938pc/css/zui.css
173.231.17.185200 OK 20 kB URL HTTP/2 www.mgydbn.xyz/template/m1938pc/css/zui.css
IP 173.231.17.185:0
Hash d2d8dd729e4d755e7d53ddfc95e1a49a
ef08b0a3c6aa52c4e1e95c68bb98bf1e7b7ec4bb
004f2ab8df3d33a939ac858d34d20634c3ae066d8d8306cbb599eaf90bdb3e1a
GET /template/m1938pc/css/zui.css HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: text/css
last-modified: Thu, 28 Apr 2022 06:25:58 GMT
vary: Accept-Encoding
etag: W/"626a3376-164b5"
expires: Sat, 14 Jan 2023 11:45:41 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.mgydbn.xyz/template/m1938pc/html9/advertised/advertised.json?refresh=2023113Fri%20Jan%2013%202023%2023:45:27%20GMT+0000%20(Coordinated%20Universal%20Time)
173.231.17.185200 OK 3.1 kB URL HTTP/2 www.mgydbn.xyz/template/m1938pc/html9/advertised/advertised.json?refresh=2023113Fri%20Jan%2013%202023%2023:45:27%20GMT+0000%20(Coordinated%20Universal%20Time)
IP 173.231.17.185:0
File type JSON data\012- , Unicode text, UTF-8 text, with CRLF line terminators
Hash 49a7272b73d8888a3b1a7c8204c1b168
cf8afb3aac66f2b02cff9d67793d76fc7ada557e
8a08775edac4089b5d05eb2f037669ed8b45cd43f3c164aab16d12635cdd2652
GET /template/m1938pc/html9/advertised/advertised.json?refresh=2023113Fri%20Jan%2013%202023%2023:45:27%20GMT+0000%20(Coordinated%20Universal%20Time) HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: application/json
content-length: 3094
last-modified: Thu, 12 Jan 2023 10:41:51 GMT
etag: "63bfe3ef-c16"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/yxu5p2b1xu5.jpg
104.22.12.214200 OK 9.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/yxu5p2b1xu5.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 94125e9c711d78b912e7b486871548fd
50c63f56fd24d7eb5f98e69d30b7190f7c04ef99
6f9da83516e76e5b92bae01a1ee7eee14772abcff630ff56645ec4a2ff209783
GET /upload/vod/2023/01/yxu5p2b1xu5.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 9098
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10695
content-disposition: inline; filename="yxu5p2b1xu5.webp"
etag: "63bfcdaa-29c7"
last-modified: Thu, 12 Jan 2023 09:06:50 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 940
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a891c16-OSL
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0105z12000ae3bwlk6208.gif?proc=autoorient
104.110.17.24200 OK 320 kB URL HTTP/2 dimg04.c-ctrip.com/images/0105z12000ae3bwlk6208.gif?proc=autoorient
IP 104.110.17.24:0
File type GIF image data, version 89a, 200 x 200\012- data
Size 320 kB (320396 bytes)
Hash f1bd2e508413c6089ec9fcf6954b2196
b60c7b6b05a282a58ecde182ce2ac5a5a2ac087a
16df1f845970a1b49b6309d0af3dfabe40e54bb3a9bac381a2dac8ff1f9a6ff3
GET /images/0105z12000ae3bwlk6208.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 320396
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=7125620
expires: Thu, 06 Apr 2023 11:06:03 GMT
date: Fri, 13 Jan 2023 23:45:43 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 1c6b1541e49938a342dc6d61300dc0fa
ac9fa3be2c55bee340845cd0e51d37e1850f9723
ea2d9bdafddb14da0ab2495798988b7fc27713aaa3c0799f46098a5cb47ab1c8
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 13 Jan 2023 23:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 13 Jan 2023 20:42:22 GMT
Expires: Sat, 14 Jan 2023 20:42:22 GMT
ETag: "ac9fa3be2c55bee340845cd0e51d37e1850f9723"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 43f488f7953a8a023cc8d8a57868ae0f
39a4a0fe8d2baf9604a8d0c7958fcb5819aa5583
c37d3fab267c5313e58ca0daf387994979a2ff21daf949fa98b1420e6fcc6b97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C37D3FAB267C5313E58CA0DAF387994979A2FF21DAF949FA98B1420E6FCC6B97"
Last-Modified: Fri, 13 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3895
Expires: Sat, 14 Jan 2023 00:50:38 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
hm.baidu.com/hm.js?a3bf9acdbb11a6af7d201180b0d6dd7a
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?a3bf9acdbb11a6af7d201180b0d6dd7a
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (622)
Hash 2397ab7b3cfa7fc3cc3ed51a377815f1
97f461bdbcb77f433413e304c5d8fd3949babc7e
ca953fdd20d8a04e26515fd3c6752985d7650cf9ff4ff5f8d8c4632cbda70f19
GET /hm.js?a3bf9acdbb11a6af7d201180b0d6dd7a HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11260
Content-Type: application/javascript
Date: Fri, 13 Jan 2023 23:45:43 GMT
Etag: ea3aab0d83eb36a2a78ac3da385f68ca
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=7A3A355838D5A671; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?6f39cfb7fb3d2a5a22dc71959e2f8ddf
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?6f39cfb7fb3d2a5a22dc71959e2f8ddf
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (618)
Hash 2ef47f278604dfdc5e59494449f6f23b
8db82a70119b005d3a6e1c594196712b311ecf9a
db054fed95252d4e8f90e79cb2c47334783b8c0a4b5b5731e55ccbee22b6eb21
GET /hm.js?6f39cfb7fb3d2a5a22dc71959e2f8ddf HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Content-Type: application/javascript
Date: Fri, 13 Jan 2023 23:45:43 GMT
Etag: 25a1c5aeb7020b917af37d58ba81313e
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=C08A3D4DDF72F168; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?4c5f9fce4824f9c3d3f694403480c46f
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?4c5f9fce4824f9c3d3f694403480c46f
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (622)
Hash 358dcb546f5ee69690d6010c7248cd88
658e7ee54b1fa27018bec8c803bd97009a3318e9
e3c7db6ddc89f7b9f3142ce12ce0f9f12be22fdbeee011776262c70015315b11
GET /hm.js?4c5f9fce4824f9c3d3f694403480c46f HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11260
Content-Type: application/javascript
Date: Fri, 13 Jan 2023 23:45:43 GMT
Etag: c2b578cab65870c4c88f16391ceec395
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=2CD32EB68DC7A22A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 3477d90da318c0e22aa1861a14924d81
118436cc9b7bd4cc9c7fc58d146dc58fabfdc838
31f7449c72e1c63ebf3e7b9b6e02ba1dbb491a99dc13665b2bd7dd11a5a867a3
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 17 Jan 2023 22:31:59 GMT
ETag: "118436cc9b7bd4cc9c7fc58d146dc58fabfdc838"
Last-Modified: Fri, 13 Jan 2023 22:32:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1934
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 789201d84b6ffac8-OSL
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 7ccf05562050c979316942be89ae8da2
3547881d052cc655370835272f0fb5df39598c17
55a47ae0067f4210aab88bb968d4d0e89895f815bbc3a555c949d2369c69cbd3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "55A47AE0067F4210AAB88BB968D4D0E89895F815BBC3A555C949D2369C69CBD3"
Last-Modified: Wed, 11 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=812
Expires: Fri, 13 Jan 2023 23:59:15 GMT
Date: Fri, 13 Jan 2023 23:45:43 GMT
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 9f58d56b9cdf4193c27875cb222e0e2c
7c5ce3dffe80d51fdacaf7cb9e9001e7c67c6548
17eda1ca8005aec75a7731d4ff031f5f67cf3d6b9a76e3735511f699dd87ea9c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 13 Jan 2023 15:08:27 GMT
Expires: Fri, 20 Jan 2023 15:08:26 GMT
Etag: "7c5ce3dffe80d51fdacaf7cb9e9001e7c67c6548"
Cache-Control: max-age=573162,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 789201d73ed2b529-OSL
pic.rmb.bdstatic.com/bjh/5f356028e5e94176f56a75568e49ae20.gif
185.10.104.115200 OK 1.3 MB URL HTTP/2 pic.rmb.bdstatic.com/bjh/5f356028e5e94176f56a75568e49ae20.gif
IP 185.10.104.115:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 1.3 MB (1296026 bytes)
Hash 5f356028e5e94176f56a75568e49ae20
3796c4c950687811a1d1f80fd9e31e718bda0f85
c6d85123315be8a70786b6699f59eecff590bc8fbf1a48a477bcb2cacd660320
GET /bjh/5f356028e5e94176f56a75568e49ae20.gif HTTP/1.1
Host: pic.rmb.bdstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 1296026
expires: Fri, 30 Dec 2022 03:44:37 GMT
last-modified: Sun, 01 May 2022 03:41:02 GMT
etag: "5f356028e5e94176f56a75568e49ae20"
age: 77195
accept-ranges: bytes
content-md5: XzVgKOXpQXb1anVWjkmuIA==
x-bce-content-crc32: 619664397
x-bce-debug-id: qoHJbuYLCrwt6BohAJHKhB1la/dLtPckbQZCDsLdCYj3ffbVUHMGsmUK6fqoM0iXz1HI2DGQutkKVrhCRx8zZA==
x-bce-request-id: f2b33ae6-db81-4f70-9150-c6452b74a3f4
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Tue, 27 Dec 2022 03:44:37 GMT
ohc-cache-hit: fra01-sys-jomo6.fra01.baidu.com [2], fra01-sys-jomo8.fra01.baidu.com [2], zhuzuncache62 [3], suzix207 [3]
ohc-file-size: 1296026
x-cache-status: HIT
X-Firefox-Spdy: h2
8499683.com/8499/zzxx/960x60.gif
23.225.237.36200 OK 291 kB URL HTTP/2 8499683.com/8499/zzxx/960x60.gif
IP 23.225.237.36:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 291 kB (290572 bytes)
Hash 57aeaeed8e55b2a1e23b348d9d73f9d5
381bc182c18210ba33ebe13cbf8f20f297d33c16
e10903ca99193ba8ffd6c5f74753461cf070e75026e73fda3c040496f8dcfdb6
GET /8499/zzxx/960x60.gif HTTP/1.1
Host: 8499683.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:42 GMT
content-type: image/gif
content-length: 290572
last-modified: Sat, 24 Dec 2022 13:23:32 GMT
etag: "46f0c-5f092cf097c3f"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/c0ejwhnvejl0954c0ejwhnvejl272931.jpg
104.22.12.214200 OK 4.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/c0ejwhnvejl0954c0ejwhnvejl272931.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ace4447bb81b5166ac2a18590f7e3cc0
e170703450431d6ceb37886c34042b043fc879b2
56290c5e7bd3025ed0e2692abe16a8be780fe33c4dc87b0281d73765fb36376b
GET /upload/vod/2022/09-10/09/c0ejwhnvejl0954c0ejwhnvejl272931.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 4600
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=5937
content-disposition: inline; filename="c0ejwhnvejl0954c0ejwhnvejl272931.webp"
etag: "631bee53-1731"
last-modified: Sat, 10 Sep 2022 01:54:27 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a2f1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/2kmifuhpzhf09552kmifuhpzhf132987.jpg
104.22.12.214200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/2kmifuhpzhf09552kmifuhpzhf132987.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash b7a5e74ba4335bb6af12ffb0712d60d1
e8a2686da714a34408c2e8e0a1aad2e7476c3ec7
300803f4e776402b3714cbf1220072fb9151db413621c3a2a27aa53ad87903ce
GET /upload/vod/2022/09-10/09/2kmifuhpzhf09552kmifuhpzhf132987.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 10464
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10923, status=webp_bigger
etag: "631bee81-2aab"
last-modified: Sat, 10 Sep 2022 01:55:13 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d71a4a1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/ahqza2xel1y0954ahqza2xel1y252927.jpg
104.22.12.214200 OK 6.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/ahqza2xel1y0954ahqza2xel1y252927.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 93184cf91216090f7db287e20805811c
ba081db2945704d62f39b7b671799e3c187e395c
105e264f85e5a14a6c0a772faa3ca1d8c4f17855a6c7224341e06d804f4dd095
GET /upload/vod/2022/09-10/09/ahqza2xel1y0954ahqza2xel1y252927.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6676
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7896
content-disposition: inline; filename="ahqza2xel1y0954ahqza2xel1y252927.webp"
etag: "631bee51-1ed8"
last-modified: Sat, 10 Sep 2022 01:54:25 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a2e1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/ezinv15wmfk0954ezinv15wmfk262929.jpg
104.22.12.214200 OK 7.4 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/ezinv15wmfk0954ezinv15wmfk262929.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 47c445a087d9fd79130932d44c69a7d7
94371e414cb8cf753d28d1757e5d288cf6e7234e
28df3f19d8db573d7cffdf8f942d2050452da77ad9fdb1fb79c1ee14d6486a4c
GET /upload/vod/2022/09-10/09/ezinv15wmfk0954ezinv15wmfk262929.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 7402
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8323
content-disposition: inline; filename="ezinv15wmfk0954ezinv15wmfk262929.webp"
etag: "631bee52-2083"
last-modified: Sat, 10 Sep 2022 01:54:26 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a2d1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/wcwtoarohep0955wcwtoarohep092977.jpg
104.22.12.214200 OK 6.9 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/wcwtoarohep0955wcwtoarohep092977.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 903c6e0b8dbfdf568252734c89b173de
cca44ea50a6718e969b93c9e96e89c5eb46f3b52
cbac39e15908a4210b1b248a9f39ceb18acfd2ea0c50bb79f5bc7c96f5b3a079
GET /upload/vod/2022/09-10/09/wcwtoarohep0955wcwtoarohep092977.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6904
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7741
content-disposition: inline; filename="wcwtoarohep0955wcwtoarohep092977.webp"
etag: "631bee7d-1e3d"
last-modified: Sat, 10 Sep 2022 01:55:09 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a451c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/fy3eant5ln30954fy3eant5ln3242925.jpg
104.22.12.214200 OK 6.0 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/fy3eant5ln30954fy3eant5ln3242925.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8e1d797019e4c3d72e705622c18336a5
af53e9a2a1bb2943b7993051073f00d245798029
06ac622874088b823034712fa674daeafb9c47e2bf69d760d156bd44b88f92e8
GET /upload/vod/2022/09-10/09/fy3eant5ln30954fy3eant5ln3242925.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 5996
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7318
content-disposition: inline; filename="fy3eant5ln30954fy3eant5ln3242925.webp"
etag: "631bee50-1c96"
last-modified: Sat, 10 Sep 2022 01:54:24 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a2c1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/err20cgajxw.jpg
104.22.12.214200 OK 8.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/err20cgajxw.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash c2143038a08559074740b936de8e82b0
698fd1248c770a72bc9eb83a0509248cc64aaf29
87c892c9f024a265c7a0d6590a4b4f90e55c27e46961af4c62cf1ff5dc05abf7
GET /upload/vod/2023/01/err20cgajxw.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 8568
cf-bgj: imgq:85,h2pri
cf-polished: origSize=9050, status=webp_bigger
etag: "63bfd1e0-235a"
last-modified: Thu, 12 Jan 2023 09:24:48 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d70a3d1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/acqhcdowcjf0954acqhcdowcjf292935.jpg
104.22.12.214200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/acqhcdowcjf0954acqhcdowcjf292935.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash a90dd9b32e9792d5ad1159f2e563660a
33e9b012346ed786bd14b35fab226de689be37ce
d77c1a2be07e7620cb77dfb2dce064e9fdf9ee138a99883b8f38e35236b6a54b
GET /upload/vod/2022/09-10/09/acqhcdowcjf0954acqhcdowcjf292935.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 11114
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11612, status=webp_bigger
etag: "631bee55-2d5c"
last-modified: Sat, 10 Sep 2022 01:54:29 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d70a311c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/1xhf455y4gc09551xhf455y4gc102981.jpg
104.22.12.214200 OK 4.0 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/1xhf455y4gc09551xhf455y4gc102981.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f6a9d49b8828db2be3bfe0b1f0751db3
19ba1d37cf5f22aebefb238e2c0cf113b52c8920
4533af9aba8e9da87b73c51a98fe5bcf0f132b692f6119b27133f6ff69a8982e
GET /upload/vod/2022/09-10/09/1xhf455y4gc09551xhf455y4gc102981.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 3966
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=5656
content-disposition: inline; filename="1xhf455y4gc09551xhf455y4gc102981.webp"
etag: "631bee7e-1618"
last-modified: Sat, 10 Sep 2022 01:55:10 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a471c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/q0xdwwzkyrz.jpg
104.22.12.214200 OK 7.9 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/q0xdwwzkyrz.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 20be9c9d917c755f33959a7a2f66ff39
026f0bf21799e51a6923a3b46b855164a75b7f9a
c97ce0304bc40978739b27a75b33fba72428d63249da85625b554da330f525ab
GET /upload/vod/2023/01/q0xdwwzkyrz.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 7918
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8699
content-disposition: inline; filename="q0xdwwzkyrz.webp"
etag: "63bfd1cc-21fb"
last-modified: Thu, 12 Jan 2023 09:24:28 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a341c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/3v11saivoyi09553v11saivoyi092979.jpg
104.22.12.214200 OK 6.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/3v11saivoyi09553v11saivoyi092979.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 31fec6b4a85cda19e82075fbcae7cb91
89997989773dbf9f8278464375d3185537f46388
ac384d3477cb590f2adb91de9f0744ed34bd56d4a3be964069b45aa7c002821c
GET /upload/vod/2022/09-10/09/3v11saivoyi09553v11saivoyi092979.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6654
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8799
content-disposition: inline; filename="3v11saivoyi09553v11saivoyi092979.webp"
etag: "631bee7e-225f"
last-modified: Sat, 10 Sep 2022 01:55:10 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a461c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/nohji3bg4fq.jpg
104.22.12.214200 OK 13 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/nohji3bg4fq.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash a3f242880599850c93464743cabda1d1
5e1db683750e18fab3fbb4ae8a781051a9e60975
d6de6e539a9105f42608cffd7dcb7ace4509e6d2b1c439fa8908474807f6c9d9
GET /upload/vod/2023/01/nohji3bg4fq.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 13136
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13760, status=webp_bigger
etag: "63bfd1d6-35c0"
last-modified: Thu, 12 Jan 2023 09:24:38 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d70a391c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/y3wcoq4gp3t.jpg
104.22.12.214200 OK 12 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/y3wcoq4gp3t.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash 5ef9bbdf911df4a9150f857cbb400d34
727b29a68d8015f963fde5077a93f2da2fbdc4c2
238bc9106c89b17f02fc4e08a4e501d91b0d981ab2177a50749d3bb2274f913d
GET /upload/vod/2023/01/y3wcoq4gp3t.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 12284
cf-bgj: imgq:85,h2pri
cf-polished: origSize=12817, status=webp_bigger
etag: "63bfd1d2-3211"
last-modified: Thu, 12 Jan 2023 09:24:34 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d70a351c16-OSL
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.20.226:0
Hash b8d0a6c99964a4331ed1db7641689345
43b2ec47d6dfcd0f383a5a04d51e02637af9818d
b5f3f1274c3f73153edd6b323251d4c036e6c42bb135666c39eada9f5a95f7c9
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Tue, 17 Jan 2023 21:22:09 GMT
ETag: "43b2ec47d6dfcd0f383a5a04d51e02637af9818d"
Last-Modified: Fri, 13 Jan 2023 21:22:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1566
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 789201d94e95b515-OSL
lbfm.lbpictupian.com/upload/vod/2023/01/uoejczhxu3v.jpg
104.22.12.214200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/uoejczhxu3v.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6774851a5890b5da7e3e4fe70ab64716
6fd3b2f82c2b1b8d07bb2863e62c685574cc846b
0fcc61c88b0a9797610eb5a4144fcb072e308144120bd448a0a07bdbd87c4345
GET /upload/vod/2023/01/uoejczhxu3v.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 10440
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10868
content-disposition: inline; filename="uoejczhxu3v.webp"
etag: "63bfd1e4-2a74"
last-modified: Thu, 12 Jan 2023 09:24:52 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a3e1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/t4hmv310qdi0954t4hmv310qdi282933.jpg
104.22.12.214200 OK 6.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/t4hmv310qdi0954t4hmv310qdi282933.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 89549a4af151a46bd384fa4c7b8d2f12
d3d984903d8d492c072c917cc04383d64f28c762
4c17357179e6ec6225d30c679230264d5feb301d55f9f1ff5d4240889ff80aaf
GET /upload/vod/2022/09-10/09/t4hmv310qdi0954t4hmv310qdi282933.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6118
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7444
content-disposition: inline; filename="t4hmv310qdi0954t4hmv310qdi282933.webp"
etag: "631bee54-1d14"
last-modified: Sat, 10 Sep 2022 01:54:28 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a301c16-OSL
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.20.226:0
Hash 0de4d613c2ead8658d85854bb0a5dc10
7890075206da06bf44a572cadafe647ed59aa5c2
e9d59825ed27bff29a9b7a305b758580b47ce4a6394aff80fb0758ea1248ef95
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Tue, 17 Jan 2023 21:01:16 GMT
ETag: "7890075206da06bf44a572cadafe647ed59aa5c2"
Last-Modified: Fri, 13 Jan 2023 21:01:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3286
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 789201d949870b49-OSL
lbfm.lbpictupian.com/upload/vod/2023/01/mhnvtouptgi.jpg
104.22.12.214200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/mhnvtouptgi.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c7e6c38a01538830870ce5cb1780ed36
7273bfa006afa28106675142d2b488b44c235f09
482b1e986f4cd6f0b2f0dab686b274c9e0bd08f84cd9d3d7dfd78c4db6fe8cda
GET /upload/vod/2023/01/mhnvtouptgi.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 11296
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11615
content-disposition: inline; filename="mhnvtouptgi.webp"
etag: "63bfd1db-2d5f"
last-modified: Thu, 12 Jan 2023 09:24:43 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a3c1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/04-24/00/uj1mneok20q0001uj1mneok20q5111799.jpg
104.22.12.214200 OK 6.3 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/04-24/00/uj1mneok20q0001uj1mneok20q5111799.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 61003c98c4d18f5d43396d77e39114e1
ccebff303ab77c9cb23cf294cd05d6f3fb2dd231
82d8a70f965cded2c0a32cc493f95a29cb8df4f5fd9b3217e9b82b221406bbec
GET /upload/vod/2020/04-24/00/uj1mneok20q0001uj1mneok20q5111799.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6342
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8541
content-disposition: inline; filename="uj1mneok20q0001uj1mneok20q5111799.webp"
etag: "5ea1bbef-215d"
last-modified: Thu, 23 Apr 2020 16:01:51 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d71a581c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/04-24/00/errrcc1xzs00001errrcc1xzs05211801.jpg
104.22.12.214200 OK 9.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/04-24/00/errrcc1xzs00001errrcc1xzs05211801.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5995ca8c7135c8cdd6f91ddaebd83e4f
1f58569472d6a9d270e4855b2f9f2263040c751a
02136845720faaf204539acb788ee95cf4810291cd2face5b4883d439f8d96fa
GET /upload/vod/2020/04-24/00/errrcc1xzs00001errrcc1xzs05211801.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 9558
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=12491
content-disposition: inline; filename="errrcc1xzs00001errrcc1xzs05211801.webp"
etag: "5ea1bbf0-30cb"
last-modified: Thu, 23 Apr 2020 16:01:52 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d70a261c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/bdzobdpejfr0955bdzobdpejfr122985.jpg
104.22.12.214200 OK 9.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/bdzobdpejfr0955bdzobdpejfr122985.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9f596b3796d2fb0fdacdc6edced7622b
0d2b83d37707133ce2d5d65cb0bc6547aaef734a
367fd689bef25a1823ceed314f94af4b6157268065beb2a7eef5e37f6b9e2105
GET /upload/vod/2022/09-10/09/bdzobdpejfr0955bdzobdpejfr122985.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 9050
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9971
content-disposition: inline; filename="bdzobdpejfr0955bdzobdpejfr122985.webp"
etag: "631bee80-26f3"
last-modified: Sat, 10 Sep 2022 01:55:12 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d71a561c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2022/09-10/09/zdkiyjj4rwl0955zdkiyjj4rwl112983.jpg
104.22.12.214200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2022/09-10/09/zdkiyjj4rwl0955zdkiyjj4rwl112983.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 64bf0167b28de4004b48e6d9d164089b
3881263154e9ef224e9ba1135c7fae1cf0060b62
bfd801d73381580ff2dd342e9ea7c45b1d1a6f1839c572cadbc55270f6405a8e
GET /upload/vod/2022/09-10/09/zdkiyjj4rwl0955zdkiyjj4rwl112983.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 10471
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10939, status=webp_bigger
etag: "631bee7f-2abb"
last-modified: Sat, 10 Sep 2022 01:55:11 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d71a481c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/04-24/00/3hkoyd02bo200013hkoyd02bo25611809.jpg
104.22.12.214200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/04-24/00/3hkoyd02bo200013hkoyd02bo25611809.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 3cb63bb625ae02c34efdde77349a3305
d2f36c69e73bc26259c7e61a052570075c088d42
c36bcee19e9382c6aec4cd423b6caf60105166893a404a74e0517a565922f37b
GET /upload/vod/2020/04-24/00/3hkoyd02bo200013hkoyd02bo25611809.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 10817
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11362, status=webp_bigger
etag: "5ea1bbf4-2c62"
last-modified: Thu, 23 Apr 2020 16:01:56 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d73a731c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/gappgz3psbm.jpg
104.22.12.214200 OK 6.4 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/gappgz3psbm.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 473ec1b52b1937734e4118b0aa6f4245
adef564137c8b05ffc393e9327ab09b7c4fe32ae
d0462f3eaaef8698cf0c11be71143890a5cd6f10113f43d08226348f0fe069e4
GET /upload/vod/2023/01/gappgz3psbm.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6436
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8042
content-disposition: inline; filename="gappgz3psbm.webp"
etag: "63bfd348-1f6a"
last-modified: Thu, 12 Jan 2023 09:30:48 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a831c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/04-24/00/2ghhexjv5wd00012ghhexjv5wd5411805.jpg
104.22.12.214200 OK 13 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/04-24/00/2ghhexjv5wd00012ghhexjv5wd5411805.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 19f9889dabfd545667bd5271c01567cd
1244e89dc6b2abe1900c25dc381fef8cdea68c15
476e0856683bc022acec0d7ce92f6da09bd98ff17ed84b0a5bedd4d0050a900d
GET /upload/vod/2020/04-24/00/2ghhexjv5wd00012ghhexjv5wd5411805.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 12929
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13607, status=webp_bigger
etag: "5ea1bbf2-3527"
last-modified: Thu, 23 Apr 2020 16:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d73a881c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/04-24/00/ozvfexqwmrj0001ozvfexqwmrj5311803.jpg
104.22.12.214200 OK 12 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/04-24/00/ozvfexqwmrj0001ozvfexqwmrj5311803.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 26117306d30629ff6d0b488106fee5f1
944444c8c8f77c9164f5fae2404cbbc918af8916
83b1cffd9211c0e829c8ccd78cbe9b2b32e57a03ecd63568996ee6a797fe35ae
GET /upload/vod/2020/04-24/00/ozvfexqwmrj0001ozvfexqwmrj5311803.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 11849
cf-bgj: imgq:85,h2pri
cf-polished: origSize=12439, status=webp_bigger
etag: "5ea1bbf1-3097"
last-modified: Thu, 23 Apr 2020 16:01:53 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d73a821c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/zxfr2fgnaex.jpg
104.22.12.214200 OK 6.8 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/zxfr2fgnaex.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 84822aed0bf13111ed183ed3976bde2c
4f64857efb87872caf99cf4af35b701b04d175d7
64c76ceae7f4477090cf76012b6d8e3104f607bc9a4a74b80d01094d84c3a071
GET /upload/vod/2023/01/zxfr2fgnaex.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 6802
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9681
content-disposition: inline; filename="zxfr2fgnaex.webp"
etag: "63bfd356-25d1"
last-modified: Thu, 12 Jan 2023 09:31:02 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a7e1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/ub5j0ksxwzq.jpg
104.22.12.214200 OK 5.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/ub5j0ksxwzq.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f9e537563d97411386a185121c10128c
ce8ab5d5bd101d367a5d38b35cfd8eacaa94fd3a
594169123c451965e295fdf19d93abbf9f005ee43721e7f1a0b904ca621e58ab
GET /upload/vod/2023/01/ub5j0ksxwzq.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 5662
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8485
content-disposition: inline; filename="ub5j0ksxwzq.webp"
etag: "63bfd341-2125"
last-modified: Thu, 12 Jan 2023 09:30:41 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a761c16-OSL
X-Firefox-Spdy: h2
www.mgydbn.xyz/
173.231.17.185200 OK 168 kB IP 173.231.17.185:0
Size 168 kB (167843 bytes)
Hash 18bfdcd0ece9fafae708c1dbef5e0930
b0ee0b1d0ccf6786d69658c30c316145bcea40a5
6d5d950b3dec844b6feae28c063a0160d4fd8e572b762b912fda32b60c723cc5
GET / HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mang.tiryakioyun.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:40 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/gqtexlwkaqz.jpg
104.22.12.214200 OK 12 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/gqtexlwkaqz.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 5eaf3c60065ff69f3660e72a2887ecd1
fb195b9e188e487614a82f74220179698ebc5363
eb091b48cf842b19fa33336a815b9c0d20ddf236256939b49b423bba6a95f67c
GET /upload/vod/2023/01/gqtexlwkaqz.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/jpeg
content-length: 12519
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13148, status=webp_bigger
etag: "63bfd337-335c"
last-modified: Thu, 12 Jan 2023 09:30:31 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 789201d73a741c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2020/04-24/00/hoqsya1k20a0001hoqsya1k20a5511807.jpg
104.22.12.214200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2020/04-24/00/hoqsya1k20a0001hoqsya1k20a5511807.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 099b5d73305c2fe2b4222dc97db98ce6
1c750feaffb744f7a6466b95ce40274bba55356d
4c1800749b72e1da83a3d8ff45eebe492554009655fab63fe09af630700a5b3d
GET /upload/vod/2020/04-24/00/hoqsya1k20a0001hoqsya1k20a5511807.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 10282
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11421
content-disposition: inline; filename="hoqsya1k20a0001hoqsya1k20a5511807.webp"
etag: "5ea1bbf3-2c9d"
last-modified: Thu, 23 Apr 2020 16:01:55 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d72a711c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/4zuxwwufwcv.jpg
104.22.12.214200 OK 8.2 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/4zuxwwufwcv.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12e0d6e22a728f4eb7c9770c66893049
1b83a027149c1e8ab4e0006afc2accb53e6919be
9d0d63d8adc64062e44078e79d295b4d6c19ea7ac308f30c0f76b8e3a8676fec
GET /upload/vod/2023/01/4zuxwwufwcv.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 8160
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9074
content-disposition: inline; filename="4zuxwwufwcv.webp"
etag: "63bfd352-2372"
last-modified: Thu, 12 Jan 2023 09:30:58 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a7d1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/kh1q0joyael.jpg
104.22.12.214200 OK 8.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/kh1q0joyael.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a9f94907b15648a9a01f454a6078171d
15f66f7d62329541b4fef0f27ae45ef1540837a0
03e5e6fc91e34abcf2c75112962fd05b0ab62d0b462e22b4b313db0124782d98
GET /upload/vod/2023/01/kh1q0joyael.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 8120
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9960
content-disposition: inline; filename="kh1q0joyael.webp"
etag: "63bfd35a-26e8"
last-modified: Thu, 12 Jan 2023 09:31:06 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a7f1c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/5phklevqidn.jpg
104.22.12.214200 OK 8.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/5phklevqidn.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 40334bb675dee718e5993307f69a4185
4c9c35ac15ea753f5225967e8236d5716c358d57
b1ee387d8287ea0207c98f3f303958ddea3333ab515051d69990eef0db9a8028
GET /upload/vod/2023/01/5phklevqidn.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 8630
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9847
content-disposition: inline; filename="5phklevqidn.webp"
etag: "63bfd345-2677"
last-modified: Thu, 12 Jan 2023 09:30:45 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a771c16-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/f51dkettzwd.jpg
104.22.12.214200 OK 4.3 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/f51dkettzwd.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 28c94f1114cdbc5b6694e2d18a4d37dc
0475b068846398673de6e83a8641eed11b2e6b8f
ac06a7aa297d79e45407de1f2babb7d693869251b51e3c3b843f23751f6c70da
GET /upload/vod/2023/01/f51dkettzwd.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/webp
content-length: 4288
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6841
content-disposition: inline; filename="f51dkettzwd.webp"
etag: "63bfd34d-1ab9"
last-modified: Thu, 12 Jan 2023 09:30:53 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 789201d73a851c16-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 9f58d56b9cdf4193c27875cb222e0e2c
7c5ce3dffe80d51fdacaf7cb9e9001e7c67c6548
17eda1ca8005aec75a7731d4ff031f5f67cf3d6b9a76e3735511f699dd87ea9c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 13 Jan 2023 15:08:27 GMT
Expires: Fri, 20 Jan 2023 15:08:26 GMT
Etag: "7c5ce3dffe80d51fdacaf7cb9e9001e7c67c6548"
Cache-Control: max-age=573162,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 789201d73dc8b512-OSL
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1597057207&si=a3bf9acdbb11a6af7d201180b0d6dd7a&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.3.0&lv=1&sn=20698&r=0&ww=1280&u=https%3A%2F%2Fwww.mgydbn.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1597057207&si=a3bf9acdbb11a6af7d201180b0d6dd7a&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.3.0&lv=1&sn=20698&r=0&ww=1280&u=https%3A%2F%2Fwww.mgydbn.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1597057207&si=a3bf9acdbb11a6af7d201180b0d6dd7a&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.3.0&lv=1&sn=20698&r=0&ww=1280&u=https%3A%2F%2Fwww.mgydbn.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 13 Jan 2023 23:45:43 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A54410E4AB066C80; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
www.mgydbn.xyz/template/m1938pc/css/ate.css
173.231.17.185200 OK 6.1 kB URL HTTP/2 www.mgydbn.xyz/template/m1938pc/css/ate.css
IP 173.231.17.185:0
Hash beca8989e896df5b5ce608714e5de4ba
37d66974b708b308e1ebd51081412266dcd6e87f
146fb954a04ef6b7baf6af9aa720cf96d84993843e9a322336ecb5582857daad
GET /template/m1938pc/css/ate.css HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: text/css
last-modified: Fri, 18 Jun 2021 13:51:35 GMT
vary: Accept-Encoding
etag: W/"60cca4e7-126e4"
expires: Sat, 14 Jan 2023 11:45:41 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=843796909&si=6f39cfb7fb3d2a5a22dc71959e2f8ddf&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.3.0&lv=1&sn=20698&r=0&ww=1280&u=https%3A%2F%2Fwww.mgydbn.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=843796909&si=6f39cfb7fb3d2a5a22dc71959e2f8ddf&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.3.0&lv=1&sn=20698&r=0&ww=1280&u=https%3A%2F%2Fwww.mgydbn.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=843796909&si=6f39cfb7fb3d2a5a22dc71959e2f8ddf&su=https%3A%2F%2Fmang.tiryakioyun.com%2F&v=1.3.0&lv=1&sn=20698&r=0&ww=1280&u=https%3A%2F%2Fwww.mgydbn.xyz%2F&tt=%E8%8A%92%E6%9E%9CAV HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 13 Jan 2023 23:45:43 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=91EB6C371CCD9FE9; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 2b77978c40a77394a0a422cac45b1221
71825906e1e0afcfa1ecdcbe4d08a862552a916f
bd994a75583424c0975d2edf0604d33d8e562aa384428117e883d36576d220ca
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 12:23:28 GMT
Expires: Thu, 19 Jan 2023 12:23:27 GMT
Etag: "71825906e1e0afcfa1ecdcbe4d08a862552a916f"
Cache-Control: max-age=476862,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 789201d73a8eb4f1-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash d7cd687abb164f9d7b8eaed62627baca
22e1363429636fb29817e262b9c4e1289a817e8e
cee9c03204c3202cb2adb617f380bc185833dfb25e7b3a4ad5918c7d52b6926b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 05:34:52 GMT
Expires: Thu, 19 Jan 2023 05:34:51 GMT
Etag: "22e1363429636fb29817e262b9c4e1289a817e8e"
Cache-Control: max-age=452346,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 789201d968eab529-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 7206731990e867a4df80338ded6043f7
dea67127bb9ecbf77f4f50a25193b5d27724f651
11ecdf0122ea7ba353e33b75f2ff1de5a42f589ba3b4b2fb36797b59637df958
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 23:45:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 13 Jan 2023 06:56:41 GMT
Expires: Fri, 20 Jan 2023 06:56:40 GMT
Etag: "dea67127bb9ecbf77f4f50a25193b5d27724f651"
Cache-Control: max-age=543655,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 789201db89fdb512-OSL
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5ff0afaad4dce9eb5607fd87ac1f3a34
17d68466ccc8c2fc026008dd8290c3284f47c246
301d03100659b38f4ef3dd672872b385b19e9843f4409635e881242aad06cffa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "301D03100659B38F4EF3DD672872B385B19E9843F4409635E881242AAD06CFFA"
Last-Modified: Thu, 12 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8194
Expires: Sat, 14 Jan 2023 02:02:18 GMT
Date: Fri, 13 Jan 2023 23:45:44 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 8ebac079be9e8dfe670cd7dcee1e0ee3
744e46848e358430e7808e5066fd0e7ef0d27718
7eb072e4e8fd32dee23cbd34f5c092ab0d77d1f25c368fa843c5b21cc631be18
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4285
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:45:44 GMT
Etag: "63c081c0-2d7"
Last-Modified: Fri, 13 Jan 2023 22:34:19 GMT
Server: ECS (amb/6B7B)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 8ebac079be9e8dfe670cd7dcee1e0ee3
744e46848e358430e7808e5066fd0e7ef0d27718
7eb072e4e8fd32dee23cbd34f5c092ab0d77d1f25c368fa843c5b21cc631be18
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1476
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:45:44 GMT
Last-Modified: Fri, 13 Jan 2023 23:21:08 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 727
p3.douyinpic.com/obj/tos-cn-i-dy/40bafe53c7a9435ab62b2965a26ca7de
47.246.44.224200 OK 334 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/40bafe53c7a9435ab62b2965a26ca7de
IP 47.246.44.224:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 640 x 60\012- data
Size 334 kB (334533 bytes)
Hash 1c09852e6658bba584331655a069c0dc
49c12dec4397e707eb7975f40133c389c9c7cdc5
fb2e8b5bde3374b810606d7897f128b737c69e0e255f905a453d470dc8a24d4f
GET /obj/tos-cn-i-dy/40bafe53c7a9435ab62b2965a26ca7de HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 334533
date: Fri, 23 Dec 2022 08:56:38 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 22 Dec 2022 09:22:21 GMT
nw-session-id: 20221222172221D9B79B1090190331D3EClrb6f02dy
nw-session-trace: 2022-12-22T17:22:21.837127142+08:00 103
x-bdcdn-cache-status: TCP_HIT
x-length: 334533
x-powered-by: ImageX
x-response-date: Thu, 22 Dec 2022 17:22:21 GMT
x-tt-logid: 20221222172221D9B79B1090190331D3EC
via: n150-061-095, cache4.l2de2[0,0,206-0,H], cache26.l2de2[2,0], cache26.l2de2[2,0], cache5.se1[0,0,200-0,H], cache3.se1[2,0]
x-request-ip: fdbd:dc02:22:48::233
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=2
x-tt-trace-host: 01e06921002e42a87e5dccbe4199333369cf29215245148088591626ebe04445f0c586cd32a987581e3e65480c882fd1a2b13123e6c01af3ab5e5d3cefe7a8c4c5f146afc0f4a4bdebbf97bc13832079c21689ab335a648794de42d62c4656b040
x-response-lb: image
ali-swift-global-savetime: 1671785798
age: 1867746
x-cache: HIT TCP_MEM_HIT dirn:11:313462313
x-swift-savetime: Fri, 23 Dec 2022 09:26:07 GMT
x-swift-cachetime: 31534231
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9716736535443827362e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/ed580edc791142aeb96f40322bdb20b1
47.246.44.224200 OK 414 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/ed580edc791142aeb96f40322bdb20b1
IP 47.246.44.224:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 414 kB (414404 bytes)
Hash 15fd04c9d1b4e8d9b9e7dee448e86fcd
e1ba3e6cb4925a5be286d31e47bd91c05a66b6c6
04a14594db5fd822d8aa8ed1fdcfce1b5ad4f62d51e7c78e0bef2738ebbb2299
GET /obj/tos-cn-i-dy/ed580edc791142aeb96f40322bdb20b1 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 414404
date: Mon, 05 Dec 2022 09:02:51 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 05 Dec 2022 06:27:57 GMT
nw-session-id: 2022120514275701013113601243AE68482bb7b02dy
nw-session-trace: 2022-12-05T14:27:57.379451052+08:00 26
x-bdcdn-cache-status: TCP_HIT
x-length: 414404
x-powered-by: ImageX
x-response-date: Mon, 05 Dec 2022 14:27:57 GMT
x-tt-logid: 2022120514275701013113601243AE6848
via: n132-078-084, cache20.l2de2[0,0,206-0,H], cache3.l2de2[1,0], cache3.l2de2[2,0], cache3.se1[0,0,200-0,H], cache3.se1[1,0]
x-request-ip: fdbd:dc03:4:481::52
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 019a4365567a2968815bc25f89fdb055d52cb951069dd2dddaa1f160ae87392864a1a0ac9e4509c13e4848fbc2f7f00c56e5debb3c9c52740800756f8347bcf7d05cdaece33d4284678f45bb72df2c183d7adb4dc5c6ed7c44d7e39b65caf74dc0
x-response-lb: image
ali-swift-global-savetime: 1670230971
age: 3422573
x-cache: HIT TCP_MEM_HIT dirn:1:455145996
x-swift-savetime: Wed, 11 Jan 2023 02:49:26 GMT
x-swift-cachetime: 28361605
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9716736535443907364e
X-Firefox-Spdy: h2
3p8801.co/77-250x250.gif
107.148.202.17200 OK 33 kB IP 107.148.202.17:0
File type GIF image data, version 89a, 250 x 250\012- data
Hash f333afca9744fcdba93f1ce02612b1c6
19075f1c5ce74e21e75afe4940aa6c9082003792
889cbadf30e2ff32c5b2c857fb8ba1ac590ae248f76edcddc4a8cfbb78d6ea10
GET /77-250x250.gif HTTP/1.1
Host: 3p8801.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 32809
last-modified: Sun, 20 Nov 2022 13:03:15 GMT
etag: "637a2593-8029"
expires: Sun, 12 Feb 2023 23:45:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
xxx6686.app/960-60.gif
123.253.107.219200 OK 381 kB IP 123.253.107.219:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 381 kB (380774 bytes)
Hash d5b19fab300b34d93648b77ba1e87205
eabcc33b82a978d851b9af1337fc656a70f23c2f
e7cce7f77395b75187261e079f448c4b9de06f62f42ca0d2b87662efe80ea69b
GET /960-60.gif HTTP/1.1
Host: xxx6686.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: load-edge/2.1.1
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 380774
last-modified: Tue, 20 Dec 2022 08:28:12 GMT
etag: "63a1721c-5cf66"
strict-transport-security: max-age=31536000
lp-geo: edge-gxr4
lp-addr: 91.90.42.154
lp-request: 13183dbe-6c1e-41ff-95da-04af039c0bf1
lp-id: c4eb7790d8ff6dfada06a89749fc1ba8
expires: Fri, 13 Jan 2023 23:50:43 GMT
cache-control: max-age=300
lp-cache: HIT
lp-cache-hit: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
3p8801.co/11-960x60.gif
107.148.202.17200 OK 242 kB IP 107.148.202.17:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 242 kB (242091 bytes)
Hash b9072e166e9ab28d08854aab05882d3b
a88df27293f6525b000cc1112084fe4f2cdd0e8c
1ad655eb5ad6ce6d519f757b4e78afc39cd41e892897faadf5610e11e3d437b2
GET /11-960x60.gif HTTP/1.1
Host: 3p8801.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 242091
last-modified: Sat, 19 Nov 2022 11:26:07 GMT
etag: "6378bd4f-3b1ab"
expires: Sun, 12 Feb 2023 23:45:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
3p8801.co/xx/250x250.gif
107.148.202.17200 OK 160 kB IP 107.148.202.17:0
File type GIF image data, version 89a, 250 x 250\012- data
Size 160 kB (159480 bytes)
Hash 669d290cb529f8809a6c79f1ba7d5ea9
744c64caa21b7705062bae36ae347bceaf2ee416
ab0b58f5b1da03b72d9490e32bb37d397f9853112edac2f65ba6fb7f0349ff87
GET /xx/250x250.gif HTTP/1.1
Host: 3p8801.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 159480
last-modified: Wed, 21 Dec 2022 15:25:24 GMT
etag: "63a32564-26ef8"
expires: Sun, 12 Feb 2023 23:45:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
taiwtp1.com/xin/96060.gif
220.128.218.220200 OK 69 kB URL HTTP/2 taiwtp1.com/xin/96060.gif
IP 220.128.218.220:0
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 960 x 60\012- data
Hash 1b81020d4419f48ddf8aaa0b7ce34a5c
432154678099ca224ed82b2490a33e5d78f510d5
8a88cbb8fdc88c9da52cdbf3467d9c8b9bed2821135ee631cb877b024bc34aa2
GET /xin/96060.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:38:55 GMT
content-type: image/gif
content-length: 68564
last-modified: Thu, 20 Oct 2022 07:11:01 GMT
etag: "6350f485-10bd4"
expires: Sun, 12 Feb 2023 23:38:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
kvegg.com/72c6d38db25bb1596bd27a0f5716821b.gif
172.83.155.45200 OK 300 kB URL HTTP/2 kvegg.com/72c6d38db25bb1596bd27a0f5716821b.gif
IP 172.83.155.45:0
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 300 kB (300302 bytes)
Hash 6133938531bc95e666b63544e0c77d37
db62577b0e8667555132d12e7dd3e2b503a1397b
6844e342c14efe1553f9941e84a36023527ce4dad7b72c020228627600a2c60a
GET /72c6d38db25bb1596bd27a0f5716821b.gif HTTP/1.1
Host: kvegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 300302
last-modified: Tue, 10 Jan 2023 09:17:04 GMT
etag: "63bd2d10-4950e"
expires: Sat, 14 Jan 2023 11:45:43 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 5290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T0gsn5IFVLHM%2B%2BoCd7Lrd67KEMUMpf3V%2FxNfgL5Oey8o85HPpL6zWdz%2BqmJhI2f21S3Ybj24PRM5ugd84wZ22zHfEpPvK5rlZxBOeUtryiAEHIkpOm1tfF9AKBsW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 7876a52d184730d7-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
7331989ccc.com/8a016d55526e46899cea50cac9f61dd8.gif
45.61.212.123200 OK 485 kB URL HTTP/1.1 7331989ccc.com/8a016d55526e46899cea50cac9f61dd8.gif
IP 45.61.212.123:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 485 kB (485287 bytes)
Hash d380a647f953c9a1c3973d06622da8e9
7ea4c5413441c6287df52aceaffbf0ecabf013c3
2a8319f5970f1a6285054d399614ace55bac9b3195f69a9abe1eeb08c6dd03f2
GET /8a016d55526e46899cea50cac9f61dd8.gif HTTP/1.1
Host: 7331989ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63aa830b-767a7"
Date: Fri, 06 Jan 2023 12:10:14 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Tue, 27 Dec 2022 05:30:51 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-23
Content-Length: 485287
3p8801.co/xx/960x60.gif
107.148.202.17200 OK 582 kB IP 107.148.202.17:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 582 kB (582523 bytes)
Hash cad4eee9d07382a2f695b53aae0c2089
66ad44b09567bbbebffa772d2b416cb9f5b2bafb
e3af64bc06d2e37e60ab6ad902668894b1484cf356e7cab9742fee72899c3124
GET /xx/960x60.gif HTTP/1.1
Host: 3p8801.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 582523
last-modified: Wed, 21 Dec 2022 15:24:38 GMT
etag: "63a32536-8e37b"
expires: Sun, 12 Feb 2023 23:45:43 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
7331989ccc.com/c86f99b435f143efbee8b5c6b82996cb.gif
45.61.212.123200 OK 579 kB URL HTTP/1.1 7331989ccc.com/c86f99b435f143efbee8b5c6b82996cb.gif
IP 45.61.212.123:0
File type GIF image data, version 89a, 750 x 120\012- data
Size 579 kB (579018 bytes)
Hash 54c2a3fb838c8e711bbe07220637d637
77e33ed77eb68c23320c059105fb2c900141301e
fc832269e62682138155c4f5e7f34f36512d1bfe69482fbc4a2cc3d27251c8e1
GET /c86f99b435f143efbee8b5c6b82996cb.gif HTTP/1.1
Host: 7331989ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63b3d36d-8d5ca"
Date: Fri, 13 Jan 2023 15:34:59 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Tue, 03 Jan 2023 07:04:13 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-23
Content-Length: 579018
dvcasha2.ocsp-certum.com/
23.36.79.17200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 6ef4c2d8430540ac28c9df6e551153e7
0978e7891bd37aee269ad5c9b99bf54e2dc5ec25
422639fb5784065eb7f2e814eb353796d3d7a671bf78316756770abce2e2c945
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=876
Date: Fri, 13 Jan 2023 23:45:44 GMT
Connection: keep-alive
X-N: S
uu99k.com/image/1-640X200.gif
23.225.89.166200 OK 118 kB URL HTTP/2 uu99k.com/image/1-640X200.gif
IP 23.225.89.166:0
File type GIF image data, version 89a, 640 x 200\012- data
Size 118 kB (117717 bytes)
Hash 90a809e02687e4f28872e33f66cd33b1
e878a5b152fd19e45108395805b9f3176b5fbfd1
3439fbaf8a34b02ea3ba9bf59892d702e615318ee526b9252cca882b880ce00a
GET /image/1-640X200.gif HTTP/1.1
Host: uu99k.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 23:45:44 GMT
content-type: image/gif
content-length: 117717
last-modified: Wed, 07 Sep 2022 12:58:57 GMT
etag: "63189591-1cbd5"
expires: Mon, 06 Feb 2023 07:12:32 GMT
cache-control: max-age=2592000
server: dns1
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
3366812ccc.com/d35467f31a1e415dbf061087c8c283d5.gif
103.170.15.100200 OK 684 kB URL HTTP/1.1 3366812ccc.com/d35467f31a1e415dbf061087c8c283d5.gif
IP 103.170.15.100:0
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 684 kB (683474 bytes)
Hash ba813a4b9580b3da278e68a1c3e3a954
6d843c3c02ad3270abd575c460ec26ed615578f4
574301fcb45a6820cf36903b271324e32c210c335539d8f1a406f000e1f0e72e
Analyzer Verdict Alert quad9 Sinkholed
GET /d35467f31a1e415dbf061087c8c283d5.gif HTTP/1.1
Host: 3366812ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "62e67b07-a6dd2"
Date: Thu, 12 Jan 2023 20:50:58 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sun, 31 Jul 2022 12:52:23 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-30
Content-Length: 683474
8175835ccc.com/ea9ae1b7e3a34929b0eeba89b340f4fd.gif
45.61.212.229200 OK 727 kB URL HTTP/1.1 8175835ccc.com/ea9ae1b7e3a34929b0eeba89b340f4fd.gif
IP 45.61.212.229:0
File type GIF image data, version 89a, 750 x 120\012- data
Size 727 kB (727309 bytes)
Hash 7a0cbd217f7ed6cc18641f83742517cd
384e058eb426546aa0a0e54d8b77e3559fe7554a
86fb5ce29521edd983b00c7a5b78990ae0fd367b19aa40321c0530463d5e470b
GET /ea9ae1b7e3a34929b0eeba89b340f4fd.gif HTTP/1.1
Host: 8175835ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63b3d35c-b190d"
Date: Thu, 12 Jan 2023 04:43:13 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Tue, 03 Jan 2023 07:03:56 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-29
Content-Length: 727309
mang.tiryakioyun.com/news/data.php
20.187.123.222200 OK 894 kB URL HTTP/2 mang.tiryakioyun.com/news/data.php
IP 20.187.123.222:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Size 894 kB (893916 bytes)
Hash 520d45753982090e7ca778ad9341a3ac
125035cf19d9a366fed52a9dfbc0f6ad73965e52
6f2da9522bf231bc7d6c6602eab1bbecbe3f8e0d884413fe89a375158ba3f6b9
GET /news/data.php HTTP/1.1
Host: mang.tiryakioyun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mang.tiryakioyun.com/news/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.1
date: Fri, 13 Jan 2023 23:45:39 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
x-country: NO
x-cache: BYPASS@waxm3g7zj00000f
X-Firefox-Spdy: h2
img.1193555.com/images/63a68be6fdf312d626fa4628.gif
38.54.37.233302 Found 25 kB URL HTTP/2 img.1193555.com/images/63a68be6fdf312d626fa4628.gif
IP 38.54.37.233:0
File type GIF image data, version 89a, 200 x 100\012- data
Hash 06e963020ad253bec6514e5c0e8bf3e4
6c26bb8e5fba5c642885569b75e7461f456e563e
178d6fab8b2706ee52ef06bf092568b97e273f10f4ed75804a5684548bf4cf96
GET /images/63a68be6fdf312d626fa4628.gif HTTP/1.1
Host: img.1193555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/b9e5ab5578914e51a61f9ec273d2b04e
X-Firefox-Spdy: h2
5951835ccc.com/3c55f52a106a47ff98d4bf61a17901a5.gif
45.61.212.229200 OK 562 kB URL HTTP/1.1 5951835ccc.com/3c55f52a106a47ff98d4bf61a17901a5.gif
IP 45.61.212.229:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 562 kB (561845 bytes)
Hash 4552f51ed05e3f4ed4ffc73bbaf77df3
3f5aab58a8565d2c4c5c4f23477e64c72ce4e61e
3c64bea31f55f50536ea73aee6e1e40ac050a2108379d55765bf774dc483d7d1
Analyzer Verdict Alert quad9 Sinkholed
GET /3c55f52a106a47ff98d4bf61a17901a5.gif HTTP/1.1
Host: 5951835ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "633c1d2d-892b5"
Date: Sat, 07 Jan 2023 11:26:27 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Tue, 04 Oct 2022 11:46:53 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-29
Content-Length: 561845
taiwtp1.com/xin/200200.gif
220.128.218.220200 OK 66 kB URL HTTP/2 taiwtp1.com/xin/200200.gif
IP 220.128.218.220:0
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 200 x 200\012- data
Hash f0ba60ad272f48fb7a6c94d0fff78f8c
5aa704f7f21da3ebcda26cc67adfb21a218e7c97
22ca789fd1bcfce63c63a1b380a9666fbb44d3c6003c110d1956995a27a3d108
GET /xin/200200.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:38:55 GMT
content-type: image/gif
content-length: 65592
last-modified: Thu, 20 Oct 2022 07:11:02 GMT
etag: "6350f486-10038"
expires: Sun, 12 Feb 2023 23:38:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif
121.226.246.3200 OK 1.2 MB URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif
IP 121.226.246.3:0
File type GIF image data, version 89a, 960 x 80\012- data
Size 1.2 MB (1197751 bytes)
Hash 6938343bc2a842c4d2c9c96f4dde0298
00e2b1b902b196b3c005facb934c10e2a2ca1961
5ccc1726994dfc6d2667e13bf946785f79bb01401fedb59db1cbdf6942dbaee6
GET /ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:43 GMT
content-type: image/gif
content-length: 1197751
cache-control: max-age=15552000
expires: Mon, 10 Jul 2023 05:49:52 GMT
last-modified: Fri, 25 Nov 2022 14:36:03 GMT
age: 237352
via: http/1.1 ORI-CLOUD-HUZ-MIX-22 (jcs [cHs f ]), http/1.1 SQ-CT-1-MIX-21 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1673416192906-0-0-0-43-43;200;200-1673505617997-0-0-0-6-6;200-1673653543871-0-0-0-1-1
X-Firefox-Spdy: h2
kjimg10.360buyimg.com/ott/jfs/t1/170425/6/32628/456580/6380d2c1E13738aaf/3604e19911b57cb8.gif
121.226.246.3200 OK 457 kB URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/170425/6/32628/456580/6380d2c1E13738aaf/3604e19911b57cb8.gif
IP 121.226.246.3:0
File type GIF image data, version 89a, 650 x 350\012- data
Size 457 kB (456580 bytes)
Hash 7059d55150d658811ac4db8966a550c4
f3dd9b37c342379598385c8f8167d99f6b367e31
3082ea513221ce133b3462fdf8c67f38bbce2a0106447ea469d61860a834488d
GET /ott/jfs/t1/170425/6/32628/456580/6380d2c1E13738aaf/3604e19911b57cb8.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:44 GMT
content-type: image/gif
content-length: 456580
cache-control: max-age=15552000
expires: Sun, 09 Jul 2023 07:27:08 GMT
last-modified: Fri, 25 Nov 2022 14:35:45 GMT
age: 317916
via: http/1.1 ORI-CLOUD-HUZ-MIX-20 (jcs [cRs f ]), http/1.1 SQ-CT-1-MIX-23 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1673335628847-0-0-20-67-67;200;200-1673418314647-0-0-0-0-0;200-1673653544066-0-0-0-1-1
X-Firefox-Spdy: h2
yaoji666.oss-cn-hongkong.aliyuncs.com/gg/960X60.gif
47.75.19.46200 OK 96 kB URL HTTP/1.1 yaoji666.oss-cn-hongkong.aliyuncs.com/gg/960X60.gif
IP 47.75.19.46:0
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Hash 57557d6b489d522d480d9b82ce29db65
da2d3b35f0c9534e84e50310aeafe73173037315
4b96548579c0d9b380b10ce78bdb3e8edfd35e180519b319c6b1181e7b325952
GET /gg/960X60.gif HTTP/1.1
Host: yaoji666.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Fri, 13 Jan 2023 23:45:44 GMT
Content-Type: image/gif
Content-Length: 95856
Connection: keep-alive
x-oss-request-id: 63C1ED2822C82A38317B7CCF
Accept-Ranges: bytes
ETag: "57557D6B489D522D480D9B82CE29DB65"
Last-Modified: Sat, 09 Jul 2022 12:37:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15928828585404051914
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
Content-MD5: V1V9a0idUi1IDZuCzinbZQ==
x-oss-server-time: 2
taiwtp1.com/xin/200200sas.gif
220.128.218.220200 OK 694 kB URL HTTP/2 taiwtp1.com/xin/200200sas.gif
IP 220.128.218.220:0
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 200 x 200\012- data
Size 694 kB (693471 bytes)
Hash e6ff7b0afb00d39bca2032b100e871ec
f3da5b9bd4d1769ed482bf6f23c3b05ded824d63
41d7266ed35337d77b04bad32c7ec3c4b44e7a1707f6c6f21c8e6bc4c9f3f252
GET /xin/200200sas.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:38:55 GMT
content-type: image/gif
content-length: 693471
last-modified: Sat, 26 Nov 2022 10:45:28 GMT
etag: "6381ee48-a94df"
expires: Sun, 12 Feb 2023 23:38:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/933b7dd488ee4d46834c550daf5376ef
47.246.44.224200 OK 524 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/933b7dd488ee4d46834c550daf5376ef
IP 47.246.44.224:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 400 x 200\012- data
Size 524 kB (523543 bytes)
Hash 1b5034b773b5a78e157e444e37953dbd
5ea58fa6df03042627b8f8499b935ce127a1bcd3
7daed022f9c9110c9f74497ceac7f05860557978be7b0f5f0d6c569406e07ce9
GET /obj/tos-cn-i-dy/933b7dd488ee4d46834c550daf5376ef HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 523543
date: Mon, 05 Dec 2022 10:51:40 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 05 Dec 2022 08:37:32 GMT
nw-session-id: 2022120516373201013515722649B35A5D6vvqq02dy
nw-session-trace: 2022-12-05T16:37:32.824778777+08:00 66
x-bdcdn-cache-status: TCP_HIT
x-length: 523543
x-powered-by: ImageX
x-response-date: Mon, 05 Dec 2022 16:37:32 GMT
x-tt-logid: 2022120516373201013515722649B35A5D
via: n131-120-158, cache17.l2de2[0,0,206-0,H], cache26.l2de2[1,0], cache26.l2de2[1,0], cache1.se1[0,0,200-0,H], cache3.se1[1,0]
x-request-ip: fdbd:dc03:15:231::134
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 01c8ece97797ab471258f0ed9399e915f964db15fa6412f71a6f1da8806592e16e0f19d883cf19fc1efd47035ee5280139cfff8ec8823b9d24403cff410b6347d6250b72f023648cc732e4e6629a7c7dfa538e141c7d4340bd94534e69d60f97ea
x-response-lb: image
ali-swift-global-savetime: 1670237500
age: 3416045
x-cache: HIT TCP_MEM_HIT dirn:4:264074036
x-swift-savetime: Mon, 05 Dec 2022 11:35:19 GMT
x-swift-cachetime: 31533381
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9716736535456478215e
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cadc50dd14402537783d58141cbc3e22
08b003ddd271c63d79f774dc32f669785bf1e5a3
adfe3794babc7d08566cd1388e14b4fd045a73a6cb18d7f437b985c031c167e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=119712
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 23:45:45 GMT
Etag: "63c11dc9-1d7"
Expires: Sun, 15 Jan 2023 09:00:57 GMT
Last-Modified: Fri, 13 Jan 2023 09:00:57 GMT
Server: nginx
Content-Length: 471
kjimg10.360buyimg.com/ott/jfs/t1/216719/34/23684/2643442/6380d0f3E39850c8a/5b9666f7e9703dbb.gif
121.226.246.3200 OK 2.6 MB URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/216719/34/23684/2643442/6380d0f3E39850c8a/5b9666f7e9703dbb.gif
IP 121.226.246.3:0
File type GIF image data, version 89a, 650 x 350\012- data
Size 2.6 MB (2643442 bytes)
Hash ffbc057a89fded997b059241f4f62c8e
36e8883858804959ce2597b61378e809ea789b4a
2de6e43216a0750e04a759344cb97bf648c34e69aff52e164cbf88703eeb03e7
GET /ott/jfs/t1/216719/34/23684/2643442/6380d0f3E39850c8a/5b9666f7e9703dbb.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:44 GMT
content-type: image/gif
content-length: 2643442
cache-control: max-age=15552000
expires: Sun, 09 Jul 2023 05:54:27 GMT
last-modified: Fri, 25 Nov 2022 14:28:03 GMT
age: 323477
via: http/1.1 ORI-CLOUD-HUZ-MIX-30 (jcs [cHs f ]), http/1.1 SQ-CT-1-MIX-16 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1673330067160-0-0-1-108-108;200;200-1673460537408-0-0-0-5-5;200-1673653544114-0-0-0-1-1
X-Firefox-Spdy: h2
img.9717x.com/images/638dcf31c8af59418ed6f7cb.gif
38.54.37.233302 Found 0 B URL HTTP/2 img.9717x.com/images/638dcf31c8af59418ed6f7cb.gif
IP 38.54.37.233:0
GET /images/638dcf31c8af59418ed6f7cb.gif HTTP/1.1
Host: img.9717x.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/933b7dd488ee4d46834c550daf5376ef
X-Firefox-Spdy: h2
img.u1557.com/images/638dcf21c8af59418ed6f7ca.gif
38.54.37.233302 Found 0 B URL HTTP/2 img.u1557.com/images/638dcf21c8af59418ed6f7ca.gif
IP 38.54.37.233:0
GET /images/638dcf21c8af59418ed6f7ca.gif HTTP/1.1
Host: img.u1557.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/ed580edc791142aeb96f40322bdb20b1
X-Firefox-Spdy: h2
cdn.u1.huluxia.com/g4/M02/0A/07/rBAAdmOdZyuAaNCBAAHZbWvuZa0650.png
104.250.44.2200 OK 0 B URL HTTP/1.1 cdn.u1.huluxia.com/g4/M02/0A/07/rBAAdmOdZyuAaNCBAAHZbWvuZa0650.png
IP 104.250.44.2:0
ASN #137280 Kingsoft cloud corporation limited
GET /g4/M02/0A/07/rBAAdmOdZyuAaNCBAAHZbWvuZa0650.png HTTP/1.1
Host: cdn.u1.huluxia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 121197
Connection: keep-alive
Server: KS3
ETag: "c333d9318beb5b59bc7fd1dbe71ed7f3"
Date: Fri, 13 Jan 2023 23:45:45 GMT
Last-Modified: Sat, 17 Dec 2022 06:52:27 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
X-Application-Context: application
x-kss-request-id: flb16t80m3r8bs74c1ib1nsillc960gi
X-Info-StorageClass: -
Content-MD5: wzPZMYvrW1m8f9Hb5x7X8w==
x-kss-meta-huluxia_upload: huluxia_upload
x-link-via: lsj11:443;lsj12:80;
x-b2f-cs-cache: no-cache
X-Cache-Status: MISS from KS-CLOUD-LSJ-12-01, MISS from KS-CLOUD-LSJ-11-02
X-Cdn-Request-ID: 3683cbcacafc0675732cf83c41f89ae0
www.mgydbn.xyz/template/m1938pc/js/jquery.config.js
173.231.17.185200 OK 0 B URL HTTP/2 www.mgydbn.xyz/template/m1938pc/js/jquery.config.js
IP 173.231.17.185:0
GET /template/m1938pc/js/jquery.config.js HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: application/javascript
last-modified: Fri, 11 Mar 2022 04:27:08 GMT
vary: Accept-Encoding
etag: W/"622acf9c-1469"
expires: Sat, 14 Jan 2023 11:45:41 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.mgydbn.xyz/template/m1938pc/html9/ad/zxf8.js
173.231.17.185200 OK 0 B URL HTTP/2 www.mgydbn.xyz/template/m1938pc/html9/ad/zxf8.js
IP 173.231.17.185:0
GET /template/m1938pc/html9/ad/zxf8.js HTTP/1.1
Host: www.mgydbn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 23:45:41 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 07:42:17 GMT
vary: Accept-Encoding
etag: W/"6385b7d9-614"
expires: Sat, 14 Jan 2023 11:45:41 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
img.1138555.com/images/63a68bb2fdf312d626fa4627.gif
38.54.37.233302 Found 0 B URL HTTP/2 img.1138555.com/images/63a68bb2fdf312d626fa4627.gif
IP 38.54.37.233:0
GET /images/63a68bb2fdf312d626fa4627.gif HTTP/1.1
Host: img.1138555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/40bafe53c7a9435ab62b2965a26ca7de
X-Firefox-Spdy: h2
png.pngtree.com/png-vector/20190603/ourmid/pngtree-icon-close-button-png-image_1357955.jpg
104.18.2.157403 Forbidden 0 B URL HTTP/2 png.pngtree.com/png-vector/20190603/ourmid/pngtree-icon-close-button-png-image_1357955.jpg
IP 104.18.2.157:0
GET /png-vector/20190603/ourmid/pngtree-icon-close-button-png-image_1357955.jpg HTTP/1.1
Host: png.pngtree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Fri, 13 Jan 2023 23:45:44 GMT
content-type: application/xml
cf-ray: 789201d7193db518-OSL
access-control-allow-origin: *
vary: Accept-Encoding
cf-cache-status: MISS
x-amz-id-2: 2iqp6bedJDiKhEZ+tNEG1BxPJDEamt7dDsU3l7B0WrhUNfWiUSGTFOpBqEsTKOEPUWY/wrf0UfU=
x-amz-request-id: E78M5PPPPH9A7G1C
set-cookie: __cf_bm=.bAkNaFmex4ZfSmucJBIFNJYOttC4XynRkDXWt9_Kq8-1673653544-0-AbhKJ90A53UZkKfS3TR6FDAhP6r2bvtI659tlDQUvArqUtdC240IdPWYvBahBN/vMDiIOSnyIrEDVqf3hI1Qzro=; path=/; expires=Sat, 14-Jan-23 00:15:44 GMT; domain=.pngtree.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0
43.154.254.32200 OK 0 B URL HTTP/2 p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0
IP 43.154.254.32:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mgydbn.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Fri, 13 Jan 2023 23:45:44 GMT
content-type: image/gif
content-length: 1362871
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:47 GMT
cache-control: max-age=2592000
x-delay: 681 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1362871
chid: 0
fid: 0
x-nws-log-uuid: 7c82a884-bd12-44f7-acdb-167e16c788b1
X-Firefox-Spdy: h2