www.5yyw.cn/
807 B IP
ASN #134548 DXTL Tseung Kwan O Service
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash d13bbb5cadb7e9bd1c600da01160997e
39d99309b7e64233f69443489c9de5db5b654911
55ced75a6f11d6a920ca9e2a717395c82c3457ea3c96b73a31973db215aec256
GET / HTTP/1.1
Host: www.5yyw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:15 GMT
Content-Type: text/html
Content-Length: 807
Connection: keep-alive
807 B IP
ASN #134548 DXTL Tseung Kwan O Service
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash d13bbb5cadb7e9bd1c600da01160997e
39d99309b7e64233f69443489c9de5db5b654911
55ced75a6f11d6a920ca9e2a717395c82c3457ea3c96b73a31973db215aec256
GET /long.exe HTTP/1.1
Host: www.5yyw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:16 GMT
Content-Type: text/html
Content-Length: 807
Connection: keep-alive
www.5yyw.cn/common.js
200 OK 657 B IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.5yyw.cn/long.exe
File type HTML document text\012- HTML document, ASCII text, with very long lines (438), with CRLF line terminators
Hash 85b7e15823b19588254b1a9cf6b8ff99
cd9c3292e84676b437b1a065d1ab4c486e90669d
631f4f215946a15708248881aec11d0fb5e460fae1e9906d132d708f58e5bcc9
GET /common.js HTTP/1.1
Host: www.5yyw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.5yyw.cn/long.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:16 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.5yyw.cn/tj.js
200 OK 258 B IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.5yyw.cn/long.exe
File type ASCII text, with CRLF line terminators
Hash b86c592d7ee4a99f7a23f73e010c85ec
e0cdbd70a52ecdf0c0e72c244b6091a6e6abf7ec
c716a50c21162f91e3fee03ab4ddc30631dbd4f7f314a8d2b0b8adede1c9117e
GET /tj.js HTTP/1.1
Host: www.5yyw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.5yyw.cn/long.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:16 GMT
Content-Type: application/x-javascript
Content-Length: 258
Connection: keep-alive
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL GET HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.5yyw.cn/long.exe
File type ASCII text, with no line terminators
Hash 1bb5a3267c9865ad4abe8d937734b62b
b5478dd2edb3e64242eced1db2dbd945ef81f592
674bc0c70f98d627b8a7e1d278a1f21ffe33815565f7d5371bf0275da57571b2
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.5yyw.cn/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Tue, 26 Sep 2023 19:08:16 GMT
Etag: "4078521116"
Expires: Wed, 25 Sep 2024 19:08:16 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=D8FCF3161B7311D8BBD7C1D70864C0CE:FG=1; max-age=31536000; expires=Wed, 25-Sep-24 19:08:16 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
www.5yyw.cn/favicon.ico
200 OK 1.2 kB IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.5yyw.cn/long.exe
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.5yyw.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.5yyw.cn/long.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:17 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sun, 01 Oct 2023 19:08:17 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
api.share.baidu.com/s.gif?l=http://www.5yyw.cn/long.exe
200 OK 0 B URL GET HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.5yyw.cn/long.exe
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.5yyw.cn/long.exe
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.5yyw.cn/long.exe HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.5yyw.cn/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Tue, 26 Sep 2023 19:08:17 GMT
hm.baidu.com/hm.js?da290f3d0640bfae8ea9a58402ee3ab3
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?da290f3d0640bfae8ea9a58402ee3ab3
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.5yyw.cn/long.exe
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?da290f3d0640bfae8ea9a58402ee3ab3 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5yyw.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Tue, 26 Sep 2023 19:08:17 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
game168.top/template/m1938/images/1.gif
200 OK 254 B URL GET HTTP/3 game168.top/template/m1938/images/1.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgame168.top
Fingerprint2C:B9:41:88:EE:05:F5:A4:D6:01:DD:46:25:4B:46:2F:E1:8B:8B:F6
ValiditySun, 17 Sep 2023 02:32:50 GMT - Sat, 16 Dec 2023 02:32:49 GMT
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /template/m1938/images/1.gif HTTP/1.1
Host: game168.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 19:08:18 GMT
content-type: image/gif
content-length: 254
last-modified: Wed, 03 May 2023 15:34:56 GMT
etag: "64527f20-fe"
expires: Tue, 24 Oct 2023 11:52:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 198939
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CoKFtubP%2FqDRvHdBKR7zO8un5y1xxOisKTTZROL6Rr0QWzcdF5IwMszkBBaHhk%2F5Hy8%2FA5IunM4auWhJijSqdZkMjytJcFTh4Liwj%2B0s54b3QMm%2FarkezAwNJ2G31Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdcb760ba25695-OSL
alt-svc: h3=":443"; ma=86400
game168.top/template/m1938/images/video-play.png
200 OK 1.6 kB URL GET HTTP/3 game168.top/template/m1938/images/video-play.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgame168.top
Fingerprint2C:B9:41:88:EE:05:F5:A4:D6:01:DD:46:25:4B:46:2F:E1:8B:8B:F6
ValiditySun, 17 Sep 2023 02:32:50 GMT - Sat, 16 Dec 2023 02:32:49 GMT
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/m1938/images/video-play.png HTTP/1.1
Host: game168.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/template/m1938/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 19:08:18 GMT
content-type: image/png
content-length: 1567
last-modified: Sat, 22 May 2021 20:07:20 GMT
etag: "60a96478-61f"
expires: Tue, 24 Oct 2023 11:52:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 198939
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LIFhEyz5sX%2BldinYZd5PkICyQtXDIQOmDsi6hhoaAPHVpiByUZPiGR1sC9jFRYBiAV85QPjGxvI8cxQSrO0YUeJ9mqiuuS8ScIflsk3GCXO70ilEN0LWDFTHxFmX6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdcb774d205695-OSL
alt-svc: h3=":443"; ma=86400
game168.top/template/m1938/css/style2.css
200 OK 10 kB URL GET HTTP/3 game168.top/template/m1938/css/style2.css
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgame168.top
Fingerprint2C:B9:41:88:EE:05:F5:A4:D6:01:DD:46:25:4B:46:2F:E1:8B:8B:F6
ValiditySun, 17 Sep 2023 02:32:50 GMT - Sat, 16 Dec 2023 02:32:49 GMT
File type Unicode text, UTF-8 text, with very long lines (3613)
Hash 7f04ac83c73c7aa8619e35d4f8e42a43
edf572425a72df376994a47d19f6c52379030988
49fb1294e378e45e788c41c9ca3a205b37e4865348964b06746bbca05f95a62e
GET /template/m1938/css/style2.css HTTP/1.1
Host: game168.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 19:08:18 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2023 14:20:48 GMT
vary: Accept-Encoding
etag: W/"644bd640-7dbb"
expires: Wed, 27 Sep 2023 06:08:48 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 3570
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MS1i2knI0DKXzmeyO188TTJ7YzOFoIXjeVFGyf66dHEMrrtNQ8TPG0FC5mnxB6RGpVehueZ2PUUn6QufdWokootpPT%2ByPm%2FQ96STDWrFlG55zbLbi5nGu70aMzD1bA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdcb75eb895695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash ed48971feefd7030e6a5e3c83d3817b4
cbf10543d1793b9d9e4a2d94a776ddb3e032b325
85f90ce7acc58fa5c8ab01c06c4ecab627066cafafa85d9dd590a40fd81a16db
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Tue, 26 Sep 2023 19:08:18 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash ed48971feefd7030e6a5e3c83d3817b4
cbf10543d1793b9d9e4a2d94a776ddb3e032b325
85f90ce7acc58fa5c8ab01c06c4ecab627066cafafa85d9dd590a40fd81a16db
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=892
Date: Tue, 26 Sep 2023 19:08:18 GMT
Connection: keep-alive
X-N: S
ocsp.sectigo.com/
471 B IP
Hash 1b64f2643e8c8bf136e01d99b754102d
7de90be95dc5c58f0f82a9123a0ae51fd3f780be
a2ff90746e9059bceae7cb10ba9b0e3b0e44f87466f1e1800e2f768a11eaa9f0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 10:27:56 GMT
Expires: Mon, 02 Oct 2023 10:27:55 GMT
Etag: "7de90be95dc5c58f0f82a9123a0ae51fd3f780be"
Cache-Control: max-age=487208,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80cdcb7aff5bb50b-OSL
ocsp.sectigo.com/
471 B IP
Hash 1b64f2643e8c8bf136e01d99b754102d
7de90be95dc5c58f0f82a9123a0ae51fd3f780be
a2ff90746e9059bceae7cb10ba9b0e3b0e44f87466f1e1800e2f768a11eaa9f0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 10:27:56 GMT
Expires: Mon, 02 Oct 2023 10:27:55 GMT
Etag: "7de90be95dc5c58f0f82a9123a0ae51fd3f780be"
Cache-Control: max-age=487208,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80cdcb7af9ebb51e-OSL
ocsp.sectigo.com/
471 B IP
Hash 1b64f2643e8c8bf136e01d99b754102d
7de90be95dc5c58f0f82a9123a0ae51fd3f780be
a2ff90746e9059bceae7cb10ba9b0e3b0e44f87466f1e1800e2f768a11eaa9f0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 10:27:56 GMT
Expires: Mon, 02 Oct 2023 10:27:55 GMT
Etag: "7de90be95dc5c58f0f82a9123a0ae51fd3f780be"
Cache-Control: max-age=486578,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80cdcb7b0ce2b518-OSL
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 4c86dd3661de8cf45118aa7d87ec4eed
9bb2315bea4a148e6de6a77f656905472e531f82
788d8473372663df154528a2df65f26e72f8017a04d6c4eb30fc6ce1c91513ee
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=880
Date: Tue, 26 Sep 2023 19:08:19 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 47d1d0d4a319b864b91651d32557bf9e
c80ddd9fba70b5e1198c036e5a601e7f14627619
fe37de441e95d15622eb99ca2b5219414d99f78ea9833445d99be13ab57a1fa4
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: UPDATING
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Tue, 26 Sep 2023 19:08:19 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 47d1d0d4a319b864b91651d32557bf9e
c80ddd9fba70b5e1198c036e5a601e7f14627619
fe37de441e95d15622eb99ca2b5219414d99f78ea9833445d99be13ab57a1fa4
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: UPDATING
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=840
Date: Tue, 26 Sep 2023 19:08:19 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 47d1d0d4a319b864b91651d32557bf9e
c80ddd9fba70b5e1198c036e5a601e7f14627619
fe37de441e95d15622eb99ca2b5219414d99f78ea9833445d99be13ab57a1fa4
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: UPDATING
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Tue, 26 Sep 2023 19:08:19 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 1149c71b0ba16ef4a6e7143b3126fab7
6141b7ea829934174dac8dd11bee92d82e012b43
94cadbe54fd16ebdcd12ae6a125b343465c41f32d9a7def516347e7baed4bde9
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: STALE
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Tue, 26 Sep 2023 19:08:19 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 47d1d0d4a319b864b91651d32557bf9e
c80ddd9fba70b5e1198c036e5a601e7f14627619
fe37de441e95d15622eb99ca2b5219414d99f78ea9833445d99be13ab57a1fa4
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: UPDATING
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Tue, 26 Sep 2023 19:08:19 GMT
Connection: keep-alive
game168.top/template/m1938/css/zui.css
200 OK 121 kB URL GET HTTP/3 game168.top/template/m1938/css/zui.css
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgame168.top
Fingerprint2C:B9:41:88:EE:05:F5:A4:D6:01:DD:46:25:4B:46:2F:E1:8B:8B:F6
ValiditySun, 17 Sep 2023 02:32:50 GMT - Sat, 16 Dec 2023 02:32:49 GMT
File type assembler source, Unicode text, UTF-8 text
Size 121 kB (121048 bytes)
Hash 7b5a0650e21acf014072bd80c336cf66
8d05d047b84c2db8357a81fc23916a70ab86ccbf
1304be5b762ce7b56a664cf6e785eab6e84a2ff8a2973f4e27def4adc77b2f3d
GET /template/m1938/css/zui.css HTTP/1.1
Host: game168.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 19:08:18 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2023 14:16:26 GMT
vary: Accept-Encoding
etag: W/"644bd53a-1b2c5"
expires: Wed, 27 Sep 2023 06:08:48 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 3570
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SdKlTycNEl0STejbg5OfOWrGMhF1V%2BufcpS1D0YfkraxO79BTubT%2BCOP%2B3Wcw7V6jk%2BoSm22PyuVb9XrEFZGFQLwOkKE6p8%2BJFunmm8gkVyJQGWBr%2BirgiLbEGOvOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdcb75eb815695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nxximg.com/20230925/w3n1Rgja/1.jpg?t=1695625897
200 OK 14 kB URL GET HTTP/1.1 nxximg.com/20230925/w3n1Rgja/1.jpg?t=1695625897
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 400x225, components 3\012- data
Hash d10862acecac7145a689f1f94b7f8679
4061bf456e3ff190191773c45a8bc909b42c9b15
7c0fefb1ecc391152054af0580beb2b3036f9ce37acc60314b28658a309a03e2
GET /20230925/w3n1Rgja/1.jpg?t=1695625897 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 14302
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:11:07 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124bcb-37de"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
hm.baidu.com/hm.js?a913343dbdb5f7de1781112de321bef2
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?a913343dbdb5f7de1781112de321bef2
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (622)
Hash 238bfcc55c26f3ddb26c32cd5f97a649
c86df8bb4503d5e4db862c358dda3dddd063a388
ef11f0fd3e198607a29c4fd643fc36cc64da51f8cb7577a64a6812a6a93e0d61
GET /hm.js?a913343dbdb5f7de1781112de321bef2 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11260
Content-Type: application/javascript
Date: Tue, 26 Sep 2023 19:08:18 GMT
Etag: 4e60f6a5c507681606c909b796c0245f
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=D2BD904BCE540E00; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
nxximg.com/20230925/UHFVwaEL/1.jpg?t=1695625856
200 OK 16 kB URL GET HTTP/1.1 nxximg.com/20230925/UHFVwaEL/1.jpg?t=1695625856
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 400x225, components 3\012- data
Hash f008cd1a45b551051687110a670ec47a
2f26e61592e1bd35a508c130b44d18529619f205
d36485e4324d48afcbe58705155b775b0231bd58f5a5f7b7fcc3a0d2d01fb9f2
GET /20230925/UHFVwaEL/1.jpg?t=1695625856 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 15998
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:11:09 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124bcd-3e7e"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
nxximg.com/20230922/qeILjafa/1.jpg?t=1695369886
200 OK 19 kB URL GET HTTP/1.1 nxximg.com/20230922/qeILjafa/1.jpg?t=1695369886
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 400x223, components 3\012- data
Hash 134b7ac87323cb8164ff211d0dabbab1
aa53e0abf80f31568eba8d5c5620574902aabf29
83fbcaed94931de55dc7ee8584cc38fdb3e4cae18b0668fbe79033c9e081298b
GET /20230922/qeILjafa/1.jpg?t=1695369886 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 18903
Connection: keep-alive
Last-Modified: Sat, 23 Sep 2023 06:40:45 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "650e886d-49d7"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
tp.xinxiyidiantong.com:5868/uploads/w2yv7gaw62ruwr45e84katad9rwob2w25kltscui.gif
200 OK 147 kB URL GET HTTP/1.1 tp.xinxiyidiantong.com:5868/uploads/w2yv7gaw62ruwr45e84katad9rwob2w25kltscui.gif
IP
Certificate IssuerLet's Encrypt
Subjecttp.xinxiyidiantong.com
FingerprintC3:5E:6E:33:30:75:29:8F:E1:36:72:09:5C:31:36:98:45:66:2B:26
ValidityMon, 11 Sep 2023 01:21:57 GMT - Sun, 10 Dec 2023 01:21:56 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3\012- data
Size 147 kB (147300 bytes)
Hash fe2630f436d6054d633eed77c690cb04
3973acea65be0ccc75b8e1f35025599a2d3a05f8
914a9a3504f52008e94907997960f451a6ed001f8aaa95b444725f2a6200850b
GET /uploads/w2yv7gaw62ruwr45e84katad9rwob2w25kltscui.gif HTTP/1.1
Host: tp.xinxiyidiantong.com:5868
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:18 GMT
Content-Type: image/gif
Content-Length: 147300
Last-Modified: Thu, 06 Oct 2022 15:34:13 GMT
Connection: keep-alive
ETag: "633ef575-23f64"
Expires: Thu, 26 Oct 2023 19:08:18 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
nxximg.com/20230925/ADWD8lpM/1.jpg?t=1695626074
200 OK 16 kB URL GET HTTP/1.1 nxximg.com/20230925/ADWD8lpM/1.jpg?t=1695626074
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 400x225, components 3\012- data
Hash 965379ae3d5c194e656a4b2f41846996
335637f7c1e266704a7300f130f5b34697bbf470
a4c290f5240608d6986a53f14f6c0ad8fad9c41853e206703bde5cbab370e833
GET /20230925/ADWD8lpM/1.jpg?t=1695626074 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 15556
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:11:08 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124bcc-3cc4"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
hm.baidu.com/hm.js?f87907ecdd9f6db626a7e34aaba55e8d
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?f87907ecdd9f6db626a7e34aaba55e8d
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (619)
Hash d9a4bdc93d15db8013a712001c713c47
d47e7fc5286fef4370d8d2e259e1c237afd12c01
2245233cc3ca79436493f21791dac51b79f5778b42649f3098337b584bff8e8c
GET /hm.js?f87907ecdd9f6db626a7e34aaba55e8d HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Tue, 26 Sep 2023 19:08:18 GMT
Etag: 873b6b522144698e00790e52e5ad74ec
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=D32A28872D355A31; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
nxximg.com/20230925/WFNcEHz2/1.jpg?t=1695625872
200 OK 50 kB URL GET HTTP/1.1 nxximg.com/20230925/WFNcEHz2/1.jpg?t=1695625872
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash 7675fae3142e0125f6bb05b95c9306c9
1db18c35e7b7a432a50dd0f645502e9a5dbaf2a7
cd3f66a9ec385a1c7d2adc94dc951708d636af576c067cbef36d10869db7af2d
GET /20230925/WFNcEHz2/1.jpg?t=1695625872 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 50218
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:09:13 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124b59-c42a"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
img.1379a.xyz/images/64ad519cc789ac3b7abc4494.gif
302 Found 0 B URL GET HTTP/2 img.1379a.xyz/images/64ad519cc789ac3b7abc4494.gif
IP
Certificate IssuerLet's Encrypt
Subject1379a.xyz
FingerprintBB:FB:C7:6D:53:7D:DC:9B:DB:72:46:57:0D:B0:DF:B5:B9:EC:EC:3F
ValidityTue, 18 Jul 2023 15:16:23 GMT - Mon, 16 Oct 2023 15:16:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/64ad519cc789ac3b7abc4494.gif HTTP/1.1
Host: img.1379a.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://files.230808.top/store/loveimgmoe/44/94/64ad519cc789ac3b7abc4494.gif
X-Firefox-Spdy: h2
img.1379a.xyz/images/649be5c44f60bc44cdef5c31.gif
302 Found 0 B URL GET HTTP/2 img.1379a.xyz/images/649be5c44f60bc44cdef5c31.gif
IP
Certificate IssuerLet's Encrypt
Subject1379a.xyz
FingerprintBB:FB:C7:6D:53:7D:DC:9B:DB:72:46:57:0D:B0:DF:B5:B9:EC:EC:3F
ValidityTue, 18 Jul 2023 15:16:23 GMT - Mon, 16 Oct 2023 15:16:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/649be5c44f60bc44cdef5c31.gif HTTP/1.1
Host: img.1379a.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://files.230808.top/store/loveimgmoe/5c/31/649be5c44f60bc44cdef5c31.gif
X-Firefox-Spdy: h2
nxximg.com/20230925/RJt7oW9C/1.jpg?t=1695626108
200 OK 13 kB URL GET HTTP/1.1 nxximg.com/20230925/RJt7oW9C/1.jpg?t=1695626108
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 400x225, components 3\012- data
Hash 3815c16903cb9959289157c216b87dc4
7e2729c2ca5eac26640c9fbc183b15b4bfacc99b
6a69ec78ddb9addff8103fe66531f02e6439fbfe0381cdcee88d5faccf42e226
GET /20230925/RJt7oW9C/1.jpg?t=1695626108 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 13208
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:11:07 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124bcb-3398"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
nxximg.com/20230925/Fmo29Cti/1.jpg?t=1695626317
200 OK 65 kB URL GET HTTP/1.1 nxximg.com/20230925/Fmo29Cti/1.jpg?t=1695626317
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 14373-9792, spot sensor temperature 0.000000, unit fahrenheit, color scheme 8, show spot sensor, minimum point enabled, calibration: offset 0.000000, slope 0.004982\012- data
Hash 1d80eb65869c9081bc6a74902b75ab25
eff58b22b8a360375a6166ade75ffd57d9c211f1
27b2a9da73d3ff0fc8d4b1a4801add4d98c16ed5ed39696e52fd965a0b438075
GET /20230925/Fmo29Cti/1.jpg?t=1695626317 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 65181
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:09:12 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124b58-fe9d"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
tp.xinxiyidiantong.com:5868/uploads/zdxu27gbnptd1nlnoezm734xiww2lz8gs5rh881c.gif
200 OK 36 kB URL GET HTTP/1.1 tp.xinxiyidiantong.com:5868/uploads/zdxu27gbnptd1nlnoezm734xiww2lz8gs5rh881c.gif
IP
Certificate IssuerLet's Encrypt
Subjecttp.xinxiyidiantong.com
FingerprintC3:5E:6E:33:30:75:29:8F:E1:36:72:09:5C:31:36:98:45:66:2B:26
ValidityMon, 11 Sep 2023 01:21:57 GMT - Sun, 10 Dec 2023 01:21:56 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x200, components 3\012- data
Hash 7e5d039a1efc18bb7bea97fd777c69af
68ef09f74077052dcb97d54c3223d60b3cc8b571
49f4dac0c9655023462733d66e03a78de44377c97c6e1c78347a571f93696ba5
GET /uploads/zdxu27gbnptd1nlnoezm734xiww2lz8gs5rh881c.gif HTTP/1.1
Host: tp.xinxiyidiantong.com:5868
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: image/gif
Content-Length: 36274
Last-Modified: Wed, 19 Feb 2020 07:01:50 GMT
Connection: keep-alive
ETag: "5e4cdd5e-8db2"
Expires: Thu, 26 Oct 2023 19:08:19 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
tp.xinxiyidiantong.com:5868/uploads/9ac8ygliapz5ww4p3uuacykkfhn6am4w6t6hqand.png
200 OK 190 kB URL GET HTTP/1.1 tp.xinxiyidiantong.com:5868/uploads/9ac8ygliapz5ww4p3uuacykkfhn6am4w6t6hqand.png
IP
Certificate IssuerLet's Encrypt
Subjecttp.xinxiyidiantong.com
FingerprintC3:5E:6E:33:30:75:29:8F:E1:36:72:09:5C:31:36:98:45:66:2B:26
ValidityMon, 11 Sep 2023 01:21:57 GMT - Sun, 10 Dec 2023 01:21:56 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3\012- data
Size 190 kB (189479 bytes)
Hash b7d3386d8dec73589a373636029dc398
0c82d7bc365bd993fedb87ca7562be28ba29acdf
35f1c96a80e4059cda3efa1f9c4fcfe40e027e423dbfc8472a1b50d68fcd880b
GET /uploads/9ac8ygliapz5ww4p3uuacykkfhn6am4w6t6hqand.png HTTP/1.1
Host: tp.xinxiyidiantong.com:5868
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: image/png
Content-Length: 189479
Last-Modified: Thu, 06 Oct 2022 15:54:18 GMT
Connection: keep-alive
ETag: "633efa2a-2e427"
Expires: Thu, 26 Oct 2023 19:08:19 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
tp.xinxiyidiantong.com:5868/uploads/bcxyd1s1sigdhca92z9vasjpppocuc81b03spnfn.jpg
200 OK 130 kB URL GET HTTP/1.1 tp.xinxiyidiantong.com:5868/uploads/bcxyd1s1sigdhca92z9vasjpppocuc81b03spnfn.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttp.xinxiyidiantong.com
FingerprintC3:5E:6E:33:30:75:29:8F:E1:36:72:09:5C:31:36:98:45:66:2B:26
ValidityMon, 11 Sep 2023 01:21:57 GMT - Sun, 10 Dec 2023 01:21:56 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x200, components 3\012- data
Size 130 kB (130166 bytes)
Hash eafed17c1fe2700860721ae8140eb2cb
0413f0641c22711164c2afe9371879939b8b0b75
cb9a226036421e9cf000f581d39f588909d796c0c1e6ad72a9d20fe0ca0ade96
GET /uploads/bcxyd1s1sigdhca92z9vasjpppocuc81b03spnfn.jpg HTTP/1.1
Host: tp.xinxiyidiantong.com:5868
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: image/jpeg
Content-Length: 130166
Last-Modified: Thu, 06 Oct 2022 15:53:07 GMT
Connection: keep-alive
ETag: "633ef9e3-1fc76"
Expires: Thu, 26 Oct 2023 19:08:19 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
tp.xinxiyidiantong.com:5868/uploads/mA1qhe8QORmlYJ6vaKr25YXsAicF0fvcKPV6CKmu.gif
200 OK 165 kB URL GET HTTP/1.1 tp.xinxiyidiantong.com:5868/uploads/mA1qhe8QORmlYJ6vaKr25YXsAicF0fvcKPV6CKmu.gif
IP
Certificate IssuerLet's Encrypt
Subjecttp.xinxiyidiantong.com
FingerprintC3:5E:6E:33:30:75:29:8F:E1:36:72:09:5C:31:36:98:45:66:2B:26
ValidityMon, 11 Sep 2023 01:21:57 GMT - Sun, 10 Dec 2023 01:21:56 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3\012- data
Size 165 kB (164960 bytes)
Hash 9a8db4f5a23dde801a1f3bea4acc808e
cdcd782ee69d928d044bff94453657ac110ca2f6
0439e07b407e0264a9ba9f7bf910397f10c6670937e74e2d4edbc196fa8b4795
GET /uploads/mA1qhe8QORmlYJ6vaKr25YXsAicF0fvcKPV6CKmu.gif HTTP/1.1
Host: tp.xinxiyidiantong.com:5868
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: image/gif
Content-Length: 164960
Last-Modified: Thu, 06 Oct 2022 15:36:10 GMT
Connection: keep-alive
ETag: "633ef5ea-28460"
Expires: Thu, 26 Oct 2023 19:08:19 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
nxximg.com/20230925/c63k50J6/1.jpg?t=1695627308
200 OK 109 kB URL GET HTTP/1.1 nxximg.com/20230925/c63k50J6/1.jpg?t=1695627308
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x334, components 3\012- data
Size 109 kB (108851 bytes)
Hash fa66c584b23d843c18a60c5305439bae
d992164db203588adb32fb03d2127fa0483aeeb4
375059cf70777c1a8ebf3c8a104341d5b66c52489464950d65b6b6dad789daa1
GET /20230925/c63k50J6/1.jpg?t=1695627308 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 108851
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:09:08 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124b54-1a933"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
img.1379a.xyz/images/64c8cc903b631af06e9125fb.gif
302 Found 0 B URL GET HTTP/2 img.1379a.xyz/images/64c8cc903b631af06e9125fb.gif
IP
Certificate IssuerLet's Encrypt
Subject1379a.xyz
FingerprintBB:FB:C7:6D:53:7D:DC:9B:DB:72:46:57:0D:B0:DF:B5:B9:EC:EC:3F
ValidityTue, 18 Jul 2023 15:16:23 GMT - Mon, 16 Oct 2023 15:16:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/64c8cc903b631af06e9125fb.gif HTTP/1.1
Host: img.1379a.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://files.230808.top/store/loveimgmoe/44/98/64ad519ec789ac3b7abc4498.gif
X-Firefox-Spdy: h2
nxximg.com/20230922/Wyp2k1Ut/1.jpg?t=1695369989
200 OK 22 kB URL GET HTTP/1.1 nxximg.com/20230922/Wyp2k1Ut/1.jpg?t=1695369989
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 400x225, components 3\012- data
Hash 38ef296371cff5dda06172b9694c968e
e2863a1e09c0ddb3e7537c14081999fe885906e3
ec364bf56baaf8e8e3ed53ce41241a564fcce67959d91f271a157b0c763c131e
GET /20230922/Wyp2k1Ut/1.jpg?t=1695369989 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 21998
Connection: keep-alive
Last-Modified: Sat, 23 Sep 2023 06:40:42 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "650e886a-55ee"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
nxximg.com/20230922/jUSePfG6/1.jpg?t=1695370573
200 OK 14 kB URL GET HTTP/1.1 nxximg.com/20230922/jUSePfG6/1.jpg?t=1695370573
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 398x225, components 3\012- data
Hash e41170f26a41cd651d7a119f173833d4
e3f637a8762474141f8817627adafa22e4348c11
ca9b1d5f9c25c6db2890ce44c9dd31b950f8ec0e4607cfbd86d79a98f4080087
GET /20230922/jUSePfG6/1.jpg?t=1695370573 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 14419
Connection: keep-alive
Last-Modified: Sat, 23 Sep 2023 06:40:43 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "650e886b-3853"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
nxximg.com/20230922/oj3lY7An/1.jpg?t=1695370102
200 OK 20 kB URL GET HTTP/1.1 nxximg.com/20230922/oj3lY7An/1.jpg?t=1695370102
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 399x225, components 3\012- data
Hash ed2c39ab4f15709f0d8016116dbb62fe
0e3ee5fd88b403e492644fce1acc9c27fa0a170f
636ac4f71af4e46b814cb454d3cbe3aaa4c787c52ce6e22c6146bc8a01f20e57
GET /20230922/oj3lY7An/1.jpg?t=1695370102 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 19667
Connection: keep-alive
Last-Modified: Sat, 23 Sep 2023 06:40:45 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "650e886d-4cd3"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
nxximg.com/20230925/Xgxcm89A/1.jpg?t=1695626287
200 OK 46 kB URL GET HTTP/1.1 nxximg.com/20230925/Xgxcm89A/1.jpg?t=1695626287
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash 7bda40f2860ae3b1b9c5aab040eff307
d49363ab611fe91911c5c8cd615149c706bf50d0
5eee014c38a197ddb3f19d4fd9d7e5f9ccbbc8d174f78e6abd868f3f8c133f36
GET /20230925/Xgxcm89A/1.jpg?t=1695626287 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 46298
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:09:14 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124b5a-b4da"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
587image.com:3188/960x120.gif
200 OK 54 kB URL GET HTTP/1.1 587image.com:3188/960x120.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerUnizeto Technologies S.A.
Subject225image.com
Fingerprint37:B4:B5:C4:CC:E3:E3:8F:6B:E1:E1:05:C7:D7:87:48:52:BD:71:ED
ValidityWed, 10 May 2023 01:26:57 GMT - Sat, 08 Jun 2024 01:26:56 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Hash 1b0debb707f7274e95ae467969832663
7787ea12e377677eccfcbba7f7fc14b18602ddad
688c201ad0040278d8431382eeeb71ea318699cc7d4ccf167132e5818473d55f
GET /960x120.gif HTTP/1.1
Host: 587image.com:3188
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: image/gif
Content-Length: 53701
Connection: keep-alive
Last-Modified: Thu, 15 Dec 2022 13:32:00 GMT
ETag: "639b21d0-d1c5"
Expires: Sat, 14 Oct 2023 14:23:19 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
nxximg.com/20230925/Fr0b1VTk/1.jpg?t=1695626329
200 OK 42 kB URL GET HTTP/1.1 nxximg.com/20230925/Fr0b1VTk/1.jpg?t=1695626329
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash fca43623a4c952a01df6d978816b126c
6e43c9b3ae0da8101ffc582a94d7e3b9c5218675
3cbe4ff53327c02c16e62c7de570f43d4cae86ff94e12645b66856f1d18f06f3
GET /20230925/Fr0b1VTk/1.jpg?t=1695626329 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 41642
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:09:17 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124b5d-a2aa"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
tp.xinxiyidiantong.com:5868/uploads/loxhr6c3lkeebci08n65eocg1mgr4k.jpg
200 OK 235 kB URL GET HTTP/1.1 tp.xinxiyidiantong.com:5868/uploads/loxhr6c3lkeebci08n65eocg1mgr4k.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttp.xinxiyidiantong.com
FingerprintC3:5E:6E:33:30:75:29:8F:E1:36:72:09:5C:31:36:98:45:66:2B:26
ValidityMon, 11 Sep 2023 01:21:57 GMT - Sun, 10 Dec 2023 01:21:56 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3\012- data
Size 235 kB (235408 bytes)
Hash db84f28dc85a2ebec9f3c92cd498fea0
4e8bd98d9b985548cb028193da5739e5af5044b5
9a23697eb71d44e730699d65f0a048682574cb08ce18115ff91c32c0c5a3505d
GET /uploads/loxhr6c3lkeebci08n65eocg1mgr4k.jpg HTTP/1.1
Host: tp.xinxiyidiantong.com:5868
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: image/jpeg
Content-Length: 235408
Last-Modified: Mon, 10 Apr 2023 02:50:07 GMT
Connection: keep-alive
ETag: "6433795f-39790"
Expires: Thu, 26 Oct 2023 19:08:19 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
tp.xinxiyidiantong.com:5868/uploads/tbd0y96vk5p68j99j7iib7205167td.jpg
200 OK 257 kB URL GET HTTP/1.1 tp.xinxiyidiantong.com:5868/uploads/tbd0y96vk5p68j99j7iib7205167td.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttp.xinxiyidiantong.com
FingerprintC3:5E:6E:33:30:75:29:8F:E1:36:72:09:5C:31:36:98:45:66:2B:26
ValidityMon, 11 Sep 2023 01:21:57 GMT - Sun, 10 Dec 2023 01:21:56 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3\012- data
Size 257 kB (257302 bytes)
Hash da9e8671b27b7b4b1fdc87eeb75ee575
ca48bf5a63168889f502233c329f347b6268cb8c
2a00d43c8819ea8e3a1c59005794c338e5b9ef0a9971d7305d388613954b2dec
GET /uploads/tbd0y96vk5p68j99j7iib7205167td.jpg HTTP/1.1
Host: tp.xinxiyidiantong.com:5868
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: image/jpeg
Content-Length: 257302
Last-Modified: Mon, 24 Apr 2023 11:53:50 GMT
Connection: keep-alive
ETag: "64466dce-3ed16"
Expires: Thu, 26 Oct 2023 19:08:19 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
nxxzyimg.com/20230312/Sck4WQyf/1.jpg?t=1679994196
200 OK 143 kB URL GET HTTP/2 nxxzyimg.com/20230312/Sck4WQyf/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1890x1063, components 3\012- data
Size 143 kB (143146 bytes)
Hash d0db3b87b91c1df9e0d6d56bc92350c6
10381a697cc62b30c2153225a257c9fa407e3bbd
edc04e24e5f81c201e31861a75a76f6719c901647cf3633212fdd946cb664eb5
GET /20230312/Sck4WQyf/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 143146
last-modified: Tue, 21 Mar 2023 03:56:15 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192adf-22f2a"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
game168.top/
200 OK 18 kB IP
Requested by http://www.5yyw.cn/long.exe
Certificate IssuerGoogle Trust Services LLC
Subjectgame168.top
Fingerprint2C:B9:41:88:EE:05:F5:A4:D6:01:DD:46:25:4B:46:2F:E1:8B:8B:F6
ValiditySun, 17 Sep 2023 02:32:50 GMT - Sat, 16 Dec 2023 02:32:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (489)
Hash fb82eb688f7c56d10be186be7367512d
4791be4bfca0723b7e9ea349bbe4f0b4b36ca8fb
01f1a2bda2c6cdc8fc02597882e3e642b6fc03b4c170aa7d2970a2e0c169af73
GET / HTTP/1.1
Host: game168.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.5yyw.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 19:08:17 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=psx1tkWGvP6c4uaISjYHno7RsC2aGo%2BGWHeW1qZvpoQy4p7IxTqrQc3Wx2bIJi32yo207rmCOA6GCX%2FFpJ14MGYvCU5asR4ZZOHHMFqKT4m02PW03Z6gZm8AhXs2lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdcb6c3a7d56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/4qgTBuLi/1.jpg?t=1679994196
200 OK 44 kB URL GET HTTP/2 nxxzyimg.com/20230312/4qgTBuLi/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data
Hash 3aa2e05d0605a63c2e9e098dac84f0bf
b423ce5a9544047fc48350996608cf22ec84a892
2a832809743214e52addb43c285aa321392e84311328b7bf6cae1367463cfd32
GET /20230312/4qgTBuLi/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 44084
last-modified: Tue, 21 Mar 2023 03:56:27 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192aeb-ac34"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxximg.com/20230925/9QQOpT5l/1.jpg?t=1695627208
200 OK 24 kB URL GET HTTP/1.1 nxximg.com/20230925/9QQOpT5l/1.jpg?t=1695627208
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x288, components 3\012- data
Hash d2595e8fbe388515a383c141da23cb85
31eb9cdb3178380000d8b7de8a2eacd08994b138
15f5cb38962f8d988f179cbefc79e399de3a610e087970dbabbd33399dba5014
GET /20230925/9QQOpT5l/1.jpg?t=1695627208 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 24057
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:09:08 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124b54-5df9"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
files.230808.top/store/loveimgmoe/44/98/64ad519ec789ac3b7abc4498.gif
200 OK 55 kB URL GET HTTP/2 files.230808.top/store/loveimgmoe/44/98/64ad519ec789ac3b7abc4498.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230808.top
Fingerprint40:63:ED:76:8D:B4:C8:FA:B8:8B:9C:00:C7:8B:2E:33:ED:18:D8:C4
ValidityThu, 14 Sep 2023 05:25:15 GMT - Wed, 13 Dec 2023 05:25:14 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Hash 9f70ddd716efe1a0101efc7f23563bb7
df63e81983a6672753ed773c12c13b09aab70a65
56736f883e73f213b86bae8a2104b5ce743adf9ba985cc730823abd934da3220
GET /store/loveimgmoe/44/98/64ad519ec789ac3b7abc4498.gif HTTP/1.1
Host: files.230808.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: image/gif
content-length: 55284
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
last-modified: Tue, 11 Jul 2023 12:57:39 GMT
cf-cache-status: HIT
age: 59757
accept-ranges: bytes
server: cloudflare
cf-ray: 80cdcb80d95e15ec-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pic.xhumrknb.xyz/byys/kaiyuan960-120.gif
200 OK 516 kB URL GET HTTP/2 pic.xhumrknb.xyz/byys/kaiyuan960-120.gif
IP
Certificate IssuerLet's Encrypt
Subjectpic.xhumrknb.xyz
Fingerprint51:9D:57:67:AC:5A:EA:E1:13:05:FA:9E:0B:EA:8B:AB:B2:EC:D1:77
ValidityTue, 26 Sep 2023 08:02:20 GMT - Mon, 25 Dec 2023 08:02:19 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 516 kB (516018 bytes)
Hash b0509a412080c37ae8063d2d84b154c4
6144e0aa1d298e01e256ccf458097235b1db29b6
af89d7058b076dbc734098311c2809de3be061e9194b79fbafc9c51b7b0c3f30
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /byys/kaiyuan960-120.gif HTTP/1.1
Host: pic.xhumrknb.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=2592000
content-type: image/gif
date: Tue, 26 Sep 2023 18:08:38 GMT
etag: "1695753155"
expires: Thu, 26 Oct 2023 18:08:38 GMT
last-modified: Tue, 26 Sep 2023 18:32:35 GMT
server: nginx
x-cache: HIT, server, memory
content-length: 516018
X-Firefox-Spdy: h2
files.230808.top/store/loveimgmoe/44/94/64ad519cc789ac3b7abc4494.gif
200 OK 101 kB URL GET HTTP/2 files.230808.top/store/loveimgmoe/44/94/64ad519cc789ac3b7abc4494.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230808.top
Fingerprint40:63:ED:76:8D:B4:C8:FA:B8:8B:9C:00:C7:8B:2E:33:ED:18:D8:C4
ValidityThu, 14 Sep 2023 05:25:15 GMT - Wed, 13 Dec 2023 05:25:14 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 101 kB (101312 bytes)
Hash 62a84f9def651419f1984c7b438cb6af
2271568da294c340f938d9cb0ae92a8a73906880
f971e69e726ffaf9d10288b64c422f3dbe6b9e5fbe8fb48cf8245921e0b33c63
GET /store/loveimgmoe/44/94/64ad519cc789ac3b7abc4494.gif HTTP/1.1
Host: files.230808.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: image/gif
content-length: 101312
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
last-modified: Tue, 11 Jul 2023 12:57:31 GMT
cf-cache-status: HIT
age: 3566
accept-ranges: bytes
server: cloudflare
cf-ray: 80cdcb80b93715ec-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
files.230808.top/store/loveimgmoe/5c/31/649be5c44f60bc44cdef5c31.gif
200 OK 202 kB URL GET HTTP/2 files.230808.top/store/loveimgmoe/5c/31/649be5c44f60bc44cdef5c31.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230808.top
Fingerprint40:63:ED:76:8D:B4:C8:FA:B8:8B:9C:00:C7:8B:2E:33:ED:18:D8:C4
ValidityThu, 14 Sep 2023 05:25:15 GMT - Wed, 13 Dec 2023 05:25:14 GMT
File type GIF image data, version 89a, 640 x 350\012- data
Size 202 kB (201858 bytes)
Hash 6210b461bf512d3b2d853302a7beb4d0
be1a5762e312ee8e306dee9a9723f270bdbf2426
6b8a34df116b60cddf8ff499577b1d1d92986f6c98d2d9ba26381a2aa1ed3d22
GET /store/loveimgmoe/5c/31/649be5c44f60bc44cdef5c31.gif HTTP/1.1
Host: files.230808.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: image/gif
content-length: 201858
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
last-modified: Wed, 28 Jun 2023 07:48:28 GMT
cf-cache-status: HIT
age: 33272
accept-ranges: bytes
server: cloudflare
cf-ray: 80cdcb80d95b15ec-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
files.230808.top/store/loveimgmoe/44/96/64ad519dc789ac3b7abc4496.gif
200 OK 358 kB URL GET HTTP/2 files.230808.top/store/loveimgmoe/44/96/64ad519dc789ac3b7abc4496.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230808.top
Fingerprint40:63:ED:76:8D:B4:C8:FA:B8:8B:9C:00:C7:8B:2E:33:ED:18:D8:C4
ValidityThu, 14 Sep 2023 05:25:15 GMT - Wed, 13 Dec 2023 05:25:14 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 358 kB (358142 bytes)
Hash 0319cff8fbdcb7b7c833bc87124bbee7
4421be1473298511ebeb8d467f7c06e7600feb92
d7baf64c7694d1fd420a859f482b33b1a5472ee94442a7354bcb577a28fa8ef2
GET /store/loveimgmoe/44/96/64ad519dc789ac3b7abc4496.gif HTTP/1.1
Host: files.230808.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 26 Sep 2023 19:08:20 GMT
content-type: image/gif
content-length: 358142
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
last-modified: Tue, 11 Jul 2023 12:57:53 GMT
cf-cache-status: HIT
age: 38066
accept-ranges: bytes
server: cloudflare
cf-ray: 80cdcb80e98515ec-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nxximg.com/20230925/E6Rkmv9C/1.jpg?t=1695627048
200 OK 168 kB URL GET HTTP/1.1 nxximg.com/20230925/E6Rkmv9C/1.jpg?t=1695627048
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2021:04:19 11:23:14], baseline, precision 8, 718x334, components 3\012- data
Size 168 kB (168178 bytes)
Hash 62bb865d9d9083cb2995e2a2e577dc5c
22bb7651b7917eedeff422af127654260bbe338a
8c1873e95398bf131d3d712a909ba8f119727b30f5ce6094f546ab57c214b49e
GET /20230925/E6Rkmv9C/1.jpg?t=1695627048 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 168178
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:09:07 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65124b53-290f2"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
nxxzyimg.com/20230312/ckDoH7XS/1.jpg?t=1679994196
200 OK 60 kB URL GET HTTP/2 nxxzyimg.com/20230312/ckDoH7XS/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data
Hash 57869afea6a0acbdbe92ee3a1cc0c762
b942e234e36b5168b5eefdfff857e50918ddba3f
b52efbbc55dfb3f83f126d93df8dd2faa6365d710e3808d1f80b10154323a7ff
GET /20230312/ckDoH7XS/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 59619
last-modified: Tue, 21 Mar 2023 03:56:21 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192ae5-e8e3"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1468265035&si=a913343dbdb5f7de1781112de321bef2&su=http%3A%2F%2Fwww.5yyw.cn%2F&v=1.3.0&lv=1&sn=37175&r=0&ww=1280&u=https%3A%2F%2Fgame168.top%2F&tt=%E9%B2%8D%E9%B1%BC%E8%A7%86%E9%A2%91%2C%E9%B2%8D%E9%B1%BCTV%2C%E9%B2%8D%E9%B1%BCAV%2C%E9%B2%8D%E9%B1%BC%E5%BD%B1%E9%99%A2%2C%E9%B2%8D%E9%B1%BC%E7%9C%8B%E7%89%87%E7%BD%91%2C%E9%A6%96%E9%A1%B5
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1468265035&si=a913343dbdb5f7de1781112de321bef2&su=http%3A%2F%2Fwww.5yyw.cn%2F&v=1.3.0&lv=1&sn=37175&r=0&ww=1280&u=https%3A%2F%2Fgame168.top%2F&tt=%E9%B2%8D%E9%B1%BC%E8%A7%86%E9%A2%91%2C%E9%B2%8D%E9%B1%BCTV%2C%E9%B2%8D%E9%B1%BCAV%2C%E9%B2%8D%E9%B1%BC%E5%BD%B1%E9%99%A2%2C%E9%B2%8D%E9%B1%BC%E7%9C%8B%E7%89%87%E7%BD%91%2C%E9%A6%96%E9%A1%B5
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1468265035&si=a913343dbdb5f7de1781112de321bef2&su=http%3A%2F%2Fwww.5yyw.cn%2F&v=1.3.0&lv=1&sn=37175&r=0&ww=1280&u=https%3A%2F%2Fgame168.top%2F&tt=%E9%B2%8D%E9%B1%BC%E8%A7%86%E9%A2%91%2C%E9%B2%8D%E9%B1%BCTV%2C%E9%B2%8D%E9%B1%BCAV%2C%E9%B2%8D%E9%B1%BC%E5%BD%B1%E9%99%A2%2C%E9%B2%8D%E9%B1%BC%E7%9C%8B%E7%89%87%E7%BD%91%2C%E9%A6%96%E9%A1%B5 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 26 Sep 2023 19:08:19 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=96C43C631C07EB80; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
nxximg.com/20230924/uleACeyH/1.jpg?t=1695532479
200 OK 137 kB URL GET HTTP/1.1 nxximg.com/20230924/uleACeyH/1.jpg?t=1695532479
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxximg.com
FingerprintB9:17:D5:38:8E:42:1F:32:23:A5:00:2E:4E:B9:D0:16:E9:AE:E1:E2
ValidityThu, 27 Jul 2023 17:08:05 GMT - Sun, 25 Aug 2024 17:08:04 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x334, components 3\012- data
Size 137 kB (136823 bytes)
Hash 09ac546726c1942415c680c3253e12ba
24205538b17d276dcf4f9058addb5ffea031791b
1de9c6d4792932a94a34df648c75a344271216d7281c14c875c546de3c595d37
GET /20230924/uleACeyH/1.jpg?t=1695532479 HTTP/1.1
Host: nxximg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 26 Sep 2023 19:08:19 GMT
Content-Type: application/octet-stream
Content-Length: 136823
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 06:49:56 GMT
Content-Disposition: attachment; filename="1.jpg"
ETag: "65112d94-21677"
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=43884608&si=f87907ecdd9f6db626a7e34aaba55e8d&su=http%3A%2F%2Fwww.5yyw.cn%2F&v=1.3.0&lv=1&sn=37175&r=0&ww=1280&u=https%3A%2F%2Fgame168.top%2F&tt=%E9%B2%8D%E9%B1%BC%E8%A7%86%E9%A2%91%2C%E9%B2%8D%E9%B1%BCTV%2C%E9%B2%8D%E9%B1%BCAV%2C%E9%B2%8D%E9%B1%BC%E5%BD%B1%E9%99%A2%2C%E9%B2%8D%E9%B1%BC%E7%9C%8B%E7%89%87%E7%BD%91%2C%E9%A6%96%E9%A1%B5
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=43884608&si=f87907ecdd9f6db626a7e34aaba55e8d&su=http%3A%2F%2Fwww.5yyw.cn%2F&v=1.3.0&lv=1&sn=37175&r=0&ww=1280&u=https%3A%2F%2Fgame168.top%2F&tt=%E9%B2%8D%E9%B1%BC%E8%A7%86%E9%A2%91%2C%E9%B2%8D%E9%B1%BCTV%2C%E9%B2%8D%E9%B1%BCAV%2C%E9%B2%8D%E9%B1%BC%E5%BD%B1%E9%99%A2%2C%E9%B2%8D%E9%B1%BC%E7%9C%8B%E7%89%87%E7%BD%91%2C%E9%A6%96%E9%A1%B5
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=43884608&si=f87907ecdd9f6db626a7e34aaba55e8d&su=http%3A%2F%2Fwww.5yyw.cn%2F&v=1.3.0&lv=1&sn=37175&r=0&ww=1280&u=https%3A%2F%2Fgame168.top%2F&tt=%E9%B2%8D%E9%B1%BC%E8%A7%86%E9%A2%91%2C%E9%B2%8D%E9%B1%BCTV%2C%E9%B2%8D%E9%B1%BCAV%2C%E9%B2%8D%E9%B1%BC%E5%BD%B1%E9%99%A2%2C%E9%B2%8D%E9%B1%BC%E7%9C%8B%E7%89%87%E7%BD%91%2C%E9%A6%96%E9%A1%B5 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 26 Sep 2023 19:08:20 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=ED8F9DFEBC62BC72; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
nxxzyimg.com/20230312/pYXuuHLQ/1.jpg?t=1679994196
200 OK 79 kB URL GET HTTP/2 nxxzyimg.com/20230312/pYXuuHLQ/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data
Hash c9641230ad77fc45deb9686b71d1956d
fe7bef895ec673dce28052543bc620ee10ca7926
c13b18fa9ac02051905a0596c736f304fecb7207079778edd9d2626d36fe5089
GET /20230312/pYXuuHLQ/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 79167
last-modified: Tue, 21 Mar 2023 03:56:32 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192af0-1353f"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/PyK5cPZy/1.jpg?t=1679994196
200 OK 70 kB URL GET HTTP/2 nxxzyimg.com/20230312/PyK5cPZy/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, progressive, precision 8, 700x394, components 3\012- data
Hash 1a29f6b358e78a8b252a1d3e425ef52a
76716450891e71ebe4f44f48c1220e2c705c7f94
0005607537155e69c922db1b4f007bb16aa68a18577be4ba53ebfad2f0cc54c8
GET /20230312/PyK5cPZy/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 70448
last-modified: Tue, 21 Mar 2023 03:56:32 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192af0-11330"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
imgsrc.baidu.com/forum/pic/item/eaf81a4c510fd9f95427e559632dd42a2834a4ca.jpg
200 OK 51 kB URL GET HTTP/2 imgsrc.baidu.com/forum/pic/item/eaf81a4c510fd9f95427e559632dd42a2834a4ca.jpg
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Hash 863cd568a8aba6b6d181351782b83117
7d8add25fbd56d714e79d9044389a7a5f1ddb89a
200c65850e6d66e00ce114ec3fb190227a11125eb70afdbbecea455401cb8f85
GET /forum/pic/item/eaf81a4c510fd9f95427e559632dd42a2834a4ca.jpg HTTP/1.1
Host: imgsrc.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: image/gif
content-length: 50770
access-control-allow-origin: *
etag: 863cd568a8aba6b6d181351782b83117
expires: Thu, 26 Oct 2023 19:08:19 GMT
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/g4XWIgrB/1.jpg?t=1679994196
200 OK 105 kB URL GET HTTP/2 nxxzyimg.com/20230312/g4XWIgrB/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1890x1063, components 3\012- data
Size 105 kB (104992 bytes)
Hash b01b8602f8f0b8a59762ba69cfd780a1
534e610a8fbfc544ee3b0d8bc33c433f54804e2a
7bed43c07b72dddf00ce56d455f3bf3063d546849ba5bbe57503123fc7c1a113
GET /20230312/g4XWIgrB/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 104992
last-modified: Tue, 21 Mar 2023 03:56:12 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192adc-19a20"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
kycnxwxaztbrax.huayingshangmeng.com/gg/k960X120.gif
200 OK 628 kB URL GET HTTP/2 kycnxwxaztbrax.huayingshangmeng.com/gg/k960X120.gif
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subjectkycnxwxaztbrax.huayingshangmeng.com
Fingerprint6C:32:B5:DE:0D:D2:85:5A:D4:D2:CE:FA:97:6C:2A:32:E2:CA:19:61
ValidityTue, 06 Jun 2023 00:00:00 GMT - Wed, 05 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 628 kB (628344 bytes)
Hash fb399f82a3d3921887db083afb3b9508
986e19a2c2334419163e0a84c01085191657e82d
fa9623db6651c1c0bec793b4f57c5e83f834420e3e3b73604b2e3c916d43e167
GET /gg/k960X120.gif HTTP/1.1
Host: kycnxwxaztbrax.huayingshangmeng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/gif
content-length: 628344
accept-ranges: bytes
age: 1011853
cache-control: 31536000
etag: "64c7d276-99678"
expires: Sun, 15 Oct 2023 02:04:06 GMT
last-modified: Mon, 31 Jul 2023 15:25:42 GMT
x-bdcdn-cache-status: TCP_HIT
x-request-id: cd72a4999f77c5af2d8d3af0d9c077f9
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-tt-trace-tag: id=5
date: Tue, 26 Sep 2023 19:08:19 GMT
via: cache08.szcm06
access-control-max-age: 31536000
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/0BtmIdSK/1.jpg?t=1679994197
200 OK 48 kB URL GET HTTP/2 nxxzyimg.com/20230312/0BtmIdSK/1.jpg?t=1679994197
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data
Hash 537a7f7adc2692d9508f1e542fd42a89
ca12f6c543e96ea5f662ec0be4d3d479c870593d
a1977a13d586490ce7490c3e77ae9d4d1d814e693badfb95e9cf808e612c1c26
GET /20230312/0BtmIdSK/1.jpg?t=1679994197 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 47933
last-modified: Tue, 21 Mar 2023 03:56:42 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192afa-bb3d"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/fjeAjeSY/1.jpg?t=1679994196
200 OK 141 kB URL GET HTTP/2 nxxzyimg.com/20230312/fjeAjeSY/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1800x1012, components 3\012- data
Size 141 kB (141357 bytes)
Hash 904ff5cd709e7f9f886fea5139eacbf5
e01dd57d31ae94aa59d2da43b82f3901ba13f0b7
02adda392ff6ce0889802b2f3517d8d973541c7eb4250a0f8a30f671d9867a08
GET /20230312/fjeAjeSY/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 141357
last-modified: Tue, 21 Mar 2023 03:56:17 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192ae1-2282d"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230315/JJBHEZ53/1.jpg?t=1679994359
200 OK 7.0 kB URL GET HTTP/2 nxxzyimg.com/20230315/JJBHEZ53/1.jpg?t=1679994359
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 7da0c1ae0dc0e208f196014212465bf3
b70ea718061eeb0bc400ebd3f72123eae65e7745
51413a1c0e36cf51b8a789d0e4d687d11715923f1a7955b5a85f85f4a282de48
GET /20230315/JJBHEZ53/1.jpg?t=1679994359 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 6984
last-modified: Wed, 15 Mar 2023 02:56:21 GMT
content-disposition: attachment; filename="1.jpg"
etag: "641133d5-1b48"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230315/uiKJ77Hw/1.jpg?t=1679994361
200 OK 9.9 kB URL GET HTTP/2 nxxzyimg.com/20230315/uiKJ77Hw/1.jpg?t=1679994361
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash abb20c876659c6de320a84e0bc70643e
955b3a29b413b2cae5281f849a2c5e7e2c4c7017
05066ae0f72725eff07193c60ecf4bdc2565dcbdab6e348380d3eb69c7b095af
GET /20230315/uiKJ77Hw/1.jpg?t=1679994361 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 9883
last-modified: Wed, 15 Mar 2023 03:05:37 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64113601-269b"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230315/YnOn7YGk/1.jpg?t=1679999982
200 OK 126 kB URL GET HTTP/2 nxxzyimg.com/20230315/YnOn7YGk/1.jpg?t=1679999982
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x562, components 3\012- data
Size 126 kB (126527 bytes)
Hash e7510ee58266a8791bd1eb7a6559e427
198e78efe501bd8b712f16e1cc461d5ed044e988
269e070fd4efc3e7e37ad63053129f9aeccda02eb8a04f3fe6c8763571d5f2aa
GET /20230315/YnOn7YGk/1.jpg?t=1679999982 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 126527
last-modified: Tue, 21 Mar 2023 03:54:31 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192a77-1ee3f"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/yN1IW1e5/1.jpg?t=1679990529
200 OK 69 kB URL GET HTTP/2 nxxzyimg.com/20230312/yN1IW1e5/1.jpg?t=1679990529
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data
Hash ad9f378d5106e950819dd9cee4620f97
e21e92807622413d601301814054657b05c5b60a
5c179f8de2ff8ac17e973c9a89366930f6830d32fea6b51910169e1764a87911
GET /20230312/yN1IW1e5/1.jpg?t=1679990529 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 68920
last-modified: Tue, 21 Mar 2023 03:56:43 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192afb-10d38"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/1vREwdeA/1.jpg?t=1679994197
200 OK 144 kB URL GET HTTP/2 nxxzyimg.com/20230312/1vREwdeA/1.jpg?t=1679994197
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, components 3\012- data
Size 144 kB (144465 bytes)
Hash b34f3edd7b00e51996045c7f71dd8f1b
034973f9d7718f51d13ab0562885188fe9774ddd
10d5c273253db059190449ee1f209493bca03d06844a28b3803b9ba2a3311898
GET /20230312/1vREwdeA/1.jpg?t=1679994197 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 144465
last-modified: Tue, 21 Mar 2023 03:56:41 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192af9-23451"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230421/82sVbtyl/1.jpg?t=1682064661
200 OK 154 kB URL GET HTTP/2 nxxzyimg.com/20230421/82sVbtyl/1.jpg?t=1682064661
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1000x562, components 3\012- data
Size 154 kB (154209 bytes)
Hash 749b429e11e2d2fa82830a8f35a70c84
2f21902b53dcf03b1f35ad8315f88283591648d4
80a94ef666931b4c09897493b50688cb8e1fd4e916eabafe5c6ece592c5789e0
GET /20230421/82sVbtyl/1.jpg?t=1682064661 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 154209
last-modified: Sat, 22 Apr 2023 14:15:02 GMT
content-disposition: attachment; filename="1.jpg"
etag: "6443ebe6-25a61"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230421/ymNZhgZ3/1.jpg?t=1682064611
200 OK 219 kB URL GET HTTP/2 nxxzyimg.com/20230421/ymNZhgZ3/1.jpg?t=1682064611
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x900, components 3\012- data
Size 219 kB (218722 bytes)
Hash 50ae2052cbd73c3f213a227578cd084e
2c8da6ac08064ab7dc1f47902e171387fc32825e
9f237472a623f209112eedc1d239310011541db73df0ae687e0e8a5c6071af6f
GET /20230421/ymNZhgZ3/1.jpg?t=1682064611 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 218722
last-modified: Sat, 22 Apr 2023 14:14:57 GMT
content-disposition: attachment; filename="1.jpg"
etag: "6443ebe1-35662"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/nzHMZT7F/1.jpg?t=1679994197
200 OK 221 kB URL GET HTTP/2 nxxzyimg.com/20230312/nzHMZT7F/1.jpg?t=1679994197
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, baseline, precision 8, 700x394, components 3\012- data
Size 221 kB (221040 bytes)
Hash af78cc3d7ab835f56e1d6d56dadf4dd7
b7c19a57e6fee84b56ab29b1ebc05436a4f3acc1
df8ead34fe4b2132d9e747e28936bf79396d7acf7e00c318beb12352830e371a
GET /20230312/nzHMZT7F/1.jpg?t=1679994197 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 221040
last-modified: Tue, 21 Mar 2023 03:56:36 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192af4-35f70"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230421/OYUQGYuS/1.jpg?t=1682064902
200 OK 255 kB URL GET HTTP/2 nxxzyimg.com/20230421/OYUQGYuS/1.jpg?t=1682064902
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x900, components 3\012- data
Size 255 kB (255126 bytes)
Hash accb76c0e5badcd24876c8656e33bfd2
87ae2643afea317505d1912f7b2411d1a080078a
dad6dbf8f7d9d5231ab4c1bec6310445b4c0588875f82df75256c512a7bfcd36
GET /20230421/OYUQGYuS/1.jpg?t=1682064902 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 255126
last-modified: Sat, 22 Apr 2023 14:14:58 GMT
content-disposition: attachment; filename="1.jpg"
etag: "6443ebe2-3e496"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230315/PBL8G66H/1.jpg?t=1679999982
200 OK 210 kB URL GET HTTP/2 nxxzyimg.com/20230315/PBL8G66H/1.jpg?t=1679999982
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=720, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1280], baseline, precision 8, 1280x720, components 3\012- data
Size 210 kB (210423 bytes)
Hash 8d4467fd64fd68bbcf952ae322e5983b
82e14e69eca18c03e5fac6d656f88d5e6e9a6a10
aa7f8ef5b9f9e508a0fd92d3e82175d01306f9fa50e9c7b12fd6e9cc49a3055f
GET /20230315/PBL8G66H/1.jpg?t=1679999982 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 210423
last-modified: Tue, 21 Mar 2023 03:54:26 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192a72-335f7"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230312/iSWDJx5D/1.jpg?t=1679994196
200 OK 1.9 MB URL GET HTTP/2 nxxzyimg.com/20230312/iSWDJx5D/1.jpg?t=1679994196
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, progressive, precision 8, 3000x1733, components 3\012- data
Size 1.9 MB (1903444 bytes)
Hash d35a6b8512e20396cc19209625b0cda5
a63add504afb39048d0987ee31a9da2ddbf3f2e8
5c93f71b7e26509c2a49b9997a117e31793f609f3d5ff03916847913b77f36d9
GET /20230312/iSWDJx5D/1.jpg?t=1679994196 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 1903444
last-modified: Tue, 21 Mar 2023 03:56:11 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192adb-1d0b54"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230315/7DAaraZz/1.jpg?t=1679994360
200 OK 324 kB URL GET HTTP/2 nxxzyimg.com/20230315/7DAaraZz/1.jpg?t=1679994360
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x563, components 3\012- data
Size 324 kB (324132 bytes)
Hash 14232f14c46653687e6f882aaa0fa424
10000011a08fbc2b4fe2a7544b351be737ca7a34
062de966ef457ad216dc3b9189f7f3ccd04b59af5dec4ac3cef92581e022613c
GET /20230315/7DAaraZz/1.jpg?t=1679994360 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 324132
last-modified: Tue, 21 Mar 2023 03:54:28 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192a74-4f224"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230315/fXxvxxUH/1.jpg?t=1679994360
200 OK 310 kB URL GET HTTP/2 nxxzyimg.com/20230315/fXxvxxUH/1.jpg?t=1679994360
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021:12:30 02:45:03], baseline, precision 8, 1000x563, components 3\012- data
Size 310 kB (310259 bytes)
Hash a2e52548704d3c0b90290cdc30d14fb6
7a389f30901e9b74feedae8321d4ec7c8eb69a2e
32f8a48556d4f9cc79f9630875ef7fc1c2192d6ba30b7f67d189c13cf30667b7
GET /20230315/fXxvxxUH/1.jpg?t=1679994360 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 310259
last-modified: Tue, 21 Mar 2023 03:55:18 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192aa6-4bbf3"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230421/qW2cEEAm/1.jpg?t=1682064879
200 OK 1.1 MB URL GET HTTP/2 nxxzyimg.com/20230421/qW2cEEAm/1.jpg?t=1682064879
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced\012- data
Size 1.1 MB (1115544 bytes)
Hash eb86a36707b34d17db539cd678737387
1d390185ad70dd69472f285b99b05a6511dc6dc0
9621280686c12a072975f1199cf08e390e8191517979eb18ef3d181e8f941fe0
GET /20230421/qW2cEEAm/1.jpg?t=1682064879 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 1115544
last-modified: Sat, 22 Apr 2023 14:15:03 GMT
content-disposition: attachment; filename="1.jpg"
etag: "6443ebe7-110598"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
nxxzyimg.com/20230315/M4Ce0BT0/1.jpg?t=1679994360
200 OK 1.1 MB URL GET HTTP/2 nxxzyimg.com/20230315/M4Ce0BT0/1.jpg?t=1679994360
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectnxxzyimg.com
Fingerprint24:81:58:9E:48:F4:17:1E:B7:4E:4C:8A:AE:C5:E7:67:76:EB:33:59
ValidityMon, 06 Mar 2023 05:50:08 GMT - Wed, 03 Apr 2024 00:00:00 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021:12:13 20:56:28], baseline, precision 8, 2000x1125, components 3\012- data
Size 1.1 MB (1054887 bytes)
Hash c8e0cb0dc79f5b5ba5d4ac6e667fc884
ed9cc9fa9c590363ee86d03e4e299355fe6f4d2d
6e08913d08e921c4312abe0ac8d234c5f52da30861b33d499a09106c749a2693
GET /20230315/M4Ce0BT0/1.jpg?t=1679994360 HTTP/1.1
Host: nxxzyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: application/octet-stream
content-length: 1054887
last-modified: Tue, 21 Mar 2023 03:55:18 GMT
content-disposition: attachment; filename="1.jpg"
etag: "64192aa6-1018a7"
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *, *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
taiwtp1.com/xin/960240.gif
200 OK 436 kB URL GET HTTP/2 taiwtp1.com/xin/960240.gif
IP
ASN #3462 Data Communication Business Group
Certificate IssuerLet's Encrypt
Subjecttaiwtp1.com
Fingerprint07:97:5D:FB:58:5B:94:F3:64:BE:D5:B0:AB:11:2D:AC:73:5B:24:C2
ValidityWed, 30 Aug 2023 16:39:56 GMT - Tue, 28 Nov 2023 16:39:55 GMT
File type GIF image data, version 89a, 960 x 240\012- data
Size 436 kB (436473 bytes)
Hash 732bd86d0a1c250c8ee8f6ebf30d358e
9f8ec516e191af6504caead933e550627ed80af9
8f3edf67a76ef4c9b72fe1dc842ec813009e0fd7bb1945c96d564eb385d068ee
GET /xin/960240.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:58:48 GMT
content-type: image/gif
content-length: 436473
last-modified: Thu, 20 Oct 2022 07:11:15 GMT
etag: "6350f493-6a8f9"
expires: Thu, 26 Oct 2023 18:58:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
kycnxwxaztbrax.huayingshangmeng.com/gg/d960X120.gif
200 OK 396 kB URL GET HTTP/2 kycnxwxaztbrax.huayingshangmeng.com/gg/d960X120.gif
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subjectkycnxwxaztbrax.huayingshangmeng.com
Fingerprint6C:32:B5:DE:0D:D2:85:5A:D4:D2:CE:FA:97:6C:2A:32:E2:CA:19:61
ValidityTue, 06 Jun 2023 00:00:00 GMT - Wed, 05 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 396 kB (396292 bytes)
Hash 26f701f5c7c0c97324e168eead714804
a6b80563d141786bbccbda0d9b87d626c98ff775
7cbbfd17b999b51e96ec5401e704fb3d68a57cf34f3cc96cada7270c8e3f9209
GET /gg/d960X120.gif HTTP/1.1
Host: kycnxwxaztbrax.huayingshangmeng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/gif
content-length: 396292
accept-ranges: bytes
age: 1011854
cache-control: 31536000
etag: "64c7d236-60c04"
expires: Sun, 15 Oct 2023 02:04:05 GMT
last-modified: Mon, 31 Jul 2023 15:24:38 GMT
x-bdcdn-cache-status: TCP_HIT
x-request-id: 386472b8afb99134bfe7d28c63149b7d
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-tt-trace-tag: id=5
date: Tue, 26 Sep 2023 19:08:19 GMT
via: cache08.szcm06
access-control-max-age: 31536000
X-Firefox-Spdy: h2
taiwtp1.com/xin/200200sas.gif
200 OK 694 kB URL GET HTTP/2 taiwtp1.com/xin/200200sas.gif
IP
ASN #3462 Data Communication Business Group
Certificate IssuerLet's Encrypt
Subjecttaiwtp1.com
Fingerprint07:97:5D:FB:58:5B:94:F3:64:BE:D5:B0:AB:11:2D:AC:73:5B:24:C2
ValidityWed, 30 Aug 2023 16:39:56 GMT - Tue, 28 Nov 2023 16:39:55 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Size 694 kB (693471 bytes)
Hash e6ff7b0afb00d39bca2032b100e871ec
f3da5b9bd4d1769ed482bf6f23c3b05ded824d63
41d7266ed35337d77b04bad32c7ec3c4b44e7a1707f6c6f21c8e6bc4c9f3f252
GET /xin/200200sas.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 26 Sep 2023 18:58:48 GMT
content-type: image/gif
content-length: 693471
last-modified: Sat, 26 Nov 2022 10:45:28 GMT
etag: "6381ee48-a94df"
expires: Thu, 26 Oct 2023 18:58:48 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
kycnxwxaztbrax.huayingshangmeng.com/gg/v960X120.gif
200 OK 511 kB URL GET HTTP/2 kycnxwxaztbrax.huayingshangmeng.com/gg/v960X120.gif
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subjectkycnxwxaztbrax.huayingshangmeng.com
Fingerprint6C:32:B5:DE:0D:D2:85:5A:D4:D2:CE:FA:97:6C:2A:32:E2:CA:19:61
ValidityTue, 06 Jun 2023 00:00:00 GMT - Wed, 05 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 511 kB (511173 bytes)
Hash 7f8e54f5bb3fe281857e0da798179e5b
0e594fc69ffb829046b990dd687cc2bbce9debf4
1f8c24d721e77e2254ccb9f3d6827a6e90706d18b4d91198d06fbb5d8a30f854
GET /gg/v960X120.gif HTTP/1.1
Host: kycnxwxaztbrax.huayingshangmeng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/gif
content-length: 511173
accept-ranges: bytes
age: 1011850
cache-control: 31536000
etag: "64c7d1dd-7ccc5"
expires: Sun, 15 Oct 2023 02:04:09 GMT
last-modified: Mon, 31 Jul 2023 15:23:09 GMT
x-bdcdn-cache-status: TCP_HIT
x-request-id: 3cdfa1c0c16936b82c98c456c9095752
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-tt-trace-tag: id=5
date: Tue, 26 Sep 2023 19:08:19 GMT
via: cache08.szcm06
access-control-max-age: 31536000
X-Firefox-Spdy: h2
kycnxwxaztbrax.huayingshangmeng.com/gg/j960X120.gif
200 OK 605 kB URL GET HTTP/2 kycnxwxaztbrax.huayingshangmeng.com/gg/j960X120.gif
IP
ASN #56040 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subjectkycnxwxaztbrax.huayingshangmeng.com
Fingerprint6C:32:B5:DE:0D:D2:85:5A:D4:D2:CE:FA:97:6C:2A:32:E2:CA:19:61
ValidityTue, 06 Jun 2023 00:00:00 GMT - Wed, 05 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 605 kB (605087 bytes)
Hash ceb4f0a8807861b844eea69ff6a2655a
1eb4c1dbdf2c776d5a27b9040e1c11d8d370aea6
76a14ac63f70658712aa503325276edc222f171c9caf5be0c767892a811cfc4b
GET /gg/j960X120.gif HTTP/1.1
Host: kycnxwxaztbrax.huayingshangmeng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/gif
content-length: 605087
accept-ranges: bytes
age: 1011850
cache-control: 31536000
etag: "64c7d3a5-93b9f"
expires: Sun, 15 Oct 2023 02:04:09 GMT
last-modified: Mon, 31 Jul 2023 15:30:45 GMT
x-bdcdn-cache-status: TCP_HIT
x-request-id: abb19ff61fb9b13d64ecbadec0431d81
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-tt-trace-tag: id=5
date: Tue, 26 Sep 2023 19:08:19 GMT
via: cache08.szcm06
access-control-max-age: 31536000
X-Firefox-Spdy: h2
www.linkpicture.com/q/0512_960x80.gif
200 OK 98 kB URL GET HTTP/2 www.linkpicture.com/q/0512_960x80.gif
IP
Certificate IssuerLet's Encrypt
Subjectlinkpicture.com
Fingerprint0B:C0:0D:AE:9E:5E:46:C6:0F:A4:5D:14:F8:96:DF:F6:9D:AC:37:0D
ValiditySun, 13 Aug 2023 05:54:47 GMT - Sat, 11 Nov 2023 05:54:46 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Hash 11510055f728f48e97de96208c35545c
2e8623f5bbe7eff53060d84a300f7fe393cef775
b8ea6dd9328f61a854a74014c63d3009d90d501a5abac64ac366e8e7acefb766
GET /q/0512_960x80.gif HTTP/1.1
Host: www.linkpicture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 19:08:19 GMT
content-type: image/gif
content-length: 98086
last-modified: Fri, 12 May 2023 12:19:54 GMT
etag: "645e2eea-17f26"
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4224
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9oFCyqju7fVH5vP%2FNjzbDwghC4Gm4H4EseDw9t19zz%2FZoH3ST%2BE7N4bdO3fp1mT5L8dd%2FBtM3Kdc3uYcfHd%2BruP2FSpsJgGxlDprN0BWDPJkM9F3z7u8PGcLzhBuC1eRJ7UFPA%2FN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80cdcb7bde867708-LHR
X-Firefox-Spdy: h2
game168.top/template/m1938/css/ate.css
200 OK 77 kB URL GET HTTP/3 game168.top/template/m1938/css/ate.css
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgame168.top
Fingerprint2C:B9:41:88:EE:05:F5:A4:D6:01:DD:46:25:4B:46:2F:E1:8B:8B:F6
ValiditySun, 17 Sep 2023 02:32:50 GMT - Sat, 16 Dec 2023 02:32:49 GMT
File type ASCII text, with CRLF line terminators
Hash c9d234b728c135b5282623cb8636e752
bf70825f227351dfeb2b0d0603ed18a088f5ab1e
b2ac1d6b7c51bee39a09c9073a0758c72f2d28a2170443d9e7fcd075259f428f
GET /template/m1938/css/ate.css HTTP/1.1
Host: game168.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Sep 2023 19:08:18 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 22:54:24 GMT
vary: Accept-Encoding
etag: W/"632e3920-12c0f"
expires: Wed, 27 Sep 2023 06:08:48 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 3570
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QfJg4fe%2BQ4LfKNfCzFcszPhi7TL75Ibi3UDUHiCVl1xOVGamhaGwNzgVim2XR3tyZ%2BX6B9Wuameowej8EyBCG5%2BAhhddEJAWAJHioaZGZeMiRxnIWu7S9GOGj4LRjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80cdcb75cb575695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
img.1379a.xyz/images/64c8d34e3b631af06e9125fc.gif
302 Found 358 kB URL GET HTTP/2 img.1379a.xyz/images/64c8d34e3b631af06e9125fc.gif
IP
Certificate IssuerLet's Encrypt
Subject1379a.xyz
FingerprintBB:FB:C7:6D:53:7D:DC:9B:DB:72:46:57:0D:B0:DF:B5:B9:EC:EC:3F
ValidityTue, 18 Jul 2023 15:16:23 GMT - Mon, 16 Oct 2023 15:16:22 GMT
Size 358 kB (358142 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/64c8d34e3b631af06e9125fc.gif HTTP/1.1
Host: img.1379a.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game168.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://files.230808.top/store/loveimgmoe/44/96/64ad519dc789ac3b7abc4496.gif
X-Firefox-Spdy: h2
154.86.208.2
220.128.218.220
182.61.201.94
172.67.139.26
104.22.74.152
3.36.126.81
95.101.10.193