www.hdadblue.com/m/view.php?aid=40
779 B URL User Request GET www.hdadblue.com/m/view.php?aid=40
IP
ASN #133201 ABCDE GROUP COMPANY LIMITED
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash 8e16fc7097a64d64fe9248a80cd1838e
74bb3ce34ff3507aa08958cecf10f60336bea792
4de4be59174286a113162e6a24ed60e7f09fda3a94caa36e328500fd1477e427
GET /m/view.php?aid=40 HTTP/1.1
Host: www.hdadblue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 12:38:37 GMT
Content-Length: 779
Content-Type: text/html
Server: nginx
www.hdadblue.com/common.js
200 OK 2.7 kB URL GET HTTP/1.1 www.hdadblue.com/common.js
IP
ASN #133201 ABCDE GROUP COMPANY LIMITED
Requested by http://www.hdadblue.com/m/view.php?aid=40
File type HTML document, ASCII text, with very long lines (523), with CRLF line terminators
Hash c1d3a711ebd9d28c125eea80f5038f76
69e9e054c97295db8173d7db55f7ffcfbab574bc
3fdcef5e3fe5cfd551be2bc6171246c05e6c9d5cc7ecafcb4f95a0c0b0d47a8e
GET /common.js HTTP/1.1
Host: www.hdadblue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/m/view.php?aid=40
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 12:38:38 GMT
Content-Length: 2678
Content-Type: application/x-javascript
Server: nginx
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL GET HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.hdadblue.com/m/view.php?aid=40
File type ASCII text, with no line terminators
Hash 1bb5a3267c9865ad4abe8d937734b62b
b5478dd2edb3e64242eced1db2dbd945ef81f592
674bc0c70f98d627b8a7e1d278a1f21ffe33815565f7d5371bf0275da57571b2
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Tue, 28 Nov 2023 12:42:26 GMT
Etag: "4078521116"
Expires: Wed, 27 Nov 2024 12:42:26 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=4DBEDB37E9F1DA625CAAB0E3E5A154EC:FG=1; max-age=31536000; expires=Wed, 27-Nov-24 12:42:26 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
www.hdadblue.com/tj.js
200 OK 520 B IP
ASN #133201 ABCDE GROUP COMPANY LIMITED
Requested by http://www.hdadblue.com/m/view.php?aid=40
File type ASCII text, with CRLF line terminators
Hash c698738b6cdde724a1bddd5c16c6d694
d8cc5820a928471117d0eab017b557e821199db9
145ff773f5db768dca95a66859d03583a066d2feaabb568cb857772c379e6a8c
GET /tj.js HTTP/1.1
Host: www.hdadblue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/m/view.php?aid=40
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 12:38:38 GMT
Content-Length: 520
Content-Type: application/x-javascript
Server: nginx
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL GET HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.hdadblue.com/m/view.php?aid=40
File type ASCII text, with no line terminators
Hash 1bb5a3267c9865ad4abe8d937734b62b
b5478dd2edb3e64242eced1db2dbd945ef81f592
674bc0c70f98d627b8a7e1d278a1f21ffe33815565f7d5371bf0275da57571b2
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Tue, 28 Nov 2023 12:42:26 GMT
Etag: "4078521116"
Expires: Wed, 27 Nov 2024 12:42:26 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=4DBEDB37E9F1DA629DDE1463F16E709E:FG=1; max-age=31536000; expires=Wed, 27-Nov-24 12:42:26 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
api.share.baidu.com/s.gif?l=http://www.hdadblue.com/m/view.php?aid=40
200 OK 0 B URL GET HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.hdadblue.com/m/view.php?aid=40
IP
ASN #17816 China Unicom IP network China169 Guangdong province
Requested by http://www.hdadblue.com/m/view.php?aid=40
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.hdadblue.com/m/view.php?aid=40 HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Tue, 28 Nov 2023 12:42:26 GMT
launch.discountamount.top/template/m1938pc/images/1.gif
200 OK 254 B URL GET HTTP/2 launch.discountamount.top/template/m1938pc/images/1.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /template/m1938pc/images/1.gif HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: image/gif
content-length: 254
last-modified: Thu, 10 Aug 2023 11:58:21 GMT
etag: "64d4d0dd-fe"
expires: Thu, 28 Dec 2023 12:42:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/dh.js
200 OK 1.7 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/dh.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Hash 5ec2f4e458aa049e58bd6c41f9d9241b
eeb59791942dba7a6d39aa102d629e4ee9142385
02e69614ea312a294ac33471beccb3c16ae6e15bb36c5e09ec696015535ec6e9
GET /template/m1938pc/ads/dh.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Mon, 06 Nov 2023 07:56:11 GMT
vary: Accept-Encoding
etag: W/"65489c1b-1999"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/qq1.js
200 OK 2.2 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/qq1.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Hash 67549faf71d78086fbc7ed64b7db48d4
5046d7548348be6b822a3422ce55da0747ece7c8
9596c69c549d7c39319af5d5918a78d0e9704ec65b342cb9122679943407cd9f
GET /template/m1938pc/ads/qq1.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:26 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 08:19:51 GMT
vary: Accept-Encoding
etag: W/"6562ffa7-b1c"
expires: Wed, 29 Nov 2023 00:42:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/images/video-play.png
200 OK 1.6 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/images/video-play.png
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/m1938pc/images/video-play.png HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: image/png
content-length: 1567
last-modified: Wed, 10 Aug 2022 07:27:16 GMT
etag: "62f35dd4-61f"
expires: Thu, 28 Dec 2023 12:42:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/images/c3.gif
200 OK 120 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/images/c3.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type GIF image data, version 89a, 300 x 300\012- data
Size 120 kB (119944 bytes)
Hash 970ce0b9aa1a39517549704486f6b76e
f800ac879995290b0299b0f835b6625a4a956bce
afdb28e7fae4ca0be680c8182311937f0e64f918cdd9548c56ed96ee92047020
GET /template/m1938pc/images/c3.gif HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: image/gif
content-length: 119944
last-modified: Thu, 10 Aug 2023 12:24:04 GMT
etag: "64d4d6e4-1d488"
expires: Thu, 28 Dec 2023 12:42:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/images/c4.gif
200 OK 167 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/images/c4.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 167 kB (166846 bytes)
Hash 58604eacad44a18128696f2c02dea1b4
fc36a0c5e55ec1048b893db15df991986bf6a275
ee8c7326169da2070605255f2b5ceb1b88657d74d1103f00ed9fbc72cae21119
GET /template/m1938pc/images/c4.gif HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: image/gif
content-length: 166846
last-modified: Thu, 10 Aug 2023 12:24:04 GMT
etag: "64d4d6e4-28bbe"
expires: Thu, 28 Dec 2023 12:42:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?188c9ff7af79509eba4debcf0dcc3596
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?188c9ff7af79509eba4debcf0dcc3596
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.hdadblue.com/m/view.php?aid=40
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (615)
Hash 8e8365de3768bf298b14bbaf109ff608
4714b05444fc5ac0d0cce24a6d5b6f47d48769b2
f41c3c681077537040d9889e9ac2b90177e35e4e4f83004bb0116302759e8350
GET /hm.js?188c9ff7af79509eba4debcf0dcc3596 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11253
Content-Type: application/javascript
Date: Tue, 28 Nov 2023 12:42:27 GMT
Etag: aeac4430acc3f540f7ecb2a695d93339
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=0F4C51EA953C434C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.trust-provider.cn/
599 B IP
Hash d2544ea890d6af5edbaae8116a1cb4d7
a99ebf0f9d76017a70272a092fdcd7f852e140ca
ecd1984c92d9f7a90f960d110af0a593b7e3ab53ad5a6090cf1f33b5b7afde35
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:28 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82b977fb199bd039-SJC
ETag: "a99ebf0f9d76017a70272a092fdcd7f852e140ca"
Expires: Sat, 02 Dec 2023 10:41:12 GMT
Last-Modified: Sat, 25 Nov 2023 10:41:13 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb3
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01VaE187:10 (Cdn Cache Server V2.0), 1.1 PS-JJN-01XpV172:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e034_PS-JJN-01yru173_30678-40760
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701175348949fcd4895017c0f3718b41a37b479a7
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=13, edge;dur=0
hm.baidu.com/hm.js?10e130d1f819c0ea7839076633ee042c
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?10e130d1f819c0ea7839076633ee042c
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.hdadblue.com/m/view.php?aid=40
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (615)
Hash e1bc43a4b8b52e01ec41ddf8402ce337
c3d9bbf5538ae4c50160ca950ea5db63a856df3b
da24fa9a877d71648d153b7ac2b9dfbbf3c84c96e7745641b5e19618a1fa34f3
GET /hm.js?10e130d1f819c0ea7839076633ee042c HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11253
Content-Type: application/javascript
Date: Tue, 28 Nov 2023 12:42:27 GMT
Etag: 9d9a5a400c3f1dbe0d6fcc7184b346e3
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A285DECFE93BCA46; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
img.hgimg01.com/upload/vod/20231127-1/ffbab1eacc3faa3062786b8d3441045e.jpg
200 OK 54 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/ffbab1eacc3faa3062786b8d3441045e.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash e7ba3ed5cfeab0f2997af096e84d5bb1
acb5c174e02c680d7187bb976f31a184e2aca7e9
818c0f50a286475679700703009f121a05c5c33dcd0dbdaa72824009f84f937d
GET /upload/vod/20231127-1/ffbab1eacc3faa3062786b8d3441045e.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 53730
last-modified: Mon, 27 Nov 2023 08:54:56 GMT
etag: "65645960-d1e2"
expires: Wed, 27 Dec 2023 08:58:14 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
599 B IP
Hash d2544ea890d6af5edbaae8116a1cb4d7
a99ebf0f9d76017a70272a092fdcd7f852e140ca
ecd1984c92d9f7a90f960d110af0a593b7e3ab53ad5a6090cf1f33b5b7afde35
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:28 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82b977fb199bd039-SJC
ETag: "a99ebf0f9d76017a70272a092fdcd7f852e140ca"
Expires: Sat, 02 Dec 2023 10:41:12 GMT
Last-Modified: Sat, 25 Nov 2023 10:41:13 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb3
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01VaE187:10 (Cdn Cache Server V2.0), 1.1 PS-JJN-01XpV172:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e034_PS-JJN-01XpV172_32845-64080
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701175348d1a41984a4acfe258b520bddb593b469
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=10, edge;dur=0
ocsp.trust-provider.cn/
599 B IP
Hash d2544ea890d6af5edbaae8116a1cb4d7
a99ebf0f9d76017a70272a092fdcd7f852e140ca
ecd1984c92d9f7a90f960d110af0a593b7e3ab53ad5a6090cf1f33b5b7afde35
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:28 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82b977fb199bd039-SJC
ETag: "a99ebf0f9d76017a70272a092fdcd7f852e140ca"
Expires: Sat, 02 Dec 2023 10:41:12 GMT
Last-Modified: Sat, 25 Nov 2023 10:41:13 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb3
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01VaE187:10 (Cdn Cache Server V2.0), 1.1 VM-JJN-01ug579:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e034_VM-JJN-01ug579_15279-50316
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701175348aa248c796cc58cf1d1022b662608426d
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=11, edge;dur=0
img.hgimg01.com/upload/vod/20231127-1/4ea1bc90b81ca231ec6a4dd403bda439.jpg
200 OK 62 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/4ea1bc90b81ca231ec6a4dd403bda439.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 5eb4d4e06839523474e3db19abb80d50
5945b83412cb507ce7e56fed1e2cfae357bc37df
00c3461ca3fe34203a08b7aa81be33ebd244657a278033cc0340f1c8d4cfe703
GET /upload/vod/20231127-1/4ea1bc90b81ca231ec6a4dd403bda439.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 62307
last-modified: Mon, 27 Nov 2023 08:54:55 GMT
etag: "6564595f-f363"
expires: Wed, 27 Dec 2023 08:57:02 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231126-1/27e0129499f60b05ff27e5f59db2bf3a.jpg
200 OK 47 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231126-1/27e0129499f60b05ff27e5f59db2bf3a.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 438b4e7f84461e5951874b232269e767
ad4fe4fe78bf156dfce84192d925762d482c07a5
8a1140559654be2c6919f7256ecf37abac4578ead6fe5033926cf45eb38d183e
GET /upload/vod/20231126-1/27e0129499f60b05ff27e5f59db2bf3a.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 46800
last-modified: Sun, 26 Nov 2023 11:22:30 GMT
etag: "65632a76-b6d0"
expires: Tue, 26 Dec 2023 11:27:00 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231126-1/911019ed591269bd3e1acb3ca3875cd1.jpg
200 OK 51 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231126-1/911019ed591269bd3e1acb3ca3875cd1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 64b3521ec04b52834fe96b1b8d3c7a59
8718e9b67b74162fc79d87bdb694f9ca4045c393
f21ded46caf4375be090f332d075af34b497c65a81c5ccaa5a089706f3e938a2
GET /upload/vod/20231126-1/911019ed591269bd3e1acb3ca3875cd1.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 51256
last-modified: Sun, 26 Nov 2023 11:22:24 GMT
etag: "65632a70-c838"
expires: Tue, 26 Dec 2023 11:28:53 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/72aa9c78fa1744cc3fb9c87cdd3f1527.jpg
200 OK 325 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/72aa9c78fa1744cc3fb9c87cdd3f1527.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:13:33], baseline, precision 8, 960x540, components 3\012- data
Size 325 kB (324965 bytes)
Hash efc20d54dec839036540430a99c3924b
9a9aa369b959e9655687851b83a73a1e10b92a10
3057c46ee1183b8b2ac40564855b3034c082bfe2cfb861fa8d495f8e4dc260e1
GET /upload/vod/20231128-1/72aa9c78fa1744cc3fb9c87cdd3f1527.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 324965
last-modified: Tue, 28 Nov 2023 10:25:05 GMT
etag: "6565c001-4f565"
expires: Thu, 28 Dec 2023 10:26:33 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231124-1/3500900a812edde30c68a1f33ca2a5c0.jpg
200 OK 55 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231124-1/3500900a812edde30c68a1f33ca2a5c0.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 4573f16a2c3311b3deabf42a98792c80
007eb211845c0d89613fd24b5a8207b6ecd495cf
57d4cf576e5533508baf0f7d0c2833ad1caaaf53795bec7d27a84711d877e377
GET /upload/vod/20231124-1/3500900a812edde30c68a1f33ca2a5c0.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 54813
last-modified: Fri, 24 Nov 2023 09:00:31 GMT
etag: "6560662f-d61d"
expires: Sun, 24 Dec 2023 09:09:42 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231124-1/93a573ad3da4ddba3b22acffbba1724e.jpg
200 OK 64 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231124-1/93a573ad3da4ddba3b22acffbba1724e.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash d8ec140947f9a35ad3ed88fb37d75507
e252c530765014016cb687892e558d5ebfd60ee1
c315a46bb7ace1bf63795ea07cca4c2114c4d425f5956a709aae21177bb26d6d
GET /upload/vod/20231124-1/93a573ad3da4ddba3b22acffbba1724e.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 64214
last-modified: Fri, 24 Nov 2023 09:00:28 GMT
etag: "6560662c-fad6"
expires: Sun, 24 Dec 2023 09:09:48 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231119-1/ae7eec32c8009aaeb78e0ffddcedff05.jpg
200 OK 58 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231119-1/ae7eec32c8009aaeb78e0ffddcedff05.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 8f40f089dcc8634bce17792677ba2ae3
677f065be953e7d3edc1fe0398aea54917ac9e8e
dac3c88ff15446acf5635e7b72a891cec8f70557119da0a7549c374662340c5e
GET /upload/vod/20231119-1/ae7eec32c8009aaeb78e0ffddcedff05.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 58190
last-modified: Sun, 19 Nov 2023 11:02:58 GMT
etag: "6559eb62-e34e"
expires: Tue, 19 Dec 2023 11:13:03 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231118-1/b4c69dc4719e6ddb02499eb36827c905.jpg
200 OK 61 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231118-1/b4c69dc4719e6ddb02499eb36827c905.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash b1b04460cad10203c3899b99d2bbc23e
7d003bee558a42c3b0c5eb5bda15500d12d08f4a
78d3be90dedeb8eb1af3f6779b9c03e52a7059d9af4b4988e07a5024e0ce194a
GET /upload/vod/20231118-1/b4c69dc4719e6ddb02499eb36827c905.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 60947
last-modified: Sat, 18 Nov 2023 07:08:25 GMT
etag: "655862e9-ee13"
expires: Mon, 18 Dec 2023 07:09:47 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231118-1/89207605bcfb8781ad69dc107c7584f3.jpg
200 OK 64 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231118-1/89207605bcfb8781ad69dc107c7584f3.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash e966d92030301f01fafebd8d2c3c21d1
7d18c8c4469c72ac177cdf532392662cd3a28f20
391a9bdc9867495f98ce382a266d76c6302f0802502f60489fe6c152c194ffc9
GET /upload/vod/20231118-1/89207605bcfb8781ad69dc107c7584f3.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 63854
last-modified: Sat, 18 Nov 2023 07:08:24 GMT
etag: "655862e8-f96e"
expires: Mon, 18 Dec 2023 07:09:47 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231031-1/54e38dd12614068b0308ca64a89beb77.jpg
200 OK 48 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231031-1/54e38dd12614068b0308ca64a89beb77.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash 36cb2d4d3a4d7ad29fd86f0ae6717a30
8bbf86212c52212d5c93e62d1a09b04e8d6bbf53
536cf165835823a36687db03e037b3008c12414464a26e9203bb0f8c6dca7bae
GET /upload/vod/20231031-1/54e38dd12614068b0308ca64a89beb77.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 47591
last-modified: Tue, 31 Oct 2023 05:33:21 GMT
etag: "654091a1-b9e7"
expires: Fri, 08 Dec 2023 14:14:50 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/9e02ec06e4095dd0ac0ada31c679a14b.jpg
200 OK 399 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/9e02ec06e4095dd0ac0ada31c679a14b.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:22:09], baseline, precision 8, 960x540, components 3\012- data
Size 399 kB (399289 bytes)
Hash 03682835724928b260e327519377dde4
c25d0415ef1f5f44d872e38345854f73682343e4
b79e5f9a3a1d1ec76dc69dda243ea0e1d95bb7c35aeca81e0da85fbe4980e8a7
GET /upload/vod/20231128-1/9e02ec06e4095dd0ac0ada31c679a14b.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 399289
last-modified: Tue, 28 Nov 2023 10:24:38 GMT
etag: "6565bfe6-617b9"
expires: Thu, 28 Dec 2023 10:24:46 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/a78c89ed53d6cf280aa696dd1dbc9a7b.jpg
200 OK 456 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/a78c89ed53d6cf280aa696dd1dbc9a7b.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:08:30 16:23:25], baseline, precision 8, 960x540, components 3\012- data
Size 456 kB (455966 bytes)
Hash 310b0174e4f8e0477be1d9db4c72d21b
b8eae0cdca85756b0526a2330ca66b3dc0ff015a
3c55deea253fc499b851c97cd90a95ebef79bde39a69aebadcb17d31ad4b618b
GET /upload/vod/20231128-1/a78c89ed53d6cf280aa696dd1dbc9a7b.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 455966
last-modified: Tue, 28 Nov 2023 10:24:39 GMT
etag: "6565bfe7-6f51e"
expires: Thu, 28 Dec 2023 10:24:46 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231116-1/b668331701971d4106c1dcad6ed36769.jpg
200 OK 62 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231116-1/b668331701971d4106c1dcad6ed36769.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash e720633829f40c4810cc0293aa473692
24ca4e2c6ef1aa59fb5a49176157186da2162624
e66b7c40fa39f64f39deb731a8547b19b9bd701519d4f5915188c0e2c9e070c8
GET /upload/vod/20231116-1/b668331701971d4106c1dcad6ed36769.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 61686
last-modified: Thu, 16 Nov 2023 00:47:42 GMT
etag: "655566ae-f0f6"
expires: Sat, 16 Dec 2023 00:50:24 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231113-1/85a3c5b004f1623c24d4aa2f2e1d5137.jpg
200 OK 58 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231113-1/85a3c5b004f1623c24d4aa2f2e1d5137.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash e7ee94fcb93641b2056ed73eb741d4c5
1165f2c9ed9c59131c53221e38af8d8c1ef96602
c97268f3fa6a5770290d0bf4d5f00fbdcc04777bee8293a03a1117defe16ce51
GET /upload/vod/20231113-1/85a3c5b004f1623c24d4aa2f2e1d5137.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 57540
last-modified: Mon, 13 Nov 2023 02:20:20 GMT
etag: "655187e4-e0c4"
expires: Wed, 13 Dec 2023 02:26:23 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231113-1/bfd6789ff764e6217e9c70f271c24db3.jpg
200 OK 45 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231113-1/bfd6789ff764e6217e9c70f271c24db3.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash 87e088521c8a4227feb23aac9b31c4ac
6bdf4d7919b1b4d54703755eec934e2d35b37d9b
c21dc6fa7dbf280d8a0dadf008ec5a26dda12813c9c304bf1d12d32c93963eb3
GET /upload/vod/20231113-1/bfd6789ff764e6217e9c70f271c24db3.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 45046
last-modified: Mon, 13 Nov 2023 02:20:21 GMT
etag: "655187e5-aff6"
expires: Wed, 13 Dec 2023 02:26:23 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231106-1/695dae95c943050069224345f9e46de5.jpg
200 OK 57 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231106-1/695dae95c943050069224345f9e46de5.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash fe680eb037ff811e59706df9eaf5d245
7255af4cedb84ad8eb911a2680c6e4c46ceb74f9
60866557a76e139aa1bb4e8c9448347b3e2681f860227d5b835fd847a7319137
GET /upload/vod/20231106-1/695dae95c943050069224345f9e46de5.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 57382
last-modified: Mon, 06 Nov 2023 06:31:39 GMT
etag: "6548884b-e026"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231106-1/614cb3ad3947dd452b2e1171533d36a1.jpg
200 OK 51 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231106-1/614cb3ad3947dd452b2e1171533d36a1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash 9c05b4cb4875102c393239b867759db5
65bec361f4664a35ae4b869a2d7618e5ffd7f06b
c6dcc18df3ea2256012afec262a0a6747a5cec853a48d9ffcbec6a6c590b46ce
GET /upload/vod/20231106-1/614cb3ad3947dd452b2e1171533d36a1.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 51039
last-modified: Mon, 06 Nov 2023 06:31:40 GMT
etag: "6548884c-c75f"
expires: Fri, 08 Dec 2023 14:14:37 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231106-1/3f31d2af6a351f85a79269af5880706e.jpg
200 OK 62 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231106-1/3f31d2af6a351f85a79269af5880706e.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash 6453fe7f0612654ffff7317bde121ec5
1fba352e627bacdf26450deb70be21c69e9e6bd2
cf61e7d665684a8536b4c69c01b8b1ce5e56cbf6b35b06a0e30a756c1fe292e8
GET /upload/vod/20231106-1/3f31d2af6a351f85a79269af5880706e.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 61899
last-modified: Mon, 06 Nov 2023 06:31:41 GMT
etag: "6548884d-f1cb"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231031-1/2c67363853a9fbc39fb1ee66503d6625.jpg
200 OK 57 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231031-1/2c67363853a9fbc39fb1ee66503d6625.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash b58ffd066e2b4fe013b07a88b70b6060
c1c0b6ba6acafab0ae7af3f88da02afe93f38316
176c9664e223d59a2896bc1d9473f66590d009e1daedbaaba2a4ce7a9503d3ec
GET /upload/vod/20231031-1/2c67363853a9fbc39fb1ee66503d6625.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 57186
last-modified: Tue, 31 Oct 2023 05:33:22 GMT
etag: "654091a2-df62"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231031-1/402d3b9ad99f454dc0d0cf792fb40a7b.jpg
200 OK 41 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231031-1/402d3b9ad99f454dc0d0cf792fb40a7b.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash e6e82a1fb5f0339234715dbc72c8941b
953a3a7f4e794c4e2a7606ef3dd85876dbd67f83
0d418806e13cb299ab3eeeff47f2e967f299dd514ae46a2eb9af717e4cac4bed
GET /upload/vod/20231031-1/402d3b9ad99f454dc0d0cf792fb40a7b.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 41282
last-modified: Tue, 31 Oct 2023 05:33:24 GMT
etag: "654091a4-a142"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231126-1/9dfe43b9ad43ce5ee61df04af4fb4e15.jpg
200 OK 73 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231126-1/9dfe43b9ad43ce5ee61df04af4fb4e15.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 391cfdd983a1626bc1dff7606a8d576e
dc5fe3c393618d1fb9e80b65d9479914e1bbe0d5
2014fd8a0e80572dc5ea7ebab223da210ddcb4b81f6a6117e1af68fecc24b46d
GET /upload/vod/20231126-1/9dfe43b9ad43ce5ee61df04af4fb4e15.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 72706
last-modified: Sun, 26 Nov 2023 11:22:35 GMT
etag: "65632a7b-11c02"
expires: Tue, 26 Dec 2023 11:26:56 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231126-1/dd01c222b52189bfbd5b33ede62871f1.jpg
200 OK 73 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231126-1/dd01c222b52189bfbd5b33ede62871f1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 46bb295e209b2deb19551ed23e6d2a15
df1dbd3242e52b193eb09e544dd94ee624adc8be
9939b5d35b488fd8f01990aabb96297365900a0e8b4f52ae0e063aa86b6350af
GET /upload/vod/20231126-1/dd01c222b52189bfbd5b33ede62871f1.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 73039
last-modified: Sun, 26 Nov 2023 11:22:34 GMT
etag: "65632a7a-11d4f"
expires: Tue, 26 Dec 2023 11:27:04 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231126-1/13d8f501b3b5da7c1d0fb854c60ad48d.jpg
200 OK 73 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231126-1/13d8f501b3b5da7c1d0fb854c60ad48d.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 8ad237d8321298036d1ed5d2833c4372
922d0e5bad8bd0f06cf8398396e5aefd7d89ffd6
f71a6f6d620dc2362446c210830e5e7d3d441bc3b406fe2233ad2e53e6d92309
GET /upload/vod/20231126-1/13d8f501b3b5da7c1d0fb854c60ad48d.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 72556
last-modified: Sun, 26 Nov 2023 11:22:29 GMT
etag: "65632a75-11b6c"
expires: Tue, 26 Dec 2023 11:26:53 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231124-1/321402a95aa9822619328b94f64ee6f3.jpg
200 OK 73 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231124-1/321402a95aa9822619328b94f64ee6f3.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 48579e43e532e4585ba2eb98d359fa87
90169b7bdfb4186d8a4d108f3ffbb6fb82754816
a1e46d6ee5ad6c886a54f5fbfd5000e7b70d689922ecf2d0fa702a346c89935c
GET /upload/vod/20231124-1/321402a95aa9822619328b94f64ee6f3.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 73332
last-modified: Fri, 24 Nov 2023 09:00:32 GMT
etag: "65606630-11e74"
expires: Sun, 24 Dec 2023 09:09:45 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231124-1/00d91c5322d36937a887eb2a560efaa5.jpg
200 OK 72 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231124-1/00d91c5322d36937a887eb2a560efaa5.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Hash 8949f5a52aceb2e4946e1996f27e1d9c
05c8bfc64cbe200504cac8bbd3e442eba5125dfb
e802390ddd35acd1324dd8c62aae5bdb6344ca4592edb3773eef2bc386c2e123
GET /upload/vod/20231124-1/00d91c5322d36937a887eb2a560efaa5.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 72225
last-modified: Fri, 24 Nov 2023 09:00:27 GMT
etag: "6560662b-11a21"
expires: Sun, 24 Dec 2023 09:09:48 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231031-1/11e2b8e43526257563519172f76f0a01.jpg
200 OK 70 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231031-1/11e2b8e43526257563519172f76f0a01.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash 8c15876063eee376cf22c5b1bfe833f6
476a686dbe02dbe059f56cb1759ff7170578ee41
fa01ec01d86f4aae8a1a69d8f5e696936bf36d2c9c48198daebbb2f55249e070
GET /upload/vod/20231031-1/11e2b8e43526257563519172f76f0a01.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 70397
last-modified: Tue, 31 Oct 2023 05:33:19 GMT
etag: "6540919f-112fd"
expires: Fri, 08 Dec 2023 14:14:50 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231116-1/3075804c382682ca86c56b79deeb358c.jpg
200 OK 75 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231116-1/3075804c382682ca86c56b79deeb358c.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash c512077de7637478e35b63777366d1ab
187004ddb089956bf1ef85f44ac55a7e9b369d57
f09f18755f000501ea07e0041ce46deb10b7d231257ee48cb059640e430e2dda
GET /upload/vod/20231116-1/3075804c382682ca86c56b79deeb358c.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 74883
last-modified: Thu, 16 Nov 2023 00:47:43 GMT
etag: "655566af-12483"
expires: Sat, 16 Dec 2023 00:58:18 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231113-1/091011d6c2b7b3a5b67da10d2273fa35.jpg
200 OK 70 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231113-1/091011d6c2b7b3a5b67da10d2273fa35.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash ba2d493f0cd264e5c4e3a4ac49f90bf0
ef3d8588bcf624726419adeea6443f0e84843a64
b6c7ca753e8ad83913b33e02629eb4e1ad19ee27459de5a0413301f391412614
GET /upload/vod/20231113-1/091011d6c2b7b3a5b67da10d2273fa35.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 70233
last-modified: Mon, 13 Nov 2023 02:20:18 GMT
etag: "655187e2-11259"
expires: Wed, 13 Dec 2023 02:26:19 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231106-1/801fa7b68852ed4de6b972df10121305.jpg
200 OK 70 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231106-1/801fa7b68852ed4de6b972df10121305.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash 0668f27ac71e2d6892971b8d490dc040
f3ed097b9f288fda50c541487abbf9a7676569c9
5b887210110e5ff11f34ca2cc6b20879857296d8f43b8d2710e828051c753cf8
GET /upload/vod/20231106-1/801fa7b68852ed4de6b972df10121305.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 69752
last-modified: Mon, 06 Nov 2023 06:31:42 GMT
etag: "6548884e-11078"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20230412-11/6a20a75cef4f221836d5d80b78115b7e.jpg
200 OK 84 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20230412-11/6a20a75cef4f221836d5d80b78115b7e.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 718x404, components 3\012- data
Hash 925abc0b23f80d805f5d34da8da89243
09876367a4029b968feebacdab9f6e3c46095b70
73ff8a53edc9166609d79b9186138bb06cfbad7be24afb9003f35b38058f472c
GET /upload/vod/20230412-11/6a20a75cef4f221836d5d80b78115b7e.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 83943
last-modified: Wed, 12 Apr 2023 02:42:23 GMT
etag: "64361a8f-147e7"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231031-1/e4893c62bbd229edc15a217828353cf2.jpg
200 OK 83 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231031-1/e4893c62bbd229edc15a217828353cf2.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash 26466b55914779e7eab42f9d8078294d
fec657ecaf9743c0531db88733e7b5ea23362149
bb6c4eb67c96d81e446700e29460d62101712a545d55e0464a4cc1070f0eba84
GET /upload/vod/20231031-1/e4893c62bbd229edc15a217828353cf2.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 83234
last-modified: Tue, 31 Oct 2023 05:33:25 GMT
etag: "654091a5-14522"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231031-1/8a338168032e304451b28fe6213bde09.jpg
200 OK 81 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231031-1/8a338168032e304451b28fe6213bde09.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash 70a1051418c93fecaecf69acce1f3f53
64d682441d3b312e9c50f20ae9731a6afc0bc8b1
48d87cd683d06aff03e6b9d2d0a37f029cf8a644a1f9aa862243974fdf98e782
GET /upload/vod/20231031-1/8a338168032e304451b28fe6213bde09.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 81008
last-modified: Tue, 31 Oct 2023 05:33:23 GMT
etag: "654091a3-13c70"
expires: Fri, 08 Dec 2023 14:14:38 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231127-1/7db3e9343133d52d6da627cbffa611a2.jpg
200 OK 362 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/7db3e9343133d52d6da627cbffa611a2.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:19:57], baseline, precision 8, 960x540, components 3\012- data
Size 362 kB (362296 bytes)
Hash 22789024219db33120d1713480ad8f91
ea876019aa4a859b179a97d6327281259ab30949
65ee5c7afbbd6fbbcc66c5f26152e1aac3f09c4dd4d4c3a9faf391c063546574
GET /upload/vod/20231127-1/7db3e9343133d52d6da627cbffa611a2.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 362296
last-modified: Mon, 27 Nov 2023 08:54:27 GMT
etag: "65645943-58738"
expires: Wed, 27 Dec 2023 08:57:44 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1021776596&si=10e130d1f819c0ea7839076633ee042c&v=1.3.0&lv=1&sn=17822&r=0&ww=1280&u=http%3A%2F%2Fwww.hdadblue.com%2Fm%2Fview.php%3Faid%3D40&tt=%E8%BF%9E%E4%BA%91%E6%B8%AF%E8%B6%8A%E9%92%A9%E8%A3%85%E4%BF%AE%E5%85%AC%E5%8F%B8
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1021776596&si=10e130d1f819c0ea7839076633ee042c&v=1.3.0&lv=1&sn=17822&r=0&ww=1280&u=http%3A%2F%2Fwww.hdadblue.com%2Fm%2Fview.php%3Faid%3D40&tt=%E8%BF%9E%E4%BA%91%E6%B8%AF%E8%B6%8A%E9%92%A9%E8%A3%85%E4%BF%AE%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.hdadblue.com/m/view.php?aid=40
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1021776596&si=10e130d1f819c0ea7839076633ee042c&v=1.3.0&lv=1&sn=17822&r=0&ww=1280&u=http%3A%2F%2Fwww.hdadblue.com%2Fm%2Fview.php%3Faid%3D40&tt=%E8%BF%9E%E4%BA%91%E6%B8%AF%E8%B6%8A%E9%92%A9%E8%A3%85%E4%BF%AE%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 28 Nov 2023 12:42:28 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=03F675553F8069EC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=261627679&si=188c9ff7af79509eba4debcf0dcc3596&v=1.3.0&lv=1&sn=17822&r=0&ww=1280&u=http%3A%2F%2Fwww.hdadblue.com%2Fm%2Fview.php%3Faid%3D40&tt=%E8%BF%9E%E4%BA%91%E6%B8%AF%E8%B6%8A%E9%92%A9%E8%A3%85%E4%BF%AE%E5%85%AC%E5%8F%B8
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=261627679&si=188c9ff7af79509eba4debcf0dcc3596&v=1.3.0&lv=1&sn=17822&r=0&ww=1280&u=http%3A%2F%2Fwww.hdadblue.com%2Fm%2Fview.php%3Faid%3D40&tt=%E8%BF%9E%E4%BA%91%E6%B8%AF%E8%B6%8A%E9%92%A9%E8%A3%85%E4%BF%AE%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.hdadblue.com/m/view.php?aid=40
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=261627679&si=188c9ff7af79509eba4debcf0dcc3596&v=1.3.0&lv=1&sn=17822&r=0&ww=1280&u=http%3A%2F%2Fwww.hdadblue.com%2Fm%2Fview.php%3Faid%3D40&tt=%E8%BF%9E%E4%BA%91%E6%B8%AF%E8%B6%8A%E9%92%A9%E8%A3%85%E4%BF%AE%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 28 Nov 2023 12:42:28 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=9C8F45B0D01B8ABC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
img.hgimg01.com/upload/vod/20231127-1/fb2380e2e94fc83d18e40cf343b3313f.jpg
200 OK 525 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/fb2380e2e94fc83d18e40cf343b3313f.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 525 kB (524865 bytes)
Hash e63266539d33aa2047a8b22c027ba98a
ae61a594e5ff2aee4cf86f8fc97499fe0d613a63
4897a96c5cf848c7bf5570d52ddb233747bd3953984dc7cea9a4630991485c23
GET /upload/vod/20231127-1/fb2380e2e94fc83d18e40cf343b3313f.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 524865
last-modified: Mon, 27 Nov 2023 08:54:26 GMT
etag: "65645942-80241"
expires: Wed, 27 Dec 2023 08:57:44 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
600 B IP
Hash 205b99213acbeaebf488be0c5e5bd6dc
1bc7a7578b928ae230ffe1dc4bc99c919869b788
d24e0f0ebeb5ff734acb4c0cc42bc6b9b341dbc495d22a5dec46a8ddf79ee132
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:28 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82bf8615d8fc67d6-SJC
ETag: "1bc7a7578b928ae230ffe1dc4bc99c919869b788"
Expires: Sun, 03 Dec 2023 04:31:06 GMT
Last-Modified: Sun, 26 Nov 2023 04:31:07 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PS-000-01N9V58:13 (Cdn Cache Server V2.0), 1.1 VM-JJN-01ug579:12 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e034_VM-JJN-01kXQ81_20503-55831
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701175348864fc9fafbdbfe500a7dcd286966b2c5
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=9, edge;dur=0
ocsp.trust-provider.cn/
599 B IP
Hash d2544ea890d6af5edbaae8116a1cb4d7
a99ebf0f9d76017a70272a092fdcd7f852e140ca
ecd1984c92d9f7a90f960d110af0a593b7e3ab53ad5a6090cf1f33b5b7afde35
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:28 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82b977fb199bd039-SJC
ETag: "a99ebf0f9d76017a70272a092fdcd7f852e140ca"
Expires: Sat, 02 Dec 2023 10:41:12 GMT
Last-Modified: Sat, 25 Nov 2023 10:41:13 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb3
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01VaE187:10 (Cdn Cache Server V2.0), 1.1 PS-JJN-01XpV172:6 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e034_PS-JJN-01XpV172_34566-61826
via: n172-013-214.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701175348386ee51212435dba273bd9d333c05d68
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=11, edge;dur=0
img.hgimg01.com/upload/vod/20231124-1/c50c9109125dcfeb855f72140c99fb0d.jpg
200 OK 147 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231124-1/c50c9109125dcfeb855f72140c99fb0d.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Size 147 kB (147090 bytes)
Hash f038a1b54d297bfc9d66256213f418ee
c6843f3b74f0bd10db305030d9acf4aa7a13aa1b
82c280b3b5c4ed3bf33abcb0339e6f5626cf269caa099d5a74ee2d3027711fb3
GET /upload/vod/20231124-1/c50c9109125dcfeb855f72140c99fb0d.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 147090
last-modified: Fri, 24 Nov 2023 09:00:30 GMT
etag: "6560662e-23e92"
expires: Sun, 24 Dec 2023 09:09:47 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231127-1/8ed2d6a2904bec728b440d3cbfdaeabc.jpg
200 OK 135 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/8ed2d6a2904bec728b440d3cbfdaeabc.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1038x583, components 3\012- data
Size 135 kB (134816 bytes)
Hash 605307093e75722be2d495eda18ce7c7
6705a33eec7aed2623a9ceb94035bc15f23cb217
e2ca27a5dcd970342636882e0c61735c96706f9cec4ee154a2fe83c4c472caab
GET /upload/vod/20231127-1/8ed2d6a2904bec728b440d3cbfdaeabc.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 134816
last-modified: Mon, 27 Nov 2023 08:54:15 GMT
etag: "65645937-20ea0"
expires: Wed, 27 Dec 2023 08:54:28 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231127-1/941f21ee48e7ae0684c7da6021c89e83.jpg
200 OK 401 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/941f21ee48e7ae0684c7da6021c89e83.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:26:00], baseline, precision 8, 960x540, components 3\012- data
Size 401 kB (401329 bytes)
Hash 854742eab87bdc92907934232b182352
71dd39a69193521b082158ebbdaca85d0376b9c0
abf8af938be4fb37a7411935f9c06a01056d9c6a082ea6c9bedcd8bc22546848
GET /upload/vod/20231127-1/941f21ee48e7ae0684c7da6021c89e83.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 401329
last-modified: Mon, 27 Nov 2023 08:54:24 GMT
etag: "65645940-61fb1"
expires: Wed, 27 Dec 2023 08:57:09 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231127-1/16fa8d8d5639c0e43ae911c6dd0f0118.jpg
200 OK 414 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/16fa8d8d5639c0e43ae911c6dd0f0118.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:31:50], baseline, precision 8, 960x540, components 3\012- data
Size 414 kB (414154 bytes)
Hash d909a942de404f599529626a6b8a31a0
c8dc949b3e023cb888df598f5559e2668a0c6569
4cdb88486f24e864c5cdf8fd966e1e65d3a049cfe27301d112e52d9b20e1e81f
GET /upload/vod/20231127-1/16fa8d8d5639c0e43ae911c6dd0f0118.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 414154
last-modified: Mon, 27 Nov 2023 08:54:23 GMT
etag: "6564593f-651ca"
expires: Wed, 27 Dec 2023 08:57:09 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
600 B IP
Hash 205b99213acbeaebf488be0c5e5bd6dc
1bc7a7578b928ae230ffe1dc4bc99c919869b788
d24e0f0ebeb5ff734acb4c0cc42bc6b9b341dbc495d22a5dec46a8ddf79ee132
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:28 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82bf8615d8fc67d6-SJC
ETag: "1bc7a7578b928ae230ffe1dc4bc99c919869b788"
Expires: Sun, 03 Dec 2023 04:31:06 GMT
Last-Modified: Sun, 26 Nov 2023 04:31:07 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PS-000-01N9V58:13 (Cdn Cache Server V2.0), 1.1 VM-JJN-01ug579:12 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e034_VM-JJN-01Xmk84_16872-7611
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701175348e6a76e535b186e5a019857139a434df2
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=10, edge;dur=0
ocsp.trust-provider.cn/
600 B IP
Hash 205b99213acbeaebf488be0c5e5bd6dc
1bc7a7578b928ae230ffe1dc4bc99c919869b788
d24e0f0ebeb5ff734acb4c0cc42bc6b9b341dbc495d22a5dec46a8ddf79ee132
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:28 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82bf8615d8fc67d6-SJC
ETag: "1bc7a7578b928ae230ffe1dc4bc99c919869b788"
Expires: Sun, 03 Dec 2023 04:31:06 GMT
Last-Modified: Sun, 26 Nov 2023 04:31:07 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb5
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 PS-000-01N9V58:13 (Cdn Cache Server V2.0), 1.1 PS-JJN-01yru173:5 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e034_PS-JJN-01yru173_30703-34876
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 17011753483cfd8ebdbe586365ae723f18aa49e5a8
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=12, edge;dur=0
img.hgimg01.com/upload/vod/20231031-1/e34d5c2d07b61196850629f02482a5a9.jpg
200 OK 219 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231031-1/e34d5c2d07b61196850629f02482a5a9.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 856x480, components 3\012- data
Size 219 kB (219418 bytes)
Hash ce16bbe2c7d7cad14715d04bbf1a4218
1d93bc5852b55fe6e7c81a7dc13caab90c0f1d62
4ec83131f6a2d371ef952c3619d097d13260169db50ead2f53646af7a246d858
GET /upload/vod/20231031-1/e34d5c2d07b61196850629f02482a5a9.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 219418
last-modified: Tue, 31 Oct 2023 05:33:22 GMT
etag: "654091a2-3591a"
expires: Fri, 08 Dec 2023 14:14:36 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231127-1/bd1b09053bea7def3d2186495695ed80.jpg
200 OK 198 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/bd1b09053bea7def3d2186495695ed80.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 1280x720, components 3\012- data
Size 198 kB (197715 bytes)
Hash 3fec4d1974d1f815b8b6a37bbf9537c8
8d57739ba993ebd56f551ba161154cd7db77a3b9
e3364e46c2add396272555f4b28ddaa03ca2bd22093770acf60f6a8fb262131c
GET /upload/vod/20231127-1/bd1b09053bea7def3d2186495695ed80.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 197715
last-modified: Mon, 27 Nov 2023 08:54:17 GMT
etag: "65645939-30453"
expires: Wed, 27 Dec 2023 08:54:28 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/1453f88dce957ea69c9426f051fa5afb.jpg
200 OK 391 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/1453f88dce957ea69c9426f051fa5afb.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:08:04 16:14:08], baseline, precision 8, 960x540, components 3\012- data
Size 391 kB (390610 bytes)
Hash 527e4bbf1509c4289afa46471cc81e60
42dce6c09760d3a6fc302680011ced30dfb4fed2
f99ce69d9acb810f68504bdd722a4ae7fdcc2c802bf4f96ce09affb71a24cb8c
GET /upload/vod/20231128-1/1453f88dce957ea69c9426f051fa5afb.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 390610
last-modified: Tue, 28 Nov 2023 10:24:36 GMT
etag: "6565bfe4-5f5d2"
expires: Thu, 28 Dec 2023 10:24:49 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/c74184afb1e67bc5ebc2412bc2777f0f.jpg
200 OK 330 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/c74184afb1e67bc5ebc2412bc2777f0f.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:46:12], baseline, precision 8, 960x540, components 3\012- data
Size 330 kB (330305 bytes)
Hash 9d89454b0395b5b8c86d864abde10da5
ff29bb4da00d97c64416c8051b171d2fe9794904
96727ab8cc514da838757878e8e7dd05f741ae40d11283c910400dafb85fe740
GET /upload/vod/20231128-1/c74184afb1e67bc5ebc2412bc2777f0f.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 330305
last-modified: Tue, 28 Nov 2023 10:24:35 GMT
etag: "6565bfe3-50a41"
expires: Thu, 28 Dec 2023 10:24:49 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231127-1/e0c8e2cab9880de1a11d8922b90bed75.jpg
200 OK 435 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/e0c8e2cab9880de1a11d8922b90bed75.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:08:30 16:14:55], baseline, precision 8, 960x540, components 3\012- data
Size 435 kB (434891 bytes)
Hash 8a9f9369147b26b6f6af168cf85b36af
ba834c085d9393ae1b4384f541873ae9dda855a6
b7c2c588d8682427d4231fda65793c4d10ecd2c91c328cca0763a9aa7647c676
GET /upload/vod/20231127-1/e0c8e2cab9880de1a11d8922b90bed75.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 434891
last-modified: Mon, 27 Nov 2023 08:54:30 GMT
etag: "65645946-6a2cb"
expires: Wed, 27 Dec 2023 08:57:44 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231127-1/4193f6d2ab7a7b9ae07d58caac6208a6.jpg
200 OK 398 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231127-1/4193f6d2ab7a7b9ae07d58caac6208a6.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:18:59], baseline, precision 8, 960x540, components 3\012- data
Size 398 kB (398410 bytes)
Hash f3c711845ab819373e1767c2863344b8
3868220b9b3fb8c0f15775a080fded0308ae48fa
183678ded9b873b7dc2768b4337840960b44c77b9997327bb94dd2ca8962555d
GET /upload/vod/20231127-1/4193f6d2ab7a7b9ae07d58caac6208a6.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 398410
last-modified: Mon, 27 Nov 2023 08:54:29 GMT
etag: "65645945-6144a"
expires: Wed, 27 Dec 2023 08:57:44 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/c2f0993115e9fae7e621ad6be6d82fa2.jpg
200 OK 397 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/c2f0993115e9fae7e621ad6be6d82fa2.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:17:53], baseline, precision 8, 960x540, components 3\012- data
Size 397 kB (397361 bytes)
Hash f28a1de4912364545b14120afb18de26
4adbcc2e24905b5a6e93d81bdc6dc72e296d08b3
38b5cc664bf01f4b1358ae64f63fc497559f62ed933bf4f794a456f92af7b101
GET /upload/vod/20231128-1/c2f0993115e9fae7e621ad6be6d82fa2.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 397361
last-modified: Tue, 28 Nov 2023 10:25:01 GMT
etag: "6565bffd-61031"
expires: Thu, 28 Dec 2023 10:26:36 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
launch.discountamount.top/
200 OK 453 kB URL GET HTTP/2 launch.discountamount.top/
IP
Requested by http://www.hdadblue.com/m/view.php?aid=40
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Size 453 kB (452929 bytes)
Hash d1866e9d3f98f45510133b4f283b99c1
76e8bad6107d4d8910b9c6ad0fd178eae2a9d643
06560739769c92d8b377e8a31e61b2ee4097eb1be0e7264f0bdf2057023e88f2
GET / HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/41855c8cc9988240aa6becd148adaf4b.jpg
200 OK 364 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/41855c8cc9988240aa6becd148adaf4b.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:14:49], baseline, precision 8, 960x540, components 3\012- data
Size 364 kB (364520 bytes)
Hash 7b2679c8c7af64f61cec70cdf45c996e
8648e5171c9e3e56c8e450a67298259785715d0d
8db62e2ab127208340c73908feded4001bf6eb2667ce9a83e2ac448e2cbf57d9
GET /upload/vod/20231128-1/41855c8cc9988240aa6becd148adaf4b.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 364520
last-modified: Tue, 28 Nov 2023 10:25:04 GMT
etag: "6565c000-58fe8"
expires: Thu, 28 Dec 2023 10:26:34 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.91w8idnntcn5ecxce06t.com/image/s034.gif
200 OK 22 kB URL GET HTTP/2 img.91w8idnntcn5ecxce06t.com/image/s034.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subject91w8idnntcn5ecxce06t.com
Fingerprint99:AE:A4:CD:6A:79:3A:3A:23:FC:1E:78:55:AE:1D:42:FC:3C:7F:A3
ValidityThu, 05 Oct 2023 11:52:13 GMT - Wed, 03 Jan 2024 11:52:12 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1790d1b8d4b9c803d3d29909e586836
3d670fb320b88da970eef5bbb288b7abb4142bbf
222d83c90ddafda6b7bf77aaa8884195da62c806d2d09bf0b15794d03878ec62
GET /image/s034.gif HTTP/1.1
Host: img.91w8idnntcn5ecxce06t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/webp
content-length: 21664
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=gif, origSize=87376
content-disposition: inline; filename="s034.webp"
vary: Accept
etag: "605c4898-15550"
expires: Thu, 21 Dec 2023 22:25:27 GMT
last-modified: Thu, 25 Mar 2021 08:23:52 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 469761
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6QYhhaF%2FxtSt2hF%2Bfg5uV06d6WTPWBvGlq9qQLMcpvEJrzNp%2F16s%2FCuyxvpkFUyKbyxoDv9%2FJjw85D7%2FrmVrwnOOUArF%2F7EciALIX%2BaqbhL5DtWHZkQXs%2FVvM6CSPFRvYhfmUVY3nltKUllmee8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d2b0ec8f7eb503-OSL
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/5dc08a3d417942a3c84e7838c8bb0c27.jpg
200 OK 408 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/5dc08a3d417942a3c84e7838c8bb0c27.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:08:04 15:40:49], baseline, precision 8, 960x540, components 3\012- data
Size 408 kB (407478 bytes)
Hash 5940518020919944c5f334344bc45ed0
af25eb6f55c16495029af5da037dc563a28f4c5e
a4b98043aa990773db6baa8e24c2ac4bed127b68deb3e1d731d3c6ce58ea4835
GET /upload/vod/20231128-1/5dc08a3d417942a3c84e7838c8bb0c27.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 407478
last-modified: Tue, 28 Nov 2023 10:25:02 GMT
etag: "6565bffe-637b6"
expires: Thu, 28 Dec 2023 10:26:35 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.hgimg01.com/upload/vod/20231128-1/c2ca2157da83132bf43c8afc6425af4d.jpg
200 OK 362 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/c2ca2157da83132bf43c8afc6425af4d.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:08:30 16:16:39], baseline, precision 8, 960x540, components 3\012- data
Size 362 kB (361505 bytes)
Hash 0fa8cd22c947d02f03b6ed53bfe3cf55
dd3fe565d0f99935ad6f487b5e91afe494288cea
7075e6f4f0b351c1daca20fdace7d54fde99607a1fac75d483d9e0308922ab44
GET /upload/vod/20231128-1/c2ca2157da83132bf43c8afc6425af4d.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 361505
last-modified: Tue, 28 Nov 2023 10:25:19 GMT
etag: "6565c00f-58421"
expires: Thu, 28 Dec 2023 10:26:32 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230910/s5pTQBhn/1.jpg
200 OK 140 kB URL GET HTTP/2 player.hgm3u9.com/20230910/s5pTQBhn/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1188x668, components 3\012- data
Size 140 kB (140427 bytes)
Hash e0cf60ecb57171ed81a471ae04e02d0a
48773a2e7e0c8c796d518336f08bdf3c323e4075
7497b68854644c7d34f02d6ebe4232ef0c7900bbc686ed851dec1c18d7228050
GET /20230910/s5pTQBhn/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 140427
last-modified: Mon, 11 Sep 2023 02:01:34 GMT
etag: "64fe74fe-2248b"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230919/1ytxnMZP/1.jpg
200 OK 49 kB URL GET HTTP/2 player.hgm3u9.com/20230919/1ytxnMZP/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash 524a45994fbeb4532558238953a8b2d4
49c600685bdc8792df13871ce91c7b8a3db943c7
ff044a3dc5b807f7867941d045409e97c346f01a916ec22414d3427e08d71aeb
GET /20230919/1ytxnMZP/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 48903
last-modified: Wed, 20 Sep 2023 02:59:55 GMT
etag: "650a602b-bf07"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230910/IPI5oQDo/1.jpg
200 OK 46 kB URL GET HTTP/2 player.hgm3u9.com/20230910/IPI5oQDo/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Generated by Snipaste", baseline, precision 8, 949x507, components 3\012- data
Hash a1604f0a7a9a8668cf18d562308d963f
f79f7cba621c00011e30ad262bfd4a728e5f286a
3d6feb7e80bd98853e93df55a3d5de83837871707616c49e4d05d75584c5657c
GET /20230910/IPI5oQDo/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 46518
last-modified: Mon, 11 Sep 2023 02:01:20 GMT
etag: "64fe74f0-b5b6"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230921/nxpPQSJ9/1.jpg
200 OK 77 kB URL GET HTTP/2 player.hgm3u9.com/20230921/nxpPQSJ9/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 850x478, components 3\012- data
Hash 24223878f541bda3762ff7bc8928d256
84cd5e16cbaa3b2c326d2ad8b5cd3f1a1c41d018
f51587f7971cbf99f529bdc61061d8981848bc47cfd9281700ae0ba7db84c6aa
GET /20230921/nxpPQSJ9/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 77348
last-modified: Fri, 22 Sep 2023 04:50:42 GMT
etag: "650d1d22-12e24"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230924/5EPvgFL3/1.jpg
200 OK 47 kB URL GET HTTP/2 player.hgm3u9.com/20230924/5EPvgFL3/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash f71f6a3f6974fbc790f36f6830dd536d
2fa5560976fcd5506a4ce7ec23a8e2bf4ea357c8
32395c57423287b2587e428fdc51fc4b05d6004498346595f39990597b9f8220
GET /20230924/5EPvgFL3/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 47421
last-modified: Sun, 24 Sep 2023 16:05:37 GMT
etag: "65105e51-b93d"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
gif.cdn-xxx.com/images/gif/11.gif
200 OK 160 kB URL GET HTTP/2 gif.cdn-xxx.com/images/gif/11.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-xxx.com
Fingerprint96:80:CA:7B:29:87:79:1A:70:7E:F5:FF:09:BB:5F:05:60:73:49:98
ValidityWed, 22 Nov 2023 13:33:29 GMT - Tue, 20 Feb 2024 13:33:28 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 160 kB (160272 bytes)
Hash b59bbf98cb08dc01c70eb2ccd6a98a06
b158e5684af17e6bcd8d5d777e44085897b4583a
3cab0a461132035095f5c2088f7fc7ea9e7c52aabb179c87843d019180fde1ce
GET /images/gif/11.gif HTTP/1.1
Host: gif.cdn-xxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/webp
content-length: 160272
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=gif, origSize=342628
content-disposition: inline; filename="11.webp"
vary: Accept
etag: "63144a91-53a64"
expires: Thu, 21 Dec 2023 19:56:23 GMT
last-modified: Sun, 04 Sep 2022 06:49:53 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 369638
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q7jSPuEjn%2B3Yxv9R0%2FMPpfRvAmOtlYRwAnh%2BgOe3T8BA5uv4iU%2B49ygYGM3KecP4%2B1AyhKO4ktNopNeMMnDqSTjHPMmL%2FvHJ2sQoErGn9nQ%2FcPp7ciWKOh8XEI5SwlqWuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d2b0ed9f25b4f1-OSL
X-Firefox-Spdy: h2
player.hgm3u9.com/20230924/nnucpoMT/1.jpg
200 OK 48 kB URL GET HTTP/2 player.hgm3u9.com/20230924/nnucpoMT/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash 676e7ea94d0f312831f194c6ff6409a5
9b7aec9cc535354df8fcec66001fe5ee88a2656f
764e169712fdab7027d79fd7f705eb373a4737b635b5a62417c4fde6d3a4fa38
GET /20230924/nnucpoMT/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 47895
last-modified: Sun, 24 Sep 2023 16:04:48 GMT
etag: "65105e20-bb17"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
kvhee.com/2c71592f058fdb6f083225ea9c18627b.gif
200 OK 38 kB URL GET HTTP/2 kvhee.com/2c71592f058fdb6f083225ea9c18627b.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectkvhee.com
Fingerprint66:CE:07:A6:A6:B7:E1:D7:4A:09:FC:10:87:F8:B7:D5:27:B6:37:11
ValidityFri, 27 Oct 2023 04:16:00 GMT - Thu, 25 Jan 2024 04:15:59 GMT
File type GIF image data, version 89a, 360 x 200\012- data
Hash 0c118d974c3f9c8689b39f73ea9d72d4
53edc4eb16cb2a022ececc3945163d0692c2b36c
29f54763af40019c2819c552f53e45994d40a3822ccbc416a97cc5c73ab2f5e7
GET /2c71592f058fdb6f083225ea9c18627b.gif HTTP/1.1
Host: kvhee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=2592000
content-type: image/gif
date: Tue, 28 Nov 2023 11:02:16 GMT
etag: "64fb3ec4-9659"
expires: Thu, 28 Dec 2023 11:02:16 GMT
last-modified: Tue, 28 Nov 2023 11:02:16 GMT
server: nginx
x-cache: HIT, policy, disk
content-length: 38489
X-Firefox-Spdy: h2
i.postimg.cc/NfF3RMJY/dtt9.gif
200 OK 146 kB URL GET HTTP/2 i.postimg.cc/NfF3RMJY/dtt9.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type GIF image data, version 89a, 120 x 120\012- data
Size 146 kB (146367 bytes)
Hash e4d97a78838d27ce06d5fe96c9e7ccba
1e48610a777a364a402650a7bbd98aa610b707c1
3ea822f65da4304344b349819764a3afa4280c2710688474f990020ad8f0df7c
GET /NfF3RMJY/dtt9.gif HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/gif
content-length: 146367
last-modified: Thu, 06 Jul 2023 11:38:36 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230910/ekSqhau1/1.jpg
200 OK 111 kB URL GET HTTP/2 player.hgm3u9.com/20230910/ekSqhau1/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1280x720, components 3\012- data
Size 111 kB (110729 bytes)
Hash 55419210c0da6ca32fb492b20ff3fe46
2d610e272d86205c403575f5974e74c18a00fb56
7a35867fc83b6d82dacb38ad0eb5af9b75fdd93deaffb9b46f506544c49cfd94
GET /20230910/ekSqhau1/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 110729
last-modified: Mon, 11 Sep 2023 02:01:27 GMT
etag: "64fe74f7-1b089"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230921/xslVPKhe/1.jpg
200 OK 125 kB URL GET HTTP/2 player.hgm3u9.com/20230921/xslVPKhe/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type PNG image data, 640 x 360, 8-bit colormap, non-interlaced\012- data
Size 125 kB (124923 bytes)
Hash b7e8110cb30108fb9debb4b8baafaf0c
b6ff7908434e84b226f020a4af18fee8aa600c8b
9a0a52136c4813560abb48f2cfe20c9db902381eca68e594a36f5d88a2aa93e7
GET /20230921/xslVPKhe/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 124923
last-modified: Fri, 22 Sep 2023 04:50:08 GMT
etag: "650d1d00-1e7fb"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230924/xXtUGHS9/1.jpg
200 OK 77 kB URL GET HTTP/2 player.hgm3u9.com/20230924/xXtUGHS9/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 956x535, components 3\012- data
Hash be8cef88dd6787d3a3b67f20a3802de6
dc0ed4c63ab151915c334e9d9d364343a83c757f
fb006284630222225a065c73eb9a77e5b181e2f6ab7ef3d43be54e027b5a0478
GET /20230924/xXtUGHS9/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 77175
last-modified: Sun, 24 Sep 2023 16:05:28 GMT
etag: "65105e48-12d77"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230924/WT0bQZkl/1.jpg
200 OK 77 kB URL GET HTTP/2 player.hgm3u9.com/20230924/WT0bQZkl/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 955x535, components 3\012- data
Hash 98ad5e0bd54734d30c59c9fe126c9c47
dc1c56a6c5e51d19bfc786efbbb773d49da788ed
34fd8d34a498c9a4ab39cf6faad7210ae0e0cbcf2cb32721843af3933ff03614
GET /20230924/WT0bQZkl/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 77436
last-modified: Sun, 24 Sep 2023 16:06:31 GMT
etag: "65105e87-12e7c"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20231002/ijXDGzd2/1.jpg
200 OK 143 kB URL GET HTTP/2 player.hgm3u9.com/20231002/ijXDGzd2/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1280x718, components 3\012- data
Size 143 kB (143419 bytes)
Hash f3fafdaed3c85dd33e24be09df1ac852
be1d34bb1e0e73c0791229dd162d77b420097ad1
ef8f0e37ca9ef3ce24fdde801c2fdd2d9277d42a24409db3e2775c48ca08382c
GET /20231002/ijXDGzd2/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 143419
last-modified: Mon, 02 Oct 2023 18:38:50 GMT
etag: "651b0e3a-2303b"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/fRZzGw2K/0103d120009h1026r1-BFC.gif
404 Not Found 2.7 kB URL GET HTTP/2 i.postimg.cc/fRZzGw2K/0103d120009h1026r1-BFC.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 320 x 320, 4-bit colormap, non-interlaced\012- data
Hash ff125c736fd0092c080f73bb486d9ceb
d790adffabc313b5d4b161ce4c696f4a0480f97a
4815c786c3094f5df8eaa5b8c1eb6dec8bd54c20b7959a091da806ded521d420
GET /fRZzGw2K/0103d120009h1026r1-BFC.gif HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/png
content-length: 2712
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
599 B IP
Hash d2544ea890d6af5edbaae8116a1cb4d7
a99ebf0f9d76017a70272a092fdcd7f852e140ca
ecd1984c92d9f7a90f960d110af0a593b7e3ab53ad5a6090cf1f33b5b7afde35
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:29 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82b977fb199bd039-SJC
ETag: "a99ebf0f9d76017a70272a092fdcd7f852e140ca"
Expires: Sat, 02 Dec 2023 10:41:12 GMT
Last-Modified: Sat, 25 Nov 2023 10:41:13 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: scdpinlb3
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 CS-000-01VaE187:10 (Cdn Cache Server V2.0), 1.1 VM-JJN-01ug579:2 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e035_VM-JJN-01Xmk84_16872-7621
via: n172-013-215.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 170117534978d02f051f9b4de106126bbff64f9479
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=14, edge;dur=0
player.hgm3u9.com/20230910/7yur5NuO/1.jpg
200 OK 265 kB URL GET HTTP/2 player.hgm3u9.com/20230910/7yur5NuO/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 1280x720, components 3\012- data
Size 265 kB (264753 bytes)
Hash 0050c2806793c2e0a2d4af6ec63742f8
89c9026cd55d687e6ba2dda2e3708c689fca7523
d2f10d2564757be726a3ae603a8577f27516e3a5637ea8fd38f33440665d1e65
GET /20230910/7yur5NuO/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 264753
last-modified: Mon, 11 Sep 2023 02:04:36 GMT
etag: "64fe75b4-40a31"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230910/SoR9PukY/1.jpg
200 OK 762 kB URL GET HTTP/2 player.hgm3u9.com/20230910/SoR9PukY/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced\012- data
Size 762 kB (761868 bytes)
Hash 1162a012ff26a242f3effd9075c69cc5
a4b5d9e8d2a79d78adb5e66126878d81eb37ef57
b0935b962e7ab805dfa08395d5b27b48a2b02ff4da2f81fbca39735d18313eaa
GET /20230910/SoR9PukY/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 761868
last-modified: Mon, 11 Sep 2023 02:04:40 GMT
etag: "64fe75b8-ba00c"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hgm3u9.com/20230827/ZoqKySg0/1.jpg
200 OK 455 kB URL GET HTTP/2 player.hgm3u9.com/20230827/ZoqKySg0/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectplayer.hgm3u9.com
Fingerprint16:BF:43:DA:A0:ED:BD:E0:66:A2:90:EE:F3:7E:87:BF:CF:8B:20:21
ValidityMon, 29 May 2023 00:00:00 GMT - Tue, 28 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 455 kB (454566 bytes)
Hash a86f5c10b2fd5ac162cb57bf2c628d4f
b88f97a002bcf59273d960417cfabaf49882a643
b888bfca9adbcc15d296044b17a7b470b32cad323fe8df46cf241763ba225cc4
GET /20230827/ZoqKySg0/1.jpg HTTP/1.1
Host: player.hgm3u9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 454566
last-modified: Sun, 27 Aug 2023 17:23:33 GMT
etag: "64eb8695-6efa6"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/qq3.js
200 OK 342 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/qq3.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Size 342 kB (342460 bytes)
Hash e262aa3ad103aab2b994eda7dca02bc7
6109e03a5e835bef9fe028b69d58e8e9ad91ba3d
142eec2eca76f19b4ae433aebc51e51c59d15e41001e7e3bc662f9f1874cf072
GET /template/m1938pc/ads/qq3.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 08:47:25 GMT
vary: Accept-Encoding
etag: W/"6563061d-1320"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
pic.sl.al/gdrive/pic/2023-07-19/64b7edd60aac7.gif
200 OK 51 kB URL GET HTTP/2 pic.sl.al/gdrive/pic/2023-07-19/64b7edd60aac7.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerCloudflare, Inc.
Subjectsl.al
Fingerprint2C:D9:EE:C2:D2:8E:D8:03:24:CE:BF:0E:12:BC:7B:A5:76:1B:0D:9A
ValidityWed, 01 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0b9ac057cf3c1089b11fb32cff77f89a
97b81003272dc8ecc203566d89685a8fecb69351
eb83e95fad72892fe3ce5b77db0acfb229674d5b1ba9ca2839f308e58e821a7e
GET /gdrive/pic/2023-07-19/64b7edd60aac7.gif HTTP/1.1
Host: pic.sl.al
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/webp
content-length: 51424
cache-control: max-age=315619200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=92494
content-disposition: inline; filename="64b7edd60aac7.webp"
vary: Accept
etag: "64b7edd6-1694e"
expires: Mon, 07 Nov 2033 20:01:26 GMT
last-modified: Wed, 19 Jul 2023 14:06:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 530473
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rTG%2BCgU65ewU0qZuE7q6f%2Fd%2B6mtMLYQqvRJ0gCjm2IUwT7kD%2BP0UqDN57FHxZdBvOqjfD5GxhAwoBAbeK1A9uW98fxoEYPc6VJtzcFjGtnjBx6%2FpRfcETs9tmwA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2b0ef1a035696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s2.loli.net/2023/05/15/EN76vd4sTSZLIGn.jpg
200 OK 31 kB URL GET HTTP/2 s2.loli.net/2023/05/15/EN76vd4sTSZLIGn.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerCloudflare, Inc.
Subjectloli.net
FingerprintE3:84:D8:6C:17:7E:44:60:E3:01:5E:E6:32:E6:90:08:4D:87:12:B1
ValidityWed, 05 Apr 2023 00:00:00 GMT - Thu, 04 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 377x377, components 3\012- data
Hash 4b474683f76136a226df7911f19802ea
5173f3413d8d12130698c28486bdc943a7aedce5
afe8b9102b16fca899fe379bd9e4801f0cfd37ff744a36b53b32e0694af679a1
GET /2023/05/15/EN76vd4sTSZLIGn.jpg HTTP/1.1
Host: s2.loli.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/jpeg
content-length: 31359
last-modified: Mon, 15 May 2023 11:53:47 GMT
etag: "64621d4b-7a7f"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aBrUqpsyR4YQT6Vj6coOzBStYm%2B4HYye%2BymAbzbqJkqfDXVvMUblIr0K28m3xDYC6zNodboHDnc61GWxASr58M9DbwRYrxbjywHrgBbv2lcyo1sLkvfBcKRRi619"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d2b0ec8b9b56cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tupian.baitu1llbkotsfthllcjeg.com/img/55.gif
200 OK 90 kB URL GET HTTP/2 tupian.baitu1llbkotsfthllcjeg.com/img/55.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerGoogle Trust Services LLC
Subjectbaitu1llbkotsfthllcjeg.com
Fingerprint4E:80:E8:DC:7C:86:E9:24:11:1E:0B:A6:9D:F2:C2:03:3E:2B:90:0D
ValidityThu, 05 Oct 2023 20:17:15 GMT - Wed, 03 Jan 2024 20:17:14 GMT
File type GIF image data, version 89a, 100 x 100\012- data
Hash cf264157a665e8f353a828807ba49e9b
50b87a06f111247a572b199af3c543ce71e8d5a1
26756ca1c08282d3a2e6bac10088c724cabe5fdc27ec2baf06f4c1d97a20584d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/55.gif HTTP/1.1
Host: tupian.baitu1llbkotsfthllcjeg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/gif
expires: Sun, 10 Dec 2023 13:08:11 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
last-modified: Fri, 10 Nov 2023 13:08:11 GMT
cf-cache-status: HIT
age: 446614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cz7nEDZCgS4kbPUMK9rHx2bJrXM51iqgyP2VpOAApqHpLpBZeejc2FbhfXDRcPHOdwisdHwJ4792bttta7Yi7Ef9bAsmruvVGlb9r98c7lVVTmmFC3IoOa%2FHugfIl6xdIpd3skL5GMSbADX79pLDoqzMBc8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2b0ed8848568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
com0211.com/dds/1211-1.gif
200 OK 222 kB URL GET HTTP/2 com0211.com/dds/1211-1.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerCloudflare, Inc.
Subjectcom0211.com
Fingerprint07:E1:5B:83:BC:B9:6A:51:F6:40:D7:8E:0F:1B:2D:E7:1A:19:EF:AB
ValiditySat, 11 Feb 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Size 222 kB (222236 bytes)
Hash d57fda02bc3be86d7a0660b82dea9eac
77f16bb895e80cd62802338c47d011b84ada5383
58095c4b2a9e60b4f766c391f6fb451a2e6ab12fe8c36831952eccf497b2f904
GET /dds/1211-1.gif HTTP/1.1
Host: com0211.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:30 GMT
content-type: image/gif
content-length: 222236
last-modified: Sat, 10 Dec 2022 17:13:32 GMT
etag: "6394be3c-3641c"
cf-cache-status: HIT
age: 1804765
expires: Wed, 29 Nov 2023 12:42:30 GMT
cache-control: public, max-age=86400
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-methods: *
server: cloudflare
cf-ray: 82d2b0f4dc8f56c0-OSL
X-Firefox-Spdy: h2
files.230808.top/store/loveimgmoe/ed/46/6469d23f3389e89b4a1aed46.gif
200 OK 1.6 MB URL GET HTTP/2 files.230808.top/store/loveimgmoe/ed/46/6469d23f3389e89b4a1aed46.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230808.top
Fingerprint4D:D8:10:80:86:C0:7E:BA:78:39:83:0E:6A:51:85:6D:7D:A3:37:8D
ValiditySun, 12 Nov 2023 08:19:02 GMT - Sat, 10 Feb 2024 08:19:01 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Size 1.6 MB (1639812 bytes)
Hash 89f17a6c0e5ecfebd7d054e27f9829a9
f8b87ba147f755491aa9753f750867d8349ced11
1c64028fba849ecf81cae46173194457736017f36066493ba9241fc6717bb7ab
GET /store/loveimgmoe/ed/46/6469d23f3389e89b4a1aed46.gif HTTP/1.1
Host: files.230808.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/gif
content-length: 1639812
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=432000
last-modified: Sun, 21 May 2023 08:18:32 GMT
cf-cache-status: HIT
age: 1509371
accept-ranges: bytes
server: cloudflare
cf-ray: 82d2b0ef0a7a9939-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
maxun103.top/8640c212ed4b8873323ab3a1034d64f9.gif
200 OK 63 kB URL GET HTTP/2 maxun103.top/8640c212ed4b8873323ab3a1034d64f9.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by https://launch.discountamount.top/
Certificate IssuerBuypass AS-983163327
Subjectmaxun103.top
FingerprintB6:71:DB:30:8B:EB:5D:A2:DB:26:52:9F:44:6F:40:54:39:41:D6:46
ValidityWed, 01 Nov 2023 12:40:48 GMT - Sun, 28 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 300 x 200\012- data
Hash b3c727100a456f090af852169f9c8763
81594453df1ac6225edb342fc8d0ef4a73f48896
7597be2a4832946dbcd61c09bd5ce3f91e0b71dc1ddff4ff79685416d2fd7ee0
GET /8640c212ed4b8873323ab3a1034d64f9.gif HTTP/1.1
Host: maxun103.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=2592000
content-type: image/gif
date: Tue, 28 Nov 2023 12:41:41 GMT
etag: "6542906c-f585"
expires: Thu, 28 Dec 2023 12:41:41 GMT
last-modified: Tue, 28 Nov 2023 12:41:41 GMT
server: nginx
x-cache: HIT, policy, disk
content-length: 62853
X-Firefox-Spdy: h2
maxun066.top/6b4bc2393b34f569886385798f04319d.gif
200 OK 68 kB URL GET HTTP/2 maxun066.top/6b4bc2393b34f569886385798f04319d.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectmaxun066.top
Fingerprint1F:EC:6F:56:B1:BC:96:6B:6B:20:D0:93:33:84:2B:97:D2:BE:A7:28
ValidityThu, 26 Oct 2023 10:44:06 GMT - Wed, 24 Jan 2024 10:44:05 GMT
File type GIF image data, version 89a, 300 x 200\012- data
Hash 8fe8a3221d6c69d2dfa96070eeaf7947
2e3d9f6307f2b435471ca22f3a2662a586a93b73
f2a244eb1748c34fb59c94b4576147ab29247b93edc1c77536c68aa4bbcdf368
GET /6b4bc2393b34f569886385798f04319d.gif HTTP/1.1
Host: maxun066.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
age: 1419035
cache-control: max-age=2592000
cf-cache-status: HIT
cf-ray: 82d2b06cdd7c9042-FRA
content-type: image/gif
date: Tue, 28 Nov 2023 12:42:08 GMT
etag: "642682bb-108f5"
expires: Tue, 12 Dec 2023 02:31:33 GMT
last-modified: Tue, 28 Nov 2023 12:42:08 GMT
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CuKZwmgMX%2FlbTv%2Fx9yO9t0%2BLDJjor8ywVV0J%2Favsc2P%2BAJT7sLza3%2BiKok5krhyxPPR7KPbweQZGKd7hk6BO3mchTKx2DPZtHVcVG21%2BU3PS0tp9sfAaa7ux0eQqRAERDkWOvqeNZfED"}],"group":"cf-nel","max_age":604800}
server: cloudflare
vary: Accept-Encoding
x-cache: HIT, policy, disk
content-length: 67829
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/sp3.js
200 OK 266 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/sp3.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Size 266 kB (266258 bytes)
Hash e11b5735a0ada22df331297d32fd28a9
17b04c37bf15b9b893e2f969b7c12afa89c72488
41d6ca6b7f44852a37f7771be808f51e839aad63342e9755a4d297c184a696b6
GET /template/m1938pc/ads/sp3.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 11:37:36 GMT
vary: Accept-Encoding
etag: W/"655de800-705"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/sp.js
200 OK 335 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/sp.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Size 335 kB (335030 bytes)
Hash 94af301fabb0d2f67cd8368786ba2209
faf49a417ab327b508c519a55578849f9cfc18d2
d20f73bb29faa3f6d021c4387a6d6110bb79c73e536b649dcde9b3562cf74479
GET /template/m1938pc/ads/sp.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Tue, 26 Sep 2023 05:07:43 GMT
vary: Accept-Encoding
etag: W/"6512671f-6f5"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigochina.com/
471 B IP
Hash 9b2deaaccf34ac1887a081dc22300c4d
44cb106143c391c9f30dd092ecf0e7caf5c77ed7
704d0e5ba085e7228b11391e81c18d5649ab485b8b65877d5f1407778397a514
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 12:42:30 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 26 Nov 2023 18:12:59 GMT
Expires: Sun, 03 Dec 2023 18:12:58 GMT
Etag: "44cb106143c391c9f30dd092ecf0e7caf5c77ed7"
Cache-Control: max-age=452929,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82d2b0f6cc9456bb-OSL
s2.loli.net/2023/04/13/MzHTs1oPYOf2AW8.gif
200 OK 2.5 MB URL GET HTTP/2 s2.loli.net/2023/04/13/MzHTs1oPYOf2AW8.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerCloudflare, Inc.
Subjectloli.net
FingerprintE3:84:D8:6C:17:7E:44:60:E3:01:5E:E6:32:E6:90:08:4D:87:12:B1
ValidityWed, 05 Apr 2023 00:00:00 GMT - Thu, 04 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 250 x 250\012- data
Size 2.5 MB (2547421 bytes)
Hash 3c5252329c9f16af1c3df0cf5d96d0dd
5a1f9764b60146737aba0e0b4bab138b1a526d94
62e676cc1f6011fc5279fed3f8620c30a3775277942100d8fe8b598c970fd120
GET /2023/04/13/MzHTs1oPYOf2AW8.gif HTTP/1.1
Host: s2.loli.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/gif
content-length: 2547421
last-modified: Thu, 13 Apr 2023 12:41:51 GMT
etag: "6437f88f-26dedd"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CBBEzKMbYl1I2fIC9OOJe179iMhTye8EiZlALEblylWr1D7se%2BOR8FmbGzrVG45cvKdirewd0AhdWatvUiJQ9kekaJ72FU9vI%2F4oXvAskqLKW9Qpy6%2FTe%2F3IntyO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d2b0eeeec556cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
599 B IP
Hash 867847cf4d0cb9c7d92b3ec92ca948f5
d96ebe2cf318a99fe898bf5434f5d2a40465221d
a4da13a7bcca731386b2820b0848720d85f4c6cefa73627d1e17b868b0635cc4
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: volc-dcdn
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Date: Tue, 28 Nov 2023 12:42:30 GMT
Accept-Ranges: bytes
Age: 1
CF-Cache-Status: EXPIRED
CF-RAY: 82ce57115b38715b-HKG
ETag: "d96ebe2cf318a99fe898bf5434f5d2a40465221d"
Expires: Tue, 05 Dec 2023 00:01:44 GMT
Last-Modified: Tue, 28 Nov 2023 00:01:45 GMT
WS-Cache-Status: 0
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
X-Via: 1.1 dianxun179:10 (Cdn Cache Server V2.0), 1.1 CS-000-01hW9188:7 (Cdn Cache Server V2.0), 1.1 VM-JJN-01Xmk84:13 (Cdn Cache Server V2.0)
X-Ws-Request-Id: 6565e036_VM-JJN-01kXQ81_20369-43190
via: n172-013-216.fzmp.ToB
x-request-ip: 91.90.42.154
x-tt-trace-tag: id=5
x-dsa-trace-id: 1701175350269ec488ec7cb62f48f7ec256dc567cb
X-Dsa-Origin-Status: 200
server-timing: cdn-cache;desc=MISS, origin;dur=10, edge;dur=0
hm.baidu.com/hm.js?900918fa2fb5ae658ffa60af352e3318
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?900918fa2fb5ae658ffa60af352e3318
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://launch.discountamount.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (615)
Hash 274c06162c1607f5064a6d978c98a1b6
5cac74c4ba2d37c778c8a377aef63f0830c802a3
63997e1f9f5d3ea6ac7c7073a9998d176ec5e2a928ba3ce3e7d40846ff78172c
GET /hm.js?900918fa2fb5ae658ffa60af352e3318 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11253
Content-Type: application/javascript
Date: Tue, 28 Nov 2023 12:42:30 GMT
Etag: 8ae2b0ba6edc0a629904da80c608603d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=76FA6DACC5C84450; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
el.phncdn.com/gif/2451761.gif
200 OK 4.5 MB URL GET HTTP/2 el.phncdn.com/gif/2451761.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerDigiCert Inc
Subject*.phncdn.com
Fingerprint1E:A0:80:BD:CA:C6:3F:0D:B7:A2:B1:C1:87:75:5D:26:45:AE:02:FF
ValidityThu, 12 Jan 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 720 x 405\012- data
Size 4.5 MB (4485188 bytes)
Hash 01a80346908f2736ff7fbc164bc715eb
61df74acfc9f4ea8524a9e4c9ef7ef24b7e9cc17
94e7e0246b8a48d88e2d0f6f2b0257db0dbf9d8180e81786e550f49c0aa7b3e1
GET /gif/2451761.gif HTTP/1.1
Host: el.phncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/gif
content-length: 4485188
expires: Thu, 28 Dec 2023 21:16:02 GMT
cache-control: max-age=10247016
last-modified: Mon, 03 Apr 2023 22:31:00 GMT
x-pending-security: A valid hash was not supplied.
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
timing-allow-origin: *
x-cdn-diag: ams5-6297-2-315583-h-0-0---;7028-27-51751----0-0-0
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/qq2.js
200 OK 2.1 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/qq2.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (302)
Hash e62def26182a4f58c3539506244f9836
f98a9995da9a19616ea970476abbc8eba90dee00
616a0c5abca9f30b5f56fe584596ec890ea9e8ce11f0a22ed4ad7844bb7760ab
GET /template/m1938pc/ads/qq2.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Sat, 28 Oct 2023 11:38:21 GMT
vary: Accept-Encoding
etag: W/"653cf2ad-26af"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
img.aosikaimge.com/20230426/oyEtdZ5t/1.jpg
200 OK 57 kB URL GET HTTP/1.1 img.aosikaimge.com/20230426/oyEtdZ5t/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerUnizeto Technologies S.A.
Subject*.aosikaimge.com
FingerprintAE:25:6E:2D:01:4E:2A:74:4F:91:BD:2B:32:AF:0F:A0:1D:14:6B:DE
ValidityTue, 29 Nov 2022 14:37:17 GMT - Thu, 28 Dec 2023 00:00:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash 9ae18226753988a8fe3baf9c73edc847
797964dc1f631a231b57474c6f4ad51188f1cf3e
cdbe5281a1c948a21fb04c0c4d8e798ef96c5adc189e4cbd0e8be2c230f90ea7
GET /20230426/oyEtdZ5t/1.jpg HTTP/1.1
Host: img.aosikaimge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/jpeg
Content-Length: 56916
Connection: keep-alive
Last-Modified: Wed, 26 Apr 2023 12:47:24 GMT
ETag: "64491d5c-de54"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
img.firefoxcartoon.com/image/21dfghjfdsdhjhfdsdfgkjfdsdfgjkkjg.gif
200 OK 303 kB URL GET HTTP/2 img.firefoxcartoon.com/image/21dfghjfdsdhjhfdsdfgkjfdsdfgjkkjg.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerSectigo Limited
Subjectimg.firefoxcartoon.com
Fingerprint2F:1B:40:14:8A:26:FC:DF:D0:24:DF:8C:1B:74:F6:C9:CB:75:6C:76
ValidityWed, 28 Dec 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type GIF image data, version 89a, 204 x 204\012- data
Size 303 kB (302941 bytes)
Hash 849d3b77a87512fb8e63de7fe770a145
7257e8ddd72330f7a2f47b86f479e1afca446948
dae2cf0264685acac5a0568c4ff2f4ad162158e367a78542e41255539c2365aa
GET /image/21dfghjfdsdhjhfdsdfgkjfdsdfgjkkjg.gif HTTP/1.1
Host: img.firefoxcartoon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:31 GMT
content-type: image/gif
content-length: 302941
last-modified: Thu, 23 Jun 2022 14:43:46 GMT
etag: "62b47c22-49f5d"
expires: Thu, 28 Dec 2023 12:42:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.aosikaimge.com/20230316/4YwdSw5q/1.jpg
200 OK 10 kB URL GET HTTP/1.1 img.aosikaimge.com/20230316/4YwdSw5q/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerUnizeto Technologies S.A.
Subject*.aosikaimge.com
FingerprintAE:25:6E:2D:01:4E:2A:74:4F:91:BD:2B:32:AF:0F:A0:1D:14:6B:DE
ValidityTue, 29 Nov 2022 14:37:17 GMT - Thu, 28 Dec 2023 00:00:00 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 180x320, components 3\012- data
Hash 00e150ba51e78e5415ca57ce67958ca2
701702542f4556e718b1c9913d781f237f6eb359
5759a3012cbcd354d08b9bd4f4bf93ecd34c4035b6c6e808840c113e238ec52b
GET /20230316/4YwdSw5q/1.jpg HTTP/1.1
Host: img.aosikaimge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/jpeg
Content-Length: 10476
Connection: keep-alive
Last-Modified: Thu, 16 Mar 2023 15:44:50 GMT
ETag: "64133972-28ec"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
2023img.yslulu69.xyz/img3/333.gif
200 OK 1.1 MB URL GET HTTP/2 2023img.yslulu69.xyz/img3/333.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subject2023img.yslulu69.xyz
Fingerprint40:EA:D8:A0:1F:59:7D:53:2A:8D:0C:85:1F:46:93:62:B2:5A:39:95
ValidityFri, 22 Sep 2023 15:10:30 GMT - Thu, 21 Dec 2023 15:10:29 GMT
File type GIF image data, version 89a, 500 x 500\012- data
Size 1.1 MB (1125603 bytes)
Hash 72e71f342890b9a9cf355ea4873b1fca
191983bd23373e4bee5c782c7aa295da6383e408
4ed9b853d832bf09b770292ff4e3c10a12d6726c256ff25949eb46fe4ae88ba2
GET /img3/333.gif HTTP/1.1
Host: 2023img.yslulu69.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:30 GMT
content-type: image/gif
last-modified: Wed, 23 Mar 2022 05:18:52 GMT
etag: "623aadbc-112aec"
expires: Thu, 28 Dec 2023 12:42:30 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pic.baidutencent.com/images/35/sj200X200zz.gif
302 Found 0 B URL GET HTTP/2 pic.baidutencent.com/images/35/sj200X200zz.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectpic.baidutencent.com
FingerprintB1:BA:71:20:38:37:AB:77:28:9A:18:77:3C:FE:EF:A4:22:32:02:66
ValidityFri, 13 Oct 2023 00:00:00 GMT - Sat, 12 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/35/sj200X200zz.gif HTTP/1.1
Host: pic.baidutencent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://files.230808.top/store/loveimgmoe/85/8c/651e5314cd4ab872903f858c.gif
X-Firefox-Spdy: h2
exp-picture.cdn.bcebos.com/91091efc77f7980ed41b39c9d4db3620b83a9197.jpg
200 OK 145 kB URL GET HTTP/2 exp-picture.cdn.bcebos.com/91091efc77f7980ed41b39c9d4db3620b83a9197.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerBaidu, Inc.
Subjecta.bdydns.com
Fingerprint91:D1:34:1D:18:15:9F:69:7A:32:CD:F9:5A:0D:C1:9C:4E:73:79:A4
ValidityMon, 17 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 150 x 150\012- data
Size 145 kB (145389 bytes)
Hash 0be5a14709079671093657bec7c3a1fb
7db3d8028a20aae824242a56e901dc44868a2af2
2b626fe3dafcfc37991dcc54a5dbabda377696540304b56988b25f22495937a2
GET /91091efc77f7980ed41b39c9d4db3620b83a9197.jpg HTTP/1.1
Host: exp-picture.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Tue, 28 Nov 2023 12:42:31 GMT
content-type: image/gif
content-length: 145389
expires: Thu, 30 Nov 2023 14:25:54 GMT
last-modified: Sat, 06 May 2023 10:47:52 GMT
etag: "0be5a14709079671093657bec7c3a1fb"
age: 80197
accept-ranges: bytes
content-md5: C+WhRwkHlnEJNle+x8Oh+w==
x-bce-content-crc32: 441301613
x-bce-debug-id: ypeo183G2bjrZhx3K1tKkUZyldXmz31gl9jQV189LlsjUZN1siJA3mA78k/ZSmcQfdU4oX7O4Gih9h0gkoVJuQ==
x-bce-request-id: 9937ca1f-9c0c-41cd-820a-35dccfc781c3
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Mon, 27 Nov 2023 14:25:54 GMT
ohc-cache-hit: lz5ct68 [2], wzix68 [2]
ohc-file-size: 145389
x-cache-status: HIT
X-Firefox-Spdy: h2
img.aosikaimge.com/20230612/3hLhuzgu/1.jpg
200 OK 57 kB URL GET HTTP/1.1 img.aosikaimge.com/20230612/3hLhuzgu/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerUnizeto Technologies S.A.
Subject*.aosikaimge.com
FingerprintAE:25:6E:2D:01:4E:2A:74:4F:91:BD:2B:32:AF:0F:A0:1D:14:6B:DE
ValidityTue, 29 Nov 2022 14:37:17 GMT - Thu, 28 Dec 2023 00:00:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash b63a970818340f87ce0de410659a395c
3c368b020dd7bebee2c6270c2b3d143be5fc3dd9
3884c7af28e5991d73fcbc2f66dec862cdb811b0c9282152971ba756b253c2ed
GET /20230612/3hLhuzgu/1.jpg HTTP/1.1
Host: img.aosikaimge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/jpeg
Content-Length: 57318
Connection: keep-alive
Last-Modified: Tue, 13 Jun 2023 03:31:36 GMT
ETag: "6487e318-dfe6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
img.aosikaimge.com/20230426/1P0sgxfs/1.jpg
200 OK 66 kB URL GET HTTP/1.1 img.aosikaimge.com/20230426/1P0sgxfs/1.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerUnizeto Technologies S.A.
Subject*.aosikaimge.com
FingerprintAE:25:6E:2D:01:4E:2A:74:4F:91:BD:2B:32:AF:0F:A0:1D:14:6B:DE
ValidityTue, 29 Nov 2022 14:37:17 GMT - Thu, 28 Dec 2023 00:00:00 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3\012- data
Hash a508f8469211d44f48cfa2e8dbbb2172
c1e57ba5a5cb417038450c2065794f54f3765486
4a9b1d7071ffd49f3af54da24432dcee4ce523223e79efde6621b042c258e8b3
GET /20230426/1P0sgxfs/1.jpg HTTP/1.1
Host: img.aosikaimge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/jpeg
Content-Length: 66502
Connection: keep-alive
Last-Modified: Wed, 26 Apr 2023 12:47:23 GMT
ETag: "64491d5b-103c6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Cache-Control: public, max-age=15768000
Cache: HIT
Accept-Ranges: bytes
files.230808.top/store/loveimgmoe/d7/12/64992b9ddde877a58644d712.gif
200 OK 55 kB URL GET HTTP/3 files.230808.top/store/loveimgmoe/d7/12/64992b9ddde877a58644d712.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230808.top
Fingerprint4D:D8:10:80:86:C0:7E:BA:78:39:83:0E:6A:51:85:6D:7D:A3:37:8D
ValiditySun, 12 Nov 2023 08:19:02 GMT - Sat, 10 Feb 2024 08:19:01 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Hash c7e11f743807d0c71e843f72640732a4
a9215602e329df0c9de78c88017547a9aa569828
33c0fbdb7f4dcb39309f12c69eb95f312e16c4668a550203f3ec2b0ef32ef885
GET /store/loveimgmoe/d7/12/64992b9ddde877a58644d712.gif HTTP/1.1
Host: files.230808.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 12:42:32 GMT
content-type: image/gif
content-length: 54730
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=432000
last-modified: Mon, 26 Jun 2023 06:09:35 GMT
cf-cache-status: HIT
age: 71515
accept-ranges: bytes
server: cloudflare
cf-ray: 82d2b100acdd2d8d-ARN
alt-svc: h3=":443"; ma=86400
www.tumhsduusuu.top/CDNtb/00003.gif
200 OK 33 kB URL GET HTTP/2 www.tumhsduusuu.top/CDNtb/00003.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectwww.tumhsduusuu.top
Fingerprint9A:8A:1C:C9:C2:75:99:49:E1:93:5B:87:B7:B5:ED:5B:47:DC:49:4D
ValidityMon, 06 Nov 2023 09:07:30 GMT - Sun, 04 Feb 2024 09:07:29 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Hash 24ea2cd3b57116c5b6ea46a08810ed08
70c40762a6b9adfcfe998cf9e44d8ad81c51f184
f2b79e518b7e140f8fe8e26cc75c3b467654db4b64256a2d8c49a984add47fe3
GET /CDNtb/00003.gif HTTP/1.1
Host: www.tumhsduusuu.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 28 Nov 2023 12:42:31 GMT
content-type: image/gif
content-length: 33316
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=31536000
content-disposition: inline; filename="00003.gif"; filename*=utf-8''00003.gif
content-md5: JOos07VxFsW26kagiBDtCA==
content-transfer-encoding: binary
etag: "FnDEB2Kmua38_pmM-eRNitgcUfGE"
last-modified: Mon, 24 Jul 2023 07:05:10 GMT
x-reqid: SJcBAHALnzT4yZsX
x-svr: IO
x-qiniu-zone: 1
x-log: X-Log
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=678874338&si=900918fa2fb5ae658ffa60af352e3318&su=http%3A%2F%2Fwww.hdadblue.com%2F&v=1.3.0&lv=1&sn=17826&r=0&ww=1280&u=https%3A%2F%2Flaunch.discountamount.top%2F&tt=%E6%92%B8%E5%95%8A%E6%92%B8-%E6%88%90%E4%BA%BA%E5%BD%B1%E8%A7%86
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=678874338&si=900918fa2fb5ae658ffa60af352e3318&su=http%3A%2F%2Fwww.hdadblue.com%2F&v=1.3.0&lv=1&sn=17826&r=0&ww=1280&u=https%3A%2F%2Flaunch.discountamount.top%2F&tt=%E6%92%B8%E5%95%8A%E6%92%B8-%E6%88%90%E4%BA%BA%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://launch.discountamount.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=678874338&si=900918fa2fb5ae658ffa60af352e3318&su=http%3A%2F%2Fwww.hdadblue.com%2F&v=1.3.0&lv=1&sn=17826&r=0&ww=1280&u=https%3A%2F%2Flaunch.discountamount.top%2F&tt=%E6%92%B8%E5%95%8A%E6%92%B8-%E6%88%90%E4%BA%BA%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 28 Nov 2023 12:42:32 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=95CB8BF6AA93034C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
www.lianjiajr.net/uploads/image/20210324/20210324154323_70420.gif
200 OK 887 kB URL GET HTTP/1.1 www.lianjiajr.net/uploads/image/20210324/20210324154323_70420.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectwww.lianjiajr.net
Fingerprint99:5D:A8:C0:03:35:A4:F5:CB:95:C0:AB:6D:2D:D3:DF:24:D0:E9:82
ValiditySat, 24 Jun 2023 00:00:00 GMT - Sun, 23 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 500 x 280\012- data
Size 887 kB (886831 bytes)
Hash 18969fffa5ed20e8ce35be54451ff0d5
b40e05fcf8d331f16c3279c01d8e45e113091d4c
06eeb7c642013d927522ea28978ef8d6d7b996d8ade14f7ac08c055e2cdc42c5
GET /uploads/image/20210324/20210324154323_70420.gif HTTP/1.1
Host: www.lianjiajr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/gif
Content-Length: 886831
Last-Modified: Wed, 24 Mar 2021 07:43:23 GMT
Connection: keep-alive
ETag: "605aed9b-d882f"
Accept-Ranges: bytes
555bb666cc.com/aa78b8d03a9642aea86b059567eac861.gif
200 OK 75 kB URL GET HTTP/1.1 555bb666cc.com/aa78b8d03a9642aea86b059567eac861.gif
IP
ASN #64050 BGPNET Global ASN
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subject222aa333bb.com
FingerprintCA:E6:7D:98:34:0F:43:C5:2B:4A:A5:73:03:7C:F6:8B:46:F8:20:C0
ValidityTue, 24 Oct 2023 14:41:12 GMT - Mon, 22 Jan 2024 14:41:11 GMT
File type GIF image data, version 89a, 320 x 185\012- data
Hash 1950b81cbab2892beaa2e7138232a769
a98bea1fb9a8ffcc75419de1ec060d38ab465b43
4608a2456ccab87d89e64801b2e5e9ba0b1df76459a115f243bb793a3df42d81
GET /aa78b8d03a9642aea86b059567eac861.gif HTTP/1.1
Host: 555bb666cc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/gif
Content-Length: 74803
Connection: keep-alive
Last-Modified: Wed, 25 Oct 2023 09:02:45 GMT
ETag: "6538d9b5-12433"
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
files.230808.top/store/loveimgmoe/85/8c/651e5314cd4ab872903f858c.gif
200 OK 596 kB URL GET HTTP/3 files.230808.top/store/loveimgmoe/85/8c/651e5314cd4ab872903f858c.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230808.top
Fingerprint4D:D8:10:80:86:C0:7E:BA:78:39:83:0E:6A:51:85:6D:7D:A3:37:8D
ValiditySun, 12 Nov 2023 08:19:02 GMT - Sat, 10 Feb 2024 08:19:01 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Size 596 kB (595672 bytes)
Hash 5a483beb88086bc25d6bb500003e967a
4b1c59599692b1bacab4fa37b68f4262d17436b8
8d19255efb7d9cc3cb59ca985fc1835e5bd3a34104fef51ef6b118a22b388715
GET /store/loveimgmoe/85/8c/651e5314cd4ab872903f858c.gif HTTP/1.1
Host: files.230808.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 12:42:32 GMT
content-type: image/gif
content-length: 595672
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=432000
last-modified: Thu, 05 Oct 2023 06:12:18 GMT
cf-cache-status: HIT
age: 71514
accept-ranges: bytes
server: cloudflare
cf-ray: 82d2b102cf782d8d-ARN
alt-svc: h3=":443"; ma=86400
launch.discountamount.top/template/m1938pc/ads/sp5.js
200 OK 489 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/sp5.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Size 489 kB (489369 bytes)
Hash 96909fd94a31f75e66b93612b768107d
1f0cebf4fde07cdde7e0c790e62a9781eea1b468
9aeb20a3b2d981bc9b98f665820784bd36e7b4080d0f841c457feef018530549
GET /template/m1938pc/ads/sp5.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Sat, 28 Oct 2023 11:40:24 GMT
vary: Accept-Encoding
etag: W/"653cf328-6fb"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/sp1.js
200 OK 582 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/sp1.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Size 582 kB (581752 bytes)
Hash 9fd7898597fd531fe7aa659c1f59c3f4
1446ce36f708ccafb596b986e47e72f50a2e36d8
d879cbdcc1acca573a1f0f929fe7bde70bc32ffb3beba321c7535873f0ae9e34
GET /template/m1938pc/ads/sp1.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 11:38:26 GMT
vary: Accept-Encoding
etag: W/"655de832-6fe"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
zhibo128x.xyz/18/180180.gif
200 OK 246 kB URL GET HTTP/1.1 zhibo128x.xyz/18/180180.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectzhibo128x.xyz
Fingerprint6C:39:DD:D9:6C:66:D4:E6:8B:89:03:33:A8:BA:8F:61:0F:E5:0F:0A
ValiditySat, 23 Sep 2023 15:14:35 GMT - Fri, 22 Dec 2023 15:14:34 GMT
File type GIF image data, version 89a, 100 x 100\012- data
Size 246 kB (245681 bytes)
Hash 8410d45b2bc678e3d3f6bace277f0194
a34fdab4212014ce03f99c3e15a7a29575e17015
ade534d1d48ad181eb469060240e069ed836e853d47a9c7ff49fb7c32eaf315c
GET /18/180180.gif HTTP/1.1
Host: zhibo128x.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 12:42:32 GMT
Content-Type: image/gif
Content-Length: 245681
Connection: keep-alive
Last-Modified: Wed, 05 Jul 2023 18:14:43 GMT
ETag: "64a5b313-3bfb1"
Expires: Tue, 26 Dec 2023 06:07:20 GMT
Cache-Control: max-age=2592000
Via: s202310306227
CDN-Cache: HIT
Accept-Ranges: bytes
el.phncdn.com/gif/44733331.gif
200 OK 36 MB URL GET HTTP/2 el.phncdn.com/gif/44733331.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerDigiCert Inc
Subject*.phncdn.com
Fingerprint1E:A0:80:BD:CA:C6:3F:0D:B7:A2:B1:C1:87:75:5D:26:45:AE:02:FF
ValidityThu, 12 Jan 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1280 x 720\012- data
Size 36 MB (35641931 bytes)
Hash d09bdfeea2e9d0234e63c08d8be58f36
a198ae97329ec47286fd7324fb4ba7bc4019e75c
8d5c657deaf83e56da642569b3664e7acfc551fc00cadba33d4b7ee2062cda31
GET /gif/44733331.gif HTTP/1.1
Host: el.phncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/gif
content-length: 35641931
expires: Sun, 24 Dec 2023 00:18:27 GMT
cache-control: max-age=10051442
last-modified: Thu, 10 Aug 2023 22:12:33 GMT
x-pending-security: A valid hash was not supplied.
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
timing-allow-origin: *
x-cdn-diag: ams5-6297-4-315902-h-0-0---;7028-81-51751----0-1-1
X-Firefox-Spdy: h2
el.phncdn.com/gif/44713091.gif
38 MB URL GET el.phncdn.com/gif/44713091.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerDigiCert Inc
Subject*.phncdn.com
Fingerprint1E:A0:80:BD:CA:C6:3F:0D:B7:A2:B1:C1:87:75:5D:26:45:AE:02:FF
ValidityThu, 12 Jan 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1280 x 720\012- data
Size 38 MB (38254965 bytes)
Hash 49298cee3c7f71ca288c3b5ee2e33fbb
92aa033173166b8e8aa23a93959b24e0617361d1
8e2d6cb5cfcb6b3103685cd30f8cd656e3d22038c70e941b3f8c77e20df39f88
GET /gif/44713091.gif HTTP/1.1
Host: el.phncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 12:42:29 GMT
content-type: image/gif
content-length: 38254965
expires: Thu, 21 Dec 2023 07:04:48 GMT
cache-control: max-age=10310685
last-modified: Tue, 08 Aug 2023 20:58:02 GMT
x-pending-security: A valid hash was not supplied.
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
timing-allow-origin: *
x-cdn-diag: ams5-6298-1-45449-h-0-0---;7028-27-51751----0-1-0
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/qq1.js
200 OK 1.3 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/qq1.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type gzip compressed data, from Unix\012- data
Hash 8608f6275868a53399747ef9f1ce9521
9423ca84ad0e325aea12faec3221191df6a22ad9
d99b2a4f8187390699d80ace287a477fbad19993f251cc20c36a548e86456ca9
GET /template/m1938pc/ads/qq1.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 08:19:51 GMT
vary: Accept-Encoding
etag: W/"6562ffa7-b1c"
expires: Wed, 29 Nov 2023 00:42:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
storage.googleapis.com/yanc/imgs/y150150b.gif
184 kB URL GET storage.googleapis.com/yanc/imgs/y150150b.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerGoogle Trust Services LLC
Subjectstorage.googleapis.com
Fingerprint4D:66:EA:1A:AB:86:BB:C2:E9:29:62:76:DE:45:0D:60:53:70:6F:1F
ValidityMon, 23 Oct 2023 11:28:29 GMT - Mon, 15 Jan 2024 11:28:28 GMT
File type GIF image data, version 89a, 150 x 150\012- data
Size 184 kB (184507 bytes)
Hash 018b6a34e249ec5f57830a74bf238086
07c278b188004a36ff6ca81a5dd0c677c39dd7b8
48f500c6c3edfdcca5ff014aca91aaf428b0f14318ff0c92cce660ad40e5b2cf
GET /yanc/imgs/y150150b.gif HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPqha7vMadaKEg-7PYn6w6SEcZwZ0mnQmRTK27CnY3XffXFuFtSONeQLJoVOkxcjjI9y-5kGkc1HiA
x-goog-generation: 1684473577221332
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 184507
x-goog-hash: crc32c=1+Y9SQ==, md5=AYtqNOJJ7F9Xgwp0vyOAhg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 184507
server: UploadServer
date: Tue, 28 Nov 2023 12:41:55 GMT
expires: Tue, 28 Nov 2023 13:41:55 GMT
cache-control: public, max-age=3600
age: 45
last-modified: Fri, 19 May 2023 05:19:37 GMT
etag: "018b6a34e249ec5f57830a74bf238086"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jt.hza01.com/jingtai/szgg/wy350.gif
0 B URL GET jt.hza01.com/jingtai/szgg/wy350.gif
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/szgg/wy350.gif HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
jt.hza01.com/jingtai/szgg/ky350.gif
0 B URL GET jt.hza01.com/jingtai/szgg/ky350.gif
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/szgg/ky350.gif HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
jt.hza01.com/jingtai/125vip/sz1111/%E5%86%B0%E5%86%B0%E7%9B%B4%E6%92%AD650x380.wgifw
0 B URL GET jt.hza01.com/jingtai/125vip/sz1111/%E5%86%B0%E5%86%B0%E7%9B%B4%E6%92%AD650x380.wgifw
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/125vip/sz1111/%E5%86%B0%E5%86%B0%E7%9B%B4%E6%92%AD650x380.wgifw HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
launch.discountamount.top/template/m1938pc/css/ate.css
200 OK 76 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/css/ate.css
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type ASCII text, with CRLF line terminators
Hash 507a51f8b1d147fcf60eb2a898690259
e630900e6a1a0434719c5bdaf655362313e7e33c
9a9afeb3b64f2b7ccce5b842929a2fed579e24450e6c436386e7956b2de8e12a
GET /template/m1938pc/css/ate.css HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:26 GMT
content-type: text/css
last-modified: Wed, 10 Aug 2022 07:27:10 GMT
vary: Accept-Encoding
etag: W/"62f35dce-126e5"
expires: Wed, 29 Nov 2023 00:42:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.hdadblue.com/favicon.ico
200 OK 779 B URL GET HTTP/1.1 www.hdadblue.com/favicon.ico
IP
ASN #133201 ABCDE GROUP COMPANY LIMITED
Requested by http://www.hdadblue.com/m/view.php?aid=40
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (843), with no line terminators
Hash dd5d86d0a1a93e373d13781559889c93
0359922c838c6cd11d00ae5bb5d86e80d64fb1f9
e17130d8e4807b0052fa506b5dc5edf70db90d638f6cc00e8fbe17bba3430dca
GET /favicon.ico HTTP/1.1
Host: www.hdadblue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hdadblue.com/m/view.php?aid=40
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 12:38:39 GMT
Content-Length: 779
Content-Type: text/html
Server: nginx
img.1379a.xyz/images/64992b9ddde877a58644d712.gif
302 Found 55 kB URL GET HTTP/2 img.1379a.xyz/images/64992b9ddde877a58644d712.gif
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subject1379a.xyz
FingerprintDD:C4:C1:1E:F6:AC:98:D3:40:F4:E3:45:2E:4F:C0:6C:6A:D7:CA:D9
ValiditySat, 30 Sep 2023 04:02:04 GMT - Fri, 29 Dec 2023 04:02:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/64992b9ddde877a58644d712.gif HTTP/1.1
Host: img.1379a.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://files.230808.top/store/loveimgmoe/d7/12/64992b9ddde877a58644d712.gif
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/dht.js
200 OK 5.2 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/dht.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type Unicode text, UTF-8 text, with very long lines (5327), with no line terminators
Hash 0295c681264df0b2d3e745b946d54d3d
a5ef520f82d7fdbb1e0ab0f831b1a33f3236548a
c2734bcfead628edf3c0c9e0caf8dad38e7b17b6d3c248a6dcce82dfc8cb8b96
GET /template/m1938pc/ads/dht.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 15:25:07 GMT
vary: Accept-Encoding
etag: W/"64ee0dd3-1478"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/css/zui.css
200 OK 114 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/css/zui.css
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
Size 114 kB (114481 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /template/m1938pc/css/zui.css HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:26 GMT
content-type: text/css
last-modified: Sat, 16 Sep 2023 13:41:03 GMT
vary: Accept-Encoding
etag: W/"6505b06f-1bf31"
expires: Wed, 29 Nov 2023 00:42:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
yangyang3.oss-ap-southeast-1.aliyuncs.com/a960%C3%97120.gif
200 OK 581 kB URL GET HTTP/1.1 yangyang3.oss-ap-southeast-1.aliyuncs.com/a960%C3%97120.gif
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Requested by https://launch.discountamount.top/
Certificate IssuerGlobalSign nv-sa
Subjectap-southeast-1.oss.aliyuncs.com
Fingerprint2F:C3:37:0B:BC:D3:76:FF:78:50:B2:F2:D2:55:C0:56:A6:ED:29:9B
ValidityThu, 14 Sep 2023 03:16:06 GMT - Tue, 15 Oct 2024 03:16:05 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 581 kB (581184 bytes)
Hash d3c18ae6e22dcf57ba3fdd17fac1266d
365dec4dfe230156abd42a32914ee55064c0be96
7deb17b4a5211c46cab3987300fefd37a97a473002718426942ce7fe7399c665
GET /a960%C3%97120.gif HTTP/1.1
Host: yangyang3.oss-ap-southeast-1.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/gif
Content-Length: 581184
Connection: keep-alive
x-oss-request-id: 6565E037BB6400373212EB97
Accept-Ranges: bytes
ETag: "D3C18AE6E22DCF57BA3FDD17FAC1266D"
Last-Modified: Wed, 21 Jun 2023 10:56:23 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17408034564057831286
x-oss-storage-class: Standard
x-oss-version-id: CAEQRRiBgICbrrL2xhgiIGYwNDA4ZTIyODYxNjQzZGI5ODYzOWFlNWFlODYxNDE5
x-oss-ec: 0048-00000113
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: 08GK5uItz1e6P90X+sEmbQ==
x-oss-server-time: 2
jt.hza01.com/jingtai/szgg/872/600X350-872.wgifw
0 B URL GET jt.hza01.com/jingtai/szgg/872/600X350-872.wgifw
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/szgg/872/600X350-872.wgifw HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
666aa888bb.com/ac7284e5cdaa43b29ee4ff0f0920e0df.gif
200 OK 489 kB URL GET HTTP/1.1 666aa888bb.com/ac7284e5cdaa43b29ee4ff0f0920e0df.gif
IP
ASN #64050 BGPNET Global ASN
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subject222aa333bb.com
FingerprintCA:E6:7D:98:34:0F:43:C5:2B:4A:A5:73:03:7C:F6:8B:46:F8:20:C0
ValidityTue, 24 Oct 2023 14:41:12 GMT - Mon, 22 Jan 2024 14:41:11 GMT
File type GIF image data, version 89a, 960 x 120\012- data
Size 489 kB (488798 bytes)
Hash 5b534cfdce3e54ea3a04e38ebca3bec2
86cceef8c029fab0eafeaba83375c9275afac213
0210321e0c1854ee1219ad117b8b438d1f32b030b182884793b8ba22b5ff8de6
GET /ac7284e5cdaa43b29ee4ff0f0920e0df.gif HTTP/1.1
Host: 666aa888bb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 12:42:31 GMT
Content-Type: image/gif
Content-Length: 488798
Connection: keep-alive
Last-Modified: Sun, 12 Nov 2023 08:56:52 GMT
ETag: "65509354-7755e"
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
img.hgimg01.com/upload/vod/20231128-1/fc29bd9a6d66fa9bc078ee1565e09796.jpg
200 OK 443 kB URL GET HTTP/2 img.hgimg01.com/upload/vod/20231128-1/fc29bd9a6d66fa9bc078ee1565e09796.jpg
IP
Requested by https://launch.discountamount.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subjectimg.hgimg01.com
Fingerprint0C:7D:DA:FE:45:AF:F8:E9:04:7D:6E:95:EB:01:9F:88:D3:AB:3A:40
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:22 21:21:02], baseline, precision 8, 960x540, components 3\012- data
Size 443 kB (442902 bytes)
Hash 178301c458d1123ca4ae349b2c3a5ddb
50be8be66c0c32ab88b897f901be5b3ae6966273
c3c2b12ea1a4a0f86b4e6ec71e6b718a6eb4c1be5093da9d54b5f8315bb2cf33
GET /upload/vod/20231128-1/fc29bd9a6d66fa9bc078ee1565e09796.jpg HTTP/1.1
Host: img.hgimg01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:28 GMT
content-type: image/jpeg
content-length: 442902
last-modified: Tue, 28 Nov 2023 10:24:48 GMT
etag: "6565bff0-6c216"
expires: Thu, 28 Dec 2023 10:24:53 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=2592000, public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
jt.hza01.com/jingtai/125vip/sz1111/%E5%86%B0%E5%86%B0%E7%9B%B4%E6%92%AD960x60.wgifw
0 B URL GET jt.hza01.com/jingtai/125vip/sz1111/%E5%86%B0%E5%86%B0%E7%9B%B4%E6%92%AD960x60.wgifw
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/125vip/sz1111/%E5%86%B0%E5%86%B0%E7%9B%B4%E6%92%AD960x60.wgifw HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
launch.discountamount.top/template/m1938pc/ads/tb.js
200 OK 2.5 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/tb.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (2473), with no line terminators
Hash 37390269da0d683817541e88d3a31773
0db4117547bdc2dff34207314eba8ae21c03d2d8
d6623bb1a8a3b13123275408025a2a9ea25306c7e325c0f15811224010a05fb9
GET /template/m1938pc/ads/tb.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:26 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 08:45:44 GMT
vary: Accept-Encoding
etag: W/"656305b8-998"
expires: Wed, 29 Nov 2023 00:42:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
maxun066.top/457848ec4c4ba3a5a998e9d4ef376953.gif
200 OK 334 kB URL GET HTTP/2 maxun066.top/457848ec4c4ba3a5a998e9d4ef376953.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectmaxun066.top
Fingerprint1F:EC:6F:56:B1:BC:96:6B:6B:20:D0:93:33:84:2B:97:D2:BE:A7:28
ValidityThu, 26 Oct 2023 10:44:06 GMT - Wed, 24 Jan 2024 10:44:05 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Size 334 kB (334447 bytes)
Hash 951b69336d9c15a474f41f1570950b3d
dbeb8fd225c80ce43707842386496340cd8d9bb4
76cce8df402fc0d22d11148e2c3234c754729790550a898bf49b5040b6c0e27a
GET /457848ec4c4ba3a5a998e9d4ef376953.gif HTTP/1.1
Host: maxun066.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
age: 1315973
cache-control: max-age=2592000
cf-cache-status: HIT
cf-ray: 82d25e227aee18d5-FRA
content-type: image/gif
date: Tue, 28 Nov 2023 11:45:58 GMT
etag: "642682ef-51a6f"
expires: Wed, 13 Dec 2023 06:13:05 GMT
last-modified: Tue, 28 Nov 2023 12:03:58 GMT
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TH%2BtDJs6rmW7YgNt1RdkILqNfeaESNpQrIuNpsG90bZwC630vRMhoNSLWVKwqU8Z18dJUFu9bW2z9%2F%2Bkx80EYyBO8B7hQGuPiwWs5OmvvioKfOlhBcZeUQEJhMjZ8S292VcjtPkSPXsT"}],"group":"cf-nel","max_age":604800}
server: cloudflare
vary: Accept-Encoding
x-cache: HIT, policy, memory
content-length: 334447
X-Firefox-Spdy: h2
maxun103.top/24bff9fdc4c5f3d042055758e983c831.gif
200 OK 266 kB URL GET HTTP/2 maxun103.top/24bff9fdc4c5f3d042055758e983c831.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by https://launch.discountamount.top/
Certificate IssuerBuypass AS-983163327
Subjectmaxun103.top
FingerprintB6:71:DB:30:8B:EB:5D:A2:DB:26:52:9F:44:6F:40:54:39:41:D6:46
ValidityWed, 01 Nov 2023 12:40:48 GMT - Sun, 28 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 266 kB (265672 bytes)
Hash 16deb8dd632a7ad2b2dbf34dc431756e
c02532c4c572e037c2100dd5d8c896a57ef1d0cb
8612988c08c771a0d50a93625019f71c0bf2892ec98e03d81d0990af30211741
GET /24bff9fdc4c5f3d042055758e983c831.gif HTTP/1.1
Host: maxun103.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=2592000
content-type: image/gif
date: Tue, 28 Nov 2023 12:34:07 GMT
etag: "64e7768e-40dc8"
expires: Thu, 28 Dec 2023 12:34:07 GMT
last-modified: Tue, 28 Nov 2023 12:34:07 GMT
server: nginx
x-cache: HIT, policy, disk
content-length: 265672
X-Firefox-Spdy: h2
jt.hza01.com/jingtai/szgg/1332wy120.gif.js
0 B URL GET jt.hza01.com/jingtai/szgg/1332wy120.gif.js
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/szgg/1332wy120.gif.js HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
jt.hza01.com/jingtai/szgg/872/960x100-872.gif.js
0 B URL GET jt.hza01.com/jingtai/szgg/872/960x100-872.gif.js
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/szgg/872/960x100-872.gif.js HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
boyinjs.com/pic/-8a51a6cdea8edf6585b603.gif
0 B URL GET boyinjs.com/pic/-8a51a6cdea8edf6585b603.gif
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pic/-8a51a6cdea8edf6585b603.gif HTTP/1.1
Host: boyinjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
kvhee.com/3cf28cb59c6feb71c314fe7883388bb3.gif
200 OK 342 kB URL GET HTTP/2 kvhee.com/3cf28cb59c6feb71c314fe7883388bb3.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectkvhee.com
Fingerprint66:CE:07:A6:A6:B7:E1:D7:4A:09:FC:10:87:F8:B7:D5:27:B6:37:11
ValidityFri, 27 Oct 2023 04:16:00 GMT - Thu, 25 Jan 2024 04:15:59 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 342 kB (341700 bytes)
Hash 7f9c515ed18840083ff572b048261226
265ef775fdc24fa4b8044f3cb8644a3c0fddc42e
e2c363ec1a589185c9f035bcdc9f2c492e1aebbca951bbaf96c68bc04873c101
GET /3cf28cb59c6feb71c314fe7883388bb3.gif HTTP/1.1
Host: kvhee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=2592000
content-type: image/gif
date: Tue, 28 Nov 2023 11:45:04 GMT
etag: "650aa761-536c4"
expires: Thu, 28 Dec 2023 11:45:04 GMT
last-modified: Tue, 28 Nov 2023 11:48:44 GMT
server: nginx
x-cache: HIT, policy, memory
content-length: 341700
X-Firefox-Spdy: h2
launch.discountamount.top/template/m1938pc/ads/bctp.js
200 OK 2.3 kB URL GET HTTP/2 launch.discountamount.top/template/m1938pc/ads/bctp.js
IP
Requested by https://launch.discountamount.top/
Certificate IssuerLet's Encrypt
Subjectlines.bulkdomain.top
FingerprintFB:D5:C6:09:AF:00:66:BD:5F:47:34:27:F5:76:0C:9B:D8:A4:DA:0F
ValidityMon, 27 Nov 2023 06:02:38 GMT - Sun, 25 Feb 2024 06:02:37 GMT
File type ASCII text, with very long lines (2514), with no line terminators
Hash 06d33018d5b36efb52a88cacbd4c5c9b
0cba90962b37a5bc58215dfea765ba0af43f0258
ad586438c8ff9ee68ccfa81888fd2c0e3533e291a3113202304c2d977f339ca4
GET /template/m1938pc/ads/bctp.js HTTP/1.1
Host: launch.discountamount.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:42:27 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 08:19:39 GMT
vary: Accept-Encoding
etag: W/"6562ff9b-8fb"
expires: Wed, 29 Nov 2023 00:42:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
jt.hza01.com/jingtai/125vip/sezhan/125VIP-960x100.wgifw
0 B URL GET jt.hza01.com/jingtai/125vip/sezhan/125VIP-960x100.wgifw
IP
Requested by https://launch.discountamount.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jingtai/125vip/sezhan/125VIP-960x100.wgifw HTTP/1.1
Host: jt.hza01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://launch.discountamount.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
156.224.240.39
107.148.150.92
3.36.126.81
14.128.63.149
89.105.207.61
167.235.226.149
0.0.0.0
104.234.77.41
118.180.40.35
162.19.61.80