r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13984
Expires: Wed, 07 Dec 2022 03:51:55 GMT
Date: Tue, 06 Dec 2022 23:58:51 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1612
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:58:51 GMT
Last-Modified: Tue, 06 Dec 2022 23:31:59 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 23:20:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2305
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2923
Expires: Wed, 07 Dec 2022 00:47:34 GMT
Date: Tue, 06 Dec 2022 23:58:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: olW577fDk2P2jwanF9EN20/cZazGwoWWk6sw27jamPy+vUrgBtrrl7xycJELqdbqBK7kwUGgSyU=
x-amz-request-id: SC929HZZAR4VENJK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 23:47:17 GMT
age: 694
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:58:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.zyktbj.com/index.php
156.255.158.156200 OK 563 B IP 156.255.158.156:0
ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (717), with CRLF line terminators
Hash c98b00573e1378b2373e5ef988b7cbb2
e6ebe04e7ec7730671217424e87cf9ff438e9f71
2dd0ad5472863b43878348983d706a48f6a9c6157ce38f21a2226154d383002c
GET /index.php HTTP/1.1
Host: www.zyktbj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 23:58:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 23:11:20 GMT
cache-control: public,max-age=3600
age: 2851
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.zyktbj.com/common.js
156.255.158.156200 OK 684 B IP 156.255.158.156:0
ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone
File type HTML document text\012- HTML document, ASCII text, with very long lines (443), with CRLF line terminators
Hash 3da4eeb4de33fea60babc3b330d6c0fa
109e5561a602ffd3002ccfd1e75b6194c47014a7
f2ff3882faf15febeecd22601dbcf93c20b2169b541141e06db49883392abff8
GET /common.js HTTP/1.1
Host: www.zyktbj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.zyktbj.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 23:58:49 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.zyktbj.com/tj.js
156.255.158.156200 OK 258 B IP 156.255.158.156:0
ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone
File type ASCII text, with CRLF line terminators
Hash 8c026c213917fdf38405757d502ad5cb
56b0764d6fcf6a92cd4ed8812ce97b0625d28c5f
37c0dd7226761fc10d4deec8380c9154ef682ab6c8cfe5148018c9956931c900
GET /tj.js HTTP/1.1
Host: www.zyktbj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.zyktbj.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 23:58:49 GMT
Content-Type: application/x-javascript
Content-Length: 258
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1585
Cache-Control: max-age=120864
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:58:51 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 09:33:15 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.zyktbj.com/favicon.ico
156.255.158.156200 OK 1.2 kB URL HTTP/1.1 www.zyktbj.com/favicon.ico
IP 156.255.158.156:0
ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.zyktbj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.zyktbj.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 23:58:50 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sun, 11 Dec 2022 23:58:50 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
push.services.mozilla.com/
54.69.181.45101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.69.181.45:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aQwoj2JJQMXia4MtYW0RLg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0gVMKb/yWJ8i8MkPSBBtAFBXCxY=
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash e287754c60a88666a6312bad9576d6d6
ebf26b4fc9095405264affb5ec5bb74da1390c11
1e3b86f238eebe96b7a33f7df7dfd4815e9e6f6ebf801e7dd8489687d05bc870
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 10 Dec 2022 22:20:00 GMT
ETag: "ebf26b4fc9095405264affb5ec5bb74da1390c11"
Last-Modified: Tue, 06 Dec 2022 22:20:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1673
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7758f8d88dae1c06-OSL
hm.baidu.com/hm.js?6b7cd4ff7a6271cb956e8cf8f0e259ea
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?6b7cd4ff7a6271cb956e8cf8f0e259ea
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (618)
Hash 7a7de5969ab6a943a7d4c3a86bdd9ce4
e43f4b8bc3a2558339afe83d4b1fc672c826ff04
1ef5764f9169178a718fba355b8ea5f35bec815f0a161c4152e73e6a55f3a2a6
GET /hm.js?6b7cd4ff7a6271cb956e8cf8f0e259ea HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.zyktbj.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Content-Type: application/javascript
Date: Tue, 06 Dec 2022 23:58:52 GMT
Etag: 500558fbb3baeb4bc114871da9aab4f9
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=54F82F4EBAF70620; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1114176763&si=6b7cd4ff7a6271cb956e8cf8f0e259ea&v=1.3.0&lv=1&sn=15053&r=0&ww=1280&u=http%3A%2F%2Fwww.zyktbj.com%2Findex.php&tt=%E4%B9%90%E6%B8%85%E7%86%AC%E4%B9%94%E8%B4%A7%E8%BF%90%E4%BB%A3%E7%90%86%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1114176763&si=6b7cd4ff7a6271cb956e8cf8f0e259ea&v=1.3.0&lv=1&sn=15053&r=0&ww=1280&u=http%3A%2F%2Fwww.zyktbj.com%2Findex.php&tt=%E4%B9%90%E6%B8%85%E7%86%AC%E4%B9%94%E8%B4%A7%E8%BF%90%E4%BB%A3%E7%90%86%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1114176763&si=6b7cd4ff7a6271cb956e8cf8f0e259ea&v=1.3.0&lv=1&sn=15053&r=0&ww=1280&u=http%3A%2F%2Fwww.zyktbj.com%2Findex.php&tt=%E4%B9%90%E6%B8%85%E7%86%AC%E4%B9%94%E8%B4%A7%E8%BF%90%E4%BB%A3%E7%90%86%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.zyktbj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 06 Dec 2022 23:58:53 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=3EB2A4477E137356; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 2.3 kB URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash 049e75b3269ae8c0cc8d3d89c9c43928
c6893397c49fb0b8c279432723aeb9304b4be044
c30b54c64b76eb5f8c688113f01bc4b3c9e286fbb9de9d24980c9b5f0f23a851
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=482619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8e45eedb524-OSL
img2.xiangbinjun.com/new/202201/carib_031822-001.jpg
54.230.111.89200 OK 369 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_031822-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 369 kB (368574 bytes)
Hash 1d90e2456d0ac458d10369eede1351f8
b2a0a196031cab18836756a9d56befa6bccf9dc8
911999cddf5fc2af9ff0fee0d99df6ea58dacdd65253975844b08cdc021ca9d4
GET /new/202201/carib_031822-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 368574
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:06 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:21:46 GMT
ETag: "62975b1a-59fbe"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8GZpF_dPS64xZamrF5kH1P4IdcOq3_ZB7aT7aZD7ZhEaJpVzHq4JSw==
Age: 67028
Vary: Accept-Encoding, Origin
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash dae750546bb982e1fe2a8a43def15b5e
2a338dc30d4fcc62c667756d2a95fb1f6b60d46c
11e9b7c279a9cb92e8cf51161be2dcfb5cab92350b7d0dbe05c97aaa325b0543
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=482619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8e469d51c12-OSL
img2.xiangbinjun.com/new/202201/carib_042222-001.jpg
54.230.111.89200 OK 388 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_042222-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 388 kB (388141 bytes)
Hash 3be903573e6c486898d106336b0405d2
a66e836fa11c236e38bbb98cd25e09a01c441340
f481382a420762e3d624a665f19dd4541783a056727c15f17de267f1889726f4
GET /new/202201/carib_042222-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 388141
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:11 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 02:32:52 GMT
ETag: "62975b1f-5ec2d"
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2PXXeE9AtkxDqyhy16yZEtE4gUqE_ECib8mh4gsvOW3bBvu_VKiY9Q==
Age: 77162
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/carib_032222-001.jpg
54.230.111.89200 OK 346 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_032222-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 346 kB (346228 bytes)
Hash 2449447774c5a143925ddd377bfbfb20
c7ba74f4b67eaf710bc4ae01ad212b9b404d89e9
d326ee086b210ccbe8a140266a7956c1d7470154399669fa4ffb0d6db52bd9c8
GET /new/202201/carib_032222-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 346228
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:06 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 23:58:54 GMT
ETag: "62975b1a-54874"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nvCBzaw05gWTnCoX4HqmPVU_xMo8LfYl52FBPSe2BT1px3p5W3JeAQ==
Age: 54559
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/carib_041422-001.jpg
54.230.111.89200 OK 259 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_041422-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 259 kB (259039 bytes)
Hash 4fbe739924a46cdbdc0f510d116d468a
c5eec4645781ffef18356d9b28a8cb3b9e0cf617
fd2355b694e8e120f7a12439e60464f3d9d09222442b3fabfb2d1291605b4f06
GET /new/202201/carib_041422-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 259039
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:08 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 04:39:05 GMT
ETag: "62975b1c-3f3df"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YEynwYhncmewEe5aGx5ojMhOGhyveI0N41G50eaV3eiq08LzQQA4-Q==
Age: 69589
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/carib_030922-001.jpg
54.230.111.89200 OK 296 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_030922-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 296 kB (296495 bytes)
Hash bbecc7d55c9a3efce24217bb16a367ff
87a690c715d8aaa03129b5092f79bbc7a41c0e52
0c3b6a70bff61f75455276ea2801fc3cc2b3a71fa1cc48f441fa4bd09fbd487c
GET /new/202201/carib_030922-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 296495
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:06 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:22:06 GMT
ETag: "62975b1a-4862f"
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i8qc1i-mN_qrEtrPTSBtPdJHrRGQh2vvU2EQg9OJ3oU_FETgp5Bj1w==
Age: 67008
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/carib_040922-001.jpg
54.230.111.89200 OK 286 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_040922-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 286 kB (285778 bytes)
Hash be947c5982957e1799ff883e2de6e9d1
5d0e6afca76654b6561ead895970a04c66e6affc
b45763355ca14e0d03e7bf8c84793c1d2768b79de651d74a11c95379a020bdd6
GET /new/202201/carib_040922-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 285778
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:08 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 02:26:08 GMT
ETag: "62975b1c-45c52"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gFdsxXubN78bFqo9TbRgtTLZz_Y8r844Zm8FsXMVHmryb_KwLKtmFA==
Age: 77565
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/carib_021822-001.jpg
54.230.111.89200 OK 284 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_021822-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 284 kB (284092 bytes)
Hash c62c910380b014a112cc8fa88623def3
cfd3444eacffdc866f52bb396c82ceb3ccb90bdd
d680f020a7303c48022191f455c7ba1b8844c3cb03c70d1553ebd979ae384d5a
GET /new/202201/carib_021822-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 284092
Connection: keep-alive
Server: X
Date: Tue, 06 Dec 2022 01:14:07 GMT
Last-Modified: Wed, 01 Jun 2022 12:27:04 GMT
ETag: "62975b18-455bc"
Accept-Ranges: bytes
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZwtlwN8FjvoCc6nh3-FOS0eAAF3lEV0K1UHmsVhNCf4jAFfN4-Nehg==
Age: 81886
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/carib_022622-001.jpg
54.230.111.89200 OK 300 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_022622-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 300 kB (299785 bytes)
Hash f8150a3a3b1c20f819f595d676cd8fdc
8ca696c6b83f2105611edb8c9accdaf0c13f13ed
71c7fac357b3f82e4a2f60f74003c244278b008342594318029bd6f042dbe33a
GET /new/202201/carib_022622-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 299785
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:05 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 02:26:07 GMT
ETag: "62975b19-49309"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BoLgQuSdYxj_PEhTNeN_uq7r2-ZuZH0yBqszbNszQi60EGmtE0lkYQ==
Age: 77567
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_041922_001.jpg
54.230.111.89200 OK 365 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_041922_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 365 kB (365213 bytes)
Hash bc19f524b33955b2330a2cc9a12ad6b7
5b51cdb88623851be68e4ae73daf98b2bd477f3d
057feaa73df64fe9ba4de9253a2a983814b4341f246161d958a1768b92d51400
GET /new/202201/1pon_041922_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 365213
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 02:19:47 GMT
ETag: "62975b12-5929d"
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6IwyBflgPTy8Kn4ulks_t9iGnM7i6Oia216cubKPaBzISFW0dhfgKg==
Age: 77947
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_032622_001.jpg
54.230.111.89200 OK 302 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_032622_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 302 kB (301589 bytes)
Hash 510c81479580b1f4b39fe21b2b199d05
4fecb0327a3a45638bfff3c13cee39f22a6d0b3f
03d8ec5c8ad110f6d984cca255a90157d799e248c3724cdab7c52a0ab1d07176
GET /new/202201/1pon_032622_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 301589
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:57 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:34:42 GMT
ETag: "62975b11-49a15"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: g42dfVhWdAxQdcR3oOsLDR4bKnfOByy6EMm9ZJvZA8a9KhB0CsqvFQ==
Age: 80652
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/carib_050722-001.jpg
54.230.111.89200 OK 340 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_050722-001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 340 kB (340400 bytes)
Hash 79e9ebb08a565f01b5d69d15c1539150
11d2e0f14eb7543c5df60bcd674da2c558bb2280
a43152faa759bac61d31657a69aaedd2ce41daa436d81994acae62a9a79b7998
GET /new/202201/carib_050722-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 340400
Connection: keep-alive
Server: X
Date: Tue, 06 Dec 2022 02:12:33 GMT
Last-Modified: Wed, 01 Jun 2022 12:27:09 GMT
ETag: "62975b1d-531b0"
Accept-Ranges: bytes
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: b5gr9MzcTXfIC8NnZUqXbw9Gj-EBAeumLdiEykpt51gDhn2ufgC6PQ==
Age: 78381
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910389.jpg
54.230.111.65200 OK 124 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910389.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x407, components 3\012- data
Size 124 kB (123771 bytes)
Hash e8d914aebf385602bd97ac7700797df8
fd83639514e59572f0fb5fe28b526cd6b36218c8
9ce00e81fbfc942c2e0d5c5bf0ae74df2da2b80023eef8e38ec48efece943eb0
GET /uploads/2021/05/20210910389.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 123771
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:11:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:39:32 GMT
ETag: "613b134e-1e37b"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ar358BjIp6jBvhtcfDsxrf7pLOMUBBA3c2QPmyibVqTEDCUmIUtSRw==
Age: 65962
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910428.jpg
54.230.111.65200 OK 115 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910428.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 115 kB (115214 bytes)
Hash 8e6e8c3c8df902356b8820ec47f92149
4353f0c5a5bd77b5918298da5719d1efcba6c9b4
aa637ee78398b0a4429addaa6b59ec0d96bd7d84457fa495f8a1f14ff55a1996
GET /uploads/2021/05/20210910428.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 115214
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:00 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:39:39 GMT
ETag: "613b1350-1c20e"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: G25cKA3zohVi5Tx1zeTzbgk3gcmYtO_TNSL8hor7rkVfddlhGjl9jA==
Age: 80355
Vary: Accept-Encoding, Origin
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 4.3 kB URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash f5fd1d8c3fe2fb399e68141c662d8d74
5e6e66729397dddc9d0521d89ded64782ca4b427
59ee3f1b611cd3ff4043ea0159ce8e9a18c32676065a96b27fcab392288c86a4
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=482619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8e48bc6b4f7-OSL
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash dae750546bb982e1fe2a8a43def15b5e
2a338dc30d4fcc62c667756d2a95fb1f6b60d46c
11e9b7c279a9cb92e8cf51161be2dcfb5cab92350b7d0dbe05c97aaa325b0543
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=482619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8e48e90b4f3-OSL
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6693
Expires: Wed, 07 Dec 2022 01:50:27 GMT
Date: Tue, 06 Dec 2022 23:58:54 GMT
Connection: keep-alive
img2.xiangbinjun.com/new/202201/1pon_040522_001.jpg
54.230.111.89200 OK 303 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_040522_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 303 kB (302633 bytes)
Hash c3a40bc83bbd1c7e40cfa9d07bddece3
91381a502cd2de4544ef58d6de1cbc0a36fdec1f
126b3fd67ef86277aaf22b92aac20888993ad8e05cec1bba519bdff35d343581
GET /new/202201/1pon_040522_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 302633
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 02:16:18 GMT
ETag: "62975b12-49e29"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hSV6H1hyslo4yQT93e1vLwQeVkoY56b6TYCTuXt7CLRODr3NfDLXxA==
Age: 78156
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_031922_001.jpg
54.230.111.89200 OK 240 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_031922_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 240 kB (239770 bytes)
Hash cbe6ec6fa7d56c26d6e53f8f763aa5c7
bec519902702ced296a1be3c5a9211b556693c17
25a0472af7095c57c522e41d67897a91b774ede4ff9653a7948e1c90ee5ada7e
GET /new/202201/1pon_031922_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 239770
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:56 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:54:31 GMT
ETag: "62975b10-3a89a"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8T-JJmxzCYg3aCtvC2eS91aQFbgusjNIXinDLienq2nG_6Yn6aMlxQ==
Age: 65063
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_020522_001.jpg
54.230.111.89200 OK 327 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_020522_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 327 kB (326821 bytes)
Hash 4c4b925c5d4996689995986be37f1328
8aad44f03747c4775b507304d7994b54e37e6d02
8a043347bc454acc0e615cd1586eb4e89ec101882d8f5b2085698f941753dcee
GET /new/202201/1pon_020522_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 326821
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:55 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:33:08 GMT
ETag: "62975b0f-4fca5"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uRF6KfuV4dkQNNFV0GWNql_AycjFbnzVK0x7slKUrKZdOy7gq8XIOg==
Age: 80746
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_030122_001.jpg
54.230.111.89200 OK 286 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_030122_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 286 kB (286295 bytes)
Hash 08b3d92d0d019a1f51ae712e8a22bce5
47a6679095b16e7e235c2849a62c8af7ae0dc8c3
6a46399a2ac4bd7500306f915a955b68157d699eea0a1b089d8a797fa12fbba4
GET /new/202201/1pon_030122_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 286295
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:56 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:05:35 GMT
ETag: "62975b10-45e57"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1vPqPH8ZHYe72eaQnl-uDxipk9UGiNm4fw4xF7myfu2wfg7HkThtiQ==
Age: 67999
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910390.jpg
54.230.111.65200 OK 151 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910390.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 151 kB (150579 bytes)
Hash 452990b8063a6203d01e74834502ee76
ba6463d346d7e5a4c7109a2c735d2dc7a8b2b55e
2a58aab1f5edd82b787ffc68ad8a2c256b85cea362fdd20d49491ed8a9c26bf0
GET /uploads/2021/05/20210910390.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 150579
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:11:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 22:04:47 GMT
ETag: "613b134e-24c33"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cycn6E8_uScqoqsTlkB8XKFE2Kh_9FkuOFPVgQQEMhyUhIx64sJxpw==
Age: 7267
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910392.jpg
54.230.111.65200 OK 259 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910392.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x537, components 3\012- data
Size 259 kB (258910 bytes)
Hash d524e7ba6d71c070b65a6557da570921
fd7084c5b13e4c9b5d17933f589c9b70dafef2b5
f62882bcaa9dc4b51769a547de02e647ee6a75bef9c20b4d56432efc165d77b0
GET /uploads/2021/05/20210910392.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 258910
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:11:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 06:30:12 GMT
ETag: "613b134e-3f35e"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bZ34fHNiDYGMA_Fx5l31TzAQcXP8DsTxlpefeqV95ueALRALSOkDXw==
Age: 62922
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910393.jpg
54.230.111.65200 OK 240 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910393.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 240 kB (240079 bytes)
Hash d7e4f296831674d68b9eb549c203e375
58933db3651c6722617603d90f62dfbd30be0813
49884e9bf54229fad4f3ca88ea7623854fa3778969b9a38ecd735413837a7975
GET /uploads/2021/05/20210910393.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 240079
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:11:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 00:26:05 GMT
ETag: "613b134e-3a9cf"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -stW-QzyMwiX3TSyOKUD4atyTfYurcvbQgD59uegifl89foMZGjidA==
Age: 84768
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910427.jpg
54.230.111.65200 OK 115 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910427.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 115 kB (115244 bytes)
Hash 48ce10d0c151af4d74428f7e2ebb0983
a2d4f841d6dcb1da3097bebefd4dd13ba6cd6569
6492e203505ae2c5e6de44f54179882cd5701aa1732ec87cfc39503dedabaab0
GET /uploads/2021/05/20210910427.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 115244
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:00 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:32:29 GMT
ETag: "613b1350-1c22c"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vIOM1vYwXNMqlRjWAAZ_x7mEIVy3lQkOpcZOJ7H_cqxRzRr0I7bk1g==
Age: 80785
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910426.jpg
54.230.111.65200 OK 103 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910426.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 103 kB (102625 bytes)
Hash 3d368a5b60b369340d31869d4776d455
dd956ef07fc63b2adfd0e1899d8d5277ae7187dd
76c17ca6cda659027edfc876a5936c3c33ea805d202a135078d4268c07338ea6
GET /uploads/2021/05/20210910426.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 102625
Connection: keep-alive
Server: X
Date: Tue, 06 Dec 2022 04:03:11 GMT
Last-Modified: Fri, 10 Sep 2021 08:12:00 GMT
ETag: "613b1350-190e1"
Accept-Ranges: bytes
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2ZTQ-TcGhZWjxUxK57RAcSyvWzicZX6Nj3hC7gQQy7G22MFc09_YrQ==
Age: 71742
Vary: Accept-Encoding, Origin
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 894 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash 7cceb84fce8db9877b8ac973a60ee8d1
2ab0ab0447a949530ec228f2e5c4b986b668a0b3
3894e4d611a7efeaebb8b91f95fe0ef46537493af2fa1c468c1b62435b9b3efb
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 14:12:35 GMT
Expires: Mon, 12 Dec 2022 14:12:34 GMT
Etag: "2a338dc30d4fcc62c667756d2a95fb1f6b60d46c"
Cache-Control: max-age=482619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8e4af16b524-OSL
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6693
Expires: Wed, 07 Dec 2022 01:50:27 GMT
Date: Tue, 06 Dec 2022 23:58:54 GMT
Connection: keep-alive
img2.xiangbinjun.com/new/202201/1pon_022422_001.jpg
54.230.111.89200 OK 289 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_022422_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 289 kB (289432 bytes)
Hash ee7e8945052a0ab0a3b3521eb252534f
3f4d1702a6d818687de5dec43516dd3c95585dc7
33bb460b1ee22bec2c3c474232a5bde7c581b0693bb7d14cf0ce72b795b89ea0
GET /new/202201/1pon_022422_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 289432
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:56 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:27:38 GMT
ETag: "62975b10-46a98"
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -V7ct5qwc6p4tgdneO6a1h_F4ELrbbSfF9BRllKNypcYUhPiE1qIZw==
Age: 66676
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_012922_001.jpg
54.230.111.89200 OK 297 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_012922_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 297 kB (297318 bytes)
Hash 14d256193a6eb65a430e882563fa34d9
1930d662c66239eb5911fab387924d12e4e8d173
8620eeddb300c1871e938476cf8810bd627f04d121f9a12501476adfb4be1985
GET /new/202201/1pon_012922_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 297318
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:54 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:03:52 GMT
ETag: "62975b0e-48966"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -QI6NZ_KBA8zKg-uJHxAk9j8zXuMzAA5WzwMl5yy2sej2trXEJ-jFw==
Age: 82502
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910391.jpg
54.230.111.65200 OK 131 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910391.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 131 kB (131354 bytes)
Hash 584737519eca483da7dd0186452ceb24
17bfe127e50b493cd8a28a2022bdce260d6543a5
92c1abd40b9e3678ece8beabb8f41d0fb1bfcb331c0eb4823e4b793b3641fbd9
GET /uploads/2021/05/20210910391.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 131354
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:11:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:10:30 GMT
ETag: "613b134e-2011a"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GzrGLULLwmJf8onBTt7KXYf8uQlrH_D-HpalSQkz0fEU7hsfoXdt-w==
Age: 67704
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910394.jpg
54.230.111.65200 OK 113 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910394.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 113 kB (112715 bytes)
Hash 23b8303f355a0de15779e25436c2cf40
f221f9a92267d992b15287b1ebc9c19a039c8be6
cae16b48d17d7b3d2a9efbc94a9db2f7176eefbea9472de14d0d856ec887e45f
GET /uploads/2021/05/20210910394.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 112715
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:11:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:16:02 GMT
ETag: "613b134e-1b84b"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: n6ERcF7MLmxY51UZM0goY2-q1kEXdZROTzaHT_fac3vgryE8y7ufRg==
Age: 81772
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910395.jpg
54.230.111.65200 OK 102 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910395.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 102 kB (102422 bytes)
Hash 8cfaef2f9cbb048491d4a23ca44672b0
efbaf919ae456e1f31f8e63ca17fdd8245a89c84
cc1d7048ae9c99f0d35da8f622d182486e91b68155fd2b67004064ece8906f14
GET /uploads/2021/05/20210910395.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 102422
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:11:58 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 04:37:43 GMT
ETag: "613b134e-19016"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8VDHoCxZXsonTHtSGoGiQWos14nFw99haM7mnUK6b7CTcpVE_QEmjg==
Age: 69671
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_020322_001.jpg
54.230.111.89200 OK 224 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_020322_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 224 kB (224062 bytes)
Hash c7c3ea921e1ee8795a1a8bfa1a4568c9
ae78681557a5e98f3daefba6754e00335b8154d2
a93e79c8078a27b48d26130879bd5f82b85b75c6b30a16f7da48af11662a1589
GET /new/202201/1pon_020322_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 224062
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:54 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:13:09 GMT
ETag: "62975b0e-36b3e"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cf61L9rlHaUsI3-avrnsrCJCvc0AdzpdgJ9UV9qmXfGRw0nDh7Fdhg==
Age: 81945
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/HEY-216.jpg
54.230.111.89200 OK 125 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY-216.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1092, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1611], baseline, precision 8, 920x526, components 3\012- data
Size 125 kB (125319 bytes)
Hash 8c41ee7498ac51d0a96752576cdb5ddd
4c6d2916dd2c9c802f1c328a121cd9af0a23269d
c8d8f837748c8e309e6c0ec4f77f20656eef5e4ff85c84b22db4f89a7a833ce7
GET /new/202201/HEY-216.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 125319
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:10 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 03:49:37 GMT
ETag: "62975b1e-1e987"
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MF0eAkQ1X0JCxfNNBN3ImgLImBccDOy-yRATteEv6e1GSBJEwleQ9w==
Age: 72557
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/HEY-220.jpg
54.230.111.89200 OK 445 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY-220.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1254, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1765], baseline, precision 8, 920x526, components 3\012- data
Size 445 kB (445251 bytes)
Hash 43e2bf1b6a2558c7ae4f1c1538e8dc0b
efbf6a36ae2a8bf5cdeb2b33d437812969285d51
5852a481497afbb60f7446fef98d9d44477ae3f0c5057c22ec7c01a5512fd991
GET /new/202201/HEY-220.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 445251
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:10 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 23:58:54 GMT
ETag: "62975b1e-6cb43"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fll8ahUfeVJllLHjwMBlBfKkBWPISMcjNrfo3mT2DB6TVgG5u4l6OQ==
Age: 2524
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910490.jpg
54.230.111.65200 OK 113 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910490.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x407, components 3\012- data
Size 113 kB (112857 bytes)
Hash bc1de8ea4aaad071a6672ec3dd682af4
17e393bf1531f5b01b754d8926e2bcf562e832d4
a6d5b37e5fb80036aa27e6b1f3a0fd36797d5d07e15e187b831dd81cc546fc2e
GET /uploads/2021/05/20210910490.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 112857
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:29:25 GMT
ETag: "613b1354-1b8d9"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: eIepG64mxq96QROZhLC9LVMqHhz6VIKLQvSM4KHkAigZn2ZI9KLkhQ==
Age: 80969
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910491.jpg
54.230.111.65200 OK 118 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910491.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x407, components 3\012- data
Size 118 kB (118116 bytes)
Hash 2c15f28fd84076f60c6df3cea9b54613
52b45320f620f0da013e459f0c608d1c9370273f
5bc69d758942a95efc030396652418afe33bb595dc0f83170fea6b89c990bf22
GET /uploads/2021/05/20210910491.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 118116
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 00:46:54 GMT
ETag: "613b1354-1cd64"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pSRcuTkj1RsEtYw0xocgW2t5ADYfciIrNYtVl-FKhKbdTO6a8Tw-wA==
Age: 83520
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910492.jpg
54.230.111.65200 OK 134 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910492.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 134 kB (134094 bytes)
Hash dece039cd7f3d0fcd59718d66e275e26
dc4a53db4d450d8697ee52f4e51ebe0fd5800311
bea4da572c9fbf724e5f539a286aa97f5c9f969cc731700e96ebcf51e2965a30
GET /uploads/2021/05/20210910492.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 134094
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:39:33 GMT
ETag: "613b1354-20bce"
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z0NgA5cifs9IsJPNriJdPXu8RFXlq1r8nY1HhpWsF0If3O91C-QIxw==
Age: 80361
Vary: Accept-Encoding, Origin
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fb1ea0161d261518c99909aff49e6f58
c3b915cb579b651db25442fea0bbedd0d292c0fc
d877a21abfd883a368da0136c4e56d7f590fa9e9ea09dec3675823211fe56385
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6110
x-amzn-requestid: 2ebf542a-dacc-472a-81c0-0c69cb1ec143
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEQAH2doAMFljA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb3ff-7173ff7941b57fa163e3cc6b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fxuPjC35VBDaymSCPY_iBxDnQY4CFHgolHSmnDhCRUjzw5UzY7ovA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 04:12:54 GMT
etag: "c3b915cb579b651db25442fea0bbedd0d292c0fc"
content-type: image/jpeg
age: 71160
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img2.xiangbinjun.com/new/202201/HEY_20220430.jpg
54.230.111.89200 OK 333 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY_20220430.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 333 kB (332818 bytes)
Hash 96c2ca62ac35652833a69010e25d6fcf
d7d8708de2bba4fd7580f6a854b84a1f113581b2
1421db50a6e0e09de800c78d560b9f8e1ea23499711e0e2a225b6c1957577c41
GET /new/202201/HEY_20220430.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 332818
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:18 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 06:31:32 GMT
ETag: "62975b26-51412"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ASWqRhxvulJSn6wAqUH65MhxM-Ou815imxt-lzsqe1jOxSnks18lLw==
Age: 62842
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/HEY-213.jpg
54.230.111.89200 OK 113 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY-213.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1092, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1611], baseline, precision 8, 920x526, components 3\012- data
Size 113 kB (113099 bytes)
Hash f87b65a0a2cb08b11df39b2bd0c97a26
4c9ce00b8bcff36a4e540ab019fd5e91ef075694
43eae06f21670633737cc2032a001d585dfcec61dbba962d92244da66f29e393
GET /new/202201/HEY-213.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 113099
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:09 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 03:47:10 GMT
ETag: "62975b1d-1b9cb"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -7NeH0aZFc1J4598wc30uVz4N7v0m4CQm32DWWC4VKpdQVRD-S3rfg==
Age: 72704
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910493.jpg
54.230.111.65200 OK 127 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910493.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 127 kB (126898 bytes)
Hash ae10b114253bd51f8eac22be85158725
e45c83a5e3dc3c18fd4424bc517e37a6c630f27f
3ec8eb9b17ba0f6a0131029cacd0c2c2a486aaead2da291299c90cf13ad1380d
GET /uploads/2021/05/20210910493.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 126898
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 00:46:35 GMT
ETag: "613b1354-1efb2"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: y-S0GgQ9eh5Jucuv_fa28alhrXKrdiaCS3i4ys2CPHUnJcQnOPaULw==
Age: 83539
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910494.jpg
54.230.111.65200 OK 135 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910494.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 135 kB (135100 bytes)
Hash 5b9cf5e71b66224aa2d8dea647b9401c
ca96901d6713a999a83f989708708987320fb6b1
3992e9a5e474b41b3d90f7f034c1479135ca6365991fc8c435b1b8fa83dea661
GET /uploads/2021/05/20210910494.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 135100
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 06:18:41 GMT
ETag: "613b1354-20fbc"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ac5NFWtGV9cPi4z0BJ-cKldLuLvtHIm5MJ2S2OaZyYzb4cMVUn0EZQ==
Age: 63613
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910495.jpg
54.230.111.65200 OK 214 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910495.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 214 kB (214411 bytes)
Hash 6de2027663fb767b1900c7a3ed89fc07
c6f3cbe72a8d003911920df5e7d1ab2f22168675
37d5091ead905e2d743a4fe27fd16c1e001a8fefa504d6aee2d2cbaf87db71ca
GET /uploads/2021/05/20210910495.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 214411
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:04:10 GMT
ETag: "613b1354-3458b"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i60meqYCOXNG19bIFcIIm1d5GqLONjUv7QefT2nV76yAnofwX8mXpA==
Age: 68084
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910496.jpg
54.230.111.65200 OK 117 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910496.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x410, components 3\012- data
Size 117 kB (117226 bytes)
Hash 8e27a678316fe08bbef910bfb1b3a433
27f793b7a5e001eecd3fa49ae6a9e80dc676c1eb
bb1f1627c348ba30f4038a66d177dc536d7b3465fb33c06b791101d05e038f44
GET /uploads/2021/05/20210910496.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 117226
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 01:14:05 GMT
ETag: "613b1354-1c9ea"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3aTPqjLrdYHPusgztO_KkqxsXTEbRvzt-pLyzZc06TbCkJ8EEaB32Q==
Age: 81889
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910497.jpg
54.230.111.65200 OK 100 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910497.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Hash eb434d3366259d512d788a40957c646c
53bd1bb2fac73e59230b04d674a21715e6eded6b
d9ad25071b06c6de4f5494f771afc06df0679100caebc71dc4754dfed2edc045
GET /uploads/2021/05/20210910497.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 99966
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 03:29:14 GMT
ETag: "613b1354-1867e"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HCUIZu52rTA4N7Kl72qLoecrulRZSGSeR3hgdGiOjqq8XkOsDI4_ww==
Age: 73780
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910498.jpg
54.230.111.65200 OK 108 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910498.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x407, components 3\012- data
Size 108 kB (107680 bytes)
Hash e999b85a2012ac01cd1e43af33a29cd8
d7e26fd161bf018c0585194c6a866425737bf7cf
df3f02bdf4fa1d38b6a86df7bbd3a62d5ca3a534bff76070ab438647e6a5db44
GET /uploads/2021/05/20210910498.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 107680
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 02:03:45 GMT
ETag: "613b1354-1a4a0"
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mqFXKKJJSlUvWNAyaNo02YBqL2yho7hvbpcS6SzmARSIvRzsFFNkOA==
Age: 78909
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/HEY-214.jpg
54.230.111.89200 OK 142 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY-214.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1092, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1613], baseline, precision 8, 920x526, components 3\012- data
Size 142 kB (142010 bytes)
Hash cf518dbc309cfa2285454d020ac407f6
0658f74e87ae9de74bc5fdc2b019eccf1133f380
c7de13c133c068e21c59a4fe7cb372a066592f1e80965b650ef0466193124d28
GET /new/202201/HEY-214.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 142010
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:09 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 00:37:39 GMT
ETag: "62975b1d-22aba"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 62P1f2ZPTpOZ_BfRU_btRrwzTSv0Ys87eqlS51q9rgihNs9nzg59zA==
Age: 84075
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/1pon_010122_001.jpg
54.230.111.89200 OK 411 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/1pon_010122_001.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 411 kB (410793 bytes)
Hash 9ca9747f1810583d47cc6d5d9fbbc925
17000d0d4f4876fad6586179ccd86de98d23fad7
8a26f0a7eba2b89f77f8a5a23e52f782c62632fa9c0a665d5b718687d5acf607
GET /new/202201/1pon_010122_001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 410793
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:26:53 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:04:35 GMT
ETag: "62975b0d-644a9"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YIsyWH4AU_Zd7cX6XkgRb9tbY6TzY2pmnAu3vgb3QeuxoGf2QxXXTw==
Age: 68059
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/HEY-219.jpg
54.230.111.89200 OK 514 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY-219.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1254, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1765], baseline, precision 8, 920x526, components 3\012- data
Size 514 kB (513662 bytes)
Hash 9420569f5cc7f564ed5c1d8e4c349d9d
2d551e22913e5357d5abdd92e71ba4189b13cc0b
bcd1217b8102e795dade0faa9c9035fd82cb69a03dd12e92b934e33953b83ef8
GET /new/202201/HEY-219.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 513662
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:10 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 03:46:56 GMT
ETag: "62975b1e-7d67e"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6lsB-seacHLZ_CZuqDcAKLWuGAnZk3_Z4bQiyYPxVh3etLpt7EjPPA==
Age: 72718
Vary: Accept-Encoding, Origin
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b6f4dd03deb6114fec01808b034a711c
c74d29bba44dbb09158da4b9e1b490112c7db915
ddc6721d8a42821c458cf6d5c64ebd10ca0002c95a275be1732cd9ade7bf1b6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10567
x-amzn-requestid: b9b16cdf-bfa2-4e3c-b00f-1704dd3473d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgIC6EgLoAMF3hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638986df-3945eea57676d3f91f8f2b3c;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 05:02:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u9h1d9n-qSPVu7VuzNsUYljKkP7Q1gT6tHrF7DVJIxwyvFcbD2Dg1g==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 03:29:29 GMT
age: 73765
etag: "c74d29bba44dbb09158da4b9e1b490112c7db915"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img2.xiangbinjun.com/new/202201/HEY_20220322.jpg
54.230.111.89200 OK 274 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY_20220322.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 274 kB (273726 bytes)
Hash c10dd74ed291b80e9ee22fe235ee5307
c1d5fc2a7d2bfad59801154f169f5ec706e580fb
887b96252fc1ba8315be36d2e6a0195766985bb019b2d0728700c563c903492f
GET /new/202201/HEY_20220322.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 273726
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:15 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 05:31:11 GMT
ETag: "62975b23-42d3e"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lWAnp5TOcErB-nmvF2ksxXLAZ5PHh0vlJN8XIS0j-gO-_xemasclOA==
Age: 66463
Vary: Accept-Encoding, Origin
img2.xiangbinjun.com/new/202201/HEY_20220404.jpg
54.230.111.89200 OK 229 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY_20220404.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 229 kB (228725 bytes)
Hash c6cc8d4efae7a630bfbcb20686ce9fd3
246515b35798539fb0ead85ab0cb5c3dc7e9d754
893017e1f0af2115f09ea214d1fab5af74d0ea26fdb35a8357b185866ab7d2a6
GET /new/202201/HEY_20220404.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 228725
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:16 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 06:31:21 GMT
ETag: "62975b24-37d75"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: t8Lu7lO3xVT9asMOVeYGYpXt1pD-bmOMPpL0dHQJPfA6ILfq-dFbRQ==
Age: 62853
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2021/05/20210910499.jpg
54.230.111.65200 OK 112 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2021/05/20210910499.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x408, components 3\012- data
Size 112 kB (112043 bytes)
Hash 4c032adaf0f56d512c31c2f3e2382028
20f78ddfe599bc8a3251dfa2bb94d1137404ff24
ad5b61319480e2dc5bf2750448d6de2df83ed62a70a888dcb1b5d6c261001664
GET /uploads/2021/05/20210910499.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 112043
Connection: keep-alive
Server: X
Last-Modified: Fri, 10 Sep 2021 08:12:04 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 00:30:35 GMT
ETag: "613b1354-1b5ab"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ebPHC2hbbzp_Tevp3bXGNDMH6SVlKBRA8GyfIKSyKZT-lIUYqYGwqg==
Age: 84499
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2022/01/220620ym374.jpg
54.230.111.65200 OK 150 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2022/01/220620ym374.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 840x472, components 3\012- data
Size 150 kB (149796 bytes)
Hash 3aa5e32577175335de4b8cb52cf9f744
1f0772fb415c3e93b6df078f1a20885e3a6f2000
8e33c3388be454485598e0a1ac530682232eeb27692c029ef5946593e89a7390
GET /uploads/2022/01/220620ym374.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 149796
Connection: keep-alive
Server: X
Last-Modified: Tue, 20 Sep 2022 00:56:03 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 23:58:54 GMT
ETag: "63290fa3-24924"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Rm2GbiXiX3Jm_Mr89Ggee9n99YB5-rptoOrpuMcLXgt0lsqt4oXOuw==
Age: 78989
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2022/01/220620ym375.jpg
54.230.111.65200 OK 134 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2022/01/220620ym375.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 840x472, components 3\012- data
Size 134 kB (134225 bytes)
Hash 44e029a448646a6e7a2078f91bd61f02
002e4968a1ab4efb9a01dfa1602efe6134a27e0f
da83ba48161fc1d4c8e5c1cfbd68603b3e61263cedd041a00555112eaf79ae0e
GET /uploads/2022/01/220620ym375.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 134225
Connection: keep-alive
Server: X
Last-Modified: Tue, 20 Sep 2022 00:56:03 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:02:02 GMT
ETag: "63290fa3-20c51"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F0vi0I39JA3sECfu1DhbAjBKeZO8p5zP9V-oc3BfpdXkOjV6QaDfTg==
Age: 53812
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2022/01/220620ym376.jpg
54.230.111.65200 OK 106 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2022/01/220620ym376.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 840x472, components 3\012- data
Size 106 kB (106299 bytes)
Hash 56810fd8396c8a416bc5d3d909d68069
e630f35141f854d39c265b99dcb10c648a047dbb
fe90ee33b22539e33ba1502f632370e4911b78bae9a6c1b97da319e8f0dfa0d2
GET /uploads/2022/01/220620ym376.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 106299
Connection: keep-alive
Server: X
Date: Tue, 06 Dec 2022 01:15:36 GMT
Last-Modified: Tue, 20 Sep 2022 00:56:03 GMT
ETag: "63290fa3-19f3b"
Accept-Ranges: bytes
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sMXd2j1KdLh6r9rBNewkvGEEPZevENf8t_w2ys3iU6r1snqz9--qrQ==
Age: 81798
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2022/01/220620ym377.jpg
54.230.111.65200 OK 50 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2022/01/220620ym377.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 840x472, components 3\012- data
Hash 22fac46422ae8f12b3d926d366441403
65e1f503d3e166be96bed32e019e7addbef795e1
88d750a5cf29ef42b59a5d5beda407d16dccd0dd04f309a43afe7864253b2a94
GET /uploads/2022/01/220620ym377.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 49915
Connection: keep-alive
Server: X
Last-Modified: Tue, 20 Sep 2022 00:56:03 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 23:58:54 GMT
ETag: "63290fa3-c2fb"
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qe9gA9PdOBYaANxcYyLRaji4WK4JzxlXgpb2QE0pBZu6g1_SRmzqbw==
Age: 55416
Vary: Accept-Encoding, Origin
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg
IP 34.120.237.76:0
Hash 75d26c0358588ad6e950bfc967b60a5a
6915d4c8dc0c2b1b9d76cb44399fd9388a80e124
528223965c35b9f25dc12aa5d7b3191b78cda88831924bb3d7c533e3334c02cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1go6MAGUUThlH59lQ8FRciYwPrzYJbcTKlNPmzqxNWynDV7SHrwmTw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 05:47:40 GMT
age: 65474
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img2.xiangbinjun.com/new/202201/HEY_20220422.jpg
54.230.111.89200 OK 357 kB URL HTTP/1.1 img2.xiangbinjun.com/new/202201/HEY_20220422.jpg
IP 54.230.111.89:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x526, components 3\012- data
Size 357 kB (356774 bytes)
Hash c57099d6cc75101197977b14759c4f9f
858dcfbbca8eb123037299c3edb47f3e5881a1d0
feec12f1f32220a6c4960c64b4a7922c580adc538dbbfa2694db380230fb12c8
GET /new/202201/HEY_20220422.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 356774
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:17 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 04:23:05 GMT
ETag: "62975b25-571a6"
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Zz9ZV_A7iZZAXOJsYrAFNS5gYigWdlhvCHmgZq4PoA9ZFgPv_QtxWQ==
Age: 70548
Vary: Accept-Encoding, Origin
imagetupian.nypd520.com/uploads/2022/01/220620ym373.jpg
54.230.111.65200 OK 58 kB URL HTTP/1.1 imagetupian.nypd520.com/uploads/2022/01/220620ym373.jpg
IP 54.230.111.65:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 840x452, components 3\012- data
Hash aa79d6c70441bb9a6b2739329b1f7180
59d213a365091781c7538039350240e5f8b65fcc
0a506a3a490cd1144029f194042fbe703e361bd90c7a08498fdb5d6432160868
GET /uploads/2022/01/220620ym373.jpg HTTP/1.1
Host: imagetupian.nypd520.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 58390
Connection: keep-alive
Server: X
Last-Modified: Tue, 20 Sep 2022 00:56:03 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 23:58:54 GMT
ETag: "63290fa3-e416"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: S8H3KkDXmFkvC2zJqIqbcCzBdJvN05mpBMWujtOVfj_TYz21b1PGSg==
Age: 10379
Vary: Accept-Encoding, Origin
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg
IP 34.120.237.76:0
Hash a67195a030a8c03ffafc258a806c172c
9dc6a1dbc1031846f489b0efe8d32c62a70677da
13b66d10524a4cf52b16770881cd11f50fa5baa6c1224b4ec02ccac8d40ee8ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14896
x-amzn-requestid: 58d94b15-dce0-44c0-96b1-917f1206a39e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnA4RFkeoAMFfGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c4834-7c1667b53795d5c11a3bfdda;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:11:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gKrU6wAuRsrr4_VwxjHIsTHjAB_L3xy6VQPRFBTUrK4vd7ycP3kyig==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:46:26 GMT
age: 58348
etag: "63b6efc98cb04228d82ac28fceb97bb1cf8d82fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash 3c56ac527cf2019c0f0b9568f148de6c
a9d1aaa46261f94efe60ef00be5c0af965301e4a
2d9bf20e5b1d384ed6655e2d32a10c23a669bfffd39c5217efc661c23fa6ba41
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Dec 2022 20:58:11 GMT
ETag: "a9d1aaa46261f94efe60ef00be5c0af965301e4a"
Last-Modified: Tue, 06 Dec 2022 20:58:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 658
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7758f8e92e67b503-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash 3c56ac527cf2019c0f0b9568f148de6c
a9d1aaa46261f94efe60ef00be5c0af965301e4a
2d9bf20e5b1d384ed6655e2d32a10c23a669bfffd39c5217efc661c23fa6ba41
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Dec 2022 20:58:11 GMT
ETag: "a9d1aaa46261f94efe60ef00be5c0af965301e4a"
Last-Modified: Tue, 06 Dec 2022 20:58:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 658
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7758f8e92db50afe-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash 3c56ac527cf2019c0f0b9568f148de6c
a9d1aaa46261f94efe60ef00be5c0af965301e4a
2d9bf20e5b1d384ed6655e2d32a10c23a669bfffd39c5217efc661c23fa6ba41
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Dec 2022 20:58:11 GMT
ETag: "a9d1aaa46261f94efe60ef00be5c0af965301e4a"
Last-Modified: Tue, 06 Dec 2022 20:58:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 658
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7758f8e92e18b511-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9257f2e3b9bd1b3aa262b0f4bf57968
4bcdd6ecd63834aa1010faf19457a97f37ae99fa
9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 03:29:42 GMT
age: 73752
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a7ee62c5e846e8ad4808f4724f15146d
6d55b299f906908309f91eaf0a720ad65866db04
0d8f51d6f7f3bad4bb9d9c3000999739147f6dd718b290b0dca71a4cba85cb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6846
x-amzn-requestid: 53452103-6559-460c-ac40-4685e6816aa4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGx4E-mIAMFatg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a5-5327ec9a2f247cc91654df80;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Znjnq24wuXoi43Bfc9aPdcUHhMh-a00hSCXUHFpHq3sTtQQoUYe6Uw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:29:49 GMT
age: 59345
etag: "6d55b299f906908309f91eaf0a720ad65866db04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash fb233d8a9190f1b110f3c5de66d6f06d
39f919623d91151fd91d52e1e0352a84108311c5
0232b2e58dd12700e059d4e855e490d844c00827a898f083292374742b6c4f9c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 01:20:35 GMT
Expires: Mon, 12 Dec 2022 01:20:34 GMT
Etag: "39f919623d91151fd91d52e1e0352a84108311c5"
Cache-Control: max-age=436299,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8e92bdb0af6-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash 3c56ac527cf2019c0f0b9568f148de6c
a9d1aaa46261f94efe60ef00be5c0af965301e4a
2d9bf20e5b1d384ed6655e2d32a10c23a669bfffd39c5217efc661c23fa6ba41
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Dec 2022 20:58:11 GMT
ETag: "a9d1aaa46261f94efe60ef00be5c0af965301e4a"
Last-Modified: Tue, 06 Dec 2022 20:58:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 658
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7758f8e98e9fb503-OSL
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 0efe68c3c60263479bd6ebd1c5038454
4de56cba4c3018183d493fe237c0d266024c8f10
36a7a542df2ce8face3a6353f3473cd4fba0dfc2752cc78d09ad44327959972e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36A7A542DF2CE8FACE3A6353F3473CD4FBA0DFC2752CC78D09AD44327959972E"
Last-Modified: Tue, 06 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21554
Expires: Wed, 07 Dec 2022 05:58:09 GMT
Date: Tue, 06 Dec 2022 23:58:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0efe68c3c60263479bd6ebd1c5038454
4de56cba4c3018183d493fe237c0d266024c8f10
36a7a542df2ce8face3a6353f3473cd4fba0dfc2752cc78d09ad44327959972e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36A7A542DF2CE8FACE3A6353F3473CD4FBA0DFC2752CC78D09AD44327959972E"
Last-Modified: Tue, 06 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21571
Expires: Wed, 07 Dec 2022 05:58:26 GMT
Date: Tue, 06 Dec 2022 23:58:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d941e4b429e7194975f119861ba223d8
7c5c72f09f36cddec24f85744174d887aa073b89
c69534a25b6cc4d73e844945cedc363f0c33301bfce7fad612cebdc8eb0a03f8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C69534A25B6CC4D73E844945CEDC363F0C33301BFCE7FAD612CEBDC8EB0A03F8"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6144
Expires: Wed, 07 Dec 2022 01:41:19 GMT
Date: Tue, 06 Dec 2022 23:58:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d941e4b429e7194975f119861ba223d8
7c5c72f09f36cddec24f85744174d887aa073b89
c69534a25b6cc4d73e844945cedc363f0c33301bfce7fad612cebdc8eb0a03f8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C69534A25B6CC4D73E844945CEDC363F0C33301BFCE7FAD612CEBDC8EB0A03F8"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6144
Expires: Wed, 07 Dec 2022 01:41:19 GMT
Date: Tue, 06 Dec 2022 23:58:55 GMT
Connection: keep-alive
sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894599409102.gif
52.184.85.118200 OK 252 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894599409102.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 252 kB (251962 bytes)
Hash feb5419ef22c0a10470f6cfe2b0f1517
412e6b8e6f4244071851549b9d5ba5fdf9a5b631
d889e702650ec0543cef9a6d281f576366872f31463f3b707498aac5cef2ae07
GET /static/uploads/image/x22/20221004/1664894599409102.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:53:20 GMT
ETag: "1670086400"
Expires: Mon, 02 Jan 2023 16:53:20 GMT
Last-Modified: Sat, 03 Dec 2022 16:53:20 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash f17bfce53c2e80a22d5ca105ec073846
55a4fff5df59c8005a00a680cf6d739d16590d51
a7387acb643545327ea4d5ed8dac80efe2a6d90a9dcaa89e97e453b97bf3138b
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:55 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 07:25:43 GMT
Expires: Sun, 11 Dec 2022 07:25:42 GMT
Etag: "55a4fff5df59c8005a00a680cf6d739d16590d51"
Cache-Control: max-age=371806,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8e9ec031c12-OSL
statuse.digitalcertvalidation.com/
93.184.220.29200 OK 471 B URL HTTP/1.1 statuse.digitalcertvalidation.com/
IP 93.184.220.29:0
Hash 679ef710f22a7e128e92e78fb36dc370
19eb1da6d389c623711d34c3b3eb38ed608ba809
c16d5f033a5010ea978e01f31ac4dad6de25ec586865057169d1bc69d562d21d
POST / HTTP/1.1
Host: statuse.digitalcertvalidation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:58:55 GMT
Etag: "638e7284-1d7"
Server: ECS (amb/6BAB)
Content-Length: 471
sysupload.csiteadmin.com/static/uploads/image/x51/20221111/1668166428315380.gif
52.184.85.118200 OK 212 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x51/20221111/1668166428315380.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 212 kB (211695 bytes)
Hash 0b39ec7c3e074e11a5629819f3aa4700
df59dbbb9d99b72d01f518d9c8484cd188440f0f
f89a04cd56e853388cad8b34084879771c6f49885033bb0a5c51402e60d468c8
GET /static/uploads/image/x51/20221111/1668166428315380.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Fri, 11 Nov 2022 11:33:51 GMT
ETag: "1668166431"
Expires: Sun, 11 Dec 2022 11:33:51 GMT
Last-Modified: Fri, 11 Nov 2022 11:33:51 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d941e4b429e7194975f119861ba223d8
7c5c72f09f36cddec24f85744174d887aa073b89
c69534a25b6cc4d73e844945cedc363f0c33301bfce7fad612cebdc8eb0a03f8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C69534A25B6CC4D73E844945CEDC363F0C33301BFCE7FAD612CEBDC8EB0A03F8"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6105
Expires: Wed, 07 Dec 2022 01:40:40 GMT
Date: Tue, 06 Dec 2022 23:58:55 GMT
Connection: keep-alive
sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894256451036.gif
52.184.85.118200 OK 259 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894256451036.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 259 kB (258804 bytes)
Hash 70649fd49138ca6897fe0c9365470117
f0cbcec39497ab084adb72c03a6225c2144c6866
48f51d425b1ad9363336bc2edf9009cbfd17d0c24f817fe60fec9e6ed258e5b0
GET /static/uploads/image/x22/20221004/1664894256451036.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:12:37 GMT
ETag: "1670083957"
Expires: Mon, 02 Jan 2023 16:12:37 GMT
Last-Modified: Sat, 03 Dec 2022 16:12:37 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894417817771.gif
52.184.85.118200 OK 212 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894417817771.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 212 kB (212163 bytes)
Hash 14c76e87c5da9f7226cf412026035c9d
a6cbebd6fd70a1975c7900dbacea379c7722bf94
b1cd2e21b685362b7688cc2444535ff135de009483da19cb9b5de4a0624eb9a4
GET /static/uploads/image/x22/20221004/1664894417817771.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:53:20 GMT
ETag: "1670086400"
Expires: Mon, 02 Jan 2023 16:53:20 GMT
Last-Modified: Sat, 03 Dec 2022 16:53:20 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
api.9ccmsapi.com/boss/20190928.js
154.23.238.46200 OK 341 B URL HTTP/2 api.9ccmsapi.com/boss/20190928.js
IP 154.23.238.46:0
ASN #140224 STARCLOUD GLOBAL PTE., LTD.
File type ASCII text, with CRLF line terminators
Hash 155a2200839938056a709a6c93055fce
e3281311bf17b9a4e3ee828b499821c41f8d3dab
da3025eab8247578f8f3d3d29efb112cdfcfde7e8ac9d7d191b512516267cd44
GET /boss/20190928.js HTTP/1.1
Host: api.9ccmsapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: application/javascript
content-length: 341
last-modified: Mon, 23 Nov 2020 09:42:52 GMT
etag: "5fbb841c-155"
expires: Wed, 07 Dec 2022 11:58:55 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
sysupload.csiteadmin.com/static/uploads/image/x26/20221004/1664894243920576.gif
52.184.85.118200 OK 133 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x26/20221004/1664894243920576.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 133 kB (133073 bytes)
Hash f44f18314d520e89498d1f67557c2697
bbdd1041f6be7316f0a565d525761a902959b6e6
303b74f93a5d4a4d3232e66f67e7e0f3f7a034495afdb766585e1aef792bded8
GET /static/uploads/image/x26/20221004/1664894243920576.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:53:21 GMT
ETag: "1670086401"
Expires: Mon, 02 Jan 2023 16:53:21 GMT
Last-Modified: Sat, 03 Dec 2022 16:53:21 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x26/20221004/1664894286620122.gif
52.184.85.118200 OK 132 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x26/20221004/1664894286620122.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 132 kB (131724 bytes)
Hash 6815a174b1da262bb85e17910991d3ed
cbf03ab57a46f9301dac7cd0f7cf99c777b686c7
d0089533769022907251b9dd2fbd0c51fbd14b1326dda3cc2d990c1931fabc01
GET /static/uploads/image/x26/20221004/1664894286620122.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:53:21 GMT
ETag: "1670086401"
Expires: Mon, 02 Jan 2023 16:53:21 GMT
Last-Modified: Sat, 03 Dec 2022 16:53:21 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x26/20221004/1664894189710457.gif
52.184.85.118200 OK 261 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x26/20221004/1664894189710457.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 261 kB (261015 bytes)
Hash 68ca80e6c19384277e66f07f304b6ed7
680dea475bf73401cd981b5d64f81a23c5536fed
cdbf4e9a6e9fd6b14415c2039f70aef83ec4067c4d82510246096432cd8b93a8
GET /static/uploads/image/x26/20221004/1664894189710457.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:53:21 GMT
ETag: "1670086402"
Expires: Mon, 02 Jan 2023 16:53:21 GMT
Last-Modified: Sat, 03 Dec 2022 16:53:22 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894518194257.gif
52.184.85.118200 OK 279 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894518194257.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 279 kB (278909 bytes)
Hash cbbb3d8ff70b59b11fd1182f7e5d77e9
06af5df2b2aeaa07b578979ee331b52e1f298323
f62a633b62c1dea5bca396206d4956bf14db30141e6e524bf3a00e3588c1c893
GET /static/uploads/image/x22/20221004/1664894518194257.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:11:45 GMT
ETag: "1670083905"
Expires: Mon, 02 Jan 2023 16:11:45 GMT
Last-Modified: Sat, 03 Dec 2022 16:11:45 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894380503898.gif
52.184.85.118200 OK 245 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894380503898.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 245 kB (245365 bytes)
Hash 15b01b59267acae7726f30675e79d8bf
7449390411869cdc7b1b4ae6bee7e4fb7e893675
3c17fb36844b4fc9ead50ffc421dba8367ff08b4e307195f72323a2d9edec46d
GET /static/uploads/image/x22/20221004/1664894380503898.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:53:20 GMT
ETag: "1670086400"
Expires: Mon, 02 Jan 2023 16:53:20 GMT
Last-Modified: Sat, 03 Dec 2022 16:53:20 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894322248517.gif
52.184.85.118200 OK 258 kB URL HTTP/1.1 sysupload.csiteadmin.com/static/uploads/image/x22/20221004/1664894322248517.gif
IP 52.184.85.118:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 258 kB (257993 bytes)
Hash 038ba2e11d90524678f7762f4628513f
a41054637ff263d13570f7eec83a3286957edc80
51d5f69d306345589b0c376bcff99c50c48bda07e3d61a5d3c1a96181acefa71
GET /static/uploads/image/x22/20221004/1664894322248517.gif HTTP/1.1
Host: sysupload.csiteadmin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Encoding: gzip
Content-Type: image/gif
Date: Sat, 03 Dec 2022 16:53:20 GMT
ETag: "1670086400"
Expires: Mon, 02 Jan 2023 16:53:20 GMT
Last-Modified: Sat, 03 Dec 2022 16:53:20 GMT
Server: nginx
Vary: Accept-Encoding
X-Cache: HIT, server, disk
Transfer-Encoding: chunked
r3.o.lencr.org/
23.36.76.226200 OK 839 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16e954f3bf58ba09e29a24bfb0a6eaf5
38c6414d7e313aa11e2fce731c5cd0e6e8d7f4b6
939f3c1efe830e4e9f63b16f40080a5bdb83970b4b3bf8579e787e1acff51af7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D11C648A6774FF846304462D1ED549792BA1FDA2602658CF9CA477DBDE9F4FC"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16289
Expires: Wed, 07 Dec 2022 04:30:24 GMT
Date: Tue, 06 Dec 2022 23:58:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c3243f8e19cb182b8f2d5f187bb87b1a
88642653f276c069fcfb342c837bcb0c764860d1
1c4bc0b69d3926504d1dace6396b708caf6aa1a24bc9d66e5221e02ba312af71
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C4BC0B69D3926504D1DACE6396B708CAF6AA1A24BC9D66E5221E02BA312AF71"
Last-Modified: Tue, 06 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21544
Expires: Wed, 07 Dec 2022 05:57:59 GMT
Date: Tue, 06 Dec 2022 23:58:55 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 0f16558350cdc0791ab380ce4cd55636
7a1654c58ed6498272e499839d14aa99909199e8
6162272254439de90561c9a5529ea309b8d2dbd2522299ec26ca6fed6afe4532
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5895
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:58:55 GMT
Etag: "638e68b8-2d7"
Last-Modified: Tue, 06 Dec 2022 22:20:40 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 0f16558350cdc0791ab380ce4cd55636
7a1654c58ed6498272e499839d14aa99909199e8
6162272254439de90561c9a5529ea309b8d2dbd2522299ec26ca6fed6afe4532
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5895
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:58:55 GMT
Etag: "638e68b8-2d7"
Last-Modified: Tue, 06 Dec 2022 22:20:40 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727
img2.xiangbinjun.com/new/202201/carib_040822-001.jpg
54.230.111.89200 OK 727 B URL HTTP/1.1 img2.xiangbinjun.com/new/202201/carib_040822-001.jpg
IP 54.230.111.89:0
Hash 0f16558350cdc0791ab380ce4cd55636
7a1654c58ed6498272e499839d14aa99909199e8
6162272254439de90561c9a5529ea309b8d2dbd2522299ec26ca6fed6afe4532
GET /new/202201/carib_040822-001.jpg HTTP/1.1
Host: img2.xiangbinjun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 357492
Connection: keep-alive
Server: X
Last-Modified: Wed, 01 Jun 2022 12:27:07 GMT
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 03:23:42 GMT
ETag: "62975b1b-57474"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: k4CA8AfAg2OGZkmRf7YLJU3k-p9gVcPjnHvm_s2byvQO6KbXd2RQlA==
Age: 74112
Vary: Accept-Encoding, Origin
p3.douyinpic.com/obj/tos-cn-i-dy/1594d44b66f44b5786a2f0f9e6cb6498
47.246.44.225200 OK 530 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/1594d44b66f44b5786a2f0f9e6cb6498
IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 1200 x 60\012- data
Size 530 kB (530369 bytes)
Hash 40200e8020168e6078b996c76c10229f
d36d2d65417d87733e8323ef5229dec7d9bb9d4d
4f047d792deccfb5200da5f744384ffab69f05cd0ec29dd653d34adde864d662
GET /obj/tos-cn-i-dy/1594d44b66f44b5786a2f0f9e6cb6498 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 530369
date: Mon, 05 Dec 2022 14:10:29 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 05 Dec 2022 12:31:42 GMT
nw-session-id: 2022120520314201015013814519D80398v8j9r02dy
nw-session-trace: 2022-12-05T20:31:42.82947968+08:00 46
x-bdcdn-cache-status: TCP_HIT
x-length: 530369
x-powered-by: ImageX
x-response-date: Mon, 05 Dec 2022 20:31:42 GMT
x-tt-logid: 2022120520314201015013814519D80398
via: n150-056-076, cache9.l2de2[0,0,206-0,H], cache14.l2de2[2,0], cache14.l2de2[3,0], cache4.se1[0,0,200-0,H], cache2.se1[1,0]
x-request-ip: fdbd:dc02:22:591::130
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 0142024916ff5549603e3559a534de93537c07793497ad620a5d85fcae5661ac516c8a053f0b2102e88249de909499b42aeb325f8ef5a628c6719a49058f78bfe187c4c226fcc353b6ae621edee46633aab59a0c6cb6db7fe99fc8a8329f340cd5
x-response-lb: image
ali-swift-global-savetime: 1670249429
age: 121706
x-cache: HIT TCP_MEM_HIT dirn:4:17372561 mlen:0
x-swift-savetime: Mon, 05 Dec 2022 14:16:16 GMT
x-swift-cachetime: 31535653
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9616703711358474935e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/f327edf63f3b4f2fba01918715cb788f
47.246.44.225200 OK 167 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/f327edf63f3b4f2fba01918715cb788f
IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 150 x 150\012- data
Size 167 kB (166626 bytes)
Hash a644e0164396e4fab83828dd224e899e
5d7970fc6ec361828598b3281945670c1ac09202
6a150be88eddb354b86cc1c37d056ee539740012b23692641c7e5d6bfe1029be
GET /obj/tos-cn-i-dy/f327edf63f3b4f2fba01918715cb788f HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 166626
date: Mon, 21 Nov 2022 17:19:20 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 21 Nov 2022 15:23:20 GMT
nw-session-id: 202211212323200102090950663897DABFvw47p01dy
nw-session-trace: 2022-11-21T23:23:20.512581933+08:00 48
x-bdcdn-cache-status: TCP_HIT
x-length: 166626
x-powered-by: ImageX
x-response-date: Mon, 21 Nov 2022 23:23:20 GMT
x-tt-logid: 202211212323200102090950663897DABF
via: n204-099-037, cache3.l2de2[247,247,206-0,M], cache1.l2de2[249,0], cache1.l2de2[250,0], cache1.se1[0,0,200-0,H], cache2.se1[1,0]
x-request-ip: fdbd:dc01:25:582::100
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 01da97ec4b2fe38aaf9b0b49dd2f3c6333b1ad4015bf6eba9eee927a4865b0b87216d4d4d7e260bfaf468808c4e53be90561b429ae83a559d674bb58060d71d92af793897f9db484a5b4470fd29343ef9d2e04c0288ca6ff888e064ce1511ccfb7
x-response-lb: image
ali-swift-global-savetime: 1669051160
age: 1319975
x-cache: HIT TCP_HIT dirn:11:123258691
x-swift-savetime: Mon, 21 Nov 2022 17:19:20 GMT
x-swift-cachetime: 31536000
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9616703711358584941e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/79c0b1bf91414608a7b59ad7dfa6fd6e
47.246.44.225200 OK 1.7 MB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/79c0b1bf91414608a7b59ad7dfa6fd6e
IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 600 x 200\012- data
Size 1.7 MB (1687977 bytes)
Hash 7ac5ffa2ea364d08dbe79c699f41b291
ef8decd855fd5ed8079fa642b2ad74a16f3660d2
b7b60b74bd27eee69d4b80207a44d72532089b43b8ac4d0196eecc44c166e3b9
GET /obj/tos-cn-i-dy/79c0b1bf91414608a7b59ad7dfa6fd6e HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 1687977
date: Fri, 21 Oct 2022 12:21:27 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Fri, 21 Oct 2022 12:21:27 GMT
nw-session-id: 202210212021260102081741600967F2CBfffsf02dy
nw-session-trace: 2022-10-21T20:21:27.048635671+08:00 60
x-bdcdn-cache-status: TCP_MISS
x-length: 1687977
x-powered-by: ImageX
x-response-date: Fri, 21 Oct 2022 20:21:27 GMT
x-tt-logid: 202210212021260102081741600967F2CB
via: n204-100-101, cache11.l2de2[0,42,206-0,H], cache6.l2de2[44,0], cache6.l2de2[44,0], cache8.se1[0,0,200-0,H], cache2.se1[0,0]
x-request-ip: fdbd:dc01:25:635::160
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=0
x-tt-trace-host: 018a42cae4ec1a04764b05f312506df93b8bdf70bc433941d6b952e262d1cb469e92074ce2cc2805fa9f5bec8b54166a01ce3ef41b62bc37c05f69891015917481c00363bf5e2e270cd58f99d3de8c6766a22c23e07b1448dc4cbdcc4533888f9a
x-response-lb: image
ali-swift-global-savetime: 1666354887
age: 4016248
x-cache: HIT TCP_MEM_HIT dirn:-2:-2 mlen:0
x-swift-savetime: Thu, 03 Nov 2022 10:27:14 GMT
x-swift-cachetime: 30419653
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9616703711358614945e
X-Firefox-Spdy: h2
8499159.com/8499/s/960x60.gif
172.247.50.226200 OK 331 kB URL HTTP/2 8499159.com/8499/s/960x60.gif
IP 172.247.50.226:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 331 kB (331043 bytes)
Hash 09f29e56330449942571a66f47f82fb5
30fc3421671176f6f724f32ee910470f03661ddc
b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
GET /8499/s/960x60.gif HTTP/1.1
Host: 8499159.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 331043
last-modified: Wed, 09 Nov 2022 06:23:10 GMT
etag: "50d23-5ed03b0c9c3d8"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?a89207277c97474e61d6e7942b61562f
103.235.46.191200 OK 12 kB URL HTTP/1.1 hm.baidu.com/hm.js?a89207277c97474e61d6e7942b61562f
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash 951c81c15ac77d368246519d01891087
09bcd438230b375435930fa6234cb145b9f56231
ebef8c2d4877e5d547b2a5c9ebd8f211fbfb1095a31726a517e01eeaf9c3bcda
GET /hm.js?a89207277c97474e61d6e7942b61562f HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Tue, 06 Dec 2022 23:58:55 GMT
Etag: 92b5b0199c2205b2c3abc95f7f74b09e
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A3D40945E3D139DF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
i2.100024.xyz/2022/11/04/12jbm4y.gif
100.42.234.44200 OK 71 kB URL HTTP/2 i2.100024.xyz/2022/11/04/12jbm4y.gif
IP 100.42.234.44:0
File type GIF image data, version 89a, 100 x 100\012- data
Hash 8ccebe5f6daf2cc57ef37857ea3a3f57
ccc0c9e01c9d35d01fc31cef1fb246dccbfe5f87
462d410240540391f57d81132bdd1a9395317e16306f1750e6269d6efe3535b5
GET /2022/11/04/12jbm4y.gif HTTP/1.1
Host: i2.100024.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 71015
last-modified: Fri, 04 Nov 2022 15:30:16 GMT
etag: "63653008-11567"
expires: Thu, 05 Jan 2023 23:58:55 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash fd59282a6a2ebd4c70c908452ebe4ae1
e476469c081b5fd97d15e3839f739299d32f1cf6
e58c81242cbd9ea6fdcd10fd357cdbf03f45ee38ed00aa4355b840f6e5c024c3
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:56 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 06:26:41 GMT
Expires: Tue, 13 Dec 2022 06:26:40 GMT
Etag: "e476469c081b5fd97d15e3839f739299d32f1cf6"
Cache-Control: max-age=541063,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8f199f5b4f3-OSL
i2.100024.xyz/2022/11/04/12jdf0m.gif
100.42.234.44200 OK 397 kB URL HTTP/2 i2.100024.xyz/2022/11/04/12jdf0m.gif
IP 100.42.234.44:0
File type GIF image data, version 89a, 320 x 180\012- data
Size 397 kB (396964 bytes)
Hash 7b42e791e269b8425a0f380efdd8e5fd
10c09c8f711478c7aeccc988c076d299fafcbbfa
00ef96678470106e95be9f6f4dc07debbbb63a96db839adbf17e5e04e27caf60
GET /2022/11/04/12jdf0m.gif HTTP/1.1
Host: i2.100024.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 396964
last-modified: Fri, 04 Nov 2022 15:30:25 GMT
etag: "63653011-60ea4"
expires: Thu, 05 Jan 2023 23:58:55 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?36e27e4272562610f143408b40baea1f
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?36e27e4272562610f143408b40baea1f
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (618)
Hash 59962e41b0287a3f84e0c52ccce33195
d2ab88731252ccd57b8e26158e7617846e446e49
b7e96ca60eeb0d51c25f986c088f04e24390b5ecc30f9088b4670134737f2deb
GET /hm.js?36e27e4272562610f143408b40baea1f HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Content-Type: application/javascript
Date: Tue, 06 Dec 2022 23:58:55 GMT
Etag: df16d9fcbe2abce4f92c3005cd656212
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=D80AD6DDF11298F7; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash fd59282a6a2ebd4c70c908452ebe4ae1
e476469c081b5fd97d15e3839f739299d32f1cf6
e58c81242cbd9ea6fdcd10fd357cdbf03f45ee38ed00aa4355b840f6e5c024c3
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:56 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 06:26:41 GMT
Expires: Tue, 13 Dec 2022 06:26:40 GMT
Etag: "e476469c081b5fd97d15e3839f739299d32f1cf6"
Cache-Control: max-age=541063,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8f19fc5b4f7-OSL
i2.100024.xyz/2022/11/04/12jcqp9.gif
100.42.234.44200 OK 1.6 MB URL HTTP/2 i2.100024.xyz/2022/11/04/12jcqp9.gif
IP 100.42.234.44:0
File type GIF image data, version 89a, 500 x 281\012- data
Size 1.6 MB (1626999 bytes)
Hash 17244f3a8b60a0f7b291f5621c873713
c523f5d5b60d2eabc9084e9ba5803647ac08c2cd
4aed8c090aa7bff3de4c028efced6a87dd7645bc15d265cdddf106f3f5dd9435
GET /2022/11/04/12jcqp9.gif HTTP/1.1
Host: i2.100024.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 1626999
last-modified: Fri, 04 Nov 2022 15:30:22 GMT
etag: "6365300e-18d377"
expires: Thu, 05 Jan 2023 23:58:55 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1951356360&si=a89207277c97474e61d6e7942b61562f&su=http%3A%2F%2Fwww.zyktbj.com%2F&v=1.3.0&lv=1&sn=15056&r=0&ww=1268&u=https%3A%2F%2Fwww.99mt5.cc%2F&tt=%E7%88%B1%E5%95%AA%E5%90%A7%EF%BC%B7%EF%BC%B7%EF%BC%B7%EF%BC%8E%EF%BC%99%EF%BC%99%EF%BC%AD%EF%BC%B4%EF%BC%95%EF%BC%8E%EF%BC%A3%EF%BC%A3
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1951356360&si=a89207277c97474e61d6e7942b61562f&su=http%3A%2F%2Fwww.zyktbj.com%2F&v=1.3.0&lv=1&sn=15056&r=0&ww=1268&u=https%3A%2F%2Fwww.99mt5.cc%2F&tt=%E7%88%B1%E5%95%AA%E5%90%A7%EF%BC%B7%EF%BC%B7%EF%BC%B7%EF%BC%8E%EF%BC%99%EF%BC%99%EF%BC%AD%EF%BC%B4%EF%BC%95%EF%BC%8E%EF%BC%A3%EF%BC%A3
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1951356360&si=a89207277c97474e61d6e7942b61562f&su=http%3A%2F%2Fwww.zyktbj.com%2F&v=1.3.0&lv=1&sn=15056&r=0&ww=1268&u=https%3A%2F%2Fwww.99mt5.cc%2F&tt=%E7%88%B1%E5%95%AA%E5%90%A7%EF%BC%B7%EF%BC%B7%EF%BC%B7%EF%BC%8E%EF%BC%99%EF%BC%99%EF%BC%AD%EF%BC%B4%EF%BC%95%EF%BC%8E%EF%BC%A3%EF%BC%A3 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 06 Dec 2022 23:58:56 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=DDB07FD46577A342; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
i2.100024.xyz/2022/11/04/12jcf2d.gif
100.42.234.44200 OK 1.2 MB URL HTTP/2 i2.100024.xyz/2022/11/04/12jcf2d.gif
IP 100.42.234.44:0
File type GIF image data, version 89a, 600 x 400\012- data
Size 1.2 MB (1165357 bytes)
Hash efbb325cbffa3a7962310cd3068c75ce
a0f92fda48cd12bcce828638c4b20a30d48625bc
55f627af006faad83cc702ba57b19f6d9dde25a9abe06dc222a09297bc796984
GET /2022/11/04/12jcf2d.gif HTTP/1.1
Host: i2.100024.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 1165357
last-modified: Fri, 04 Nov 2022 15:30:20 GMT
etag: "6365300c-11c82d"
expires: Thu, 05 Jan 2023 23:58:55 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=696355799&si=36e27e4272562610f143408b40baea1f&su=http%3A%2F%2Fwww.zyktbj.com%2F&v=1.3.0&lv=1&sn=15056&r=0&ww=1268&u=https%3A%2F%2Fwww.99mt5.cc%2F&tt=%E7%88%B1%E5%95%AA%E5%90%A7%EF%BC%B7%EF%BC%B7%EF%BC%B7%EF%BC%8E%EF%BC%99%EF%BC%99%EF%BC%AD%EF%BC%B4%EF%BC%95%EF%BC%8E%EF%BC%A3%EF%BC%A3
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=696355799&si=36e27e4272562610f143408b40baea1f&su=http%3A%2F%2Fwww.zyktbj.com%2F&v=1.3.0&lv=1&sn=15056&r=0&ww=1268&u=https%3A%2F%2Fwww.99mt5.cc%2F&tt=%E7%88%B1%E5%95%AA%E5%90%A7%EF%BC%B7%EF%BC%B7%EF%BC%B7%EF%BC%8E%EF%BC%99%EF%BC%99%EF%BC%AD%EF%BC%B4%EF%BC%95%EF%BC%8E%EF%BC%A3%EF%BC%A3
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=696355799&si=36e27e4272562610f143408b40baea1f&su=http%3A%2F%2Fwww.zyktbj.com%2F&v=1.3.0&lv=1&sn=15056&r=0&ww=1268&u=https%3A%2F%2Fwww.99mt5.cc%2F&tt=%E7%88%B1%E5%95%AA%E5%90%A7%EF%BC%B7%EF%BC%B7%EF%BC%B7%EF%BC%8E%EF%BC%99%EF%BC%99%EF%BC%AD%EF%BC%B4%EF%BC%95%EF%BC%8E%EF%BC%A3%EF%BC%A3 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 06 Dec 2022 23:58:56 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=F7ACCAE49524859D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
iner.mrflay.com/v2/stats/12593/158484
34.81.245.112200 OK 0 B URL HTTP/2 iner.mrflay.com/v2/stats/12593/158484
IP 34.81.245.112:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/stats/12593/158484 HTTP/1.1
Host: iner.mrflay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
x-via: catalog-xgk5
x-country: NO
server: nginx
date: Tue, 06 Dec 2022 23:58:56 GMT
x-cache: MISS
X-Firefox-Spdy: h2
998k.at/960x160.gif
185.135.77.234200 OK 1.1 MB IP 185.135.77.234:0
ASN #142591 MYTEK TRADING PTY LTD ta velolelo
File type GIF image data, version 89a, 960 x 160\012- data
Size 1.1 MB (1086086 bytes)
Hash fe1357abf524bc560d11e4af8beddaf9
175486b7fa4830246014f760a759f4aacf460b7c
fac07ee4c01eab6eeb7c10dbaca74fbfde9a4dbfc0fa88325cf32ecdc405603a
GET /960x160.gif HTTP/1.1
Host: 998k.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 1086086
last-modified: Tue, 04 Oct 2022 14:49:53 GMT
etag: "633c4811-109286"
expires: Thu, 05 Jan 2023 23:58:55 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
p.qlogo.cn/qqmail_head/PiajxSqBRaEL6CJZGYgAAMVv8Eqb0kKqmk8ZBGxSry9wDdbDrX4ZxIxycHEPiaOJdHNib4U7xBWDrs/0
43.154.254.32200 OK 331 kB URL HTTP/2 p.qlogo.cn/qqmail_head/PiajxSqBRaEL6CJZGYgAAMVv8Eqb0kKqmk8ZBGxSry9wDdbDrX4ZxIxycHEPiaOJdHNib4U7xBWDrs/0
IP 43.154.254.32:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 331 kB (331043 bytes)
Hash 09f29e56330449942571a66f47f82fb5
30fc3421671176f6f724f32ee910470f03661ddc
b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
GET /qqmail_head/PiajxSqBRaEL6CJZGYgAAMVv8Eqb0kKqmk8ZBGxSry9wDdbDrX4ZxIxycHEPiaOJdHNib4U7xBWDrs/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 331043
vary: Accept,Origin
last-modified: Tue, 08 Nov 2022 23:41:39 GMT
cache-control: max-age=2592000
x-delay: 55681 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 331043
chid: 0
fid: 0
x-nws-log-uuid: a856f622-9e48-4c76-9d95-6d46dad0795f
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 51a8b2325999d39b2acefe185d6d99d4
f6f32008e18477e12721a4ee41347a578ddbbc9b
7a58080d226a901a0d9f1cc67f79223f373304e0269a531d381ed4ca00e0e986
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 04:07:43 GMT
Expires: Tue, 13 Dec 2022 04:07:42 GMT
Etag: "f6f32008e18477e12721a4ee41347a578ddbbc9b"
Cache-Control: max-age=532724,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8f74a6e0af6-OSL
iner.mrflay.com/v2/stats/12593/158485
34.81.245.112200 OK 0 B URL HTTP/2 iner.mrflay.com/v2/stats/12593/158485
IP 34.81.245.112:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/stats/12593/158485 HTTP/1.1
Host: iner.mrflay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
x-via: catalog-xgk5
x-country: NO
server: nginx
date: Tue, 06 Dec 2022 23:58:57 GMT
x-cache: MISS
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash 33cf8afdc1bae7bd94527192e4919158
36d7f37369c96d99fdfa48dde2c33e851ebfe3e2
174e0b54b58853d14d67ebb427dc99551bae085946145a75c881384b40129645
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 20:49:42 GMT
Expires: Tue, 13 Dec 2022 20:49:41 GMT
Etag: "36d7f37369c96d99fdfa48dde2c33e851ebfe3e2"
Cache-Control: max-age=592843,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8f83d96b4f7-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash c0006cbad05ea207b07e9fc5f03b1aad
4d83fd8c3ce8b0aba76ac3102c49ad5b7f4a2c6b
0027709381eb49d990bea1ed1a09c28ff2fb668e494372c841d5db83e453c402
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 07:58:55 GMT
Expires: Sun, 11 Dec 2022 07:58:54 GMT
Etag: "4d83fd8c3ce8b0aba76ac3102c49ad5b7f4a2c6b"
Cache-Control: max-age=373796,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8f78c33b4eb-OSL
p.qlogo.cn/qqmail_head/ajNVdqHZLLCIpZtjlt7qLEoa00SraSakXGbYqqxHKPiaSuibbF22ibFtNxJ8TFrhRC81OhMia1HLCRg/0
43.154.254.32200 OK 531 kB URL HTTP/2 p.qlogo.cn/qqmail_head/ajNVdqHZLLCIpZtjlt7qLEoa00SraSakXGbYqqxHKPiaSuibbF22ibFtNxJ8TFrhRC81OhMia1HLCRg/0
IP 43.154.254.32:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 531 kB (531063 bytes)
Hash 2a98879ea49b1272d70e69f97f52a5f0
b5f0e515ab24db4e856321ad5f95c7febe18a939
a0c4c8443680a82403fa408f75e45369866080ae12f6b7ac9249386f2ba0ddb8
GET /qqmail_head/ajNVdqHZLLCIpZtjlt7qLEoa00SraSakXGbYqqxHKPiaSuibbF22ibFtNxJ8TFrhRC81OhMia1HLCRg/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
content-length: 531063
vary: Accept,Origin
last-modified: Sun, 13 Nov 2022 23:42:37 GMT
cache-control: max-age=2592000
x-delay: 54224 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 531063
chid: 0
fid: 0
x-nws-log-uuid: 29259b53-f45d-42f1-893c-801960b116c8
X-Firefox-Spdy: h2
img.thethsdnadagvx.com/bucketimg/3dcf2bd8-f87b-4651-a3cc-d89deb95d6da.gif
103.188.120.97200 OK 218 kB URL HTTP/1.1 img.thethsdnadagvx.com/bucketimg/3dcf2bd8-f87b-4651-a3cc-d89deb95d6da.gif
IP 103.188.120.97:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 218 kB (218032 bytes)
Hash 55b2b2b33e8b4a722694c9b211e863b7
7ba528d013a570c03a16bb91a803e79c26e2b867
6ae73855ea7197d90d1cadbd4abe8cbc6ccb3835c3aaa5e359eeca8d7d7fdb21
Analyzer Verdict Alert quad9 Sinkholed
GET /bucketimg/3dcf2bd8-f87b-4651-a3cc-d89deb95d6da.gif HTTP/1.1
Host: img.thethsdnadagvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: W/"78644d848ab84b47b0efd711593d0c70"
Server: nginx
Date: Tue, 06 Dec 2022 02:43:34 GMT
Content-Type: image/gif
Content-Security-Policy: block-all-mixed-content
Last-Modified: Sat, 12 Nov 2022 02:49:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding, Accept-Encoding, Origin
X-Amz-Request-Id: 172E141A34466FD7
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip
X-Cache: HIT from megai-cdn120-087
Content-Length: 218032
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash c0006cbad05ea207b07e9fc5f03b1aad
4d83fd8c3ce8b0aba76ac3102c49ad5b7f4a2c6b
0027709381eb49d990bea1ed1a09c28ff2fb668e494372c841d5db83e453c402
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 07:58:55 GMT
Expires: Sun, 11 Dec 2022 07:58:54 GMT
Etag: "4d83fd8c3ce8b0aba76ac3102c49ad5b7f4a2c6b"
Cache-Control: max-age=373796,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8f7fab50af6-OSL
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash 33cf8afdc1bae7bd94527192e4919158
36d7f37369c96d99fdfa48dde2c33e851ebfe3e2
174e0b54b58853d14d67ebb427dc99551bae085946145a75c881384b40129645
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 20:49:42 GMT
Expires: Tue, 13 Dec 2022 20:49:41 GMT
Etag: "36d7f37369c96d99fdfa48dde2c33e851ebfe3e2"
Cache-Control: max-age=592843,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758f8f82e6eb4f3-OSL
gr05j.xyz/pics/20220626-960x60.gif
43.128.50.135200 OK 290 kB URL HTTP/2 gr05j.xyz/pics/20220626-960x60.gif
IP 43.128.50.135:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 290 kB (290015 bytes)
Hash 618c09c11dab4066ac4b7138cb988cc9
61e2ac8ff158e5001420a820b037a43cfc37be04
fdd80cc6ded2ed1d0c66441d7bf90a3bb1d01e9659b545b6e19ee9d9fa8ad703
GET /pics/20220626-960x60.gif HTTP/1.1
Host: gr05j.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:58:56 GMT
content-type: image/gif
content-length: 290015
last-modified: Tue, 04 Oct 2022 11:09:40 GMT
etag: "633c1474-46cdf"
expires: Thu, 05 Jan 2023 23:24:16 GMT
cache-control: max-age=2592000
server: cdn
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
kmr.mjnbrt.xyz/mnrt/kmrr.png
23.224.92.246200 OK 85 kB URL HTTP/1.1 kmr.mjnbrt.xyz/mnrt/kmrr.png
IP 23.224.92.246:0
File type PNG image data, 2084 x 2084, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c80359bedd35432aea1539a1edcd122
62b0eb9a7eef9b048ab55e3e8d8486a43d5ef8db
74df8ccb6d42d5ee40aaffccd0246978eca881c260c8505afb9f71f85fe17ee2
GET /mnrt/kmrr.png HTTP/1.1
Host: kmr.mjnbrt.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: image/png
Content-Length: 84560
Last-Modified: Tue, 29 Nov 2022 07:32:59 GMT
Connection: keep-alive
ETag: "6385b5ab-14a50"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
gnrty.kmjkwe.xyz/nmbret/dgdrfdg.gif
23.224.92.243200 OK 62 kB URL HTTP/1.1 gnrty.kmjkwe.xyz/nmbret/dgdrfdg.gif
IP 23.224.92.243:0
File type GIF image data, version 89a, 640 x 200\012- data
Hash 7f010f95bbd3232c77d319d5c81f7a54
8c530a663f301a789414fd81a884a51bc8ee18be
c49c865ba69ac19170430cef16365312e2d734d51d1cc95957418da6ee181dca
GET /nmbret/dgdrfdg.gif HTTP/1.1
Host: gnrty.kmjkwe.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: image/gif
Content-Length: 62326
Last-Modified: Tue, 29 Nov 2022 07:29:35 GMT
Connection: keep-alive
ETag: "6385b4df-f376"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
gnrty.kmjkwe.xyz/kmnbhevhfjrtetd/d.gif
23.224.92.243200 OK 91 kB URL HTTP/1.1 gnrty.kmjkwe.xyz/kmnbhevhfjrtetd/d.gif
IP 23.224.92.243:0
File type GIF image data, version 89a, 600 x 200\012- data
Hash f32acea08cf381eb422e9fd2437bb611
57f4855043f3cb3a1e3fb80a7644ff460aac09da
6c4ff7aff5ad6cd0e5acdf8d65fcf77205e15f3fd539d5887b2164356e4a6d45
GET /kmnbhevhfjrtetd/d.gif HTTP/1.1
Host: gnrty.kmjkwe.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 06 Dec 2022 23:58:57 GMT
Content-Type: image/gif
Content-Length: 90993
Last-Modified: Tue, 29 Nov 2022 07:29:35 GMT
Connection: keep-alive
ETag: "6385b4df-16371"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
iner.mrflay.com/j/158485
34.81.245.112200 OK 0 B IP 34.81.245.112:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /j/158485 HTTP/1.1
Host: iner.mrflay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
x-via: catalog-xgk5
x-country: NO
server: nginx
date: Tue, 06 Dec 2022 23:58:56 GMT
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.99mt5.cc/
104.21.56.186200 OK 0 B IP 104.21.56.186:0
GET / HTTP/1.1
Host: www.99mt5.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.zyktbj.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:58:53 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hyybm7diAOPhDuCjwrQvRD5Ov2Nq1u4JWmm9KsXhMmr1KzV2%2BU78WzMTYtZ3BGAY8CUN9944UPxJ%2F45E16SkXKQCbW%2F8S5G8gOAeFaEBymizpQuG1jlTjV0H2f2zlO0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7758f8d65b0cb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
iner.mrflay.com/j/158484
34.81.245.112200 OK 0 B IP 34.81.245.112:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /j/158484 HTTP/1.1
Host: iner.mrflay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
x-via: catalog-xgk5
x-country: NO
server: nginx
date: Tue, 06 Dec 2022 23:58:56 GMT
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: 0
content-encoding: gzip
X-Firefox-Spdy: h2
n0533.com/5217504038144245a3ca36187ea4c383.gif
20.222.119.28200 OK 0 B URL HTTP/2 n0533.com/5217504038144245a3ca36187ea4c383.gif
IP 20.222.119.28:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /5217504038144245a3ca36187ea4c383.gif HTTP/1.1
Host: n0533.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:58:55 GMT
content-type: image/gif
vary: Accept-Encoding
last-modified: Mon, 14 Nov 2022 08:29:15 GMT
etag: W/"6371fc5b-56951"
server: WAF/2.4-12.1
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
kmef.ikjwmfeds.xyz/effect.php?type=ecv&planid=29398&adsid=5955806&zoneid=158484&uid=12593&adtplid=1001&plantype=cpv
130.211.245.205200 OK 0 B URL HTTP/2 kmef.ikjwmfeds.xyz/effect.php?type=ecv&planid=29398&adsid=5955806&zoneid=158484&uid=12593&adtplid=1001&plantype=cpv
IP 130.211.245.205:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /effect.php?type=ecv&planid=29398&adsid=5955806&zoneid=158484&uid=12593&adtplid=1001&plantype=cpv HTTP/1.1
Host: kmef.ikjwmfeds.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-via: catalog-nzmp
x-country: NO
server: nginx
date: Tue, 06 Dec 2022 23:58:57 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
img.u1555.com/images/637b68bccce1c6e2c29fecff.gif
185.239.226.87302 Found 0 B URL HTTP/2 img.u1555.com/images/637b68bccce1c6e2c29fecff.gif
IP 185.239.226.87:0
ASN #134835 Starry Network Limited
GET /images/637b68bccce1c6e2c29fecff.gif HTTP/1.1
Host: img.u1555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/f327edf63f3b4f2fba01918715cb788f
X-Firefox-Spdy: h2
link.imgapp.top/images/62c535de9493f72e6cb8d641.gif
185.239.226.87302 Found 0 B URL HTTP/2 link.imgapp.top/images/62c535de9493f72e6cb8d641.gif
IP 185.239.226.87:0
ASN #134835 Starry Network Limited
GET /images/62c535de9493f72e6cb8d641.gif HTTP/1.1
Host: link.imgapp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/79c0b1bf91414608a7b59ad7dfa6fd6e
X-Firefox-Spdy: h2
kmef.ikjwmfeds.xyz/c.php?s=JnpvbmVpZD0xNTg0ODQmc2l0ZWlkPSZ1aWQ9MTI1OTMmYWRzaWQ9NTk1NTgwNiZwbGFuaWQ9MjkzOTgmcGxhbnR5cGU9Y3B2JnVybD1odHRwcyUzQSUyRiUyRm5zZXQuaHVpY2hhbmxpYW4uY29tJTJGMjMlMkYmdnRpbWU9MjAyMi0xMi0wNyAwNzo1ODo1NiZpcD05MS45MC40Mi4xNTQ=;230fd2542d0367bc76d6b32b690721e6;&srccpv=yes&jm=1&b=0;0&g=0;0&p=cj1odHRwJTNBJTJGJTJGd3d3Lnp5a3Riai5jb20lMkYmeD0xOzs1MDQ1MjYxNDk7TGludXggeDg2XzY0Ozs7MTY7MjQmaz0mc2U9MiZmPTAmdT1odHRwcyUzQSUyRiUyRnd3dy45OW10NS5jYyUyRiZqPTAmcD0wJm09MCZyZXM9MTI4MHgxMDI0JnQ9JUU3JTg4JUIxJUU1JTk1JUFBJUU1JTkwJUE3JUVGJUJDJUI3JUVGJUJDJUI3JUVGJUJDJUI3JUVGJUJDJThFJUVGJUJDJTk5JUVGJUJDJTk5JUVGJUJDJUFEJUVGJUJDJUI0JUVGJUJDJTk1JUVGJUJDJThFJUVGJUJDJUEzJUVGJUJDJUEzJmw9ZW4tVVMmYz0wJmg9OTI3
130.211.245.205200 OK 0 B URL HTTP/2 kmef.ikjwmfeds.xyz/c.php?s=JnpvbmVpZD0xNTg0ODQmc2l0ZWlkPSZ1aWQ9MTI1OTMmYWRzaWQ9NTk1NTgwNiZwbGFuaWQ9MjkzOTgmcGxhbnR5cGU9Y3B2JnVybD1odHRwcyUzQSUyRiUyRm5zZXQuaHVpY2hhbmxpYW4uY29tJTJGMjMlMkYmdnRpbWU9MjAyMi0xMi0wNyAwNzo1ODo1NiZpcD05MS45MC40Mi4xNTQ=;230fd2542d0367bc76d6b32b690721e6;&srccpv=yes&jm=1&b=0;0&g=0;0&p=cj1odHRwJTNBJTJGJTJGd3d3Lnp5a3Riai5jb20lMkYmeD0xOzs1MDQ1MjYxNDk7TGludXggeDg2XzY0Ozs7MTY7MjQmaz0mc2U9MiZmPTAmdT1odHRwcyUzQSUyRiUyRnd3dy45OW10NS5jYyUyRiZqPTAmcD0wJm09MCZyZXM9MTI4MHgxMDI0JnQ9JUU3JTg4JUIxJUU1JTk1JUFBJUU1JTkwJUE3JUVGJUJDJUI3JUVGJUJDJUI3JUVGJUJDJUI3JUVGJUJDJThFJUVGJUJDJTk5JUVGJUJDJTk5JUVGJUJDJUFEJUVGJUJDJUI0JUVGJUJDJTk1JUVGJUJDJThFJUVGJUJDJUEzJUVGJUJDJUEzJmw9ZW4tVVMmYz0wJmg9OTI3
IP 130.211.245.205:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
GET /c.php?s=JnpvbmVpZD0xNTg0ODQmc2l0ZWlkPSZ1aWQ9MTI1OTMmYWRzaWQ9NTk1NTgwNiZwbGFuaWQ9MjkzOTgmcGxhbnR5cGU9Y3B2JnVybD1odHRwcyUzQSUyRiUyRm5zZXQuaHVpY2hhbmxpYW4uY29tJTJGMjMlMkYmdnRpbWU9MjAyMi0xMi0wNyAwNzo1ODo1NiZpcD05MS45MC40Mi4xNTQ=;230fd2542d0367bc76d6b32b690721e6;&srccpv=yes&jm=1&b=0;0&g=0;0&p=cj1odHRwJTNBJTJGJTJGd3d3Lnp5a3Riai5jb20lMkYmeD0xOzs1MDQ1MjYxNDk7TGludXggeDg2XzY0Ozs7MTY7MjQmaz0mc2U9MiZmPTAmdT1odHRwcyUzQSUyRiUyRnd3dy45OW10NS5jYyUyRiZqPTAmcD0wJm09MCZyZXM9MTI4MHgxMDI0JnQ9JUU3JTg4JUIxJUU1JTk1JUFBJUU1JTkwJUE3JUVGJUJDJUI3JUVGJUJDJUI3JUVGJUJDJUI3JUVGJUJDJThFJUVGJUJDJTk5JUVGJUJDJTk5JUVGJUJDJUFEJUVGJUJDJUI0JUVGJUJDJTk1JUVGJUJDJThFJUVGJUJDJUEzJUVGJUJDJUEzJmw9ZW4tVVMmYz0wJmg9OTI3 HTTP/1.1
Host: kmef.ikjwmfeds.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.99mt5.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-via: catalog-nzmp
x-country: NO
server: nginx
date: Tue, 06 Dec 2022 23:58:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST,GET,OPTIONS
set-cookie: region=%E6%8C%AA%E5%A8%81%2F%2F%E5%85%B6%E5%AE%83; expires=Sun, 04-Jun-2023 23:58:57 GMT; Max-Age=15552000; path=/
visitnum=1; expires=Tue, 13-Dec-2022 23:58:57 GMT; Max-Age=604800; path=/
12593_29398=re; expires=Wed, 07-Dec-2022 04:58:57 GMT; Max-Age=18000; path=/
do2click_29398=5955806%7C29398%7C12593%7C158484%7C; expires=Wed, 07-Dec-2022 02:58:57 GMT; Max-Age=10800; path=/
doEffect_29398=5955806%7C29398%7C12593%7C158484%7C; expires=Tue, 13-Dec-2022 23:58:57 GMT; Max-Age=604800; path=/
p3p: CP="Powered by Www.Zyiis.Com 2005-2016"
content-encoding: gzip
X-Firefox-Spdy: h2