GET /dh/link.png HTTP/1.1
Host: x12h8x4yahhd83lp.com:58010
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/dh/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 May 2025 22:30:14 GMT
Content-Type: image/png
Content-Length: 4713
Last-Modified: Sun, 27 Aug 2023 17:08:09 GMT
ETag: "64eb82f9-1269"
Expires: Sun, 11 May 2025 22:31:14 GMT
Accept-Ranges: bytes
Connection: keep-alive
Cache-Control: max-age=2645
X-Cache: HIT

GET /images/a5082cb1-e6a9-44eb-941d-cc022dfa464b HTTP/1.1
Host: img.blkj58.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 12 May 2025 04:16:12 GMT
content-length: 0
location: https://cbu01.alicdn.com/img/ibank/O1CN01qhjD6y1Bs337BAaN2_!!0-1-cib.gif
server: BunnyCDN-LA1-912
cdn-pullzone: 3585066
cdn-uid: 8a1e3a5b-fc2a-4295-8794-fe818b65c954
cdn-requestcountrycode: NO
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-allow-origin: *
cache-control: public, max-age=86400
strict-transport-security: max-age=31536000
cdn-proxyver: 1.27
cdn-requestpullsuccess: True
cdn-requestpullcode: 302
cdn-cachedat: 05/11/2025 14:35:41
cdn-edgestorageid: 1000
cdn-requestid: e0932463aa71386bc9470acb5c5753d9
cdn-cache: HIT
cdn-status: 302
cdn-requesttime: 1
X-Firefox-Spdy: h2

GET /img/2023111702.gif HTTP/1.1
Host: img.mresou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 04:16:11 GMT
content-type: image/gif
content-length: 351063
server: cloudflare
accept-ranges: bytes
last-modified: Thu, 16 Nov 2023 15:47:02 GMT
etag: "65563976-55b57"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 2256763
cf-ray: 93e719699c52b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET / HTTP/1.1
Host: q.m676.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 04:16:09 GMT
Content-Type: text/html
Content-Length: 434
Last-Modified: Sun, 27 Nov 2022 14:21:20 GMT
Connection: keep-alive
ETag: "63837260-1b2"
Accept-Ranges: bytes

GET /hm.gif?hca=A0B47CBD726A52DA&cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=35&et=0&ja=0&ln=en-us&lo=0&rnd=1267268955&si=38ce17e5ef2191b2c5929506808e2c73&su=https%3A%2F%2Fx12h8x4yahhd83lp.com%3A58010%2F&v=1.3.2&lv=1&sn=56879&r=0&ww=0&u=https%3A%2F%2Fwww.asujp.com%3A58081%2Fapi.html HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.asujp.com:58081/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 12 May 2025 04:16:14 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A2C1A680BCFD52A4; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

GET /dh/bk.png HTTP/1.1
Host: x12h8x4yahhd83lp.com:58010
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/dh/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

GET /dh/dh.js?v=0.8824329730725416 HTTP/1.1
Host: users.shenqizhilv.com:59168
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 12 May 2025 04:16:11 GMT
content-type: application/javascript
last-modified: Thu, 08 May 2025 14:46:09 GMT
vary: Accept-Encoding
etag: W/"681cc3b1-a06"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

GET /hm.js?38ce17e5ef2191b2c5929506808e2c73 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.asujp.com:58081/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11289
Content-Type: application/javascript
Date: Mon, 12 May 2025 04:16:14 GMT
Etag: e847edd24478ab24041882d5b51d80dc
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A0B47CBD726A52DA; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

GET /go.js?v=0.9140552724082527 HTTP/1.1
Host: q.m676.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://q.m676.cc/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 04:16:09 GMT
Content-Type: application/javascript
Content-Length: 66
Last-Modified: Mon, 12 May 2025 03:19:13 GMT
Connection: keep-alive
ETag: "682168b1-42"
Accept-Ranges: bytes

GET /dh/index.html HTTP/1.1
Host: x12h8x4yahhd83lp.com:58010
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://q.m676.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 03:30:14 GMT
Content-Type: text/html
Last-Modified: Mon, 12 May 2025 03:19:32 GMT
ETag: "682168c4-b17"
Expires: Mon, 12 May 2025 03:31:14 GMT
Content-Length: 1362
Content-Encoding: gzip
Vary: Accept-Encoding
Connection: keep-alive
Cache-Control: max-age=845
X-Cache: HIT

GET /js/tj.js HTTP/1.1
Host: files.shenqizhilv.com:36666
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 12 May 2025 04:16:11 GMT
content-type: application/javascript
content-length: 292
last-modified: Mon, 08 Jan 2024 12:02:27 GMT
etag: "659be453-124"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /api.html HTTP/1.1
Host: www.asujp.com:58081
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 12 May 2025 04:16:12 GMT
content-type: text/html
content-length: 292
last-modified: Wed, 05 Jul 2023 21:34:02 GMT
etag: "64a5e1ca-124"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: x12h8x4yahhd83lp.com:58010
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x12h8x4yahhd83lp.com:58010/dh/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 May 2025 22:30:08 GMT
Content-Type: image/x-icon
Content-Length: 4286
Last-Modified: Sun, 05 Mar 2023 17:30:37 GMT
ETag: "6404d1bd-10be"
Expires: Sun, 11 May 2025 22:31:08 GMT
Accept-Ranges: bytes
Connection: keep-alive
Cache-Control: max-age=300
X-Cache: HIT

GET /img/ibank/O1CN01qhjD6y1Bs337BAaN2_!!0-1-cib.gif HTTP/1.1
Host: cbu01.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://x12h8x4yahhd83lp.com:58010/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 173807
date: Fri, 18 Apr 2025 14:35:36 GMT
last-modified: Thu, 17 Apr 2025 10:42:12 GMT
picasso-ret-code: SUCCESS
picasso-cache-info: MISS
request-time: 0.008
traceid: a3b5fdb117449869364678616e
x-powered-by: Picasso
picasso-image-type: normal
picasso-fmt: gif2
cache-control: max-age=31536000
via: cache28.l2fr1[217,217,200-0,M], cache4.l2fr1[218,0], ens-cache25.fr6[0,0,200-0,H], ens-cache21.fr6[1,0]
access-control-allow-origin: *
age: 2036436
ali-swift-global-savetime: 1744986936
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 18 Apr 2025 14:35:36 GMT
x-swift-cachetime: 31536000
timing-allow-origin: *
eagleid: a3b5fda917470233725314177e
X-Firefox-Spdy: h2

GET / HTTP/1.1
Host: q.m676.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache