Report - clusmem.pages.dev/

Report Overview

Visited public
2025-06-15 04:15:47
Tags
Submit Tags
URL
clusmem.pages.dev/
Finishing URL
clusmem.pages.dev/
IP / ASN
172.66.47.120
#13335 CLOUDFLARENET
Title
腾讯网

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
i.news.qq.com	246833	1995-05-04	2020-08-03	2025-06-08	541 B	492 B	43.159.109.55
inews.gtimg.com	34101	2008-10-09	2014-06-10	2025-06-14	15 kB	994 kB	23.44.36.191
video.qq.com	9434	1995-05-04	2012-08-16	2025-05-26	539 B	3.8 kB	129.226.103.233
mat1.gtimg.com	59206	2008-10-09	2012-06-22	2025-06-14	7.6 kB	3.1 kB	43.152.140.107

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-06-15 04:15:24	low	Client IP	172.66.47.120	ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	video.qq.com/cookie/sync_qqnews.html	ScriptElement	3.1 kB	2025-03-08	2025-06-29
Pretty URL video.qq.com/cookie/sync_qqnews.html IP 129.226.103.233 ASN #132203 Tencent Building, Kejizhongyi Avenue Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-08 21:55 Last Seen2025-06-29 17:35 Times Seen10 Hash 600dfd7246f49df7465582855d1b4bdb db343c3ee4b5b79caae73be6b266f4792b7c9388 c1b3b481c524d376caeaf31de52aff71fa666ef5d3ecd7aea9c69a575390dcda Loading...

	clusmem.pages.dev/	ScriptElement	280 B	2024-11-12	2025-06-15
Pretty URL clusmem.pages.dev/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-11-12 10:20 Last Seen2025-06-15 04:15 Times Seen10 Hash 31b863a7f23eb1bc59b7799fdac354d6 3d8fd06195dbf218c165434971bc009efde7f381 da537d7b21660242d8da754f5a28df50ce75bccdbe0a11efc44a605923fa06cc Loading...

	clusmem.pages.dev/	ScriptElement	189 B	2024-03-08	2025-06-15
Pretty URL clusmem.pages.dev/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-08 18:43 Last Seen2025-06-15 04:15 Times Seen22 Hash cafd446ea5d4ebea7dcd530a341e215b eb46ecdc7d1c04fa2532ce02e1a99d57e2b5d6ac 8e625dce0a08258a0beb83e23e2152d867af79689bfa119232dcfdf8ced90e19 Loading...

	clusmem.pages.dev/	ScriptElement	69 kB	2025-06-15	2025-06-15
Pretty URL clusmem.pages.dev/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-15 04:15 Last Seen2025-06-15 04:15 Times Seen1 Hash e7e7d10ab0cbc9e8109f7ef0ab2f8e1b de2651ec7563f0fd1b7e63555b8143783aa6033c 4a6c8dc20d7a34ed877ee762b372fdec6f9238e2369f90b99caaa5d87b93a0fa Loading...

	clusmem.pages.dev/	ScriptElement	584 B	2024-02-18	2025-06-15
Pretty URL clusmem.pages.dev/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-18 15:46 Last Seen2025-06-15 04:15 Times Seen24 Hash 681dc47d4fdf1de5cc4cc9457b230869 4d29e33506a4fe96177ed25247beaf959840a68f c759268c3161019a9d5ff6d9311df6988ca640c8de29e9a91733d336432dfa76 Loading...

HTTP Transactions (51)

	URL	IP	Response	Size
	GET inews.gtimg.com/newsapp_bt/0/0530170740924_8314/0	23.44.36.191	200 OK	12 kB
URL GET inews.gtimg.com/newsapp_bt/0/0530170740924_8314/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 12 kB (12140 bytes) Hash a436b0afa692742d3a2da3ae9fcf3406 9b5d963cf83d8bf1faffeb83c164728962566737 6ecb8435fea9309366db0d7fdd69f1e995d6fbe7a5dd32b42837d21d033e6796 HTTP Headers `GET /newsapp_bt/0/0530170740924_8314/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 12140 last-modified: Fri, 30 May 2025 17:07:41 GMT x-delay: 4898 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 12140 chid: 0 fid: 0 x-nws-log-uuid: 91fc9172-1a21-46a8-8b86-56de4a8b1a2c cache-control: max-age=1548042 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15822872253/0	23.44.36.191	200 OK	6.1 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822872253/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 435x168, Scaling: [none]x[none], YUV color, decoders should clamp Size 6.1 kB (6148 bytes) Hash f403affa6185658171904d65e954d527 bcd818974f2c0698393df7d47168961c9091bf62 6352f3150a1d6aaac214ddc3c24b29a2b31fb4a4d9d82ec3097efbf8abeb6f19 HTTP Headers `GET /newsapp_bt/0/15822872253/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 6148 last-modified: Thu, 14 Dec 2023 11:57:21 GMT x-delay: 5501 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 6148 chid: 0 fid: 0 x-nws-log-uuid: 552a5c81-38e1-4900-a76a-d0aa5c50fcea cache-control: max-age=1628406 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/1112174053783_8345/0	23.44.36.191	200 OK	41 kB
URL GET inews.gtimg.com/newsapp_bt/0/1112174053783_8345/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 41 kB (41080 bytes) Hash 85c72082a46f59862a38ac6cae90477a c22e5563afd090376b6ad25c5f77742d7bdca7b0 df4432da9aa0d1b74fcf398edcf8adfe0857f92fb6b5540b48258d0632339664 HTTP Headers `GET /newsapp_bt/0/1112174053783_8345/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 41080 last-modified: Tue, 12 Nov 2024 17:40:54 GMT x-delay: 9734 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 41080 chid: 0 fid: 0 x-nws-log-uuid: 5925ccb3-3662-4654-8dcb-689acb69c35a cache-control: max-age=366880 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15821906988/0	23.44.36.191	200 OK	18 kB
URL GET inews.gtimg.com/newsapp_bt/0/15821906988/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 18 kB (18418 bytes) Hash 71516817bf3de0e8ec7b73c3af95ff04 02cbda195f727b04107a889360a2040e998b4658 e82759dc276895ad022c1748749ff528d785e06c95022dc58bfdee03bbf2408d HTTP Headers `GET /newsapp_bt/0/15821906988/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 18418 last-modified: Mon, 20 Nov 2023 19:00:10 GMT x-delay: 15158 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 18418 chid: 0 fid: 0 x-nws-log-uuid: a96cfc2a-c8e8-4a7f-9f46-ba58ede7510b cache-control: max-age=657060 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET video.qq.com/cookie/sync_qqnews.html	129.226.103.233	200 OK	3.4 kB
URL GET video.qq.com/cookie/sync_qqnews.html IP 129.226.103.233:443 ASN #132203 Tencent Building, Kejizhongyi Avenue Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert, Inc. Subject.video.qq.com FingerprintEB:2C:2C:78:F0:10:24:5F:BE:0C:A4:A7:AC:E2:A3:24:E4:46:E4:A1 ValidityMon, 14 Apr 2025 00:00:00 GMT - Fri, 15 May 2026 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text Size 3.4 kB (3368 bytes) Hash d37275ed27ff814d38c90390ee673467 5870a4bb8b3c464fe703d3dd78a2b264e01b8761 eaf1d30d7eb174d0ca8df6c9e21fddb2ba3c1af3fa6991850ca4308c2c5ba63a HTTP Headers GET /cookie/sync_qqnews.html HTTP/1.1 Host: video.qq.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Sun, 15 Jun 2025 04:15:31 GMT content-type: text/html content-length: 3368 ip: 21.38.4.164 server: TencentCOS x-cos-storage-class: STANDARD_IA x-cos-hash-crc64ecma: 7133730385370630657 etag: "5870a4bb8b3c464fe703d3dd78a2b264e01b8761" x-cos-object-type: normal accept-ranges: bytes last-modified: Mon, 03 Apr 2023 02:43:34 GMT origin-agent-cluster: ?0 X-Firefox-Spdy: h2`

	GET inews.gtimg.com/news_ls/ODe_lUx7Qib5TgMMrYXjDFvUy3gMUnMAEC5mA_X_LM2coAA_870492/0	23.44.36.191	200 OK	99 kB
URL GET inews.gtimg.com/news_ls/ODe_lUx7Qib5TgMMrYXjDFvUy3gMUnMAEC5mA_X_LM2coAA_870492/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 870x492, Scaling: [none]x[none], YUV color, decoders should clamp Size 99 kB (98612 bytes) Hash c1aacf243ef2bc6ca12b17898bbed1b8 c0643e3ae4274f0584e0f1e4b27a28f66dbe7031 6122314d4d96db632fac083309def6d2dbb14eb1a36665da7c28fda9634a3370 HTTP Headers `GET /news_ls/ODe_lUx7Qib5TgMMrYXjDFvUy3gMUnMAEC5mA_X_LM2coAA_870492/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Sun, 15 Jun 2025 11:37:28 GMT content-type: image/webp access-control-allow-origin: * server: tencent-ci size: 98612 timing-allow-origin: * x-datasrc: 1 x-delay: 16223 us x-info: real data x-rtflag: 1 x-ci-request-id: VF82ODRlNDA5Nl8xNF82NjE1ZGIwOV80NTZhZg== x-cos-request-id: Njg0ZTQwOTZfMTAyOTY4MDlfMTNlOTlfOGIwOGM4OA== content-length: 98612 accept-ranges: bytes x-nws-log-uuid: 8511209538479227499 x-cache-lookup: Cache Hit access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip x-client-ip: 184.31.15.157 x-server-ip: 203.205.137.181_eth0 x-real-ip: 184.31.15.157 x-server-time: 2 cache-control: max-age=2589880 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2

	GET inews.gtimg.com/newsapp_bt/0/15821906992/0	23.44.36.191	200 OK	20 kB
URL GET inews.gtimg.com/newsapp_bt/0/15821906992/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 20 kB (20296 bytes) Hash 9fa2b4565efe6b0479cd830a01b37299 7e1a29a414d24570d41f7cb7b21d2230777bbfcf 57cecd3fcd20521373f6b4385e0631ec1ea862b97d793d1e390d771a33bd972e HTTP Headers `GET /newsapp_bt/0/15821906992/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 20296 last-modified: Mon, 20 Nov 2023 19:00:15 GMT x-delay: 18038 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 20296 chid: 0 fid: 0 x-nws-log-uuid: acf08e1c-4d9e-46c5-af31-23ec1ac08379 cache-control: max-age=1689135 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/0212165139659_2561/0	23.44.36.191	200 OK	43 kB
URL GET inews.gtimg.com/newsapp_bt/0/0212165139659_2561/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 43 kB (43026 bytes) Hash 9d3dca24c623abe16e535be5d2e832d1 d5e8c49fcb361abe4423a8a8fe53973a517f526b 491dcb8789a1fc76a9b0310fb9d4bd2f33b6134764afb6404e54eca8271b90a9 HTTP Headers `GET /newsapp_bt/0/0212165139659_2561/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 43026 last-modified: Wed, 12 Feb 2025 16:51:40 GMT x-delay: 12623 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 43026 chid: 0 fid: 0 x-nws-log-uuid: e52e2fbf-9e41-4108-9e56-f9c53eb6a49d cache-control: max-age=1167563 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/css/index.css	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/css/index.css IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/css/index.css HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 13087543908052269907 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/0530170610302_8466/0	23.44.36.191	200 OK	35 kB
URL GET inews.gtimg.com/newsapp_bt/0/0530170610302_8466/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 35 kB (34650 bytes) Hash 32fd0b1e7de4f26b63dfc95d5de0871d fec05fc005844da54344e12a3f2db8e0a32fd604 eb42eb99ac37f53ef8e35b5a2707c2d51c2b9184f25ce46644ebef66430bc411 HTTP Headers `GET /newsapp_bt/0/0530170610302_8466/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 34650 last-modified: Fri, 30 May 2025 17:06:10 GMT x-delay: 9004 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 34650 chid: 0 fid: 0 x-nws-log-uuid: 37a2eb87-b88f-4390-a0b2-4c3222bb8822 cache-control: max-age=1548040 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15822839979/0	23.44.36.191	200 OK	2.0 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822839979/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 2.0 kB (2032 bytes) Hash 6f667ec1b1a1b436a789f7abd48b1d79 4447e057f669ec2aed10385b577e5b6e0c0b7d05 0fb4d797f1f84e63dbaf4899793bf037bf60e250f4523c01322aa4241022eac0 HTTP Headers `GET /newsapp_bt/0/15822839979/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 2032 last-modified: Wed, 13 Dec 2023 10:12:53 GMT x-delay: 5925 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 2032 chid: 0 fid: 0 x-nws-log-uuid: 3b2586bd-c17e-48af-8ebb-0c29112a58a0 cache-control: max-age=890342 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/news_bt/Ori2yji_u8xvYEQd5AgmANPMaCPNOWpdnbnJ8IxzpdS0UAA/0	23.44.36.191	200 OK	1.6 kB
URL GET inews.gtimg.com/news_bt/Ori2yji_u8xvYEQd5AgmANPMaCPNOWpdnbnJ8IxzpdS0UAA/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 1.6 kB (1618 bytes) Hash ea89a839d23ab04c08d338e016a4b6b7 7b9278bcf35c46b7c26a1df840b6f7d6177f06c2 1e79df137c5580f55f915a9a182b47d4194cb3c598c5696453638d02dbcbb8dc HTTP Headers `GET /news_bt/Ori2yji_u8xvYEQd5AgmANPMaCPNOWpdnbnJ8IxzpdS0UAA/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Mon, 26 May 2025 07:51:08 GMT content-type: image/webp access-control-allow-origin: * server: tencent-ci size: 1618 timing-allow-origin: * x-datasrc: 1 x-delay: 54104 us x-info: real data x-rtflag: 1 x-ci-request-id: VF82ODNmOTFhYl8xNF8zZDE0ZGIwOV8zMWFhYw== x-cos-request-id: NjgzZjkxYWJfYTY2ZmMzMDlfNDBkYV82Yzg3ZTIx content-length: 1618 accept-ranges: bytes x-nws-log-uuid: 7295228345428684625 x-cache-lookup: Cache Hit access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip x-client-ip: 2.23.186.146 x-server-ip: 116.162.9.224_eth0 x-real-ip: 2.23.186.146 x-header-log: referer x-server-time: 14 cache-control: max-age=1627594 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2

	GET inews.gtimg.com/newsapp_bt/0/15822141894/0	23.44.36.191	200 OK	838 B
URL GET inews.gtimg.com/newsapp_bt/0/15822141894/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 838 B (838 bytes) Hash 68743d6831e2a57f53906983d568a079 0a04fa90260a669cd2378d0b111d22b1c48d1311 9ecadabb02834a5a7523d1e186a1dfa23a4076c6a16ba683f6153b69d25a8b13 HTTP Headers `GET /newsapp_bt/0/15822141894/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 838 last-modified: Fri, 24 Nov 2023 13:50:36 GMT x-delay: 9221 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 838 chid: 0 fid: 0 x-nws-log-uuid: 2825966d-e798-47d5-a707-0dc06b82b3e2 cache-control: max-age=1647047 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/0511155854519_5325/0	23.44.36.191	200 OK	17 kB
URL GET inews.gtimg.com/newsapp_bt/0/0511155854519_5325/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 17 kB (16928 bytes) Hash 30fd0481f0ccfcbd4635471e7dfc0b1e 6a74a8017fe048f8a3a6a1e85e40350cb98a5b61 4d90e966d58b4d5ae935ca3ebeeacc3c27a1d6e2f11339fcb587d5ac9642ce38 HTTP Headers `GET /newsapp_bt/0/0511155854519_5325/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 16928 last-modified: Tue, 30 May 2023 14:09:29 GMT x-delay: 9861 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 16928 chid: 0 fid: 0 x-nws-log-uuid: 9ddd8cb1-a554-4971-a35f-3803f72a0ccf cache-control: max-age=738904 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/news_ls/O5UVkTRAT3RdUUHm5Flp5vIliPuKcRattayQozZL_U38YAA_870492/0	23.44.36.191	200 OK	119 kB
URL GET inews.gtimg.com/news_ls/O5UVkTRAT3RdUUHm5Flp5vIliPuKcRattayQozZL_U38YAA_870492/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 870x492, Scaling: [none]x[none], YUV color, decoders should clamp Size 119 kB (118780 bytes) Hash e0ea5c10367cbe004955bbeff918ae36 57241c189cfac3ced6de0b57b0d1711e3d0c309d b0d0745574d4b7c17bbdf7ccb12ddd0aa595ea77906996063e45c5339e2967c8 HTTP Headers `GET /news_ls/O5UVkTRAT3RdUUHm5Flp5vIliPuKcRattayQozZL_U38YAA_870492/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Sun, 15 Jun 2025 09:02:37 GMT content-type: image/webp access-control-allow-origin: * server: tencent-ci size: 118780 timing-allow-origin: * x-datasrc: 1 x-delay: 22697 us x-info: real data x-rtflag: 1 x-ci-request-id: VF82ODRlMWNhNV8xNF9kODNmMTkxNV8yMzIxNw== x-cos-request-id: Njg0ZTFjYTVfOWUyYjY4MDlfNjNjMV84YWI1YzAz content-length: 118780 accept-ranges: bytes x-nws-log-uuid: 8803415498890467999 x-cache-lookup: Cache Hit access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip x-client-ip: 96.16.50.167 x-server-ip: 116.169.183.207_eth0 x-real-ip: 96.16.50.167 x-header-log: referer x-server-time: 1 cache-control: max-age=2580678 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 9813978965725253599 server: Lego Server date: Sun, 15 Jun 2025 04:15:28 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/js/index.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/js/index.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/js/index.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 14494688235389878172 server: Lego Server date: Sun, 15 Jun 2025 04:15:28 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 9987708392419898949 server: Lego Server date: Sun, 15 Jun 2025 04:15:28 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15822141896/0	23.44.36.191	200 OK	1.7 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822141896/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 1.7 kB (1666 bytes) Hash 473077cb13cf4426abb4cd13d41da3d7 56c36e88ccf2f5c19af45101056c77aae7c5b502 d78803378b2d6476053e62bc18a84fb4e09b89d863dc29c91898dd2fb0cb4ef9 HTTP Headers `GET /newsapp_bt/0/15822141896/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 1666 last-modified: Fri, 24 Nov 2023 13:50:44 GMT x-delay: 7644 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 1666 chid: 0 fid: 0 x-nws-log-uuid: bb86ddc5-1cbf-4fde-baad-284c53224990 cache-control: max-age=379496 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/news_ls/OlHb44_w0WajjJxkfZ7Jmhzf3WgEQMxjbqGDZAHF4NBLgAA_870492/0	23.44.36.191	200 OK	62 kB
URL GET inews.gtimg.com/news_ls/OlHb44_w0WajjJxkfZ7Jmhzf3WgEQMxjbqGDZAHF4NBLgAA_870492/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 870x492, Scaling: [none]x[none], YUV color, decoders should clamp Size 62 kB (62146 bytes) Hash fd30c7e2e9878b7266dfc98fca927386 bdcce1abe21c9375fd39918fa31b12d668e71996 a10e6699ac3b4da58606e42250bd82c44e9576048179e23cf5d7d80616ac4110 HTTP Headers `GET /news_ls/OlHb44_w0WajjJxkfZ7Jmhzf3WgEQMxjbqGDZAHF4NBLgAA_870492/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Sun, 15 Jun 2025 11:52:51 GMT content-type: image/webp access-control-allow-origin: * server: tencent-ci size: 62146 timing-allow-origin: * x-datasrc: 1 x-delay: 30030 us x-info: real data x-rtflag: 1 x-ci-request-id: VF82ODRlNDNlZl8xNF8zMzJmYTAwYl8zMTZiMA== x-cos-request-id: Njg0ZTQzZWZfZmI5ZjIyMDlfYTkzMl83NjJjNGI= content-length: 62146 accept-ranges: bytes x-nws-log-uuid: 17381597351391099020 x-cache-lookup: Cache Hit access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip x-client-ip: 2.22.31.94 x-server-ip: 42.56.64.118_eth0 x-real-ip: 2.22.31.94 x-server-time: 44 cache-control: max-age=2590737 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2

	GET inews.gtimg.com/newsapp_bt/0/15822872258/0	23.44.36.191	200 OK	11 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822872258/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 435x168, Scaling: [none]x[none], YUV color, decoders should clamp Size 11 kB (10766 bytes) Hash 0f3150d199d0bcfaf3c35ec66c70881a e39a81a13adf42815d243003a5ff4ccdd40dfbfd 9929537fc5a32e1f571e969f129f01f0bcdf9a90839113430167593fbf748254 HTTP Headers `GET /newsapp_bt/0/15822872258/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 10766 last-modified: Fri, 20 Sep 2024 14:15:39 GMT x-delay: 8444 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 10766 chid: 0 fid: 0 x-nws-log-uuid: ebb16873-4750-459d-9d43-ee78afff42a7 cache-control: max-age=2105696 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/0805112127189_9615/0	23.44.36.191	200 OK	62 kB
URL GET inews.gtimg.com/newsapp_bt/0/0805112127189_9615/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 62 kB (62252 bytes) Hash c875529faff4015b791d9733f6cde2fb cda42fbc7d7501954970dea52aad9b597a7e2d54 8e24414c8c1cc3bd55cc667f27eeeea5a6dbeb75ece7289679e0a3fd7f1f8694 HTTP Headers `GET /newsapp_bt/0/0805112127189_9615/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 62252 last-modified: Fri, 20 Sep 2024 14:34:40 GMT x-delay: 14120 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 62252 chid: 0 fid: 0 x-nws-log-uuid: 6f0f91f1-b693-4283-857f-7086627b40d7 cache-control: max-age=1782247 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/102416082070_174/0	23.44.36.191	200 OK	954 B
URL GET inews.gtimg.com/newsapp_bt/0/102416082070_174/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 954 B (954 bytes) Hash 5f3f7366e46ac38db6742e0afaf8952f 03f24436fcf95998cacf91d5b2a13118fbd64b32 d979084a2701bbcb1a45957d6d5845fea243530f7d63e5911c71bffd27e144a0 HTTP Headers `GET /newsapp_bt/0/102416082070_174/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 954 last-modified: Fri, 26 May 2023 11:09:48 GMT x-delay: 10214 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 954 chid: 0 fid: 0 x-nws-log-uuid: 6d127b4e-0ce6-4807-a0ec-058175505bba cache-control: max-age=270688 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/advertisement/qqhome/crystal.202405081920.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/advertisement/qqhome/crystal.202405081920.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/advertisement/qqhome/crystal.202405081920.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 16728512310430086403 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15822872255/0	23.44.36.191	200 OK	11 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822872255/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 435x168, Scaling: [none]x[none], YUV color, decoders should clamp Size 11 kB (11202 bytes) Hash f9bc33041dfcee14aec1ab713493fa3e b22ea151f35876e6b6b6f3822978de919b1b1023 3446a20addc8e2af2b394beee1e423e79ade8a438ce75fb85a649183b889729a HTTP Headers `GET /newsapp_bt/0/15822872255/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 11202 last-modified: Thu, 14 Dec 2023 11:57:06 GMT x-delay: 11790 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 11202 chid: 0 fid: 0 x-nws-log-uuid: 0bf70615-d813-40ba-84b1-10a0828fe59c cache-control: max-age=824960 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET i.news.qq.com/web_backend/getWebPacUid	43.159.109.55	200 OK	63 B
URL GET i.news.qq.com/web_backend/getWebPacUid IP 43.159.109.55:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert, Inc. Subject.inews.qq.com FingerprintD7:78:70:0E:4A:81:2B:76:DD:4F:3A:3B:08:1E:42:88:C4:37:B6:0F ValidityWed, 02 Apr 2025 00:00:00 GMT - Thu, 02 Apr 2026 23:59:59 GMT File type JSON text data Size 63 B (63 bytes) Hash 963dbeee75b3364d18ff43165711a856 0ac27514180c607d893998469dc8644140ed1d44 78eb9639ffb9bca64c535b24b60c8c79e43107a3af16a5efa7f06852a1071e51 HTTP Headers GET /web_backend/getWebPacUid HTTP/1.1 Host: i.news.qq.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: application/json Server: tRPC-Gateway Inews_trace_id: 40396647090615121529 Inews-Trace-Id: 40396647090615121529 X-Upstream-Latency: 1 X-Proxy-Latency: 0 Set-Cookie: pac_uid=0_jnaxHmdJnHEeD; Path=/; Domain=qq.com; Expires=Wed, 13 Jun 2035 04:15:29 GMT Content-Length: 63 Connection: keep-alive Date: Sun, 15 Jun 2025 04:15:29 GMT EO-LOG-UUID: 5662718186695239904 EO-Cache-Status: MISS`

	GET inews.gtimg.com/newsapp_bt/0/15822141895/0	23.44.36.191	200 OK	1.1 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822141895/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 1.1 kB (1062 bytes) Hash 9126d8a15ec05fba520f156aec686cf7 5737cf8db3e640a766822ebbc8f2339a5df3ac2f 6d57671548154feae5f40d4a256eca98210b9d061f3cf0f1de25847d9890cf56 HTTP Headers `GET /newsapp_bt/0/15822141895/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 1062 last-modified: Fri, 24 Nov 2023 13:50:04 GMT x-delay: 5171 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 1062 chid: 0 fid: 0 x-nws-log-uuid: 20a98cc4-79bd-4fda-940c-e647595cb005 cache-control: max-age=1866570 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15822872259/0	23.44.36.191	200 OK	9.4 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822872259/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 435x168, Scaling: [none]x[none], YUV color, decoders should clamp Size 9.4 kB (9442 bytes) Hash f7c4e6fced76d53110b28c050d3a782c 8c28d93f323dc02d3e3286c9b4e33dc09abc0468 0dd04035eab500f306eb893e09a5563ac4745e46ef96dafb65834298137fb5e1 HTTP Headers `GET /newsapp_bt/0/15822872259/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 9442 last-modified: Thu, 12 Jun 2025 16:14:34 GMT x-delay: 4694 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 9442 chid: 0 fid: 0 x-nws-log-uuid: 991e196f-4a87-4e22-a949-0dfb2dd98921 cache-control: max-age=2519078 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 13459431356153378311 server: Lego Server date: Sun, 15 Jun 2025 04:15:28 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/js/index.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/js/index.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/js/index.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 11008242548089651301 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/favicon.ico	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/favicon.ico IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/favicon.ico HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 11924421295658277428 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/06091154503_335/0	23.44.36.191	200 OK	1.8 kB
URL GET inews.gtimg.com/newsapp_bt/0/06091154503_335/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 1.8 kB (1830 bytes) Hash d5f4c0f76ecbc8a99a85fbbe73617f0d 5a9ebb1b17a2e07ec9098916e8728383fd4d7ffe 651d13f48aab04512de9ec81c05e74502a05579943208c524f44a62d41617c92 HTTP Headers `GET /newsapp_bt/0/06091154503_335/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 1830 last-modified: Mon, 09 Jun 2025 11:55:31 GMT x-delay: 30 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 1830 chid: 0 fid: 0 x-nws-log-uuid: 4eab4a6e-7574-473e-9315-8a7778af4d54 cache-control: max-age=2072435 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/0613150938895_706/0	23.44.36.191	200 OK	712 B
URL GET inews.gtimg.com/newsapp_bt/0/0613150938895_706/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 712 B (712 bytes) Hash e15ccdbfb053f7485379b04838419680 12c5c87ea298fb7867f03a964d2c41f075de07bf 2a94716ce593f47f4fd9bf26a3667de94dea3ab5df0d47ab24cbd17f015818f6 HTTP Headers `GET /newsapp_bt/0/0613150938895_706/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 712 last-modified: Fri, 26 May 2023 12:02:31 GMT x-delay: 9391 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 712 chid: 0 fid: 0 x-nws-log-uuid: 40e66e69-c9dc-4389-b13d-629da2205f0b cache-control: max-age=968723 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15822872256/0	23.44.36.191	200 OK	9.9 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822872256/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 435x168, Scaling: [none]x[none], YUV color, decoders should clamp Size 9.9 kB (9904 bytes) Hash 93e6e92b47ee1b091cd6800e1c107978 36d9aca0167ed9ab7a5f08c2522858c9c443dc2e 9dfaf58bdc902c5fe62679ce192744a63493b3408e21f55c46cdd3e8b580af92 HTTP Headers `GET /newsapp_bt/0/15822872256/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 9904 last-modified: Thu, 14 Dec 2023 11:56:46 GMT x-delay: 10095 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 9904 chid: 0 fid: 0 x-nws-log-uuid: 87fc0c40-3002-4f0f-a214-322459422838 cache-control: max-age=450633 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 13262977408671692925 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/css/index.css	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/css/index.css IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/pc-home/2025613114454/static/css/index.css HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 12735109266589851812 server: Lego Server date: Sun, 15 Jun 2025 04:15:28 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/news_ls/OZGiHaeq7ZZtVepnUMqAiOT8tOGOiJ9eTitKnCUssirnkAA_870492/0	23.44.36.191	200 OK	58 kB
URL GET inews.gtimg.com/news_ls/OZGiHaeq7ZZtVepnUMqAiOT8tOGOiJ9eTitKnCUssirnkAA_870492/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 870x492, Scaling: [none]x[none], YUV color, decoders should clamp Size 58 kB (57940 bytes) Hash 51e2529ddfe05752035ab459bfe1418c b59562b078ab5827cc06648563f54e1c4486c59b a8cbf0d8f44e3c8b5f0da69261b4d6577a82f7d50d044d09c0e42f524def850b HTTP Headers `GET /news_ls/OZGiHaeq7ZZtVepnUMqAiOT8tOGOiJ9eTitKnCUssirnkAA_870492/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Sun, 15 Jun 2025 10:13:46 GMT content-type: image/webp access-control-allow-origin: * server: tencent-ci size: 57940 timing-allow-origin: * x-datasrc: 1 x-delay: 14099 us x-info: real data x-rtflag: 1 x-ci-request-id: VF82ODRlMmM2NF8xNF9iZTE1ZGIwOV80MTM5Nw== x-cos-request-id: Njg0ZTJjNjRfNGNhMDA4MDlfNDQ4M183MzJiZGE= content-length: 57940 accept-ranges: bytes x-nws-log-uuid: 4022309809895818267 x-cache-lookup: Cache Hit access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip x-client-ip: 2.22.31.173 x-server-ip: 203.205.137.181_eth0 x-real-ip: 2.22.31.173 x-server-time: 2 cache-control: max-age=2584709 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2

	GET inews.gtimg.com/newsapp_bt/0/15822872254/0	23.44.36.191	200 OK	12 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822872254/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 522x168, Scaling: [none]x[none], YUV color, decoders should clamp Size 12 kB (12086 bytes) Hash 42e48a202a6f9550f0cf724aa43b1a98 2840ebdc48cfc0261ad05231d879ec7b9d375092 f966353574a1c720b00846d05fa318894655f3c0e02ac0fd1544fed124cf1978 HTTP Headers `GET /newsapp_bt/0/15822872254/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 12086 last-modified: Thu, 14 Dec 2023 11:46:22 GMT x-delay: 9618 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 12086 chid: 0 fid: 0 x-nws-log-uuid: 26046be1-6a40-41ca-9171-cfc43b7ca852 cache-control: max-age=405466 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/news_ls/OaTy0RPh5Qh_Jzn_0VLGwulVQVmmNmjZ_J-Q3xTyfbAKEAA_870492/0	23.44.36.191	200 OK	137 kB
URL GET inews.gtimg.com/news_ls/OaTy0RPh5Qh_Jzn_0VLGwulVQVmmNmjZ_J-Q3xTyfbAKEAA_870492/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 870x492, Scaling: [none]x[none], YUV color, decoders should clamp Size 137 kB (136962 bytes) Hash 4122b4c08e8b1a545b3829ae8edbd2bd 05668c62c04555604e8f36936c4ca63316a70770 6afede479fecac4f3e25aaf7a0a5db3a91eac7bee7cf31a1584e27bc93725369 HTTP Headers `GET /news_ls/OaTy0RPh5Qh_Jzn_0VLGwulVQVmmNmjZ_J-Q3xTyfbAKEAA_870492/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Sun, 15 Jun 2025 11:31:32 GMT content-type: image/webp access-control-allow-origin: * server: tencent-ci size: 136962 timing-allow-origin: * x-datasrc: 1 x-delay: 28062 us x-info: real data x-rtflag: 1 x-ci-request-id: VF82ODRlM2VhNl8xNF80ODJjYTAwYl8zYTFlYg== x-cos-request-id: Njg0ZTNlYTZfNGFhZTAzMDlfYjM5NF84NmFiMmFk content-length: 136962 accept-ranges: bytes x-nws-log-uuid: 6989821176826938918 x-cache-lookup: Cache Hit access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip x-client-ip: 2.21.240.183 x-server-ip: 182.91.249.70_eth0 x-real-ip: 2.21.240.183 x-server-time: 2 cache-control: max-age=2589383 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2

	GET mat1.gtimg.com/qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 16991011128696247289 server: Lego Server date: Sun, 15 Jun 2025 04:15:28 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15821906987/0	23.44.36.191	200 OK	26 kB
URL GET inews.gtimg.com/newsapp_bt/0/15821906987/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 26 kB (26154 bytes) Hash 702edbb6ce5773f38408fdd19f11c1a4 7620bd3182e7d05eaa311ed41205d8ec1e9b446e c279d8a6d15078e0ce05514257cd97ab71b0e8a3967b08e36888ea151f0ac3a9 HTTP Headers `GET /newsapp_bt/0/15821906987/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 26154 last-modified: Mon, 20 Nov 2023 19:00:18 GMT x-delay: 11592 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 26154 chid: 0 fid: 0 x-nws-log-uuid: 39519d08-8951-4e51-8668-fc76bbf8f999 cache-control: max-age=1166546 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/www/js/emonitor/custom_ed041a23.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/www/js/emonitor/custom_ed041a23.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /www/js/emonitor/custom_ed041a23.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 13672119213593681626 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/advertisement/qqhome/crystal.202405081920.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/advertisement/qqhome/crystal.202405081920.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/advertisement/qqhome/crystal.202405081920.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 15680334532117599716 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/0520151116713_7779/0	23.44.36.191	200 OK	2.0 kB
URL GET inews.gtimg.com/newsapp_bt/0/0520151116713_7779/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 2.0 kB (1972 bytes) Hash 9833c2ef605085a5728513979b3595ae 5b7bba093d738d2ce8d5792c379d8d465830fbde c3374ac31cb42086d1232f5454333ffc7fe973815128c4195c4d2236007e80ff HTTP Headers `GET /newsapp_bt/0/0520151116713_7779/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 1972 last-modified: Thu, 19 Sep 2024 19:58:01 GMT x-delay: 4904 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 1972 chid: 0 fid: 0 x-nws-log-uuid: 24ade4a6-0725-43f5-9fee-a1b4dabed465 cache-control: max-age=890342 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 7653764665393935504 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15822872257/0	23.44.36.191	200 OK	14 kB
URL GET inews.gtimg.com/newsapp_bt/0/15822872257/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 435x168, Scaling: [none]x[none], YUV color, decoders should clamp Size 14 kB (14244 bytes) Hash fd1f32596711a4f35f99d41666e9e59f 1dde33fb271e0867ada86082249a581c12ca02f7 63143adb42265e05417f613d6aa0b1893ddbbc884f7df7e1a7c0bcae7673f1f5 HTTP Headers `GET /newsapp_bt/0/15822872257/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 14244 last-modified: Fri, 20 Sep 2024 14:15:39 GMT x-delay: 15412 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 14244 chid: 0 fid: 0 x-nws-log-uuid: 7e0e76f5-4577-4ca9-9aea-15507d30ab76 cache-control: max-age=2037727 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/15821906989/0	23.44.36.191	200 OK	23 kB
URL GET inews.gtimg.com/newsapp_bt/0/15821906989/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 23 kB (23102 bytes) Hash e055c29e0e1b1f61fea44a829a506d03 49c99b577aba46e35296e1b51d0edda43760e273 203dda4c3fb688e1d08d6eceb680f107a5bb73a5bcb6bf51b9b213786641c670 HTTP Headers `GET /newsapp_bt/0/15821906989/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 23102 last-modified: Fri, 20 Sep 2024 12:46:25 GMT x-delay: 18231 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 23102 chid: 0 fid: 0 x-nws-log-uuid: 9f6f434c-9288-4a0a-93bc-7f9e95011549 cache-control: max-age=450631 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET inews.gtimg.com/newsapp_bt/0/0424145640218_3030/0	23.44.36.191	200 OK	50 kB
URL GET inews.gtimg.com/newsapp_bt/0/0424145640218_3030/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image Size 50 kB (49488 bytes) Hash 83b333d920a0f6302b69160065ff1efd e93a36f988cf8f25511db37010a44d8d2a815e5d c5164641e2aa497f263b65b4e713e6a4bfa7fb6388e2dd3c33d60c024393cb3d HTTP Headers `GET /newsapp_bt/0/0424145640218_3030/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: NWSs content-type: image/webp content-length: 49488 last-modified: Thu, 19 Sep 2024 20:01:17 GMT x-delay: 16472 us x-info: real data x-bcheck: 0_1 x-cpt: filename=0 user-returncode: 0 x-datasrc: 1 x-reqgue: 0 size: 49488 chid: 0 fid: 0 x-nws-log-uuid: aa146811-6dc1-4d3f-997c-2b6384d8b4c6 cache-control: max-age=1700131 date: Sun, 15 Jun 2025 04:15:29 GMT X-Firefox-Spdy: h2`

	GET mat1.gtimg.com/qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 17784442082811831972 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

	GET inews.gtimg.com/om_ls/OaH1EZcDf5foDTOjCc8WD1tdFhOYxpmoIybeqPJwdH09UAA_870492/0	23.44.36.191	200 OK	69 kB
URL GET inews.gtimg.com/om_ls/OaH1EZcDf5foDTOjCc8WD1tdFhOYxpmoIybeqPJwdH09UAA_870492/0 IP 23.44.36.191:443 ASN #16625 AKAMAI-AS Requested by https://clusmem.pages.dev/ Certificate IssuerDigiCert Inc Subjectqs.888.qq.com FingerprintFD:7B:16:63:A4:DC:A3:E3:75:D9:77:2A:44:A5:B2:A0:36:9D:88:4F ValidityMon, 11 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 870x492, Scaling: [none]x[none], YUV color, decoders should clamp Size 69 kB (69340 bytes) Hash ac2aa0d74e3988d60ecf237fe8fd93cf c76408db0036074b6fb33b77c201d74442e106b0 d8036a06c4dc90b22f9914392dce395a604378d226788d168867dc2752ea1b6c HTTP Headers `GET /om_ls/OaH1EZcDf5foDTOjCc8WD1tdFhOYxpmoIybeqPJwdH09UAA_870492/0 HTTP/1.1 Host: inews.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK last-modified: Sun, 15 Jun 2025 11:30:04 GMT content-type: image/webp access-control-allow-origin: * server: tencent-ci size: 69340 timing-allow-origin: * x-datasrc: 1 x-delay: 27653 us x-info: real data x-rtflag: 1 x-ci-request-id: VF82ODRlM2VhZV8xNF8xZTJiYTAwYl9lNDI2 x-cos-request-id: Njg0ZTNlYWVfYjk5MmYyMWVfMTA4ZTNfNjQ5ODQ3Ng== content-length: 69340 accept-ranges: bytes x-nws-log-uuid: 10615450148870918895 x-cache-lookup: Cache Hit access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip x-client-ip: 184.31.15.158 x-server-ip: 203.205.137.101_eth0 x-real-ip: 184.31.15.158 x-server-time: 1 cache-control: max-age=2589391 date: Sun, 15 Jun 2025 04:15:27 GMT X-Firefox-Spdy: h2

	GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js	43.152.140.107	403 Forbidden	0 B
URL GET mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js IP 43.152.140.107:443 ASN #139341 ACE Requested by https://clusmem.pages.dev/ Certificate IssuerDNSPod, Inc. Subject.gtimg.com FingerprintE7:7C:87:CB:14:BF:6F:44:10:5A:23:04:EA:AB:66:35:E1:4C:8F:09 ValidityWed, 27 Nov 2024 00:00:00 GMT - Thu, 27 Nov 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js HTTP/1.1 Host: mat1.gtimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clusmem.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden content-length: 0 x-nws-log-uuid: 1921277758381823951 server: Lego Server date: Sun, 15 Jun 2025 04:15:29 GMT x-cache-lookup: Return Directly X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (51)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate