news.cnyes.com/news/id/5044599
301 Moved Permanently 0 B URL HTTP/1.1 news.cnyes.com/news/id/5044599
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news/id/5044599 HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://news.cnyes.com/news/id/5044599
Date: Fri, 23 Dec 2022 13:11:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ede732d48f2c32ad5e3b899bb4348df9
15fa12733818b3ae39f3022a715ed0f431b28242
446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6577
Expires: Fri, 23 Dec 2022 15:00:53 GMT
Date: Fri, 23 Dec 2022 13:11:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ad598540c6639aaaa344fb3ce4f3162f
b0b9f86d50de7dc23bdc7aee2f45d79a06165afc
4e9aaff330ce0c9c11f6bb8502fe21296b1845151bace75f73908a3194d5d0a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3548
Expires: Fri, 23 Dec 2022 14:10:24 GMT
Date: Fri, 23 Dec 2022 13:11:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 23 Dec 2022 12:46:08 GMT
content-type: application/json
age: 1508
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7f0ad5c2841a345f98197c2f1e86f4d
84cbfd91934a8715baba4a2da46451f35597c99c
be30540f2e06a3565c9b38bdbb9691f707d692b196bdcef5d671708aa9609795
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE30540F2E06A3565C9B38BDBB9691F707D692B196BDCEF5D671708AA9609795"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4002
Expires: Fri, 23 Dec 2022 14:17:58 GMT
Date: Fri, 23 Dec 2022 13:11:16 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nbjh9xYV++z+d2Vz6NeiqyGeIaVat4474xxSd0RAUeabwtUR0M8Obyn/1R0/hQ6gSwA+aMs95dHEKfb55FfYOw==
x-amz-request-id: PSW10MBE19ZR91YA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 23 Dec 2022 12:56:12 GMT
age: 904
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:16 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 23 Dec 2022 13:08:02 GMT
age: 195
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
news.cnyes.com/news/id/5044599
200 OK 60 kB URL HTTP/2 news.cnyes.com/news/id/5044599
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65076)
Hash 6c2281b404184b336b663f2738dfbf46
92cc5fdcc39eb1a1c94c0f668b83bcca4bfa848c
af91d5a7a2236f97b1714aa39f68f78bc6c2593f0eda22cf31242b3d03800a82
GET /news/id/5044599 HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: openresty
content-type: text/html; charset=utf-8
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 4aeb0abd-4fda-4a7b-9ee4-033c74000c4a
cache-control: public, must-revalidate, max-age=120, s-maxage=120
pragma: no-cache
expires: 0
x-c-cache: MISS
content-encoding: gzip
date: Fri, 23 Dec 2022 13:11:17 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
news.cnyes.com/dist/vendor-10c7f3aae504d52397b5.js
200 OK 186 kB URL HTTP/2 news.cnyes.com/dist/vendor-10c7f3aae504d52397b5.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (32031)
Size 186 kB (186162 bytes)
Hash c220d581072840b3403dc63273d2ffb2
479f69e26ec7aad7489e8de1adb76b728c16cbef
26e0f2738e2e94a9e741573447db15fa82c9b5ec5dd6d6438d138ac6d1ab6dc0
GET /dist/vendor-10c7f3aae504d52397b5.js HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: application/javascript
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 81162f9d-083f-4901-aec7-dffee53143d3
x-c-cache: MISS
content-encoding: gzip
content-length: 186162
cache-control: public, must-revalidate, max-age=31352132, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:17 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c615c937e6371bda0824b44af0c21c74
b097d69452bcc60085f563d094388185c26f0e7d
9f1194921b5d57dd52a217a47e69ad4cec7c08378c73c8dfccc3817119fcbb41
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5894
Cache-Control: max-age=164024
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:17 GMT
Etag: "63a56fa7-1d7"
Expires: Sun, 25 Dec 2022 10:45:01 GMT
Last-Modified: Fri, 23 Dec 2022 09:06:47 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
news.cnyes.com/dist/3cad8c7f3a3a5bdcabf5f70ada7eddf6.svg
200 OK 560 B URL HTTP/2 news.cnyes.com/dist/3cad8c7f3a3a5bdcabf5f70ada7eddf6.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (552), with no line terminators
Hash 3cad8c7f3a3a5bdcabf5f70ada7eddf6
cfda751fdb0612abf94523591cdc47d5b2c37123
318cc9847b2b5661d9693df1d4f3fefc293d0a6388a0cee6b055435b9fb10c60
GET /dist/3cad8c7f3a3a5bdcabf5f70ada7eddf6.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
content-length: 560
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 96be702a-f845-4443-b197-7a7f918d710b
accept-ranges: bytes
x-c-cache: MISS
cache-control: public, must-revalidate, max-age=31405035, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:17 GMT
X-Firefox-Spdy: h2
news.cnyes.com/dist/19c0ad3fc8f84d49d494708243cd664c.svg
200 OK 261 B URL HTTP/2 news.cnyes.com/dist/19c0ad3fc8f84d49d494708243cd664c.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (368), with no line terminators
Hash 25ea760b7de7f2fca50607995481677b
e9e1030d5047f0ba6a6ea9a3173d9b9b8a2b926a
7f9ea0d6711040533f9287c7f835315cd0d9500d014cf01dd79d8fb196c7f995
GET /dist/19c0ad3fc8f84d49d494708243cd664c.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 5c6ace12-a9b8-4322-83ab-2c2af5eec112
accept-ranges: bytes
x-c-cache: MISS
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, must-revalidate, max-age=31405035, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:17 GMT
content-length: 261
X-Firefox-Spdy: h2
news.cnyes.com/dist/46e26e94bec30c49f0d733067ce7f884.svg
200 OK 233 B URL HTTP/2 news.cnyes.com/dist/46e26e94bec30c49f0d733067ce7f884.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (327), with no line terminators
Hash dbfaf1477788de0fb58a803024401f86
a6d03e11edcff504bd3e110bda478b45e36a8710
9f0d248eeecd1ab05986c856bed513f91481f5c5c2fd060e39d08a34dabfcb55
GET /dist/46e26e94bec30c49f0d733067ce7f884.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: a5fa1598-f3a9-4af5-ac81-65a832d90a38
accept-ranges: bytes
x-c-cache: MISS
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, must-revalidate, max-age=31405035, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:17 GMT
content-length: 233
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/9ae7439775f34967b7610e368ae31972.svg
200 OK 384 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/9ae7439775f34967b7610e368ae31972.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (383)
Hash 9ae7439775f34967b7610e368ae31972
580576dd216433685a1297ff8924ec0039a93c88
d55f1af6c8f98c8e058fa88e1d324b879b321df579d24fb8a8ef90ed25c1b0f2
GET /fe-common/5d5cb8a6/9ae7439775f34967b7610e368ae31972.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 384
last-modified: Mon, 28 Nov 2022 10:38:24 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 02:49:41 GMT
etag: "9ae7439775f34967b7610e368ae31972"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HpO43AMcFRA6eoDdJ7GEKICoXMJ2ZzgOx4yLp9UlRBmjFVgVafStSA==
age: 37297
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/76bfdbe59e3e432ffe6d5d203a37e64d.svg
200 OK 763 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/76bfdbe59e3e432ffe6d5d203a37e64d.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 76bfdbe59e3e432ffe6d5d203a37e64d
2d69ea2a9aff306eaac5adba21d7e5dd2bc96113
12f18b6db6628e6057a9a786f2975efed252247e09863bc1f50931f9738120b7
GET /fe-common/5d5cb8a6/76bfdbe59e3e432ffe6d5d203a37e64d.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 763
last-modified: Mon, 28 Nov 2022 10:38:24 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 02:17:30 GMT
etag: "76bfdbe59e3e432ffe6d5d203a37e64d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wfVQgxTnhNZJyOCMYg9jWkvYCodLrspoNewpl-3vqp8DaM-0g5AKGw==
age: 39228
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/69a47076893656749361262d976851ad.svg
200 OK 382 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/69a47076893656749361262d976851ad.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (381)
Hash 69a47076893656749361262d976851ad
ca48fca94c3fa8f68dbbe35f1cf0b84cc2854b69
460c09d21a5dfddf23dd54b6eb16e87de2f7b8b24ca7552e30709a6eda6d80fb
GET /fe-common/5d5cb8a6/69a47076893656749361262d976851ad.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 382
last-modified: Mon, 28 Nov 2022 10:38:24 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 01:51:19 GMT
etag: "69a47076893656749361262d976851ad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RUZO9IneDa_lyJOH2hKUJx34iUkR6dhSpCgf_M3z_mPIT_NaL3A9eQ==
age: 40799
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/178e8c9aa7a7a3361855961da11edaf7.svg
200 OK 474 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/178e8c9aa7a7a3361855961da11edaf7.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (473)
Hash 178e8c9aa7a7a3361855961da11edaf7
6ef48d178b54fff13dc667e07eb7ab9191f25c5b
d1b136e0a7d9328ee936c03f3b46b5548ca1fa36e5dc7472f96e6faaec97dc55
GET /fe-common/5d5cb8a6/178e8c9aa7a7a3361855961da11edaf7.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 474
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 04:56:26 GMT
etag: "178e8c9aa7a7a3361855961da11edaf7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qckIXUruOtoOHkQF_VyFV8SuD43kzdepdCrXIT3n-VZej13P0yki_w==
age: 29692
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/f1cae93a0d0ae20a370d25cd6640f3a3.svg
200 OK 649 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/f1cae93a0d0ae20a370d25cd6640f3a3.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f1cae93a0d0ae20a370d25cd6640f3a3
9574069337c5822445f67ddd5ab393e5aef8cbcd
1c55df6cbf5b611af62addaccde3c586062f629888ab73d30356def605028168
GET /fe-common/5d5cb8a6/f1cae93a0d0ae20a370d25cd6640f3a3.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 649
last-modified: Mon, 28 Nov 2022 10:38:24 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 02:17:30 GMT
etag: "f1cae93a0d0ae20a370d25cd6640f3a3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hj16QBliUAtIVf0nCDM6Mkvzf4m1sKbsC1ucyqTXQGw4lpLYi01mzA==
age: 39228
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/5fbdce716ea9936da801688b9979630e.svg
200 OK 641 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/5fbdce716ea9936da801688b9979630e.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (326)
Hash 5fbdce716ea9936da801688b9979630e
87dd2494926f49f87f0ebfcc369f58355f10cdea
a57edcd49296e19a37e89c1d3854ae9a0358984fe60e89e718fbd27e67eda2d6
GET /fe-common/5d5cb8a6/5fbdce716ea9936da801688b9979630e.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 641
last-modified: Mon, 28 Nov 2022 10:38:24 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 01:30:19 GMT
etag: "5fbdce716ea9936da801688b9979630e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -xd_OqNS5xRKme2UhDDMJaebmSlep55hvEKuYkZOgZe9m-_lqtfs-Q==
age: 42059
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b607f3e2facf61a8586563ae137d81eb
fc07f3f509b1a8f592efe951cc92bc07f307609d
68fef95cdc9deeb6a115e2869f3420a1e62dc7a64fd270f84c437bcc04642cd2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b4064cd37eb4b1ac411189b0a7427ab4
23d775267bf9350ab08b1b28580ee5593b146d61
dc9c41cc8379d77eaba4bccb038ccd4e3b9cde1571cfe0e102c91b01881e239f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/webfont/1.6.16/webfont.js
200 OK 5.5 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/webfont/1.6.16/webfont.js
IP
File type ASCII text, with very long lines (2220)
Hash f72713534a64bf9c9aaee850092e823e
3ab0bb192e219d115b92f5fd590b43698d44d717
044da58d8894bb8f8464c19e34d3f4c454c222618f0c8f98aa705549c0215d97
GET /ajax/libs/webfont/1.6.16/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5480
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 17:33:35 GMT
expires: Sat, 16 Dec 2023 17:33:35 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 589062
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-PNSXQTR
200 OK 43 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-PNSXQTR
IP
File type ASCII text, with very long lines (1921)
Hash d58803e08e4e9cbedcb941996dbe3ad4
3afca45041cddad82d4fea09018c85000d68afe5
2d4219117edddad348cb3fa3eabf7756841678339b506f370e36c3b59ee01d29
GET /optimize.js?id=OPT-PNSXQTR HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42937
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b4064cd37eb4b1ac411189b0a7427ab4
23d775267bf9350ab08b1b28580ee5593b146d61
dc9c41cc8379d77eaba4bccb038ccd4e3b9cde1571cfe0e102c91b01881e239f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b607f3e2facf61a8586563ae137d81eb
fc07f3f509b1a8f592efe951cc92bc07f307609d
68fef95cdc9deeb6a115e2869f3420a1e62dc7a64fd270f84c437bcc04642cd2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nLWsvndvWMtGVXh/KTMhJw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7bwWYdB6wpGfTrJ7Fl6BTWI1iJU=
www.googletagmanager.com/gtag/js?id=UA-145056278-3&l=dataLayer&cx=c
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-145056278-3&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (1921)
Hash 5a30c760c96e56f166192361314e0eba
a931b714bd475a5acde6df340664bf7ff217ca76
b02df9ccf5f8b1d49923db519c0d8504dbb05e34958477d2dc3d1e96f0f455ab
GET /gtag/js?id=UA-145056278-3&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43604
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-21465399-47&l=dataLayer&cx=c
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-21465399-47&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (1921)
Hash 8fe6a3435676e577edbe078a5ad3f285
816828739fb58ff5dc394aa8cb0747b8837302c6
c79585b055fe4f2163e6bff66175c4339a4d3f329de514aca1115753100bac97
GET /gtag/js?id=UA-21465399-47&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43598
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-52N9SQ2
200 OK 49 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-52N9SQ2
IP
File type Unicode text, UTF-8 text, with very long lines (2550)
Hash 68661f906f347b8fc3a8c31a6c714d83
6b4ceace8d0fc0072a3584951d2d32ab3c647c3e
e1f707f41a9467a3b24d53a0880bbfe3120c5fe8ff8ab9dbe5ee0197e5685fa6
GET /gtm.js?id=GTM-52N9SQ2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48711
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-145056278-1&l=dataLayer&cx=c
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-145056278-1&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (1921)
Hash 3b9b95f4a73fbf099574ac397ed7844e
8b89f5c0c0794bcb617938041f2099f8a8b2ef9b
e62c7ed91574a9b96664e3840ecc43bf70ca8bf7f7fc38b422ca8b91cd2c49f9
GET /gtag/js?id=UA-145056278-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43624
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-21465399-69&l=dataLayer&cx=c
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-21465399-69&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (1921)
Hash 54f54b789edeb3864606d04c9452228b
48bf791b2dc816985c27962148beb48c097b1760
61d77c896a20d90dfa7c83e505d3cb75e8f4617674657ca25cadbfc9edb92a49
GET /gtag/js?id=UA-21465399-69&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43600
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-W8YSQ71T94&l=dataLayer&cx=c
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-W8YSQ71T94&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (22462)
Hash f359e78754054312db9431bde2a1fbac
67be5172ee73583d1c4a6a713a53a79e657972a8
c1d9a039bfe5c1dac87aad4bbb9ce8b2c325180ed2fd8df2ef18e993671fd768
GET /gtag/js?id=G-W8YSQ71T94&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76856
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/e68b21e56be634bd0c0c5cd2866489b2.svg
200 OK 279 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/e68b21e56be634bd0c0c5cd2866489b2.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash e68b21e56be634bd0c0c5cd2866489b2
46a43f584d7e05334a1e0f7707306f974c197c95
16d146b8c5d2f99e070bb6251e54d1840378f0afa96a845f9f25d1fe8029e7c5
GET /fe-common/5d5cb8a6/e68b21e56be634bd0c0c5cd2866489b2.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 279
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 07:27:09 GMT
etag: "e68b21e56be634bd0c0c5cd2866489b2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zO1-WJufgARya36qPW_hjtJfbvGlRF4tnqqn8Nrt0lIoUK27wI1Kyw==
age: 20649
X-Firefox-Spdy: h2
news.cnyes.com/dist/3f18b391fd9b4f15ccbaa199629f236b.png
200 OK 2.6 kB URL HTTP/2 news.cnyes.com/dist/3f18b391fd9b4f15ccbaa199629f236b.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 160 x 160, 8-bit colormap, non-interlaced\012- data
Hash 3f18b391fd9b4f15ccbaa199629f236b
b274f68f14980e459d4373686bff7568eb8e6f1a
8ebeacc9ad9480de7979a908b38e98bd8a6efb3efcc9ecb2a3ae43e491dbd434
GET /dist/3f18b391fd9b4f15ccbaa199629f236b.png HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/png
content-length: 2556
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 72b30feb-707c-46c7-a908-aac4f0179467
accept-ranges: bytes
x-c-cache: MISS
cache-control: public, must-revalidate, max-age=31352140, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/4d56f9845711a9318f29a8674173e13b.svg
200 OK 421 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/4d56f9845711a9318f29a8674173e13b.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (421), with no line terminators
Hash 4d56f9845711a9318f29a8674173e13b
5f574879adf46078f48b9f9d44ae59f4984fc0a7
fdb71e0a617e33a5d19cf131b15112f15fe6ca2bfbb8f2bcc0d29efea955100e
GET /fe-common/5d5cb8a6/4d56f9845711a9318f29a8674173e13b.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 421
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 03:32:12 GMT
etag: "4d56f9845711a9318f29a8674173e13b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rxUP_uHeUt2HojrpTH_Qvnxv-ZN_YSAQOfVCLTdMUZ4p_gW6ThrBCA==
age: 34747
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-T3FF4WB
200 OK 90 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T3FF4WB
IP
File type Unicode text, UTF-8 text, with very long lines (52752)
Hash bd513ca69af792e1e711e4506ae71603
4b42cbfb8e19f304ad14662a6af82860cbb9c7a0
e20979260a5b8a4457095114fb99af089f89d747d97d8cb55fca0471a236958f
GET /gtm.js?id=GTM-T3FF4WB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89909
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
news.cnyes.com/dist/4c1b7a884e18c2ca468935eed8ad5611.svg
200 OK 188 B URL HTTP/2 news.cnyes.com/dist/4c1b7a884e18c2ca468935eed8ad5611.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash b9dc5cf35b0ea41a0be7fce7944e3a51
5f8fcf0cb3fd29275cda42445dd581a4649fa6e3
9d0d44f24ad5a8a64781821ffba40f8c6f45bc746c57be4492fec3c6b4430eb2
GET /dist/4c1b7a884e18c2ca468935eed8ad5611.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 3a512bfa-4276-4809-bf6d-b00d10c5c856
accept-ranges: bytes
x-c-cache: MISS
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, must-revalidate, max-age=31378508, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
content-length: 188
X-Firefox-Spdy: h2
news.cnyes.com/dist/cfebadc1a1aa52eef312b81ba1b84fb3.svg
200 OK 472 B URL HTTP/2 news.cnyes.com/dist/cfebadc1a1aa52eef312b81ba1b84fb3.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (761), with no line terminators
Hash 59093b7e7342e5ba74182c9d53c1a64e
14ccc6b6d3a70be07a4ed70aaf1fa85612d88b1c
8fd8e94bf08970c566f47ef1236f427a9b3929bf26b97493102cb2aea723ab2b
GET /dist/cfebadc1a1aa52eef312b81ba1b84fb3.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 9553bddc-5584-48db-bfbc-4fa88b2d082d
accept-ranges: bytes
x-c-cache: MISS
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, must-revalidate, max-age=31405034, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
content-length: 472
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-102K295BQ2&l=dataLayer&cx=c
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-102K295BQ2&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (22462)
Hash 79ad02db8de6d9a398a9bd1516b15cd6
c7d99fcfe0cea3ef7cf44480d7368600c93bfae2
ff04634ba6660770b506082cd61b0e27b7b2aa5dbeccc4475e94827b20b9eb73
GET /gtag/js?id=G-102K295BQ2&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Dec 2022 13:11:17 GMT
expires: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76850
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
news.cnyes.com/dist/7e709f7635682326e4c322212be295d1.svg
200 OK 2.1 kB URL HTTP/2 news.cnyes.com/dist/7e709f7635682326e4c322212be295d1.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4396)
Hash d8b6ff956ec5fc4c44e431a6b0bf543b
58e646a51c2afe7e5e4ac4ac946129e70a09e709
9c858a756a949c958a5462f42525dd28f9c7c325432e18df9df7cc2744889850
GET /dist/7e709f7635682326e4c322212be295d1.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: df5a3d8f-fb10-4c78-99e9-1c28dabd7c7b
x-c-cache: MISS
content-encoding: gzip
content-length: 2091
cache-control: public, must-revalidate, max-age=31352173, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
news.cnyes.com/dist/fcb1cc55c50b36f96ac6d7102dbb3a1f.svg
200 OK 2.0 kB URL HTTP/2 news.cnyes.com/dist/fcb1cc55c50b36f96ac6d7102dbb3a1f.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5171), with no line terminators
Hash 379e159666311160485f5948773636e7
eabc82a6c7a5ad8df83d95a43de5030fc31a4718
53e053815e1b2472e78609096a7b34d659679e6bfed59ad69381b91c9b9e9cb5
GET /dist/fcb1cc55c50b36f96ac6d7102dbb3a1f.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 187b4d7a-0f37-4b62-ba47-f49a67d2a749
x-c-cache: MISS
content-encoding: gzip
content-length: 1961
cache-control: public, must-revalidate, max-age=31352091, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
news.cnyes.com/dist/73b5db9786b1b235cdb5fafee608d6e9.svg
200 OK 1.9 kB URL HTTP/2 news.cnyes.com/dist/73b5db9786b1b235cdb5fafee608d6e9.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5378), with no line terminators
Hash bd0c9123da876fc328be10ec55568dfc
b693d6045f1e5fe9262263ae56bb1e9a021b5658
bb29c99b176643a1f6cdf7b1523b0e344f62a84e345510a38d911fbea8a013fe
GET /dist/73b5db9786b1b235cdb5fafee608d6e9.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: e8906407-dfac-4649-92b6-fea2647afb2d
x-c-cache: MISS
content-encoding: gzip
content-length: 1933
cache-control: public, must-revalidate, max-age=31352131, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
news.cnyes.com/dist/6961dd1aebc2d5dd9576b70d3d283cba.svg
200 OK 351 B URL HTTP/2 news.cnyes.com/dist/6961dd1aebc2d5dd9576b70d3d283cba.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (527), with no line terminators
Hash af95eea44a2afd677a040b7dadeeb46a
969aecc528b7ee7959efe6e49b9db534a3db57f7
f8a80163c891a5a97923489fb53d62133b8d00badaab18bf3e2ea4a9da5f49d0
GET /dist/6961dd1aebc2d5dd9576b70d3d283cba.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: ed7feedd-a7be-4f87-b2b8-d4457ca2007e
accept-ranges: bytes
x-c-cache: MISS
content-encoding: gzip
content-length: 351
cache-control: public, must-revalidate, max-age=31352127, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
news.cnyes.com/dist/667ac66c1bf29e349190f5258186d330.svg
200 OK 698 B URL HTTP/2 news.cnyes.com/dist/667ac66c1bf29e349190f5258186d330.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1668), with no line terminators
Hash fc4a50e466316b846df1d9e92edbecd9
ef527b589af87dc386004ec3a37fb45907a65881
4f79be14b16f07ad573dc71d30a12e79c722921d718f2e97744a400cd529bdf1
GET /dist/667ac66c1bf29e349190f5258186d330.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: ebee3d4f-77b9-4abe-abfd-dba04e28e255
x-c-cache: MISS
content-encoding: gzip
content-length: 698
cache-control: public, must-revalidate, max-age=31352157, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3d77c09bf616349faed27b1cd007b770
e3000238d463d88fdcf7625d6582eb86ce5a4021
8b0c929abbabdcd9d196792cf0789feddb6fbd98e9bb3c96c1bb6f473f28727a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3d77c09bf616349faed27b1cd007b770
e3000238d463d88fdcf7625d6582eb86ce5a4021
8b0c929abbabdcd9d196792cf0789feddb6fbd98e9bb3c96c1bb6f473f28727a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 18:52:41 GMT
expires: Tue, 19 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 325117
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3d77c09bf616349faed27b1cd007b770
e3000238d463d88fdcf7625d6582eb86ce5a4021
8b0c929abbabdcd9d196792cf0789feddb6fbd98e9bb3c96c1bb6f473f28727a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ab7d35996e63b9fe384728c806723af8
a1ac347c195a53046da6cf98b1755d1bfa45ddd1
148f08689f57854f786b67d9bd285de4a4d5eec0692d7808ab386fddf7711c76
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Dec 2022 13:11:18 GMT
Last-Modified: Fri, 23 Dec 2022 12:28:22 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 137OjpKQ3k_3kftpOjpo4NX2iyw4_4hslXflcNQM2M9ApeQJlg90Ag==
Age: 2576
news.cnyes.com/dist/main-2443b16dda14d9200e34.js
200 OK 291 kB URL HTTP/2 news.cnyes.com/dist/main-2443b16dda14d9200e34.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (31929)
Size 291 kB (290978 bytes)
Hash a75b93bd43129513f2f478039c876510
80f34f3c671f3169ac1f79c932a2a24f8214073e
dab4dc103fafb5c211468e525cef6b794de527335ff078cf966afbc9116a2d04
GET /dist/main-2443b16dda14d9200e34.js HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: application/javascript
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 8d1b416b-6cc2-4fb7-8d45-d0deb9b7feaa
x-c-cache: MISS
content-encoding: gzip
content-length: 290978
cache-control: public, must-revalidate, max-age=31352117, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
fonts.gstatic.com/s/titilliumweb/v15/NaPDcZTIAOhVxoMyOr9n_E7ffGjEGItzYw.woff2
200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/titilliumweb/v15/NaPDcZTIAOhVxoMyOr9n_E7ffGjEGItzYw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12384, version 1.0\012- data
Hash 39009d392a58f87dd2b448612c2cbd5b
45ca26b72258f56af6fb786b8c4552acfdb5252e
d14d732f8caf915919ff661157edc3456a85f408b7a3c5ee1e21357e7df07e1a
GET /s/titilliumweb/v15/NaPDcZTIAOhVxoMyOr9n_E7ffGjEGItzYw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12384
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Dec 2022 15:45:15 GMT
expires: Wed, 20 Dec 2023 15:45:15 GMT
cache-control: public, max-age=31536000
age: 249963
last-modified: Wed, 27 Apr 2022 16:10:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f1ebbf1b6d97a3ba754b802417d5aa8e
8c802277623953433adf63a3f7ac84ca1cd0524a
1b0bf6444b7ebfbffb957b4a65160bd7ad6bfd3f48461d05ad566f8968fbd693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6588
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:18 GMT
Last-Modified: Fri, 23 Dec 2022 11:21:30 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
cdn.onesignal.com/sdks/OneSignalSDK.js
200 OK 3.1 kB URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP
File type ASCII text, with very long lines (9097)
Hash 3d5a14cc296fe2aaad585ab51fbcafe2
2087ac2e3d6e353d93fa1860ec7fac2b8036c8ab
65212a544e0a292b353365ab7addd8ab3a37bf70c67df4366a5ff26a4ca8bdd9
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Dec 2022 13:11:18 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 204
expires: Mon, 26 Dec 2022 13:11:18 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 77e157a55c380b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-super-sonic/3a5b2f3d/liveprocess.min.js
200 OK 87 kB URL HTTP/2 sfiles.cnyes.cool/fe-super-sonic/3a5b2f3d/liveprocess.min.js
IP
Hash cf01019edb6db94c411ea9064290402f
ecd95e558234eaabcbd4a79d3cf875989a64f0a4
7232a60fc3d6d6c3ee84f4f52d821ebaad7b641cc8e51a9224d9f3e71289d668
GET /fe-super-sonic/3a5b2f3d/liveprocess.min.js HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 08:01:20 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 01:25:25 GMT
etag: W/"7cdd2d18b89878a66a208b1033467729"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pFrPiUzJ8X_3jet6ZTiWfqMVaYafOVXIg9HB73gv8UUkGSP8iLzjKA==
age: 42409
X-Firefox-Spdy: h2
s3-ap-northeast-1.amazonaws.com/cnyes-fe-share-config/config/anueCommon.js
200 OK 1.6 kB URL HTTP/1.1 s3-ap-northeast-1.amazonaws.com/cnyes-fe-share-config/config/anueCommon.js
IP
Hash 04413997d7d4978154c19ebb7734110d
95a39f1822648a5aa4b1bd7fd5c2a644b6a059e3
817b751b87b23e6f982313e203348cdfb17f5e7bbb0cf22d037c95ab5f465a2e
GET /cnyes-fe-share-config/config/anueCommon.js HTTP/1.1
Host: s3-ap-northeast-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: ImF5zM5WQGBPgCxTx5QeQ/Y18pwgXvbPVrRDrPThBYN+OqUW8G4KYjRDw90ZIRu66fC/FK0LX28=
x-amz-request-id: FRWHX7ZH934Z6EAV
Date: Fri, 23 Dec 2022 13:11:19 GMT
Last-Modified: Fri, 23 Dec 2022 06:00:06 GMT
ETag: "04413997d7d4978154c19ebb7734110d"
x-amz-version-id: AEAOLwN4UUHGhT4iHHlf1_B7Os30anz0
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 1596
r3.o.lencr.org/
200 OK 70 kB IP
ASN #20940 Akamai International B.V.
Hash b9855f486aed3f02b17c9b6fba0152d9
a3d861507fcb37a74ce777d3f4252f3e31348e51
45c9facd9a0707021e6a1133ca96a2be3c61f06c31c250877aafbbe58b76958c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7F9CD269E1E986E18402766AD309CF3DAE79C0293F160E3128A504514B6B92E"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7623
Expires: Fri, 23 Dec 2022 15:18:21 GMT
Date: Fri, 23 Dec 2022 13:11:18 GMT
Connection: keep-alive
cimg.cnyes.cool/prod/news/5044599/l/6c90f6059b7f1f9564fcc0a50f2aa7a1.jpg
200 OK 24 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5044599/l/6c90f6059b7f1f9564fcc0a50f2aa7a1.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3\012- data
Hash df3800fb37827e8afc170c154495826b
c54aadb160170456e321b4dc9c159de658974ac5
0516c60442ad213123ee1b89d49e96a0f4dda04bd344351edbddfdfa4bd5ebbd
GET /prod/news/5044599/l/6c90f6059b7f1f9564fcc0a50f2aa7a1.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Px8BqigGVBt6B+784xa2VH0+sVmfisDCz6QqL8qsVuZOJ7uqvQQZXoytfjm0L3RDXUaHQT5FqnU=
x-amz-request-id: FRWTVXTBRAEAV6KY
last-modified: Thu, 22 Dec 2022 17:06:11 GMT
etag: "df3800fb37827e8afc170c154495826b"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 24273
cache-control: max-age=86400
date: Fri, 23 Dec 2022 13:11:18 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6146
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6146
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6146
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6146
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdce5468-cf1b-4a55-968b-1aaa101e60d6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdce5468-cf1b-4a55-968b-1aaa101e60d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38cc82b5e5d8c2fee6f51021e156ec81
eafb4e029313caabcdbdc1002abcab95f66e91b1
b8cad011e1a98ee4e896f00263495aab7f9cab986736a7a5b4187b8e94c46493
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdce5468-cf1b-4a55-968b-1aaa101e60d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11939
x-amzn-requestid: a00e5ab5-ad16-4576-b046-381e36456998
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dkUhqE94oAMFu5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4ce0a-28687ad51eea1f6f3ce8cc86;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uIDvI3BVK0v68x1jkgw9GB0U1i3l2kyW81q2Kiy3ZDREqQmyUTXCnQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 21:38:11 GMT
age: 55988
etag: "eafb4e029313caabcdbdc1002abcab95f66e91b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83ec12d8-0f25-4455-b9fc-9581d059158b.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83ec12d8-0f25-4455-b9fc-9581d059158b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c618f418af677595dddd2e7ed9e6a1f
ef8fd938e82dec810c56e4497441c452012e5a22
677f7502d2a69e2bdfad9fa2329ce8c78b7e413b4d7bd9cb414a768e381819cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83ec12d8-0f25-4455-b9fc-9581d059158b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9158
x-amzn-requestid: 2047fa50-737a-420b-8bcd-6ba2d79b60eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dOjrhHuiIAMF5JQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639c197c-0103d96966f2f8924b8c8a10;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 07:08:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MAD0zRheKGRmq1aqcKD5oOfjQFY_8CeffvGAvwTxjhKihl6PqbzV8Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 16:52:36 GMT
age: 73123
etag: "ef8fd938e82dec810c56e4497441c452012e5a22"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F580b4499-2ffd-427f-93ed-4c39a78dd125.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F580b4499-2ffd-427f-93ed-4c39a78dd125.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ee73339f3e7eaeb4c1ecab1a24632a8
48ff42e4329102d6a006b8f947bfaf29c0a5de17
ae5787d0df124d7d95ccaaf58148bb46c931610ca908cd58787748da5b75a1c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F580b4499-2ffd-427f-93ed-4c39a78dd125.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12794
x-amzn-requestid: 82617475-f461-429b-b38d-0c84eee33754
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dk55IGPioAMFi1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a509d3-0dfc997d3853974a08914362;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 01:52:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -24dBoLhaZcF6kjZCYp8EJSAYmslMmv15G3oPgPAydPxVA0j51Vs3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 01:52:20 GMT
age: 40739
etag: "48ff42e4329102d6a006b8f947bfaf29c0a5de17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bd09861-a6e6-4462-b7cf-0572eabdfd71.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bd09861-a6e6-4462-b7cf-0572eabdfd71.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61b1b9ece5581fe0b212144f45243f1a
d161c613f1491ae6ab63b536c50c6630e80d6382
f5a2b23b66a05734b86755986573c07c5f75bc6cbe67d2b769aee9ef402b2c14
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bd09861-a6e6-4462-b7cf-0572eabdfd71.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7117
x-amzn-requestid: 470b959f-7f5f-4a64-8d8d-bfc91856fad2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dUnBBFhZIAMFhiQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e8539-3916bad034c86d5503e456f2;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 03:12:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UIB-d7y4AawAml6oXhsAeoIud_U-fhQzha7VwRqY9AgNaYtJ49nlzg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 05:06:41 GMT
age: 29078
etag: "d161c613f1491ae6ab63b536c50c6630e80d6382"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2d4cf077d410b94f1326e942304f9e9b
98fb13feecfada3cc8b467aa48d7cdf1ed8ab001
ec82cd83bfd4da849888b0535c9764cd4d462ef9e12c5934512858375908dfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5659
x-amzn-requestid: bc225a93-868b-42d4-aa94-c8fa16ef2c64
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dk33gHUqIAMFg1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a50696-7710727f0f086a791a0e7939;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 01:38:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FGP2S7V05eAwwnHzdlYQJC9ZW-5xLD8Aqi7XBCcJtaqbVoNCocGFhw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 01:50:42 GMT
age: 40837
etag: "98fb13feecfada3cc8b467aa48d7cdf1ed8ab001"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5dd6622433d537fbb91a04bd3b57d873
552f216608b819b4f65f0574e421f4a761f0d721
5e9b03133d928378a775ab52ec6e58cd7753aa2975a4966534353c0d6bc46af5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11471
x-amzn-requestid: 20d9459a-710b-4fcf-bfce-9f0c5f513740
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEqGPnoAMFcDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12884-4a93ab9047181db109d328e2;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qFwWS-f0U1hSbrFFgBiGNzXRvZyvR90n_MI7jfYfWsyv2W6jH8D-9w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 04:54:20 GMT
age: 29819
etag: "552f216608b819b4f65f0574e421f4a761f0d721"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e4a76b1faf784eecfa9d9fc2d6167376
46f7b4146305437f9b74baa544743ed30cbf3e77
d7f9cd269e1e986e18402766ad309cf3dae79c0293f160e3128a504514b6b92e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7F9CD269E1E986E18402766AD309CF3DAE79C0293F160E3128A504514B6B92E"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7622
Expires: Fri, 23 Dec 2022 15:18:21 GMT
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: keep-alive
news.cnyes.com/favicon.ico?v=1.0
200 OK 1.2 kB URL HTTP/2 news.cnyes.com/favicon.ico?v=1.0
IP
ASN #20940 Akamai International B.V.
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b1474f750cb5550d29e8850f4c762acb
cbaa79e20b0a9b95438e2189f31661378449809d
1d5fc0b5e6d374b1218cd4f1feff64c503b68e31f5f1599f46bca449bdb521a2
GET /favicon.ico?v=1.0 HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga=GA1.1.1739906450.1671801077; _cnyes_fontloaded=1; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/x-icon
content-length: 1150
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 784f6a66-2a26-4f09-98b3-0742cd03759f
etag: "47e-sUdPdQy1VQ0p6IUPTHYqyw"
x-c-cache: MISS
cache-control: public, max-age=31439298
date: Fri, 23 Dec 2022 13:11:19 GMT
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1606595.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-1606595.js?sv=7
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/hotjar-1606595.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Fri, 23 Dec 2022 13:10:49 GMT
cache-control: max-age=60
etag: W/d41d8cd98f00b204e9800998ecf8427e
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ezThauQutm_kPSoGOJWE6FDIRvEto5eJ64eFZf-nHs41lsplD54pdQ==
age: 30
X-Firefox-Spdy: h2
certify-js.alexametrics.com/atrk.js
200 OK 4.3 kB URL HTTP/1.1 certify-js.alexametrics.com/atrk.js
IP
File type ASCII text, with very long lines (4255), with no line terminators
Hash d89453438fbf10dcf4c13265c40d5160
02d5f4e46c94bf34e12b2d773f63f643ea2b3518
5e84ce936bc3e3844a5d9efb3ac7d28107fa17234fa2a6c2bf3491fc284f0d4f
GET /atrk.js HTTP/1.1
Host: certify-js.alexametrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 4255
Connection: keep-alive
Date: Sat, 13 Aug 2022 04:02:04 GMT
Last-Modified: Tue, 27 Apr 2021 18:03:54 GMT
ETag: "d89453438fbf10dcf4c13265c40d5160"
Cache-Control: max-age=26920000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1kKLE4XAIYfYRsCnekHn4whvhOD89BbxBTmDROr7EZnoEw1E4csw5w==
Age: 11437756
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash a114e88a8c1ec6634728163d0d1f1046
4ca2c2166321f60dd8d4fd5bc8eba9caf7dd3abb
4df664e19f7516d536964892905f2992b940050365cf5d0c838dee8ebee43f67
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 23 Dec 2022 13:11:19 GMT
Last-Modified: Thu, 22 Dec 2022 23:37:01 GMT
ETag: "63a4ea1d-1d7"
Expires: Sat, 24 Dec 2022 23:37:01 GMT
Cache-Control: max-age=123942
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1671801079
Via: cache6.l2de2[193,192,200-0,M], cache6.l2de2[193,0], cache5.se1[216,216,200-0,M], cache5.se1[217,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 23 Dec 2022 13:11:19 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916718010791256360e
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a06281b6bb06069d21666372c708f6c0
c7622a20b3fb40dcb00f393382601e95ff59a8c2
8b7f74ecc617d58979a40b30abe40faca246e302528c3fe3d086f339574a7809
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a06281b6bb06069d21666372c708f6c0
c7622a20b3fb40dcb00f393382601e95ff59a8c2
8b7f74ecc617d58979a40b30abe40faca246e302528c3fe3d086f339574a7809
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash c5d392f16d6f3348bd707afe72f37382
f61824a383d18b9d9da451f63ce9a4068f2d1030
bde34b0a32333f86fa6e508a7177a2d231afedbca18febbfd5a0d56dab618d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2570
Cache-Control: max-age=106332
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:19 GMT
Etag: "63a49b49-1d7"
Expires: Sat, 24 Dec 2022 18:43:31 GMT
Last-Modified: Thu, 22 Dec 2022 18:00:41 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
region1.google-analytics.com/g/collect?v=2&tid=G-102K295BQ2>m=2oebu0&_p=1002004006&cid=1739906450.1671801077&ul=en-us&sr=1280x1024&_s=1&sid=1671801077&sct=1&seg=0&dl=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&dt=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-102K295BQ2>m=2oebu0&_p=1002004006&cid=1739906450.1671801077&ul=en-us&sr=1280x1024&_s=1&sid=1671801077&sct=1&seg=0&dl=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&dt=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-102K295BQ2>m=2oebu0&_p=1002004006&cid=1739906450.1671801077&ul=en-us&sr=1280x1024&_s=1&sid=1671801077&sct=1&seg=0&dl=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&dt=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://news.cnyes.com
date: Fri, 23 Dec 2022 13:11:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a06281b6bb06069d21666372c708f6c0
c7622a20b3fb40dcb00f393382601e95ff59a8c2
8b7f74ecc617d58979a40b30abe40faca246e302528c3fe3d086f339574a7809
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/654852154/?random=1671801077376&cv=11&fst=1671801077376&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4
200 OK 970 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/654852154/?random=1671801077376&cv=11&fst=1671801077376&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2143), with no line terminators
Hash eb54eea558d392522b0939c291b09465
00ef820c2038c6220bb539ac427ea4184a2ac32a
229656310fc80577873428528dda74162d90180cd4acda38266140534aca810f
GET /pagead/viewthroughconversion/654852154/?random=1671801077376&cv=11&fst=1671801077376&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 970
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:19 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/zh_TW/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/zh_TW/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash df80bb1ff846db2c34340c063580665a
48de2667ac71a380608afcd3659af1ee6ddff270
f04891d3a4457d7e92cb47bd779f63e2ae77f72dbff396080d18d07099baaf36
GET /zh_TW/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 43e1a4c54bbdf7d2711f5b180a3d4be9
etag: "68bc8ac33832e8a9311c023cde484cc6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 23 Dec 2022 13:27:51 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 34C7H/hG2yw0NAwGNYBmWg==
x-fb-debug: GpCWz8JlWKI3oUo+9EN+iJn/HfAZqdCAhBP08PW4+D4OftEoWM/X9xGlCHHeFqwbURU1yE2/gjMP+E6hLqT30Q==
content-length: 1686
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 13:11:19 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 23 Dec 2022 12:41:11 GMT
expires: Fri, 23 Dec 2022 14:41:11 GMT
cache-control: public, max-age=7200
age: 1808
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/940526663/?random=1671801077384&cv=11&fst=1671801077384&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4
200 OK 971 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/940526663/?random=1671801077384&cv=11&fst=1671801077384&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2143), with no line terminators
Hash dcc89b33ed6587a6be42a7f6c77825e4
d3bbf891c12f0a22823fe71e280e1d7c5f619033
1b80aec60785dd96c7a012ff93c9cb91cd195260b976566949b6d77e74030f4f
GET /pagead/viewthroughconversion/940526663/?random=1671801077384&cv=11&fst=1671801077384&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 971
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:19 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: VNeUI4P+8Aw3JQLQCYEaxj+CrchRdm4MitkjIomOvgXHu8Y672hns7aA5z3hgBn5rcdFzAfjvdfQ0eWXpyHWEg==
content-length: 27298
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 13:11:19 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39504)
Hash 76e473182d3744e2cfaba2dc0ee93950
3b067192d0170de318bbb3be6e0f5c95ff4b3635
b7255438a580ccab0e90fa864fe33c10c134da076ff1913535443612a3c3016b
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27666
date: Fri, 23 Dec 2022 13:11:19 GMT
expires: Fri, 23 Dec 2022 13:11:19 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1429 / 673 of 1000 / last-modified: 1670587582"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/689921113/?random=1671801077381&cv=11&fst=1671801077381&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4
200 OK 968 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/689921113/?random=1671801077381&cv=11&fst=1671801077381&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2143), with no line terminators
Hash 3e75b70aaa3dffc9889d6fe1982e5e88
181e679ea398d5dda97cd01a8560547fdbd87529
7b61edb19f4889522b74a986f54fb3a1152b9feb975bde96ed571f7e86cf4c82
GET /pagead/viewthroughconversion/689921113/?random=1671801077381&cv=11&fst=1671801077381&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 968
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:19 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sb.scorecardresearch.com/beacon.js
200 OK 2.3 kB URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
Hash aab6082157b9faf6a1e3ee252b3a4c7f
f68755b01ff5d9aa533b38e3da597290463df06d
eff38a4a229dc35eeadd4a3eaea914632d9b574a1896e84c4e94dce1f036a8c6
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 10:05:27 GMT
cache-control: max-age=86400
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qfxcB8pxxu7y8zFKjeLGNKMl-H2AO6I_kiG45sEUriWd1svUnuhcTQ==
age: 11153
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a06281b6bb06069d21666372c708f6c0
c7622a20b3fb40dcb00f393382601e95ff59a8c2
8b7f74ecc617d58979a40b30abe40faca246e302528c3fe3d086f339574a7809
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rtbcdn.andbeyond.media/prod-global-552607.js
200 OK 0 B URL HTTP/1.1 rtbcdn.andbeyond.media/prod-global-552607.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /prod-global-552607.js HTTP/1.1
Host: rtbcdn.andbeyond.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1635506636"
Cache-Control: max-age=3600
Content-Length: 0
Content-Type: text/javascript
X-HW: 1671801079.dop225.sk1.t,1671801079.cds212.sk1.shn,1671801079.dop225.sk1.t,1671801079.cds254.sk1.p
Access-Control-Allow-Origin: *
Last-Modified: Fri, 29 Oct 2021 11:23:56 GMT
news.cnyes.com/apple-touch-icon-180x180.png?v=1.0
200 OK 4.2 kB URL HTTP/2 news.cnyes.com/apple-touch-icon-180x180.png?v=1.0
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash d62eb0232218e2fe0fd0eb844395324f
e0d792098be5b40349caaf782a801d6d3c26d1f3
97c80caaa1837bee4d6a3005005819478f5229b3794b10339b2f428fc142f9d3
GET /apple-touch-icon-180x180.png?v=1.0 HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga=GA1.1.1739906450.1671801077; _cnyes_fontloaded=1; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/png
content-length: 4239
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: a6b05c8a-06b2-4dd3-9575-4d426d04700e
accept-ranges: bytes
x-c-cache: MISS
cache-control: public, must-revalidate, max-age=31536000, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:19 GMT
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/03e1eff547ef55e500c741546224efa4.svg
200 OK 9.6 kB URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/03e1eff547ef55e500c741546224efa4.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (22682), with no line terminators
Hash 66100ac33f5f7b3ffa37272aa9631575
3d74951a300014a16d3109091a588ea2b63769d3
38f653f598108cf858beecb2fbf615fe2c942178fb684cdaf11d89bc1e790a85
GET /fe-common/5d5cb8a6/03e1eff547ef55e500c741546224efa4.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 04:33:39 GMT
etag: W/"03e1eff547ef55e500c741546224efa4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Dv-FtWdGaXIM5UyEYXyO90c9XOa6WCqT_rQ1lvu4qxogZ7nJJ-1skA==
age: 31061
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/1358ff2c7a131fbb4c95ddc9fe1402ef.svg
200 OK 320 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/1358ff2c7a131fbb4c95ddc9fe1402ef.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (320), with no line terminators
Hash 1358ff2c7a131fbb4c95ddc9fe1402ef
a04afa253f33cc244a77ae9a250a42f4f8c9fec3
232cf326c8da0aa1ced2608b1b0bc0f4aba938bdd35d7cd23e0590a346896dab
GET /fe-common/5d5cb8a6/1358ff2c7a131fbb4c95ddc9fe1402ef.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 320
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 02:19:28 GMT
etag: "1358ff2c7a131fbb4c95ddc9fe1402ef"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4ASAb_iCJSp29zu3_jtl9p-3tk6HeQ6reJTlbaE6Nooz-goWF2ZAMg==
age: 39112
X-Firefox-Spdy: h2
login.cnyes.com/dpi.html
200 OK 110 B IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 3adc8bd55a1207ffe8fec5a61439d289
689bb6fec7fb284423f2fd40d618d13eaa639f5e
057a1c0eb153b437c077cea54a14aab5f5d5704bb9d57f38ee4517f2e241e227
GET /dpi.html HTTP/1.1
Host: login.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.1.1739906450.1671801077; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: text/html; charset=utf-8
last-modified: Wed, 21 Dec 2022 12:31:30 GMT
etag: "63a2fca2-6c"
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 13:11:19 GMT
content-length: 110
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/46e26e94bec30c49f0d733067ce7f884.svg
200 OK 327 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/46e26e94bec30c49f0d733067ce7f884.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (327), with no line terminators
Hash 46e26e94bec30c49f0d733067ce7f884
5e91d6daef69c096e0017d79117d395e7f1d36df
ffcfbc8a775a8e8597149100adc4fd137ce963c8d387134f4e95e8fe5bcfc8cb
GET /fe-common/5d5cb8a6/46e26e94bec30c49f0d733067ce7f884.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 327
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
date: Fri, 23 Dec 2022 06:59:28 GMT
etag: "46e26e94bec30c49f0d733067ce7f884"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lY7EFXqijrRyRyvoLFRWSIz5hhHwIh_wdid5jxlG9UialAsRF1sdYQ==
age: 22312
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67b8e0846781ef9751508e0963b73884
0c0bd41d98f64560c72df86395a4a5fce10a7756
1290b84ae9f873fb27e1e870436d7b535a4b6637117a950af7bc366242f7541f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1290B84AE9F873FB27E1E870436D7B535A4B6637117A950AF7BC366242F7541F"
Last-Modified: Wed, 21 Dec 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21496
Expires: Fri, 23 Dec 2022 19:09:35 GMT
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67b8e0846781ef9751508e0963b73884
0c0bd41d98f64560c72df86395a4a5fce10a7756
1290b84ae9f873fb27e1e870436d7b535a4b6637117a950af7bc366242f7541f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1290B84AE9F873FB27E1E870436D7B535A4B6637117A950AF7BC366242F7541F"
Last-Modified: Wed, 21 Dec 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21496
Expires: Fri, 23 Dec 2022 19:09:35 GMT
Date: Fri, 23 Dec 2022 13:11:19 GMT
Connection: keep-alive
ws.api.cnyes.com/ws/api/v4/universal/quote?type=LITQ&column=L
200 OK 0 B URL HTTP/2 ws.api.cnyes.com/ws/api/v4/universal/quote?type=LITQ&column=L
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ws/api/v4/universal/quote?type=LITQ&column=L HTTP/1.1
Host: ws.api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:19 GMT
content-length: 0
cache-control: no-cache
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: x-cnyes-app, x-platform, x-system-kind
access-control-max-age: -1
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=news.cnyes.com
200 OK 213 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=news.cnyes.com
IP
File type JSON data\012- , ASCII text, with very long lines (621), with no line terminators
Hash d59e7246641c00aeed6e61d1302bce29
fa45931ea005776380abf73e9a4b2e64f6c329de
4b1baed4c379295d99dc4489d3b015d5cfb41cecb05a7335616cf39883886d28
GET /pagead/ppub_config?ippd=news.cnyes.com HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Fri, 23 Dec 2022 13:11:20 GMT
expires: Fri, 23 Dec 2022 13:11:20 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 213
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67b8e0846781ef9751508e0963b73884
0c0bd41d98f64560c72df86395a4a5fce10a7756
1290b84ae9f873fb27e1e870436d7b535a4b6637117a950af7bc366242f7541f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1290B84AE9F873FB27E1E870436D7B535A4B6637117A950AF7BC366242F7541F"
Last-Modified: Wed, 21 Dec 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21495
Expires: Fri, 23 Dec 2022 19:09:35 GMT
Date: Fri, 23 Dec 2022 13:11:20 GMT
Connection: keep-alive
login.cnyes.com/dpi.14c0da29617ae14f8b36b1.js
200 OK 3.8 kB URL HTTP/2 login.cnyes.com/dpi.14c0da29617ae14f8b36b1.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2725)
Hash 0293d0a0c290d3bdcdd878722dc4d009
5d9bcf306c390fef14abedc0c625e9c48a754376
229d28b7a2f2938c4859a0502e388671384b4476468cb500c83f94c881f67bfc
GET /dpi.14c0da29617ae14f8b36b1.js HTTP/1.1
Host: login.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.cnyes.com/dpi.html
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: application/javascript; charset=utf-8
last-modified: Wed, 21 Dec 2022 12:31:30 GMT
etag: "63a2fca2-ef4"
date: Fri, 23 Dec 2022 13:11:20 GMT
content-length: 3828
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ef68414a876a6069d138d867ab9946b3
e0891c984671924aeb88ab7ab79f5b5bd61c93ba
9c898dbde01019d1e94f24b9cbfed7d11258a60b662fe5e5d0fbf11998e2006a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C898DBDE01019D1E94F24B9CBFED7D11258A60B662FE5E5D0FBF11998E2006A"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 23 Dec 2022 19:11:20 GMT
Date: Fri, 23 Dec 2022 13:11:20 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fdb1c53f666e8794c3dde99f94d696f7
08a90b7e4de7f443e200023cbdc5a0d0822e977e
d72158a1f1ff6dc5d6d4168b7c6694830f2f4e448d2850629d6b7a53cea91634
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=147236
Date: Fri, 23 Dec 2022 13:11:20 GMT
Etag: "63a53080-1d7"
Expires: Sun, 25 Dec 2022 06:05:16 GMT
Last-Modified: Fri, 23 Dec 2022 04:37:20 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _5pn-uB3iaF9q1MjEOQZlAexdn4jHhRMMJUpcZVKHuZnrxXUH2W7pg==
Age: 5276
cimg.cnyes.cool/prod/project/354/l/eb3fb1a7513e8f7f300e0edba9925443.jpg
200 OK 15 kB URL HTTP/2 cimg.cnyes.cool/prod/project/354/l/eb3fb1a7513e8f7f300e0edba9925443.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3\012- data
Hash 2ab636253e86fa13db96c4fe301005f0
5d283ef1cd486c51a7bfd62b9cfa83ad2c124c70
c7559f8d0255c95dc3135648ebaefa8ee5c5c3c16697c7395bed30ad191f4ce4
GET /prod/project/354/l/eb3fb1a7513e8f7f300e0edba9925443.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 1s56GUkV2Nw5dRxq3c8ZVplL2pE2+i75X5GxHec2iyKQj+IY4Ofms2jL7WGbghsEEmj+4xDEuTo=
x-amz-request-id: CCET3149JBR4CK6E
last-modified: Mon, 19 Dec 2022 03:16:00 GMT
etag: "2ab636253e86fa13db96c4fe301005f0"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 14994
cache-control: max-age=26213
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/project/353/l/cffde6c554b56ced0bc65075f21c68ba.jpg
200 OK 18 kB URL HTTP/2 cimg.cnyes.cool/prod/project/353/l/cffde6c554b56ced0bc65075f21c68ba.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3\012- data
Hash 4b27947559f5de16d1ff358c2e0fc1b4
e99c7f9d9be26539990630bc997e19db94ccf1c6
e0ac7bcfc8133bc5c7881ede0a5cdb622cc9315065b59646c37bbd1082ef83b3
GET /prod/project/353/l/cffde6c554b56ced0bc65075f21c68ba.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: pjTklpeBFSKJugmFyP9iIZAuxlFaiAgM4AcdE63rRViCLkZBan5qpGiYdNareJ/9KSKJo69EAvA=
x-amz-request-id: 25YHAXK19NHP3VA4
last-modified: Thu, 15 Dec 2022 09:58:04 GMT
etag: "4b27947559f5de16d1ff358c2e0fc1b4"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 17519
cache-control: max-age=76505
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1617453915&gjid=1249422654&_gid=1140170901.1671801079&_u=YADAAUASQAAAACAAI~&z=444798831
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1617453915&gjid=1249422654&_gid=1140170901.1671801079&_u=YADAAUASQAAAACAAI~&z=444798831
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1617453915&gjid=1249422654&_gid=1140170901.1671801079&_u=YADAAUASQAAAACAAI~&z=444798831 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://news.cnyes.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 23 Dec 2022 13:11:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/project/352/l/52fe157e9fff164381d223dc29e0e4ab.jpg
200 OK 27 kB URL HTTP/2 cimg.cnyes.cool/prod/project/352/l/52fe157e9fff164381d223dc29e0e4ab.jpg
IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, from Unix\012- data
Hash 320749ec276fdc8086fb8786e28837e7
50f9f11bce86a74031217887f5e9d72e36585353
92a7c3bfb30ccda62c6ce0d793ce9443a2831470adea7c9796a9f54dce0fbe47
GET /prod/project/352/l/52fe157e9fff164381d223dc29e0e4ab.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: mq7QDqbeaJqHFH6/WDaF1PYgSHgqoN4SzJqbHU+bd2kSH53vgdMVkyRoJC/8YN6xW2XBF122OQc=
x-amz-request-id: EF4GKWKME4HBEY9N
last-modified: Tue, 06 Dec 2022 07:23:41 GMT
etag: "12c7a4321c3391fa7f85ffcec7edcaca"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 18629
cache-control: max-age=76506
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-11&cid=1739906450.1671801077&jid=1357589945&gjid=652575058&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2017473488
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-11&cid=1739906450.1671801077&jid=1357589945&gjid=652575058&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2017473488
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-11&cid=1739906450.1671801077&jid=1357589945&gjid=652575058&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2017473488 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://news.cnyes.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 23 Dec 2022 13:11:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21465399-47&cid=1739906450.1671801077&jid=2072482413&gjid=2066168767&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=924585489
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21465399-47&cid=1739906450.1671801077&jid=2072482413&gjid=2066168767&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=924585489
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21465399-47&cid=1739906450.1671801077&jid=2072482413&gjid=2066168767&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=924585489 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://news.cnyes.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 23 Dec 2022 13:11:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
news.cnyes.com/dist/b2d77d834de94467788e9cba43b46efc.svg
200 OK 380 B URL HTTP/2 news.cnyes.com/dist/b2d77d834de94467788e9cba43b46efc.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (591), with no line terminators
Hash c2e35c6ee447160dac7e68ef65becb1d
61fce9ee93a8b8c1f1708960db205597379bc61c
1d1cfd3c78d88c1fa12f953ca5fe6114e9eeb6b0ec25e1cdcab5314cedb0be95
GET /dist/b2d77d834de94467788e9cba43b46efc.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _cnyes_fontloaded=1; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: 83165f60-3588-4ae0-ab59-758724d6abc6
accept-ranges: bytes
x-c-cache: MISS
content-encoding: gzip
content-length: 380
cache-control: public, must-revalidate, max-age=31352169, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-1&cid=1739906450.1671801077&jid=484967864&gjid=2038778313&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2002283037
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-1&cid=1739906450.1671801077&jid=484967864&gjid=2038778313&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2002283037
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-1&cid=1739906450.1671801077&jid=484967864&gjid=2038778313&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2002283037 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://news.cnyes.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 23 Dec 2022 13:11:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21465399-69&cid=1739906450.1671801077&jid=548041421&gjid=20521179&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2070070874
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21465399-69&cid=1739906450.1671801077&jid=548041421&gjid=20521179&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2070070874
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21465399-69&cid=1739906450.1671801077&jid=548041421&gjid=20521179&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=2070070874 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://news.cnyes.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 23 Dec 2022 13:11:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&gjid=1761290071&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=1398863618
200 OK 910 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&gjid=1761290071&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=1398863618
IP
File type gzip compressed data, from Unix\012- data
Hash fc3e5655a9f5d4f74902cf717c00f281
4b0b3497b1c48f1e53ac6375cd5f5b0267b3dc63
502ad636eb95bde98977f36efe2130f032f5f218a2a0ed4580b0adc3c3515693
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&gjid=1761290071&_gid=1140170901.1671801079&_u=YADAAUATQAAAACAAI~&z=1398863618 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://news.cnyes.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 23 Dec 2022 13:11:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.popin.cc/searchbox/cnyes_tw.js
200 OK 54 kB URL HTTP/1.1 api.popin.cc/searchbox/cnyes_tw.js
IP
File type Unicode text, UTF-8 text, with very long lines (65213)
Hash 1c7ec4931b5621a6b821f776f604faad
86c857003e7a32b2adda983f7184bfdb4ed1b0ed
86df47781430882d066dd60fc2cf94fc9c4c44dee50f48992f194728e3196529
GET /searchbox/cnyes_tw.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Dec 2022 13:11:19 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 23 Dec 2022 09:00:12 GMT
ETag: W/"4989b3838a6153db81ed4f2425fc4899"
Cache-Control: max-age=3600
x-amz-version-id: uDOArFvCqVze7ecjw65PRJWzCgCOruFV
Expires: Fri, 23 Dec 2022 14:11:19 GMT
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.26
Content-Encoding: gzip
ws.api.cnyes.com/ws/api/v4/universal/quote?type=LITQ&column=L
200 OK 974 B URL HTTP/2 ws.api.cnyes.com/ws/api/v4/universal/quote?type=LITQ&column=L
IP
Hash e498eff31ff033f59230fd1dc01ff353
b37842c5514846754ab1ce1ff52a9a1a6c4e2bb2
8590c347066946e77fcb0fca8f2314ad550f63c8654c9be428fb4835559c34c2
GET /ws/api/v4/universal/quote?type=LITQ&column=L HTTP/1.1
Host: ws.api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-System-Kind: NEWS_DESKTOP
X-platform: WEB
X-CNYES-APP: fe-desktop
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:20 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding, accept-encoding,origin,access-control-request-headers,access-control-request-method,accept-encoding
cache-control: no-cache
access-control-allow-origin: *
content-encoding: gzip
x-cache-status: HIT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/notification/livestream
200 OK 109 B URL HTTP/2 api.cnyes.com/media/api/v1/notification/livestream
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7926a13df65c7ebdd43d8cf761cc1430
6a287ba9f2cf67d7d76b722c4a2c18a188ecf591
f748da7773b5d9b32867008a78d5c1a33cdfa43f8e63866f9460ac74eed0b370
GET /media/api/v1/notification/livestream HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: openresty
content-type: application/json
vary: Accept-Encoding
cache-control: max-age=60, public, s-maxage=60
date: Fri, 23 Dec 2022 13:10:45 GMT
etag: W/"e62674d86f8d66e720e41d4e4afa780e"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o84387.ingest.sentry.io/api/205403/envelope/?sentry_key=3eaef1ef50b64538a6f445d89e083d8f&sentry_version=7
429 Too Many Requests 198 B URL HTTP/2 o84387.ingest.sentry.io/api/205403/envelope/?sentry_key=3eaef1ef50b64538a6f445d89e083d8f&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 478b411c59eb87249bea32cf7c7be5d2
023907c62eb55758905bb3c0e640b5b204ae0652
bac10d17440dcd6f6c6c4e0bd7eca2e1a7eec030ef3b1143d4be3791dcf91263
POST /api/205403/envelope/?sentry_key=3eaef1ef50b64538a6f445d89e083d8f&sentry_version=7 HTTP/1.1
Host: o84387.ingest.sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news.cnyes.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://news.cnyes.com
Content-Length: 49843
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 429 Too Many Requests
server: nginx
date: Fri, 23 Dec 2022 13:11:20 GMT
content-type: application/json
content-length: 198
retry-after: 41
x-sentry-rate-limits: 41:transaction:organization:transaction_usage_exceeded
access-control-allow-origin: https://news.cnyes.com
access-control-expose-headers: x-sentry-error, retry-after, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b5405071b06356fcfed8adbcfd4e71b
7a24f36763789e54f9dc5e62eb23b209e0785c35
2f0f30f38a3716401cdb35f3f70bd5892c541091940f1345d29fe71bf64f03ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F0F30F38A3716401CDB35F3F70BD5892C541091940F1345D29FE71BF64F03BA"
Last-Modified: Fri, 23 Dec 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2372
Expires: Fri, 23 Dec 2022 13:50:52 GMT
Date: Fri, 23 Dec 2022 13:11:20 GMT
Connection: keep-alive
cimg.cnyes.cool/prod/columnist/39/s/188176054e9723a84ba63954c192a98c.jpg
200 OK 3.6 kB URL HTTP/2 cimg.cnyes.cool/prod/columnist/39/s/188176054e9723a84ba63954c192a98c.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x113, components 3\012- data
Hash df12dff6ba2893c5ee6557444e411532
c504dd786167f5d3dea8df13b3ac8745b453e0f6
c68bfce7432f7ef2f85685745d807608a94579a103da936a5e47ce249b0e3e90
GET /prod/columnist/39/s/188176054e9723a84ba63954c192a98c.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: tIIz2vq+bj5uWjwXCLEXGN57jTFB+uMYR79p/AQuaC18AVGwtCM+OJYYNiTNzL7Aw8XzoXng4V4=
x-amz-request-id: YE906GRJDG01WA39
last-modified: Tue, 14 Jan 2020 10:00:08 GMT
etag: "df12dff6ba2893c5ee6557444e411532"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 3614
cache-control: max-age=45282
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/columnist/42/s/2bd24949020e4a45bacb4e9badc7c6b1.jpg
200 OK 1.9 kB URL HTTP/2 cimg.cnyes.cool/prod/columnist/42/s/2bd24949020e4a45bacb4e9badc7c6b1.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x112, components 3\012- data
Hash ad16a239539afcb80437981410385688
e6828db02c6e8781ec13b234186a21decd554c53
ca2dd9e0b94fc94d076ebe90901cb33529b1a0b7cd114caee59f25d2480f7e68
GET /prod/columnist/42/s/2bd24949020e4a45bacb4e9badc7c6b1.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 827Fetg8xIlRSJntBbBJ5ql3OzBcU9Uh/zM/fG3nyXVo2ws6sNUZWrD4FesXN/uMqjh5oBawNrk=
x-amz-request-id: YE9AMC283S9QDJS0
last-modified: Thu, 02 Jul 2020 07:36:08 GMT
etag: "ad16a239539afcb80437981410385688"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 1943
cache-control: max-age=45282
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/adContent/25/xxl/fb156026c96e19c57136494d3f0e8dae.png
200 OK 33 kB URL HTTP/2 cimg.cnyes.cool/prod/adContent/25/xxl/fb156026c96e19c57136494d3f0e8dae.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 676 x 212, 8-bit colormap, non-interlaced\012- data
Hash 2b8e3ad52fb6ff11050a6cadb604d420
770e188303f3ce12f18a421cde74c50bc283cdde
28d63812f5efb89c1789e6d8ff7f979749c3f39fc3881203ce79d73188aec335
GET /prod/adContent/25/xxl/fb156026c96e19c57136494d3f0e8dae.png HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: m1Gd3ordKOoNdZyemklE8G7vX0rYwAjrNAEwJqnYacJC9yL2DPYXfK/n8NrVzzWd2ejJeSSgJnY=
x-amz-request-id: ZAB0CHBXXWZXKAJG
last-modified: Thu, 08 Dec 2022 07:38:12 GMT
etag: "2b8e3ad52fb6ff11050a6cadb604d420"
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 32580
cache-control: max-age=71213
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045590/s/11bfeb6e661d57fde61a45ac69e5c30d.jpg
200 OK 3.6 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045590/s/11bfeb6e661d57fde61a45ac69e5c30d.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash a97d0b58d9bf121f2d995ecea6a5bf22
331b941026e7f6672fd2d9ebf92713cae9b77216
bb4c9f8478683d7482aae3868cc0c062bbb2a5d42ade5779c574180177a206a1
GET /prod/news/5045590/s/11bfeb6e661d57fde61a45ac69e5c30d.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IsSkD9wEUw3+Ya5dwcxPKtYya45kHr6eZR+nyRB9ZS9nGNTCBFUfVoOO41qzn0nIW7csQhePnRE=
x-amz-request-id: PE9SKY0JAKX954AG
last-modified: Fri, 23 Dec 2022 11:24:29 GMT
etag: "a97d0b58d9bf121f2d995ecea6a5bf22"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 3630
cache-control: max-age=84968
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045589/s/b79ffea63aa183d725c191387de57e3b.jpg
200 OK 4.4 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045589/s/b79ffea63aa183d725c191387de57e3b.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash 0bcf67feeaf5218fdf5207f46abccdb5
1f791cc414cbd400b1546ae24b4bd5898ee93f6b
16d726e5d0f40b1508937010b6382721bb4b7d33bc891cd250359f60283f995f
GET /prod/news/5045589/s/b79ffea63aa183d725c191387de57e3b.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DDU5JWXeXnmNyn21jEB6XSjK5smtHwCqjek3023H9PB+gOwX/MBWAaqGC/Uj9TtrUnAg7MB7iR4=
x-amz-request-id: G1NC3B06ZDWVRV1G
last-modified: Fri, 23 Dec 2022 11:13:59 GMT
etag: "0bcf67feeaf5218fdf5207f46abccdb5"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4429
cache-control: max-age=80440
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045587/s/846a9f1e6011a49998002a7685b670e5.jpg
200 OK 4.0 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045587/s/846a9f1e6011a49998002a7685b670e5.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash 5de9cd3eec1b47a17559029f5125fd1e
289a937b17ec4b0c7189eab126e0c9e91892952b
6c64973a9b5b51f4428953fae78a85fbd937c7e15a25d85f4491fb057c9041ba
GET /prod/news/5045587/s/846a9f1e6011a49998002a7685b670e5.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 02KEq07KGjUzUYTVnG/IuLlJhTWIctlkVA0BeDM2wOkzlMjg51lgUUuS0SteHVz5LW//Tj5CY9U=
x-amz-request-id: G1N19XE1Y6DVHKBA
last-modified: Fri, 23 Dec 2022 11:09:22 GMT
etag: "5de9cd3eec1b47a17559029f5125fd1e"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4000
cache-control: max-age=80440
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045359/s/0159dffb3fe78209eb979a04d952cef0.jpg
200 OK 4.7 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045359/s/0159dffb3fe78209eb979a04d952cef0.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash 5e566d5c105d99a02a1cfeab3eb344f7
d097dbd51120bfc706d847b4add61af4096fe51f
49ae73f6f9ede117835991ea9e1fbafd9c532f7070bb3495a61fdfdbeeac075b
GET /prod/news/5045359/s/0159dffb3fe78209eb979a04d952cef0.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: s4cJmSh+n0N6fvAIAgro2MYBPyicX2ONYDks5GjQDRg8PbGnK8kJP0pQ+THBxaI+WuVt5qWvZY4=
x-amz-request-id: HV9H5RJFHV6FARMP
last-modified: Fri, 23 Dec 2022 09:29:02 GMT
etag: "5e566d5c105d99a02a1cfeab3eb344f7"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4687
cache-control: max-age=76448
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045322/s/2b80f2d33de2881ee9816d76b9f0aac6.jpg
200 OK 4.4 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045322/s/2b80f2d33de2881ee9816d76b9f0aac6.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash b509477dd1039e5716e89c27734a3013
3f40f62f70323bf5c38570e58391da080f014765
a0444759bda39c965da287cdac9f3b0f7f98a5b75f9db6cdf46e0e773c26daa6
GET /prod/news/5045322/s/2b80f2d33de2881ee9816d76b9f0aac6.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: /Wt6+PhiTyTxK+KA7RY9Brdkq4UKwDJrZ7FYlpeYA5A8L0o+BFtazzwmceJQ8wGEqKrHQsGatKU=
x-amz-request-id: DS10XWA5JADGCRYV
last-modified: Fri, 23 Dec 2022 08:58:01 GMT
etag: "b509477dd1039e5716e89c27734a3013"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4396
cache-control: max-age=72595
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045226/s/a052f2c426b4839b80757c01959e760f.jpg
200 OK 4.2 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045226/s/a052f2c426b4839b80757c01959e760f.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash ce62520edffd5b4246da38a3e25f5517
ed7d0bad47a9a3fd05f2387f7aa0575d476429f1
a95bb0ded8205336eb6376d9ea773a63644c982d5c3dec13bf414446bc63a6dd
GET /prod/news/5045226/s/a052f2c426b4839b80757c01959e760f.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: kGZ4F4RgSAzDliuqfUE0Wrfp9hyt8SB8PfBqF/TPsNh+djc1UvkGEn0RpS7gICoZFu/URpfTH3Y=
x-amz-request-id: 4T2GR2G6QAWMTMG3
last-modified: Fri, 23 Dec 2022 07:46:46 GMT
etag: "ce62520edffd5b4246da38a3e25f5517"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4228
cache-control: max-age=71103
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045122/s/77574eb2324539390e4400777c4fc035.jpg
200 OK 5.1 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045122/s/77574eb2324539390e4400777c4fc035.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash 68ef14bafc194334a2f380b846bed833
a43d80942ece881b82372562963a92fa79cad34a
c9cc123b5457ce90bfd94fb82514a09855c1409379be14f767faa05b4c243784
GET /prod/news/5045122/s/77574eb2324539390e4400777c4fc035.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: /0qUy/3QEd2cdE7DcQe+Fjo8KcjNGU4SlGU0dT0EQ8LNMPzckY5wvUFFnEwAKQeEgPFHeUgZeDI=
x-amz-request-id: 4T2YAZQ59MS6XH5X
last-modified: Fri, 23 Dec 2022 06:56:47 GMT
etag: "68ef14bafc194334a2f380b846bed833"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 5066
cache-control: max-age=71131
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045589/s/b79ffea63aa183d725c191387de57e3b.jpg
200 OK 8.8 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045589/s/b79ffea63aa183d725c191387de57e3b.jpg
IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, from Unix\012- data
Hash c66dc80b861ff048d34d0aac51c9b92e
f97c8340d14bc4f7ecdb178952ef2ec32c36972d
5ce1b0bdf89a51b9236b50c0ef8fdf7b5a39ccf9813d82085adf2a3671598c25
GET /prod/news/5045589/s/b79ffea63aa183d725c191387de57e3b.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DDU5JWXeXnmNyn21jEB6XSjK5smtHwCqjek3023H9PB+gOwX/MBWAaqGC/Uj9TtrUnAg7MB7iR4=
x-amz-request-id: G1NC3B06ZDWVRV1G
last-modified: Fri, 23 Dec 2022 11:13:59 GMT
etag: "0bcf67feeaf5218fdf5207f46abccdb5"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4429
cache-control: max-age=80440
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045587/s/846a9f1e6011a49998002a7685b670e5.jpg
200 OK 4.0 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045587/s/846a9f1e6011a49998002a7685b670e5.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash 5de9cd3eec1b47a17559029f5125fd1e
289a937b17ec4b0c7189eab126e0c9e91892952b
6c64973a9b5b51f4428953fae78a85fbd937c7e15a25d85f4491fb057c9041ba
GET /prod/news/5045587/s/846a9f1e6011a49998002a7685b670e5.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 02KEq07KGjUzUYTVnG/IuLlJhTWIctlkVA0BeDM2wOkzlMjg51lgUUuS0SteHVz5LW//Tj5CY9U=
x-amz-request-id: G1N19XE1Y6DVHKBA
last-modified: Fri, 23 Dec 2022 11:09:22 GMT
etag: "5de9cd3eec1b47a17559029f5125fd1e"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4000
cache-control: max-age=80440
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045359/s/0159dffb3fe78209eb979a04d952cef0.jpg
200 OK 4.7 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045359/s/0159dffb3fe78209eb979a04d952cef0.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash 5e566d5c105d99a02a1cfeab3eb344f7
d097dbd51120bfc706d847b4add61af4096fe51f
49ae73f6f9ede117835991ea9e1fbafd9c532f7070bb3495a61fdfdbeeac075b
GET /prod/news/5045359/s/0159dffb3fe78209eb979a04d952cef0.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: s4cJmSh+n0N6fvAIAgro2MYBPyicX2ONYDks5GjQDRg8PbGnK8kJP0pQ+THBxaI+WuVt5qWvZY4=
x-amz-request-id: HV9H5RJFHV6FARMP
last-modified: Fri, 23 Dec 2022 09:29:02 GMT
etag: "5e566d5c105d99a02a1cfeab3eb344f7"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4687
cache-control: max-age=76448
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
player.svc.litv.tv/v3/ppnio.js
200 OK 191 kB URL HTTP/2 player.svc.litv.tv/v3/ppnio.js
IP
File type ASCII text, with very long lines (65473)
Size 191 kB (190807 bytes)
Hash 000e5791f49fc971d201d7b52bde03d2
28b3f3cf79cfa1d0f3a16879aeae2417904894c6
05e51c468b32c3aa3a135f884540334a52c69f973da386da75391c909c1f946b
GET /v3/ppnio.js HTTP/1.1
Host: player.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 04 Dec 2022 17:08:44 GMT
x-amz-version-id: 4pELjujYgbPP1PRaiaTmwriN2GXRGm2s
server: AmazonS3
content-encoding: gzip
date: Thu, 22 Dec 2022 20:06:18 GMT
etag: W/"36e6c17ac9e57e7d7ad3197f4a79f9e7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ba172beaa058835048fe52f15497da64.cloudfront.net (CloudFront)
x-amz-cf-pop: WAW51-P2
x-amz-cf-id: DIbL3Je-giVZcI_4QXUUQz7mQO56yw2e9Ry_KW2cS0A6fsKlvH--IA==
age: 61503
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045322/s/2b80f2d33de2881ee9816d76b9f0aac6.jpg
200 OK 4.4 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045322/s/2b80f2d33de2881ee9816d76b9f0aac6.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash b509477dd1039e5716e89c27734a3013
3f40f62f70323bf5c38570e58391da080f014765
a0444759bda39c965da287cdac9f3b0f7f98a5b75f9db6cdf46e0e773c26daa6
GET /prod/news/5045322/s/2b80f2d33de2881ee9816d76b9f0aac6.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: /Wt6+PhiTyTxK+KA7RY9Brdkq4UKwDJrZ7FYlpeYA5A8L0o+BFtazzwmceJQ8wGEqKrHQsGatKU=
x-amz-request-id: DS10XWA5JADGCRYV
last-modified: Fri, 23 Dec 2022 08:58:01 GMT
etag: "b509477dd1039e5716e89c27734a3013"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4396
cache-control: max-age=72595
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045226/s/a052f2c426b4839b80757c01959e760f.jpg
200 OK 4.2 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045226/s/a052f2c426b4839b80757c01959e760f.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash ce62520edffd5b4246da38a3e25f5517
ed7d0bad47a9a3fd05f2387f7aa0575d476429f1
a95bb0ded8205336eb6376d9ea773a63644c982d5c3dec13bf414446bc63a6dd
GET /prod/news/5045226/s/a052f2c426b4839b80757c01959e760f.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: kGZ4F4RgSAzDliuqfUE0Wrfp9hyt8SB8PfBqF/TPsNh+djc1UvkGEn0RpS7gICoZFu/URpfTH3Y=
x-amz-request-id: 4T2GR2G6QAWMTMG3
last-modified: Fri, 23 Dec 2022 07:46:46 GMT
etag: "ce62520edffd5b4246da38a3e25f5517"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 4228
cache-control: max-age=71103
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/news/5045122/s/77574eb2324539390e4400777c4fc035.jpg
200 OK 5.1 kB URL HTTP/2 cimg.cnyes.cool/prod/news/5045122/s/77574eb2324539390e4400777c4fc035.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x101, components 3\012- data
Hash 68ef14bafc194334a2f380b846bed833
a43d80942ece881b82372562963a92fa79cad34a
c9cc123b5457ce90bfd94fb82514a09855c1409379be14f767faa05b4c243784
GET /prod/news/5045122/s/77574eb2324539390e4400777c4fc035.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: /0qUy/3QEd2cdE7DcQe+Fjo8KcjNGU4SlGU0dT0EQ8LNMPzckY5wvUFFnEwAKQeEgPFHeUgZeDI=
x-amz-request-id: 4T2YAZQ59MS6XH5X
last-modified: Fri, 23 Dec 2022 06:56:47 GMT
etag: "68ef14bafc194334a2f380b846bed833"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 5066
cache-control: max-age=71131
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/newslist/categories?key=popular%3A8%2Cproject%3A3
200 OK 2.6 kB URL HTTP/2 api.cnyes.com/media/api/v1/newslist/categories?key=popular%3A8%2Cproject%3A3
IP
Hash 3e24b1b9bcb94c37a15b9334a67512d6
a788dc67077906667ddd8bbd902a997be1d750a2
dd34d6358081228ba71f3635eb1d3d6417e566a9363fb694997fc21770302c79
OPTIONS /media/api/v1/newslist/categories?key=popular%3A8%2Cproject%3A3 HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/adContent/12/xxl/1e8e34bace6612788f2c7abd44a2964c.png
200 OK 25 kB URL HTTP/2 cimg.cnyes.cool/prod/adContent/12/xxl/1e8e34bace6612788f2c7abd44a2964c.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash f031474a15eb98d9ea75c62e7707f798
936e4f64bdc62f227c1a3f42c0f45e01699443ba
900e0bd52f4a2392c90f759f4e9e36199ae52d79416ab6ef109fb865cc0647b2
GET /prod/adContent/12/xxl/1e8e34bace6612788f2c7abd44a2964c.png HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Dk+snsn4WJ0quuWERupVM3pCQs1C19/tBngn8/n+cWEotx/0tjzZm6WRxOOhnBL+IWqntzSZlhg=
x-amz-request-id: 0M3KE3YCEPFDM4G0
last-modified: Mon, 19 Dec 2022 01:38:33 GMT
etag: "f031474a15eb98d9ea75c62e7707f798"
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 24602
cache-control: max-age=71213
date: Fri, 23 Dec 2022 13:11:20 GMT
X-Firefox-Spdy: h2
hao.cnyes.com/ho_api/1/list_article_bycategory_20
200 OK 0 B URL HTTP/2 hao.cnyes.com/ho_api/1/list_article_bycategory_20
IP
ASN #3462 Data Communication Business Group
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ho_api/1/list_article_bycategory_20 HTTP/1.1
Host: hao.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:20 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801079266
200 OK 66 B URL HTTP/2 log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801079266
IP
File type PC bitmap, Windows 3.x format, 1 x 1 x 1, image size 4, cbSize 66, bits offset 62\012- data
Hash 7c62116208fd10b243e77e186f4163c6
179106268a896c22cace0e460a834b99c6e28baf
654b8fbb3beb01a6f08eb873015b728be6ac596b9d51f6c65dbf728e22441e0e
GET /log/popin_media/discoverylogs?data=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&t=1671801079266 HTTP/1.1
Host: log.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.13.5
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: image/jpeg
content-length: 66
last-modified: Fri, 10 Jan 2020 11:34:08 GMT
etag: "5e186130-42"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
api.popin.cc/popin_discovery5-min.js
200 OK 43 kB URL HTTP/1.1 api.popin.cc/popin_discovery5-min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65212), with no line terminators
Hash 406fcd1fef98a20924ec24ea94ee1d0a
b68e351a238a85f1f788963e7a3b4970be68659d
1312ca4a2652d4cb7b5c72571566aa6596a01b1e684870c0bf2f71d7f6d7b3fd
GET /popin_discovery5-min.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Dec 2022 13:11:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 15 Nov 2022 11:05:50 GMT
ETag: W/"66fc13530273f2130968bd58b34b1ea6"
x-amz-version-id: ZSHgav7oxHWIG.1hJRy7dZhzYvDPn4Zl
Expires: Fri, 23 Dec 2022 14:11:20 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.25
Content-Encoding: gzip
log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801079269
200 OK 66 B URL HTTP/2 log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801079269
IP
File type PC bitmap, Windows 3.x format, 1 x 1 x 1, image size 4, cbSize 66, bits offset 62\012- data
Hash 7c62116208fd10b243e77e186f4163c6
179106268a896c22cace0e460a834b99c6e28baf
654b8fbb3beb01a6f08eb873015b728be6ac596b9d51f6c65dbf728e22441e0e
GET /log/popin_media/discoverylogs?data=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&t=1671801079269 HTTP/1.1
Host: log.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.13.5
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: image/jpeg
content-length: 66
last-modified: Fri, 10 Jan 2020 11:34:08 GMT
etag: "5e186130-42"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/42/xs/7beceb793597efd8f799d5465bf5cd9c.jpg
200 OK 6.2 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/42/xs/7beceb793597efd8f799d5465bf5cd9c.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x40, components 3\012- data
Hash f26a7f5075803d1fe0ddc5385b81f0b0
d055a3d2494746110ec82998514c0864caf98c6f
97e7015eeb4d787b7bc9caf2c06f2c1c816561e4cc7541df5052840332286985
GET /prod/logoWall/42/xs/7beceb793597efd8f799d5465bf5cd9c.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: TVaHO1SPCNHMe7XQezA+yc1w+QuPbVtk4lDSHo+AQiGkZNZSo1Fq1jREiKAUhJoCZNj1Q1PkDRk=
x-amz-request-id: DRT36V52JKHEZCN5
last-modified: Wed, 27 Oct 2021 07:43:04 GMT
etag: "f26a7f5075803d1fe0ddc5385b81f0b0"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 6193
cache-control: max-age=45283
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/37/xs/dd9c07c3d5d64312e47bb7b7f8b795d3.png
200 OK 10 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/37/xs/dd9c07c3d5d64312e47bb7b7f8b795d3.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 80 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 7ac75357672e3151261140d18813d155
0ba33d7abc812ec10a982d6ed1dd988bad65a07f
9bef3e3b7faedbd26974ec0e571aa4f3a8e42d517fea004362a8321a734ea77f
GET /prod/logoWall/37/xs/dd9c07c3d5d64312e47bb7b7f8b795d3.png HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: y6mXZcf9oRylOoE/Ir3FxqUYUIQgkHpC2FqanFNC/Fl5XQPDJ0NipKJHLFODVD3HiXyE39GtKxY=
x-amz-request-id: DRT71ESCNJDWYKZS
last-modified: Wed, 27 Oct 2021 07:39:31 GMT
etag: "7ac75357672e3151261140d18813d155"
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 9997
cache-control: max-age=45283
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/101/s/3c317aa7c7eed2705afe7a7529f23a2e.jpg
200 OK 34 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/101/s/3c317aa7c7eed2705afe7a7529f23a2e.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x120, components 3\012- data
Hash 30d1da688b9a16d832d29d37179be517
8995212d236acd555ad6bde51dfc8293bbddbc33
22d9f8aa746f52e77152e93e3421bcb76cece30c438fc72b1dd8099e65883589
GET /prod/logoWall/101/s/3c317aa7c7eed2705afe7a7529f23a2e.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: FEvxazu0AOVG9Mbo1IM6SQRR0eTyCv6ezJZXmWuWWFisgmwNEqQFz0oFjpck9/2MRPRsNwlpV2k=
x-amz-request-id: 7YB4DCJ5Q4Z99QF4
last-modified: Tue, 18 Jan 2022 09:14:44 GMT
etag: "30d1da688b9a16d832d29d37179be517"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 33862
cache-control: max-age=34575
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/53/s/8b6dd71df0515ea29566442d9876f9cd.png
200 OK 19 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/53/s/8b6dd71df0515ea29566442d9876f9cd.png
IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, from Unix\012- data
Hash 83f8302612ba4daf4d99d01e7e8f23ad
31dc20b21f31f5b4f854588487c73b77a5a4ba7e
238543cbaca2c7c46abc53852ea8eb86ee02fcaa8e16c41d4dd0f1659efe7773
GET /prod/logoWall/53/s/8b6dd71df0515ea29566442d9876f9cd.png HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 9FwkVCeQklVgzSXW2Dc3uwkgNLv+pY7QTTXFR1jsnyRTV8C+xbWKJ5qjSl2x0RKu+pnAt6XW9lM=
x-amz-request-id: DRT7WM9CYBQC14RM
last-modified: Wed, 27 Oct 2021 08:58:22 GMT
etag: "eee419cc3abb060cbad577a0bf3c71ca"
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 17191
cache-control: max-age=45283
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/85/s/7602728a6aaa06b86b5798479aebdf13.jpg
200 OK 15 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/85/s/7602728a6aaa06b86b5798479aebdf13.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x120, components 3\012- data
Hash 3d3ae39682b630350cb9a3560a49fcc6
483923f1cf9c742260f842394f69d637d31cb688
b91245f236fe0db161c289dbf8559d80e52fbb5e57671ab8da5d878339781bc6
GET /prod/logoWall/85/s/7602728a6aaa06b86b5798479aebdf13.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DAlVBy3aiKDI65TTY8O1OePj2G9AjnlV9SktaTSQ52AoSNAG52+mjsYDUp3NbzSx+DJtqabYfq8=
x-amz-request-id: DRT0PCPNPCY2W8BG
last-modified: Wed, 01 Jun 2022 02:43:10 GMT
etag: "3d3ae39682b630350cb9a3560a49fcc6"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 15211
cache-control: max-age=76629
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/120/xs/0bdcb2f282e2f66a4aa4ad40576b0aa6.png
200 OK 4.8 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/120/xs/0bdcb2f282e2f66a4aa4ad40576b0aa6.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 80 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 8311fbb29d14ae1a5c50e75ebea81217
7dc1ced1994d409b1dac9bfd970c0cca73902ff1
88f14304e3c4cfa7b049b1187d7b40c49c0b3e620daa3ab0a776475d051ada7c
GET /prod/logoWall/120/xs/0bdcb2f282e2f66a4aa4ad40576b0aa6.png HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 8Y1338Ue9UdzNqvGDMhXNzfZLmdJDDQxXx57/QzoW1Hf3AzcxdVPdiLs6UuTpvIstyCKOerQwvg=
x-amz-request-id: 22MZS37AES1VXBZV
last-modified: Fri, 30 Sep 2022 05:46:11 GMT
etag: "8311fbb29d14ae1a5c50e75ebea81217"
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 4830
cache-control: max-age=45283
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/136/s/269dc961b06104c69b3af7e27fb6776d.png
200 OK 53 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/136/s/269dc961b06104c69b3af7e27fb6776d.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 240 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 17687f620ccae59d61d077cea644b0a3
1b4bcacd6e16cde2d5096189c7ea65489f81032e
6c40b6b60f9283df5b43a959dfe1aba06752293e44f04e7570047c42306973d9
GET /prod/logoWall/136/s/269dc961b06104c69b3af7e27fb6776d.png HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: jw7KvNXWaaenb4UBK1hO/yhFIGLVbT9jBqUodvJz4hnEHZdwPkN1RvViZkI8O7oYux4m/GvnjmQ=
x-amz-request-id: M24S7HH640955EZ6
last-modified: Wed, 21 Dec 2022 08:08:48 GMT
etag: "17687f620ccae59d61d077cea644b0a3"
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 53133
cache-control: max-age=76594
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/39/xs/0c2f2b34f4131ab7481f4a07324ad1e1.jpg
200 OK 2.9 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/39/xs/0c2f2b34f4131ab7481f4a07324ad1e1.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x40, components 3\012- data
Hash ba2aad1a949046e4a6083ecfc7c72566
a031e164ddb7d64f511d7f24f2cbebb8d12d90d9
b5f05e105b1ddfd1f381a73bedfe67783418c49b1aaa750af3d037db643411a8
GET /prod/logoWall/39/xs/0c2f2b34f4131ab7481f4a07324ad1e1.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: EF3Z89mt/oKzCasf000Zp+Lhl6HJ3v1WCNmv4UJyFtQcII31W9hiJLKkLAsg9b6fqfQ+znomS1c=
x-amz-request-id: DRT674B96HBT9H4Z
last-modified: Wed, 27 Oct 2021 07:40:49 GMT
etag: "ba2aad1a949046e4a6083ecfc7c72566"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 2856
cache-control: max-age=45283
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/38/xs/b36b5ccd6958c41da29539ef2da9642f.jpg
200 OK 3.5 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/38/xs/b36b5ccd6958c41da29539ef2da9642f.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x40, components 3\012- data
Hash 88c639f47101a4ff9fa6d7eceedfa1cf
f0b59b6c119651fe76690acd65127efe389979fb
78532bdb9685eeaccddae1848a28bfa779dd609330801d5794ceca58ae50b60c
GET /prod/logoWall/38/xs/b36b5ccd6958c41da29539ef2da9642f.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 0v/26RB4913Qxr+9NCDimnvatB2jjN4YOnf/pJeyCW/zTmBl/CPMT6DQH70PXk/680n1SLx5Jmo=
x-amz-request-id: DRT9VJ0DKYWM1SPY
last-modified: Wed, 27 Oct 2021 07:40:05 GMT
etag: "88c639f47101a4ff9fa6d7eceedfa1cf"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 3469
cache-control: max-age=45283
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
cimg.cnyes.cool/prod/logoWall/63/s/543cb8e5ec47cd6db7ed9498d53f139a.jpg
200 OK 12 kB URL HTTP/2 cimg.cnyes.cool/prod/logoWall/63/s/543cb8e5ec47cd6db7ed9498d53f139a.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x120, components 3\012- data
Hash f2029158b81935796372e8f2f45cef87
18c34402579c6975fd520ef06c537bcdcbdb24bc
a4adc3d43c3ce3755fd9fa6c4850c654361a11a5547361d461e9001b9a2797b9
GET /prod/logoWall/63/s/543cb8e5ec47cd6db7ed9498d53f139a.jpg HTTP/1.1
Host: cimg.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: fw3rDWgmZJxp4jISaY6sYyDBJqwxVxLi4kJccC22lbhBtu8moe9wvbsQZEpaZoQVOIay2mqZ+p8=
x-amz-request-id: B5GWPJH0JH891HV6
last-modified: Mon, 03 Oct 2022 07:27:32 GMT
etag: "f2029158b81935796372e8f2f45cef87"
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 11799
cache-control: max-age=45283
date: Fri, 23 Dec 2022 13:11:21 GMT
X-Firefox-Spdy: h2
news.cnyes.com/dist/3b1f70180567d29ae587471edfe67a9b.svg
200 OK 828 B URL HTTP/2 news.cnyes.com/dist/3b1f70180567d29ae587471edfe67a9b.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1599)
Hash 6847ffd5813ec6f9b076a2b82ea3b7bf
50e8aac86f3590844cf94702055acaca4fc11ff2
d6705929b2638a1a7599e8fe7c35ba44a2e74a06b14e188f3c04c3c8e5c5737c
GET /dist/3b1f70180567d29ae587471edfe67a9b.svg HTTP/1.1
Host: news.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/news/id/5044599
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _cnyes_fontloaded=1; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1; _ss_pp_id=f7c5c0ad6094d3040b71671801079260; _td=b1829e9d-48c9-42e8-b9d6-1832b4c43a7a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: openresty
content-type: image/svg+xml
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-request-id: e62d58ad-b5d0-4872-9705-7906d1f144ad
x-c-cache: MISS
content-encoding: gzip
cache-control: public, must-revalidate, max-age=31405039, s-maxage=31536000
date: Fri, 23 Dec 2022 13:11:21 GMT
content-length: 828
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.popin.cc/test/popin_send_cookie_set_fail.js?20201223
200 OK 4.1 kB URL HTTP/1.1 api.popin.cc/test/popin_send_cookie_set_fail.js?20201223
IP
File type Unicode text, UTF-8 text, with very long lines (1877)
Hash fc15eab2a6dfd4958c93a6ab0d7f06ed
e098ee5395424b62ca0200de08594cb1da222ff1
8efeb44ee0ab4ced4f4926a7e388d1ccf0b641d9bdeb251dc21cb51286a953e6
GET /test/popin_send_cookie_set_fail.js?20201223 HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Dec 2022 13:11:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 11 Oct 2021 03:29:29 GMT
ETag: W/"27aab2e5fb58e044704790074416e410"
x-amz-version-id: NVPBtcLlaQ0R5YVGUD48RBS0d2V00MrK
Expires: Fri, 23 Dec 2022 14:11:21 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.26
Content-Encoding: gzip
hao.cnyes.com/ho_api/1/list_article_bycategory_20
200 OK 85 kB URL HTTP/2 hao.cnyes.com/ho_api/1/list_article_bycategory_20
IP
ASN #3462 Data Communication Business Group
Hash 7468919f0838c5841e64eb51d638dafe
af9895cc1374b12f69f6c230e218c2f15acbe899
0a7c8dae18d5d9a6231dc6fde71392b490195b6d2fd0717cd568afbb7f09125e
POST /ho_api/1/list_article_bycategory_20 HTTP/1.1
Host: hao.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 61
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: application/json; charset=utf-8
cache-control: private
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2Fcc1a43fbad9845d9958598c8d2c9cbdf.jpeg
200 OK 3.3 kB URL HTTP/2 hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2Fcc1a43fbad9845d9958598c8d2c9cbdf.jpeg
IP
ASN #3462 Data Communication Business Group
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash e2cba795b0fefd135498548b34881ba4
7acd5f7ee00c188c17816e52df88d75854d76ce1
366028ada86738b523c8fff0028ed66163d8509cbfe030745672a470ccf5a22c
GET /download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2Fcc1a43fbad9845d9958598c8d2c9cbdf.jpeg HTTP/1.1
Host: hao.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1; _ss_pp_id=f7c5c0ad6094d3040b71671801079260; _td=b1829e9d-48c9-42e8-b9d6-1832b4c43a7a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: image/jpeg
content-length: 3263
cache-control: max-age=31536000
etag: 0
content-disposition: filename=cc1a43fbad9845d9958598c8d2c9cbdf.jpeg
expires: Sat, 23 Dec 2023 13:11:21 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F45a6eedca326453fb7a24d7431a1ad59.jpg
200 OK 3.7 kB URL HTTP/2 hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F45a6eedca326453fb7a24d7431a1ad59.jpg
IP
ASN #3462 Data Communication Business Group
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash 0775799b4f72bec54c9767bcc85c1099
4c989ac58f4ef05d95d180d0140dba2415374c21
f27840b3f09c04a0a1af1d4a0cadc5a5ce66e3019e109df2a9e9ece8dafc6500
GET /download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F45a6eedca326453fb7a24d7431a1ad59.jpg HTTP/1.1
Host: hao.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1; _ss_pp_id=f7c5c0ad6094d3040b71671801079260; _td=b1829e9d-48c9-42e8-b9d6-1832b4c43a7a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: image/jpeg
content-length: 3728
cache-control: max-age=31536000
etag: 0
content-disposition: filename=45a6eedca326453fb7a24d7431a1ad59.jpg
expires: Sat, 23 Dec 2023 13:11:21 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2Fec62b3380fdb4f10a7df4e424ea3f728.jpg
200 OK 3.4 kB URL HTTP/2 hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2Fec62b3380fdb4f10a7df4e424ea3f728.jpg
IP
ASN #3462 Data Communication Business Group
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash 7d9c57b0895fe8e3689756a2580f0be2
b8704757aeebaf47337f0f956f3940a01084991a
8b3b5e05f5a99a1263c0d0cc57a64df18a9c7d255556b6d1904e39fe78dc1218
GET /download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2Fec62b3380fdb4f10a7df4e424ea3f728.jpg HTTP/1.1
Host: hao.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1; _ss_pp_id=f7c5c0ad6094d3040b71671801079260; _td=b1829e9d-48c9-42e8-b9d6-1832b4c43a7a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: image/jpeg
content-length: 3374
cache-control: max-age=31536000
etag: 0
content-disposition: filename=ec62b3380fdb4f10a7df4e424ea3f728.jpg
expires: Sat, 23 Dec 2023 13:11:21 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F9b759036469d4518a542d41c683ab92b.jpg
200 OK 2.7 kB URL HTTP/2 hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F9b759036469d4518a542d41c683ab92b.jpg
IP
ASN #3462 Data Communication Business Group
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash 4707e2b846618bfb92af6b566532207a
1c7aa3c6ce6d088f8e7ab3ab4ad6130f30f64ae5
d21ab8fb5a5a6f53325f1450cca0f718971c71c660bd055f9365905830e10f17
GET /download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F9b759036469d4518a542d41c683ab92b.jpg HTTP/1.1
Host: hao.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1; _ss_pp_id=f7c5c0ad6094d3040b71671801079260; _td=b1829e9d-48c9-42e8-b9d6-1832b4c43a7a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: image/jpeg
content-length: 2672
cache-control: max-age=31536000
etag: 0
content-disposition: filename=9b759036469d4518a542d41c683ab92b.jpg
expires: Sat, 23 Dec 2023 13:11:21 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F960b3e70fb934a4db55221c23a509c56.jpg
200 OK 3.4 kB URL HTTP/2 hao.cnyes.com/download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F960b3e70fb934a4db55221c23a509c56.jpg
IP
ASN #3462 Data Communication Business Group
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash b2be09d8f26a34c099431c72c6aaed7f
8691473c35d6d17a30edc4b9576cc424cb8a3ddf
17fd314bdd6680ac940b457a541a84228c70344f66da4fc5617781fa204ade13
GET /download_image.ashx?width=92&height=92&mode=crop&file=%2FUpload%2F960b3e70fb934a4db55221c23a509c56.jpg HTTP/1.1
Host: hao.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: _ga_102K295BQ2=GS1.1.1671801077.1.0.1671801078.0.0.0; _ga=GA1.2.1739906450.1671801077; _ga_8TWX1BB401=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_2BVLDTG67S=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_K2G27WCZTW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_NE4TM9SQSQ=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_4YF5400EXG=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_YYXSKSSECP=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_Q14GZ4B1PW=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_GKB9P32LP6=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_DD4BMYVW48=GS1.1.1671801077.1.0.1671801077.0.0.0; _ga_W8YSQ71T94=GS1.1.1671801078.1.0.1671801078.0.0.0; contrendian_score=%7B%22holdList%22%3A%5B%7B%22weight%22%3A0.4%2C%22name%22%3A%22%E5%8D%97%E5%85%89%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%221752%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E8%B6%85%E8%B1%90%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222441%22%7D%2C%7B%22weight%22%3A0.2%2C%22name%22%3A%22%E4%B8%AD%E9%B4%BB%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%222014%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E5%81%A5%E5%96%AC%22%2C%22isFund%22%3Afalse%2C%22code%22%3A%224114%22%7D%2C%7B%22weight%22%3A0.1%2C%22name%22%3A%22%E9%9C%B8%E8%8F%B1%E4%BA%9E%E6%B4%B2%E5%A2%9E%E9%95%B7%E5%9F%BA%E9%87%91-A%E9%A1%9E%E8%8B%B1%E9%8E%8A%E9%85%8D%E6%81%AF%E5%9E%8B%22%2C%22isFund%22%3Atrue%7D%5D%2C%22ScoreData%22%3A%7B%22current%22%3A8.39%2C%22optimized%22%3A16.5%7D%7D; _ga_G733DLJ15Z=GS1.1.1671801078.1.0.1671801078.0.0.0; __asc=504e1ec41853f1c03611c1dc766; __auc=504e1ec41853f1c03611c1dc766; _gid=GA1.2.1140170901.1671801079; _gat_gtag_UA_145056278_3=1; _gat_gtag_UA_21465399_47=1; _gat_gtag_UA_145056278_1=1; _gat_gtag_UA_21465399_69=1; _gat_UA-145056278-3=1; _gat_UA-145056278-11=1; _ss_pp_id=f7c5c0ad6094d3040b71671801079260; _td=b1829e9d-48c9-42e8-b9d6-1832b4c43a7a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: image/jpeg
content-length: 3432
cache-control: max-age=31536000
etag: 0
content-disposition: filename=960b3e70fb934a4db55221c23a509c56.jpg
expires: Sat, 23 Dec 2023 13:11:21 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
sb.scorecardresearch.com/b?c1=2&c2=13087006&cs_it=b3&cv=3.8.0.210223&ns__t=1671801078605&ns_c=UTF-8&c7=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&c8=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&c9=
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=2&c2=13087006&cs_it=b3&cv=3.8.0.210223&ns__t=1671801078605&ns_c=UTF-8&c7=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&c8=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&c9=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=2&c2=13087006&cs_it=b3&cv=3.8.0.210223&ns__t=1671801078605&ns_c=UTF-8&c7=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&c8=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&c9= HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 23 Dec 2022 13:11:22 GMT
set-cookie: UID=13C6b1b83bf488424398b2b1671801082; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6bHb-ZBfKOk42gJl8n2RLosFFHBRlyKF17871fgX2_WvrV-CejOUOA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 118e9e463e1e5174953658f35fb83427
8c2ba52661133dc0d78d0a756996ddb690112e35
8d56cd051472c79b399e7fe5165f4bf46761fb30b519177a8ff76da17214dd36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29d3696d17220dcd271363e420d6d592
16fb6e6352605346ddca3f28e69ed5e3b3980057
3a5946f894fc0ec400905c1a88a943fb60b5170dc0fc6946c13f800964af79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.cnyes.com/media/api/v1/adNewsSuffixes/830
200 OK 62 B URL HTTP/2 api.cnyes.com/media/api/v1/adNewsSuffixes/830
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /media/api/v1/adNewsSuffixes/830 HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.cnyes.com/api/v1/tag/popular?kind=1&limit=30
200 OK 62 B URL HTTP/2 api.cnyes.com/api/v1/tag/popular?kind=1&limit=30
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /api/v1/tag/popular?kind=1&limit=30 HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/940526663/?random=1671801077384&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=2486901150&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/940526663/?random=1671801077384&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=2486901150&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/940526663/?random=1671801077384&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=2486901150&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-1&cid=1739906450.1671801077&jid=484967864&_u=YADAAUATQAAAACAAI~&z=126993457
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-1&cid=1739906450.1671801077&jid=484967864&_u=YADAAUATQAAAACAAI~&z=126993457
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-1&cid=1739906450.1671801077&jid=484967864&_u=YADAAUATQAAAACAAI~&z=126993457 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/adContents/News_float_btn
200 OK 62 B URL HTTP/2 api.cnyes.com/media/api/v1/adContents/News_float_btn
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /media/api/v1/adContents/News_float_btn HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29d3696d17220dcd271363e420d6d592
16fb6e6352605346ddca3f28e69ed5e3b3980057
3a5946f894fc0ec400905c1a88a943fb60b5170dc0fc6946c13f800964af79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&_u=YADAAUATQAAAACAAI~&z=630859788
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&_u=YADAAUATQAAAACAAI~&z=630859788
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&_u=YADAAUATQAAAACAAI~&z=630859788 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/940526663/?random=1671801077384&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=2486901150&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/940526663/?random=1671801077384&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=2486901150&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/940526663/?random=1671801077384&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=2486901150&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 118e9e463e1e5174953658f35fb83427
8c2ba52661133dc0d78d0a756996ddb690112e35
8d56cd051472c79b399e7fe5165f4bf46761fb30b519177a8ff76da17214dd36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 29d3696d17220dcd271363e420d6d592
16fb6e6352605346ddca3f28e69ed5e3b3980057
3a5946f894fc0ec400905c1a88a943fb60b5170dc0fc6946c13f800964af79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&_u=YADAAUATQAAAACAAI~&z=630859788
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&_u=YADAAUATQAAAACAAI~&z=630859788
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-3&cid=1739906450.1671801077&jid=1065345300&_u=YADAAUATQAAAACAAI~&z=630859788 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/adContents/NewsEndQuote_D
200 OK 62 B URL HTTP/2 api.cnyes.com/media/api/v1/adContents/NewsEndQuote_D
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /media/api/v1/adContents/NewsEndQuote_D HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/adContents/twStock_btn_code_A
200 OK 62 B URL HTTP/2 api.cnyes.com/media/api/v1/adContents/twStock_btn_code_A
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /media/api/v1/adContents/twStock_btn_code_A HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/654852154/?random=1671801077376&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1643008806&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/654852154/?random=1671801077376&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1643008806&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/654852154/?random=1671801077376&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1643008806&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/newslist/categories?key=news24h%3A3%2CtopTopics%3A5%2Cproject%3A1
200 OK 62 B URL HTTP/2 api.cnyes.com/media/api/v1/newslist/categories?key=news24h%3A3%2CtopTopics%3A5%2Cproject%3A1
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /media/api/v1/newslist/categories?key=news24h%3A3%2CtopTopics%3A5%2Cproject%3A1 HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/654852154/?random=1671801077376&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1643008806&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/654852154/?random=1671801077376&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1643008806&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/654852154/?random=1671801077376&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1643008806&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/newslist/categories?key=860%3A6
200 OK 62 B URL HTTP/2 api.cnyes.com/media/api/v1/newslist/categories?key=860%3A6
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /media/api/v1/newslist/categories?key=860%3A6 HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/adContents/Home_RightSide_D
200 OK 127 kB URL HTTP/2 api.cnyes.com/media/api/v1/adContents/Home_RightSide_D
IP
File type ASCII text, with very long lines (2791)
Size 127 kB (126877 bytes)
Hash d5f1fa948a12553b6c9fad41d8bbdcc9
867a9d098b7f282c9a8a19be014bbf339c3eb801
4f42f1177f5cf155df3bf1b72dc122bae35b3dfa3397234f1e4bee9f7f1f495c
OPTIONS /media/api/v1/adContents/Home_RightSide_D HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/689921113/?random=1671801077381&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1096777678&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/689921113/?random=1671801077381&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1096777678&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/689921113/?random=1671801077381&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1096777678&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.cnyes.com/media/api/v1/system/notificationLectures?platform=2
200 OK 62 B URL HTTP/2 api.cnyes.com/media/api/v1/system/notificationLectures?platform=2
IP
Hash 14264ec4f085176d5e5f07235b33195f
087df384002dd5567f7360b90f6422c3a67bc5e8
3120804c6cc0530b0c8ab510bc9a8378ac61100aa04594e9cfa80dc356db6dfa
OPTIONS /media/api/v1/system/notificationLectures?platform=2 HTTP/1.1
Host: api.cnyes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-cnyes-app,x-platform,x-system-kind
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 23 Dec 2022 13:11:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, PATCH
access-control-allow-headers: Origin, x-cnyes-app, x-platform, x-system-kind, authorization, content-type
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-11&cid=1739906450.1671801077&jid=1357589945&_u=YADAAUATQAAAACAAI~&z=468129873
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-11&cid=1739906450.1671801077&jid=1357589945&_u=YADAAUATQAAAACAAI~&z=468129873
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-145056278-11&cid=1739906450.1671801077&jid=1357589945&_u=YADAAUATQAAAACAAI~&z=468129873 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 118e9e463e1e5174953658f35fb83427
8c2ba52661133dc0d78d0a756996ddb690112e35
8d56cd051472c79b399e7fe5165f4bf46761fb30b519177a8ff76da17214dd36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/689921113/?random=1671801077381&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1096777678&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/689921113/?random=1671801077381&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1096777678&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/689921113/?random=1671801077381&cv=11&fst=1671800400000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&tiba=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&fmt=3&is_vtc=1&random=1096777678&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Dec 2022 13:11:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ecc130cabc8432a4c29a8ee3c411345f
ec68a99dcefeae0499da898b048d5a1a850d6256
71a24b7303015b50931d655a2761bd377379b2d8a1fba34d90311bdc1462e5d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sb.scorecardresearch.com/b?c1=7&c2=18986219&c3=100001&cs_it=b3&cv=3.8.0.210223&ns__t=1671801080998&ns_c=UTF-8&c7=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&c8=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&c9=
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=7&c2=18986219&c3=100001&cs_it=b3&cv=3.8.0.210223&ns__t=1671801080998&ns_c=UTF-8&c7=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&c8=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&c9=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=7&c2=18986219&c3=100001&cs_it=b3&cv=3.8.0.210223&ns__t=1671801080998&ns_c=UTF-8&c7=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&c8=%E7%BE%8E%E5%9C%8B%E7%A6%BD%E6%B5%81%E6%84%9F%E7%88%86%E7%99%BC%20%E9%9B%9E%E8%9B%8B%E5%83%B9%E6%A0%BC%E5%89%B5%E6%96%B0%E9%AB%98%20%7C%20Anue%E9%89%85%E4%BA%A8%20-%20%E7%BE%8E%E8%82%A1&c9= HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 23 Dec 2022 13:11:22 GMT
set-cookie: UID=182a0cdee2587b8c63cd8d41671801082; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QWodUq2Lk7R8cyZCTkpgcGoicRgd5GW01UeZEw_WWAtn8ymV80cJ-Q==
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1780874545291502&ev=PageView&dl=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&rl=&if=false&ts=1671801081138&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671801081137.1215558469&it=1671801078747&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1780874545291502&ev=PageView&dl=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&rl=&if=false&ts=1671801081138&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671801081137.1215558469&it=1671801078747&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1780874545291502&ev=PageView&dl=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&rl=&if=false&ts=1671801081138&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=30&fbp=fb.1.1671801081137.1215558469&it=1671801078747&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 23 Dec 2022 13:11:22 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 3.5 kB IP
File type gzip compressed data, from Unix\012- data
Hash d1c35f7f6bf4bfce873383085f398b73
54194c0b04a7378a95146244d696da271fb783c8
596da84d5397a6a23e830626d035fda7ee90050bc843faeff987dd9974efc12f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=118908
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Etag: "63a4d676-117"
Expires: Sat, 24 Dec 2022 22:13:10 GMT
Last-Modified: Thu, 22 Dec 2022 22:13:10 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801081394
200 OK 66 B URL HTTP/2 log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801081394
IP
File type PC bitmap, Windows 3.x format, 1 x 1 x 1, image size 4, cbSize 66, bits offset 62\012- data
Hash 7c62116208fd10b243e77e186f4163c6
179106268a896c22cace0e460a834b99c6e28baf
654b8fbb3beb01a6f08eb873015b728be6ac596b9d51f6c65dbf728e22441e0e
GET /log/popin_media/discoverylogs?data=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&t=1671801081394 HTTP/1.1
Host: log.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.13.5
date: Fri, 23 Dec 2022 13:11:22 GMT
content-type: image/jpeg
content-length: 66
last-modified: Fri, 10 Jan 2020 11:34:08 GMT
etag: "5e186130-42"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ecc130cabc8432a4c29a8ee3c411345f
ec68a99dcefeae0499da898b048d5a1a850d6256
71a24b7303015b50931d655a2761bd377379b2d8a1fba34d90311bdc1462e5d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=news.cnyes.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=news.cnyes.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=news.cnyes.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 23 Dec 2022 13:11:22 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
log.popin.cc/log/popin_ads/adlogs?data=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&t=1671801081421
200 OK 66 B URL HTTP/2 log.popin.cc/log/popin_ads/adlogs?data=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&t=1671801081421
IP
File type PC bitmap, Windows 3.x format, 1 x 1 x 1, image size 4, cbSize 66, bits offset 62\012- data
Hash 7c62116208fd10b243e77e186f4163c6
179106268a896c22cace0e460a834b99c6e28baf
654b8fbb3beb01a6f08eb873015b728be6ac596b9d51f6c65dbf728e22441e0e
GET /log/popin_ads/adlogs?data=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&t=1671801081421 HTTP/1.1
Host: log.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.13.5
date: Fri, 23 Dec 2022 13:11:22 GMT
content-type: image/jpeg
content-length: 66
last-modified: Fri, 10 Jan 2020 11:34:08 GMT
etag: "5e186130-42"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=news.cnyes.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=news.cnyes.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=news.cnyes.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 23 Dec 2022 13:11:22 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801081423
200 OK 66 B URL HTTP/2 log.popin.cc/log/popin_media/discoverylogs?data=eyJyX3VybCI6IiIsInR5cGUiOjAsImFwaV9ob3N0IjoidHcucG9waW4uY2MiLCJkZXZpY2UiOiJwYyIsIm1lZGlhIjoibmV3cy5jbnllcy5jb20iLCJ1cmwiOiJodHRwczovL25ld3MuY255ZXMuY29tL25ld3MvaWQvNTA0NDU5OSIsImxvZ2lkIjoiYzM5M2E3OGEtNzMzYy00OTFhLWJiMTAtZmM5NzU0ZjU3MzQxIiwicmlkIjoiMDAwMDAwIiwidWlkIjoiZjdjNWMwYWQ2MDk0ZDMwNDBiNzE2NzE4MDEwNzkyNjAiLCJ0ZF92ZXJzaW9uIjoiMS43LjEiLCJ0ZF9jbGllbnRfaWQiOiJiMTgyOWU5ZC00OGM5LTQyZTgtYjlkNi0xODMyYjRjNDNhN2EiLCJ0ZF9jaGFyc2V0IjoidXRmLTgiLCJ0ZF9sYW5ndWFnZSI6ImVuLXVzIiwidGRfY29sb3IiOiIyNC1iaXQiLCJ0ZF9zY3JlZW4iOiIxMjgweDEwMjQiLCJ0ZF92aWV3cG9ydCI6IjEyODB4OTM5IiwidGRfdGl0bGUiOiLnvo7lnIvnpr3mtYHmhJ/niIbnmbwg6Zue6JuL5YO55qC85Ym15paw6auYIiwidGRfdXJsIjoiaHR0cHM6Ly9uZXdzLmNueWVzLmNvbS9uZXdzL2lkLzUwNDQ1OTkiLCJ0ZF91c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTA1LjAiLCJ0ZF9wbGF0Zm9ybSI6IkxpbnV4IHg4Nl82NCIsInRkX2hvc3QiOiJuZXdzLmNueWVzLmNvbSIsInRkX3BhdGgiOiIvbmV3cy9pZC81MDQ0NTk5IiwidGRfcmVmZXJyZXIiOiIiLCJ0ZF9icm93c2VyIjoiRmlyZWZveCIsInRkX2Jyb3dzZXJfdmVyc2lvbiI6IjEwNS4wLjAiLCJ0ZF9vcyI6IldpbmRvd3MiLCJ0ZF9vc192ZXJzaW9uIjoiMTAuMC4wIiwiY2xpZW50X2lkIjoiYjE4MjllOWQtNDhjOS00MmU4LWI5ZDYtMTgzMmI0YzQzYTdhIiwiY29tbW9uX2NhdGVnb3J5IjoibGlmZXN0eWxlIiwiY2F0ZWdvcnkiOiLnvo7ogqEiLCJhYnRlc3QiOiJwYyIsImV4dHJhIjoiIiwiaW50ZXJhY3Rpb25fbnVtYmVyIjowLCJwb3Bpbl92ZXJzaW9uIjo2fQ==&t=1671801081423
IP
File type PC bitmap, Windows 3.x format, 1 x 1 x 1, image size 4, cbSize 66, bits offset 62\012- data
Hash 7c62116208fd10b243e77e186f4163c6
179106268a896c22cace0e460a834b99c6e28baf
654b8fbb3beb01a6f08eb873015b728be6ac596b9d51f6c65dbf728e22441e0e
GET /log/popin_media/discoverylogs?data=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&t=1671801081423 HTTP/1.1
Host: log.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.13.5
date: Fri, 23 Dec 2022 13:11:22 GMT
content-type: image/jpeg
content-length: 66
last-modified: Fri, 10 Jan 2020 11:34:08 GMT
etag: "5e186130-42"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
log.popin.cc/log/popin_media/discoverylogs?data=eyJ0eXBlIjo3LCJpc19mZWVkX21vZHVsZSI6IiIsImNoYW5uZWxfaWQiOiJ3aXRoX3N6X3BjIiwiZXhwZWN0ZWRfYWQiOjMsInJlbmRlcmVkX2FkIjozLCJhcGlfaG9zdCI6InR3LnBvcGluLmNjIiwiZGV2aWNlIjoicGMiLCJtZWRpYSI6Im5ld3MuY255ZXMuY29tIiwidXJsIjoiaHR0cHM6Ly9uZXdzLmNueWVzLmNvbS9uZXdzL2lkLzUwNDQ1OTkiLCJsb2dpZCI6ImMzOTNhNzhhLTczM2MtNDkxYS1iYjEwLWZjOTc1NGY1NzM0MSIsInJpZCI6IjAwMDAwMCIsInVpZCI6ImY3YzVjMGFkNjA5NGQzMDQwYjcxNjcxODAxMDc5MjYwIiwidGRfdmVyc2lvbiI6IjEuNy4xIiwidGRfY2xpZW50X2lkIjoiYjE4MjllOWQtNDhjOS00MmU4LWI5ZDYtMTgzMmI0YzQzYTdhIiwidGRfY2hhcnNldCI6InV0Zi04IiwidGRfbGFuZ3VhZ2UiOiJlbi11cyIsInRkX2NvbG9yIjoiMjQtYml0IiwidGRfc2NyZWVuIjoiMTI4MHgxMDI0IiwidGRfdmlld3BvcnQiOiIxMjgweDkzOSIsInRkX3RpdGxlIjoi576O5ZyL56a95rWB5oSf54iG55m8IOmbnuibi+WDueagvOWJteaWsOmrmCIsInRkX3VybCI6Imh0dHBzOi8vbmV3cy5jbnllcy5jb20vbmV3cy9pZC81MDQ0NTk5IiwidGRfdXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQ7IHJ2OjEwNS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEwNS4wIiwidGRfcGxhdGZvcm0iOiJMaW51eCB4ODZfNjQiLCJ0ZF9ob3N0IjoibmV3cy5jbnllcy5jb20iLCJ0ZF9wYXRoIjoiL25ld3MvaWQvNTA0NDU5OSIsInRkX3JlZmVycmVyIjoiIiwidGRfYnJvd3NlciI6IkZpcmVmb3giLCJ0ZF9icm93c2VyX3ZlcnNpb24iOiIxMDUuMC4wIiwidGRfb3MiOiJXaW5kb3dzIiwidGRfb3NfdmVyc2lvbiI6IjEwLjAuMCIsImNsaWVudF9pZCI6ImIxODI5ZTlkLTQ4YzktNDJlOC1iOWQ2LTE4MzJiNGM0M2E3YSIsImNvbW1vbl9jYXRlZ29yeSI6ImxpZmVzdHlsZSIsImNhdGVnb3J5Ijoi576O6IKhIiwiYWJ0ZXN0IjoicGMiLCJleHRyYSI6IiIsImludGVyYWN0aW9uX251bWJlciI6MCwicG9waW5fdmVyc2lvbiI6Nn0=&t=1671801081512
200 OK 66 B URL HTTP/2 log.popin.cc/log/popin_media/discoverylogs?data=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&t=1671801081512
IP
File type PC bitmap, Windows 3.x format, 1 x 1 x 1, image size 4, cbSize 66, bits offset 62\012- data
Hash 7c62116208fd10b243e77e186f4163c6
179106268a896c22cace0e460a834b99c6e28baf
654b8fbb3beb01a6f08eb873015b728be6ac596b9d51f6c65dbf728e22441e0e
GET /log/popin_media/discoverylogs?data=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&t=1671801081512 HTTP/1.1
Host: log.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.13.5
date: Fri, 23 Dec 2022 13:11:22 GMT
content-type: image/jpeg
content-length: 66
last-modified: Fri, 10 Jan 2020 11:34:08 GMT
etag: "5e186130-42"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
api.popin.cc/images/logo.png
200 OK 2.3 kB URL HTTP/1.1 api.popin.cc/images/logo.png
IP
File type PNG image data, 50 x 27, 8-bit/color RGBA, non-interlaced\012- data
Hash b10c5c3579ba2dba39fd2804188dc3f1
78da02fbb041e95956fe9f1b861e9807ad9c3c85
6753ab9ab14844d0e9ecbbf13df7accf525291cef950547034e5ab67be9e508e
GET /images/logo.png HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Dec 2022 13:11:22 GMT
Content-Type: image/png
Content-Length: 2316
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 12:00:56 GMT
ETag: "b10c5c3579ba2dba39fd2804188dc3f1"
x-amz-version-id: null
Expires: Fri, 23 Dec 2022 14:11:22 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.26
Accept-Ranges: bytes
player.svc.litv.tv/meta/config/cy2-config.json?cb=38699
200 OK 881 B URL HTTP/2 player.svc.litv.tv/meta/config/cy2-config.json?cb=38699
IP
File type JSON data\012- , ASCII text, with very long lines (881), with no line terminators
Hash 5780eae4f5c6b30a1afabe3bb42eef78
5da1e6da121b4cc858afb355da27c9d69e26e2fd
2c963a9a9e780bb62fda49df87300f9236d09db03bd2b976f581b33f5a67aa71
GET /meta/config/cy2-config.json?cb=38699 HTTP/1.1
Host: player.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 881
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Mon, 12 Dec 2022 00:05:05 GMT
x-amz-version-id: 0J3w4h9cPAM1HUoezmT2.2rY0M5b7D93
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Dec 2022 04:44:09 GMT
cache-control: max-age=43200
etag: "5780eae4f5c6b30a1afabe3bb42eef78"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ba172beaa058835048fe52f15497da64.cloudfront.net (CloudFront)
x-amz-cf-pop: WAW51-P2
x-amz-cf-id: lcadTuUNMQRT1w_lnStmc6fyWIyOKhXOOKOBE1afCrLhtu6Hzv7eEw==
age: 30434
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b15ab1f966ae78886b1b14ee7632fe11
a09548cc1267762be5b049d5139779a84a3ff785
205f14722d14d05edb8f8ffd246f404688ccea02a110024313c5f26a5e97333e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156371
Date: Fri, 23 Dec 2022 13:11:22 GMT
Etag: "63a553aa-1d7"
Expires: Sun, 25 Dec 2022 08:37:33 GMT
Last-Modified: Fri, 23 Dec 2022 07:07:22 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wmOMTMQ2Bs6mZ-ylrkvMBacWdqiA3PJnHBclxrsgaM0KHjAoi3MjPg==
Age: 5411
in.treasuredata.com/js/v3/event/popin_ads/adlogs?api_key=8378%2F25839e06ce4cc1cab55c1c1f1e49d336d6d1d48f&modified=1671801081418&data=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%2BjuWci%2Bemvea1geaEn%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%3D&callback=TreasureJSONPCallback0
200 OK 89 B URL HTTP/1.1 in.treasuredata.com/js/v3/event/popin_ads/adlogs?api_key=8378%2F25839e06ce4cc1cab55c1c1f1e49d336d6d1d48f&modified=1671801081418&data=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%2BjuWci%2Bemvea1geaEn%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%3D&callback=TreasureJSONPCallback0
IP
File type ASCII text, with no line terminators
Hash 1aab68895d622f0676a77d85793daa71
7939e759c1b05f6237c55b10363610c9a5048e30
3aa9f235c06f8205b4b91091c02bbb8c8a23b12fafa257f68aecc4be22e8b7c0
GET /js/v3/event/popin_ads/adlogs?api_key=8378%2F25839e06ce4cc1cab55c1c1f1e49d336d6d1d48f&modified=1671801081418&data=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%2BjuWci%2Bemvea1geaEn%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%3D&callback=TreasureJSONPCallback0 HTTP/1.1
Host: in.treasuredata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 23 Dec 2022 13:11:23 GMT
P3P: CP="This is not a P3P policy! See https://docs.treasuredata.com/articles/p3p"
Set-Cookie: _td_global=442b88ed-0cf4-4746-b645-0550a5bc1aed; Path=/; Expires=Sun, 22 Dec 2024 13:11:23 GMT; Domain=in.treasuredata.com; SameSite=none; Secure
Strict-Transport-Security: max-age=31536000
Content-Length: 89
Connection: keep-alive
player.svc.litv.tv/v3/ex.html?id=ppn-Y3ky|Y3k=-0
200 OK 17 kB URL HTTP/2 player.svc.litv.tv/v3/ex.html?id=ppn-Y3ky|Y3k=-0
IP
Hash 86e58d8ab94dd54516a1cca7f7e9135b
3d789ca95240b8e389434bcd4594b5024a15453a
3700842eca47b120ce9119a30501059945301a7986f5fd8bd67fccfca8d8d97e
GET /v3/ex.html?id=ppn-Y3ky|Y3k=-0 HTTP/1.1
Host: player.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Fri, 23 Dec 2022 06:51:46 GMT
last-modified: Sun, 04 Dec 2022 17:08:44 GMT
etag: W/"8fc323dc5873b6111460be445ddc90f0"
x-amz-version-id: 7Ajs5Y4.aJv1Ys6aMTDspjVgEU4Lq1gT
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ba172beaa058835048fe52f15497da64.cloudfront.net (CloudFront)
x-amz-cf-pop: WAW51-P2
x-amz-cf-id: 0Qsm0tdupYRH5u-t2FAMqwuMAYUqeqCWdhjtL0PJhpiqaqVRENlcRg==
age: 22777
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/9bU9G03jYgk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/9bU9G03jYgk
IP
Hash ac2e4ed87bd4a715b2b0a7f12e85847a
896db2e704e1f6e5c48b8d797c2d612cecdfe874
8d6ce6c1ac002357812f0a1543a62488b1963e480f7a484783587d63b4db07e6
POST /s/gts1d4/9bU9G03jYgk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/p-HdrW3zxbY
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/p-HdrW3zxbY
IP
Hash f665416eb8b837f32a7509b681433c3d
5a22aef9e78c6b3ada69e230b5bf68be504c929b
86ac342e5e8b979bb3844e1b1c5123dce610b87dd9998d91665a8e969ea629c6
POST /s/gts1d4/p-HdrW3zxbY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
redir.adap.tv/redir/javascript/lightintegration.js
200 OK 32 kB URL HTTP/2 redir.adap.tv/redir/javascript/lightintegration.js
IP
File type ASCII text, with very long lines (31633), with no line terminators
Hash 1de3d0b5f3cbe8b1e87e274f129ac0e7
6a587c28a450bab3f494cecdf6a8fca4ce3b0027
1e15f65bcef05f2ea9f54e051da9bf7e6fc9eb00a669905c9ed33f4fd7ba26f7
GET /redir/javascript/lightintegration.js HTTP/1.1
Host: redir.adap.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
age: 588598
content-type: text/plain
date: Fri, 23 Dec 2022 13:11:23 GMT
etag: "1de3d0b5f3cbe8b1e87e274f129ac0e7"
last-modified: Wed, 13 Sep 2017 23:08:44 GMT
server: ECAcc (ska/F693)
x-amz-id-2: pr/UqCB1k07bh6FlCt2Ui/pNc5vhOQudzWcyjygv3X90QgoTBY5ztBizvnUpZxWFpUO4XW9hC6I=
x-amz-meta-s3cmd-attrs: uid:1000/gname:adaptv/uname:adaptv/gid:1000/mode:33188/mtime:1505344053/atime:1505344249/md5:1de3d0b5f3cbe8b1e87e274f129ac0e7/ctime:1505344249
x-amz-replication-status: COMPLETED
x-amz-request-id: DDF0PQC23W9AQSQA
x-amz-version-id: XGOCJEPvmrIOhn2ZV_.qAlIiRmN7Rqa0
x-cache: HIT
content-length: 31633
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 50d34eea19a68237940fa3cbc8e6de23
232456ba3b995cc8aaaf01bd3caf96e2553ef9ee
6a8bd93d6735e247682e2ed0fa8998baffc09965012af016eae85066db2e4460
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=118908
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Etag: "63a4d676-117"
Expires: Sat, 24 Dec 2022 22:13:11 GMT
Last-Modified: Thu, 22 Dec 2022 22:13:10 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/s/gts1d4/p-HdrW3zxbY
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/p-HdrW3zxbY
IP
Hash f665416eb8b837f32a7509b681433c3d
5a22aef9e78c6b3ada69e230b5bf68be504c929b
86ac342e5e8b979bb3844e1b1c5123dce610b87dd9998d91665a8e969ea629c6
POST /s/gts1d4/p-HdrW3zxbY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adsv.svc.litv.tv/avs
200 OK 2 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /avs HTTP/1.1
Host: adsv.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.svc.litv.tv
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 23 Dec 2022 13:11:22 GMT
content-type: application/json
content-length: 2
vary: Origin
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adsv.svc.litv.tv/rts
200 OK 2 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /rts HTTP/1.1
Host: adsv.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fino.svc.litv.tv
Connection: keep-alive
Referer: https://fino.svc.litv.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 23 Dec 2022 13:11:23 GMT
content-type: application/json
content-length: 2
vary: Origin
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/9bU9G03jYgk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/9bU9G03jYgk
IP
Hash ac2e4ed87bd4a715b2b0a7f12e85847a
896db2e704e1f6e5c48b8d797c2d612cecdfe874
8d6ce6c1ac002357812f0a1543a62488b1963e480f7a484783587d63b4db07e6
POST /s/gts1d4/9bU9G03jYgk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pusti.svc.litv.tv/puid
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /puid HTTP/1.1
Host: pusti.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://news.cnyes.com
access-control-max-age: 60
date: Fri, 23 Dec 2022 13:11:23 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.popin.tw/biz_recommend_js.php?t=1671801081503
200 OK 392 B URL HTTP/2 api.popin.tw/biz_recommend_js.php?t=1671801081503
IP
File type ASCII text, with very long lines (815), with no line terminators
Hash 4cf009ffdc319aed03a374281437aa09
c7b2667019f621c120ff64407ef17869a2c1c31d
2fb851d879d80924ee69d8ecc150eadd4bc6fc36e0a295a3c46337b53d260835
GET /biz_recommend_js.php?t=1671801081503 HTTP/1.1
Host: api.popin.tw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Dec 2022 13:11:23 GMT
content-type: application/x-javascript
x-powered-by: PHP/7.2.34
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eOY4YVEkdMhmgkuJA1QXLGxaQLdpnh9CszD4rdi5J7OgxIr4aeeVvsN7yzYB3AaWj1B7WLGhlRBlbqkFFfQvsK7iAc130VcViNTMrkWR2J%2F0yZ13PRkwv%2FDw133pfNE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e157bf4c7fb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
inrecsys.popin.cc/PopinService/Logs/other?data=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
200 OK 0 B URL HTTP/1.1 inrecsys.popin.cc/PopinService/Logs/other?data=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /PopinService/Logs/other?data=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 HTTP/1.1
Host: inrecsys.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain
Cross-Origin-Resource-Policy: cross-origin
r.popin.cc/log.gif?type=related-tw&uid=f7c5c0ad6094d3040b71671801079260&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&t=1671801081513
200 OK 35 B URL HTTP/2 r.popin.cc/log.gif?type=related-tw&uid=f7c5c0ad6094d3040b71671801079260&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&t=1671801081513
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /log.gif?type=related-tw&uid=f7c5c0ad6094d3040b71671801079260&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&t=1671801081513 HTTP/1.1
Host: r.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:23 GMT
content-type: image/gif
content-length: 35
last-modified: Tue, 10 Sep 2019 08:00:09 GMT
etag: "5d775809-23"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0efe6c6adeed3fcee312af52fd09aa65
4e6bcd2a7af8e40806bb432987e92e195396cf71
580daa8185c8d6d478f6ca1a0d0a993bb3ac0c4b6b7d79ca6873436fc6a003e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.yimg.com/wi/ytc.js
200 OK 40 kB IP
Hash 9e93b4aeb52e4f8d89d8cdb6d22ecebb
270b88b803ad45d61c1e2b8aafbd91dbfefd84f3
e252c10e84646b10a084939d057c829c17af1a0c9b50908d8c7e12326e81a5ff
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QaTPH62bnXehuTmEPCzWa+jNbKq2atr4FKjmkyNcmV4yP4AivOY7Ce2SSEsdXvuv9RungGUjIGs=
x-amz-request-id: AJ4ZKH9MW9KRHH3G
date: Fri, 23 Dec 2022 13:00:15 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 669
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ads.adaptv.advertising.com/cookie?pageUrl=https://player.svc.litv.tv/v3/ex.html?id=ppn-Y3ky|Y3k=-0&isTop=false&callback=1
200 OK 858 B URL HTTP/1.1 ads.adaptv.advertising.com/cookie?pageUrl=https://player.svc.litv.tv/v3/ex.html?id=ppn-Y3ky|Y3k=-0&isTop=false&callback=1
IP
Hash df012041b413b06459977526c7a3454a
fb31bcb0fb9a019034dc6bcd0808ce517a8419d6
e9ed38f0b45c45640497c4a7e605697233438eedfbcd77f11dbffded73d5d2a1
GET /cookie?pageUrl=https://player.svc.litv.tv/v3/ex.html?id=ppn-Y3ky|Y3k=-0&isTop=false&callback=1 HTTP/1.1
Host: ads.adaptv.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: text/html
server: adaptv/1.0
set-cookie: adaptv_page_url="M3h9qeyoFhjizhYsmlsKWXwjd4VgcclFS/QtglwkN6cf2j-8bqT3//lfk1VoNpEHjpTFDYSxOyrDgzb8Z1Dz8Waj2xqWMvW20lMRlBcFikR1Lv6ssBtX3qDrdJaixbMD";Path=/;Domain=.adaptv.advertising.com;Expires=Fri, 23-Dec-2022 13:12:23 GMT; SameSite=None; Secure
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/p-HdrW3zxbY
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/p-HdrW3zxbY
IP
Hash f665416eb8b837f32a7509b681433c3d
5a22aef9e78c6b3ada69e230b5bf68be504c929b
86ac342e5e8b979bb3844e1b1c5123dce610b87dd9998d91665a8e969ea629c6
POST /s/gts1d4/p-HdrW3zxbY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20221207/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221207/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1542)
Hash 6f59900fa87e133bae329372aebefe36
260937d2934233c07b112f3564ec9eca7b529fd7
156c12ec7d6973b5742504716567b70740dd66bee9cc0e1a1608df56e77011fd
GET /pagead/js/r20221207/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7480
x-xss-protection: 0
date: Thu, 22 Dec 2022 17:34:14 GMT
expires: Thu, 05 Jan 2023 17:34:14 GMT
cache-control: public, max-age=1209600
age: 70629
etag: 15631949847000551034
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r.popin.cc/s.gif?url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&uid=f7c5c0ad6094d3040b71671801079260&type=pc_pv&nid=pc&media=news.cnyes.com&r5=ca_%E7%BE%8E%E8%82%A1|ab_pc&t=1671801081422&tz=tw
200 OK 35 B URL HTTP/2 r.popin.cc/s.gif?url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&uid=f7c5c0ad6094d3040b71671801079260&type=pc_pv&nid=pc&media=news.cnyes.com&r5=ca_%E7%BE%8E%E8%82%A1|ab_pc&t=1671801081422&tz=tw
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /s.gif?url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&uid=f7c5c0ad6094d3040b71671801079260&type=pc_pv&nid=pc&media=news.cnyes.com&r5=ca_%E7%BE%8E%E8%82%A1|ab_pc&t=1671801081422&tz=tw HTTP/1.1
Host: r.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Cookie: uid=f7c5c0ad6094d3040b71671801079260
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:23 GMT
content-type: image/gif
content-length: 35
last-modified: Tue, 10 Sep 2019 08:00:09 GMT
etag: "5d775809-23"
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
fino.svc.litv.tv/acs/rts.html
200 OK 7.0 kB URL HTTP/2 fino.svc.litv.tv/acs/rts.html
IP
Hash 2a5cedc5febc8975ada5b2ef8bf905dc
d3d94db61fc3c2ce7e3456e8b8300e2bb9401648
c557e71050c2b854052e2048045457868fd747cc0ce9b197db6391f9acfe5372
GET /acs/rts.html HTTP/1.1
Host: fino.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 22 Dec 2021 06:58:34 GMT
x-amz-version-id: t0fwBPeKC.X5zy_vnCVz9OXdRe3474cK
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 05:23:06 GMT
etag: W/"60d8c5105468ea9606d0fd55ec5c0470"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gvPIpPldMTQ2BZWg1yDa6wtO-JSNUKf1tmkUZAlw0IzT4td3tVd2QA==
age: 28466
X-Firefox-Spdy: h2
jsmodule.svc.litv.tv/videojs/7.20.3/video.novtt.min.js
200 OK 157 kB URL HTTP/2 jsmodule.svc.litv.tv/videojs/7.20.3/video.novtt.min.js
IP
Size 157 kB (156867 bytes)
Hash a330eb82b361bffd8daaf2cad6649f73
9176bcb98e50e72f115bc20b74bf43052c211198
61ea765f079f2201c710c13a758f9117d07507863a77b2b8bd2543efcb657a85
GET /videojs/7.20.3/video.novtt.min.js HTTP/1.1
Host: jsmodule.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 22 Dec 2022 15:15:51 GMT
last-modified: Wed, 12 Oct 2022 03:50:10 GMT
etag: W/"7c3406c18e91c1c0821aaa8bbed51332"
x-amz-version-id: qeyBfoxlwVUb4i5trti3hbZ1JvGdPfjP
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0HsAcrsfnDEqPEdrx4WPpLIlYabzAcut47nDu3A9cMJu_n04T71LXQ==
age: 78931
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10114832.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10114832.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 31991d36d356e76ae58f243f53479582
fc38d33e7e06533744b2ada3f8fb22017e9ba9e4
480d5b26935e27640c98365cfc7bd4a663c82d2affb64ffae8a4bf9b01b5e9fb
GET /wi/config/10114832.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.svc.litv.tv
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: p1ocmyeGheHKUEt8o3Sh+bq5XLZrB1E4jWrWxI/dsnmU6zgEAkuPvLpFVJq9NC2yShXB8J7FoNw=
x-amz-request-id: BV16TS2VRSZ1TJWG
date: Fri, 23 Dec 2022 12:26:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Fri, 01 Apr 2022 21:50:20 GMT
x-amz-expiration: expiry-date="Sun, 07 May 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "31991d36d356e76ae58f243f53479582"
x-amz-server-side-encryption: AES256
x-amz-version-id: LFheN9jReXK1DR2ArxDz7ZU1RNsU84u3
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 2685
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d7ba04c96fcc53849551b9a15a9e81e7
5e493b6d5fb8bec7c7d1699794b682056d3a8147
2f3f1d05f4cb8cb8d2690871d5b83be012e5622041ce266ddc055281579814af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/r20221207/r20110914/abg_lite.js
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/r20221207/r20110914/abg_lite.js
IP
File type ASCII text, with very long lines (1549)
Hash 7b74545d00d535dbc12678e67728d85b
1b23d3aca2b61dbd3ba0bbdbad32f8b063855b51
3e14f4b2636a945ba0561a18df42ff0cf459a7c557c80090aef83bf595ff6d83
GET /pagead/js/r20221207/r20110914/abg_lite.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 11387
x-xss-protection: 0
date: Fri, 23 Dec 2022 00:29:28 GMT
expires: Fri, 06 Jan 2023 00:29:28 GMT
cache-control: public, max-age=1209600
age: 45715
etag: 8197878782792770439
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/879366/html_inpage_rendering_lib_200_276.js
200 OK 60 kB URL HTTP/2 s0.2mdn.net/879366/html_inpage_rendering_lib_200_276.js
IP
File type ASCII text, with very long lines (2322)
Hash 36b0ba015b3250f6bda9e89b898f4707
635c67d8b08f40705e87e9c81cb138aef9c2ecdb
c70af3ba570296102947920e68bfe252d08de33b0464a910dd8e5d3ac58410f3
GET /879366/html_inpage_rendering_lib_200_276.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 60311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:00:22 GMT
expires: Sat, 24 Dec 2022 13:00:22 GMT
cache-control: public, max-age=86400
age: 661
last-modified: Wed, 02 Mar 2022 23:07:25 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d7ba04c96fcc53849551b9a15a9e81e7
5e493b6d5fb8bec7c7d1699794b682056d3a8147
2f3f1d05f4cb8cb8d2690871d5b83be012e5622041ce266ddc055281579814af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_276.js
200 OK 38 kB URL HTTP/2 s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_276.js
IP
File type ASCII text, with very long lines (3095)
Hash 4f9b890a6c4cfbbfd0fb7eff98bf4dde
2db204fb0ee448842b40f84463234ea496763130
8e0d4c67a688228e1ba10b1e1dc367c078edf7e9bc35be0bd4ae8c0ce980647c
GET /879366/express_html_inpage_rendering_lib_200_276.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 37872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 13:33:10 GMT
expires: Fri, 23 Dec 2022 13:33:10 GMT
cache-control: public, max-age=86400
age: 85093
last-modified: Wed, 02 Mar 2022 23:07:26 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d7ba04c96fcc53849551b9a15a9e81e7
5e493b6d5fb8bec7c7d1699794b682056d3a8147
2f3f1d05f4cb8cb8d2690871d5b83be012e5622041ce266ddc055281579814af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pusti.svc.litv.tv/puid
200 OK 83 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3b8e0593a1583a8aa9542ac810983585
ef8af80133ed45f0100d9584959b6870f2cdcb21
53efd19b497e5e1bb72004c2a71e1f9325146dba3362b42b517297df74149623
POST /puid HTTP/1.1
Host: pusti.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news.cnyes.com/
Content-Type: application/json
Origin: https://news.cnyes.com
Content-Length: 242
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://news.cnyes.com
access-control-max-age: 60
cache-control: no-store, max-age=0
content-type: application/json; charset=utf-8
set-cookie: PUID=f18cc69e-30c3-41ae-9708-62a357583004; Path=/; Domain=litv.tv; Expires=Mon, 23 Jan 2023 13:11:23 GMT; HttpOnly; Secure; SameSite=None
date: Fri, 23 Dec 2022 13:11:23 GMT
content-length: 83
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
200 OK 3.2 kB URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash f776950255d7d5d36070e9ff6b87dd31
7a75feeddf376dd90471c8d678d699477f9a0e40
4457a350b2c3f5023f57fde8d8b99f4c158f3da703c6de8864a972f68d8225ee
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247 HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 3184
date: Fri, 23 Dec 2022 13:11:24 GMT
expires: Sat, 23 Dec 2023 13:11:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.html
200 OK 2.3 kB URL HTTP/2 s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash bd3d26bef6adb20bd033ffa8cb0b8af6
97af7326fbed1b5e6b64520cacfe36066841a92f
a9df95d5bc438934668e256f2495fcc8700cfc6c029d270d2a81a5078e91a44d
GET /sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.html HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 2296
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 16:36:33 GMT
expires: Tue, 19 Dec 2023 16:36:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 08:47:01 GMT
content-type: text/html
age: 333291
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
visitanalytics.userreport.com/hit.gif?event=iv-supported&t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=7ie69r6235&v=1b&gdpr=&gdpr_consent=&med=https%3A%2F%2Fd364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&m=cross
200 OK 43 B URL HTTP/2 visitanalytics.userreport.com/hit.gif?event=iv-supported&t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=7ie69r6235&v=1b&gdpr=&gdpr_consent=&med=https%3A%2F%2Fd364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&m=cross
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit.gif?event=iv-supported&t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=7ie69r6235&v=1b&gdpr=&gdpr_consent=&med=https%3A%2F%2Fd364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&m=cross HTTP/1.1
Host: visitanalytics.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
last-modified: Thu, 15 Oct 2015 11:22:45 GMT
x-amz-meta-cb-modifiedtime: Tue, 14 Apr 2015 11:43:27 GMT
x-amz-version-id: fZAqbzuxSGtIKd7g0Oj0VzvG4UrkztnT
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Dec 2022 04:29:40 GMT
cache-control: no-cache, no-store, must-revalidate
expires: 0
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OPOW5AJJ0C-Q6YMePCfVNMHpZ5-NHWUp00Cbenhh5sFU8ftinV4ysw==
age: 31304
X-Firefox-Spdy: h2
visitanalytics.userreport.com/hit.js?t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=3532581680&v=1b&gdpr=&gdpr_consent=&event=impression
200 OK 3.5 kB URL HTTP/2 visitanalytics.userreport.com/hit.js?t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=3532581680&v=1b&gdpr=&gdpr_consent=&event=impression
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8417)
Hash a2f15d943e71414e5eeaf5e509695805
ab2bb408c5171dedd47bcf4c92eed916c392f035
84d7964881fc027018f6d0ba7ffc1e116628f5f4e720e8f395bb6e5ff4292389
GET /hit.js?t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=3532581680&v=1b&gdpr=&gdpr_consent=&event=impression HTTP/1.1
Host: visitanalytics.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 04 Nov 2021 16:04:54 GMT
x-amz-version-id: GOgb4pdOj5jm0NxELRZsYnEiRQ2t.6ad
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 04:28:02 GMT
cache-control: public, max-age=3600, s-maxage=300
etag: W/"cd9adab26b1e42a51fe51265666e50fd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 54bAwlvfMcLA2vL5k3o_wG9cFEFcw8vfAfRlJqBnxxTaulpvpTC4JA==
age: 31403
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjssOHHwUluPRX9YfRsrcfezX5thgwzad6Y8kwp6dvfer7yZxMRYI3GWotBROop4ZFIov1F3MEYEfimnTt_aZZszIMkJbYWkaI4WSRIcFZPmQCHuUrlo94PCCAGqUYW5Wey0mTAwCn4sgi-b-vjOHOJZX17VfMufFPtdtl8zPJPk-pEQdcgfuMAgXnz1kbc7qPwg6DKYO1GqOGSYBFkqODLRXuJvOHkA2vOeqZJ_BE532IGrGXN5v5Uq6XQaGpN0JLY0yWmKBGF3s3PM1VVvOglj20MzVg9_Y7qgSpOh0opYCQ9avReErhFMiSDvTViiJTW3F6T7KLpCEb8D8j4_SKgPlzhyk3vEgikjR2anDXcz7w9c5RoXhbroVG3SR_PONy8QJ70rB26UQIENfeaYeDPEGIRmcaiderJaxO9th6XPOD_En6bIX3YjB7FsneM3L2r4vxoy6xBmLn9TyLzEv_L6dV1A9TI4iu_47TzZDgFRQ--BNQyByEGPqqWkdMJXgwePbjb4dIdKczp27RePkRulV1Z9lUDxMOk6dNOYOuxZH4d-q3YHgQ67NdQJwExRaG0bQOvKKhT693FHhQ8DePYFfVw4nJgzaJuMkRuVoPW1vvXNKyDiTXvo1pjNFl-HJH96qQplbYC2CvIr2gL3S-Pm_wu3GQfBuGxAHMWWudlUrOayiuVZXXiQRunwsKnfNiY9AGZIarMGQUfxPjgmYRJYMhogIiLBBrMvb7d_-7ItQ1ygdFs8b_-my1aGZbvLXTQNJjxjrtArgvoTWB1WKJEzi74ZY-DkT7ciOP4B32Gs-8UAp3KdS9BxYnD887P3zN6drGI5NoG_OUR6qi4NoZlJoR6pHaQ2b1CUaSJhWRyJrBct1ZwkOUw-3QExR2cCTzqCwulU4OfLQI0FBP2a9PM2aHOkSnIVasoad9hkKz54vf-FvV03Y6bH3eW7S0l5igEnqAfleIZE_8DgtLVgbGR22KUd5LoiqCs1Vgu0w4ANPHJGYrawXE_5SZki7qBopy3qDfpGo6aL-bVJPI0H5xVkj0KVfKaHtd2YDa1-mRhdm7D9VRfLWOLn6sBZQR-MoCQ2XQXdRUODBI_17LpxPVvNJGBQCituUvSkbWhNUpMmx9BzD_L2P685bHxFCXwiHVtlR_RsIputUV2wQbw8S-L4dMTtlSizgO1wBuxAtXXTHGpajPw&sai=AMfl-YSMa6Wgbln2EEODQmNtpv7FK70vNkh37bUXf6zgeqXkmbkB6GQDSdeywik-rczeAKQte0r1i0ZmU5GR1hgtSGQtxTU_iTA3AMVsdp90rfX3uEHwUosYeYC4Rl7FG8puwZpU6VUCmXv2z4vTDZ7wDTErY7cIolS4IFyc7SB_36lan9gwxGIkRGZyGCSiK92LupAy3raHnev2RFwA6JX-7FnJLt7NkLChwWXNafT-r8kdZTe1jmFYH4k45MuhIHbUGdgsqdKpwNzMtqGsqElUyczqfJ3wr-xlVB5ycth1IzvD3FYT1jY&sig=Cg0ArKJSzFUOVPk1VtcYEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=296&cbvp=1&cstd=284&cisv=r20221207.57864&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjssOHHwUluPRX9YfRsrcfezX5thgwzad6Y8kwp6dvfer7yZxMRYI3GWotBROop4ZFIov1F3MEYEfimnTt_aZZszIMkJbYWkaI4WSRIcFZPmQCHuUrlo94PCCAGqUYW5Wey0mTAwCn4sgi-b-vjOHOJZX17VfMufFPtdtl8zPJPk-pEQdcgfuMAgXnz1kbc7qPwg6DKYO1GqOGSYBFkqODLRXuJvOHkA2vOeqZJ_BE532IGrGXN5v5Uq6XQaGpN0JLY0yWmKBGF3s3PM1VVvOglj20MzVg9_Y7qgSpOh0opYCQ9avReErhFMiSDvTViiJTW3F6T7KLpCEb8D8j4_SKgPlzhyk3vEgikjR2anDXcz7w9c5RoXhbroVG3SR_PONy8QJ70rB26UQIENfeaYeDPEGIRmcaiderJaxO9th6XPOD_En6bIX3YjB7FsneM3L2r4vxoy6xBmLn9TyLzEv_L6dV1A9TI4iu_47TzZDgFRQ--BNQyByEGPqqWkdMJXgwePbjb4dIdKczp27RePkRulV1Z9lUDxMOk6dNOYOuxZH4d-q3YHgQ67NdQJwExRaG0bQOvKKhT693FHhQ8DePYFfVw4nJgzaJuMkRuVoPW1vvXNKyDiTXvo1pjNFl-HJH96qQplbYC2CvIr2gL3S-Pm_wu3GQfBuGxAHMWWudlUrOayiuVZXXiQRunwsKnfNiY9AGZIarMGQUfxPjgmYRJYMhogIiLBBrMvb7d_-7ItQ1ygdFs8b_-my1aGZbvLXTQNJjxjrtArgvoTWB1WKJEzi74ZY-DkT7ciOP4B32Gs-8UAp3KdS9BxYnD887P3zN6drGI5NoG_OUR6qi4NoZlJoR6pHaQ2b1CUaSJhWRyJrBct1ZwkOUw-3QExR2cCTzqCwulU4OfLQI0FBP2a9PM2aHOkSnIVasoad9hkKz54vf-FvV03Y6bH3eW7S0l5igEnqAfleIZE_8DgtLVgbGR22KUd5LoiqCs1Vgu0w4ANPHJGYrawXE_5SZki7qBopy3qDfpGo6aL-bVJPI0H5xVkj0KVfKaHtd2YDa1-mRhdm7D9VRfLWOLn6sBZQR-MoCQ2XQXdRUODBI_17LpxPVvNJGBQCituUvSkbWhNUpMmx9BzD_L2P685bHxFCXwiHVtlR_RsIputUV2wQbw8S-L4dMTtlSizgO1wBuxAtXXTHGpajPw&sai=AMfl-YSMa6Wgbln2EEODQmNtpv7FK70vNkh37bUXf6zgeqXkmbkB6GQDSdeywik-rczeAKQte0r1i0ZmU5GR1hgtSGQtxTU_iTA3AMVsdp90rfX3uEHwUosYeYC4Rl7FG8puwZpU6VUCmXv2z4vTDZ7wDTErY7cIolS4IFyc7SB_36lan9gwxGIkRGZyGCSiK92LupAy3raHnev2RFwA6JX-7FnJLt7NkLChwWXNafT-r8kdZTe1jmFYH4k45MuhIHbUGdgsqdKpwNzMtqGsqElUyczqfJ3wr-xlVB5ycth1IzvD3FYT1jY&sig=Cg0ArKJSzFUOVPk1VtcYEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=296&cbvp=1&cstd=284&cisv=r20221207.57864&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjssOHHwUluPRX9YfRsrcfezX5thgwzad6Y8kwp6dvfer7yZxMRYI3GWotBROop4ZFIov1F3MEYEfimnTt_aZZszIMkJbYWkaI4WSRIcFZPmQCHuUrlo94PCCAGqUYW5Wey0mTAwCn4sgi-b-vjOHOJZX17VfMufFPtdtl8zPJPk-pEQdcgfuMAgXnz1kbc7qPwg6DKYO1GqOGSYBFkqODLRXuJvOHkA2vOeqZJ_BE532IGrGXN5v5Uq6XQaGpN0JLY0yWmKBGF3s3PM1VVvOglj20MzVg9_Y7qgSpOh0opYCQ9avReErhFMiSDvTViiJTW3F6T7KLpCEb8D8j4_SKgPlzhyk3vEgikjR2anDXcz7w9c5RoXhbroVG3SR_PONy8QJ70rB26UQIENfeaYeDPEGIRmcaiderJaxO9th6XPOD_En6bIX3YjB7FsneM3L2r4vxoy6xBmLn9TyLzEv_L6dV1A9TI4iu_47TzZDgFRQ--BNQyByEGPqqWkdMJXgwePbjb4dIdKczp27RePkRulV1Z9lUDxMOk6dNOYOuxZH4d-q3YHgQ67NdQJwExRaG0bQOvKKhT693FHhQ8DePYFfVw4nJgzaJuMkRuVoPW1vvXNKyDiTXvo1pjNFl-HJH96qQplbYC2CvIr2gL3S-Pm_wu3GQfBuGxAHMWWudlUrOayiuVZXXiQRunwsKnfNiY9AGZIarMGQUfxPjgmYRJYMhogIiLBBrMvb7d_-7ItQ1ygdFs8b_-my1aGZbvLXTQNJjxjrtArgvoTWB1WKJEzi74ZY-DkT7ciOP4B32Gs-8UAp3KdS9BxYnD887P3zN6drGI5NoG_OUR6qi4NoZlJoR6pHaQ2b1CUaSJhWRyJrBct1ZwkOUw-3QExR2cCTzqCwulU4OfLQI0FBP2a9PM2aHOkSnIVasoad9hkKz54vf-FvV03Y6bH3eW7S0l5igEnqAfleIZE_8DgtLVgbGR22KUd5LoiqCs1Vgu0w4ANPHJGYrawXE_5SZki7qBopy3qDfpGo6aL-bVJPI0H5xVkj0KVfKaHtd2YDa1-mRhdm7D9VRfLWOLn6sBZQR-MoCQ2XQXdRUODBI_17LpxPVvNJGBQCituUvSkbWhNUpMmx9BzD_L2P685bHxFCXwiHVtlR_RsIputUV2wQbw8S-L4dMTtlSizgO1wBuxAtXXTHGpajPw&sai=AMfl-YSMa6Wgbln2EEODQmNtpv7FK70vNkh37bUXf6zgeqXkmbkB6GQDSdeywik-rczeAKQte0r1i0ZmU5GR1hgtSGQtxTU_iTA3AMVsdp90rfX3uEHwUosYeYC4Rl7FG8puwZpU6VUCmXv2z4vTDZ7wDTErY7cIolS4IFyc7SB_36lan9gwxGIkRGZyGCSiK92LupAy3raHnev2RFwA6JX-7FnJLt7NkLChwWXNafT-r8kdZTe1jmFYH4k45MuhIHbUGdgsqdKpwNzMtqGsqElUyczqfJ3wr-xlVB5ycth1IzvD3FYT1jY&sig=Cg0ArKJSzFUOVPk1VtcYEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=296&cbvp=1&cstd=284&cisv=r20221207.57864&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 23 Dec 2022 13:11:24 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 23 Dec 2022 13:11:24 GMT
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstqAJ_t8gvgFYglSIPU_D05XCrXLMGjY4h1mdP5VxNyxqlbM_YUXFmGfgNeOOKzMok0gAdfAyuHXwlu70nw1BGKQHNKSiyyBWe4WeG3cQzNEPWKp-PPUYWVX1FGaHUdDgMYjqjchfITE9nxK3mYXiliaMntG4lCj3a31Wf9arA-Qd5OYAu1D3QMyIIxU-hnJVsXERMdVZhvS9JzHlsxkYdpzmEqfNByKbhvGs72H_P4mE8RIem8B9odBDJW42gScaXvoN557pbkgmGCuPmV2rzGom0nKKS2uaFxDKZd8N13tIXsqrobSOfgmvxRslSjKZei-vzomTsKEqY0RzTEcPqpa-kTPuwIDQ5fQ0w6W_cQE0NKFXZOZs-GraQ7qLXSCumcS6OjQ-8KWy6av8JDKoYqUgv8yRxc203sduDCFcEvpLoezanLSyeCZsALpXEKKKwA3ajDZ4wl6MvMhLbX2E7QHnE4dP0aBVAuHQh7PAlnGlPY96GDxNzfMuoS5MbaYiroiFf1eOXmuAqdXTyUhzvSPAhKN-q8ndCJ_FYTzUGY7q8mavALZKwYqdAcg-jCbiUO6Qtq3M0xDJk3gvuXLJazYdwk1ucBHWVzwuqqQlmuH-2_CpgWhBWRcUCwz6TOe91rXnZGIJF_6uIPUfEH5umrjtjUFhi3Cu138D0yqih645CWNwtI2qPNU2_BESae8ZxTo1v1pBmqY46EEJg80h9PABAVBOMKwmCAmioXUGi0wl53_4NGPChMg4p7a4HsKjI-OMA07uBrePishLlndqhIMmOBXnMoL2FgqeDLGJ7HgkZ_J78QEtAapLJ-4bytBLz2hQj5Qw9XDheqKiVlyFtjahqFthSodRXx2vPFnzBAAd_IwOn5Mcst_TjnIj4-tylXPU0Ok3tQ9Rkhmd2gho2lFchukBjcaZNq5XPwPCdx4TZhkmiBlT9flPQjMFWX9qJswpCCpPJee8dZNdVrUZQ97TzkBSxU2cdFN64zmFE-l5vgR20FNe2aYWr5URu5kkMyG-y1tJsGVJ71TBQ1hP2f1X35wGhr2FFgr9E6-BcNokvMsdN88TO7OwDXB1iviNTl6iw8ibsKRoe5FziYZ7x07pDhva1rqJlUd9kywLTjsIpHvR23rLb3Yh07K0zWy1vHXLPVEJ6FQL-_CrYRDeIcTjAaTR55qPy4yQQUsBo844vUWbryThEsOuDr&sai=AMfl-YSZfXhQ4fpJrjdaINtDUlYV9KXX8FmAAnHgdkSPPD4tmMvingJZ-mN7Dx0N6L9jVMeGaLmoWGRH1OVBnMOKcYju82ZAg5MIR6TKpPyqCpwWftP7E36SU3RlzgXV5fjrwHCwDpR2NJNAeEz0YMkVX5m1E_d5WSo2Bz__n0thPgdKB6JOTqK8iBQEis0M3r6Pl5YY53Vq8bTHlq8j778n14Dxcg8DtZqwGyeUYEz2SqRJxyJ5Y3r__csZgW459grCtT0FilgCkZkNNHi7h3XFHUmseAGGqz8olG2iPgVRWkjBOYMssOs&sig=Cg0ArKJSzEq2DqXRBrloEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=331&cbvp=1&cstd=327&cisv=r20221207.15667&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstqAJ_t8gvgFYglSIPU_D05XCrXLMGjY4h1mdP5VxNyxqlbM_YUXFmGfgNeOOKzMok0gAdfAyuHXwlu70nw1BGKQHNKSiyyBWe4WeG3cQzNEPWKp-PPUYWVX1FGaHUdDgMYjqjchfITE9nxK3mYXiliaMntG4lCj3a31Wf9arA-Qd5OYAu1D3QMyIIxU-hnJVsXERMdVZhvS9JzHlsxkYdpzmEqfNByKbhvGs72H_P4mE8RIem8B9odBDJW42gScaXvoN557pbkgmGCuPmV2rzGom0nKKS2uaFxDKZd8N13tIXsqrobSOfgmvxRslSjKZei-vzomTsKEqY0RzTEcPqpa-kTPuwIDQ5fQ0w6W_cQE0NKFXZOZs-GraQ7qLXSCumcS6OjQ-8KWy6av8JDKoYqUgv8yRxc203sduDCFcEvpLoezanLSyeCZsALpXEKKKwA3ajDZ4wl6MvMhLbX2E7QHnE4dP0aBVAuHQh7PAlnGlPY96GDxNzfMuoS5MbaYiroiFf1eOXmuAqdXTyUhzvSPAhKN-q8ndCJ_FYTzUGY7q8mavALZKwYqdAcg-jCbiUO6Qtq3M0xDJk3gvuXLJazYdwk1ucBHWVzwuqqQlmuH-2_CpgWhBWRcUCwz6TOe91rXnZGIJF_6uIPUfEH5umrjtjUFhi3Cu138D0yqih645CWNwtI2qPNU2_BESae8ZxTo1v1pBmqY46EEJg80h9PABAVBOMKwmCAmioXUGi0wl53_4NGPChMg4p7a4HsKjI-OMA07uBrePishLlndqhIMmOBXnMoL2FgqeDLGJ7HgkZ_J78QEtAapLJ-4bytBLz2hQj5Qw9XDheqKiVlyFtjahqFthSodRXx2vPFnzBAAd_IwOn5Mcst_TjnIj4-tylXPU0Ok3tQ9Rkhmd2gho2lFchukBjcaZNq5XPwPCdx4TZhkmiBlT9flPQjMFWX9qJswpCCpPJee8dZNdVrUZQ97TzkBSxU2cdFN64zmFE-l5vgR20FNe2aYWr5URu5kkMyG-y1tJsGVJ71TBQ1hP2f1X35wGhr2FFgr9E6-BcNokvMsdN88TO7OwDXB1iviNTl6iw8ibsKRoe5FziYZ7x07pDhva1rqJlUd9kywLTjsIpHvR23rLb3Yh07K0zWy1vHXLPVEJ6FQL-_CrYRDeIcTjAaTR55qPy4yQQUsBo844vUWbryThEsOuDr&sai=AMfl-YSZfXhQ4fpJrjdaINtDUlYV9KXX8FmAAnHgdkSPPD4tmMvingJZ-mN7Dx0N6L9jVMeGaLmoWGRH1OVBnMOKcYju82ZAg5MIR6TKpPyqCpwWftP7E36SU3RlzgXV5fjrwHCwDpR2NJNAeEz0YMkVX5m1E_d5WSo2Bz__n0thPgdKB6JOTqK8iBQEis0M3r6Pl5YY53Vq8bTHlq8j778n14Dxcg8DtZqwGyeUYEz2SqRJxyJ5Y3r__csZgW459grCtT0FilgCkZkNNHi7h3XFHUmseAGGqz8olG2iPgVRWkjBOYMssOs&sig=Cg0ArKJSzEq2DqXRBrloEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=331&cbvp=1&cstd=327&cisv=r20221207.15667&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjstqAJ_t8gvgFYglSIPU_D05XCrXLMGjY4h1mdP5VxNyxqlbM_YUXFmGfgNeOOKzMok0gAdfAyuHXwlu70nw1BGKQHNKSiyyBWe4WeG3cQzNEPWKp-PPUYWVX1FGaHUdDgMYjqjchfITE9nxK3mYXiliaMntG4lCj3a31Wf9arA-Qd5OYAu1D3QMyIIxU-hnJVsXERMdVZhvS9JzHlsxkYdpzmEqfNByKbhvGs72H_P4mE8RIem8B9odBDJW42gScaXvoN557pbkgmGCuPmV2rzGom0nKKS2uaFxDKZd8N13tIXsqrobSOfgmvxRslSjKZei-vzomTsKEqY0RzTEcPqpa-kTPuwIDQ5fQ0w6W_cQE0NKFXZOZs-GraQ7qLXSCumcS6OjQ-8KWy6av8JDKoYqUgv8yRxc203sduDCFcEvpLoezanLSyeCZsALpXEKKKwA3ajDZ4wl6MvMhLbX2E7QHnE4dP0aBVAuHQh7PAlnGlPY96GDxNzfMuoS5MbaYiroiFf1eOXmuAqdXTyUhzvSPAhKN-q8ndCJ_FYTzUGY7q8mavALZKwYqdAcg-jCbiUO6Qtq3M0xDJk3gvuXLJazYdwk1ucBHWVzwuqqQlmuH-2_CpgWhBWRcUCwz6TOe91rXnZGIJF_6uIPUfEH5umrjtjUFhi3Cu138D0yqih645CWNwtI2qPNU2_BESae8ZxTo1v1pBmqY46EEJg80h9PABAVBOMKwmCAmioXUGi0wl53_4NGPChMg4p7a4HsKjI-OMA07uBrePishLlndqhIMmOBXnMoL2FgqeDLGJ7HgkZ_J78QEtAapLJ-4bytBLz2hQj5Qw9XDheqKiVlyFtjahqFthSodRXx2vPFnzBAAd_IwOn5Mcst_TjnIj4-tylXPU0Ok3tQ9Rkhmd2gho2lFchukBjcaZNq5XPwPCdx4TZhkmiBlT9flPQjMFWX9qJswpCCpPJee8dZNdVrUZQ97TzkBSxU2cdFN64zmFE-l5vgR20FNe2aYWr5URu5kkMyG-y1tJsGVJ71TBQ1hP2f1X35wGhr2FFgr9E6-BcNokvMsdN88TO7OwDXB1iviNTl6iw8ibsKRoe5FziYZ7x07pDhva1rqJlUd9kywLTjsIpHvR23rLb3Yh07K0zWy1vHXLPVEJ6FQL-_CrYRDeIcTjAaTR55qPy4yQQUsBo844vUWbryThEsOuDr&sai=AMfl-YSZfXhQ4fpJrjdaINtDUlYV9KXX8FmAAnHgdkSPPD4tmMvingJZ-mN7Dx0N6L9jVMeGaLmoWGRH1OVBnMOKcYju82ZAg5MIR6TKpPyqCpwWftP7E36SU3RlzgXV5fjrwHCwDpR2NJNAeEz0YMkVX5m1E_d5WSo2Bz__n0thPgdKB6JOTqK8iBQEis0M3r6Pl5YY53Vq8bTHlq8j778n14Dxcg8DtZqwGyeUYEz2SqRJxyJ5Y3r__csZgW459grCtT0FilgCkZkNNHi7h3XFHUmseAGGqz8olG2iPgVRWkjBOYMssOs&sig=Cg0ArKJSzEq2DqXRBrloEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=331&cbvp=1&cstd=327&cisv=r20221207.15667&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 23 Dec 2022 13:11:24 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 23 Dec 2022 13:11:24 GMT
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adlib.css
200 OK 1.9 kB URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adlib.css
IP
Hash f790f1b63871c1d4f2b078c581a45f8a
c9d62a3254f5a98d6bd4838427c907417ddf8522
1997074deeeda22435c77df9eabe7fd010ed663d97a7968065ae3e328ca5bfa2
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adlib.css HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 1887
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 16:36:50 GMT
expires: Fri, 22 Dec 2023 16:36:50 GMT
cache-control: public, max-age=31536000
age: 74074
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adStyle.css
200 OK 789 B URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adStyle.css
IP
Hash c4fc9c3dd1ca0d944fad545253fe62c8
529c2a1c6607dae67680a0b57a9f5dbca1a266e3
cfb67523adc76e9972b48a2fb06b71e614e1b8c61c47f17ef9efa51b1b45fc13
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adStyle.css HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 789
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 16:36:50 GMT
expires: Fri, 22 Dec 2023 16:36:50 GMT
cache-control: public, max-age=31536000
age: 74074
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/879366/Enabler_01_247.js
200 OK 41 kB URL HTTP/2 s0.2mdn.net/879366/Enabler_01_247.js
IP
File type ASCII text, with very long lines (2858)
Hash d3b6882d7fcb684bc453014570ded187
15fcdcdf593c62dd188395959483613e6dc5a0e9
0124b685bf91fa4849c3c6e50bc022dfb8e854674aa1b9c7988f806fc679933e
GET /879366/Enabler_01_247.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 41099
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 10:54:43 GMT
expires: Sat, 24 Dec 2022 10:54:43 GMT
cache-control: public, max-age=86400
age: 8201
last-modified: Mon, 27 Sep 2021 18:45:07 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adlibUtils-v3.js
200 OK 11 kB URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adlibUtils-v3.js
IP
File type ASCII text, with very long lines (6365)
Hash 1e2a7615c3862417402a04502e0b01f1
78d44c8fc4eac71850a71296ab9e227fa1a939b2
857e56bc8b7caa5e826f7712614c456a1d6f4843599b6a2846da2189fe1db826
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adlibUtils-v3.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
content-length: 10659
date: Fri, 16 Dec 2022 13:33:23 GMT
expires: Sat, 16 Dec 2023 13:33:23 GMT
cache-control: public, max-age=31536000
age: 603481
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
content-type: application/x-javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/animation.js
200 OK 1.2 kB URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/animation.js
IP
Hash 3d775c0040cb612a323cab9b3c58edc0
fb2a92715de4dbce82f37d18752e2482eb8b0964
c5bd568bc2e51539ade596b7c4d2ee93243aa9cad104978eb863923e07f37d17
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/animation.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 1205
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:23 GMT
expires: Sat, 16 Dec 2023 13:33:23 GMT
cache-control: public, max-age=31536000
age: 603481
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
content-type: application/x-javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/ads/studio/cached_libs/gsap_3.2.4_min.js
200 OK 23 kB URL HTTP/2 s0.2mdn.net/ads/studio/cached_libs/gsap_3.2.4_min.js
IP
File type ASCII text, with very long lines (58431)
Hash bcdca5d85f90bc77cb2102a114c1b0e2
1c26237718c441febafb383e75d3f43b9606e529
0403da003d05984ad997552169c662d43e5c8bd961d87e897a6d46682f49ba0f
GET /ads/studio/cached_libs/gsap_3.2.4_min.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 23276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:11:24 GMT
expires: Fri, 23 Dec 2022 13:11:24 GMT
cache-control: public, max-age=0
last-modified: Thu, 05 Mar 2020 03:53:22 GMT
content-type: text/javascript
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
t.ssp.hinet.net/utag.js
200 OK 2.4 kB IP
ASN #3462 Data Communication Business Group
File type ASCII text, with very long lines (5166), with no line terminators
Hash b19984dea40ba65d2934dd6b48d948fb
ad42331555d01c8c48fb6896888e4aced256a7c5
6f424475662b77626df3699220a5f3c8caf73d9783c2f558c68e5dbcf2fa043f
GET /utag.js HTTP/1.1
Host: t.ssp.hinet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Dec 2022 13:11:24 GMT
content-type: application/javascript
last-modified: Wed, 16 Nov 2022 03:58:03 GMT
vary: Accept-Encoding
etag: W/"63745fcb-142e"
expires: Fri, 23 Dec 2022 13:21:24 GMT
cache-control: max-age=600
strict-transport-security: max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.js
200 OK 13 kB URL HTTP/2 s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.js
IP
File type ASCII text, with very long lines (1355)
Hash 416ee15870118dbeb80ad165068b59f4
f916cb2b79475095f4596545aba5782ec3064ffe
c4676a2882897e4829a492fdeebc1a89afec6d7099e889b18d825aecd40b3398
GET /sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 16:36:33 GMT
expires: Tue, 19 Dec 2023 16:36:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 08:47:01 GMT
content-type: application/x-javascript
content-length: 13436
age: 333291
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/logo.svg
200 OK 1.3 kB URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/logo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (648)
Hash 6423609c3af6f5c254f9663e51e97778
6022139e8ea6a2d8f0e560a9a627d895e1cd4766
8916645a1b714a6460a092e3fd5e0f3125c11bcea91a96ee7c945de51bd83ee3
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/logo.svg HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 1266
x-content-type-options: nosniff
x-dns-prefetch-control: off
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:23 GMT
expires: Sat, 16 Dec 2023 13:33:23 GMT
cache-control: public, max-age=31536000
age: 603481
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
content-type: image/svg+xml
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/images/_560x5601.jpg
200 OK 25 kB URL HTTP/2 s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/images/_560x5601.jpg
IP
File type JPEG image data, progressive, precision 8, 560x560, components 3\012- data
Hash efcb4575a0d2f4b2184d9473eb02f229
d0ffb21cc230db0889d4b29969d9b74b425946a0
84851109444fc187bef24176ad81b9ce66ff15f4c49b22449d10aaad6edaccde
GET /sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/images/_560x5601.jpg HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 24562
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 16:36:33 GMT
expires: Tue, 19 Dec 2023 16:36:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 08:47:01 GMT
content-type: image/jpeg
age: 333291
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstqAJ_t8gvgFYglSIPU_D05XCrXLMGjY4h1mdP5VxNyxqlbM_YUXFmGfgNeOOKzMok0gAdfAyuHXwlu70nw1BGKQHNKSiyyBWe4WeG3cQzNEPWKp-PPUYWVX1FGaHUdDgMYjqjchfITE9nxK3mYXiliaMntG4lCj3a31Wf9arA-Qd5OYAu1D3QMyIIxU-hnJVsXERMdVZhvS9JzHlsxkYdpzmEqfNByKbhvGs72H_P4mE8RIem8B9odBDJW42gScaXvoN557pbkgmGCuPmV2rzGom0nKKS2uaFxDKZd8N13tIXsqrobSOfgmvxRslSjKZei-vzomTsKEqY0RzTEcPqpa-kTPuwIDQ5fQ0w6W_cQE0NKFXZOZs-GraQ7qLXSCumcS6OjQ-8KWy6av8JDKoYqUgv8yRxc203sduDCFcEvpLoezanLSyeCZsALpXEKKKwA3ajDZ4wl6MvMhLbX2E7QHnE4dP0aBVAuHQh7PAlnGlPY96GDxNzfMuoS5MbaYiroiFf1eOXmuAqdXTyUhzvSPAhKN-q8ndCJ_FYTzUGY7q8mavALZKwYqdAcg-jCbiUO6Qtq3M0xDJk3gvuXLJazYdwk1ucBHWVzwuqqQlmuH-2_CpgWhBWRcUCwz6TOe91rXnZGIJF_6uIPUfEH5umrjtjUFhi3Cu138D0yqih645CWNwtI2qPNU2_BESae8ZxTo1v1pBmqY46EEJg80h9PABAVBOMKwmCAmioXUGi0wl53_4NGPChMg4p7a4HsKjI-OMA07uBrePishLlndqhIMmOBXnMoL2FgqeDLGJ7HgkZ_J78QEtAapLJ-4bytBLz2hQj5Qw9XDheqKiVlyFtjahqFthSodRXx2vPFnzBAAd_IwOn5Mcst_TjnIj4-tylXPU0Ok3tQ9Rkhmd2gho2lFchukBjcaZNq5XPwPCdx4TZhkmiBlT9flPQjMFWX9qJswpCCpPJee8dZNdVrUZQ97TzkBSxU2cdFN64zmFE-l5vgR20FNe2aYWr5URu5kkMyG-y1tJsGVJ71TBQ1hP2f1X35wGhr2FFgr9E6-BcNokvMsdN88TO7OwDXB1iviNTl6iw8ibsKRoe5FziYZ7x07pDhva1rqJlUd9kywLTjsIpHvR23rLb3Yh07K0zWy1vHXLPVEJ6FQL-_CrYRDeIcTjAaTR55qPy4yQQUsBo844vUWbryThEsOuDr&sai=AMfl-YSZfXhQ4fpJrjdaINtDUlYV9KXX8FmAAnHgdkSPPD4tmMvingJZ-mN7Dx0N6L9jVMeGaLmoWGRH1OVBnMOKcYju82ZAg5MIR6TKpPyqCpwWftP7E36SU3RlzgXV5fjrwHCwDpR2NJNAeEz0YMkVX5m1E_d5WSo2Bz__n0thPgdKB6JOTqK8iBQEis0M3r6Pl5YY53Vq8bTHlq8j778n14Dxcg8DtZqwGyeUYEz2SqRJxyJ5Y3r__csZgW459grCtT0FilgCkZkNNHi7h3XFHUmseAGGqz8olG2iPgVRWkjBOYMssOs&sig=Cg0ArKJSzEq2DqXRBrloEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=757&vt=11&dtpt=426&dett=3&cstd=327&cisv=r20221207.15667&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjstqAJ_t8gvgFYglSIPU_D05XCrXLMGjY4h1mdP5VxNyxqlbM_YUXFmGfgNeOOKzMok0gAdfAyuHXwlu70nw1BGKQHNKSiyyBWe4WeG3cQzNEPWKp-PPUYWVX1FGaHUdDgMYjqjchfITE9nxK3mYXiliaMntG4lCj3a31Wf9arA-Qd5OYAu1D3QMyIIxU-hnJVsXERMdVZhvS9JzHlsxkYdpzmEqfNByKbhvGs72H_P4mE8RIem8B9odBDJW42gScaXvoN557pbkgmGCuPmV2rzGom0nKKS2uaFxDKZd8N13tIXsqrobSOfgmvxRslSjKZei-vzomTsKEqY0RzTEcPqpa-kTPuwIDQ5fQ0w6W_cQE0NKFXZOZs-GraQ7qLXSCumcS6OjQ-8KWy6av8JDKoYqUgv8yRxc203sduDCFcEvpLoezanLSyeCZsALpXEKKKwA3ajDZ4wl6MvMhLbX2E7QHnE4dP0aBVAuHQh7PAlnGlPY96GDxNzfMuoS5MbaYiroiFf1eOXmuAqdXTyUhzvSPAhKN-q8ndCJ_FYTzUGY7q8mavALZKwYqdAcg-jCbiUO6Qtq3M0xDJk3gvuXLJazYdwk1ucBHWVzwuqqQlmuH-2_CpgWhBWRcUCwz6TOe91rXnZGIJF_6uIPUfEH5umrjtjUFhi3Cu138D0yqih645CWNwtI2qPNU2_BESae8ZxTo1v1pBmqY46EEJg80h9PABAVBOMKwmCAmioXUGi0wl53_4NGPChMg4p7a4HsKjI-OMA07uBrePishLlndqhIMmOBXnMoL2FgqeDLGJ7HgkZ_J78QEtAapLJ-4bytBLz2hQj5Qw9XDheqKiVlyFtjahqFthSodRXx2vPFnzBAAd_IwOn5Mcst_TjnIj4-tylXPU0Ok3tQ9Rkhmd2gho2lFchukBjcaZNq5XPwPCdx4TZhkmiBlT9flPQjMFWX9qJswpCCpPJee8dZNdVrUZQ97TzkBSxU2cdFN64zmFE-l5vgR20FNe2aYWr5URu5kkMyG-y1tJsGVJ71TBQ1hP2f1X35wGhr2FFgr9E6-BcNokvMsdN88TO7OwDXB1iviNTl6iw8ibsKRoe5FziYZ7x07pDhva1rqJlUd9kywLTjsIpHvR23rLb3Yh07K0zWy1vHXLPVEJ6FQL-_CrYRDeIcTjAaTR55qPy4yQQUsBo844vUWbryThEsOuDr&sai=AMfl-YSZfXhQ4fpJrjdaINtDUlYV9KXX8FmAAnHgdkSPPD4tmMvingJZ-mN7Dx0N6L9jVMeGaLmoWGRH1OVBnMOKcYju82ZAg5MIR6TKpPyqCpwWftP7E36SU3RlzgXV5fjrwHCwDpR2NJNAeEz0YMkVX5m1E_d5WSo2Bz__n0thPgdKB6JOTqK8iBQEis0M3r6Pl5YY53Vq8bTHlq8j778n14Dxcg8DtZqwGyeUYEz2SqRJxyJ5Y3r__csZgW459grCtT0FilgCkZkNNHi7h3XFHUmseAGGqz8olG2iPgVRWkjBOYMssOs&sig=Cg0ArKJSzEq2DqXRBrloEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=757&vt=11&dtpt=426&dett=3&cstd=327&cisv=r20221207.15667&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjstqAJ_t8gvgFYglSIPU_D05XCrXLMGjY4h1mdP5VxNyxqlbM_YUXFmGfgNeOOKzMok0gAdfAyuHXwlu70nw1BGKQHNKSiyyBWe4WeG3cQzNEPWKp-PPUYWVX1FGaHUdDgMYjqjchfITE9nxK3mYXiliaMntG4lCj3a31Wf9arA-Qd5OYAu1D3QMyIIxU-hnJVsXERMdVZhvS9JzHlsxkYdpzmEqfNByKbhvGs72H_P4mE8RIem8B9odBDJW42gScaXvoN557pbkgmGCuPmV2rzGom0nKKS2uaFxDKZd8N13tIXsqrobSOfgmvxRslSjKZei-vzomTsKEqY0RzTEcPqpa-kTPuwIDQ5fQ0w6W_cQE0NKFXZOZs-GraQ7qLXSCumcS6OjQ-8KWy6av8JDKoYqUgv8yRxc203sduDCFcEvpLoezanLSyeCZsALpXEKKKwA3ajDZ4wl6MvMhLbX2E7QHnE4dP0aBVAuHQh7PAlnGlPY96GDxNzfMuoS5MbaYiroiFf1eOXmuAqdXTyUhzvSPAhKN-q8ndCJ_FYTzUGY7q8mavALZKwYqdAcg-jCbiUO6Qtq3M0xDJk3gvuXLJazYdwk1ucBHWVzwuqqQlmuH-2_CpgWhBWRcUCwz6TOe91rXnZGIJF_6uIPUfEH5umrjtjUFhi3Cu138D0yqih645CWNwtI2qPNU2_BESae8ZxTo1v1pBmqY46EEJg80h9PABAVBOMKwmCAmioXUGi0wl53_4NGPChMg4p7a4HsKjI-OMA07uBrePishLlndqhIMmOBXnMoL2FgqeDLGJ7HgkZ_J78QEtAapLJ-4bytBLz2hQj5Qw9XDheqKiVlyFtjahqFthSodRXx2vPFnzBAAd_IwOn5Mcst_TjnIj4-tylXPU0Ok3tQ9Rkhmd2gho2lFchukBjcaZNq5XPwPCdx4TZhkmiBlT9flPQjMFWX9qJswpCCpPJee8dZNdVrUZQ97TzkBSxU2cdFN64zmFE-l5vgR20FNe2aYWr5URu5kkMyG-y1tJsGVJ71TBQ1hP2f1X35wGhr2FFgr9E6-BcNokvMsdN88TO7OwDXB1iviNTl6iw8ibsKRoe5FziYZ7x07pDhva1rqJlUd9kywLTjsIpHvR23rLb3Yh07K0zWy1vHXLPVEJ6FQL-_CrYRDeIcTjAaTR55qPy4yQQUsBo844vUWbryThEsOuDr&sai=AMfl-YSZfXhQ4fpJrjdaINtDUlYV9KXX8FmAAnHgdkSPPD4tmMvingJZ-mN7Dx0N6L9jVMeGaLmoWGRH1OVBnMOKcYju82ZAg5MIR6TKpPyqCpwWftP7E36SU3RlzgXV5fjrwHCwDpR2NJNAeEz0YMkVX5m1E_d5WSo2Bz__n0thPgdKB6JOTqK8iBQEis0M3r6Pl5YY53Vq8bTHlq8j778n14Dxcg8DtZqwGyeUYEz2SqRJxyJ5Y3r__csZgW459grCtT0FilgCkZkNNHi7h3XFHUmseAGGqz8olG2iPgVRWkjBOYMssOs&sig=Cg0ArKJSzEq2DqXRBrloEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=757&vt=11&dtpt=426&dett=3&cstd=327&cisv=r20221207.15667&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 23 Dec 2022 13:11:24 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 23 Dec 2022 13:11:24 GMT
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjssOHHwUluPRX9YfRsrcfezX5thgwzad6Y8kwp6dvfer7yZxMRYI3GWotBROop4ZFIov1F3MEYEfimnTt_aZZszIMkJbYWkaI4WSRIcFZPmQCHuUrlo94PCCAGqUYW5Wey0mTAwCn4sgi-b-vjOHOJZX17VfMufFPtdtl8zPJPk-pEQdcgfuMAgXnz1kbc7qPwg6DKYO1GqOGSYBFkqODLRXuJvOHkA2vOeqZJ_BE532IGrGXN5v5Uq6XQaGpN0JLY0yWmKBGF3s3PM1VVvOglj20MzVg9_Y7qgSpOh0opYCQ9avReErhFMiSDvTViiJTW3F6T7KLpCEb8D8j4_SKgPlzhyk3vEgikjR2anDXcz7w9c5RoXhbroVG3SR_PONy8QJ70rB26UQIENfeaYeDPEGIRmcaiderJaxO9th6XPOD_En6bIX3YjB7FsneM3L2r4vxoy6xBmLn9TyLzEv_L6dV1A9TI4iu_47TzZDgFRQ--BNQyByEGPqqWkdMJXgwePbjb4dIdKczp27RePkRulV1Z9lUDxMOk6dNOYOuxZH4d-q3YHgQ67NdQJwExRaG0bQOvKKhT693FHhQ8DePYFfVw4nJgzaJuMkRuVoPW1vvXNKyDiTXvo1pjNFl-HJH96qQplbYC2CvIr2gL3S-Pm_wu3GQfBuGxAHMWWudlUrOayiuVZXXiQRunwsKnfNiY9AGZIarMGQUfxPjgmYRJYMhogIiLBBrMvb7d_-7ItQ1ygdFs8b_-my1aGZbvLXTQNJjxjrtArgvoTWB1WKJEzi74ZY-DkT7ciOP4B32Gs-8UAp3KdS9BxYnD887P3zN6drGI5NoG_OUR6qi4NoZlJoR6pHaQ2b1CUaSJhWRyJrBct1ZwkOUw-3QExR2cCTzqCwulU4OfLQI0FBP2a9PM2aHOkSnIVasoad9hkKz54vf-FvV03Y6bH3eW7S0l5igEnqAfleIZE_8DgtLVgbGR22KUd5LoiqCs1Vgu0w4ANPHJGYrawXE_5SZki7qBopy3qDfpGo6aL-bVJPI0H5xVkj0KVfKaHtd2YDa1-mRhdm7D9VRfLWOLn6sBZQR-MoCQ2XQXdRUODBI_17LpxPVvNJGBQCituUvSkbWhNUpMmx9BzD_L2P685bHxFCXwiHVtlR_RsIputUV2wQbw8S-L4dMTtlSizgO1wBuxAtXXTHGpajPw&sai=AMfl-YSMa6Wgbln2EEODQmNtpv7FK70vNkh37bUXf6zgeqXkmbkB6GQDSdeywik-rczeAKQte0r1i0ZmU5GR1hgtSGQtxTU_iTA3AMVsdp90rfX3uEHwUosYeYC4Rl7FG8puwZpU6VUCmXv2z4vTDZ7wDTErY7cIolS4IFyc7SB_36lan9gwxGIkRGZyGCSiK92LupAy3raHnev2RFwA6JX-7FnJLt7NkLChwWXNafT-r8kdZTe1jmFYH4k45MuhIHbUGdgsqdKpwNzMtqGsqElUyczqfJ3wr-xlVB5ycth1IzvD3FYT1jY&sig=Cg0ArKJSzFUOVPk1VtcYEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=803&vt=11&dtpt=507&dett=3&cstd=284&cisv=r20221207.57864&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjssOHHwUluPRX9YfRsrcfezX5thgwzad6Y8kwp6dvfer7yZxMRYI3GWotBROop4ZFIov1F3MEYEfimnTt_aZZszIMkJbYWkaI4WSRIcFZPmQCHuUrlo94PCCAGqUYW5Wey0mTAwCn4sgi-b-vjOHOJZX17VfMufFPtdtl8zPJPk-pEQdcgfuMAgXnz1kbc7qPwg6DKYO1GqOGSYBFkqODLRXuJvOHkA2vOeqZJ_BE532IGrGXN5v5Uq6XQaGpN0JLY0yWmKBGF3s3PM1VVvOglj20MzVg9_Y7qgSpOh0opYCQ9avReErhFMiSDvTViiJTW3F6T7KLpCEb8D8j4_SKgPlzhyk3vEgikjR2anDXcz7w9c5RoXhbroVG3SR_PONy8QJ70rB26UQIENfeaYeDPEGIRmcaiderJaxO9th6XPOD_En6bIX3YjB7FsneM3L2r4vxoy6xBmLn9TyLzEv_L6dV1A9TI4iu_47TzZDgFRQ--BNQyByEGPqqWkdMJXgwePbjb4dIdKczp27RePkRulV1Z9lUDxMOk6dNOYOuxZH4d-q3YHgQ67NdQJwExRaG0bQOvKKhT693FHhQ8DePYFfVw4nJgzaJuMkRuVoPW1vvXNKyDiTXvo1pjNFl-HJH96qQplbYC2CvIr2gL3S-Pm_wu3GQfBuGxAHMWWudlUrOayiuVZXXiQRunwsKnfNiY9AGZIarMGQUfxPjgmYRJYMhogIiLBBrMvb7d_-7ItQ1ygdFs8b_-my1aGZbvLXTQNJjxjrtArgvoTWB1WKJEzi74ZY-DkT7ciOP4B32Gs-8UAp3KdS9BxYnD887P3zN6drGI5NoG_OUR6qi4NoZlJoR6pHaQ2b1CUaSJhWRyJrBct1ZwkOUw-3QExR2cCTzqCwulU4OfLQI0FBP2a9PM2aHOkSnIVasoad9hkKz54vf-FvV03Y6bH3eW7S0l5igEnqAfleIZE_8DgtLVgbGR22KUd5LoiqCs1Vgu0w4ANPHJGYrawXE_5SZki7qBopy3qDfpGo6aL-bVJPI0H5xVkj0KVfKaHtd2YDa1-mRhdm7D9VRfLWOLn6sBZQR-MoCQ2XQXdRUODBI_17LpxPVvNJGBQCituUvSkbWhNUpMmx9BzD_L2P685bHxFCXwiHVtlR_RsIputUV2wQbw8S-L4dMTtlSizgO1wBuxAtXXTHGpajPw&sai=AMfl-YSMa6Wgbln2EEODQmNtpv7FK70vNkh37bUXf6zgeqXkmbkB6GQDSdeywik-rczeAKQte0r1i0ZmU5GR1hgtSGQtxTU_iTA3AMVsdp90rfX3uEHwUosYeYC4Rl7FG8puwZpU6VUCmXv2z4vTDZ7wDTErY7cIolS4IFyc7SB_36lan9gwxGIkRGZyGCSiK92LupAy3raHnev2RFwA6JX-7FnJLt7NkLChwWXNafT-r8kdZTe1jmFYH4k45MuhIHbUGdgsqdKpwNzMtqGsqElUyczqfJ3wr-xlVB5ycth1IzvD3FYT1jY&sig=Cg0ArKJSzFUOVPk1VtcYEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=803&vt=11&dtpt=507&dett=3&cstd=284&cisv=r20221207.57864&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjssOHHwUluPRX9YfRsrcfezX5thgwzad6Y8kwp6dvfer7yZxMRYI3GWotBROop4ZFIov1F3MEYEfimnTt_aZZszIMkJbYWkaI4WSRIcFZPmQCHuUrlo94PCCAGqUYW5Wey0mTAwCn4sgi-b-vjOHOJZX17VfMufFPtdtl8zPJPk-pEQdcgfuMAgXnz1kbc7qPwg6DKYO1GqOGSYBFkqODLRXuJvOHkA2vOeqZJ_BE532IGrGXN5v5Uq6XQaGpN0JLY0yWmKBGF3s3PM1VVvOglj20MzVg9_Y7qgSpOh0opYCQ9avReErhFMiSDvTViiJTW3F6T7KLpCEb8D8j4_SKgPlzhyk3vEgikjR2anDXcz7w9c5RoXhbroVG3SR_PONy8QJ70rB26UQIENfeaYeDPEGIRmcaiderJaxO9th6XPOD_En6bIX3YjB7FsneM3L2r4vxoy6xBmLn9TyLzEv_L6dV1A9TI4iu_47TzZDgFRQ--BNQyByEGPqqWkdMJXgwePbjb4dIdKczp27RePkRulV1Z9lUDxMOk6dNOYOuxZH4d-q3YHgQ67NdQJwExRaG0bQOvKKhT693FHhQ8DePYFfVw4nJgzaJuMkRuVoPW1vvXNKyDiTXvo1pjNFl-HJH96qQplbYC2CvIr2gL3S-Pm_wu3GQfBuGxAHMWWudlUrOayiuVZXXiQRunwsKnfNiY9AGZIarMGQUfxPjgmYRJYMhogIiLBBrMvb7d_-7ItQ1ygdFs8b_-my1aGZbvLXTQNJjxjrtArgvoTWB1WKJEzi74ZY-DkT7ciOP4B32Gs-8UAp3KdS9BxYnD887P3zN6drGI5NoG_OUR6qi4NoZlJoR6pHaQ2b1CUaSJhWRyJrBct1ZwkOUw-3QExR2cCTzqCwulU4OfLQI0FBP2a9PM2aHOkSnIVasoad9hkKz54vf-FvV03Y6bH3eW7S0l5igEnqAfleIZE_8DgtLVgbGR22KUd5LoiqCs1Vgu0w4ANPHJGYrawXE_5SZki7qBopy3qDfpGo6aL-bVJPI0H5xVkj0KVfKaHtd2YDa1-mRhdm7D9VRfLWOLn6sBZQR-MoCQ2XQXdRUODBI_17LpxPVvNJGBQCituUvSkbWhNUpMmx9BzD_L2P685bHxFCXwiHVtlR_RsIputUV2wQbw8S-L4dMTtlSizgO1wBuxAtXXTHGpajPw&sai=AMfl-YSMa6Wgbln2EEODQmNtpv7FK70vNkh37bUXf6zgeqXkmbkB6GQDSdeywik-rczeAKQte0r1i0ZmU5GR1hgtSGQtxTU_iTA3AMVsdp90rfX3uEHwUosYeYC4Rl7FG8puwZpU6VUCmXv2z4vTDZ7wDTErY7cIolS4IFyc7SB_36lan9gwxGIkRGZyGCSiK92LupAy3raHnev2RFwA6JX-7FnJLt7NkLChwWXNafT-r8kdZTe1jmFYH4k45MuhIHbUGdgsqdKpwNzMtqGsqElUyczqfJ3wr-xlVB5ycth1IzvD3FYT1jY&sig=Cg0ArKJSzFUOVPk1VtcYEAE&uach_m=[UACH]&cry=1&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=803&vt=11&dtpt=507&dett=3&cstd=284&cisv=r20221207.57864&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 23 Dec 2022 13:11:24 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 23-Dec-2022 13:26:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 23 Dec 2022 13:11:24 GMT
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/images/_560x5602.jpg
200 OK 20 kB URL HTTP/2 s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/images/_560x5602.jpg
IP
File type JPEG image data, progressive, precision 8, 560x560, components 3\012- data
Hash 9f6f1c95ea65f4d06985c023710f69c0
7dd7e8b79c8c9745273ca2f8c53ea3061413a99b
81ec71720d2b4926941ef5b1112e1adfa2984beabd11118de3f8c93ae423d464
GET /sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/images/_560x5602.jpg HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/3089292556576817966/NO_Consideration_Display_Banners_300x600/300x600.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 19672
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 16:36:33 GMT
expires: Tue, 19 Dec 2023 16:36:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 08:47:01 GMT
content-type: image/jpeg
age: 333291
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vjs.zencdn.net/vttjs/0.14.1/vtt.min.js
200 OK 7.1 kB URL HTTP/2 vjs.zencdn.net/vttjs/0.14.1/vtt.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (20133)
Hash 1d2336e245987e5274902beeb2b57194
0ec5cdc17e6ec416e59b99a154e02f9fa6128f37
7e611c6cbd01b1dbe5cb7ae0a8fdfbc6a20bbc5ef7a6ade10bbfbfbb1776941c
GET /vttjs/0.14.1/vtt.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Apr 2018 19:42:19 GMT
etag: "52c6ba3260a51c570977f84d2bd7bf55"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Fri, 23 Dec 2022 13:11:24 GMT
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 62004
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 7089
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2023%20Dec%202022%2013%3A11%3A23%20GMT&n=0&.yp=10114832&f=https%3A%2F%2Fplayer.svc.litv.tv%2Fv3%2Fex.html%3Fid%3Dppn-Y3ky%7CY3k%3D-0&e=https%3A%2F%2Fnews.cnyes.com%2F&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2023%20Dec%202022%2013%3A11%3A23%20GMT&n=0&.yp=10114832&f=https%3A%2F%2Fplayer.svc.litv.tv%2Fv3%2Fex.html%3Fid%3Dppn-Y3ky%7CY3k%3D-0&e=https%3A%2F%2Fnews.cnyes.com%2F&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Fri%2C%2023%20Dec%202022%2013%3A11%3A23%20GMT&n=0&.yp=10114832&f=https%3A%2F%2Fplayer.svc.litv.tv%2Fv3%2Fex.html%3Fid%3Dppn-Y3ky%7CY3k%3D-0&e=https%3A%2F%2Fnews.cnyes.com%2F&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Dec 2022 13:11:24 GMT
expires: Fri, 23 Dec 2022 13:11:24 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBPyopWMCEKxrLk6zgGkvWYTYhofcDZYFEgEBAQH6pmOvYwAAAAAA_eMAAA&S=AQAAAp9eGKiSwHAYoAxilm-zadc; Expires=Sat, 23 Dec 2023 19:11:24 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
fino.svc.litv.tv/acs/ads_check.js
200 OK 36 B URL HTTP/2 fino.svc.litv.tv/acs/ads_check.js
IP
File type ASCII text, with no line terminators
Hash eccd8c86e285ee7d525d2b012ed3c06d
13fca2107d28e7e9c6723927f838832d9347f91c
3c47ff9781e5c10d5b7a4edbd121682c9d6150251dfa4c0820f9939a70e623f5
GET /acs/ads_check.js HTTP/1.1
Host: fino.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 36
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, POST
access-control-max-age: 3000
last-modified: Fri, 19 Feb 2021 02:39:49 GMT
x-amz-version-id: EHi4EZ.gJdlfigQoKnOSB_rq9xJIQl9.
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Dec 2022 06:47:37 GMT
etag: "eccd8c86e285ee7d525d2b012ed3c06d"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o6ReB_xXUW4O9FgcN3la6kUBqvCCKL3F64oW_zBB_yeJT1FqIfT2zg==
age: 23028
X-Firefox-Spdy: h2
player.svc.litv.tv/meta/acs/cy2/EMBED16.json?cb=38699
200 OK 8.0 kB URL HTTP/2 player.svc.litv.tv/meta/acs/cy2/EMBED16.json?cb=38699
IP
File type JSON data\012- , ASCII text, with very long lines (12225)
Hash c688b60a020cccb04ad1610d2710a270
d6dedea9ac2fdfe135e321d0c762e472c249085f
8c983d1e348d58c82f72615e5b632750639ae451aa31ddc336a95c46d7a14410
GET /meta/acs/cy2/EMBED16.json?cb=38699 HTTP/1.1
Host: player.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 23 Dec 2022 10:52:20 GMT
x-amz-version-id: TnWeDUTQmAtlKtFnnQmR_baIAqCf8d0O
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 12:53:27 GMT
cache-control: max-age=3600
etag: W/"e8ecdeb8fd59aa323ef24c46d873f216"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ba172beaa058835048fe52f15497da64.cloudfront.net (CloudFront)
x-amz-cf-pop: WAW51-P2
x-amz-cf-id: 4hDoAhs9ltb7dMSIEvgtFw37r1xwcmS_BQ8u6IRQbk_EpVf2QsEJYA==
age: 1086
X-Firefox-Spdy: h2
fino.svc.litv.tv/ads/ads1.js
200 OK 17 B URL HTTP/2 fino.svc.litv.tv/ads/ads1.js
IP
File type ASCII text, with no line terminators
Hash 8ba19eeed6689e4d7c76742e23055415
6c40faccf15c760cebcfa9dfe0e8f519047668e4
af2ac8055983b59c939388ef2b32ef532b5eb338d4f1758be91a125d4f07d83f
GET /ads/ads1.js HTTP/1.1
Host: fino.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, POST
access-control-max-age: 3000
last-modified: Thu, 18 Feb 2021 02:44:24 GMT
x-amz-version-id: S0gUSQE16svoHk1.rmwu2P08mV03VNo6
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Dec 2022 16:52:53 GMT
etag: "8ba19eeed6689e4d7c76742e23055415"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MUoZtUeBAv329m6nJPYlh9EJkD89lTrK2QvGdK4ii1U0vtzeCWSxbw==
age: 73113
X-Firefox-Spdy: h2
pusti.svc.litv.tv/callback/ppn
200 OK 0 B URL HTTP/2 pusti.svc.litv.tv/callback/ppn
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /callback/ppn HTTP/1.1
Host: pusti.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://news.cnyes.com
access-control-max-age: 60
date: Fri, 23 Dec 2022 13:11:25 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Fri, 23 Dec 2022 13:11:25 GMT
expires: Fri, 23 Dec 2022 13:11:25 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sb.scorecardresearch.com/p?c1=8&c2=18986219&c3=1&cj=1&c4=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&rn=1671801083595
200 OK 43 B URL HTTP/2 sb.scorecardresearch.com/p?c1=8&c2=18986219&c3=1&cj=1&c4=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&rn=1671801083595
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /p?c1=8&c2=18986219&c3=1&cj=1&c4=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&rn=1671801083595 HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
date: Fri, 23 Dec 2022 13:11:25 GMT
set-cookie: UID=1C63d49f26beb17162b88e91671801085; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vDw9r2MBEB1jXyuROke9Hw8wK-iePtuQDlWofrUbwBz-CaQmRcMt8w==
X-Firefox-Spdy: h2
s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/gradient1.png_1671535761561_gradient1.png
200 OK 4.8 kB URL HTTP/2 s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/gradient1.png_1671535761561_gradient1.png
IP
File type PNG image data, 138 x 123, 8-bit/color RGBA, non-interlaced\012- data
Hash e626ff118e13383084f8c62653e5f4ca
3d8df5e5119de5d82ce1367c7f4be019536afadb
c2685717d5810d2a3a65af5815003622c16f3d1977cf64d4081cb334d66298a8
GET /dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/gradient1.png_1671535761561_gradient1.png HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 4832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 08:30:25 GMT
expires: Fri, 22 Dec 2023 08:30:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 20 Dec 2022 11:29:24 GMT
content-type: image/png
age: 103260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/Gilroy-Regular.woff
200 OK 127 kB URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/Gilroy-Regular.woff
IP
File type JPEG image data, progressive, precision 8, 445x250, components 3\012- data
Size 127 kB (127197 bytes)
Hash 69bf9f67858f98bdc2824f0de52b61f8
2cfd9e99b241078d6c1bf97f4151cffbc852af7f
31bb3256b242d466d6f8022a0826775242892915524745374bdbf76fd7986a3d
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/Gilroy-Regular.woff HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adStyle.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 38772
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 16:35:37 GMT
expires: Fri, 22 Dec 2023 16:35:37 GMT
cache-control: public, max-age=31536000
age: 74148
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v3/partners/60ffb5128da83b16b539580e/assets/singleFiles/623333d8f71c39b30804cb4e/original/blank.png_1671535761561_blank.png
200 OK 927 B URL HTTP/2 s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v3/partners/60ffb5128da83b16b539580e/assets/singleFiles/623333d8f71c39b30804cb4e/original/blank.png_1671535761561_blank.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash dc511169a5d403eca059e9464c6009ff
910a37f28ec15c890a2bb65fc06c76bf8ec03a95
1c45dbdb7b09412d6e8d0a108245bf284d53a80fe178119869ca65654c0621a1
GET /dynamic/2/11036428/cdn.ad-lib.io/v3/partners/60ffb5128da83b16b539580e/assets/singleFiles/623333d8f71c39b30804cb4e/original/blank.png_1671535761561_blank.png HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 927
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 08:30:25 GMT
expires: Fri, 22 Dec 2023 08:30:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 20 Dec 2022 11:29:23 GMT
content-type: image/png
age: 103260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/gradient2.png_1671535761561_gradient2.png
200 OK 5.0 kB URL HTTP/2 s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/gradient2.png_1671535761561_gradient2.png
IP
File type PNG image data, 445 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash de608900b5e4c417c7488e0f3083a8aa
e6096674fd230223c9610e74d68cfb269070a70a
eb6684bc6ca0a9881c003a8160b2797bd01c8d8c1068a72d2cac485f2362472b
GET /dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/gradient2.png_1671535761561_gradient2.png HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 4965
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 08:30:25 GMT
expires: Fri, 22 Dec 2023 08:30:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 20 Dec 2022 11:29:25 GMT
content-type: image/png
age: 103260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/bg.png_1671535761561_bg.png
200 OK 92 kB URL HTTP/2 s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/bg.png_1671535761561_bg.png
IP
File type PNG image data, 970 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 3cad4978008f79bca1a0800b4ff6f3fe
47db0a256bda9887d36bd2f4c4c089792d7604a0
3308e3fec71a470538c3b6671f6ba57b46cc8ca432e5b948a71be14857f92c60
GET /dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/bg.png_1671535761561_bg.png HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 92513
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 08:30:25 GMT
expires: Fri, 22 Dec 2023 08:30:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 20 Dec 2022 11:29:25 GMT
content-type: image/png
age: 103260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/blank.png_1671535761561_blank.png
200 OK 927 B URL HTTP/2 s0.2mdn.net/dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/blank.png_1671535761561_blank.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash dc511169a5d403eca059e9464c6009ff
910a37f28ec15c890a2bb65fc06c76bf8ec03a95
1c45dbdb7b09412d6e8d0a108245bf284d53a80fe178119869ca65654c0621a1
GET /dynamic/2/11036428/cdn.ad-lib.io/v2/partners/60ffb5128da83b16b539580e/assets/concepts/61e5963a8a3fbc203592f3cf/templates/62615cdd1d0b67de02770b93/content/blank.png_1671535761561_blank.png HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/index.html?e=69&leftOffset=0&topOffset=0&c=ittchjHW3F&t=1&renderingType=2&ev=01_247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 927
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 08:30:25 GMT
expires: Fri, 22 Dec 2023 08:30:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 20 Dec 2022 11:29:26 GMT
content-type: image/png
age: 103260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
visitanalytics.userreport.com/hit.gif?event=iv-inview&f=yes&t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=g23m9djkxq&v=1b&gdpr=&gdpr_consent=&med=https%3A%2F%2Fd364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&m=cross
200 OK 43 B URL HTTP/2 visitanalytics.userreport.com/hit.gif?event=iv-inview&f=yes&t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=g23m9djkxq&v=1b&gdpr=&gdpr_consent=&med=https%3A%2F%2Fd364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&m=cross
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit.gif?event=iv-inview&f=yes&t=OMNdcm-c28748128-s8462227&env=j&i=no&aid=546229553&pid=355137110&cid=183899674&sid=8462227&rid=184471907&rnd=g23m9djkxq&v=1b&gdpr=&gdpr_consent=&med=https%3A%2F%2Fd364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&m=cross HTTP/1.1
Host: visitanalytics.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d364633189aa4fdc6c3de6927c9a4d94.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
last-modified: Thu, 15 Oct 2015 11:22:45 GMT
x-amz-meta-cb-modifiedtime: Tue, 14 Apr 2015 11:43:27 GMT
x-amz-version-id: fZAqbzuxSGtIKd7g0Oj0VzvG4UrkztnT
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Dec 2022 04:29:40 GMT
cache-control: no-cache, no-store, must-revalidate
expires: 0
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ulZYrxVI89YVVM2y6DI4Cj0bSMLiLLvfspTlzV_kGgo0nvWJ5lQR9Q==
age: 31305
X-Firefox-Spdy: h2
pusti.svc.litv.tv/callback/ppn
200 OK 0 B URL HTTP/2 pusti.svc.litv.tv/callback/ppn
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /callback/ppn HTTP/1.1
Host: pusti.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 300
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://news.cnyes.com
access-control-max-age: 60
cache-control: no-store, max-age=0
date: Fri, 23 Dec 2022 13:11:25 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/yrxvgh0i1vs
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/yrxvgh0i1vs
IP
Hash 9e2607706a655f498e079ab7d3902a0e
cd5d42970b1b57fa8fb106756c1ae7a28a0c4a09
392dd5d21eac3e763f27daa27069386af25a1915dec2ebc877801e14a30dcaa1
POST /s/gts1d4/yrxvgh0i1vs HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Dec 2022 13:11:25 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p-yonder.svc.litv.tv/cdi/v2/rpc
200 OK 0 B URL HTTP/1.1 p-yonder.svc.litv.tv/cdi/v2/rpc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /cdi/v2/rpc HTTP/1.1
Host: p-yonder.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://news.cnyes.com/
Origin: https://news.cnyes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 60
Date: Fri, 23 Dec 2022 13:11:25 GMT
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kkep74VjKDI2xHS9Ji8FOwWTlO8FpidKzG3yMcimoaU2plqu4_zeDw==
t.ssp.hinet.net/emome2?u=b367b2f4-3cc9-47c9-9613-859d09838bd8
200 OK 50 B URL HTTP/2 t.ssp.hinet.net/emome2?u=b367b2f4-3cc9-47c9-9613-859d09838bd8
IP
ASN #3462 Data Communication Business Group
File type JSON data\012- , ASCII text, with no line terminators
Hash 00ec5aa765f8198c74468c1d69514d4a
9593885844e1ec7975cc9bcd22efa83765019a52
828cf2aa955be251d985dfb7281ab268ad9455ef85dfca04e2bc3ee49b82346c
GET /emome2?u=b367b2f4-3cc9-47c9-9613-859d09838bd8 HTTP/1.1
Host: t.ssp.hinet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.svc.litv.tv
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Cookie: uuid=b367b2f4-3cc9-47c9-9613-859d09838bd8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json
cache-control: no-cache, private
date: Fri, 23 Dec 2022 13:11:24 GMT
access-control-allow-origin: https://player.svc.litv.tv
vary: Accept-Encoding, Origin
access-control-allow-credentials: true
strict-transport-security: max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/25a80a4dd72309de0de04ee583f3fb08.svg
200 OK 0 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/25a80a4dd72309de0de04ee583f3fb08.svg
IP
GET /fe-common/5d5cb8a6/25a80a4dd72309de0de04ee583f3fb08.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 03:32:12 GMT
etag: W/"25a80a4dd72309de0de04ee583f3fb08"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kp7GpNmW9NXkqCIM-12FUE0SK__rXRdqpGxIZvtmEP8GKu9k3cAqPA==
age: 34747
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/e0b2e448cdb699f5fbe887549e8b2ac3.svg
200 OK 0 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/e0b2e448cdb699f5fbe887549e8b2ac3.svg
IP
GET /fe-common/5d5cb8a6/e0b2e448cdb699f5fbe887549e8b2ac3.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 03:32:12 GMT
etag: W/"e0b2e448cdb699f5fbe887549e8b2ac3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BqCDzEFcwTC7Og49xjaKyP9IH66rgEmA_saQh6aG07_DaZ_-xGL_4w==
age: 34747
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/52fd36f190fc7c2901132ce5c7e5a44b.svg
200 OK 0 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/52fd36f190fc7c2901132ce5c7e5a44b.svg
IP
GET /fe-common/5d5cb8a6/52fd36f190fc7c2901132ce5c7e5a44b.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 07:24:03 GMT
etag: W/"52fd36f190fc7c2901132ce5c7e5a44b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E7is30Obxsoqc9-tBSJcbZy392MFiSeoV_u2R-vXT1UQOklAGQCgnw==
age: 20836
X-Firefox-Spdy: h2
player.svc.litv.tv/meta/vc/cy2-schedule.json?cb=38699
200 OK 0 B URL HTTP/2 player.svc.litv.tv/meta/vc/cy2-schedule.json?cb=38699
IP
GET /meta/vc/cy2-schedule.json?cb=38699 HTTP/1.1
Host: player.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news.cnyes.com
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Thu, 22 Dec 2022 20:41:57 GMT
x-amz-version-id: WYzgT9SEBTTRgDpabDE5FxPWLA7Xno3q
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 13:09:36 GMT
cache-control: max-age=1800
etag: W/"926fe02fc3848b98678c30e2152d6bae"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 ba172beaa058835048fe52f15497da64.cloudfront.net (CloudFront)
x-amz-cf-pop: WAW51-P2
x-amz-cf-id: y1lRBxAvXO5hphGAcoNJKE5UVuRa7mBKOevkC2zgSCl-BewS5-Wphw==
age: 108
X-Firefox-Spdy: h2
s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/Gilroy-Bold.woff
200 OK 0 B URL HTTP/2 s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/Gilroy-Bold.woff
IP
GET /sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/Gilroy-Bold.woff HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://s0.2mdn.net/sadbundle/6568438347704827904/970x250-HBO_SingleTitle_DisplayPrg-Static%20/adStyle.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 36680
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 16:35:35 GMT
expires: Fri, 22 Dec 2023 16:35:35 GMT
cache-control: public, max-age=31536000
age: 74150
last-modified: Tue, 23 Aug 2022 17:45:56 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
t.ssp.hinet.net/cm?c=3d711f&cid=f18cc69e-30c3-41ae-9708-62a357583004&mp=b367b2f4-3cc9-47c9-9613-859d09838bd8
200 OK 0 B URL HTTP/2 t.ssp.hinet.net/cm?c=3d711f&cid=f18cc69e-30c3-41ae-9708-62a357583004&mp=b367b2f4-3cc9-47c9-9613-859d09838bd8
IP
ASN #3462 Data Communication Business Group
GET /cm?c=3d711f&cid=f18cc69e-30c3-41ae-9708-62a357583004&mp=b367b2f4-3cc9-47c9-9613-859d09838bd8 HTTP/1.1
Host: t.ssp.hinet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.svc.litv.tv
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Cookie: uuid=b367b2f4-3cc9-47c9-9613-859d09838bd8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
cache-control: no-cache, private
date: Fri, 23 Dec 2022 13:11:25 GMT
access-control-allow-origin: https://player.svc.litv.tv
vary: Origin
access-control-allow-credentials: true
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/42637c8a63a824b2d09eb132c380d3aa.svg
200 OK 0 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/42637c8a63a824b2d09eb132c380d3aa.svg
IP
GET /fe-common/5d5cb8a6/42637c8a63a824b2d09eb132c380d3aa.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 07:24:02 GMT
etag: W/"42637c8a63a824b2d09eb132c380d3aa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FFCBMP5ebG63yPMZlFFQGwaYSQtfj7x8fPbIHA7VGWMN8-U2P-NQhQ==
age: 20837
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/5e48bf6e14d2a141e5b2412782e207f7.svg
200 OK 0 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/5e48bf6e14d2a141e5b2412782e207f7.svg
IP
GET /fe-common/5d5cb8a6/5e48bf6e14d2a141e5b2412782e207f7.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 07:24:03 GMT
etag: W/"5e48bf6e14d2a141e5b2412782e207f7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1FIVrH-6ch0PgGQ_222KpczOwS0TizNWeKtxsVYxkZJI4sKepj6icw==
age: 20836
X-Firefox-Spdy: h2
tw.popin.cc/popin_discovery/recommend?mode=new&ad=100&country=tw&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&&rid=000000&device=pc&media=news.cnyes.com&extra=windows&agency=adgeek&topn=50&ad=100&r_category=all&country=tw&redirect=true&uid=f7c5c0ad6094d3040b71671801079260&info=eyJ1c2VyX3RkX29zIjoiV2luZG93cyIsInVzZXJfdGRfb3NfdmVyc2lvbiI6IjEwLjAuMCIsInVzZXJfdGRfYnJvd3NlciI6IkZpcmVmb3giLCJ1c2VyX3RkX2Jyb3dzZXJfdmVyc2lvbiI6IjEwNS4wLjAiLCJ1c2VyX3RkX3NjcmVlbiI6IjEyODB4MTAyNCIsInVzZXJfdGRfdmlld3BvcnQiOiIxMjgweDkzOSIsInVzZXJfdGRfdXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQ7IHJ2OjEwNS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEwNS4wIiwidXNlcl90ZF9yZWZlcnJlciI6IiIsInVzZXJfdGRfcGF0aCI6Ii9uZXdzL2lkLzUwNDQ1OTkiLCJ1c2VyX3RkX2NoYXJzZXQiOiJ1dGYtOCIsInVzZXJfdGRfbGFuZ3VhZ2UiOiJlbi11cyIsInVzZXJfdGRfY29sb3IiOiIyNC1iaXQiLCJ1c2VyX3RkX3RpdGxlIjoiJUU3JUJFJThFJUU1JTlDJThCJUU3JUE2JUJEJUU2JUI1JTgxJUU2JTg0JTlGJUU3JTg4JTg2JUU3JTk5JUJDJTIwJUU5JTlCJTlFJUU4JTlCJThCJUU1JTgzJUI5JUU2JUEwJUJDJUU1JTg5JUI1JUU2JTk2JUIwJUU5JUFCJTk4JTIwJTdDJTIwQW51ZSVFOSU4OSU4NSVFNCVCQSVBOCUyMC0lMjAlRTclQkUlOEUlRTglODIlQTEiLCJ1c2VyX3RkX3VybCI6Imh0dHBzOi8vbmV3cy5jbnllcy5jb20vbmV3cy9pZC81MDQ0NTk5IiwidXNlcl90ZF9wbGF0Zm9ybSI6IkxpbnV4IHg4Nl82NCIsInVzZXJfdGRfaG9zdCI6Im5ld3MuY255ZXMuY29tIiwidXNlcl9kZXZpY2UiOiJwYyIsInVzZXJfdGltZSI6MTY3MTgwMTA3OTI2MiwiZnJ1aXRfYm94X3Bvc2l0aW9uIjoiIiwiZnJ1aXRfc3R5bGUiOiIifQ==&alg=ltr&callback=_p6_980ca6f24d25
200 OK 0 B URL HTTP/2 tw.popin.cc/popin_discovery/recommend?mode=new&ad=100&country=tw&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&&rid=000000&device=pc&media=news.cnyes.com&extra=windows&agency=adgeek&topn=50&ad=100&r_category=all&country=tw&redirect=true&uid=f7c5c0ad6094d3040b71671801079260&info=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&alg=ltr&callback=_p6_980ca6f24d25
IP
GET /popin_discovery/recommend?mode=new&ad=100&country=tw&url=https%3A%2F%2Fnews.cnyes.com%2Fnews%2Fid%2F5044599&&rid=000000&device=pc&media=news.cnyes.com&extra=windows&agency=adgeek&topn=50&ad=100&r_category=all&country=tw&redirect=true&uid=f7c5c0ad6094d3040b71671801079260&info=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&alg=ltr&callback=_p6_980ca6f24d25 HTTP/1.1
Host: tw.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.13.5
date: Fri, 23 Dec 2022 13:11:21 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: uid=f7c5c0ad6094d3040b71671801079260; Domain=popin.cc; Path=/; Max-Age=31536000; SameSite=None; Secure
cross-origin-resource-policy: cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400%7CTitillium+Web:300
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400%7CTitillium+Web:300
IP
GET /css?family=Open+Sans:300,400%7CTitillium+Web:300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Dec 2022 13:11:17 GMT
date: Fri, 23 Dec 2022 13:11:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
t.ssp.hinet.net/
200 OK 0 B IP
ASN #3462 Data Communication Business Group
GET / HTTP/1.1
Host: t.ssp.hinet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.svc.litv.tv
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Fri, 23 Dec 2022 13:11:24 GMT
access-control-allow-origin: https://player.svc.litv.tv
vary: Accept-Encoding, Origin
access-control-allow-credentials: true
set-cookie: uuid=b367b2f4-3cc9-47c9-9613-859d09838bd8; expires=Sun, 22-Dec-2024 13:11:24 GMT; Max-Age=63072000; path=/; domain=hinet.net; secure; samesite=none
strict-transport-security: max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
cnt.trvdp.com/prebid/cnyes.com/prebid.js
403 Forbidden 0 B URL HTTP/2 cnt.trvdp.com/prebid/cnyes.com/prebid.js
IP
GET /prebid/cnyes.com/prebid.js HTTP/1.1
Host: cnt.trvdp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 23 Dec 2022 13:11:17 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pHBtpPj_UaOeOyrF9VdMLpScEDo_13aHeMpdHtQe-k_Jxa3wemIVBQ==
X-Firefox-Spdy: h2
cnt.trvdp.com/prebid/cnyes.com/prebid.js
403 Forbidden 0 B URL HTTP/2 cnt.trvdp.com/prebid/cnyes.com/prebid.js
IP
GET /prebid/cnyes.com/prebid.js HTTP/1.1
Host: cnt.trvdp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 23 Dec 2022 13:11:17 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Hn8d3aGIo_sYB8vHcx_sJxhQpiNZMouS0PDL4ir0vlzv1q6AZm6Jiw==
X-Firefox-Spdy: h2
sfiles.cnyes.cool/fe-common/5d5cb8a6/ac25a5abb8fcbdfddb46fa4e9bca6b06.svg
200 OK 0 B URL HTTP/2 sfiles.cnyes.cool/fe-common/5d5cb8a6/ac25a5abb8fcbdfddb46fa4e9bca6b06.svg
IP
GET /fe-common/5d5cb8a6/ac25a5abb8fcbdfddb46fa4e9bca6b06.svg HTTP/1.1
Host: sfiles.cnyes.cool
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news.cnyes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 28 Nov 2022 10:38:35 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 04:27:06 GMT
etag: W/"ac25a5abb8fcbdfddb46fa4e9bca6b06"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VGuW4CGRmAx37dd5oDyXciZtqK1ghXqPnohRYiUV-VAkbZDiBgiJAw==
age: 31453
X-Firefox-Spdy: h2
code.createjs.com/1.0.0/createjs.min.js
200 OK 0 B URL HTTP/2 code.createjs.com/1.0.0/createjs.min.js
IP
ASN #20940 Akamai International B.V.
GET /1.0.0/createjs.min.js HTTP/1.1
Host: code.createjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s0.2mdn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=900
expires: Fri, 23 Dec 2022 13:26:24 GMT
date: Fri, 23 Dec 2022 13:11:24 GMT
x-n: S
X-Firefox-Spdy: h2
fino.svc.litv.tv/acs/dms.js
200 OK 0 B URL HTTP/2 fino.svc.litv.tv/acs/dms.js
IP
GET /acs/dms.js HTTP/1.1
Host: fino.svc.litv.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.svc.litv.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 27 Dec 2021 04:39:13 GMT
x-amz-version-id: 2DHBAE_mtD6o2PKYw8R0BKU9ykPtbN4.
server: AmazonS3
content-encoding: gzip
date: Thu, 22 Dec 2022 19:57:03 GMT
etag: W/"bf0b1d2c0f302f8820abdbfe331bc5d6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: buO9CHwgzi0qmlNHPyG0NXaQsCTDH274iv9St_Htb0P3cDGHF_Ke2A==
age: 62335
X-Firefox-Spdy: h2
23.36.79.27
143.204.42.88
212.82.100.181
220.135.143.45
93.184.220.29
119.63.193.220
104.21.91.59
3.64.242.225
31.13.72.12