kidahora.net/news/2017/1108/88385.shtml
38.53.112.198301 Moved Permanently 0 B URL HTTP/1.1 kidahora.net/news/2017/1108/88385.shtml
IP 38.53.112.198:0
ASN #398823 PEGTECHINC-AP-02
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news/2017/1108/88385.shtml HTTP/1.1
Host: kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 06 Mar 2023 07:05:22 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.kidahora.net/news/2017/1108/88385.shtml
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cf14baed0842431a08367ed54f2346ca
d943be8835b7e4470e3d6fbe09ac39c5464be434
a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5837
Expires: Mon, 06 Mar 2023 08:42:30 GMT
Date: Mon, 06 Mar 2023 07:05:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash edf4102b9efce8261382541ecd721da5
23a30610ea113c9f93b0ce302ce3df010bd56f05
88c132ab9697f01e979e74208e0ae12ec410c26b7a79f0cead4f9c8f86d12fda
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88C132AB9697F01E979E74208E0AE12EC410C26B7A79F0CEAD4F9C8F86D12FDA"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5262
Expires: Mon, 06 Mar 2023 08:32:55 GMT
Date: Mon, 06 Mar 2023 07:05:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Mar 2023 06:08:34 GMT
content-type: application/json
age: 3399
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5034bcceb9691ad6244be6045742ab53
51e77cdc92833432cd26b13f28875791a187c63c
540637d0d69c1201dcb2dd813b40e64cd07c5bd7685d46a7bad4d437a4e7aeea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "540637D0D69C1201DCB2DD813B40E64CD07C5BD7685D46A7BAD4D437A4E7AEEA"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13407
Expires: Mon, 06 Mar 2023 10:48:40 GMT
Date: Mon, 06 Mar 2023 07:05:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ETJWGKHu0z+ZJ+T8alJw1m+PWDlYYVOgdnYMDa/v9doUoszJViNhsC5GyIhDPfqucJlcp/AhV35l2RmZ2UaLBg==
x-amz-request-id: W7X9P5J7CN11EHV5
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Mar 2023 06:34:43 GMT
age: 1830
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:13 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.kidahora.net/news/2017/1108/88385.shtml
38.53.112.198200 OK 706 B URL HTTP/1.1 www.kidahora.net/news/2017/1108/88385.shtml
IP 38.53.112.198:0
ASN #398823 PEGTECHINC-AP-02
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (828), with CRLF line terminators
Hash 3d91d1e83ed9d13225ab1365beea3802
c0f97ffc2631b12726c71de6b7b3e7d6233edda3
94788fc4eccded6cdc68ce8369822f425e12e15ab2c0d0260d2b3e758c30aea2
GET /news/2017/1108/88385.shtml HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 07:05:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Mar 2023 06:12:30 GMT
age: 3164
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1dfdbbe528416d7653788c31a945540d
ce7e4b0cc913dcf90dcb43ca51706e2ff0677eaf
872f2081ef126a0358e196338a21f095c376652feaa7cb9b2bfd6f3149838f60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "872F2081EF126A0358E196338A21F095C376652FEAA7CB9B2BFD6F3149838F60"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13545
Expires: Mon, 06 Mar 2023 10:50:59 GMT
Date: Mon, 06 Mar 2023 07:05:14 GMT
Connection: keep-alive
www.kidahora.net/common.js
38.53.112.198200 OK 1.1 kB URL HTTP/1.1 www.kidahora.net/common.js
IP 38.53.112.198:0
ASN #398823 PEGTECHINC-AP-02
File type HTML document, ASCII text, with very long lines (389), with CRLF line terminators
Hash 0a31bc706868a19e39ba1e3397a32a86
107dc27d7202aa36da8eb5b5bb38fdb3f751d8ab
29b0bbc5629c3637a395e0eb536b297cfa14a80c220b18b4767e563f7f81cb31
GET /common.js HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/news/2017/1108/88385.shtml
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 07:05:23 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.kidahora.net/tj.js
38.53.112.198200 OK 522 B IP 38.53.112.198:0
ASN #398823 PEGTECHINC-AP-02
File type ASCII text, with CRLF line terminators
Hash fe5c46184afd0da8627a66380c732d70
95dfe13828b91614030653bd00c161830d1ef131
e6dc4a07e18db6566d1668fb7bf1d3dbfb642e1fdb26637bc3740d2e520ed3ff
GET /tj.js HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/news/2017/1108/88385.shtml
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 07:05:23 GMT
Content-Type: application/x-javascript
Content-Length: 522
Connection: keep-alive
push.services.mozilla.com/
35.161.188.100101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.161.188.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: alH/cOPIO1sm/GoWtdcELA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KPhtNoTQBGmzEhc3qhErdueO5QA=
www.kidahora.net/favicon.ico
38.53.112.198200 OK 1.2 kB URL HTTP/1.1 www.kidahora.net/favicon.ico
IP 38.53.112.198:0
ASN #398823 PEGTECHINC-AP-02
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/news/2017/1108/88385.shtml
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 07:05:24 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sat, 11 Mar 2023 07:05:24 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2f0e2ccc0895766faa5d7d3ea99bcd23
f4fb17fd8485bdb46954452947421b915471dbfa
66e81495b7df24bced174b8294016a46ce53853a4e540e66eaf273fed09902c0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "66E81495B7DF24BCED174B8294016A46CE53853A4E540E66EAF273FED09902C0"
Last-Modified: Sun, 05 Mar 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20352
Expires: Mon, 06 Mar 2023 12:44:27 GMT
Date: Mon, 06 Mar 2023 07:05:15 GMT
Connection: keep-alive
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 8b3af736f4d60d3946cf2bd8d2c3c9bc
15918aebcbdbbd78d5112254c4f59aa0686d6ebd
a0ca1f8b605d721f200dfdf59c6de13c815cd449536cf3b14e324e73af518789
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 10 Mar 2023 03:31:47 GMT
ETag: "15918aebcbdbbd78d5112254c4f59aa0686d6ebd"
Last-Modified: Mon, 06 Mar 2023 03:31:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1539
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a38bfcefac6b50b-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 8b3af736f4d60d3946cf2bd8d2c3c9bc
15918aebcbdbbd78d5112254c4f59aa0686d6ebd
a0ca1f8b605d721f200dfdf59c6de13c815cd449536cf3b14e324e73af518789
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 10 Mar 2023 03:31:47 GMT
ETag: "15918aebcbdbbd78d5112254c4f59aa0686d6ebd"
Last-Modified: Mon, 06 Mar 2023 03:31:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1539
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a38bfcf0ca2b515-OSL
api.share.baidu.com/s.gif?l=http://www.kidahora.net/news/2017/1108/88385.shtml
182.61.201.94200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.kidahora.net/news/2017/1108/88385.shtml
IP 182.61.201.94:0
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.kidahora.net/news/2017/1108/88385.shtml HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Mon, 06 Mar 2023 07:05:15 GMT
www.apippmv11.com/news/index.html
202.95.22.212200 OK 238 B URL HTTP/2 www.apippmv11.com/news/index.html
IP 202.95.22.212:0
ASN #64050 BGPNET Global ASN
File type HTML document, Unicode text, UTF-8 text
Hash 07370ec4486b33cdf54c273e3e10c3c5
509034ad29878bd15c3308135cbdc3b6a596e31c
cb5c9fe15b226b31e4cb3070631dd7a487b836910a92f0864cd22d3a75ae74fe
GET /news/index.html HTTP/1.1
Host: www.apippmv11.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:15 GMT
content-type: text/html
content-length: 238
last-modified: Sun, 05 Mar 2023 09:23:44 GMT
etag: "64045fa0-ee"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10342
Expires: Mon, 06 Mar 2023 09:57:38 GMT
Date: Mon, 06 Mar 2023 07:05:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10342
Expires: Mon, 06 Mar 2023 09:57:38 GMT
Date: Mon, 06 Mar 2023 07:05:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10342
Expires: Mon, 06 Mar 2023 09:57:38 GMT
Date: Mon, 06 Mar 2023 07:05:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10342
Expires: Mon, 06 Mar 2023 09:57:38 GMT
Date: Mon, 06 Mar 2023 07:05:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10342
Expires: Mon, 06 Mar 2023 09:57:38 GMT
Date: Mon, 06 Mar 2023 07:05:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18bfa351-16bf-432a-ae68-78856a5cd3cb.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18bfa351-16bf-432a-ae68-78856a5cd3cb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41701ffc7b7299a6eeb3d0a3d5e191c8
579dd82050cba63d527e066ef0b67e3d015994e3
6769a7226568cad7489b72e861a6add459efa885f78ba6ed3cf3275ce4ffb1bb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18bfa351-16bf-432a-ae68-78856a5cd3cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7283
x-amzn-requestid: 40be1d2c-3b61-4f66-9513-2533032e56a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU7MIFGRoAMFghA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050be6-58eee1715cb9256849b7cece;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:38:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: t4S1VMsPXAyAlHs40CbmTZJ5jBeFn6aCD6W4yP88zkte6x8GJkA1TA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 f3ac324bf05099849ebda59e8136db0e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:45:50 GMT
age: 33566
etag: "579dd82050cba63d527e066ef0b67e3d015994e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e39823-159c-408b-ba18-452a63ab8bc7.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e39823-159c-408b-ba18-452a63ab8bc7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af2ba480b5b10e3646fc2f8d39e1cd38
be429672be305775021d4cc4421d585833d627a3
6fdc2445437aa93bc3ff7bc7d7eb5c2c327e1a624fd94439333f5d470989f8cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e39823-159c-408b-ba18-452a63ab8bc7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12506
x-amzn-requestid: 3a1900f1-9cd3-4a63-87e2-9dab3a6b5477
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6jcEqRIAMF3kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050ae2-3c7b850f41cd2b496532adae;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: oaP0ngJUB5utdGUvy0-6DKKQUweZ8uiDPvfbWGzN01lIe9wMV1GQmA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:46:41 GMT
age: 33515
etag: "be429672be305775021d4cc4421d585833d627a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 49dbeca46074e859a5a2958fdec9b28b
c649916591826b4db490b98cbe530533818daf0d
cb33caa142deb6570ce9e8a382d7fce45ba0101cdbc65ee6319dd23693f22086
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7250
x-amzn-requestid: 5ae814e4-592b-4811-a724-d807b69ebd2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6hUHslIAMF26w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050ad4-051cb0632863689209d81d45;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 66AYoAs_rFJQ7dwagQyaBCAFJtuuOS3FcIgNT6es0h3cAITyEaYTTQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:42:16 GMT
age: 33780
etag: "c649916591826b4db490b98cbe530533818daf0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c09ef55-602f-4eb8-aa1a-e701b5dc7903.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c09ef55-602f-4eb8-aa1a-e701b5dc7903.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02cd95c30a65a0c80928e653abedeefa
1099ae20c50109211fc9318ece50a784fec998f9
08162a68f91d9149ace613460e3dfae80ceac1dbe505c79642138032100335bb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c09ef55-602f-4eb8-aa1a-e701b5dc7903.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6155
x-amzn-requestid: 99998e44-c2f0-4973-bede-44c33036ba4d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU7U7HA-oAMFQww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050c1f-7f8fe3f96531b57c69584754;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:39:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: zEWUxG77GT-uaewuPLzCl7DptXf5xbmQtBX7_tEaichah3kC3tmKAA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 22:16:07 GMT
age: 31749
etag: "1099ae20c50109211fc9318ece50a784fec998f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
34.120.237.76200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4726917eabc29a977873ad26e264e70d
4619a0418ee08d6618ead537f31823c98f355b5a
d3c6b43d46ccff30f0003a063b6c4c78d4a782262bfdeb138e6c015555ce2dcb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3381
x-amzn-requestid: 8b89e7ab-b8b3-45cd-af3a-cc419e61f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A-PNPFynoAMFn8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbf8ba-616bedc230d1c2b13a09beae;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 00:26:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Qd5FIKUZwnnKiIzEnrA7ZcC_yWa9_iP1r7xUaCP4f6I7m_z3ChB-2A==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 85ee490c179dc0af42b771f11421073e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 09:32:00 GMT
age: 77596
etag: "4619a0418ee08d6618ead537f31823c98f355b5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc177c1b3-daca-4be8-99da-53657685afd6.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc177c1b3-daca-4be8-99da-53657685afd6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea9df494dd71d0c0b0dd8b3725cd44d3
40869d1be51f481e28ec7d5a3803e9e62d63654f
301e65467df484430c3aaf58897844f810cbfda4a54f89ff2acf7a2e30cb91c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc177c1b3-daca-4be8-99da-53657685afd6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7397
x-amzn-requestid: a8465d94-2ade-4074-8061-8f13611b5cbe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BPoqSGCZIAMF4gQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6402ee41-698958c25fed7fac78ab18a5;Sampled=0
x-amzn-remapped-date: Sat, 04 Mar 2023 07:07:45 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: _hT5dDyUxqvyhoLWyyBh4ZTCPg3qcnT9nRc5CA0CGZuO-hingMDnfQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 07:32:17 GMT
age: 84779
etag: "40869d1be51f481e28ec7d5a3803e9e62d63654f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9e0db6bf6299944e4b63e25c9e11d6df
5725fa43df7cbd4ced20d4d9171e934e57fd80ef
254f0b0cbb9bf4f74dda56c882c0ddfc20e698c6376aaa51ac71bc2279483573
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "254F0B0CBB9BF4F74DDA56C882C0DDFC20E698C6376AAA51AC71BC2279483573"
Last-Modified: Sun, 05 Mar 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20305
Expires: Mon, 06 Mar 2023 12:43:41 GMT
Date: Mon, 06 Mar 2023 07:05:16 GMT
Connection: keep-alive
hm.baidu.com/hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash 0e6f6b3e91d5f277cfeb05242c679d8a
6cdebd77b8d0eb6c789596cad64d45bd57970834
4b8a3818c96397e5d73c5b71c38f97a4a45758bb4833660adeec4b29f2cedf20
GET /hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Mon, 06 Mar 2023 07:05:15 GMT
Etag: 36f33236d3b34ce4b97431897291de50
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=07CF69827D02BC12; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?09a7b5e821ba0c7841e240d5bfe840c4
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?09a7b5e821ba0c7841e240d5bfe840c4
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (616)
Hash b6cb8b86e03dda30133571054682f233
c5c8ad30d08e81076ef8030e2fa7a880b38ca719
0e7eca73c79452a37a602f2e97256852b79ab47c8082ca89039875d785c93cac
GET /hm.js?09a7b5e821ba0c7841e240d5bfe840c4 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11254
Content-Type: application/javascript
Date: Mon, 06 Mar 2023 07:05:15 GMT
Etag: 193d9a36008a1972aa9ea9a04a33199c
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=45C9DAABB6A82365; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.digicert.com/
192.229.221.95200 OK 278 B IP 192.229.221.95:0
Hash 127fa11b7aa1761cc0530338e73d0f8b
2d3503ab365d3df619665178a255c18c94507299
7442853b54733a882330e7713636ee4f4919b20afe21e1b56ed1fefbeec6ebba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 57795
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 07:05:16 GMT
Last-Modified: Sun, 05 Mar 2023 15:02:01 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 278
lbfm.lbpictupian.com/upload/vod/2023/02/jmnaa1ldn0c.jpg
104.22.12.214200 OK 7.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/jmnaa1ldn0c.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0b042deaabbb313d8d46ae8e95fca213
2bc812a6ea26382056838558808ed7948940d5c5
2793a447e8a0a66599a066bc6bb913ab6d1bafb0055ffc0657d50037f999998a
GET /upload/vod/2023/02/jmnaa1ldn0c.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 7570
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10138
content-disposition: inline; filename="jmnaa1ldn0c.webp"
etag: "63ecc0a6-279a"
last-modified: Wed, 15 Feb 2023 11:23:18 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8f70b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/oq0boc34kb0.jpg
104.22.12.214200 OK 7.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/oq0boc34kb0.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c0f96dbb6ea6dcfaeab7dc2a8c7bd275
cb62df3e4f255dc6fe0d2e4b3f3ffccdee797f10
66732c3e3061becd011f0c8a92a65b9206c6e343e261320691802ae6dd9ba90e
GET /upload/vod/2023/02/oq0boc34kb0.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 7742
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9080
content-disposition: inline; filename="oq0boc34kb0.webp"
etag: "63ecc0a1-2378"
last-modified: Wed, 15 Feb 2023 11:23:13 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8f60b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/3k5xxbzumri.jpg
104.22.12.214200 OK 8.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/3k5xxbzumri.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 684cc3552bba27d0410f774177614c84
81a74fe054373f8bc76420e1fab047084f2aed81
85c0b5549cd770dfa2511dea7666e596a48f6c65265ae14ec52baafddd29c52a
GET /upload/vod/2023/02/3k5xxbzumri.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8746
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9804
content-disposition: inline; filename="3k5xxbzumri.webp"
etag: "63ecc091-264c"
last-modified: Wed, 15 Feb 2023 11:22:57 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3465
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8f20b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/m4rwleztka5.jpg
104.22.12.214200 OK 9.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/m4rwleztka5.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 678c0a45220e6209a9a99e976c683aaf
8cf82f57ce1a9bdba237a86f6bfd421ea112add7
25d350f9d5f4387fa777984df0ad3787155f3eb8dc558e556aac44ac6f126205
GET /upload/vod/2023/02/m4rwleztka5.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 9700
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10570
content-disposition: inline; filename="m4rwleztka5.webp"
etag: "63ecc083-294a"
last-modified: Wed, 15 Feb 2023 11:22:43 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3466
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8f00b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/jkkoe3h510j.jpg
104.22.12.214200 OK 8.3 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/jkkoe3h510j.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0c02cf3caf74684a6bcb3bff24919705
e677be2b57e516bb036f5a04569d1d7527aa84ba
25b64bc697b993dab25184fa672ca100b12678f9099aa15b6c19a707697f3506
GET /upload/vod/2023/02/jkkoe3h510j.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8330
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10815
content-disposition: inline; filename="jkkoe3h510j.webp"
etag: "63ecc099-2a3f"
last-modified: Wed, 15 Feb 2023 11:23:05 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8f40b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/jeips33kyjh.jpg
104.22.12.214200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/jeips33kyjh.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3fd0ce51b7c3f9cd858c4af90c9a66a
daa0bd06892d7f0e0531ef4fee28aa6553182eca
7c90d75f55032e72e88764dda06b764f9f32fcd8622ce6d62c189bce61031088
GET /upload/vod/2023/02/jeips33kyjh.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 10784
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11684
content-disposition: inline; filename="jeips33kyjh.webp"
etag: "63eb64ff-2da4"
last-modified: Tue, 14 Feb 2023 10:39:59 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd809090b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/iisznbvbszt.jpg
104.22.12.214200 OK 7.9 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/iisznbvbszt.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5f9fc8cee2e5611e0146cc16cf78b08e
43991b692640e140dc66b5449648288ce643652f
cdb3d4873e1f5a9f88673b3fb25ae7617185a6fea9ce5c2da09c2a0e1a440738
GET /upload/vod/2023/02/iisznbvbszt.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 7870
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8730
content-disposition: inline; filename="iisznbvbszt.webp"
etag: "63ecc285-221a"
last-modified: Wed, 15 Feb 2023 11:31:17 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd8090e0b39-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/02/hr2vplo30zv.jpg
104.22.17.247200 OK 10 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/02/hr2vplo30zv.jpg
IP 104.22.17.247:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c62cefd23e689584a52155a7d660a518
aefa802b8ed122aa831a278271d95332ce4436e1
f342647dd2cac5784e7bde020d4058b661be2111fcf8691b09aeeec9ce917de3
GET /upload/vod/2023/02/hr2vplo30zv.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 10006
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10770
content-disposition: inline; filename="hr2vplo30zv.webp"
etag: "63ecbf92-2a12"
last-modified: Wed, 15 Feb 2023 11:18:42 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd80b63b517-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/l514ozb4opc.jpg
104.22.12.214200 OK 8.0 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/l514ozb4opc.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3dd3f8e769790e6c621932e1dd6d0ab
75331c72b39df08f714dd8bc4a31429866f884ae
f2da6eaa16c809ada53151cf173f355d7304c2503ffcc7a6c108445bf028500d
GET /upload/vod/2023/02/l514ozb4opc.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8048
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9159
content-disposition: inline; filename="l514ozb4opc.webp"
etag: "63ecc0b3-23c7"
last-modified: Wed, 15 Feb 2023 11:23:31 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8fe0b39-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/02/dz2dih3w43l.jpg
104.22.17.247200 OK 1.5 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/02/dz2dih3w43l.jpg
IP 104.22.17.247:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56b74efc134cce88fbd5c6363a448d0a
a582d90a8b5d4130e9706ef2630d9a004baaa7fb
c450e65878620abe62e48f77a169c915814376f035331f0a6e4989cd8ed129fc
GET /upload/vod/2023/02/dz2dih3w43l.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 1494
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=3640
content-disposition: inline; filename="dz2dih3w43l.webp"
etag: "63ecbf84-e38"
last-modified: Wed, 15 Feb 2023 11:18:28 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd80b65b517-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/cxsrc2q5yhn.jpg
104.22.12.214200 OK 8.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/cxsrc2q5yhn.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b94558622db2e8aa3e4437ea900032c8
0c612184b09baa48f25f12a8cb663b7b9ebdf60c
93dda320e9ef1d5672cdb482d9afbedf73d7c1b4dc453c0b09b96d4ee80c13d8
GET /upload/vod/2023/02/cxsrc2q5yhn.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8622
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9633
content-disposition: inline; filename="cxsrc2q5yhn.webp"
etag: "63ecc09d-25a1"
last-modified: Wed, 15 Feb 2023 11:23:09 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8f50b39-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/02/kopogwy5zdi.jpg
104.22.17.247200 OK 3.8 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/02/kopogwy5zdi.jpg
IP 104.22.17.247:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1d8d3f2629dc90571888a3d636f5fc10
171519d4b6ffc39eec69f4bc3fc5aafc5e1230eb
565d309f9f339e28cb6c04042400273cc5c8fe944ab661a166fcdcf381f6c186
GET /upload/vod/2023/02/kopogwy5zdi.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 3836
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=5834
content-disposition: inline; filename="kopogwy5zdi.webp"
etag: "63ecbf89-16ca"
last-modified: Wed, 15 Feb 2023 11:18:33 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd80b5fb517-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/0xpvojuzjkj.jpg
104.22.12.214200 OK 8.2 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/0xpvojuzjkj.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 80cdd80353ad2dcb79bf6839641cb57a
b3aef170cfe017e8ed7a8d3d785fc93628126b22
a61cd32ceb10a3dae7cf4ee49e09e85940507a3568af09a59093dcaab74540b1
GET /upload/vod/2023/02/0xpvojuzjkj.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8178
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9152
content-disposition: inline; filename="0xpvojuzjkj.webp"
etag: "63eb64e2-23c0"
last-modified: Tue, 14 Feb 2023 10:39:30 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8ff0b39-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 278 B IP 192.229.221.95:0
Hash 83efe2236969b2e74d158a731eadefd9
f2e0a0d02f0059063a63882905e2f15d29fc74ad
8f5dceef7943e6970a008c8f45bc961a1715b9b7663f9218b7ff038e402c6879
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 143374
Cache-Control: max-age=171555
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 07:05:16 GMT
Etag: "64035bc2-116"
Expires: Wed, 08 Mar 2023 06:44:31 GMT
Last-Modified: Sat, 04 Mar 2023 14:54:58 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 278
lbfm.lbpictupian.com/upload/vod/2023/02/avljcijxeue.jpg
104.22.12.214200 OK 5.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/avljcijxeue.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b9df701d8dcfc74e41cafb8e92b527af
12612b2ef5617ace5c0307734c926dd9b5a4a92b
9c9bf87eb9981dd574c3c7d2f1379a232771080a0451a65d8ad35d323cbdb3d6
GET /upload/vod/2023/02/avljcijxeue.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 5744
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6851
content-disposition: inline; filename="avljcijxeue.webp"
etag: "63eb64ea-1ac3"
last-modified: Tue, 14 Feb 2023 10:39:38 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f9000b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/dqzexkhdnyb.jpg
104.22.12.214200 OK 6.9 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/dqzexkhdnyb.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ecd91e00dd4fe8cc374785d09286b96f
5140d72c7b3601940bbf182d7e96cc601b0ca307
d2d4c7639ed8708c67accb485a09ae8d790da998b4196768e49f7542e65ea185
GET /upload/vod/2023/02/dqzexkhdnyb.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 6924
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9441
content-disposition: inline; filename="dqzexkhdnyb.webp"
etag: "63eb64f3-24e1"
last-modified: Tue, 14 Feb 2023 10:39:47 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f9020b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/ucqqprsrvsa.jpg
104.22.12.214200 OK 5.5 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/ucqqprsrvsa.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cdf3ce152c076d50505312a713833861
2ad4494f84ccf318f0b682dac3f185049cc717f8
fb3764994f7924c39859c3ca91ad0132358af6a4dfea564a2b77a51ca39486d4
GET /upload/vod/2023/02/ucqqprsrvsa.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 5498
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7492
content-disposition: inline; filename="ucqqprsrvsa.webp"
etag: "63eb64ef-1d44"
last-modified: Tue, 14 Feb 2023 10:39:43 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f9010b39-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/02/43v2hr0dhfr.jpg
104.22.17.247200 OK 5.7 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/02/43v2hr0dhfr.jpg
IP 104.22.17.247:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 52402100e877cbfe927e8a94e42bd4be
6c5350dfd6be25db0cb35d38831ce657cbef90b4
61e37bb2ee3b3d5a32dc44f5786ae7ac5b07b25ce07caa2126a3e053a64e6a8f
GET /upload/vod/2023/02/43v2hr0dhfr.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 5702
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6868
content-disposition: inline; filename="43v2hr0dhfr.webp"
etag: "63ecbf8e-1ad4"
last-modified: Wed, 15 Feb 2023 11:18:38 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd81b81b517-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 278 B IP 192.229.221.95:0
Hash 127fa11b7aa1761cc0530338e73d0f8b
2d3503ab365d3df619665178a255c18c94507299
7442853b54733a882330e7713636ee4f4919b20afe21e1b56ed1fefbeec6ebba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 56571
Cache-Control: max-age=171157
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 07:05:16 GMT
Etag: "6404ad46-116"
Expires: Wed, 08 Mar 2023 06:37:53 GMT
Last-Modified: Sun, 05 Mar 2023 14:55:02 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 278
lbfm.lbpictupian.com/upload/vod/2023/02/kdt5yuwyfwa.jpg
104.22.12.214200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/kdt5yuwyfwa.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash 2e7af88f1ab1921251d1a7766b6754a1
58bcd9478c148487924087e642b9bfbb5560027e
31469c355989f38e1bbac9329893c408d74a7a3378ab60919081ecad8166d00f
GET /upload/vod/2023/02/kdt5yuwyfwa.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/jpeg
content-length: 11239
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=11748, status=webp_bigger
etag: "63ecc27c-2de4"
last-modified: Wed, 15 Feb 2023 11:31:08 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a38bfd8090b0b39-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/02/euv2cs0hhqq.jpg
104.22.17.247200 OK 8.0 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/02/euv2cs0hhqq.jpg
IP 104.22.17.247:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 78c82be15e01dcf4a37d29f192fbfad8
8805a143dd702e46b580f0b9c57f5f6a3b1d89a6
9fc89475890d13328830050ba5d54b4222696f0269831c1aa33acbbf1697677c
GET /upload/vod/2023/02/euv2cs0hhqq.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9567
content-disposition: inline; filename="euv2cs0hhqq.webp"
etag: "63ecbf81-255f"
last-modified: Wed, 15 Feb 2023 11:18:25 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd81b7db517-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/ik1wr0gsbiy.jpg
104.22.12.214200 OK 9.4 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/ik1wr0gsbiy.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 815ca471dd1b52f0fe2a8be786d37ef9
e252994b97c9c389b162072c622a71cdd96cb123
86bef4b3495b532d904b50c734945240fa11ebcdefcf6fafc17c86a161b251d7
GET /upload/vod/2023/02/ik1wr0gsbiy.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 9438
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10284
content-disposition: inline; filename="ik1wr0gsbiy.webp"
etag: "63ecc280-282c"
last-modified: Wed, 15 Feb 2023 11:31:12 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd8090c0b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/5valjpi4iis.jpg
104.22.12.214200 OK 9.9 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/5valjpi4iis.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash ebce3b53920912dff14af2bedc12da59
52cebbb15ab4207be3990824f40efc60d793f370
2606e4baf54ebb2b35f6e7d1f02c34b77191ae44d708b1a13fd7125bd7cc8231
GET /upload/vod/2023/02/5valjpi4iis.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/jpeg
content-length: 9869
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10520, status=webp_bigger
etag: "63ecc28d-2918"
last-modified: Wed, 15 Feb 2023 11:31:25 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a38bfd809120b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/sm2zaas1fdy.jpg
104.22.12.214200 OK 6.3 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/sm2zaas1fdy.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8454760b19d5b8a105ba6a063a35d8c9
3d8792144aa46a2ef8fc0a8e8b3c23be1acf60c0
192fb7d6d3fdf572344842103c2d04faa29b95b9fdf293766c25a9b96d55f56d
GET /upload/vod/2023/02/sm2zaas1fdy.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 6294
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7575
content-disposition: inline; filename="sm2zaas1fdy.webp"
etag: "63eb64fa-1d97"
last-modified: Tue, 14 Feb 2023 10:39:54 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f9050b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/pvjsvrihjkh.jpg
104.22.12.214200 OK 5.7 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/pvjsvrihjkh.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f2d012bebf8569d98eca767a1083cc1e
5ed9f4efb819a96373cf7f1a59f2311b64014f93
2a10948631cee9fd861f2af17b6b2d6ff97928994c70ecf5b25eabff92f3ba0a
GET /upload/vod/2023/02/pvjsvrihjkh.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 5716
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6898
content-disposition: inline; filename="pvjsvrihjkh.webp"
etag: "63ecc291-1af2"
last-modified: Wed, 15 Feb 2023 11:31:29 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd809130b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/j1l42hu3tdg.jpg
104.22.12.214200 OK 9.1 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/j1l42hu3tdg.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash 8ed79113b8105bea320416efe678d4bf
3d4d42bc6eb782a712d8be1d78d4fa7c2794f1d2
19ab3061f1a23dc4f5cf822a9c712098ed7f8c2f0c7daca64d33c0db5d16f03f
GET /upload/vod/2023/02/j1l42hu3tdg.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/jpeg
content-length: 9050
cf-bgj: imgq:85,h2pri
cf-polished: origSize=9551, status=webp_bigger
etag: "63ecc295-254f"
last-modified: Wed, 15 Feb 2023 11:31:33 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a38bfd809150b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/avn4ry1hpof.jpg
104.22.12.214200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/avn4ry1hpof.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c62cefd23e689584a52155a7d660a518
aefa802b8ed122aa831a278271d95332ce4436e1
f342647dd2cac5784e7bde020d4058b661be2111fcf8691b09aeeec9ce917de3
GET /upload/vod/2023/02/avn4ry1hpof.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 10006
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10770
content-disposition: inline; filename="avn4ry1hpof.webp"
etag: "63eb6618-2a12"
last-modified: Tue, 14 Feb 2023 10:44:40 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd809180b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/a5u1uqjkolg.jpg
104.22.12.214200 OK 7.2 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/a5u1uqjkolg.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d96b4ca1359ccfdd9683f8f10ef102c1
23085f517f43dd44da4036f044eb0185ccac8428
d3e499e55bcc1de00cf1c77e16df6acc37bd93c5bb762fd6be2d4deb269597be
GET /upload/vod/2023/01/a5u1uqjkolg.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 7156
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8877
content-disposition: inline; filename="a5u1uqjkolg.webp"
etag: "63cc27e8-22ad"
last-modified: Sat, 21 Jan 2023 17:59:04 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd809170b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/l2milpcfsnk.jpg
104.22.12.214200 OK 9.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/l2milpcfsnk.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 47a91025016132b3c8d4bbc327aa57c3
4f4905d7179870cb89d9fe913661ae9aea3738b3
8751f530d775e504b60cd580c3a79cb4139b1dbc4cdfa8318d864f706f449cb9
GET /upload/vod/2023/02/l2milpcfsnk.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 9590
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10769
content-disposition: inline; filename="l2milpcfsnk.webp"
etag: "63ecc0af-2a11"
last-modified: Wed, 15 Feb 2023 11:23:27 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f8fc0b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/lhg5qecbyky.jpg
104.22.12.214200 OK 12 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/lhg5qecbyky.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash f537e420a1f7974b918ce6e155a25a2d
3ecb224fa34d36191caa9329bd4e09f8ef8b5e86
0697a83c06727a7962bff8d831419c291e02b4ae2a0889e3cc94807a6730933c
GET /upload/vod/2023/02/lhg5qecbyky.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/jpeg
content-length: 11558
cf-bgj: imgq:85,h2pri
cf-polished: origSize=12215, status=webp_bigger
etag: "63ecc08c-2fb7"
last-modified: Wed, 15 Feb 2023 11:22:52 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3466
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a38bfd809190b39-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 278 B IP 192.229.221.95:0
Hash 83efe2236969b2e74d158a731eadefd9
f2e0a0d02f0059063a63882905e2f15d29fc74ad
8f5dceef7943e6970a008c8f45bc961a1715b9b7663f9218b7ff038e402c6879
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 143374
Cache-Control: max-age=171555
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 07:05:16 GMT
Etag: "64035bc2-116"
Expires: Wed, 08 Mar 2023 06:44:31 GMT
Last-Modified: Sat, 04 Mar 2023 14:54:58 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 278
lbfm.lbpictupian.com/upload/vod/2023/02/bqinnvg1bab.jpg
104.22.12.214200 OK 8.0 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/bqinnvg1bab.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dbfca9649d5f97669b4f5c2ff59e027d
6574bf5723e5699012394ce5aabcf143d83b5099
1bec8718a0ac43f0efd70bfb0a86f1b83d7f2a29b2c566c439716d7ba1ae033b
GET /upload/vod/2023/02/bqinnvg1bab.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8020
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9138
content-disposition: inline; filename="bqinnvg1bab.webp"
etag: "63ecc28a-23b2"
last-modified: Wed, 15 Feb 2023 11:31:22 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd809100b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/yz0r3vt2fq1.jpg
104.22.12.214200 OK 6.4 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/yz0r3vt2fq1.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 41029860879db19c821bba9145d9f422
78d65d4d6d01af08af3b4b3aaa33f55137f88e75
8b6a490b6c9ecb11f8b9e4091a6205fde4fa37d2ff03afb8ff0f4997f0547ed0
GET /upload/vod/2023/02/yz0r3vt2fq1.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 6380
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8167
content-disposition: inline; filename="yz0r3vt2fq1.webp"
etag: "63eb64f7-1fe7"
last-modified: Tue, 14 Feb 2023 10:39:51 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1281
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd7f9040b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/n3u3bfsjnmf.jpg
104.22.12.214200 OK 8.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/n3u3bfsjnmf.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7fca7d2742e081a6b81f16cd77c2925f
5aa4448d2372171ff657d03004ace661cebe1b87
62b91a1151b4c91b9471a51b742179db1e6392583aa8b1cdd9c480def0f941d4
GET /upload/vod/2023/02/n3u3bfsjnmf.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 8612
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9618
content-disposition: inline; filename="n3u3bfsjnmf.webp"
etag: "63ecc079-2592"
last-modified: Wed, 15 Feb 2023 11:22:33 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3466
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd839410b39-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 278 B IP 192.229.221.95:0
Hash 127fa11b7aa1761cc0530338e73d0f8b
2d3503ab365d3df619665178a255c18c94507299
7442853b54733a882330e7713636ee4f4919b20afe21e1b56ed1fefbeec6ebba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 57109
Cache-Control: max-age=171695
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 07:05:16 GMT
Etag: "6404ad46-116"
Expires: Wed, 08 Mar 2023 06:46:51 GMT
Last-Modified: Sun, 05 Mar 2023 14:55:02 GMT
Server: ECAcc (ska/F77E)
X-Cache: HIT
Content-Length: 278
lbfm.lbpictupian.com/upload/vod/2023/02/euerczxc3yo.jpg
104.22.12.214200 OK 9.3 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/euerczxc3yo.jpg
IP 104.22.12.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 764cb91154193f2e019e93c03921ba5d
a0e5888885d8011e1f2ccd76145881cf0f8f415b
eadcdd39f244f2d8d7e761a9b217e81ab9cadb2f234cd5a10925c5a100890c03
GET /upload/vod/2023/02/euerczxc3yo.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/webp
content-length: 9268
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10061
content-disposition: inline; filename="euerczxc3yo.webp"
etag: "63ecc074-274d"
last-modified: Wed, 15 Feb 2023 11:22:28 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3466
accept-ranges: bytes
server: cloudflare
cf-ray: 7a38bfd8494e0b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/0ldh2z2syyc.jpg
104.22.12.214200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/0ldh2z2syyc.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 521f8a28dccda2ed9ffca5183f069e45
4385429eef929a42a504e7e7ac5f8e8ec76fceb4
ac75fd952bf9b04e57d749dbeb3c404863ecd8e5184f46a0e0282d2daf2265b2
GET /upload/vod/2023/02/0ldh2z2syyc.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/jpeg
content-length: 11435
cf-bgj: imgq:85,h2pri
cf-polished: origSize=12041, status=webp_bigger
etag: "63ecc088-2f09"
last-modified: Wed, 15 Feb 2023 11:22:48 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3466
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a38bfd8595b0b39-OSL
X-Firefox-Spdy: h2
www.ppmv101.xyz/
202.95.22.196200 OK 21 kB IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
Hash b5e60b9a31ca08c97e3335e8a12981c6
d9f4fe0d2c4f6546694352f77d001f2e445660a6
2b9b0b3c67a631690b2d39073f478d3411a2dbb98da4d7f0d021c0078b83685c
GET / HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.apippmv11.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=178870380&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=62642&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Fnews%2F2017%2F1108%2F88385.shtml&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=178870380&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=62642&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Fnews%2F2017%2F1108%2F88385.shtml&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=178870380&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=62642&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Fnews%2F2017%2F1108%2F88385.shtml&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 06 Mar 2023 07:05:16 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=3ABBBBFD944FEAAE; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=1634695200&si=09a7b5e821ba0c7841e240d5bfe840c4&v=1.3.0&lv=1&sn=62642&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Fnews%2F2017%2F1108%2F88385.shtml&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=1634695200&si=09a7b5e821ba0c7841e240d5bfe840c4&v=1.3.0&lv=1&sn=62642&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Fnews%2F2017%2F1108%2F88385.shtml&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=1634695200&si=09a7b5e821ba0c7841e240d5bfe840c4&v=1.3.0&lv=1&sn=62642&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Fnews%2F2017%2F1108%2F88385.shtml&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 06 Mar 2023 07:05:16 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=2B960F23F06EEBD6; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
www.ppmv101.xyz/static/images/1.gif
202.95.22.196200 OK 254 B URL HTTP/2 www.ppmv101.xyz/static/images/1.gif
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /static/images/1.gif HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: image/gif
content-length: 254
last-modified: Sun, 05 Mar 2023 07:45:33 GMT
etag: "6404489d-fe"
expires: Wed, 05 Apr 2023 07:05:16 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/h30ojtlz0tu.jpg
104.22.12.214200 OK 11 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/h30ojtlz0tu.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 0b784a27d39f5df81e39a68133d4eeee
5b5cb862de63ad356db539a299ca5a4bd1bad54b
700bd8dd8de6c6f2c49b54a30372bf9254cc4ecfbacd5427237905e07df3ecb6
GET /upload/vod/2023/02/h30ojtlz0tu.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:17 GMT
content-type: image/jpeg
content-length: 10712
last-modified: Wed, 15 Feb 2023 11:23:02 GMT
etag: "63ecc096-29d8"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a38bfd7f8f30b39-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/02/jri3kigvvqp.jpg
104.22.12.214200 OK 8.5 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/02/jri3kigvvqp.jpg
IP 104.22.12.214:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash c5b161a46cca56e04b0c7de400d57d5c
1391df0d281bc1173730d34e52c9ae4b541d2620
c08d63e5b8c19c1a360bee781e67801c6a229296006b9ae31c7c2b60f02d26d5
GET /upload/vod/2023/02/jri3kigvvqp.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:17 GMT
content-type: image/jpeg
content-length: 8478
last-modified: Wed, 15 Feb 2023 11:23:23 GMT
etag: "63ecc0ab-211e"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a38bfd7f8f80b39-OSL
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/top.js?adv=0.1398040561476086
202.95.22.196200 OK 588 B URL HTTP/2 www.ppmv101.xyz/js/top.js?adv=0.1398040561476086
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document, Unicode text, UTF-8 text
Hash add2d43fff1c9780af62656ec0de51f9
64adda4327ef9df8a60df4e760c19089370dc028
eb83c04e1e660929de5d79020e70557b8bb2e7783d100e72faa7ce2e3aff45e6
GET /js/top.js?adv=0.1398040561476086 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:17 GMT
content-type: application/javascript
content-length: 588
last-modified: Sat, 31 Dec 2022 06:13:26 GMT
etag: "63afd306-24c"
expires: Mon, 06 Mar 2023 19:05:17 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 54433e3eb06b744fe6eaa02043a8a976
8f02ecec1067738827ae4ca835ed35a58ea3482a
acd995c51494c7ebd9f5b2a1e863c9e4fc5c7287ebab20449459a134dda26fb2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 03 Mar 2023 15:30:32 GMT
Expires: Fri, 10 Mar 2023 15:30:31 GMT
Etag: "8f02ecec1067738827ae4ca835ed35a58ea3482a"
Cache-Control: max-age=375312,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a38bfe299880b39-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash e1fdc044a282851ed8f8b61872af0b4f
dff4b1a038102eb4f6f48f18985bf7bdf99d2ebe
ce1b81086610c6b7e18ac3b1c76a4cc0ac4b60459a3629693440adb362cbbc62
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 03 Mar 2023 15:05:12 GMT
Expires: Fri, 10 Mar 2023 15:05:11 GMT
Etag: "dff4b1a038102eb4f6f48f18985bf7bdf99d2ebe"
Cache-Control: max-age=373792,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a38bfe29a2d1c02-OSL
www.ppmv101.xyz/template/m1938pc/static/js/jquery.min.js
202.95.22.196200 OK 40 kB URL HTTP/2 www.ppmv101.xyz/template/m1938pc/static/js/jquery.min.js
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
Hash 08f78cab2c0dadc96d1c7c76ab8c7d21
986c814e943b6e1b417fb63fb402eef338341fdc
94dba4f7f2155604a282819931d3a1f5eec2ca336bd787cb0cad1ea3e85065be
GET /template/m1938pc/static/js/jquery.min.js HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: application/javascript
last-modified: Sat, 08 Jan 2022 14:07:34 GMT
vary: Accept-Encoding
etag: W/"61d99aa6-17b8b"
expires: Mon, 06 Mar 2023 19:05:16 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv101.xyz/template/m1938pc/css/ate.css
202.95.22.196200 OK 6.8 kB URL HTTP/2 www.ppmv101.xyz/template/m1938pc/css/ate.css
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
Hash 430921fcfc9664ac26ac6ff634d66c6f
96430f189dc4d8b0f8ee9042521e9330632e6d3b
53206481b71279dc4c78265ae9454392d34201dbe756df1c6117fcf3c0904f78
GET /template/m1938pc/css/ate.css HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: text/css
last-modified: Tue, 04 Jan 2022 15:13:26 GMT
vary: Accept-Encoding
etag: W/"61d46416-126e4"
expires: Mon, 06 Mar 2023 19:05:16 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
587tuchuang.com/587z80.gif
23.224.37.42200 OK 882 B URL HTTP/1.1 587tuchuang.com/587z80.gif
IP 23.224.37.42:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (882), with no line terminators
Hash 37d554523d7999cdc89de921f44f0715
0d5d7656c830ddb9817e0b6b1c3a0462f81e5e0b
fcd7ae20042d30cd2fc7475261cef34f5a00a43f8ba06b1a33bb4c3412cdd318
GET /587z80.gif HTTP/1.1
Host: 587tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 882
Pragma: no-cache
Cache-control: no-store
sv1.stor.petaexpress.com/dfegfegeg/1.jpg
199.180.101.114200 OK 14 kB URL HTTP/1.1 sv1.stor.petaexpress.com/dfegfegeg/1.jpg
IP 199.180.101.114:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 650x96, components 3\012- data
Hash db2dbdc216703ec86bc6d75d652e7007
a2610252e80c359f3026f6bf3b744c23c3d4cb98
48dc2e5f86c223bdcfdf820eeb1ddef2840c9789dabd79ef2cf8bd67b0f22eb8
GET /dfegfegeg/1.jpg HTTP/1.1
Host: sv1.stor.petaexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Mar 2023 07:05:18 GMT
Content-Type: image/jpeg
Content-Length: 14485
Connection: keep-alive
Accept-Ranges: bytes
Etag: "db2dbdc216703ec86bc6d75d652e7007"
Last-Modified: Fri, 23 Dec 2022 09:12:12 GMT
x-qs-request-id: a8cf7c67b551ab4a
x-qs-storage-class: STANDARD
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 7d8bc7c43f5309b4fe3f385866b22bf3
4ee59aac29b686e1a838234d6f7c4f9722737cf6
f0d4cefada83631c1b48793e06210f4c5371597bad5553ef6d706ab0e35c629e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 06 Mar 2023 01:20:37 GMT
Expires: Mon, 13 Mar 2023 01:20:36 GMT
Etag: "4ee59aac29b686e1a838234d6f7c4f9722737cf6"
Cache-Control: max-age=583517,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a38bfe51c2b1c02-OSL
dvcasha2.ocsp-certum.com/
23.36.79.10200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.10:0
ASN #20940 Akamai International B.V.
Hash d380e10abeee8a48f0c886a2ed5cbd04
99cb1a99672b14a030694ac4d7749fa4682490b9
0dae9aa664994870355aa57b283b5bd13f2f2f7eb5323d4d59789505ae45da9f
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=881
Date: Mon, 06 Mar 2023 07:05:18 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
23.36.79.10200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.10:0
ASN #20940 Akamai International B.V.
Hash d380e10abeee8a48f0c886a2ed5cbd04
99cb1a99672b14a030694ac4d7749fa4682490b9
0dae9aa664994870355aa57b283b5bd13f2f2f7eb5323d4d59789505ae45da9f
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=848
Date: Mon, 06 Mar 2023 07:05:18 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
23.36.79.10200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.10:0
ASN #20940 Akamai International B.V.
Hash f5aab2b42f5fe18950659f515b3ba8de
048f6ddb720eca3047d50e1a8fe8a824b32c443d
cda38a9dc19b27f5db54ceb6f62d833518a018a3232e327919c231b3a3a3883d
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Mon, 06 Mar 2023 07:05:19 GMT
Connection: keep-alive
X-N: S
www.ppmv101.xyz/template/m1938pc/images/video-mask.png
202.95.22.196200 OK 107 B URL HTTP/2 www.ppmv101.xyz/template/m1938pc/images/video-mask.png
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced\012- data
Hash 6a5ee87ff75437cb480df839f36004fd
eac66370f99601cb7febef320c9540d4593cd856
c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa
GET /template/m1938pc/images/video-mask.png HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/png
content-length: 107
last-modified: Tue, 04 Jan 2022 15:14:24 GMT
etag: "61d46450-6b"
expires: Wed, 05 Apr 2023 07:05:19 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv101.xyz/template/m1938pc/images/video-play.png
202.95.22.196200 OK 1.6 kB URL HTTP/2 www.ppmv101.xyz/template/m1938pc/images/video-play.png
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/m1938pc/images/video-play.png HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/png
content-length: 1567
last-modified: Tue, 04 Jan 2022 15:14:22 GMT
etag: "61d4644e-61f"
expires: Wed, 05 Apr 2023 07:05:19 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 48b421a52cde3b8f2237b59bb86b6c00
b7ab8ffa515437fa7c15ab8b8c5dea2f1d89c66e
d36d0c9c05cd3efb8af2c9c47fb57753c1df97f85cb13f867746672d2a8fb527
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D36D0C9C05CD3EFB8AF2C9C47FB57753C1DF97F85CB13F867746672D2A8FB527"
Last-Modified: Sun, 05 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13249
Expires: Mon, 06 Mar 2023 10:46:08 GMT
Date: Mon, 06 Mar 2023 07:05:19 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bb4e654a1d9caf42c9410b362a8e106c
4694d0e9e3136ecb5fe5f349992974056e34785c
e9b01e8e32d8cf779564f9509fabb47958c128252401d829400e61bbd079482c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E9B01E8E32D8CF779564F9509FABB47958C128252401D829400E61BBD079482C"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7426
Expires: Mon, 06 Mar 2023 09:09:05 GMT
Date: Mon, 06 Mar 2023 07:05:19 GMT
Connection: keep-alive
www.ppmv101.xyz/js/250/2.js?adv=0.7825749216045125
202.95.22.196200 OK 532 B URL HTTP/2 www.ppmv101.xyz/js/250/2.js?adv=0.7825749216045125
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (382)
Hash 06b1ee73f663b814b7d1acd3b01ec79f
6b5bdadc6d66e9fdcb8b9b8dc5ea1a0deb4dbb56
854e5c909093d5ab6e0c91203af3ed6021d249b3d5e2eed417ef0b132ec694c3
GET /js/250/2.js?adv=0.7825749216045125 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: application/javascript
content-length: 532
last-modified: Thu, 16 Feb 2023 08:50:25 GMT
etag: "63edee51-214"
expires: Mon, 06 Mar 2023 19:05:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
683tuchuang.com/960x80.gif
45.136.119.121200 OK 97 kB URL HTTP/2 683tuchuang.com/960x80.gif
IP 45.136.119.121:0
File type GIF image data, version 89a, 960 x 80\012- data
Hash 7ef2a37263a1cbc9b7cf55c6f0d5ac67
c8bfc4c06c67fc0e5e9d53700d223dc8a356e771
12e406cd176aa01d744f324307d636b84de1ed6bae0d0c1a7ac9fb454768b41f
GET /960x80.gif HTTP/1.1
Host: 683tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/gif
content-length: 97435
last-modified: Sat, 04 Feb 2023 12:07:53 GMT
etag: "63de4a99-17c9b"
expires: Mon, 03 Apr 2023 16:16:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
server: cdn
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
8499483.com/8499/960x80.gif
162.209.128.163200 OK 367 kB URL HTTP/2 8499483.com/8499/960x80.gif
IP 162.209.128.163:0
File type GIF image data, version 89a, 960 x 80\012- data
Size 367 kB (366944 bytes)
Hash bde9cbff38e305f40a245a7cf87bd85a
4aaa627b0db260ac7f97a9223e93b1e2f35caba4
375eaceb954016306188bd02f6cc229f71c8e1ef337e99b6ec0a98fad9b3eb7e
GET /8499/960x80.gif HTTP/1.1
Host: 8499483.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:18 GMT
content-type: image/gif
content-length: 366944
last-modified: Sat, 24 Dec 2022 13:20:16 GMT
etag: "59960-5f092c35018ba"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/250/3.js?adv=0.008372410769738381
202.95.22.196200 OK 486 B URL HTTP/2 www.ppmv101.xyz/js/250/3.js?adv=0.008372410769738381
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (369)
Hash 4ce206cd22ea1ac05c3d229b392d2896
a8ca9dd8fb48bce78ccb44933d0c722401419fb3
c03b31145986256c54d4bcbfc2a0de7d1c5592b4ffb0517311bd0228ea4e39d9
GET /js/250/3.js?adv=0.008372410769738381 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: application/javascript
content-length: 486
last-modified: Sat, 19 Nov 2022 10:19:33 GMT
etag: "6378adb5-1e6"
expires: Mon, 06 Mar 2023 19:05:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
228tuchuang.com/960x80.gif
23.224.37.107200 OK 124 kB URL HTTP/2 228tuchuang.com/960x80.gif
IP 23.224.37.107:0
File type GIF image data, version 89a, 960 x 80\012- data
Size 124 kB (123970 bytes)
Hash 83735404f4ab51b1abaad368fe9563cb
49009970fdcebba47b2dfa21efe27724adb4a5de
d6e4e3d48c2872e139be81a41b2b1abe0bb552f2c60df118f723afb33245a216
GET /960x80.gif HTTP/1.1
Host: 228tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/gif
content-length: 123970
last-modified: Fri, 03 Mar 2023 06:49:37 GMT
etag: "64019881-1e442"
expires: Sun, 02 Apr 2023 06:53:05 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
server: cdn
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/xx1.js?adv=0.0822387367059143
202.95.22.196200 OK 146 kB URL HTTP/2 www.ppmv101.xyz/js/xx1.js?adv=0.0822387367059143
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
Size 146 kB (145933 bytes)
Hash 06a441aefdae891e9ed0631d5f9ac5da
f2103dcc5c8070c5ab5c93208edd25c5a1fc6cd1
14bbcc035e01e21af728e4b0d26b67458811d1c848d78b8ca1d77c3de1da3502
GET /js/xx1.js?adv=0.0822387367059143 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:17 GMT
content-type: application/javascript
last-modified: Sat, 04 Mar 2023 14:42:01 GMT
vary: Accept-Encoding
etag: W/"640358b9-ef6"
expires: Mon, 06 Mar 2023 19:05:17 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fe67282c950b89da768ff4b7c693d824
46cae88908ff47609b00c30284ec6099270e66fa
97be22db8beb23d91419e8b8799892a6c2c272e14a46c28ab9fc741786b83e6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "97BE22DB8BEB23D91419E8B8799892A6C2C272E14A46C28AB9FC741786B83E6A"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20293
Expires: Mon, 06 Mar 2023 12:43:32 GMT
Date: Mon, 06 Mar 2023 07:05:19 GMT
Connection: keep-alive
228tuchuang.com/200x200.gif
23.224.37.107200 OK 104 kB URL HTTP/2 228tuchuang.com/200x200.gif
IP 23.224.37.107:0
File type GIF image data, version 89a, 200 x 200\012- data
Size 104 kB (104271 bytes)
Hash 2f45e48916f1e750c83b98f9c8efad93
3ee9d1329036656e058168d2e23d4027edb6169d
3c2e307d9bdf786f1542a8b7508f107896ea3f1565d8f6ba9928f4d8c34cb3e7
GET /200x200.gif HTTP/1.1
Host: 228tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/gif
content-length: 104271
last-modified: Wed, 08 Feb 2023 11:35:35 GMT
etag: "63e38907-1974f"
expires: Sun, 02 Apr 2023 06:52:45 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
server: cdn
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash d25a89eadf77452f4c15f49747c23e76
a23799ac660aa0f531b859bcc5838ded6d3819c8
5d05aa3aa02cfe7b8da4c6e42bbc802808f790af8680d199a41747d0aad97538
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 10 Mar 2023 03:24:52 GMT
ETag: "a23799ac660aa0f531b859bcc5838ded6d3819c8"
Last-Modified: Mon, 06 Mar 2023 03:24:53 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 529
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a38bfec9e2d0b65-OSL
www.ppmv101.xyz/js/xx3.js?adv=0.984680007778387
202.95.22.196200 OK 360 B URL HTTP/2 www.ppmv101.xyz/js/xx3.js?adv=0.984680007778387
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 3e24852309978d1690e8c4809f989280
f590486d685ac8d4d2eba4f5fe1f3bf0beb723e7
a503f4a1ccd24a5e31dbfbbf18825476012481b775f1606f01275c0af15d1e58
GET /js/xx3.js?adv=0.984680007778387 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: application/javascript
content-length: 360
last-modified: Sat, 19 Nov 2022 10:18:53 GMT
etag: "6378ad8d-168"
expires: Mon, 06 Mar 2023 19:05:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv101.xyz/template/m1938pc/static/js/base1.js
202.95.22.196200 OK 610 kB URL HTTP/2 www.ppmv101.xyz/template/m1938pc/static/js/base1.js
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
Size 610 kB (610498 bytes)
Hash d43b418451eecf3955d55791a1e4d8a5
696eb2de5ff0ecf1a98b9cf95fda292e6f4f2804
2567dd1200434c7045c2b5dbbef70d2c05463f72c9eaa446ea4084f6e25bb444
GET /template/m1938pc/static/js/base1.js HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 07:21:11 GMT
vary: Accept-Encoding
etag: W/"63afe2e7-153a"
expires: Mon, 06 Mar 2023 19:05:16 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/250/4.js?adv=0.09748117591005645
202.95.22.196200 OK 486 B URL HTTP/2 www.ppmv101.xyz/js/250/4.js?adv=0.09748117591005645
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (369)
Hash 4ce206cd22ea1ac05c3d229b392d2896
a8ca9dd8fb48bce78ccb44933d0c722401419fb3
c03b31145986256c54d4bcbfc2a0de7d1c5592b4ffb0517311bd0228ea4e39d9
GET /js/250/4.js?adv=0.09748117591005645 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:20 GMT
content-type: application/javascript
content-length: 486
last-modified: Sat, 19 Nov 2022 10:19:41 GMT
etag: "6378adbd-1e6"
expires: Mon, 06 Mar 2023 19:05:20 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
taiwtp1.com/xin/96080.gif
220.128.218.220200 OK 122 kB URL HTTP/2 taiwtp1.com/xin/96080.gif
IP 220.128.218.220:0
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 960 x 80\012- data
Size 122 kB (122193 bytes)
Hash 4293cc73ff1bcc11cfb9a5582a08c8f5
a3307ecff7a2be9d0740c530d6325ff1ed355b8c
ee86f9a233f1b754a8c67ec8b9120f4c5b4df290396ca690d41d54e5b2d528b5
GET /xin/96080.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 06:57:59 GMT
content-type: image/gif
content-length: 122193
last-modified: Thu, 20 Oct 2022 07:11:02 GMT
etag: "6350f486-1dd51"
expires: Wed, 05 Apr 2023 06:57:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash 9659b301a393d24826817544986acacd
f2806e1a7cc99c86a5299e39a346613e3c4a5135
db004550ee09a33a713b13ea3425d69332e13d3530f199e6a2abd7b592bba417
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 10 Mar 2023 05:11:31 GMT
ETag: "f2806e1a7cc99c86a5299e39a346613e3c4a5135"
Last-Modified: Mon, 06 Mar 2023 05:11:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 85
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a38bfeed80b0b65-OSL
img.8578a.com/images/6403522ea35fc702b43a02bc.gif
3.36.126.81302 Found 245 kB URL HTTP/2 img.8578a.com/images/6403522ea35fc702b43a02bc.gif
IP 3.36.126.81:0
File type GIF image data, version 89a, 200 x 200\012- data
Size 245 kB (244592 bytes)
Hash bae765ef8d1c45e35d92e3ef35e71c98
b1a8d850499efcf4707d0852365ec9c2ff280834
e0d08b13005a3e792c079beba02913f33f564f1f688b6c8d611fd745fc4b8d98
GET /images/6403522ea35fc702b43a02bc.gif HTTP/1.1
Host: img.8578a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=600
location: https://image.uc.cn/s/wemedia/s/upload/2023/viuCFb1govsikf9/bae765ef8d1c45e35d92e3ef35e71c98.gif
X-Firefox-Spdy: h2
qp.ezfxpuo.cn/960X60.gif
218.66.171.122200 OK 245 kB IP 218.66.171.122:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 245 kB (244625 bytes)
Hash 8ea7a6d4406fc7d5d0c11e711a860b6b
5dfe851d968ba8bdd6c9aa331fe816505f1749f6
f1fb1cf1dc68a5b38cf47a0676d19a68a67a1fec63d97657be4a32b899cf0aaf
GET /960X60.gif HTTP/1.1
Host: qp.ezfxpuo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NgxFence
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/gif
content-length: 244625
x-oss-request-id: 63F9A9C29DB57833328C4EFC
etag: "8EA7A6D4406FC7D5D0C11E711A860B6B"
last-modified: Fri, 24 Feb 2023 05:36:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4303395622184053937
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
content-md5: jqem1EBvx9XQwR5xGoYLaw==
x-oss-server-time: 1
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/250/5.js?adv=0.7056013999086618
202.95.22.196200 OK 429 B URL HTTP/2 www.ppmv101.xyz/js/250/5.js?adv=0.7056013999086618
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (345)
Hash b091ecd1c842b0f03f7c9898274a3bf9
4cfd13aebfcf6101c639e255b252a4993056b2d6
5fc0828eaba80bdde4e6d053fbe4007fa3b5a3400e82e43f0e08033998fad7a4
GET /js/250/5.js?adv=0.7056013999086618 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:20 GMT
content-type: application/javascript
content-length: 429
last-modified: Sat, 19 Nov 2022 10:19:48 GMT
etag: "6378adc4-1ad"
expires: Mon, 06 Mar 2023 19:05:20 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
qp.ezfxpuo.cn/250x250.gif
218.66.171.122200 OK 149 kB URL HTTP/2 qp.ezfxpuo.cn/250x250.gif
IP 218.66.171.122:0
File type GIF image data, version 89a, 250 x 250\012- data
Size 149 kB (149379 bytes)
Hash 02fc042019e9d94fb61415cec55fff8f
a0e2d114dc337c053a4e7b4444bb62c69b777fc8
d74fc554c3fb7f74c0a39e3e4a5376a5cae960f90346d111e9523e5a5dcc49db
GET /250x250.gif HTTP/1.1
Host: qp.ezfxpuo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NgxFence
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/gif
content-length: 149379
x-oss-request-id: 63F9A9C2D14BBC3630111660
etag: "02FC042019E9D94FB61415CEC55FFF8F"
last-modified: Fri, 24 Feb 2023 05:35:55 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3681148036207638742
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
content-md5: AvwEIBnp2U+2FBXOxV//jw==
x-oss-server-time: 16
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0101c120009texk0w2379.gif?proc=autoorient
104.110.17.24200 OK 1 B URL HTTP/2 dimg04.c-ctrip.com/images/0101c120009texk0w2379.gif?proc=autoorient
IP 104.110.17.24:0
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /images/0101c120009texk0w2379.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 12 May 2015 01:00:00 GMT
content-type: text/plain; charset=utf-8
content-length: 1
access-control-allow-origin: *
cache-control: max-age=6468669
expires: Sat, 20 May 2023 03:56:29 GMT
date: Mon, 06 Mar 2023 07:05:20 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/250/6.js?adv=0.7442001340965865
202.95.22.196200 OK 454 B URL HTTP/2 www.ppmv101.xyz/js/250/6.js?adv=0.7442001340965865
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (366)
Hash fb969bfaceb99f1da30a8eeef7ef3f9c
d30202994b3fbd393bfa93cea12ddc7cf445ac0a
befa9bb57dc5ce8dce7d72153b95becb0b1408e127d7d4ccfe122da80928a2e6
GET /js/250/6.js?adv=0.7442001340965865 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:20 GMT
content-type: application/javascript
content-length: 454
last-modified: Sat, 19 Nov 2022 10:19:55 GMT
etag: "6378adcb-1c6"
expires: Mon, 06 Mar 2023 19:05:20 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
xinchacha2dv.ocsp-certum.com/
23.36.79.17200 OK 1.5 kB URL HTTP/1.1 xinchacha2dv.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash d790743e3f043c9941b4b84d47e62bd7
be053e980108520e68c82f1ccf3fea80e5648085
61ddfd6ee3cdfe12d945211fe153a7ee6e1e80e1eb6c966061ef6bd10b018ca6
POST / HTTP/1.1
Host: xinchacha2dv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1538
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=509
Date: Mon, 06 Mar 2023 07:05:21 GMT
Connection: keep-alive
X-N: S
www.ppmv101.xyz/js/xx4.js?adv=0.45706844344332587
202.95.22.196200 OK 916 B URL HTTP/2 www.ppmv101.xyz/js/xx4.js?adv=0.45706844344332587
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash bd5e3af6c592753239f355e60ce2f3ef
6ace16da2fe5b94a940410f05e2152e09a5b3e3a
b5e6dd7d88f403621cff37dfd07e02a503e07bf6e77120afe138923e9f066c97
GET /js/xx4.js?adv=0.45706844344332587 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:21 GMT
content-type: application/javascript
content-length: 916
last-modified: Sat, 19 Nov 2022 10:23:56 GMT
etag: "6378aebc-394"
expires: Mon, 06 Mar 2023 19:05:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/piaofu.js?adv=0.5397736541976275
202.95.22.196200 OK 230 kB URL HTTP/2 www.ppmv101.xyz/js/piaofu.js?adv=0.5397736541976275
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
Size 230 kB (230476 bytes)
Hash 9717cfde8453e75448593021da7839f6
59167e46a7875d140ed749a5c8b3d73714602d65
48f4826a2772935a8abfc389475ad07fd6a2e5b2c6c35bec284de52afc39cb57
GET /js/piaofu.js?adv=0.5397736541976275 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:21 GMT
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 06:46:05 GMT
vary: Accept-Encoding
etag: W/"63ce2d2d-15a4"
expires: Mon, 06 Mar 2023 19:05:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 104.18.21.226:0
Hash c975a17ec101c9fce4c9186b2b1ff41e
2e57358dcf5a0b3da28618f57f2378cb81aa7733
723b411e586217ff95fcbd4f5a039a1b22235ebfdcf54ac2596ba1c7ed92cbf4
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:21 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "C83439A10DAC56F4516F2352563C71604D815251"
Expires: Mon, 06 Mar 2023 18:00:00 GMT
Last-Modified: Mon, 06 Mar 2023 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2946
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a38bff68e07b50b-OSL
pure-stone.vip/mdt/gf.gif
43.154.237.220200 OK 190 kB URL HTTP/1.1 pure-stone.vip/mdt/gf.gif
IP 43.154.237.220:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 750 x 120\012- data
Size 190 kB (189611 bytes)
Hash 061139d697c723793b2628fcb479bcf3
7c12fc3440fbadeaa00ce718bf6250fa54ba464c
c30daab324f66e0983dc9c6882b3c2ed6f847e128b2cb3e48ff28d82e992eb3f
GET /mdt/gf.gif HTTP/1.1
Host: pure-stone.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:20 GMT
Content-Type: image/gif
Content-Length: 189611
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 06:20:48 GMT
ETag: "63d4bec0-2e4ab"
Expires: Wed, 05 Apr 2023 06:55:50 GMT
Cache-Control: max-age=2592000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
www.ppmv101.xyz/ads/piaofu.js?adv=0.0839416179630772
202.95.22.196404 Not Found 146 B URL HTTP/2 www.ppmv101.xyz/ads/piaofu.js?adv=0.0839416179630772
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /ads/piaofu.js?adv=0.0839416179630772 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 06 Mar 2023 07:05:21 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash c07cdd99c6fb0b992f73f42a6f06500a
e0397dfd65d47e8fc5ffdad1b44f47681c6977c0
a2f01757319af04e97480836de229ef131962b7a990cd0a94da12ad14360d04b
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 10 Mar 2023 06:30:09 GMT
ETag: "e0397dfd65d47e8fc5ffdad1b44f47681c6977c0"
Last-Modified: Mon, 06 Mar 2023 06:30:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1284
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a38bff95b680b65-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash c07cdd99c6fb0b992f73f42a6f06500a
e0397dfd65d47e8fc5ffdad1b44f47681c6977c0
a2f01757319af04e97480836de229ef131962b7a990cd0a94da12ad14360d04b
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 10 Mar 2023 06:30:09 GMT
ETag: "e0397dfd65d47e8fc5ffdad1b44f47681c6977c0"
Last-Modified: Mon, 06 Mar 2023 06:30:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1284
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a38bff96a2b0afa-OSL
www.ppmv101.xyz/js/tongji.js?adv=0.1351803196750785
202.95.22.196200 OK 254 B URL HTTP/2 www.ppmv101.xyz/js/tongji.js?adv=0.1351803196750785
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
Hash 33bfe88fe108264906550fc71fee999b
ffcdd93706a63369148ac4df56096976d2540d5c
9d2d61329c0baa529f4d56116bf456f787f01d0194ff9c711afb6280a739562e
GET /js/tongji.js?adv=0.1351803196750785 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:22 GMT
content-type: application/javascript
content-length: 254
last-modified: Sun, 01 Jan 2023 09:06:32 GMT
etag: "63b14d18-fe"
expires: Mon, 06 Mar 2023 19:05:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.1611a.com/images/6403517aa35fc702b43a02bb.gif
3.36.126.81302 Found 187 kB URL HTTP/2 img.1611a.com/images/6403517aa35fc702b43a02bb.gif
IP 3.36.126.81:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 187 kB (186826 bytes)
Hash 8c4c80ba990fdfb812bd64fb62d487a5
e89cc2b30fcbc2075f0a2a30b4ce8630912a7790
26dcbf4abd4e16c6e9cc128812b6046bf540df5027fc181b92cd6412f938d257
GET /images/6403517aa35fc702b43a02bb.gif HTTP/1.1
Host: img.1611a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=600
location: https://zzpic-1255305554.cos.ap-beijing.myqcloud.com/zhuanzh/3b6e1a96-f4b7-49f8-8da8-b5375aea7ea9.png
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?6391490fe039c3b8b30b2a81c74234a1
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?6391490fe039c3b8b30b2a81c74234a1
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash bf9ad678f4e41b1ed9e02e1119bc9055
82f417add570034e42ea4746066794bed37c6432
16ad8673b70afade1fb2e28a057e931d94ec62b9993142beb3aa0123016f1507
GET /hm.js?6391490fe039c3b8b30b2a81c74234a1 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Mon, 06 Mar 2023 07:05:22 GMT
Etag: b9d801b4570f81f1b63623fb2511a870
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=1A0E768E018E9F61; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.digicert.cn/
47.246.44.205200 OK 471 B IP 47.246.44.205:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash bce1f4840f6dc22aae8b7fb443b4c742
272540590e2ed8f2dc9c9bae1ce567c19f9bc56c
8c329bbbae843150e944a2377a44283ab04f166b98c969a5f1104ca81485b154
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Mon, 06 Mar 2023 07:05:22 GMT
Last-Modified: Mon, 06 Mar 2023 00:18:51 GMT
ETag: "6405316b-1d7"
Expires: Wed, 08 Mar 2023 00:18:51 GMT
Cache-Control: max-age=148409
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1678086322
Via: cache19.l2de2[275,274,200-0,M], cache19.l2de2[275,0], cache3.se1[298,298,200-0,M], cache3.se1[299,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Mar 2023 07:05:22 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9716780863222107304e
hm.baidu.com/hm.js?889fe9c05f7b0f2db8ba49f0651b6f40
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?889fe9c05f7b0f2db8ba49f0651b6f40
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash 4f615022e1b8ccc966f9c5479dd9ac39
8eb7a00f423c76c1edabda009bf555d9aff2ccbd
9049faf67c879c68b13672e8cc1631fd3b427b4e3b8fa9a3e56060eb52700453
GET /hm.js?889fe9c05f7b0f2db8ba49f0651b6f40 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Mon, 06 Mar 2023 07:05:22 GMT
Etag: 4dbe8fb08254d6f751b7046e7ca1c2c9
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=88FF58E286CDABB4; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 86ed1ed21ac9a2f0da475cabf707da95
f8ed1e7c5e4f204caff47753f8e11bf7d8241780
b7ebdade75c0e6ea3ded015064af4c5f782e6a3f36b4169e69008a2e299d5adc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:22 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 03 Mar 2023 12:48:10 GMT
Expires: Fri, 10 Mar 2023 12:48:09 GMT
Etag: "f8ed1e7c5e4f204caff47753f8e11bf7d8241780"
Cache-Control: max-age=365566,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a38bffb090d1c02-OSL
ocsp.digicert.com/
192.229.221.95200 OK 727 B IP 192.229.221.95:0
Hash 3f2097040ce4f8de13321dcc62537cbf
22c1762de2e68639e2c7d5a74dd3798b9ee6ecea
f15aba7e8e5363f83f8bae11d0ff033dacf50fc1f0daa337a32c63b631e4f7f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 149199
Cache-Control: max-age=170891
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 07:05:22 GMT
Etag: "6403426f-2d7"
Expires: Wed, 08 Mar 2023 06:33:33 GMT
Last-Modified: Sat, 04 Mar 2023 13:06:55 GMT
Server: ECAcc (amb/6B53)
X-Cache: HIT
Content-Length: 727
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=2016881991&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.apippmv11.com%2F&v=1.3.0&lv=1&sn=62648&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv101.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
103.235.46.191500 Internal Server Error 0 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=2016881991&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.apippmv11.com%2F&v=1.3.0&lv=1&sn=62648&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv101.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=892&et=0&ja=0&ln=en-us&lo=0&rnd=2016881991&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.apippmv11.com%2F&v=1.3.0&lv=1&sn=62648&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv101.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 500 Internal Server Error
Server: bfe
Strict-Transport-Security: max-age=172800
Date: Mon, 06 Mar 2023 07:05:22 GMT
Content-Length: 0
Content-Type: text/plain; charset=utf-8
ldbbs.ldmnq.com/bbs/topic/attachment/2023-2/2630412e-3c71-4a31-8846-32d5ecda576e.gif
120.52.95.234200 OK 0 B URL HTTP/1.1 ldbbs.ldmnq.com/bbs/topic/attachment/2023-2/2630412e-3c71-4a31-8846-32d5ecda576e.gif
IP 120.52.95.234:0
ASN #133119 China Unicom IP network
GET /bbs/topic/attachment/2023-2/2630412e-3c71-4a31-8846-32d5ecda576e.gif HTTP/1.1
Host: ldbbs.ldmnq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Mar 2023 07:05:21 GMT
Content-Type: image/gif
Content-Length: 1786429
Connection: keep-alive
Server: openresty
x-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc
CloudServiceDiscount: CDN
x-amz-request-id: 0000018658DFE05998184AC92C008378
ETag: "fcbc5d6e0969ae8de8d6fe252ede020d"
Last-Modified: Thu, 16 Feb 2023 06:18:29 GMT
Content-Encoding: utf-8
x-amz-storage-class: STANDARD_IA
x-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCS8c+l8j3GDfR9PFG0TVBhEHS3eleoD2
via: CHN-HElangfang-AREACUCC1-CACHE31[7],CHN-HElangfang-AREACUCC1-CACHE6[0,TCP_HIT,4],CHN-TJ-GLOBAL1-CACHE117[6],CHN-TJ-GLOBAL1-CACHE100[0,TCP_HIT,5]
x-hcs-proxy-type: 1
X-CCDN-CacheTTL: 2592000
nginx-hit: 1
Age: 1556292
Accept-Ranges: bytes
link.imgapp.top/images/63ba73b1a92cd2097e833f9d.gif
3.36.126.81302 Found 0 B URL HTTP/2 link.imgapp.top/images/63ba73b1a92cd2097e833f9d.gif
IP 3.36.126.81:0
GET /images/63ba73b1a92cd2097e833f9d.gif HTTP/1.1
Host: link.imgapp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=600
location: https://zzpic-1255305554.cos.ap-beijing.myqcloud.com/zhuanzh/69f20b1e-e30c-4f5e-b708-a03606c340fc.png
X-Firefox-Spdy: h2
www.ppmv101.xyz/template/m1938pc/static/js/jquery.lazyload.min.js
202.95.22.196200 OK 0 B URL HTTP/2 www.ppmv101.xyz/template/m1938pc/static/js/jquery.lazyload.min.js
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
GET /template/m1938pc/static/js/jquery.lazyload.min.js HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: application/javascript
last-modified: Sat, 08 Jan 2022 14:08:24 GMT
vary: Accept-Encoding
etag: W/"61d99ad8-d35"
expires: Mon, 06 Mar 2023 19:05:16 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/250/1.js?adv=0.4240944866887246
202.95.22.196200 OK 0 B URL HTTP/2 www.ppmv101.xyz/js/250/1.js?adv=0.4240944866887246
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
GET /js/250/1.js?adv=0.4240944866887246 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: application/javascript
last-modified: Tue, 28 Feb 2023 11:48:32 GMT
vary: Accept-Encoding
etag: W/"63fdea10-415"
expires: Mon, 06 Mar 2023 19:05:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
fadacaitp.com/68-220-120.gif
20.187.110.174200 OK 0 B URL HTTP/2 fadacaitp.com/68-220-120.gif
IP 20.187.110.174:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /68-220-120.gif HTTP/1.1
Host: fadacaitp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/gif
vary: Accept-Encoding
last-modified: Sun, 25 Dec 2022 07:30:28 GMT
etag: W/"63a7fc14-42001"
expires: Tue, 04 Apr 2023 15:26:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
server: WAF/2.4-12.1
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv101.xyz/template/m1938pc/css/zui.css
202.95.22.196200 OK 0 B URL HTTP/2 www.ppmv101.xyz/template/m1938pc/css/zui.css
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
GET /template/m1938pc/css/zui.css HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:16 GMT
content-type: text/css
last-modified: Sun, 13 Nov 2022 12:08:14 GMT
vary: Accept-Encoding
etag: W/"6370de2e-15b6c"
expires: Mon, 06 Mar 2023 19:05:16 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
si1.go2yd.com/get-image/0xmAGT9KS9C
58.254.180.65200 OK 0 B URL HTTP/2 si1.go2yd.com/get-image/0xmAGT9KS9C
IP 58.254.180.65:0
ASN #136958 China Unicom Guangdong IP network
GET /get-image/0xmAGT9KS9C HTTP/1.1
Host: si1.go2yd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Mon, 06 Mar 2023 07:05:22 GMT
content-type: image/gif
content-length: 117593
last-modified: Thu, 10 Feb 2022 15:30:06 GMT
etag: "c4caa37b717580e8594587f32ca86470"
age: 340416
accept-ranges: bytes
x-application-context: application
x-kss-request-id: f130ut80n4hobs7go5ib5np8lk0gkchq
content-md5: xMqje3F1gOhZRYfzLKhkcA==
timing-allow-origin: *
ohc-global-saved-time: Tue, 28 Feb 2023 09:17:27 GMT
ohc-cache-hit: gz3un59 [2], suzix111 [2]
ohc-file-size: 117593
x-cache-status: HIT
X-Firefox-Spdy: h2
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
123.6.111.114200 OK 0 B URL HTTP/2 p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
IP 123.6.111.114:0
ASN #4837 CHINA UNICOM China169 Backbone
GET /img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image HTTP/1.1
Host: p26.toutiaoimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:22 GMT
content-type: image/gif
content-length: 677521
server: openresty
imagex-fmt: gif2gif
last-modified: Thu, 30 Dec 2021 00:07:35 GMT
nw-session-id: 2021123008073501015013614530ADE9B0dprsv01tt
nw-session-trace: 2021-12-30T08:07:35.194015393+08:00 68
x-bdcdn-cache-status: TCP_HIT
x-length: 677521
x-powered-by: ImageX
x-response-date: Thu, 30 Dec 2021 08:07:35 GMT
x-response-lb: image
x-tt-logid: 2021123008073501015013614530ADE9B0
server-timing: cdn-cache;desc=HIT, edge;dur=18
x-tt-trace-host: 016a2077e03b2041825c42669e9a23cec5ee04519515486308eb42b81315658df6aa5ed29ad219c7d25626d5b022cced5274c18183adcd43889f65e87a17fde2315b0226a7e5f07d4c19094125051b3e74699be800dd629619bc2141d5fb81fc89ccc76230d7d3e4f731a9d881f3cb16c4
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
via: CHN-HAzhengzhou-AREACUCC3-CACHE21[18],CHN-HAzhengzhou-AREACUCC3-CACHE35[0,TCP_HIT,1],CHN-TJ-GLOBAL1-CACHE97[17],CHN-TJ-GLOBAL1-CACHE35[0,TCP_HIT,11]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 31536000
nginx-hit: 1
age: 26000190
cache-control: max-age=31536000
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2
n0533.com/a845fd01fd044e12bc5acd4c45dcefeb.gif
107.167.16.2200 OK 0 B URL HTTP/2 n0533.com/a845fd01fd044e12bc5acd4c45dcefeb.gif
IP 107.167.16.2:0
GET /a845fd01fd044e12bc5acd4c45dcefeb.gif HTTP/1.1
Host: n0533.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 07:05:19 GMT
content-type: image/gif
vary: Accept-Encoding
last-modified: Thu, 23 Feb 2023 08:29:20 GMT
etag: W/"63f723e0-5a818"
server: WAF/2.4-12.1
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv101.xyz/js/250.js?adv=0.5973495183325136
202.95.22.196200 OK 0 B URL HTTP/2 www.ppmv101.xyz/js/250.js?adv=0.5973495183325136
IP 202.95.22.196:0
ASN #64050 BGPNET Global ASN
GET /js/250.js?adv=0.5973495183325136 HTTP/1.1
Host: www.ppmv101.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 07:05:18 GMT
content-type: application/javascript
last-modified: Sat, 04 Mar 2023 14:41:37 GMT
vary: Accept-Encoding
etag: W/"640358a1-e3b"
expires: Mon, 06 Mar 2023 19:05:18 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
661aaa.us/7ab13ae93f314a7884e4e115f3a77088.gif
45.61.212.227200 OK 0 B URL HTTP/1.1 661aaa.us/7ab13ae93f314a7884e4e115f3a77088.gif
IP 45.61.212.227:0
GET /7ab13ae93f314a7884e4e115f3a77088.gif HTTP/1.1
Host: 661aaa.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv101.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63f72bcb-767a7"
Date: Thu, 23 Feb 2023 09:07:35 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Thu, 23 Feb 2023 09:03:07 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-27
Content-Length: 485287