keepitneel.com/category/music/cmj
104.166.95.210301 Moved Permanently 0 B URL HTTP/1.1 keepitneel.com/category/music/cmj
IP 104.166.95.210:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /category/music/cmj HTTP/1.1
Host: keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 17 Jan 2023 04:05:23 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.keepitneel.com/category/music/cmj
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2844
Expires: Tue, 17 Jan 2023 04:52:47 GMT
Date: Tue, 17 Jan 2023 04:05:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bb0c8d0984a1f09a012961a54cda03c6
1a8ad450a0241554ee4fc7d02fac7b83529e60f6
eee3ca879a67cc25ea89cb83de9521eea1b82845705c3e82169d4787ecb7dd3a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE3CA879A67CC25EA89CB83DE9521EEA1B82845705C3E82169D4787ECB7DD3A"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6066
Expires: Tue, 17 Jan 2023 05:46:29 GMT
Date: Tue, 17 Jan 2023 04:05:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 17 Jan 2023 03:42:15 GMT
content-type: application/json
age: 1388
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d6e2abd68203014e8e24d4a9e20e980a
5edbbb1a36083d5077b90b82e7aa10049e90c5d6
88cf8dae194a5e92a8c36a4c54ae71a609eaaed6e99d3986b3834c40d2fceeaa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88CF8DAE194A5E92A8C36A4C54AE71A609EAAED6E99D3986B3834C40D2FCEEAA"
Last-Modified: Sun, 15 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4557
Expires: Tue, 17 Jan 2023 05:21:20 GMT
Date: Tue, 17 Jan 2023 04:05:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: iijivU49/XYmrXYRxYSG2jtTedXVDjbJ2DUp53O0qSE/cQa1SiWT4sjVSii9WspPu3u322Kal4Q=
x-amz-request-id: 46PK7NFEKZ3TC6JG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 17 Jan 2023 03:44:51 GMT
age: 1232
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:23 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 17 Jan 2023 03:33:47 GMT
age: 1896
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.keepitneel.com/category/music/cmj
104.166.95.210200 OK 553 B URL HTTP/1.1 www.keepitneel.com/category/music/cmj
IP 104.166.95.210:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (756), with CRLF line terminators
Hash 101c85ba540d626df55e2946878e245c
79f8d81efcc5c70bf0835055c00973a9613ca1a8
411cda3003338c65748be5df651a04574e2ea92565c8083e15c2fffb2eec4d4b
GET /category/music/cmj HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d03545e1fc5a8876441094039811aac5
99fcc840f3516298625c528e9b408132f7fcbb9c
166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1246
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 04:05:24 GMT
Last-Modified: Tue, 17 Jan 2023 03:44:38 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.keepitneel.com/common.js
104.166.95.210200 OK 693 B URL HTTP/1.1 www.keepitneel.com/common.js
IP 104.166.95.210:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (443), with CRLF line terminators
Hash 83a4efa0eb73ebd984942bc2e1f25a61
963c721680ab66879d1332c6d769100573036bec
3233cb151eb3ad7b782c3452c955e6f857e6ca219eeb42371298d536eb5f5acc
GET /common.js HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/category/music/cmj
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:24 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.keepitneel.com/tj.js
104.166.95.210200 OK 260 B IP 104.166.95.210:0
File type ASCII text, with CRLF line terminators
Hash 33b3088d44546517b50f97c50b3a32c7
41280cea921da33bdfb899d2d38dc7d89dd36756
21bde1b508ba154e31b38a7ab1207f54592dd5aa81fb88472aa895d8a4051ea9
GET /tj.js HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/category/music/cmj
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:24 GMT
Content-Type: application/x-javascript
Content-Length: 260
Connection: keep-alive
push.services.mozilla.com/
52.88.218.181101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.88.218.181:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mq6N2C7iEzIPXWCuTEvRYg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MjUEow+fv57Owsfblti4koeqFaI=
www.keepitneel.com/favicon.ico
104.166.95.210200 OK 1.2 kB URL HTTP/1.1 www.keepitneel.com/favicon.ico
IP 104.166.95.210:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/category/music/cmj
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:24 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sun, 22 Jan 2023 04:05:24 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
api.xpgys11.xyz/news/index.php
107.164.49.68200 OK 47 B URL HTTP/1.1 api.xpgys11.xyz/news/index.php
IP 107.164.49.68:0
File type HTML document, ASCII text, with no line terminators
Hash fc85f8ae73e9115d7d0db8bdb3049f87
ea85207ece10f485dfafc746433640e1a00a2465
06e8aab0f94e607266dfee3aa62468025bd845498f0912b9dd9b87a0832f3569
GET /news/index.php HTTP/1.1
Host: api.xpgys11.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
api.xpgys11.xyz/news/api.php
107.164.49.68200 OK 237 B URL HTTP/1.1 api.xpgys11.xyz/news/api.php
IP 107.164.49.68:0
File type ISO-8859 text, with CRLF line terminators
Hash 0824c72f62b78828aaf6704e108d78bd
5a86d89a03a61ed35299df96872c3c078547e104
a54a46df7209ec09f84f8356dca1951bb21ed45c6914a9e4205746f09d05ed8f
GET /news/api.php HTTP/1.1
Host: api.xpgys11.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://api.xpgys11.xyz/news/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 8e6c40bb9e7a153c7cad9374b2605fba
d1f6352c97d767a598caa2f147e80a741afe66ac
a367baff431acfc33f3c2b799c91371f7d7f1d67003da0a166613827b22311f1
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 21 Jan 2023 02:03:58 GMT
ETag: "d1f6352c97d767a598caa2f147e80a741afe66ac"
Last-Modified: Tue, 17 Jan 2023 02:03:59 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1323
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36614f670b41-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10093
Expires: Tue, 17 Jan 2023 06:53:38 GMT
Date: Tue, 17 Jan 2023 04:05:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10093
Expires: Tue, 17 Jan 2023 06:53:38 GMT
Date: Tue, 17 Jan 2023 04:05:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10093
Expires: Tue, 17 Jan 2023 06:53:38 GMT
Date: Tue, 17 Jan 2023 04:05:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10093
Expires: Tue, 17 Jan 2023 06:53:38 GMT
Date: Tue, 17 Jan 2023 04:05:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10093
Expires: Tue, 17 Jan 2023 06:53:38 GMT
Date: Tue, 17 Jan 2023 04:05:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b86ae5-6ee8-42e7-bcb0-c54e39e4fbd6.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b86ae5-6ee8-42e7-bcb0-c54e39e4fbd6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8077a04cfa8a88823a83c3481fe33eb
534966ca691706e724af5a9891859e1ee3c10b78
b8df497111b6e7876f53bd2433d9a0c5153f8b84b1ccd91dc5eb9bfdbe4579aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b86ae5-6ee8-42e7-bcb0-c54e39e4fbd6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4736
x-amzn-requestid: 4f03413a-fd17-4b48-ba36-e1580ee5c19a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm-HLroAMFTMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f9-08fc93b860c346db68f4a83c;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: o5RDE78dy_8WnKnE3Mof3y7XIERvuO4VI2r6paywDMzjE8LdFqksfA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:56:26 GMT
age: 22139
etag: "534966ca691706e724af5a9891859e1ee3c10b78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4757d4fe-f057-41bb-b2e2-4ed4877c7af4.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4757d4fe-f057-41bb-b2e2-4ed4877c7af4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5d0a29e6fe3ce0fb4a9237dd5917778
6919dcbbcdcc241672358cc5733ef064180c928a
6d0d71c35e1ca331ee5f4794bc74747f7c38f2d46863d983377bef526f7ca356
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4757d4fe-f057-41bb-b2e2-4ed4877c7af4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7873
x-amzn-requestid: 8a2a267d-8062-4755-8b1d-1e715ee9c413
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: exco-GL0oAMF-uQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c3a7d2-567e30c7063b71217f8175fc;Sampled=0
x-amzn-remapped-date: Sun, 15 Jan 2023 07:14:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aoUE55XskHX9ihSEFJY9vIOTN6xuMDsTer_pUNRMRBE-r-3r34ozfQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 22:05:01 GMT
age: 21624
etag: "6919dcbbcdcc241672358cc5733ef064180c928a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a57f270-98a9-442f-9239-76f1b01be9ae.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a57f270-98a9-442f-9239-76f1b01be9ae.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11978fd8515619467879303c76a11092
178546ab6c6779129e49f2a7bd80560cf08fbf7c
3f4bd577a740e0b2fcfb38ba4edd72cef3d2a8da7b5949eef33b2c04d417dca8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a57f270-98a9-442f-9239-76f1b01be9ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9186
x-amzn-requestid: dcfb9d55-6741-4ac3-afb6-d6fcc316c305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tvYHw6oAMFnwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c32f-237ef8a2086f859b7b49b006;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jU1UPGJjz6GgxfBnK1alPLb4ltxnFyWU29tfI7DH6FERqQSggFZwrg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:56:51 GMT
age: 22114
etag: "178546ab6c6779129e49f2a7bd80560cf08fbf7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385b83d3-24b4-4a2f-b857-c5ad36c6c6f1.jpeg
34.120.237.76200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385b83d3-24b4-4a2f-b857-c5ad36c6c6f1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcaf94e244d0b492c26d4964836f4913
fde259440056930606a16b88e6d87e2edc420bd6
6cc207b89ceda6a27a0c9905a3284044984af07cdf5eb91a84b93bc56e414806
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385b83d3-24b4-4a2f-b857-c5ad36c6c6f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3027
x-amzn-requestid: 9599f603-0ef7-40c7-aa0e-699a82057dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tr0GvUoAMFfmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c318-3d11e6404c85fcb737852aaf;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: w9U7jKrDbganO37QtU-I_g8A9G3XEHtsj-z6s0UF419IdEj_Zw1-uw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
age: 22750
etag: "fde259440056930606a16b88e6d87e2edc420bd6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32b9b2c-d57e-40ba-bdaa-0cad85d59f33.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32b9b2c-d57e-40ba-bdaa-0cad85d59f33.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e29bab4151d6c143d3cf16e7a34b0390
38f5261653926d95074fa5550af5d77a25ebd74e
84bbdf1850d2d76ebb06c7a84446e4723e62a9d9b8e459ec6b833e5892ef66fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32b9b2c-d57e-40ba-bdaa-0cad85d59f33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8488
x-amzn-requestid: 5e260260-bd4b-44a5-919a-a6085a057c0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq1xkHSiIAMF9zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1033d-2e4e00dd43f10f0e0a3e0ac4;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:07:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jMMpXVZv5S99cInAAttvwEAoUcEDjzHChJMj1dJdVeQFOQEtX5C-cA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 00:27:28 GMT
age: 13077
etag: "38f5261653926d95074fa5550af5d77a25ebd74e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f4b6ad-4bfa-468c-ac97-628f5ed79b68.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f4b6ad-4bfa-468c-ac97-628f5ed79b68.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7558650f7e974b34a7b3cb0c3c3a310c
7adb15e8c38cb18b57a696f8c1f08c523e1137e4
3179a4c545337e9a32d4f1ab851a3ec30ee16b44014c127630e1efcbf77e0c29
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f4b6ad-4bfa-468c-ac97-628f5ed79b68.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10592
x-amzn-requestid: 7cb5c56a-324a-4eef-b2d0-63e151ae2920
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: etlLyEhToAMF34Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c21be4-7b48a8de0c2957dc329af0e0;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 03:05:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KCDUOpQql1yt1G1lUcx8RWsNPq4xot4R_8ddIZwvL-igHXTkEtdXAQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 07:45:13 GMT
age: 73212
etag: "7adb15e8c38cb18b57a696f8c1f08c523e1137e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.stabria.com/
185.227.255.126200 OK 525 B IP 185.227.255.126:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (768), with CRLF line terminators
Hash 72e0132f140a83a6e0cda3ff9d12e7ad
7445f2fb69afc0a4c2543f6c39787b6138bcd358
d0903b34f05daa2900dd2f863257a7e769a1bbeeb5eb3d765bc35883a3851d13
GET / HTTP/1.1
Host: www.stabria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://api.xpgys11.xyz/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.stabria.com/common.js
185.227.255.126200 OK 693 B URL HTTP/1.1 www.stabria.com/common.js
IP 185.227.255.126:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (443), with CRLF line terminators
Hash 83a4efa0eb73ebd984942bc2e1f25a61
963c721680ab66879d1332c6d769100573036bec
3233cb151eb3ad7b782c3452c955e6f857e6ca219eeb42371298d536eb5f5acc
GET /common.js HTTP/1.1
Host: www.stabria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.stabria.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.stabria.com/tj.js
185.227.255.126200 OK 260 B IP 185.227.255.126:0
File type ASCII text, with CRLF line terminators
Hash 33b3088d44546517b50f97c50b3a32c7
41280cea921da33bdfb899d2d38dc7d89dd36756
21bde1b508ba154e31b38a7ab1207f54592dd5aa81fb88472aa895d8a4051ea9
GET /tj.js HTTP/1.1
Host: www.stabria.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.stabria.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:26 GMT
Content-Type: application/x-javascript
Content-Length: 260
Connection: keep-alive
api.xpgys11.xyz/news/index.php
107.164.49.68200 OK 47 B URL HTTP/1.1 api.xpgys11.xyz/news/index.php
IP 107.164.49.68:0
File type HTML document, ASCII text, with no line terminators
Hash fc85f8ae73e9115d7d0db8bdb3049f87
ea85207ece10f485dfafc746433640e1a00a2465
06e8aab0f94e607266dfee3aa62468025bd845498f0912b9dd9b87a0832f3569
GET /news/index.php HTTP/1.1
Host: api.xpgys11.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.stabria.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
hm.baidu.com/hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (619)
Hash 2600d2180d2fba9eb6640133f09d3547
af88879a797c7b40ae129fcb30ff98741211dc8f
414be3817ef77c5cd006ecd27faf531d88957660fc40eee9ace72a6c4f09b167
GET /hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.keepitneel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Tue, 17 Jan 2023 04:05:25 GMT
Etag: 9445c9f9ccd6c64e66fa79467784e3c2
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=9F362BAF97CFF88D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
api.xpgys11.xyz/news/api.php
107.164.49.68200 OK 237 B URL HTTP/1.1 api.xpgys11.xyz/news/api.php
IP 107.164.49.68:0
File type ISO-8859 text, with CRLF line terminators
Hash 0824c72f62b78828aaf6704e108d78bd
5a86d89a03a61ed35299df96872c3c078547e104
a54a46df7209ec09f84f8356dca1951bb21ed45c6914a9e4205746f09d05ed8f
GET /news/api.php HTTP/1.1
Host: api.xpgys11.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://api.xpgys11.xyz/news/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 04:05:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
hm.baidu.com/hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (619)
Hash 41c60b88b390472db11d7c3d79529375
313d171cf26c3e03cbcfd3a7baea423a9671a977
4b25eed3426deacc2651ed9448e59c62a3d0634e667eb10de465f0323553419d
GET /hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.stabria.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: 9445c9f9ccd6c64e66fa79467784e3c2
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Tue, 17 Jan 2023 04:05:26 GMT
Etag: 93c4ebc94a647ad6cf33ceb88f51f317
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=9B2EFB31CD7E3290; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=451041115&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&v=1.3.0&lv=1&sn=33356&r=0&ww=1280&u=http%3A%2F%2Fwww.keepitneel.com%2Fcategory%2Fmusic%2Fcmj&tt=%E5%AE%89%E9%98%B3%E6%93%9E%E5%81%88%E5%BB%BA%E6%9D%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=451041115&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&v=1.3.0&lv=1&sn=33356&r=0&ww=1280&u=http%3A%2F%2Fwww.keepitneel.com%2Fcategory%2Fmusic%2Fcmj&tt=%E5%AE%89%E9%98%B3%E6%93%9E%E5%81%88%E5%BB%BA%E6%9D%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=451041115&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&v=1.3.0&lv=1&sn=33356&r=0&ww=1280&u=http%3A%2F%2Fwww.keepitneel.com%2Fcategory%2Fmusic%2Fcmj&tt=%E5%AE%89%E9%98%B3%E6%93%9E%E5%81%88%E5%BB%BA%E6%9D%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.keepitneel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 17 Jan 2023 04:05:26 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=4B98EA4CA7A79447; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1880812789&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=33357&r=0&ww=1268&u=http%3A%2F%2Fwww.stabria.com%2F&tt=%E8%AF%B8%E6%9A%A8%E9%A2%97%E5%85%B4%E8%B4%A7%E8%BF%90%E4%BB%A3%E7%90%86%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1880812789&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=33357&r=0&ww=1268&u=http%3A%2F%2Fwww.stabria.com%2F&tt=%E8%AF%B8%E6%9A%A8%E9%A2%97%E5%85%B4%E8%B4%A7%E8%BF%90%E4%BB%A3%E7%90%86%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1880812789&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=33357&r=0&ww=1268&u=http%3A%2F%2Fwww.stabria.com%2F&tt=%E8%AF%B8%E6%9A%A8%E9%A2%97%E5%85%B4%E8%B4%A7%E8%BF%90%E4%BB%A3%E7%90%86%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.stabria.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 17 Jan 2023 04:05:26 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=460ECC10E16FE164; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
www.cqcq9.com/template/default/images/style.css
172.86.83.250200 OK 4.0 kB URL HTTP/1.1 www.cqcq9.com/template/default/images/style.css
IP 172.86.83.250:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1249), with CRLF line terminators
Hash 453b536cbbbf880c1058af5ebb8d0e08
ffd0649371f7920ffbfa6f61702af4bdccc83607
b00480343fb550d2336c0ab7f182182725ba5a329e83ffec91c34b0121bde3f5
GET /template/default/images/style.css HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 03 Sep 2022 12:11:53 GMT
Accept-Ranges: bytes
ETag: "80a615a8ebfd81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 4032
www.cqcq9.com/ggvip/dh.js
172.86.83.250200 OK 128 B URL HTTP/1.1 www.cqcq9.com/ggvip/dh.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with no line terminators
Hash 15179ef7a51cf01bcfa62c26f053ba03
83fccea4f10371803de0d124be613daf0b6ca21d
5712dc8eb13199d4b1673a8f74bf281a29ae342ce3a804e69357f807695ae2d8
GET /ggvip/dh.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:57:47 GMT
Accept-Ranges: bytes
ETag: "73daa8534c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 128
www.cqcq9.com/ggvip/shang.js
172.86.83.250200 OK 127 B URL HTTP/1.1 www.cqcq9.com/ggvip/shang.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with no line terminators
Hash 37c556ac04a5f5cadb6c241a4ae8d33c
fd2005426212abc958bb547db1b4431ec248d8d1
02c7ae6783a11b627a1786042c000cc1543fa14d4f444fb1c5d71eb026bd0526
GET /ggvip/shang.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:58:59 GMT
Accept-Ranges: bytes
ETag: "8930803034c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 127
www.cqcq9.com/ggvip/zhong.js
172.86.83.250200 OK 258 B URL HTTP/1.1 www.cqcq9.com/ggvip/zhong.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with CRLF line terminators
Hash b98e12c63a82568ac37c45acfbbf9b10
64ae7e8ab2297fa3975fb646c0afdeef98bee922
f672fceda5a1db2bf1c88201fe9a3cfde5527ab18621049a2ca1216297982631
GET /ggvip/zhong.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 08:00:36 GMT
Accept-Ranges: bytes
ETag: "9bb4a76a34c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 258
www.cqcq9.com/
172.86.83.250200 OK 20 kB IP 172.86.83.250:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (372), with CRLF line terminators
Hash 4a20820e84b0de1c4ced3843ffb89be5
7782e7a95bc6c63e5475408e78affa880d89b18d
6bf54a26f5595748d7011723c21cebedd939cd8ea4b17ca3cec588a1ae8a6bfe
GET / HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://api.xpgys11.xyz/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sun, 04 Sep 2022 16:30:34 GMT
Accept-Ranges: bytes
ETag: "85ef9fa87bc0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:24 GMT
Content-Length: 19843
www.cqcq9.com/ggvip/sp.js
172.86.83.250200 OK 127 B URL HTTP/1.1 www.cqcq9.com/ggvip/sp.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with no line terminators
Hash 077359a6f600f6603c9b05e5a692c692
78bb3067655fbacb12ad65102f03e0125011906d
1be76d46ec17d20873c26476027e7d73e20f564b9cc09d19e0a0838f23ed34b1
GET /ggvip/sp.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:59:09 GMT
Accept-Ranges: bytes
ETag: "a32bec3634c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 127
www.cqcq9.com/ggvip/xxx3.js
172.86.83.250200 OK 135 B URL HTTP/1.1 www.cqcq9.com/ggvip/xxx3.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 0b9733ec2d7643808987165f41fd2046
ec3b3bf6b9e881d1418b766b3af83df2020e6afb
9049eaa99c1e3161be8ab147b11e56e6fb4506da27fdc417520c45050e548348
GET /ggvip/xxx3.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:59:40 GMT
Accept-Ranges: bytes
ETag: "dcaffa4834c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 135
www.cqcq9.com/ggvip/dibu.js
172.86.83.250200 OK 951 B URL HTTP/1.1 www.cqcq9.com/ggvip/dibu.js
IP 172.86.83.250:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (554), with CRLF line terminators
Hash 2f0753de049179b2e3db89f74c1557a9
19c311b06e3f09f7c6b50361c40ea216bb9e632c
18bc9e82631df2723502f57e689dd73c2f7364f13277e56acade536c7e71d751
GET /ggvip/dibu.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sat, 17 Sep 2022 14:38:28 GMT
Accept-Ranges: bytes
ETag: "b637a26a3cad81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 951
fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
www.cqcq9.com/images/bg.jpg
172.86.83.250200 OK 481 B URL HTTP/1.1 www.cqcq9.com/images/bg.jpg
IP 172.86.83.250:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 40x40, components 3\012- data
Hash fc45958c2a7937a709273cbbeb51821e
84d3ef6479ce1070ac197f6bac8f2e4f01f7056e
ef9a6bf14c6822f24ffdfe2ee625ab0b065bdcbc6c0aeaa040ee27bf27bc7d02
GET /images/bg.jpg HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/template/default/images/style.css
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sun, 05 Apr 2015 12:43:57 GMT
Accept-Ranges: bytes
ETag: "b8c0a52e9e6fd01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 481
www.cqcq9.com/ggvip/dl.js
172.86.83.250200 OK 268 B URL HTTP/1.1 www.cqcq9.com/ggvip/dl.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 8bb842688c46e8a112377acca9fa43b0
68d7421d58afeb7a86aa9fd668f04fd0a90786fe
7421bbd18febccfa4870a4c4a44e6b0ed66b21556791cfb0dc1a70b3c4c9d245
GET /ggvip/dl.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:58:33 GMT
Accept-Ranges: bytes
ETag: "5cb3fa2034c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:25 GMT
Content-Length: 268
fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sOQ0ISIQ8nOS3F5poR1OXiAZjEitpo3U37qB98pBGoY6dJk8RCNwu0akAxmAISdcXKeubqz8GmesgmkFirT7niw6oP4aSKuGosJyQ9ydSYsEiRzt%2BYxUfWxgLfSqh8hqtyqP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366c7d58b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MqrQJroY%2B97CN5zm6vaZGP8AtRGh98Ox8zsgPCE98NO51Xgyz9%2BOwSUfedICPmyngpptv6Ej2hTJv77NptvITmQaa9vqhy%2B42rHowMyz9cyfKrvKL63aClnyJW3B2AJ70TuP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366c7c2bb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wrM4XRwMsiKFUEL7wEHVEmlf6LEPT4EmN2kMyjXPElNh14t7v8sB1WbUdPvlt9Wh9ThsU4ICYJigBo%2B9%2Fu7BzXWaB3iRJLPsNNKfhMcUBBvrPSyk2C00%2FKYnTCVw8%2Bo630C2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366c78191c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eMmk%2F9RzXmGjLSgk5UuGkJulpGpxusTGkj57wNGBdWW2BLC3EExA8MLBTlZdXrHWORsz8XN4VKdejsVAC%2Fkd1%2FcS6PWRZuR1r6u%2BrU8gxRHYAvHIsYrwbZ%2Fd9l0zOr2hk9kM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366c7e77b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fLPPLwyI5FWdfd4HmIRioKGS2Z5MhtvvoWCO67RoBbt4D3dR2y3gogGYl2tUfG5qVqXdVcrxkmzWGp0Trng3Ix4eZXAxh%2FoAAeHmX5KFYI659xIzRVnmJPXhbCuEHXkxJsuj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366c7bc0b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8CpjEKF0hVf7wAzFf9jkJP0lG4OdlKTeLwfC2xVt96OV8J5%2BXTGK1DWoxbfwIqV4Czkh5t82PmIpzbfjevomHe0KqbwzsR28xmXtKMefim0pvz9S7x9eUYCmaYBbqYhjmENd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366c7a37b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
push.zhanzhang.baidu.com/push.js
182.61.201.93200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP 182.61.201.93:0
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Tue, 17 Jan 2023 04:05:27 GMT
Etag: "4078521116"
Expires: Wed, 17 Jan 2024 04:05:27 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=013F0F9CB83B81DD2CD4DBC8C94D9854:FG=1; max-age=31536000; expires=Wed, 17-Jan-24 04:05:27 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
dvcasha2.ocsp-certum.com/
23.36.79.17200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 04a1fe22f0967c7ea67a2711ddb9c94e
94853803b398a9bd9cc303570726f6ad60188a34
4601594bffb5c71bda6c0ab33be39415e474f1e88380763949dec0fb04b65175
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=563
Date: Tue, 17 Jan 2023 04:05:27 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
23.36.79.17200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 04a1fe22f0967c7ea67a2711ddb9c94e
94853803b398a9bd9cc303570726f6ad60188a34
4601594bffb5c71bda6c0ab33be39415e474f1e88380763949dec0fb04b65175
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=589
Date: Tue, 17 Jan 2023 04:05:27 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
23.36.79.17200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 04a1fe22f0967c7ea67a2711ddb9c94e
94853803b398a9bd9cc303570726f6ad60188a34
4601594bffb5c71bda6c0ab33be39415e474f1e88380763949dec0fb04b65175
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=568
Date: Tue, 17 Jan 2023 04:05:27 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
23.36.79.17200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 04a1fe22f0967c7ea67a2711ddb9c94e
94853803b398a9bd9cc303570726f6ad60188a34
4601594bffb5c71bda6c0ab33be39415e474f1e88380763949dec0fb04b65175
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=548
Date: Tue, 17 Jan 2023 04:05:27 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
23.36.79.17200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 04a1fe22f0967c7ea67a2711ddb9c94e
94853803b398a9bd9cc303570726f6ad60188a34
4601594bffb5c71bda6c0ab33be39415e474f1e88380763949dec0fb04b65175
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=629
Date: Tue, 17 Jan 2023 04:05:27 GMT
Connection: keep-alive
X-N: S
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 63e10ffbb3c3fc38defe6990fcaf5cf1
73914fc395a2ad6fffe25b716c0c8104865677ec
2409c4c101a23c6f6281ac13463685ab6168b6766ddb2c5831098e9b31c4d309
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2409C4C101A23C6F6281AC13463685AB6168B6766DDB2C5831098E9B31C4D309"
Last-Modified: Mon, 16 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5011
Expires: Tue, 17 Jan 2023 05:28:58 GMT
Date: Tue, 17 Jan 2023 04:05:27 GMT
Connection: keep-alive
img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fOKVjTKdElGelkhCYLtw37eLsjpFjThQ1VoldEPQF6kOawiEVGRWSt1u5SmShZYhamvQyqKrOP6XJ5v9b%2BbNiOaUbm4SEtMSPC4rjP1VMbAuqiuffIKWVsyQr5PbFXAD1uoI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366ebe02b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qdpmi6gSZit7shJ3LIsrRy1KA8SrYusFc2j39wkzTtSNEf6hq8quphT7Kwu15xgikhqDVUG8I35VBPvNTz7yuvFwupdMbFa8QfprONWBZm7gbrOS%2BphVIO8Bf9S3GIAgs21e"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366edf54b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wmRuyiSBZkXHYOL7ZzyhRtor6uXkF3SjyM5Fnwp3t5y5WDT6xUdxAvFmHj%2B1WTJ5JPYN80I7K4DMACaYRoqrpwU8Sp9mXm28XcB%2FRrNLN2dyoDxWbH0rFtnOaIooBvUuAKsB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366ed8b41c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SnVffrXD3RXz8EKJi36JYsKG%2FXlIODOs803EeEF6npjuH5y4BVrgJRjeSuWuoJS44HIc1nlD8eFmnX2HBh2bONiBlN%2FhH9ileY7OqrFerKdH77TmiPVWumWx538CNea1gfA7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366edd05b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y8c%2BlUCVeJRXuzeg7Z0jFw0sDbsjf18%2BuFrRUssey1frbrQCloO4aa%2BOa1aCc%2B2kagmmCK4i4p%2FirE8sj9dK0uv2uSCgGzbFs17tLOAo6NkcL7CJ58DqQjyigVWMio9%2BHdno"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366eecc0b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jvJJff2S%2Fo7PI4XvKRjcHIQL3vLSSQor5Q%2Bl%2BgWTsJbum2ySZ6ItAkXV3seuDTBhChRzUUoh1vBHp%2B%2FrdT4Ikl2ZPIQ0XHwwFiSQxAq95EFNaPtS0suDq0OdHorCKC6xb8u0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac366efb32b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
45.89.209.74200 OK 6.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 5c6769f3df7609da570824a6dbcf086d
887e92e93f03af380a0fc9b0dc01088f55eda26c
6a87b1de31c146cc93391ce7842d52516f32abf9b1ce0ea1f0b60731a18c9fbc
GET /upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 6612
Last-Modified: Fri, 25 Nov 2022 12:43:34 GMT
Connection: keep-alive
ETag: "6380b876-19d4"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
45.89.209.74200 OK 10 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 6db6ac8e51aa8a830dabae99acb046e9
528c1eaa5f81ec7ff929fe0f09ac076834e158ed
97e4efaa4926d04b62b1204354626beb2d7f9256f150701d2ea8213bfbf873b0
GET /upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 10038
Last-Modified: Fri, 25 Nov 2022 12:46:34 GMT
Connection: keep-alive
ETag: "6380b92a-2736"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
45.89.209.74200 OK 12 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash c2fd895cf3ac06ac64e398ff6992ca98
4ee50325a91303e218a659ae408180353bec6273
ba571945ce99699a737bf0ab85733ed93fa76b3a348dec90b37a0bfe1dd453b7
GET /upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 11475
Last-Modified: Fri, 25 Nov 2022 12:43:34 GMT
Connection: keep-alive
ETag: "6380b876-2cd3"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
45.89.209.74200 OK 8.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 9f4eb9424327cd5c666b8610a47e062d
128795c77609d677d22b8282f85bb986e3ee3515
bfa101c8fe7bb3bcd5e9af17a783484b59cd87c82739add0e2c51523e7cdb916
GET /upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 8624
Last-Modified: Fri, 25 Nov 2022 12:37:03 GMT
Connection: keep-alive
ETag: "6380b6ef-21b0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
45.89.209.74200 OK 9.1 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 68e8148a048b4e58774617639a56dccf
a7d1fa058a243be0f0e79bc73b974f909de14a91
9545741c830d93de18bf98037a031e01bd08ac7997d6543fd4da06adad7f75eb
GET /upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 9145
Last-Modified: Fri, 25 Nov 2022 12:46:18 GMT
Connection: keep-alive
ETag: "6380b91a-23b9"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
45.89.209.74200 OK 7.7 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash d76f7417a137e4677dd92852500e4371
634c0534af667bcc460a7c8a0e63bae21170b1aa
ae7d6e2c9c85793c746ebd8533cb3ca694d295135e9bcf26cee1bbd1e72c9694
GET /upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 7733
Last-Modified: Fri, 25 Nov 2022 12:43:34 GMT
Connection: keep-alive
ETag: "6380b876-1e35"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
45.89.209.74200 OK 13 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 237bfba9436391fe5b2c3a2168877877
1c6a374d7c745d1c3288177ca32405ed28ee22aa
f2f1f9495e4d3a03adbd182cd55cbc6d80c81c45cde7cd9bec6833f1c0d754d5
GET /upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 12631
Last-Modified: Fri, 25 Nov 2022 12:36:42 GMT
Connection: keep-alive
ETag: "6380b6da-3157"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
45.89.209.74200 OK 7.9 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 3443fb318caf862a9debd9335fc25468
0787c66245eccd6791c6e09e19e69a6c1ec2ff00
92e7515f93cd4f88d3ef20ad4cebc93c9374e2b50e03fbdf6269a9c59e089769
GET /upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 7930
Last-Modified: Fri, 25 Nov 2022 12:43:34 GMT
Connection: keep-alive
ETag: "6380b876-1efa"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
45.89.209.74200 OK 8.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 263a6c573edd5625d080985fd889bef9
4af7f8f02d51546141a7ce09604b126646366d59
802e6c2e5af31821490b2e5cec282c191f1bb27296549c4b5017856e0ddde5b0
GET /upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 8155
Last-Modified: Fri, 25 Nov 2022 12:43:34 GMT
Connection: keep-alive
ETag: "6380b876-1fdb"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
45.89.209.74200 OK 9.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 8718225c23ac90d639e0611eef2c4b90
5dad0e9d9913bb96323b7759ebf926e7a3bb0f86
ea0abf168a4a4a65248ed610ba4e3b433e9d1bbaec7a0a8b28ae9e6b8f72338a
GET /upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 9049
Last-Modified: Fri, 25 Nov 2022 12:41:07 GMT
Connection: keep-alive
ETag: "6380b7e3-2359"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
45.89.209.74200 OK 8.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash f7620194ccc51ce6bbe622fd849d3ae0
871bea122e0a4ac503b408135e62d04145195715
db9dad860a3c5bb024bb1147e1fc15d56c1e5bb3c44e5103231e54b2da7e8464
GET /upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:02 GMT
Content-Type: image/jpeg
Content-Length: 8607
Last-Modified: Fri, 25 Nov 2022 12:43:35 GMT
Connection: keep-alive
ETag: "6380b877-219f"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ROhnNsJLwhWMWVHTEBOBloGbEqxRbO9QO3JcqOswSAmMS9z9WMypJQX9o4BM5wXwU3uEfIxIpWtJfqGQVo4jzbeuAXMFqsKmYEnQl3amXi%2F%2BMxEOlpqK9JRkd67EY7IlWZJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36710ffbb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QrdxDGev0AczwdKDLdNnET%2F5E%2Fd7u%2F2v85fp74WjQtO32MY1WNTz8mgynB8ASEUNH5iXRKsw7vKUmjft7aAPcfS5IP%2BvghAQ1eiMetNEh2M90mkBmbbIN6Zv5Br9swA4cFio"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac367119281c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rf311uj5bHG0qkaXU02Syp0MqDnP8umyt50UFMKiRR8G97VUrbfKI%2FjIeg7DNw0qSDvs%2BxHH%2FUsgs%2Fq6q728WCu4mCuH1VAQ6F1PG72dmIX7KR9e%2BVfFPSJIsLxqP5IQojdI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36710ec5b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
45.89.209.74200 OK 6.4 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 4864c6a34bd8d59804dfb8c16a7bdcce
c87123793be85f9a847daa06f4e7f9d65877552f
c0a8389982608c13b77910a1bebf5630628f45ff85c5acb32353c810783dd541
GET /upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:03 GMT
Content-Type: image/jpeg
Content-Length: 6426
Last-Modified: Fri, 25 Nov 2022 12:43:35 GMT
Connection: keep-alive
ETag: "6380b877-191a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
45.89.209.74200 OK 9.1 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash a6dc1deaa0cf7a7755c76977c6c8863d
f3c42f46eff84218016f8ed9303b861bfb930df4
905b17dd217f7ef64d84b9412f1cbd53f62f23fa26c789ebb1f84533de757782
GET /upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:03 GMT
Content-Type: image/jpeg
Content-Length: 9111
Last-Modified: Fri, 25 Nov 2022 12:43:35 GMT
Connection: keep-alive
ETag: "6380b877-2397"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
api.safe-t-first.com/dzt/S2.JS
107.164.49.70200 OK 516 B URL HTTP/2 api.safe-t-first.com/dzt/S2.JS
IP 107.164.49.70:0
File type HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash cce9b9b0f5553c835eebcf077f989c9d
8269aff775feb4d70af608111e4d3ec0a20f2f55
3defa1cb4234f5a8e2946aa44ffb7c9572965b079dc384317552987c1aa45e1d
GET /dzt/S2.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: application/javascript
content-length: 516
last-modified: Wed, 11 Jan 2023 04:23:58 GMT
etag: "63be39de-204"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
45.89.209.74200 OK 9.7 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 60573b859ec466fef551a1a061417e92
dea9f581ad37b196576b1c361bf8f64728c59b1c
b592b8b695147c0c12e9097e4792841f4a9fe2e7487cbe6cca951c4f0c6e996b
GET /upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:03 GMT
Content-Type: image/jpeg
Content-Length: 9744
Last-Modified: Fri, 25 Nov 2022 12:46:18 GMT
Connection: keep-alive
ETag: "6380b91a-2610"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
45.89.209.74200 OK 10 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash dbcd7086e90d0dc1a9b162e66f723ed8
9d0fd086f20b78c0514612055016cf62b955fcad
05acfb305c3b6f432d4b8b66bee3319a70ef09ba56df135c71a59078193b392a
GET /upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:03 GMT
Content-Type: image/jpeg
Content-Length: 10247
Last-Modified: Fri, 25 Nov 2022 12:46:18 GMT
Connection: keep-alive
ETag: "6380b91a-2807"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
lbfm.lbpictupian.com/upload/vod/2022/10-27/13/ra4scrsa5rr1341ra4scrsa5rr142581.jpg
172.67.28.138200 OK 8.8 kB URL HTTP/1.1 lbfm.lbpictupian.com/upload/vod/2022/10-27/13/ra4scrsa5rr1341ra4scrsa5rr142581.jpg
IP 172.67.28.138:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bff53bae6954e8ffaef32fc565762c3e
7375cfb3367ee6ce8668b6895587bad3002f66c3
d41bc1bfb54fb2c675b911ea1c221f29adbe79f568b1d73cc5d28ca0e19632d5
GET /upload/vod/2022/10-27/13/ra4scrsa5rr1341ra4scrsa5rr142581.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: image/webp
Content-Length: 8766
Connection: keep-alive
Cf-Bgj: imgq:85,h2pri
Cf-Polished: qual=85, origFmt=jpeg, origSize=9431
Content-Disposition: inline; filename="ra4scrsa5rr1341ra4scrsa5rr142581.webp"
ETag: "635a19fa-24d7"
Last-Modified: Thu, 27 Oct 2022 05:41:14 GMT
Vary: Accept
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 1429
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 78ac36745d130b41-OSL
xx-map.com/storage/websites/June2022/i4v0YIEW1Rq1FlVqI9hv.gif
104.21.52.79200 OK 104 kB URL HTTP/2 xx-map.com/storage/websites/June2022/i4v0YIEW1Rq1FlVqI9hv.gif
IP 104.21.52.79:0
File type GIF image data, version 89a, 200 x 200\012- data
Size 104 kB (104099 bytes)
Hash d93ca83077660fbae7839fa5837af88d
9d6a01bfa19c4cdd6f8f9e9d87864a3eb76b79d6
58aaf2652b398cfe64c8ab1014f021a1cd15a89f10e89f902182615969466207
GET /storage/websites/June2022/i4v0YIEW1Rq1FlVqI9hv.gif HTTP/1.1
Host: xx-map.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: image/gif
content-length: 104099
last-modified: Thu, 13 Oct 2022 14:31:05 GMT
etag: "63482129-196a3"
expires: Tue, 24 Jan 2023 15:43:35 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1945313
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1PkD8uU9zVOvimXe0a9rDJDwaB1wOXyW7hR5N838xare8ooZHmXKKFoZVbzdto67VWjHHFYs4t4XQARLx5dqS1vkI74XoaIPdvpNe1VHKzm59FaHgqlF8w%2F1zBdt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ac3674abc2b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.safe-t-first.com/dzt/SP.JS
107.164.49.70200 OK 392 B URL HTTP/2 api.safe-t-first.com/dzt/SP.JS
IP 107.164.49.70:0
File type HTML document, ASCII text, with CRLF line terminators
Hash a819d9f803d2813eb3cf31546fe0bc42
dc71e88cc902f54ce7e33b0f10ddda0144b46f90
152c8f1a9ea0a88c5b89891ddf1dae5bcb3737fc02f2ca7feab953f0f73a1b1b
GET /dzt/SP.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: application/javascript
content-length: 392
last-modified: Sat, 17 Sep 2022 15:14:35 GMT
etag: "6325e45b-188"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.cqcq9.com/template/default/images/ico.png
172.86.83.250200 OK 903 B URL HTTP/1.1 www.cqcq9.com/template/default/images/ico.png
IP 172.86.83.250:0
File type PNG image data, 30 x 102, 8-bit colormap, non-interlaced\012- data
Hash cc584c48bdea33f64498bcc859885375
1c092c63a09440c9632aef2868449eda772949fa
9c9453da37e3ed5e631977ce6843ac850d213fc67894d3c7c6a1d66c2335ed1f
GET /template/default/images/ico.png HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/template/default/images/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sun, 24 Apr 2016 09:24:04 GMT
Accept-Ranges: bytes
ETag: "822265bb9ed11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:26 GMT
Content-Length: 903
img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VWhI7jlL6ouqps0ErgLFozr1pUNPx8dqDcaYiZkjzJ9Ysw4c5ToPCrVB8iLgwIw7F769HEwRkyrUCXGrOqg%2Fnm3AHwWdUIbYtWwOFgm%2BV9e7o%2B03O%2F33rHrP0KHIv3SlrCqS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36754823b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jYVVgrwILm%2ByhTRwsskWJ6hwrna%2FcMwWp5PqBtOSO57LqBG8QQJgBc3%2BTc4PeXHjmXnBfWH67WBjoV05LNSlDtLMrU%2BXBo7j2LRcv837W0WEY8eMLaaKA1BmhEbyPhaXUA42"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36755f13b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OysKcUogqR08PoD5WCwi1OHpBRkffuq8DtN1Y65A8%2Ffn5KBeWU8HlcEs%2BUHIjpMKKtwfVeZIlOeyHORe0EG%2Bytpx5PD0w00k7h2hMuPWeUTub2PSUqmBu2pYdodGCtNh3Dza"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36755d4bb524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmeQaSk1QT2lxxdbcc%2FBtscLKqNA4NGW9J5jQ%2FoI1DHx2YcvzoeRI7yWAouYOHIx0%2B6KkqEzHmkskO0SROlfQlqNIXSkfJFs%2BlWZBiA2gNOnYqPzY6AXIq7E%2BgiJCS48dC4E"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac3675599ab509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RJdA4ucD4maGBzO3fwvfkCaYNAsbeobCYLrQFk7Bo%2Fmn5%2BGJpgbFJEGQNF1wQDTkFipjV%2FrhGXSlHNC4yH2Lcc1IhwWqZI93OUDe2ytN1bK9j2cRfsu0aMMMgD8JJz5IP5Cy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36756a3b1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oVRrbJiuuyuN9oO6rRcysDCTsMkLQh6Mu2aE2CL9ZakhKfu3MyCN6%2FTB9NP9nWPnuWglVt%2F3MLBAD1P0c0vbXv4jlCGEu0qsByUT4mtRjeDTsKPd0unqQTBeom%2F4R9xnPGQg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36756842b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FVqbgk686XjSFFcITXX20CoDxuc8nbwaosnDYtm9dJhsVv1Hh4pftZmHAzjfvshBGs%2BtuIKqkgkM6gqe%2FGDB7E9COJx7IL6VuhMEI9ty%2BxW2nl04MnGeAAOjv5ls65%2BzwF%2By"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36756f18b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
api.safe-t-first.com/dzt/S1.JS
107.164.49.70200 OK 654 B URL HTTP/2 api.safe-t-first.com/dzt/S1.JS
IP 107.164.49.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 5083fcdb9c8ecab89de0c0f4850b5394
aaa85e150940491878912fcb7fb2c1a5b5eff994
28844e9a4f6eac391dcca8b263e5cc99758844a92480a4c010246ef46469ed00
GET /dzt/S1.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:27 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 04:28:13 GMT
vary: Accept-Encoding
etag: W/"63be3add-95c"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wmINauvi0UUkY0FtvZq%2BDE7bDBRsUgLrN5GN9UaD43HjFGwbU5RN5lJ67s%2BsZbDZDodAYc%2BS62I8LrjgMnkLpkTI8LfCw%2BoFCyR%2BJNIXRCudIk8XcTWhMGAeRnn6zirpAHm5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac3675699fb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vvkm92gFhlUetH38Fq01Yi%2FLIk3uYEyOTE0rblH0tk1fA01D5Pd2CNyTzWD4K%2F8u%2FI4bFrpA7fOrOrUmaUV4xNot%2BORWclr2B1l%2FaEQ9c0j9AgNoaz53S3t9RTROtUIYYueN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36756d52b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pylTYG6UnIHQ8zec92rjWAZMv5BPjdnf0kdSBqBsrgx8ZTz%2FssKCDFFhsSCzDfeStjJaKiutzKQo3AQWiBTS1X9%2BO4vIK2j33HqUF%2F3TzIiKPurPO3lhGljLpbNwU6KVuRw4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36756a401c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HIfLlv6VyDKPKKlEwAQ8AEh%2BBnOfFh5U49RrhW9LQOiLzEGDfWVYJkmND%2F8UWvxk8TO0LtscC6UTEU4RSCMB0R1KgguAwcjMwrDkMv52hGW10dd3mTDSoGBas18yMjl%2BLtDi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36757847b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SxFtWTBnt8UNJbjxN1r6JH0eRKHiWLCsyi87H1UdRTP5avzRlArGrP2brGB94AqvOFkEUOy0Y3HHKmTXoMpcQVcDDhLrnpq%2BmmZhhNtrRlWshXQ49pk01bHU8zAnW6c3L1Ar"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36757f1eb512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lpPSDuTQJFbANcyR2LbaAUDFIF5%2FlV3h2SW9DWbLj7quvHoWeMKQqlsry71q4MV4WV3lM8O8ORkJC6lLOSWt1nichf%2FRgRuX9lFztwyXMdT3WI9XkYZ8IpFIEpLp7bsnHBHS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac36757831b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6B4HEx2tA1n9%2BIxFXgnlyuHQZDGU3X9W4vFwxekoI8tuMgR1d3gnsVxSP52mFXoyJ1CjNlJHN5aHrhOTsjMVmMmV5zAq%2BSV%2F70AU%2Fe%2BcDU%2BoEyLsK2z44gCZEEwflKo4EWyV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ac367579a4b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
api.share.baidu.com/s.gif?r=http%3A%2F%2Fapi.xpgys11.xyz%2F&l=http://www.cqcq9.com/
180.101.212.103200 OK 23 B URL HTTP/1.1 api.share.baidu.com/s.gif?r=http%3A%2F%2Fapi.xpgys11.xyz%2F&l=http://www.cqcq9.com/
IP 180.101.212.103:0
ASN #134770 CHINANET Jiangsu province Suzhou taihu IDC network
Hash f0d79988b7772c003d04a28bd7417a62
58423a999eec2997bcfffb247e9ecd3dfd0abf44
30e6fa98fb48c2b132824d1ac5e2243c0be9e9082ff32598d34d7687ca7f6c7f
GET /s.gif?r=http%3A%2F%2Fapi.xpgys11.xyz%2F&l=http://www.cqcq9.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Length: 23
Content-Type: image/gif
Server: bfe
Date: Tue, 17 Jan 2023 04:05:28 GMT
ocsp2.globalsign.com/gsorganizationvalsha2g2
151.101.194.133200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 151.101.194.133:0
Hash a6d479e6903c7535380eb3ad09e47619
2663f8e980579d9e947f53b276005940e49c05fd
fde3482b48d24a832348c8c2f488cca9c10fa9f58a7129b8024704f1ca0b0e30
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1459
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 21 Jan 2023 02:06:00 GMT
ETag: "2663f8e980579d9e947f53b276005940e49c05fd"
Last-Modified: Tue, 17 Jan 2023 02:06:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 17 Jan 2023 04:05:28 GMT
Age: 4147
X-Served-By: cache-qpg1231-QPG, cache-bma1672-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 15, 1
X-Timer: S1673928329.596414,VS0,VE1
fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
45.89.209.74301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
IP 45.89.209.74:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:03 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
api.safe-t-first.com/dzt/S4.JS
107.164.49.70200 OK 0 B URL HTTP/2 api.safe-t-first.com/dzt/S4.JS
IP 107.164.49.70:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dzt/S4.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: application/javascript
content-length: 0
last-modified: Fri, 16 Sep 2022 14:01:47 GMT
etag: "632481cb-0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
45.89.209.74200 OK 11 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
IP 45.89.209.74:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 8f6f03541b1694ba4a55cb8e755295e6
e3e6af7cd5c1068aab2b3bed7f58a60e9699290e
dc4108bf5c109dff942e6b8d0fe4e0f170574f870bea9a0a11e440b17ab4c565
GET /upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 17 Jan 2023 12:04:03 GMT
Content-Type: image/jpeg
Content-Length: 10589
Last-Modified: Fri, 25 Nov 2022 12:36:09 GMT
Connection: keep-alive
ETag: "6380b6b9-295d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
www.cqcq9.com/template/default/images/text.png
172.86.83.250200 OK 646 B URL HTTP/1.1 www.cqcq9.com/template/default/images/text.png
IP 172.86.83.250:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash ea04ca125b03bd020bded6a3ecba1c0a
d6e7e93180689b11ee0e2674c41f5585e688d62d
659f4cdc53e8585ed6e606f0575c03e66e83590e4e2adaa44db2ae539e25a77a
GET /template/default/images/text.png HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/template/default/images/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sat, 07 Jan 2017 10:08:44 GMT
Accept-Ranges: bytes
ETag: "56bba47ce68d21:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 17 Jan 2023 04:05:26 GMT
Content-Length: 646
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 69746afcea17d1dec916939cbb5d4c90
362cceace79785a9bb022bd6df1fa46b0d1c1348
65200cb78e9b5b07215ef323645d111e312e2f35ab57690c78683db8c895dc0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 20:12:35 GMT
Expires: Mon, 23 Jan 2023 20:12:34 GMT
Etag: "362cceace79785a9bb022bd6df1fa46b0d1c1348"
Cache-Control: max-age=575824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ac3678194cb511-OSL
api.safe-t-first.com/dzt/S3.JS
107.164.49.70200 OK 591 B URL HTTP/2 api.safe-t-first.com/dzt/S3.JS
IP 107.164.49.70:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 1c51d66ec76074c942b4af04209ef096
1de3fc978d16455187da89955a482fd8bf10e2c8
24005746495ef9902b71ace265eb50892d56753820d03ff619c5ac15a2149906
GET /dzt/S3.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: application/javascript
last-modified: Sat, 17 Dec 2022 02:44:27 GMT
vary: Accept-Encoding
etag: W/"639d2d0b-5b9"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
sc02.alicdn.com/kf/Hf82983e650f140d4baccd79e3f84f3f1f.gif
95.101.11.161200 OK 24 kB URL HTTP/2 sc02.alicdn.com/kf/Hf82983e650f140d4baccd79e3f84f3f1f.gif
IP 95.101.11.161:0
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 200 x 260\012- data
Hash 39202890b8a45718c94d001113e9b4ae
5be1ffe30a5384abc0be6ad69cc5137bcd069870
fc3337d5ddd7f57c17481f1d3a60aaf82cd0f17643df3397b44261d77e7202cc
GET /kf/Hf82983e650f140d4baccd79e3f84f3f1f.gif HTTP/1.1
Host: sc02.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 24524
traceid: 2f59420516669704581156163e
x-application-context: fileserver2-download:prod,hz:7001
last-modified: Fri, 28 Oct 2022 15:20:58 GMT
access-control-allow-origin: *
strict-transport-security: max-age=0
eagleid: 2f59420516669704581156163e, 082d349516703630330944665e
server-timing: rt;dur=1.292,eagleid;desc=2f59420516669704581156163e
ali-swift-global-savetime: 1666970459
x-swift-savetime: Tue, 06 Dec 2022 21:43:53 GMT
x-swift-cachetime: 83007426
served-from: 23.62.98.103
cache-control: max-age=85035598
expires: Sat, 27 Sep 2025 09:05:27 GMT
date: Tue, 17 Jan 2023 04:05:29 GMT
network_info: NO_OSLO_50304
timing-allow-origin: *, *, *
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?0e4c69192bebb536fa43c8edf6654341
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?0e4c69192bebb536fa43c8edf6654341
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (629)
Hash f8d24a803da6599f762db5332b7e161d
c5ed0db9e6df77e3ab310a77799721e31633aeb5
98691db8e0e8f1009dc1acfa718bcd0209afd03966cd54840bb1030b8bbf2fce
GET /hm.js?0e4c69192bebb536fa43c8edf6654341 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11267
Content-Type: application/javascript
Date: Tue, 17 Jan 2023 04:05:28 GMT
Etag: 3c53e102c0f10327a538b1c1a912873a
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=166EEA0B208628F6; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
sdk.51.la/js-sdk-pro.min.js
47.253.50.2200 OK 13 kB URL HTTP/1.1 sdk.51.la/js-sdk-pro.min.js
IP 47.253.50.2:0
ASN #45102 Alibaba US Technology Co., Ltd.
File type Unicode text, UTF-8 text, with very long lines (34110)
Hash 29243483fe441404931c046d27be80a6
92a0c68b0169eff0addb8cc05a53f6e009d41d47
4865f22b0a68c6a0a6c2d3cbedb9a190ffbea105c4f1e2a5806172919456f3b1
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 10 Jan 2023 04:34:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63bceaef-861a"
Cache-Control: max-age=1296000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 69746afcea17d1dec916939cbb5d4c90
362cceace79785a9bb022bd6df1fa46b0d1c1348
65200cb78e9b5b07215ef323645d111e312e2f35ab57690c78683db8c895dc0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 20:12:35 GMT
Expires: Mon, 23 Jan 2023 20:12:34 GMT
Etag: "362cceace79785a9bb022bd6df1fa46b0d1c1348"
Cache-Control: max-age=575824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ac3678194ab511-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 69746afcea17d1dec916939cbb5d4c90
362cceace79785a9bb022bd6df1fa46b0d1c1348
65200cb78e9b5b07215ef323645d111e312e2f35ab57690c78683db8c895dc0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 20:12:35 GMT
Expires: Mon, 23 Jan 2023 20:12:34 GMT
Etag: "362cceace79785a9bb022bd6df1fa46b0d1c1348"
Cache-Control: max-age=575824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ac367828120b69-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 896e18a24e989f3e05853c677add0ac2
791ffe23f2fe88b69e790833454859425bce20a9
ca9f57cb4cf07c75424e1396fb36ec34d88bb7bc2ccd34fd1e3528f6d2aaf154
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 14 Jan 2023 15:57:16 GMT
Expires: Sat, 21 Jan 2023 15:57:15 GMT
Etag: "791ffe23f2fe88b69e790833454859425bce20a9"
Cache-Control: max-age=387705,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ac367989f9b511-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f3d8ba855f7c0a9a3b382b758fc560c6
f61202850e9ee90f744130b68c28e73b531ec35f
1c78e59fde805b842ab31e8faa07d62de562f5694cf4f5f0b2c09271a988c189
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C78E59FDE805B842AB31E8FAA07D62DE562F5694CF4F5F0B2C09271A988C189"
Last-Modified: Mon, 16 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21188
Expires: Tue, 17 Jan 2023 09:58:37 GMT
Date: Tue, 17 Jan 2023 04:05:29 GMT
Connection: keep-alive
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=2036778881&si=0e4c69192bebb536fa43c8edf6654341&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=33359&r=0&ww=1268&u=http%3A%2F%2Fwww.cqcq9.com%2F&tt=%E5%9B%BD%E4%BA%A7%E6%BF%80%E6%83%85A%E2%88%A8%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E6%92%AD%E6%94%BE_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%BD%91%E7%AB%99_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%94%B5%E5%BD%B1%E4%B9%85%E4%B9%85%E4%B9%85_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E5%A4%A7%E8%A7%86%E9%A2%91
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=2036778881&si=0e4c69192bebb536fa43c8edf6654341&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=33359&r=0&ww=1268&u=http%3A%2F%2Fwww.cqcq9.com%2F&tt=%E5%9B%BD%E4%BA%A7%E6%BF%80%E6%83%85A%E2%88%A8%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E6%92%AD%E6%94%BE_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%BD%91%E7%AB%99_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%94%B5%E5%BD%B1%E4%B9%85%E4%B9%85%E4%B9%85_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E5%A4%A7%E8%A7%86%E9%A2%91
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=2036778881&si=0e4c69192bebb536fa43c8edf6654341&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=33359&r=0&ww=1268&u=http%3A%2F%2Fwww.cqcq9.com%2F&tt=%E5%9B%BD%E4%BA%A7%E6%BF%80%E6%83%85A%E2%88%A8%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E6%92%AD%E6%94%BE_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%BD%91%E7%AB%99_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%94%B5%E5%BD%B1%E4%B9%85%E4%B9%85%E4%B9%85_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E5%A4%A7%E8%A7%86%E9%A2%91 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 17 Jan 2023 04:05:29 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=35238B1685ED1633; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
xinchacha2dv.ocsp-certum.com/
23.36.79.10200 OK 1.5 kB URL HTTP/1.1 xinchacha2dv.ocsp-certum.com/
IP 23.36.79.10:0
ASN #20940 Akamai International B.V.
Hash 9df916962e16f3e9ce32e189a6a5f225
0c6209f8c0edb5409d76bb16cbf98e3d80fc9246
3f34649ebed347bd20ad7636c51f51d7fa8dfbc121c619d0e6c8dddd9ed01399
POST / HTTP/1.1
Host: xinchacha2dv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1538
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=451
Date: Tue, 17 Jan 2023 04:05:29 GMT
Connection: keep-alive
X-N: S
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash c4c524894a648d4c85bd8b94a769f5b9
aebbb532c9cedc9abb54f0489ff8bd40c7404051
e21443fdd83f2b231c47a71f77a8e4bf4665ae84f4e0c7c1e5ebc81ca6556f7f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 09:55:20 GMT
Expires: Mon, 23 Jan 2023 09:55:19 GMT
Etag: "aebbb532c9cedc9abb54f0489ff8bd40c7404051"
Cache-Control: max-age=538789,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ac367b0aa0b511-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 26311c0b06dde0120695583d53769ccb
ca51646865d1c56842d4ae9bb12e9da3cc4335c5
b6f54ce15df5fd647aae3e4200179029a4443f9c21bf89288085c1b450465c38
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 23:18:50 GMT
Expires: Mon, 23 Jan 2023 23:18:49 GMT
Etag: "ca51646865d1c56842d4ae9bb12e9da3cc4335c5"
Cache-Control: max-age=586999,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ac367baaecb511-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash fede6ae88dd8ca273e885afb85a4dd5c
a0e33b60247054d458d8c481565348dca9cb6671
3159271cd5e5e7097dd4e52dfeaf4bc9697c9017f6e83150dc2b5f3d4484ecdb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 14 Jan 2023 18:50:23 GMT
Expires: Sat, 21 Jan 2023 18:50:22 GMT
Etag: "a0e33b60247054d458d8c481565348dca9cb6671"
Cache-Control: max-age=398092,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ac367b3abdb511-OSL
kkgif.oss-cn-hangzhou.aliyuncs.com/960x120-2.gif
47.110.177.134200 OK 319 kB URL HTTP/1.1 kkgif.oss-cn-hangzhou.aliyuncs.com/960x120-2.gif
IP 47.110.177.134:0
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 120\012- data
Size 319 kB (318990 bytes)
Hash aa24656f40e8051bc01ab3b7b54ba39c
c79fad7ee2056cbc38a2934b5836ace69855b335
dd7d9844bcdd274145914d077c70c51a5c873539c6259e5855c367d9ac7e2000
GET /960x120-2.gif HTTP/1.1
Host: kkgif.oss-cn-hangzhou.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 17 Jan 2023 04:05:28 GMT
Content-Type: image/jpg
Content-Length: 318990
Connection: keep-alive
x-oss-request-id: 63C61E88DF72713438837CFF
Accept-Ranges: bytes
ETag: "AA24656F40E8051BC01AB3B7B54BA39C"
Last-Modified: Fri, 14 Oct 2022 13:04:46 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11367310566151348241
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: qiRlb0DoBRvAGrO3tUujnA==
x-oss-server-time: 3
225962tyy.com/470ed5ee51fd4c618951406988fe976e.gif
103.170.15.93200 OK 276 kB URL HTTP/1.1 225962tyy.com/470ed5ee51fd4c618951406988fe976e.gif
IP 103.170.15.93:0
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 180 x 180\012- data
Size 276 kB (275781 bytes)
Hash e6b935405a2f267592cd1d81fbe51897
475f77009b099e3edfe16b9fa4b3105fab4b62ea
eb05ec6c95dddb68b7615d26c68820ab928b9c32f534b2e3eee12e1c8b97f6f3
Analyzer Verdict Alert quad9 Sinkholed
GET /470ed5ee51fd4c618951406988fe976e.gif HTTP/1.1
Host: 225962tyy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6378f199-43545"
Date: Tue, 10 Jan 2023 08:21:18 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sat, 19 Nov 2022 15:09:13 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-23
Content-Length: 275781
taiwtp1.com/img/200200.gif
220.128.218.220200 OK 75 kB URL HTTP/2 taiwtp1.com/img/200200.gif
IP 220.128.218.220:0
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 200 x 200\012- data
Hash 03c13356e00c2033df2c88cb919251eb
f3a334a0366ddda6a87034f7d6c889c4d159dc8d
0c184e206259e8d0c54d3fc12d3d5332e9f6ff5f0404630fcb2daefe65fe1bfe
GET /img/200200.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 03:58:38 GMT
content-type: image/gif
content-length: 75259
last-modified: Wed, 09 Mar 2022 04:51:10 GMT
etag: "6228323e-125fb"
expires: Thu, 16 Feb 2023 03:58:38 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.firefoxcartoon.com/image/22cc.gif
23.224.182.179200 OK 840 kB URL HTTP/2 img.firefoxcartoon.com/image/22cc.gif
IP 23.224.182.179:0
File type GIF image data, version 89a, 128 x 128\012- data
Size 840 kB (840352 bytes)
Hash 367441fd0f9cc373d70d8fc69e97d46a
fb39591de5c3e2692f952801ffb34e88f4765c47
b22f3ed319624e493ebe8e41e7ef367fe86e9bc5b0ddbcc22d1ab75deafe05a3
GET /image/22cc.gif HTTP/1.1
Host: img.firefoxcartoon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:29 GMT
content-type: image/gif
content-length: 840352
last-modified: Sun, 23 Oct 2022 07:47:52 GMT
etag: "6354f1a8-cd2a0"
expires: Thu, 16 Feb 2023 04:05:29 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
n0633.com/6b5d90373420481eb967eb739d7ed50f.gif
20.210.212.204200 OK 101 kB URL HTTP/1.1 n0633.com/6b5d90373420481eb967eb739d7ed50f.gif
IP 20.210.212.204:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 101 kB (100964 bytes)
Hash 27d1de97ac93e08c23d38839c165962c
020372b65036c38287bf286a45dafd0cbd3a0538
57d082becc6ff907404430333320f5d87607b761c5b8647a13f339a20ca2f30d
GET /6b5d90373420481eb967eb739d7ed50f.gif HTTP/1.1
Host: n0633.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 08 Jan 2023 13:55:09 GMT
ETag: W/"63bacb3d-433f6"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
u1044.com/7e7ff64c2a224d31b3316a3a83786276.gif
45.61.212.143200 OK 309 kB URL HTTP/2 u1044.com/7e7ff64c2a224d31b3316a3a83786276.gif
IP 45.61.212.143:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 309 kB (309100 bytes)
Hash 85a34441173f1ad7d14a35ca78a4ca92
5d6216548b65b8ac46382cdc4b52c01305c5c1f8
ad6bfce666abcdf98e9ba0b238269d0b1b708c870bc21b0d066fcc57264b965f
GET /7e7ff64c2a224d31b3316a3a83786276.gif HTTP/1.1
Host: u1044.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
etag: "63a96ba3-4b76c"
server: nginx
date: Sun, 08 Jan 2023 03:15:56 GMT
content-type: image/gif
last-modified: Mon, 26 Dec 2022 09:38:43 GMT
accept-ranges: bytes
x-cache: HIT from cloud-us4-cdnb-13
content-length: 309100
X-Firefox-Spdy: h2
img.firefoxcartoon.com/image/im8.webp
23.224.182.179200 OK 1.3 MB URL HTTP/2 img.firefoxcartoon.com/image/im8.webp
IP 23.224.182.179:0
File type GIF image data, version 89a, 225 x 225\012- data
Size 1.3 MB (1324517 bytes)
Hash 570ead008ba41f4b6dbda76cd5f4f928
d7f99ac7f3a3c7b4b2bbb11b73f28c5487171829
7a911fb4c82c82d2fd0afcf9fc87a282157aec861cc197e1e0fcc5a940f57c5b
GET /image/im8.webp HTTP/1.1
Host: img.firefoxcartoon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:29 GMT
content-type: image/webp
content-length: 1324517
last-modified: Mon, 14 Nov 2022 08:14:21 GMT
etag: "6371f8dd-1435e5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.firefoxcartoon.com/image/a7.gif
23.224.182.179200 OK 1.3 MB URL HTTP/2 img.firefoxcartoon.com/image/a7.gif
IP 23.224.182.179:0
File type GIF image data, version 89a, 200 x 200\012- data
Size 1.3 MB (1264586 bytes)
Hash 24276ed40d33cdc7c91be6aee4a5c649
406a93691820e9768a0190f7a216c61b939ce22c
e6ed2d7c48fa4150292f76a06067d50597c16e7f402b030c9d2d22d8540ff733
GET /image/a7.gif HTTP/1.1
Host: img.firefoxcartoon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:29 GMT
content-type: image/gif
content-length: 1264586
last-modified: Thu, 21 Jul 2022 11:37:53 GMT
etag: "62d93a91-134bca"
expires: Thu, 16 Feb 2023 04:05:29 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ldbbs.ldmnq.com/bbs/topic/images/2022-12/78fb8314-2121-440b-b224-da2aef721f77.gif
120.52.95.239200 OK 195 kB URL HTTP/1.1 ldbbs.ldmnq.com/bbs/topic/images/2022-12/78fb8314-2121-440b-b224-da2aef721f77.gif
IP 120.52.95.239:0
ASN #133119 China Unicom IP network
File type GIF image data, version 89a, 960 x 60\012- data
Size 195 kB (194870 bytes)
Hash 22faef78f01685ac43b1a6d938f7746e
130cbb0e87cb3a603327185e93bb1ba59f89da5b
0b157b36d5e5cb70aac48ba37be2052f1e49e137a7a19d48e86a6209c31b221c
GET /bbs/topic/images/2022-12/78fb8314-2121-440b-b224-da2aef721f77.gif HTTP/1.1
Host: ldbbs.ldmnq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 17 Jan 2023 04:05:29 GMT
Content-Type: image/gif
Content-Length: 194870
Connection: keep-alive
Server: openresty
Age: 2323322
CloudServiceDiscount: CDN
Content-Encoding: utf-8
ETag: "22faef78f01685ac43b1a6d938f7746e"
Last-Modified: Wed, 21 Dec 2022 06:43:26 GMT
X-CCDN-CacheTTL: 2592000
nginx-hit: 1
via: CHN-HElangfang-AREACUCC1-CACHE48[17],CHN-HElangfang-AREACUCC1-CACHE3[0,TCP_HIT,0],CHN-TJ-GLOBAL1-CACHE79[129],CHN-TJ-GLOBAL1-CACHE3[120,TCP_MISS,124]
x-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCShINWKU7aRM+gu4MP/5zj9+sQW2IMbc
x-amz-request-id: 00000185336C329E940F9040F91618A8
x-amz-storage-class: STANDARD_IA
x-hcs-proxy-type: 1
x-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc
Accept-Ranges: bytes
collect-v6.51.la/v6/collect?dt=4
103.143.19.103200 0 B URL HTTP/1.1 collect-v6.51.la/v6/collect?dt=4
IP 103.143.19.103:0
ASN #4837 CHINA UNICOM China169 Backbone
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 360
Origin: http://www.cqcq9.com
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200
Server: CloudWAF
Date: Tue, 17 Jan 2023 04:05:30 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=9f5e125fa0f2eb1a8cb; path=/
HWWAFSESTIME=1673928330091; path=/
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://www.cqcq9.com
Access-Control-Allow-Credentials: true
kkgif.oss-cn-hangzhou.aliyuncs.com/96060-1.gif
47.110.177.134200 OK 62 kB URL HTTP/1.1 kkgif.oss-cn-hangzhou.aliyuncs.com/96060-1.gif
IP 47.110.177.134:0
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Hash e395406df64eeb7c363e6adeac428f67
2ec92371a1e3fdeebd977a7cc830365ef98535fe
6ea22a9fef8b07c5a0a110d68b85aac5e63b0dd650070818261b2c7a32c5c3b2
GET /96060-1.gif HTTP/1.1
Host: kkgif.oss-cn-hangzhou.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 17 Jan 2023 04:05:31 GMT
Content-Type: image/jpg
Content-Length: 62223
Connection: keep-alive
x-oss-request-id: 63C61E8BDF727134382E86FF
Accept-Ranges: bytes
ETag: "E395406DF64EEB7C363E6ADEAC428F67"
Last-Modified: Fri, 14 Oct 2022 13:04:45 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8379537113911644262
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: 45VAbfZO63w2PmrerEKPZw==
x-oss-server-time: 3
api.safe-t-first.com/dzt/SAPP.JS
107.164.49.70200 OK 0 B URL HTTP/2 api.safe-t-first.com/dzt/SAPP.JS
IP 107.164.49.70:0
GET /dzt/SAPP.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 04:22:58 GMT
vary: Accept-Encoding
etag: W/"63be39a2-fb5"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
api.safe-t-first.com/dzt/DINGPIAO.JS
107.164.49.70200 OK 0 B URL HTTP/2 api.safe-t-first.com/dzt/DINGPIAO.JS
IP 107.164.49.70:0
GET /dzt/DINGPIAO.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 11:27:49 GMT
vary: Accept-Encoding
etag: W/"635fb135-6b1"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
api.safe-t-first.com/dzt/SDH.JS
107.164.49.70200 OK 0 B URL HTTP/2 api.safe-t-first.com/dzt/SDH.JS
IP 107.164.49.70:0
GET /dzt/SDH.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 04:05:28 GMT
content-type: application/javascript
last-modified: Sun, 04 Dec 2022 13:29:13 GMT
vary: Accept-Encoding
etag: W/"638ca0a9-aa4"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2