www.iweixinqun.net/index.php
200 OK 543 B URL HTTP/1.1 www.iweixinqun.net/index.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (913), with CRLF line terminators
Hash efb267af7a798a37ef96685d819793b7
4f70041d473903829d9ee743190a58a7ee01ad17
72636515df765b83c14cbb94245aaf5a8112340d6660881cde86a0d5209466fb
GET /index.php HTTP/1.1
Host: www.iweixinqun.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3460
Expires: Fri, 03 Feb 2023 17:12:45 GMT
Date: Fri, 03 Feb 2023 16:15:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4756
Expires: Fri, 03 Feb 2023 17:34:21 GMT
Date: Fri, 03 Feb 2023 16:15:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 15:43:35 GMT
content-type: application/json
age: 1890
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5827
Expires: Fri, 03 Feb 2023 17:52:12 GMT
Date: Fri, 03 Feb 2023 16:15:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Yt5hgbHGuSE33XcG+enyKY3lssxfAiyEayx2VAwtcfbQJDD/+GiO4+Id6eq9ygQMj/XIdEvW86/deuGFabhUYA==
x-amz-request-id: 3GGVHNCJ3PV13ZH1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 15:52:28 GMT
age: 1357
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:05 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.iweixinqun.net/tj.js
200 OK 258 B IP
File type ASCII text, with CRLF line terminators
Hash ab9db58f5654642aab924ce7a263c9f8
0f3f72ccb0574dd242276210c843c5d5378e09d0
1ac92f6c2d36c750531a5edb1d2578557485eff6992c1d62f197fd85f1b165cf
GET /tj.js HTTP/1.1
Host: www.iweixinqun.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.iweixinqun.net/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: application/x-javascript
Content-Length: 258
Connection: keep-alive
www.iweixinqun.net/common.js
200 OK 676 B URL HTTP/1.1 www.iweixinqun.net/common.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (1293), with no line terminators
Hash f9f32de8cf433e2006db8e87cca2bfbd
816b8e176a34a403ec76a01a8f7b8c4d4b25b8ca
692ee11acd3f9f4269c339a6b5124caa9b6eb2938a9e54c160d081fbc0a357e2
GET /common.js HTTP/1.1
Host: www.iweixinqun.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.iweixinqun.net/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 16:07:19 GMT
age: 466
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.iweixinqun.net/favicon.ico
200 OK 543 B URL HTTP/1.1 www.iweixinqun.net/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (913), with CRLF line terminators
Hash efb267af7a798a37ef96685d819793b7
4f70041d473903829d9ee743190a58a7ee01ad17
72636515df765b83c14cbb94245aaf5a8112340d6660881cde86a0d5209466fb
GET /favicon.ico HTTP/1.1
Host: www.iweixinqun.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.iweixinqun.net/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3357
Expires: Fri, 03 Feb 2023 17:11:03 GMT
Date: Fri, 03 Feb 2023 16:15:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 25df3b45a8ff9bc4a005836d76691688
567eb5c707995dd11d0f4a7d36b5cecbc435a161
56c2f2cc91a8fe134a55ce44539e8e7798e88d0a361690f0772716ec5876c10c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56C2F2CC91A8FE134A55CE44539E8E7798E88D0A361690F0772716EC5876C10C"
Last-Modified: Fri, 03 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9376
Expires: Fri, 03 Feb 2023 18:51:22 GMT
Date: Fri, 03 Feb 2023 16:15:06 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rjkFp/NT0qhILh8g/0qJLw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KkhXHKL/IFxIujhLka0RKC0kc5o=
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 06b699d672b0b6bb1fae636413ca30d5
67f9a3f6977ece24f855e9478f6ba168b4115ca4
60f5b7e57be9afe0da28984022d77f4041a43d96479417062e711d8cabf9f9aa
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:06 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 07 Feb 2023 15:11:58 GMT
ETag: "67f9a3f6977ece24f855e9478f6ba168b4115ca4"
Last-Modified: Fri, 03 Feb 2023 15:11:59 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 621
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793c76a2fa5b0b02-OSL
ocsp.digicert.com/
200 OK 280 B IP
Hash 253bf3de818495c8ab27746f1f61de24
6014a6d91da00d12a8a0f90fb25b10a81efe83a9
2d419071b15f4ad756faa53f1bbf64471e729f4024cdc2de60a09722e9c6544f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4475
Cache-Control: max-age=113193
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 16:15:06 GMT
Etag: "63dc38b8-118"
Expires: Sat, 04 Feb 2023 23:41:39 GMT
Last-Modified: Thu, 02 Feb 2023 22:27:04 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
lbfm.lbpictupian.com/upload/vod/2023/01/opwdgzucbqn.jpg
200 OK 4.6 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/opwdgzucbqn.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4d145cebb950c4ccce321a73bce799fc
84267505a4cfe9fb1ef7d2b150a56c7217eaae41
83cb6e09374f146a2db4e2474717982f0693cf3ae9ab9514c9b014e017c43c59
GET /upload/vod/2023/01/opwdgzucbqn.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: image/webp
content-length: 4560
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7128
content-disposition: inline; filename="opwdgzucbqn.webp"
etag: "63d3ad1c-1bd8"
last-modified: Fri, 27 Jan 2023 10:53:16 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1526
accept-ranges: bytes
server: cloudflare
cf-ray: 793c76a45d14b521-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 253bf3de818495c8ab27746f1f61de24
6014a6d91da00d12a8a0f90fb25b10a81efe83a9
2d419071b15f4ad756faa53f1bbf64471e729f4024cdc2de60a09722e9c6544f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4476
Cache-Control: max-age=113193
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 16:15:07 GMT
Etag: "63dc38b8-118"
Expires: Sat, 04 Feb 2023 23:41:40 GMT
Last-Modified: Thu, 02 Feb 2023 22:27:04 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
lbfm.lbpictupian.com/upload/vod/2023/01/0xztxom25yo.jpg
200 OK 8.8 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/0xztxom25yo.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a67073553ca9a089cbfae66b219187ed
bdd18803a3b0cb93a74a1845efa483ca773a5a45
c42be3eaa01f5102db5d100ba28fe075b340906a6364c30e65384988edba4aff
GET /upload/vod/2023/01/0xztxom25yo.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/webp
content-length: 8846
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9884
content-disposition: inline; filename="0xztxom25yo.webp"
etag: "63d3ad19-269c"
last-modified: Fri, 27 Jan 2023 10:53:13 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1527
accept-ranges: bytes
server: cloudflare
cf-ray: 793c76a5cf45b521-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 790b51b5eab785512f7fea3ec5c11974
f7cde5e901fefa3d3a1887256f9a74866d086643
507d27c91dd11aadd89952ed57c88f98bcaaf2bbcda64e9665b9a9f9df043b49
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "507D27C91DD11AADD89952ED57C88F98BCAAF2BBCDA64E9665B9A9F9DF043B49"
Last-Modified: Thu, 02 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19434
Expires: Fri, 03 Feb 2023 21:39:01 GMT
Date: Fri, 03 Feb 2023 16:15:07 GMT
Connection: keep-alive
2k.qfbj2.com/template/web/app1.js
200 OK 976 B URL HTTP/2 2k.qfbj2.com/template/web/app1.js
IP
File type HTML document, Unicode text, UTF-8 text
Hash 3a5cf67b2dd840424437d6b66ca4046a
ae9eb38cac80bc889c0175d5fee8dbd53c7aa51a
c537f18897c485db8fa26d67da2a0f7bada1b7c6d45a2808832555245c27bd06
GET /template/web/app1.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: application/javascript
content-length: 976
last-modified: Fri, 03 Feb 2023 10:06:15 GMT
etag: "63dcdc97-3d0"
expires: Sat, 04 Feb 2023 04:15:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/app2.js
200 OK 1.0 kB URL HTTP/2 2k.qfbj2.com/template/web/app2.js
IP
File type HTML document, Unicode text, UTF-8 text
Hash 6311b6daaaa572feefb55083cb884d04
e3334491384e2ac429b326ef538794896d02244e
ed3d6f4b3b2cc7beeb49c4f53833c95488938e2744e880e53cf89152f8c41765
GET /template/web/app2.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: application/javascript
content-length: 1002
last-modified: Wed, 01 Feb 2023 07:32:50 GMT
etag: "63da15a2-3ea"
expires: Sat, 04 Feb 2023 04:15:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/
200 OK 12 kB IP
Hash f34d11552b1d5e26bb9931be4d333405
fef97b67f9ce12e82df2781c5b43dd60e7da4587
12c85d304228021b681af5c91d961e4c8188384cf31ce783f0913f29fce27bb2
GET / HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.iweixinqun.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0105c12000ae3a0t3DD7A.gif?proc=autoorient
200 OK 489 kB URL HTTP/2 dimg04.c-ctrip.com/images/0105c12000ae3a0t3DD7A.gif?proc=autoorient
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 489 kB (488987 bytes)
Hash 6a7d54ecdc2d1cce357d304db217ccec
03a803d54b6a1dd16cba5d73bf4e732d8b7be263
7cd4479b97a015f11a04b2d7d94fbe78030a7e0e3de457bf72abdbf53235c7d8
GET /images/0105c12000ae3a0t3DD7A.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 488987
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=5336446
expires: Thu, 06 Apr 2023 10:35:53 GMT
date: Fri, 03 Feb 2023 16:15:07 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/dipiao.js
200 OK 1.3 kB URL HTTP/2 2k.qfbj2.com/template/web/dipiao.js
IP
File type ASCII text, with very long lines (2074), with no line terminators
Hash ea1ec3df73f9bed981b63d973ed95971
91eddf120108a96bd22922a4eeb38a2fa1e23206
6a59871a70ab05091adb826765304932e78b6460080e610d2d562c869aa0d945
GET /template/web/dipiao.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: application/javascript
last-modified: Sun, 15 May 2022 14:24:29 GMT
vary: Accept-Encoding
etag: W/"62810d1d-81a"
expires: Sat, 04 Feb 2023 04:15:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?674b1250ebe3357f3f326b242e6a4358
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?674b1250ebe3357f3f326b242e6a4358
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash 2d8b40e60bd0c092df19bcf885b4ce07
85ede6036541d089da974e2c719b3141abf7435c
9937217b15cf4cd54054dc17831980b571995c05a6419a323f46fe9ca2d5906c
GET /hm.js?674b1250ebe3357f3f326b242e6a4358 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.iweixinqun.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Fri, 03 Feb 2023 16:15:07 GMT
Etag: 486e0f600863bd77a690747341bdabe3
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=26923B6547BE3C67; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ttzytp3.com/upload/vod/20230203-1/7ff74cad7dd530b7f9e8235dd6c6c12f.jpg
200 OK 171 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/7ff74cad7dd530b7f9e8235dd6c6c12f.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 171 kB (171011 bytes)
Hash 115accebb5f2bfe532231fc790146a49
7bc3e473d8658b0f5c618c282fe7dfc12f140d0f
901016d24a37da8774b4f0b8990687b866d8f8e6cadc5093a24791f7ebf7811d
GET /upload/vod/20230203-1/7ff74cad7dd530b7f9e8235dd6c6c12f.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: image/jpeg
Content-Length: 171011
Last-Modified: Fri, 03 Feb 2023 03:09:57 GMT
Connection: keep-alive
ETag: "63dc7b05-29c03"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/2fb3f5c1a31dc4f5dc0e2e0390088ddf.jpg
200 OK 179 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/2fb3f5c1a31dc4f5dc0e2e0390088ddf.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 179 kB (178978 bytes)
Hash e1ce39dd62b6ad9ce1974b25d4c9c1e8
3b699be57e9828ac4460de6e21d745bc5b4bc924
265591c3feb660d1a57d7bf14129d70a79a424ed37da1c0612d3a81b41e7189b
GET /upload/vod/20230203-1/2fb3f5c1a31dc4f5dc0e2e0390088ddf.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: image/jpeg
Content-Length: 178978
Last-Modified: Fri, 03 Feb 2023 03:09:56 GMT
Connection: keep-alive
ETag: "63dc7b04-2bb22"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/meizhuama/css/ate.css
200 OK 320 kB URL HTTP/2 2k.qfbj2.com/template/meizhuama/css/ate.css
IP
Size 320 kB (319730 bytes)
Hash 877d4b25b8e6a7f916a8171d8216dedf
71f2061a1f8f20a691a1806fb136f2be13a2808a
461af89b49d4ba02b4d797e440935acb6e5944539b5493692bde13db1bf88002
GET /template/meizhuama/css/ate.css HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: text/css
last-modified: Tue, 13 Sep 2022 05:55:21 GMT
vary: Accept-Encoding
etag: W/"63201b49-13021"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/4bfc1b6667b1ce04090a5379b973163e.jpg
200 OK 173 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/4bfc1b6667b1ce04090a5379b973163e.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 173 kB (173304 bytes)
Hash 21a9ab0fbbfa191c70d7a254eae00e19
b151e7ed0d73b5d16b5ab5eef71e7e1a6bc5babc
3ed81871ae3f600f3933337ddf39cda35cc6ba7f97f76040eeff8ef7e03bd0e8
GET /upload/vod/20230203-1/4bfc1b6667b1ce04090a5379b973163e.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: image/jpeg
Content-Length: 173304
Last-Modified: Fri, 03 Feb 2023 03:09:56 GMT
Connection: keep-alive
ETag: "63dc7b04-2a4f8"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/ece28129334d477953f24a7dd9109fe2.jpg
200 OK 191 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/ece28129334d477953f24a7dd9109fe2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 191 kB (190823 bytes)
Hash 26bf75dfd3c45d4958f543ef840ff22c
030dce005b340561871fd7d828e3f204581eec66
b21171f4762286f22ed2b7edaebdffcefc8c6c486b5d032ca90a78926f00cac6
GET /upload/vod/20230203-1/ece28129334d477953f24a7dd9109fe2.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: image/jpeg
Content-Length: 190823
Last-Modified: Fri, 03 Feb 2023 03:09:56 GMT
Connection: keep-alive
ETag: "63dc7b04-2e967"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/8de470934b1e24712c277c1b6af73d52.jpg
200 OK 200 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/8de470934b1e24712c277c1b6af73d52.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 200 kB (199787 bytes)
Hash 8f32e7dbe5217a4e7970317deaf6b299
13cd07674b4861b7938156822a61e106da35b048
b7a9215186157322574d33815c1dfcda1ab7d1b9b114f097b15fbed082a98587
GET /upload/vod/20230203-1/8de470934b1e24712c277c1b6af73d52.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: image/jpeg
Content-Length: 199787
Last-Modified: Fri, 03 Feb 2023 03:08:44 GMT
Connection: keep-alive
ETag: "63dc7abc-30c6b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.pki.goog/s/gts1p5/CasV9vn2MN4
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/CasV9vn2MN4
IP
Hash 67a8b31cc909010741ac7c4b3e359888
c3576182a41fac471413b0ab41643162e1d7efa5
f7ca34037ea773b47b2f2ecb9308d49d50c7461e275b925d4a5dab077aa41665
POST /s/gts1p5/CasV9vn2MN4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 16:15:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3821
Expires: Fri, 03 Feb 2023 17:18:49 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3821
Expires: Fri, 03 Feb 2023 17:18:49 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3821
Expires: Fri, 03 Feb 2023 17:18:49 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3821
Expires: Fri, 03 Feb 2023 17:18:49 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf80667db0c35c9c6139eca4ba5d12fd
4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590
d63e69f4b6ea16333d242bf33d4f02a4a6c96a739ca018d86afc5741d85b774d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13065
x-amzn-requestid: 20c6f462-0f1f-44d1-9b6b-6afbc4e79e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpYpcELtIAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da07d5-44cd803c0feba28919b0a9ec;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 06:33:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T3PhGRcHX1X2hn8K_4587fXBrEyuY5Em-b9Jg41uH4uyQXeFoRBIYg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:55:01 GMT
age: 66007
etag: "4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G0R-0w9HtLB5OXb-w-RyR9QCnrddkS29FqF_GeAQa1CRWkqaUJwQoA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:27:53 GMT
age: 64035
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 00:25:04 GMT
age: 57004
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 04:53:21 GMT
age: 40907
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e706db8a6107758a148463e916f2532d
4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81
673f18036a53f8ff297ef6a63fd094e7c41d90f3960f0e687a741cc7dd3f6172
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6791
x-amzn-requestid: 665115ea-728e-4a55-aaf8-b09db3fa67a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffl96FIzIAMFYGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61d25-0abbd7262ca10b7a7d2bf9eb;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:15:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T-OEFTj1rywKfBhEUUD0Rc6pFbk-gyFsETr_fjDQR5WGHAVOBgrB9A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 19:18:01 GMT
age: 75427
etag: "4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:28:50 GMT
age: 63978
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/CasV9vn2MN4
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/CasV9vn2MN4
IP
Hash 67a8b31cc909010741ac7c4b3e359888
c3576182a41fac471413b0ab41643162e1d7efa5
f7ca34037ea773b47b2f2ecb9308d49d50c7461e275b925d4a5dab077aa41665
POST /s/gts1p5/CasV9vn2MN4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 16:15:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2k.qfbj2.com/template/meizhuama/css/seyuav-ui.css
200 OK 486 kB URL HTTP/2 2k.qfbj2.com/template/meizhuama/css/seyuav-ui.css
IP
Size 486 kB (485972 bytes)
Hash 0f3f62d433602e1f65632667b490bb6b
b9ecbd98a2634a3b1c2ae333a34d7b9560c682b4
f9a0d5ea213fc433ac8ca6902297a9c868b90711f948164e28d830cb0fec4c0a
GET /template/meizhuama/css/seyuav-ui.css HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: text/css
last-modified: Fri, 02 Dec 2022 14:32:33 GMT
vary: Accept-Encoding
etag: W/"638a0c81-8a77"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/x.jpg
200 OK 9.2 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3\012- data
Hash 43ae14560cdbc69ce960a28002f04309
4dc694c2754882f840c77807016676732c38138b
af0e248de25efb22e6edd4e1453e686154b00ce5039f94dceb2684a332ddad0e
GET /template/web/GG/x.jpg HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/jpeg
content-length: 9166
last-modified: Thu, 02 Jun 2022 15:47:42 GMT
etag: "6298db9e-23ce"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/k16.gif
200 OK 35 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k16.gif
IP
File type GIF image data, version 89a, 80 x 80\012- data
Hash 788b44c904a7b3a60753805c4763385a
b1f2664a0e3259acd09324e70d41dc0901cc6a8c
bcde8e39467e6c7540e7c1606161eea9a61e860f90616a0e05b6d0d2db0b86e1
GET /template/web/GG/k16.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 34559
last-modified: Sat, 04 Jun 2022 02:42:10 GMT
etag: "629ac682-86ff"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230109-1/2247f4ae4c8dbbfbd1858fd86425659e.jpg
200 OK 183 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230109-1/2247f4ae4c8dbbfbd1858fd86425659e.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x535, components 3\012- data
Size 183 kB (182610 bytes)
Hash 8c35f659faa6ea3ccca35693b7810056
96271f2837589aba79f6cfb6a957a241e3224c43
742c5f87865177630e40a11d70b27864e8fe162dd0fa11bcd8af2da85f92a0f7
GET /upload/vod/20230109-1/2247f4ae4c8dbbfbd1858fd86425659e.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 182610
Last-Modified: Wed, 01 Feb 2023 18:38:43 GMT
Connection: keep-alive
ETag: "63dab1b3-2c952"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/d5.gif
200 OK 100 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/d5.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash 025124b1ea32550544628c7205331a35
6015322cd2faae4cc93266267838878350ac5c70
b1f29051a416097599fa35479620adab7e3f3b5dac8d18c19147eff65955db21
GET /template/web/GG/d5.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 99494
last-modified: Wed, 16 Mar 2022 16:12:20 GMT
etag: "62320c64-184a6"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/31.gif
200 OK 108 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/31.gif
IP
File type GIF image data, version 89a, 96 x 96\012- data
Size 108 kB (108160 bytes)
Hash 8765a4504945e44a16e9fe1c643802bf
a830d6cad304c1007e82fc742cc7855fff8d6a7c
d4ce24af068e48c2339af354f585f37940cc318d83110e313056ebc0d4058b4b
GET /template/web/GG/31.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 108160
last-modified: Wed, 09 Mar 2022 10:15:26 GMT
etag: "62287e3e-1a680"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/meizhuama/fonts/1e500f419c3a4f24a89cb2dddf17de88.woff
404 Not Found 146 B URL HTTP/2 2k.qfbj2.com/template/meizhuama/fonts/1e500f419c3a4f24a89cb2dddf17de88.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /template/meizhuama/fonts/1e500f419c3a4f24a89cb2dddf17de88.woff HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://2k.qfbj2.com/template/meizhuama/css/zui.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
2k.qfbj2.com/template/meizhuama/images/video-play.png
200 OK 1.6 kB URL HTTP/2 2k.qfbj2.com/template/meizhuama/images/video-play.png
IP
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/meizhuama/images/video-play.png HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/template/meizhuama/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/png
content-length: 1567
last-modified: Sun, 06 Mar 2022 14:17:50 GMT
etag: "6224c28e-61f"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/4d51bfc2794baababeb17e8ee4681ed2.jpg
200 OK 205 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/4d51bfc2794baababeb17e8ee4681ed2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 205 kB (205107 bytes)
Hash 83534ab73950aa4fce358e801b53cff4
08fde9521f480abff67634e05f2de66af2f95004
de1a78d694810b91c9a5b1639b8f41f4ecded3cff4a2aa81ad05109a16302bbe
GET /upload/vod/20230203-1/4d51bfc2794baababeb17e8ee4681ed2.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 205107
Last-Modified: Fri, 03 Feb 2023 03:08:44 GMT
Connection: keep-alive
ETag: "63dc7abc-32133"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 7ef4918a25b99cb2f1fd6049344e0f97
50bbeb9705b5025c382c3293c548fef54a1f4c8e
02e9562a6128e25ee4af3b9a2cc992a5118f987490b5af0926c1f2d4e046148c
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 07 Feb 2023 13:07:39 GMT
ETag: "50bbeb9705b5025c382c3293c548fef54a1f4c8e"
Last-Modified: Fri, 03 Feb 2023 13:07:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793c76ac5caf0b02-OSL
ttzytp3.com/upload/vod/20230203-1/e28485ab2105e6da358d0cc900578c76.jpg
200 OK 200 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/e28485ab2105e6da358d0cc900578c76.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 200 kB (200068 bytes)
Hash 8c6f22302c4315df1ba3fa1454367636
9122e5943ec6f2a7737667469467cc46f359ec81
301cd12de6be9fba93fe8208187d9c75d3cb787eb462705e469aae905a5a7455
GET /upload/vod/20230203-1/e28485ab2105e6da358d0cc900578c76.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 200068
Last-Modified: Fri, 03 Feb 2023 03:06:52 GMT
Connection: keep-alive
ETag: "63dc7a4c-30d84"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/ee0f9464b838a36b0825c3e8bad6005d.jpg
200 OK 634 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/ee0f9464b838a36b0825c3e8bad6005d.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2874, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4177], progressive, precision 8, 800x539, components 3\012- data
Size 634 kB (634445 bytes)
Hash f475b939c4c23cec7aa315857b438d73
9eddfe2f500ed280b7e61b63aa2658dd901e0a38
f4aec6a479ca438fb4c9de902327ab08371b01ca68134f2b15ab87068985f2c6
GET /upload/vod/20230203-1/ee0f9464b838a36b0825c3e8bad6005d.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:07 GMT
Content-Type: image/jpeg
Content-Length: 634445
Last-Modified: Fri, 03 Feb 2023 03:08:44 GMT
Connection: keep-alive
ETag: "63dc7abc-9ae4d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=988448779&si=674b1250ebe3357f3f326b242e6a4358&v=1.3.0&lv=1&sn=38665&r=0&ww=1280&u=http%3A%2F%2Fwww.iweixinqun.net%2Findex.php&tt=%E9%80%9A%E5%8C%96%E8%8F%8A%E7%BB%BD%E5%B8%82%E5%9C%BA%E8%90%A5%E9%94%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=988448779&si=674b1250ebe3357f3f326b242e6a4358&v=1.3.0&lv=1&sn=38665&r=0&ww=1280&u=http%3A%2F%2Fwww.iweixinqun.net%2Findex.php&tt=%E9%80%9A%E5%8C%96%E8%8F%8A%E7%BB%BD%E5%B8%82%E5%9C%BA%E8%90%A5%E9%94%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=988448779&si=674b1250ebe3357f3f326b242e6a4358&v=1.3.0&lv=1&sn=38665&r=0&ww=1280&u=http%3A%2F%2Fwww.iweixinqun.net%2Findex.php&tt=%E9%80%9A%E5%8C%96%E8%8F%8A%E7%BB%BD%E5%B8%82%E5%9C%BA%E8%90%A5%E9%94%80%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.iweixinqun.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 03 Feb 2023 16:15:08 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=54B55D192DBB8AA8; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 247c15569911e2fb3e2f901dee9246f7
5fe83850b55fea67270437eca41c18cbc19adc7f
e071fd0f5e808af5c7835b521301df0b015ad5dc58677f7b234c78ade99e2af8
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Tue, 07 Feb 2023 13:45:47 GMT
ETag: "5fe83850b55fea67270437eca41c18cbc19adc7f"
Last-Modified: Fri, 03 Feb 2023 13:45:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 181
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793c76ade9a00b45-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 247c15569911e2fb3e2f901dee9246f7
5fe83850b55fea67270437eca41c18cbc19adc7f
e071fd0f5e808af5c7835b521301df0b015ad5dc58677f7b234c78ade99e2af8
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Tue, 07 Feb 2023 13:45:47 GMT
ETag: "5fe83850b55fea67270437eca41c18cbc19adc7f"
Last-Modified: Fri, 03 Feb 2023 13:45:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 181
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793c76adeb890b61-OSL
ttzytp3.com/upload/vod/20230203-1/3b81235b5aefbaa1ff492f394f8a70e6.jpg
200 OK 179 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/3b81235b5aefbaa1ff492f394f8a70e6.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 179 kB (179314 bytes)
Hash 8437fb9c3058e728d69974ea15f8af71
7a8dc7f9cae5552112cba53d1d95611a42f143f7
e6766683ceccbbc1a61573e30f140adbf01b107a477a6ee127ed16fa6f4d5ade
GET /upload/vod/20230203-1/3b81235b5aefbaa1ff492f394f8a70e6.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 179314
Last-Modified: Fri, 03 Feb 2023 03:06:52 GMT
Connection: keep-alive
ETag: "63dc7a4c-2bc72"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/a1758e07a9dcf6e3960790e20863cc3e.jpg
200 OK 244 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/a1758e07a9dcf6e3960790e20863cc3e.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x536, components 3\012- data
Size 244 kB (244052 bytes)
Hash 845a1b46aa5213923b8b683ab0b41cdc
d0359b2cc30dc0739f6e771049298c2857db104b
124020feeefbe71f774295caedb8babbeb4df2ea50b93df0e9fc1175d0519dd1
GET /upload/vod/20230203-1/a1758e07a9dcf6e3960790e20863cc3e.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 244052
Last-Modified: Fri, 03 Feb 2023 03:06:52 GMT
Connection: keep-alive
ETag: "63dc7a4c-3b954"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/k2.gif
200 OK 32 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k2.gif
IP
File type GIF image data, version 89a, 80 x 80\012- data
Hash 0dbd3863b60a1e8e0a507a6092e3acbd
81f0cfad3a7369aa95b1b507a5ce46149cd4e4fe
d3829461b69847e6df417e8eb4c4046ae45864fbb7d3646e7b1346a861bd893e
GET /template/web/GG/k2.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 32381
last-modified: Fri, 27 May 2022 05:30:54 GMT
etag: "6290620e-7e7d"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g3
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g3
IP
Hash c8f60eace429a7a24a4975a62d438ca3
1b7ce48de17a5b401a5f65ef60f89643566a4c50
713ba87ead83361d915c71bf68588173e0ca4715171f0d7e3e2afb2eed70727c
POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Tue, 07 Feb 2023 13:47:50 GMT
ETag: "1b7ce48de17a5b401a5f65ef60f89643566a4c50"
Last-Modified: Fri, 03 Feb 2023 13:47:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1526
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793c76ae49f30b45-OSL
hm.baidu.com/hm.js?7a63494bcb7782c2d15cc8728f4c5059
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?7a63494bcb7782c2d15cc8728f4c5059
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (619)
Hash 2d9f488f19badf87ca3ac3e0d179b5db
08c121710d0ec4051a46f4fa63ea2184423ba010
f85b2a54abc60a650fb9ad1fa37f5c9f6bc64e6639491dd9d4473c9dff9686b2
GET /hm.js?7a63494bcb7782c2d15cc8728f4c5059 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Fri, 03 Feb 2023 16:15:08 GMT
Etag: 09e1959b140363a30d0de7cfb3cd6eb8
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=0938915EDA941131; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ttzytp3.com/upload/vod/20230203-1/e54b2ca753acdd7a49e11bd2b55e4510.jpg
200 OK 175 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/e54b2ca753acdd7a49e11bd2b55e4510.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 175 kB (174878 bytes)
Hash 8fbae498327a41999ed313749ce0d947
7135ffbd391051b0e136af62c9447f327258eab5
79c56bf2f96a0a04c9e4c79d7d6d481bb9bb0f96478126ccc7004028d8cc69e9
GET /upload/vod/20230203-1/e54b2ca753acdd7a49e11bd2b55e4510.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 174878
Last-Modified: Fri, 03 Feb 2023 03:06:51 GMT
Connection: keep-alive
ETag: "63dc7a4b-2ab1e"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/3c5e14a4f8d61a27d88801a3d58d975b.jpg
200 OK 177 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/3c5e14a4f8d61a27d88801a3d58d975b.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 177 kB (176786 bytes)
Hash 975c17bc76dd74715c27c04c0d703d6b
7e5afbb8e13df64dc5a32e53a88071703ee4acec
16d14fc80e8d99afc73b199abe26d9ffde5ad39bf4483eab6ba76de556c7d61c
GET /upload/vod/20230203-1/3c5e14a4f8d61a27d88801a3d58d975b.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 176786
Last-Modified: Fri, 03 Feb 2023 03:06:52 GMT
Connection: keep-alive
ETag: "63dc7a4c-2b292"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/k6.gif
200 OK 53 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k6.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Hash 74d864001115d3b123c552156accfbef
11ae3aef174b8fab213faa40b1b985f77dada46f
9001f1548a09cf89715469dc8d009f7aebb1a459d261c73a2f35d252bf88b4c8
GET /template/web/GG/k6.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 53324
last-modified: Fri, 27 May 2022 05:30:58 GMT
etag: "62906212-d04c"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3dfa693ecc48bef05cd6bb5786f22370
0c88e861813a3f7ba4f0114302f7caf74a971e35
bcead8a0fb3711af0eabf0a8a0bea8c9bcf0ca8bffd8fe611f0d0b8b9b2e4788
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCEAD8A0FB3711AF0EABF0A8A0BEA8C9BCF0CA8BFFD8FE611F0D0B8B9B2E4788"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18307
Expires: Fri, 03 Feb 2023 21:20:15 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 78ea059162037900655ee3c91ba8f5d0
c43647c642a8513663e96d7a06cca24ade32c0ef
2cc6804c082546261ebeb16b474af44674af6c1bff90c0e1860641e9c223ed91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CC6804C082546261EBEB16B474AF44674AF6C1BFF90C0E1860641E9C223ED91"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11428
Expires: Fri, 03 Feb 2023 19:25:36 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
ttzytp3.com/upload/vod/20230203-1/12f9ad906cde5862375071ca62e68d03.jpg
200 OK 37 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/12f9ad906cde5862375071ca62e68d03.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 310x208, components 3\012- data
Hash afeed4e2fb0c3f6bc4cd71d002ac8bb7
0748723f2504fc21ba3bec708c5e53bfb160ad52
7a08760c5a6cb96913e057611133f8a86c0d596e5c1ef6318566e6aa670b43e5
GET /upload/vod/20230203-1/12f9ad906cde5862375071ca62e68d03.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 36989
Last-Modified: Fri, 03 Feb 2023 03:06:35 GMT
Connection: keep-alive
ETag: "63dc7a3b-907d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3dfa693ecc48bef05cd6bb5786f22370
0c88e861813a3f7ba4f0114302f7caf74a971e35
bcead8a0fb3711af0eabf0a8a0bea8c9bcf0ca8bffd8fe611f0d0b8b9b2e4788
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCEAD8A0FB3711AF0EABF0A8A0BEA8C9BCF0CA8BFFD8FE611F0D0B8B9B2E4788"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19407
Expires: Fri, 03 Feb 2023 21:38:35 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g3
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g3
IP
Hash 53861f51baf41d2cc493798cd29d1ec7
8fc89684a436ae41e2650fcbb61ec096e410eb1a
eabee428664ca4f0f92663c5be048d24d873188ccaeff95a36c4c8bc5bbc5eae
POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Tue, 07 Feb 2023 14:38:09 GMT
ETag: "8fc89684a436ae41e2650fcbb61ec096e410eb1a"
Last-Modified: Fri, 03 Feb 2023 14:38:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3165
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793c76af3ab80b45-OSL
2k.qfbj2.com/template/web/GG/k4.gif
200 OK 114 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k4.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Size 114 kB (114030 bytes)
Hash 79cf722c45cb4e5b3e7da0cfff829c98
71558743109d39b3163e3e873111641615c6f80c
37336e1d469f511d19c69cd7e3576ef2665204c7304e0b8dd2ec051dd78309e3
GET /template/web/GG/k4.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 114030
last-modified: Fri, 27 May 2022 05:30:56 GMT
etag: "62906210-1bd6e"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/d10.gif
200 OK 119 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/d10.gif
IP
File type GIF image data, version 89a, 150 x 150\012- data
Size 119 kB (119145 bytes)
Hash 03611dd134898d951bd6479076eee32b
4aef7215e5d6206ededff3fff78d735064e6fbb5
9c3ea4fa33413bfe2175b5e9eac750617538bafe475a84367d0c6d693c75c076
GET /template/web/GG/d10.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 119145
last-modified: Sat, 23 Apr 2022 04:49:11 GMT
etag: "62638547-1d169"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/k14.gif
200 OK 73 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k14.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash 6ce732040d4d9750ef120f2a4221f362
f3114f09ed27718c62d54d6fbe08847421429a00
bf4e102a698f9d805b4d4209c8ca62ca20565344a8949d0efeedc6a720026c5b
GET /template/web/GG/k14.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 73223
last-modified: Sat, 28 May 2022 04:43:32 GMT
etag: "6291a874-11e07"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/6482fc37dcdfe265022b4929a13ffcd8.jpg
200 OK 621 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/6482fc37dcdfe265022b4929a13ffcd8.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3406, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4178], progressive, precision 8, 800x539, components 3\012- data
Size 621 kB (621144 bytes)
Hash 37445f2d052bb475d09fcb3b00e27ae9
4dc01d289468f81fb720d75f78ca1deaeac198f8
9a56f8f38a321b0211adef2e79a37e497664d1e77b4926b137731029d015ba63
GET /upload/vod/20230203-1/6482fc37dcdfe265022b4929a13ffcd8.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 621144
Last-Modified: Fri, 03 Feb 2023 03:06:51 GMT
Connection: keep-alive
ETag: "63dc7a4b-97a58"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/a06.gif
200 OK 111 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/a06.gif
IP
File type GIF image data, version 89a, 108 x 108\012- data
Size 111 kB (110624 bytes)
Hash e3240f80fa3623e4bc4675c955beb241
fb5f06e85933d6e6a8e0f98e28c16b44844b3ae3
d595e4b9e1341db392c7d348474e94c200802c5e35290b7e4f9a4a4ad653bd1d
GET /template/web/GG/a06.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 110624
last-modified: Sat, 18 Jun 2022 04:10:23 GMT
etag: "62ad502f-1b020"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/k7.gif
200 OK 104 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k7.gif
IP
File type GIF image data, version 89a, 71 x 71\012- data
Size 104 kB (104461 bytes)
Hash 9e38a9cebde88f45563c4aae36723d3a
126439ba503fc1757864c12e086fd0f1a165a4bc
93054ef4224e847d308892f23ca8d0bf210d5ba26d8c39502eb7016efd97501d
GET /template/web/GG/k7.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 104461
last-modified: Fri, 27 May 2022 05:30:59 GMT
etag: "62906213-1980d"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/11.gif
200 OK 76 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/11.gif
IP
File type GIF image data, version 89a, 200 x 99\012- data
Hash b91a52dc89525aa53fa4cc9f51313fa5
04be88b70acd504b7bf5a9bb107b63da8c488639
91b59a9d450ebdc06502d1279ee2eef209a84a5d0434a46874a32c9bbc831ba9
GET /template/web/GG/11.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 76147
last-modified: Wed, 11 May 2022 08:23:40 GMT
etag: "627b728c-12973"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0a7e1e5783ed1d7dc3691302e67f7f26
f538e52ce2c5bbf27ee211b7700e706a68097252
7428ef707df6d9862b4e9a53ff59998da6c95dd1d5f323c8191859e2ab32b079
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7428EF707DF6D9862B4E9A53FF59998DA6C95DD1D5F323C8191859E2AB32B079"
Last-Modified: Wed, 01 Feb 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 03 Feb 2023 22:15:08 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
2k.qfbj2.com/template/web/GG/k20.gif
200 OK 102 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k20.gif
IP
File type GIF image data, version 89a, 124 x 124\012- data
Size 102 kB (101861 bytes)
Hash da1fca07307a6c03cdcfb2d47313113a
f28a95877fad9e725a287466984d496ef7d53afb
9529e1f4226891780f02c558b7b75427b86eb8afa9e5667fd6e8527abf322209
GET /template/web/GG/k20.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 101861
last-modified: Sat, 04 Jun 2022 02:42:14 GMT
etag: "629ac686-18de5"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/17063678c009113b96346e17fcad1039.jpg
200 OK 189 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/17063678c009113b96346e17fcad1039.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 189 kB (188993 bytes)
Hash deb9cd73faa42e0b02009ecb18407235
787a7018f5edea7e97fd59d02f167ad54e86b28b
412e752e9656170ce094f53ec5bfae9ded789487fae88425c19cdefca350f9df
GET /upload/vod/20230203-1/17063678c009113b96346e17fcad1039.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 188993
Last-Modified: Fri, 03 Feb 2023 03:06:47 GMT
Connection: keep-alive
ETag: "63dc7a47-2e241"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/a08.gif
200 OK 80 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/a08.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Hash 3b6a5179b4a06bb8c98cab3aeaa698ed
c798dc8b16e3feaf91392cfa1cf839b4556fc243
64d5d65c65f47564411cce16d70dcca2aa83d5ad212ac46d3d9d0ba4ab8aee96
GET /template/web/GG/a08.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 80545
last-modified: Sat, 18 Jun 2022 04:10:24 GMT
etag: "62ad5030-13aa1"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/10f12e3ed1766e56ccd259c7a2811c25.jpg
200 OK 635 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/10f12e3ed1766e56ccd259c7a2811c25.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=4815, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4946], progressive, precision 8, 800x539, components 3\012- data
Size 635 kB (634845 bytes)
Hash fda2f0391472e80bd98d7dd43599cdbf
062274d0bc215ef430518c700d38821946137283
aceb6906f388465e946494d1472c798fa211b24795c884f4142312d88ebb2cb1
GET /upload/vod/20230203-1/10f12e3ed1766e56ccd259c7a2811c25.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 634845
Last-Modified: Fri, 03 Feb 2023 03:06:51 GMT
Connection: keep-alive
ETag: "63dc7a4b-9afdd"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/7.gif
200 OK 159 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/7.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Size 159 kB (159399 bytes)
Hash 7c1ced688d2af934a1800ae8d89a226f
558b8353f1d66992ce01a67ba66af0ac966877bc
5acf95935750544793683da337ec48ecbadd4ecfe5c1b714ad47c97b5849c02f
GET /template/web/GG/7.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 159399
last-modified: Fri, 11 Mar 2022 16:19:12 GMT
etag: "622b7680-26ea7"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/k1.gif
200 OK 167 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k1.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Size 167 kB (167104 bytes)
Hash 9387415ad469299bf6e3bb5c1bbc77e2
cc52974b6ed2239afbbd4088c675fceb0d75cd22
912ce0aceb7de66266542ec85454be033b0a285c975dd7fc8f0d43eecb8716ce
GET /template/web/GG/k1.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 167104
last-modified: Fri, 27 May 2022 05:30:54 GMT
etag: "6290620e-28cc0"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9d3ca3358d06f0949e8f771a6b97409e
f918a6617d7f0e148642d83f2dfff08696b2cad8
794ca699923d451cbb31061f68d78d465eee6dea257fe0a43c61a7460f0c8694
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "794CA699923D451CBB31061F68D78D465EEE6DEA257FE0A43C61A7460F0C8694"
Last-Modified: Thu, 02 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12109
Expires: Fri, 03 Feb 2023 19:36:57 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0a7e1e5783ed1d7dc3691302e67f7f26
f538e52ce2c5bbf27ee211b7700e706a68097252
7428ef707df6d9862b4e9a53ff59998da6c95dd1d5f323c8191859e2ab32b079
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7428EF707DF6D9862B4E9A53FF59998DA6C95DD1D5F323C8191859E2AB32B079"
Last-Modified: Wed, 01 Feb 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 03 Feb 2023 22:15:08 GMT
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
rootnetworksdv.ocsp-certum.com/
200 OK 1.5 kB URL HTTP/1.1 rootnetworksdv.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 20ffb6b30b9616af2de2d063be62c15a
1317e2a40c27d5b9902ef710edc70ff81f50dd95
dd97000a98e09e1db42d5ba1078aa48d654460871fa78749520fc81685456d26
POST / HTTP/1.1
Host: rootnetworksdv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1490
X-Cached: STALE
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
X-N: S
ttzytp3.com/upload/vod/20230203-1/f50a1cd5233034b8c60b7c7ec88ed936.jpg
200 OK 475 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/f50a1cd5233034b8c60b7c7ec88ed936.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=4220, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=5628], progressive, precision 8, 800x539, components 3\012- data
Size 475 kB (475396 bytes)
Hash 6730bf87594f20cb91230d1de9749ff7
c629c324c7d48fe208cda97f9eee6edd2fed50d6
ef1f91b49fef635bf791e490872b56ed1ce8da422d68a5b2d47227339382cc0a
GET /upload/vod/20230203-1/f50a1cd5233034b8c60b7c7ec88ed936.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 475396
Last-Modified: Fri, 03 Feb 2023 03:06:51 GMT
Connection: keep-alive
ETag: "63dc7a4b-74104"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
rootnetworksdv.ocsp-certum.com/
200 OK 1.5 kB URL HTTP/1.1 rootnetworksdv.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash fad83e25e0be9c6c966e9e48067e39eb
aebbf52d4f139e6699b562bfacffefdf8c59b83d
5fbb54b1dc1a9df0f6f4076b95f1ae688baff4f045bdfbbc795113ad0862fc84
POST / HTTP/1.1
Host: rootnetworksdv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1490
X-Cached: STALE
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Fri, 03 Feb 2023 16:15:08 GMT
Connection: keep-alive
X-N: S
ttzytp3.com/upload/vod/20230203-1/c1bf0ebd971ec9c33ed03c43da147de8.jpg
200 OK 192 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/c1bf0ebd971ec9c33ed03c43da147de8.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 192 kB (191663 bytes)
Hash c06a75c46c3f2d02dd6ec179ae9c2b7f
af5a5b6051f9c86f4ee728be7d4097217d270e74
18a0cae7c21a938996912d91ad0cb226be11c0a3ce796bd7c6406a2328c5043a
GET /upload/vod/20230203-1/c1bf0ebd971ec9c33ed03c43da147de8.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 191663
Last-Modified: Fri, 03 Feb 2023 03:06:44 GMT
Connection: keep-alive
ETag: "63dc7a44-2ecaf"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/meizhuama/fonts/iconfont.woff
200 OK 525 B URL HTTP/2 2k.qfbj2.com/template/meizhuama/fonts/iconfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash f66ed8f90ffb0fc831098b7701d3ba8a
1bc63ccb714f1272c80b224aa8fd9da94914825d
6ccac1f3560824c5e11e27d1798e447cfc5a930e5824009d6b1cf8eb98e248de
GET /template/meizhuama/fonts/iconfont.woff HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://2k.qfbj2.com/template/meizhuama/css/zui.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: font/woff
content-length: 525
last-modified: Sun, 06 Mar 2022 14:12:36 GMT
etag: "6224c154-20d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/d2.gif
200 OK 162 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/d2.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Size 162 kB (161572 bytes)
Hash 64c0f3edc7b3bfd2a2c009f3b93ebd7d
70dee1bf54047d14220328f8ab47d299a679a519
ca5ada5bab699078f3ecdb2a2b569bcef9b8b34f6773d2197c0658a55fad5d25
GET /template/web/GG/d2.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 161572
last-modified: Wed, 16 Mar 2022 16:12:17 GMT
etag: "62320c61-27724"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/k15.gif
200 OK 142 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k15.gif
IP
File type GIF image data, version 89a, 235 x 235\012- data
Size 142 kB (141895 bytes)
Hash 0642504c72f3cf9929cfb7544deaca87
16d7028c32010330f5c9f2f8e71a69c4c7bcc859
a102356e14a84a958f692e5e9c2c4d2aa9765bc4cbc3232f9108ec8b46d5b07b
GET /template/web/GG/k15.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 141895
last-modified: Sat, 28 May 2022 04:43:33 GMT
etag: "6291a875-22a47"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/a01.gif
200 OK 156 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/a01.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Size 156 kB (156311 bytes)
Hash c1cd6fbcc60e4242fb31eb894d7d9450
1b0a2ba85f38fa452a391250067e916ac7b61345
aca31490b0e0478395648fb5f6ce318b56a4a443c7a64e069c71cee6c0f0bb44
GET /template/web/GG/a01.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 156311
last-modified: Sat, 18 Jun 2022 04:10:19 GMT
etag: "62ad502b-26297"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/dp1.gif
200 OK 141 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/dp1.gif
IP
File type GIF image data, version 89a, 640 x 200\012- data
Size 141 kB (141174 bytes)
Hash 2846430b1663c942a9d2a92c559667cd
2b7d07a004fa13af572b8d5d6317594c1eee9eec
b1357936607e4478fa840a29b58e6714f0063f4a90e28571bd8c8be4e175d74e
GET /template/web/GG/dp1.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 141174
last-modified: Mon, 25 Apr 2022 12:29:49 GMT
etag: "6266943d-22776"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1509769411&si=7a63494bcb7782c2d15cc8728f4c5059&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38665&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1509769411&si=7a63494bcb7782c2d15cc8728f4c5059&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38665&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1509769411&si=7a63494bcb7782c2d15cc8728f4c5059&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38665&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 03 Feb 2023 16:15:08 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=53608AD0032B7F74; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ttzytp3.com/upload/vod/20230203-1/cdc639dd2f152bbc8221ae560fadd2fb.jpg
200 OK 549 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/cdc639dd2f152bbc8221ae560fadd2fb.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2965, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4218], progressive, precision 8, 800x539, components 3\012- data
Size 549 kB (548626 bytes)
Hash 2c9a58c03b06db154551733ae70813aa
4309e9aca8b99f8bf7eb44c08d57d689af9ee4a2
6471cd178e95440658018f332ca7f776531907621e8e2144526eb84e68627cb8
GET /upload/vod/20230203-1/cdc639dd2f152bbc8221ae560fadd2fb.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 548626
Last-Modified: Fri, 03 Feb 2023 03:06:44 GMT
Connection: keep-alive
ETag: "63dc7a44-85f12"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 78f0cb90b4adaca7030d5ef2838946c6
49b9e5f7b75f0150a55bdb80bc1b147d7ce7e920
fa1d7f1f5ffe762c9d83d574e1ddb1a8df7e2a40e0c215edab99bd913c0b36b7
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107518
Date: Fri, 03 Feb 2023 16:15:08 GMT
Etag: "63dc1d81-1d7"
Expires: Sat, 04 Feb 2023 22:07:06 GMT
Last-Modified: Thu, 02 Feb 2023 20:30:57 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nk5tttP3FKHPjorY0nkDKlhpWdtYBkjhmS5U00IEc5FNScT7UsW-uQ==
Age: 5769
2k.qfbj2.com/template/web/GG/t1.gif
200 OK 221 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/t1.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Size 221 kB (221303 bytes)
Hash 633e79a4d76e09af28eb7617340a6330
0aaef1ed9eed51ca839c4b8e88ca4988e27ec6cb
7363c1c913be071eb6240c6600c17b65e81b092944bb5f14c7013b5f96190fb3
GET /template/web/GG/t1.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 221303
last-modified: Tue, 10 May 2022 09:20:00 GMT
etag: "627a2e40-36077"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/a07.gif
200 OK 356 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/a07.gif
IP
File type GIF image data, version 89a, 344 x 292\012- data
Size 356 kB (355956 bytes)
Hash 7fcc1b0bc144505a6445039f16e7ae84
c102af587f677b89bb65f7e850a4ca4b41a45456
409d94d159f6c851b76881b6937460458b25a246e45bf6ab98f34efd9474ede8
GET /template/web/GG/a07.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 355956
last-modified: Sat, 18 Jun 2022 04:10:23 GMT
etag: "62ad502f-56e74"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/efb705f3008747733c0e90b53a5ac7fe.jpg
200 OK 595 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/efb705f3008747733c0e90b53a5ac7fe.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3065, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4319], progressive, precision 8, 800x539, components 3\012- data
Size 595 kB (595160 bytes)
Hash 86e88af71d36b21f1d4d60333d840977
5bab7def15d6b7f1c5b0d16b6ba7624f919edc4a
c6666c4612d71d71d7c742532ae4fdf30494884f41c3395243cb254e08bdd5df
GET /upload/vod/20230203-1/efb705f3008747733c0e90b53a5ac7fe.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 595160
Last-Modified: Fri, 03 Feb 2023 03:10:06 GMT
Connection: keep-alive
ETag: "63dc7b0e-914d8"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/fbfa1fcf111350f097ed22e3652140d5.jpg
200 OK 556 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/fbfa1fcf111350f097ed22e3652140d5.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2935, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4112], progressive, precision 8, 800x539, components 3\012- data
Size 556 kB (556286 bytes)
Hash 8eb760d87068cdcf2a0e55e98277f9b9
bbe9e135bc57535b2ccebb7db20e7f2a82103ae6
b5c581a6d11dcf9710a79fdfbe1789c58739ac1b781b883c00c13464a93179ab
GET /upload/vod/20230203-1/fbfa1fcf111350f097ed22e3652140d5.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 556286
Last-Modified: Fri, 03 Feb 2023 03:06:47 GMT
Connection: keep-alive
ETag: "63dc7a47-87cfe"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/t2.gif
200 OK 254 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/t2.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Size 254 kB (253670 bytes)
Hash bace60a0adc9bdd54f7c83058456a847
4867fd68497b7db5c4e5bbdde781cf098dbabd22
17a4f7b3d5caf413211515976326969951cc1bb9a3e32a9caa885fd6e3109368
GET /template/web/GG/t2.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 253670
last-modified: Tue, 10 May 2022 09:20:01 GMT
etag: "627a2e41-3dee6"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4fc90b344217f2af55d41a51cdb76175
e51ca89f6b224431d741960e3abc9a03d09957ef
eff0df474c01111332398befd64817e17d52a94b0bb1016a233a9a83957fa1e1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 03:26:05 GMT
Expires: Fri, 10 Feb 2023 03:26:04 GMT
Etag: "e51ca89f6b224431d741960e3abc9a03d09957ef"
Cache-Control: max-age=558054,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793c76b19cbb1c16-OSL
2k.qfbj2.com/template/web/GG/y4.gif
200 OK 258 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/y4.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Size 258 kB (257689 bytes)
Hash bbdd0bdf651352117671a182ae649b36
0913dc12c9378d9d5bc6aeefdba042fad4f95e8a
c808633ff4d4c025ae4151460a6ab81b58837bc03584b7037b4ef2034cc8676c
GET /template/web/GG/y4.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 257689
last-modified: Tue, 10 May 2022 09:20:09 GMT
etag: "627a2e49-3ee99"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/4.gif
200 OK 279 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/4.gif
IP
File type GIF image data, version 89a, 200 x 113\012- data
Size 279 kB (279026 bytes)
Hash 42809e0a73309f01de7651ab3b712cb4
19a1658a10d4e8ca6831a824d4bccbb35dcbf113
da7e1e1332d196cde6cc3a7b9c758abb4493e9708799e7836551823dd399b13d
GET /template/web/GG/4.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 279026
last-modified: Wed, 11 May 2022 08:12:44 GMT
etag: "627b6ffc-441f2"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/044cf6f8f7066b2eaaa2c39f8610b60c.jpg
200 OK 516 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/044cf6f8f7066b2eaaa2c39f8610b60c.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=7209, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4107], progressive, precision 8, 800x539, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 30050-16495, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 303464288440280621757809165336576.000000\012- data
Size 516 kB (516418 bytes)
Hash 3480f30ef343a12e1a3baacd6d88f776
0947f3ca26e7550e81a34c53418631a710f24192
629aef12756c5930724241b3b19ed968b65c808a35b46f907848abff6689425b
GET /upload/vod/20230203-1/044cf6f8f7066b2eaaa2c39f8610b60c.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/jpeg
Content-Length: 516418
Last-Modified: Fri, 03 Feb 2023 03:06:47 GMT
Connection: keep-alive
ETag: "63dc7a47-7e142"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/k19.gif
200 OK 288 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/k19.gif
IP
File type GIF image data, version 89a, 140 x 140\012- data
Size 288 kB (287575 bytes)
Hash e758cbb971464ca5059e4cdbc1a7601f
615032c5f3516cd6d685bde3c1214a5d05833cd1
df4ecca258502e6c66deb343d9fc8d0bf05e46927194a2e1bc6c652fb80ba71d
GET /template/web/GG/k19.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 287575
last-modified: Sat, 04 Jun 2022 02:42:13 GMT
etag: "629ac685-46357"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/5.gif
200 OK 292 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/5.gif
IP
File type GIF image data, version 89a, 256 x 256\012- data
Size 292 kB (291780 bytes)
Hash c41af62e6356770c1f7df79bbb3e1db5
0f765c11424aaa51365ec92c18ff4f75a972da5a
0b8a47216bb974bf8ce36542085e3dfb1b5fcf476efd4da2b630c4a325580de4
GET /template/web/GG/5.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 291780
last-modified: Wed, 11 May 2022 08:12:54 GMT
etag: "627b7006-473c4"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/122.gif
200 OK 301 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/122.gif
IP
File type GIF image data, version 89a, 120 x 120\012- data
Size 301 kB (301024 bytes)
Hash 924fb352713ee10f6f4bce3167ccce13
127a437f7a5020f7e7c08b6c6465be55dcb32e0c
6e04c7ee887495ce8805d38b200ca217c28b5e83655f4e7f4e8f8f8e28b872bf
GET /template/web/GG/122.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 301024
last-modified: Wed, 09 Mar 2022 10:04:32 GMT
etag: "62287bb0-497e0"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/fd50c85f0ee9be34858b502b06b100d0.jpg
200 OK 540 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/fd50c85f0ee9be34858b502b06b100d0.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2874, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4130], progressive, precision 8, 800x539, components 3\012- data
Size 540 kB (539772 bytes)
Hash d78389e3ba495bce98c95fef39852d00
3427fd16bf9756fbd622ebac1d00a1646837b69d
63668bcfc489d3564251ab1ef08ff858e98e5f9f27561142be034925573139c0
GET /upload/vod/20230203-1/fd50c85f0ee9be34858b502b06b100d0.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: image/jpeg
Content-Length: 539772
Last-Modified: Fri, 03 Feb 2023 03:06:47 GMT
Connection: keep-alive
ETag: "63dc7a47-83c7c"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/a13.gif
200 OK 674 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/a13.gif
IP
File type GIF image data, version 89a, 393 x 262\012- data
Size 674 kB (673882 bytes)
Hash 8f0aa6d32c03c602b0480194b2efdf4a
a2dfc596103bf743c9cf389e2b7a481a8bbedc96
2a54a439ea081c5418030b63dd4e0f247ff7089b1d7ba67a0fe6e2abcf466658
GET /template/web/GG/a13.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 673882
last-modified: Mon, 20 Jun 2022 04:59:33 GMT
etag: "62affeb5-a485a"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/2.gif
200 OK 620 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/2.gif
IP
File type GIF image data, version 89a, 300 x 200\012- data
Size 620 kB (620010 bytes)
Hash 8171edd386b6abd105c0ff0e740330d9
7914e2b95f29d65b0ffb8e6daf7f54dc14da0ae0
5044971fcc4e0c4837e7e586b858fba8257feeed88812253aa9ee2396915c40a
GET /template/web/GG/2.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 620010
last-modified: Wed, 11 May 2022 08:12:37 GMT
etag: "627b6ff5-975ea"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/7090446255c4207a6d78c7bb40cd33d0.jpg
200 OK 463 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/7090446255c4207a6d78c7bb40cd33d0.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3379, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4236], progressive, precision 8, 800x539, components 3\012- data
Size 463 kB (463178 bytes)
Hash c4889ac215310ec12427574ba2d6babe
f53728d829b9ad63519e500d16a9d5fa5e0656e9
36d88498c28ec1caccdfbe1419ae085dbcf65fdfef7580e0ce2f1011ebde0e70
GET /upload/vod/20230203-1/7090446255c4207a6d78c7bb40cd33d0.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: image/jpeg
Content-Length: 463178
Last-Modified: Fri, 03 Feb 2023 03:06:47 GMT
Connection: keep-alive
ETag: "63dc7a47-7114a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.sectigo.com/
200 OK 472 B IP
Hash d968af3b7962fef054afb4865ec1bac1
6335dcaa717685b12ccd62e473d6735f51d101d5
bad292640a7ff50596e2b1c0fac981e72734b66c837ab1190c0dfe3962ccce64
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 09:14:29 GMT
Expires: Thu, 09 Feb 2023 09:14:28 GMT
Etag: "6335dcaa717685b12ccd62e473d6735f51d101d5"
Cache-Control: max-age=492558,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793c76b19b41b4ed-OSL
ttzytp3.com/upload/vod/20230203-1/ec3d8e55aaa8d8a53e9599593787a126.jpg
200 OK 565 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/ec3d8e55aaa8d8a53e9599593787a126.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=5517, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4900], progressive, precision 8, 800x539, components 3\012- data
Size 565 kB (564930 bytes)
Hash c80965733916d10f9ca1c9c4492017b3
a4b9cf9a56173175ffcca9e48de757a12526545b
026f1f1d9227c6ac711ea1d7e247145b03447119d24d516f77e78a79f38108e6
GET /upload/vod/20230203-1/ec3d8e55aaa8d8a53e9599593787a126.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: image/jpeg
Content-Length: 564930
Last-Modified: Fri, 03 Feb 2023 03:10:06 GMT
Connection: keep-alive
ETag: "63dc7b0e-89ec2"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/d1.gif
200 OK 320 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/d1.gif
IP
File type GIF image data, version 89a, 448 x 359\012- data
Size 320 kB (320301 bytes)
Hash 7d3239796daffe24e71eb0e44146f02b
533c9fe388fdb5cc5f807a7358dcd4d1b14bf817
7ae555d64a9c2cbf44806af21930c753b5dc3649be922206fc10ea83efa19523
GET /template/web/GG/d1.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 320301
last-modified: Wed, 11 May 2022 08:33:50 GMT
etag: "627b74ee-4e32d"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/59a9acc7918e214069ae067f318b888c.jpg
200 OK 506 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/59a9acc7918e214069ae067f318b888c.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2897, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4107], progressive, precision 8, 800x539, components 3\012- data
Size 506 kB (505749 bytes)
Hash 5925de9fe220f70b46bf209db5645890
56562978232ce96376a1002a3771e0ddeb762172
a6fbed221ee9192e1953960e6eb6e416fe54e897429a44e11b79b602e41c5af5
GET /upload/vod/20230203-1/59a9acc7918e214069ae067f318b888c.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: image/jpeg
Content-Length: 505749
Last-Modified: Fri, 03 Feb 2023 03:06:47 GMT
Connection: keep-alive
ETag: "63dc7a47-7b795"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ttzytp3.com/upload/vod/20230203-1/b868ccab9127014ae7abd384359f1c59.jpg
200 OK 236 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/b868ccab9127014ae7abd384359f1c59.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x537, components 3\012- data
Size 236 kB (235688 bytes)
Hash a9737f0ff6198e98a24cb18df5a245b2
0f21ef291d2b1b5bc7704c4c88c49727a0daef79
af20b7bb3295b09331ffd16d56e6fabc508555fcebe5c5a157322fca6da986db
GET /upload/vod/20230203-1/b868ccab9127014ae7abd384359f1c59.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: image/jpeg
Content-Length: 235688
Last-Modified: Fri, 03 Feb 2023 03:10:06 GMT
Connection: keep-alive
ETag: "63dc7b0e-398a8"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/dh2.js
200 OK 397 kB URL HTTP/2 2k.qfbj2.com/template/web/dh2.js
IP
Size 397 kB (397378 bytes)
Hash 6618bfc9e4b95a23c3bd2ab8e5b539be
a94cd76020b8cde0a72ef35e63990daeb74fcc75
6c1531764d9b2110d0531bb7223d3b022a2d08f5b1c910d03564139bd0b75891
GET /template/web/dh2.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 10:07:30 GMT
vary: Accept-Encoding
etag: W/"63dcdce2-373e"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ttzytp3.com/upload/vod/20230203-1/55d31094bca152ad2749614ac3b4e4eb.jpg
200 OK 673 kB URL HTTP/1.1 ttzytp3.com/upload/vod/20230203-1/55d31094bca152ad2749614ac3b4e4eb.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3477, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4107], progressive, precision 8, 800x539, components 3\012- data
Size 673 kB (672762 bytes)
Hash 9a5637d8c43346772f3f86226ce61a2c
1d87f7909803eb48e0d3d4a8fb7d4964a3937f15
31b59dcc6410871a9902ca9c7ef172b08e1e96bc59c70571985069069b6bd692
GET /upload/vod/20230203-1/55d31094bca152ad2749614ac3b4e4eb.jpg HTTP/1.1
Host: ttzytp3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: image/jpeg
Content-Length: 672762
Last-Modified: Fri, 03 Feb 2023 03:06:47 GMT
Connection: keep-alive
ETag: "63dc7a47-a43fa"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
2k.qfbj2.com/template/web/GG/ppll.gif
200 OK 965 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/ppll.gif
IP
File type GIF image data, version 89a, 480 x 270\012- data
Size 965 kB (965446 bytes)
Hash 5f87eaa078aeb58fbe6a932225fe00e2
d155153be18e5b37704fa2b046751373a23bd708
55f2f4507e307aa3a6f26e06744510894d6a35a5289600b60120ddfca84e1cf9
GET /template/web/GG/ppll.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 965446
last-modified: Thu, 01 Dec 2022 04:59:54 GMT
etag: "638834ca-ebb46"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/dp2.gif
200 OK 767 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/dp2.gif
IP
File type GIF image data, version 89a, 640 x 200\012- data
Size 767 kB (766938 bytes)
Hash 06f924cdbba4e6c4765765139a404682
7eaadc65f26a4fe45240e14f96c29aa53e721775
514dc1d00a06bed8dbb2a891aa73b6ff70cd32772f582df1c2c959c856d45a5d
GET /template/web/GG/dp2.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 766938
last-modified: Mon, 25 Apr 2022 12:29:50 GMT
etag: "6266943e-bb3da"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
kvegg.com/241ffcf0a5007067dad148a90c317e01.gif
200 OK 99 kB URL HTTP/2 kvegg.com/241ffcf0a5007067dad148a90c317e01.gif
IP
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 150 x 150\012- data
Hash 5057019842032cd72cc53fc9db8984cb
74c23172056bd1ad95120490f8b9a72c78d0bbfc
0b2c55edc45ae48aa65a39d3af468422e36476fab2a6c30e37d40bc9df0cba65
GET /241ffcf0a5007067dad148a90c317e01.gif HTTP/1.1
Host: kvegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: image/gif
content-length: 99372
last-modified: Tue, 10 Jan 2023 09:17:01 GMT
etag: "63bd2d0d-1842c"
expires: Sat, 04 Feb 2023 04:15:08 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 1721805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQLbJ5JiKWWruV%2Bee09kEIT45kD5xtmQCoWI3%2BNhAXM4Cd9gSYRbVceC43HjhFo6T0RTWIB33l8qQxSrML1GAfsSYuM4Z5Rm5HWELQ%2B6Mq6hAsd3RrB3a8SMZsvJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 791a3139babd30b9-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/dp4.gif
200 OK 747 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/dp4.gif
IP
File type GIF image data, version 89a, 640 x 200\012- data
Size 747 kB (746571 bytes)
Hash 84e8edecf6c28c8218e0a7b1ad9ea414
3897e6bf1a2292c59b45e44d2b9c38e45f8f9a6f
356abb92d87698d59a4af16304d13e760b032739634c495fba68568e82d5c1ce
GET /template/web/GG/dp4.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 746571
last-modified: Mon, 25 Apr 2022 12:29:52 GMT
etag: "62669440-b644b"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/meizhuama/js/jquery.min.js
200 OK 936 kB URL HTTP/2 2k.qfbj2.com/template/meizhuama/js/jquery.min.js
IP
Size 936 kB (936419 bytes)
Hash 27df199b679438fcced22bb0b678d456
879f616e5f2b93fc2435287ca9c15721c4454786
552075f41bb9f5f4358072f00882919d2343e1b300b918f081f09b9b027ba51f
GET /template/meizhuama/js/jquery.min.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: application/javascript
last-modified: Fri, 02 Dec 2022 14:33:00 GMT
vary: Accept-Encoding
etag: W/"638a0c9c-1538f"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
kzerr.com/6fb5deabda1e984b6bd49b2baa8dfa10.gif
200 OK 919 kB URL HTTP/2 kzerr.com/6fb5deabda1e984b6bd49b2baa8dfa10.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 919 kB (918679 bytes)
Hash 956582dd3aa22ca9b19bdd1d5e091e24
c2d80e05f59981f6ed58a8231f502bd990894d6b
88e686882e64a0e199c79bd83b7102885b67242b5d0b49a1f37674c0bb3ddd8e
GET /6fb5deabda1e984b6bd49b2baa8dfa10.gif HTTP/1.1
Host: kzerr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 918679
last-modified: Mon, 19 Dec 2022 07:54:21 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 03:03:49 GMT
etag: "956582dd3aa22ca9b19bdd1d5e091e24"
x-cache: Hit from cloudfront
via: 1.1 625de659a90e36a729e80cd3fdf6ae3c.cloudfront.net (CloudFront)
x-amz-cf-pop: SIN52-C3
x-amz-cf-id: PHb3Bo18D-zPjE76v-C4PTRFfCjI4wOAwSOfp2neqvxMO2hT2m85GQ==
age: 47480
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
200 OK 600 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 08b2b91e21bc4516207910017f8a8db4
18cda758d637933f21f23f58a074db6bcbcc4c8f
5ff7b9ad4b050a2d10e8e2a7b0b7f1fcaad6389300e5176307568e9e7c5a0fb0
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Fri, 03 Feb 2023 16:12:35 GMT
last-modified: Tue, 31 Jan 2023 17:47:55 GMT
expires: Tue, 07 Feb 2023 17:47:54 GMT
etag: "18cda758d637933f21f23f58a074db6bcbcc4c8f"
cache-control: max-age=601386,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb1
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 793c72f119e1997a-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1675440755
via: cache15.l2de2[0,0,304-0,H], cache17.l2de2[1,0], cache1.se1[20,20,200-0,H], cache4.se1[22,0], cache3.se1[24,0]
age: 154
x-cache: HIT TCP_REFRESH_HIT dirn:4:223603878
x-swift-savetime: Fri, 03 Feb 2023 16:15:09 GMT
x-swift-cachetime: 1646
timing-allow-origin: *, *
eagleid: 2ff62c9716754409095722051e, 2ff62c9716754409095722051e
kzeoo.com/0e243abb7057b68d7362544cbbe032ba.gif
200 OK 270 kB URL HTTP/2 kzeoo.com/0e243abb7057b68d7362544cbbe032ba.gif
IP
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 150 x 150\012- data
Size 270 kB (270145 bytes)
Hash 2e0432b5ead77702ac433d71c5caeeb4
91f7f7320673eb770bd2b82c82d898fa6ed5de97
63ccf288b83f2c2d1995165c5f15cf3980c947cff737800d8119cdad406d3c7a
GET /0e243abb7057b68d7362544cbbe032ba.gif HTTP/1.1
Host: kzeoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: image/gif
content-length: 270145
last-modified: Wed, 26 Oct 2022 13:37:18 GMT
etag: "6359380e-41f41"
expires: Sat, 04 Feb 2023 04:15:08 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 190105
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hn7H6gBMHzi6p2HerMgfM1uX8NY2B66dmcfNOkqNPTpEF0%2Fs5dTk8t05B4aRHrESTg1tZ9KW4PzOlJSl4GEAFDbQM6%2FShFiKxsY%2FIQdkzNo3h7I3etyHueWxr9e2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 791a283c3ac9c694-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/01.gif
200 OK 562 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/01.gif
IP
File type GIF image data, version 89a, 380 x 570\012- data
Size 562 kB (561983 bytes)
Hash 311afec7a9e7d370b46adf41a45905e7
5460c5036e11ecf12f30d921e4dc811ad56f8b30
39da990b80811f9e29f4b4c1b9a0e7fc4f4b60a42c1f5d949b1ae1a9bbe80eb9
GET /template/web/GG/01.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 561983
last-modified: Wed, 11 May 2022 08:12:48 GMT
etag: "627b7000-8933f"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/meizhuama/fonts/iconfont.ttf
200 OK 1.2 kB URL HTTP/2 2k.qfbj2.com/template/meizhuama/fonts/iconfont.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ISO-8859 text, with CRLF line terminators
Hash 8363acaeab9cbb099b59b78a44127ca6
aef448ce5500e3734059ec285cf6ec0b547075f2
9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
GET /template/meizhuama/fonts/iconfont.ttf HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/template/meizhuama/css/zui.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:09 GMT
content-type: application/octet-stream
content-length: 1163
last-modified: Sun, 06 Mar 2022 14:17:48 GMT
etag: "6224c28c-48b"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/GG/55.gif
200 OK 834 kB URL HTTP/2 2k.qfbj2.com/template/web/GG/55.gif
IP
File type GIF image data, version 89a, 140 x 206\012- data
Size 834 kB (834244 bytes)
Hash 3965598665b057b276ed86263c36f334
f8374496c56ad6cd140a9bd009b0637c8ce91a35
5efcea93fd0c2cb8059ea79144c6bfb6b094b5810e21cf6e2168ef51ac2fd36a
GET /template/web/GG/55.gif HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: image/gif
content-length: 834244
last-modified: Wed, 11 May 2022 08:28:17 GMT
etag: "627b73a1-cbac4"
expires: Sun, 05 Mar 2023 16:15:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
kzeoo.com/47e02a59b814807a640ae615b82c06ac.gif
200 OK 214 kB URL HTTP/2 kzeoo.com/47e02a59b814807a640ae615b82c06ac.gif
IP
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 150 x 150\012- data
Size 214 kB (213551 bytes)
Hash 38a577005d8da64f084a3f6624619e55
d271b81103a0c053eaaf5ba802158a2d7ea8e3c1
23d0f1ac9f00f07722d9b6496672e1e08e1e6657d5b6b36542f14d87f15eaa43
GET /47e02a59b814807a640ae615b82c06ac.gif HTTP/1.1
Host: kzeoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: image/gif
content-length: 213551
last-modified: Wed, 14 Sep 2022 11:24:46 GMT
etag: "6321b9fe-3422f"
expires: Sat, 04 Feb 2023 04:15:08 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 56768
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jTvgn49JO2MnzHs15%2FoLRxWsNOwBMPU3wxG%2FcpQ2GCVBZwNCCB%2BYnI7nUyo8A%2FpsO5lL%2BGuFEuiwOUUYD2IuaaTywZtcTOnNdgd8tfx2CwLwxIjmkgGme8lRVYS%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 791f922bad27c878-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8574fcba70d3299ebb2a93b5326021ca
59beb38920e3c60486f53cfb04777a7ee45b85f2
e76d3f34d4ea782a50cd22031d198a6b6bb7eb1ca5535f8c55dd63d7d1d7963a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 15:05:12 GMT
Expires: Fri, 10 Feb 2023 15:05:11 GMT
Etag: "59beb38920e3c60486f53cfb04777a7ee45b85f2"
Cache-Control: max-age=600001,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793c76b4e884b4ed-OSL
2k.qfbj2.com/template/web/xx1.js
200 OK 371 kB URL HTTP/2 2k.qfbj2.com/template/web/xx1.js
IP
Size 371 kB (370845 bytes)
Hash 9fbc754cd984ef419a35e48b612ed895
131b4332768106b277ff7e3ac2853935171c134f
71acdbd87fa397e01a30b32e4d732effdde6823138cc0e9b1ad5adbc5aa77bbe
GET /template/web/xx1.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 11:14:19 GMT
vary: Accept-Encoding
etag: W/"63db9b0b-1073"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
383guanggao.oss-cn-shenzhen.aliyuncs.com/200X200.gif
200 OK 137 kB URL HTTP/1.1 383guanggao.oss-cn-shenzhen.aliyuncs.com/200X200.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 200 x 200\012- data
Size 137 kB (136945 bytes)
Hash 77e56e44521598151bbc814814005448
204207c707cae73d562c4c8fcb1e8467eeabf2eb
a1275ab8c911c61150c5f68b2da51d30a146929e2c9478ab1a68db88a086ff6f
GET /200X200.gif HTTP/1.1
Host: 383guanggao.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Fri, 03 Feb 2023 16:15:08 GMT
Content-Type: image/gif
Content-Length: 136945
Connection: keep-alive
x-oss-request-id: 63DD330CA554993631FCCA3D
Accept-Ranges: bytes
ETag: "77E56E44521598151BBC814814005448"
Last-Modified: Thu, 08 Dec 2022 07:20:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6164053056264850434
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: d+VuRFIVmBUbvIFIFABUSA==
x-oss-server-time: 3
3718896ccc.com/c76b6b83f68449898dbeba8d3afeeb17.gif
200 OK 429 kB URL HTTP/1.1 3718896ccc.com/c76b6b83f68449898dbeba8d3afeeb17.gif
IP
File type GIF image data, version 89a, 750 x 100\012- data
Size 429 kB (428715 bytes)
Hash 8210df04bd6396b170b8feb016ae687f
e3a485ecef81f1464cefb0c321c8747190e8b762
cf47ae179a9a0a1a8d7f149af54bc698aca7eca03a0b2436eb929eb908637738
GET /c76b6b83f68449898dbeba8d3afeeb17.gif HTTP/1.1
Host: 3718896ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63c4f987-68aab"
Date: Sat, 28 Jan 2023 00:43:44 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Mon, 16 Jan 2023 07:15:19 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-21
Content-Length: 428715
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2d80daaa00574de6172662770cd3301
33b1e8eb7803a5f38fbc7f5ae4c34ce996c8c727
7025e3fa42da9828fdf31853da9c2614e576a85428969581f6bc73bb51d5a783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7025E3FA42DA9828FDF31853DA9C2614E576A85428969581F6BC73BB51D5A783"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21575
Expires: Fri, 03 Feb 2023 22:14:45 GMT
Date: Fri, 03 Feb 2023 16:15:10 GMT
Connection: keep-alive
9030a.cc/1008-960x60.gif
200 OK 245 kB IP
ASN #211392 Dream Cloud Innovation Limited
File type GIF image data, version 89a, 960 x 60\012- data
Size 245 kB (245135 bytes)
Hash b6eb4d9fd04fe63a7687677a8036e237
eac3cedc645a39478dc6ad3ec6ea97db621174b8
6b61596ae15b088b70b49d17c7b47eaffaa5f235c9215459334b85039af7f008
GET /1008-960x60.gif HTTP/1.1
Host: 9030a.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Tue, 04 Oct 2022 14:45:04 GMT
Accept-Ranges: bytes
ETag: "5c7ab8e3ffd7d81:0"
Server: Microsoft-IIS/8.5
Date: Fri, 03 Feb 2023 16:13:51 GMT
Content-Length: 245135
X-Via: 1.1 localhost.localdomain (random:85111 Fikker/Webcache/3.7.8)
Set-Cookie: fikker-tkjk-8I2E=6AJN4WT7BW0g0mIaVuK7h92mbGRsXQjs; expires=Sat, 04 Feb 2023 02:41:07 GMT; max-age=7200; path=/
fikker-tkjk-8I2E=6AJN4WT7BW0g0mIaVuK7h92mbGRsXQjs; expires=Sat, 04 Feb 2023 02:41:07 GMT; domain=.cc; max-age=7200; path=/
2588qq.com/d886c72a6ae146a2982d664e0b475bdc.gif
200 OK 56 kB URL HTTP/1.1 2588qq.com/d886c72a6ae146a2982d664e0b475bdc.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 128 x 128\012- data
Hash e3a860a8bf4b00e84a27972b6ce1db47
793298288e10a3ae6301660202ccb2f00101e72b
3d2acfe0d4c487ba9bae5ce18996052ca4ed0422e40df5e8032b9665164b5bf1
GET /d886c72a6ae146a2982d664e0b475bdc.gif HTTP/1.1
Host: 2588qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63b5258b-d95a"
Date: Fri, 03 Feb 2023 11:20:25 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Wed, 04 Jan 2023 07:06:51 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-21
Content-Length: 55642
js.users.51.la/21273067.js
200 OK 2.3 kB URL HTTP/1.1 js.users.51.la/21273067.js
IP
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with very long lines (4898)
Hash cfcc5c0f08c9a6462e6df16aa6478f07
720c84b3ccebf991458af7705d0bb0c41365b8ac
817c678f9b62b0db6f870cc391b17261be96bb9c428199372176794583f9691f
GET /21273067.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: CloudWAF
Date: Fri, 03 Feb 2023 16:15:10 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=8acb28fbb5c6fa7597e; path=/
HWWAFSESTIME=1675440906617; path=/
Cache-Control: max-age=360000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
66668aaa.com/2650173e69ec4b84b29634bd395a4c91.gif
200 OK 857 kB URL HTTP/1.1 66668aaa.com/2650173e69ec4b84b29634bd395a4c91.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 857 kB (857145 bytes)
Hash cf250ba4debf89cc57f49709d7cb73b0
ef7b4219780eedca6dde0a5b46278cd8120bf00f
952f1be23b3fc8df89b231db9a483f55ccd73486d8fe3e71c07e70405cbd4d4a
GET /2650173e69ec4b84b29634bd395a4c91.gif HTTP/1.1
Host: 66668aaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63c6b058-d1439"
Date: Sat, 28 Jan 2023 14:22:27 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Tue, 17 Jan 2023 14:27:36 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-26
Content-Length: 857145
kpxaxmh.cn/960x80.gif
200 OK 610 kB IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 610 kB (610044 bytes)
Hash b27497b12ab8408c575804f5bae22bc2
210a46c5811435945b2ef6227c9eb22a13cd6f78
3f1563e29b1a848d447a38d9890301b760076756cbc5ae594273a3aa59d7664b
GET /960x80.gif HTTP/1.1
Host: kpxaxmh.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NgxFence
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: image/gif
content-length: 610044
last-modified: Wed, 01 Feb 2023 09:58:05 GMT
x-rgw-object-type: Normal
etag: "b27497b12ab8408c575804f5bae22bc2"
x-amz-request-id: tx000000000000000125edc-0063dcc296-1c85-default
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/app.js
200 OK 396 kB URL HTTP/2 2k.qfbj2.com/template/web/app.js
IP
Size 396 kB (395815 bytes)
Hash 307493c623a4dd9af9fc12bf031b4fee
77d7cd7373331400b2d395de66cc7f51cc1a4483
4081ce12400f83e5b635098a4722e6333956374f26c7e0baeba5248472457df5
GET /template/web/app.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 10:02:40 GMT
vary: Accept-Encoding
etag: W/"63dcdbc0-30de"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
gtm-cn-j6730u6sd0b.gtm-a3b8.com/ky960x60.gif
200 OK 400 kB URL HTTP/1.1 gtm-cn-j6730u6sd0b.gtm-a3b8.com/ky960x60.gif
IP
ASN #4837 CHINA UNICOM China169 Backbone
File type GIF image data, version 89a, 960 x 60\012- data
Size 400 kB (399450 bytes)
Hash 4e1e4b8f46ac2e67539d5881785ba29a
7d3c9c963087ffc8c196cb7e67629342027a8a45
4c9cc489a2e26500ace73c53ce05bdfa52876a8700b7e9e73c1554187acefb0d
GET /ky960x60.gif HTTP/1.1
Host: gtm-cn-j6730u6sd0b.gtm-a3b8.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Thu, 29 Dec 2022 12:09:17 GMT
Etag: "4e1e4b8f46ac2e67539d5881785ba29a"
Content-Type: image/gif
Date: Mon, 16 Jan 2023 13:56:45 GMT
Server: tencent-cos
x-cos-hash-crc64ecma: 10945751995987991778
x-cos-request-id: NjNjNTU3OWRfOTU1NWU0MDlfM2ViZV8zMGJmZWRj
Content-Length: 399450
Accept-Ranges: bytes
X-NWS-LOG-UUID: 10395340073647012772
Connection: keep-alive
X-Cache-Lookup: Cache Hit
2k.qfbj2.com/template/web/zyxf.js
200 OK 301 kB URL HTTP/2 2k.qfbj2.com/template/web/zyxf.js
IP
Size 301 kB (300945 bytes)
Hash a2faef74350abbc51b2d18c2e6c6d979
b49c4b5c05a85810ae8777392a4f1a4189986d80
296b921147d988815f1e679485b26e32aa723983279125e859f78c3c12f39010
GET /template/web/zyxf.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 09:49:35 GMT
vary: Accept-Encoding
etag: W/"63ce582f-1432"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/xx2.js
200 OK 71 kB URL HTTP/2 2k.qfbj2.com/template/web/xx2.js
IP
Hash 4b638d399ab05fdff0cf2c5ba70fd1a0
c68a513b08aef7c643c6522b7c1d287ded7ceb2f
21fb5f54a657546f3e6aefd6a92a70411bc84ba86641067432366469eb519586
GET /template/web/xx2.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 04:08:42 GMT
vary: Accept-Encoding
etag: W/"63db374a-406"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
2k.qfbj2.com/template/meizhuama/css/zui.css
200 OK 1.1 MB URL HTTP/2 2k.qfbj2.com/template/meizhuama/css/zui.css
IP
Size 1.1 MB (1098806 bytes)
Hash 27f192f86978ef6a04d8a184be252236
37d33f5bdfa85f198527f14b30b61f37a91674bc
970f6d3a2c6cb65245958cee9ce710baa8305abe1496732e233a2e4527053836
GET /template/meizhuama/css/zui.css HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: text/css
last-modified: Tue, 22 Nov 2022 10:25:31 GMT
vary: Accept-Encoding
etag: W/"637ca39b-1b92c"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 50cd555d570add45df0c7e13eae7f9c9
dbfe01a72ee1956c948439f6c607f4b6a8beeacd
f9d6022c0378a6990fa7ce0f45bb92f1b6196b83e6d3255b12a19d10d0268abd
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 16:15:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 07 Feb 2023 14:31:45 GMT
ETag: "dbfe01a72ee1956c948439f6c607f4b6a8beeacd"
Last-Modified: Fri, 03 Feb 2023 14:31:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1527
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793c76bcbc970b02-OSL
hm.baidu.com/hm.js?86ea3af34e71a9d5eae3e3255c8ace53
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?86ea3af34e71a9d5eae3e3255c8ace53
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash c4c2649dfbd351dc31d097ea562c5dd2
0ad03ee2082e0be17025f5cb046008afcd12f97f
00089417ab9a71648590c824bde1802002bba68588c3d12c913f4775bc9592f0
GET /hm.js?86ea3af34e71a9d5eae3e3255c8ace53 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Fri, 03 Feb 2023 16:15:10 GMT
Etag: 7a3f6e7e297045b76f26cd90fb495a41
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=40464E344AAA4950; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?959981931bea09b9a10c9c552a50e761
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?959981931bea09b9a10c9c552a50e761
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash d2a5bd8b8b40d3336f5556d90adf86f3
5edfc1d7adf4efeb4dd12b420b5b47d190e574d4
89645b9d253c5fdc558aea66a7f2d7d3699a9a3748a7f50ce2eb3f5444144116
GET /hm.js?959981931bea09b9a10c9c552a50e761 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Fri, 03 Feb 2023 16:15:10 GMT
Etag: 1793d0a79acbfba2d85e62a545ead25b
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=50A13847925E5388; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
p.qlogo.cn/qqmail_head/Q3auHgzwzM7lfibDibZw1dnZN1RFUI5icVRDSA0IJthupwMib7bhfVxolosoiaD7urZUm/0
200 OK 238 kB URL HTTP/2 p.qlogo.cn/qqmail_head/Q3auHgzwzM7lfibDibZw1dnZN1RFUI5icVRDSA0IJthupwMib7bhfVxolosoiaD7urZUm/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 200 x 200\012- data
Size 238 kB (238250 bytes)
Hash 1b3190b3acaefebd7482dc379e2ea64b
2c6faab838b13a8cbf276afcd35f48231a2d6ba2
c06fcaa4ecb77c7e4fe16f5d916186d4c26559e69df64cd91a3f058dba3c3a3b
GET /qqmail_head/Q3auHgzwzM7lfibDibZw1dnZN1RFUI5icVRDSA0IJthupwMib7bhfVxolosoiaD7urZUm/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: image/gif
content-length: 238250
vary: Accept,Origin
last-modified: Fri, 20 Jan 2023 12:26:30 GMT
cache-control: max-age=2592000
x-delay: 35724 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 9
x-reqgue: 0
size: 238250
chid: 0
fid: 0
x-nws-log-uuid: f56ad3e2-29fd-464b-9ec2-f72502697f8d
X-Firefox-Spdy: h2
ia.51.la/go1?id=21273067&rt=1675440941898&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=0&cd=24&ds=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&ing=1&ekc=&sid=1675440941898&tt=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&cu=https%253A%252F%252F2k.qfbj2.com%252F&pu=http%253A%252F%252Fwww.iweixinqun.net%252F
200 0 B URL HTTP/1.1 ia.51.la/go1?id=21273067&rt=1675440941898&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=0&cd=24&ds=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&ing=1&ekc=&sid=1675440941898&tt=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&cu=https%253A%252F%252F2k.qfbj2.com%252F&pu=http%253A%252F%252Fwww.iweixinqun.net%252F
IP
ASN #136959 China Unicom Guangdong IP network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21273067&rt=1675440941898&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=0&cd=24&ds=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&ing=1&ekc=&sid=1675440941898&tt=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E5%25A4%25A7%25E6%25B5%25B7%25E8%25B5%2584%25E6%25BA%2590%25E5%25BD%25B1%25E8%25A7%2586&cu=https%253A%252F%252F2k.qfbj2.com%252F&pu=http%253A%252F%252Fwww.iweixinqun.net%252F HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Content-Length: 0
Date: Fri, 03 Feb 2023 16:15:12 GMT
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1100874915&si=86ea3af34e71a9d5eae3e3255c8ace53&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38668&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1100874915&si=86ea3af34e71a9d5eae3e3255c8ace53&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38668&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1100874915&si=86ea3af34e71a9d5eae3e3255c8ace53&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38668&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 03 Feb 2023 16:15:11 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=400D7C8DF2D811D9; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
p.qlogo.cn/qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7PJmjpJPGJOiavFpnSj4iclWL0ZIe8L7lRTY2TqJMia0N38/0
200 OK 206 kB URL HTTP/2 p.qlogo.cn/qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7PJmjpJPGJOiavFpnSj4iclWL0ZIe8L7lRTY2TqJMia0N38/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 206 kB (205622 bytes)
Hash 8a22a6888c325aa3acf83e7cedfe35e7
37da1ea976724d35c1c32ae18d7924192184ba32
2e90b20d4c2067ff68444790955d65d2745365cf025c486c8c2b685696faeeaa
GET /qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7PJmjpJPGJOiavFpnSj4iclWL0ZIe8L7lRTY2TqJMia0N38/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: image/gif
content-length: 205622
vary: Accept,Origin
last-modified: Sat, 31 Dec 2022 07:19:17 GMT
cache-control: max-age=2592000
x-delay: 46760 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 9
x-reqgue: 0
size: 205622
chid: 0
fid: 0
x-nws-log-uuid: 44da2045-6317-4068-828e-5d0faadf7218
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=509673540&si=959981931bea09b9a10c9c552a50e761&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38668&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=509673540&si=959981931bea09b9a10c9c552a50e761&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38668&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=509673540&si=959981931bea09b9a10c9c552a50e761&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38668&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 03 Feb 2023 16:15:11 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=D3808A0D0AC33CC4; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.js?23623cf5f4a21b97670aa94e566ea294
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?23623cf5f4a21b97670aa94e566ea294
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash a7923e286a6fa90f7b4307c0e212864d
f29d14ee0165f08ae61109eb0145fe179f4b2aee
cdedb788f37d512ebc1c1d35470ca5f4e799825acf31f75334c027c8ad0e98a3
GET /hm.js?23623cf5f4a21b97670aa94e566ea294 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Fri, 03 Feb 2023 16:15:11 GMT
Etag: 1b61189816b9b3257fd45bd6c40aa4ee
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=ED075A0FF6E1F9C5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=986507730&si=23623cf5f4a21b97670aa94e566ea294&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38669&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=986507730&si=23623cf5f4a21b97670aa94e566ea294&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38669&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=986507730&si=23623cf5f4a21b97670aa94e566ea294&su=http%3A%2F%2Fwww.iweixinqun.net%2F&v=1.3.0&lv=1&sn=38669&r=0&ww=1268&u=https%3A%2F%2F2k.qfbj2.com%2F&tt=%E5%A4%A7%E6%B5%B7%E8%B5%84%E6%BA%90%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 03 Feb 2023 16:15:12 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=9F719307EF9D489B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
2k.qfbj2.com/template/web/dh1.js
200 OK 301 kB URL HTTP/2 2k.qfbj2.com/template/web/dh1.js
IP
Size 301 kB (300998 bytes)
Hash 5f6d7f40f97c9afd5fc4e443ad558b70
34019f7a720427faa23891e48afb3203a2bf3f92
3f427ab31aad2f96ec131aacddb9150227d9a7ed3cbbbf916c84b9cf2836f6d5
GET /template/web/dh1.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:06 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 10:06:56 GMT
vary: Accept-Encoding
etag: W/"63dcdcc0-3454"
expires: Sat, 04 Feb 2023 04:15:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ggtupian.comcom008.com/64461/960.60se.gif
200 OK 0 B URL HTTP/2 ggtupian.comcom008.com/64461/960.60se.gif
IP
GET /64461/960.60se.gif HTTP/1.1
Host: ggtupian.comcom008.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 16:15:08 GMT
content-type: image/gif
last-modified: Thu, 26 Jan 2023 11:00:12 GMT
etag: "63d25d3c-7d394"
expires: Wed, 01 Mar 2023 11:36:51 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 359914
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KCAKUc4tKMm96xV%2BZH7PJ7iwuMcFRS1E%2FfEYFu4hqcrcCySIQsjI33Y5XxC4lLj1XYHY4O1t%2BbyaxR5UPSjQakaKH1U8Qrpa1sJui1eaKjR3hP9eNLPbhDDiWXmSW8iAlTiWvnmq1sIP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 793c76ac4972b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/xx3.js
200 OK 0 B URL HTTP/2 2k.qfbj2.com/template/web/xx3.js
IP
GET /template/web/xx3.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 11:14:42 GMT
vary: Accept-Encoding
etag: W/"63db9b22-10ad"
expires: Sat, 04 Feb 2023 04:15:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
2k.qfbj2.com/template/web/zxbf.js
200 OK 0 B URL HTTP/2 2k.qfbj2.com/template/web/zxbf.js
IP
GET /template/web/zxbf.js HTTP/1.1
Host: 2k.qfbj2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2k.qfbj2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 16:15:07 GMT
content-type: application/javascript
last-modified: Fri, 03 Feb 2023 10:03:44 GMT
vary: Accept-Encoding
etag: W/"63dcdc00-1536"
expires: Sat, 04 Feb 2023 04:15:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
207.60.203.83
154.85.10.21
104.18.21.226
120.77.166.67
104.110.17.24
103.170.15.91
43.129.255.47
93.184.220.29
47.246.44.205