Overview

URLwww.rem-youth.com/
IP 104.253.189.29 (United States)
ASN#18779 EGIHOSTING
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 16:58:00 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (20)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-29T05:09:31Z 413 5881 34.160.144.191
ocsp.globalsign.com (3) 2075 2012-07-20T19:46:16Z 2023-03-29T05:11:35Z 1079 5700 104.18.20.226
www.sdguguo.com (4) 0 2017-05-23T12:12:18Z 2023-03-02T10:59:15Z 1406 18856 119.191.59.53
www.baidu.com (1) 3121 2017-01-30T06:01:42Z 2023-03-29T10:33:17Z 393 1183 104.193.88.77
ocsp.trust-provider.cn (7) 0 2022-02-10T09:18:30Z 2023-03-29T08:29:49Z 2422 8937 47.246.44.205
r3.o.lencr.org (6) 344 2020-12-02T09:52:13Z 2023-03-29T05:09:11Z 2028 5319 23.36.76.226
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-29T05:09:32Z 606 127 54.202.152.202
p1.qhimg.com (1) 250383 2012-10-16T20:15:19Z 2023-03-29T12:42:10Z 310 3531 54.230.111.119
www.sogou.com (1) 39670 2012-05-22T20:01:25Z 2023-03-29T12:42:10Z 408 3822 118.191.216.42
www.2022bifa.top (1) 0 2022-06-26T04:03:11Z 2023-03-28T09:44:47Z 743 1212 154.212.113.175
www.2022tufafa.top (8) 0 2022-06-26T04:03:13Z 2023-03-28T09:44:48Z 3384 600774 154.208.101.161
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-29T05:09:03Z 782 2374 35.241.9.150
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-29T05:09:31Z 333 391 34.117.237.239
www.rem-youth.com (81) 0 2021-12-21T15:03:25Z 2022-06-06T13:08:36Z 40041 89754 104.253.189.29
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-22T01:36:00Z 2023-03-29T05:09:12Z 3815 60218 34.120.237.76
js.users.51.la (1) 53024 2012-05-30T17:10:11Z 2023-03-29T10:04:13Z 362 2901 103.143.19.103
ia.51.la (2) 59607 2017-10-31T09:01:51Z 2023-03-29T11:26:02Z 2061 402 103.143.19.103
www.kkfafa.top (1) 0 2022-06-13T05:52:47Z 2023-03-28T09:44:45Z 366 4679 154.208.101.161
hm.baidu.com (5) 8254 2012-05-26T10:38:45Z 2023-03-29T10:05:55Z 2637 36222 103.235.46.191
www.sgsysjx.com (56) 0 2019-04-27T20:34:07Z 2023-03-02T10:59:16Z 18375 19909 47.91.170.222

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-23 16:57:58 UTC medium  104.253.189.29 Client IP ET INFO JJEncode Encoded Script 
2023-03-23 16:58:00 UTC medium Client IP Internal IP ET DNS Query to a *.top domain - Likely Hostile 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 104.253.189.29
Date UQ / IDS / BL URL IP
2023-03-23 16:58:00 UTC 0 - 2 - 0 www.rem-youth.com/ 104.253.189.29


Last 5 reports on ASN: EGIHOSTING
Date UQ / IDS / BL URL IP
2023-06-09 04:29:39 UTC 0 - 1 - 1 www.kmdingxin.com/a73fe0c09f0cb57049ae27125ab (...) 45.38.6.69
2023-06-09 04:29:34 UTC 0 - 1 - 1 www.kmdingxin.com/b11269366b18ff7d04bba292baf (...) 45.38.6.69
2023-06-09 04:29:15 UTC 0 - 1 - 1 www.kmdingxin.com/7773bc92453df52998a993eb41e (...) 45.38.6.69
2023-06-09 04:29:05 UTC 0 - 1 - 1 www.kmdingxin.com/d72951709ddff894bfc48c1b4d9 (...) 45.38.6.69
2023-06-09 03:39:36 UTC 0 - 3 - 0 webtasarimsepeti.net/Rechnung_fur_die_Zahlung.zip 107.164.158.135


Last 1 reports on domain: rem-youth.com
Date UQ / IDS / BL URL IP
2023-03-23 16:58:00 UTC 0 - 2 - 0 www.rem-youth.com/ 104.253.189.29


No other reports with similar screenshot

JavaScript

Executed Scripts (20)

Executed Evals (0)

Executed Writes (7)
#1 JavaScript::Write (size: 107) - SHA256: 4459a84685a0647338e245a46aa30058cec11c163404a447d6d50c95b6d5fe32
< script language = "javascript"
type = "text/javascript"
src = "https://www.kkfafa.top/jquery.minjs.js" > < /script>
#2 JavaScript::Write (size: 23) - SHA256: 4190ec66f3657393fdbc9e910189ea595bdbc9882acbd2ba3bb87f513c7616b7
< div id = 'alttxt' > < /div>
#3 JavaScript::Write (size: 129) - SHA256: 365c28ff80b0e9ca41b1122b7f3bb0f6d05c8cfa5c761f820726de8841c3b984
< style type = 'text/css' > <!--#div_title480 div{width:70px; overflow:hidden; text-overflow:ellipsis; white-space:nowrap;}--></style>
#4 JavaScript::Write (size: 78) - SHA256: 13d25a91018c34c067e2f091bd8213ecfafafaf82c57634d31ec58e6cc2a6d98
< span class = 'flash' > �: ��O� h / Flash���� cnO�, ��d��
#5 JavaScript::Write (size: 2814) - SHA256: 960063856cf7badc6c3f5ee00cca1a6082de726e814a1a53beabed8c1f4b9d69
��� < style type = "text/css" > .header {
    position: absolute;width: 1000 px;left: 50 % ;margin - left: -500 px;margin - top: 97 px;
}.header > ul > li {
    list - style: none;
    float: left;
    line - height: 40 px;
    padding - right: 48 px;
}.header > ul > li > a {
    color: # fff;text - decoration: none;
}.header > ul > li > a: hover {
    color: # f3af12fc;font - weight: bold;
}
# head img {
    padding: 1 px;margin: 1 px;margin - left: -3 px;border - radius: 6 px;box - shadow: 0 0 5 px # cccccc;border: 1 px solid # ccc;
} < /style><div id="head" style="width:1000px;margin:0 auto"><a href="https:/ / www.pp82462.com: 1066 / vip.html ? c = 96049963991 " rel="
nofollow " target="
_blank "><img src="
https: //www.2022tufafa.top/uploads/09cez3c9ytujxr7u2e23z8shr3dcyf288ic.gif" border="0" width="100%"></a><a href="https://www.023128.com:1066/vip.html?c=92825324857" rel="nofollow" target="_blank"><img src="https://www.2022tufafa.top/uploads/fjb8negh3smbqnvwzjptz1bg713i4hxyvo3.jpg" border="0" width="100%"></a><a href="https://www.bb94683.com:8989/?c=MCA7C" rel="nofollow" target="_blank"><img src="https://www.2022tufafa.top/uploads/al0nbzn1nlqurn8s0wg4mo0slkm6vai2k5j.jpg" border="0" width="100%"></a><a href="https://www.bb329723.com:1066/vip.html?c=89459122634" rel="nofollow" target="_blank"><img src="https://www.2022tufafa.top/uploads/ewf6txeytg1oljjbba6epx9kjdv9vkoizgx.gif" border="0" width="100%"></a><a href="https://www.yy66483.com:1066/vip.html?c=89458963185" rel="nofollow" target="_blank"><img src="https://www.2022tufafa.top/uploads/291wu9ropi8eyj8ngdzh8b0ygl9d7d5cvek.jpg" border="0" width="100%"></a><a href="https://www.v154059.com:8989/?c=OQNUA" rel="nofollow" target="_blank"><img src="https://www.2022tufafa.top/uploads/3819t6tzm6ocdjxzd9lflbkbjw4vqvfe77i.jpg" border="0" width="100%"></a><a href="https://623079.com:1066/vip.html?c=96049963991" rel="nofollow" target="_blank"><img src="https://www.2022tufafa.top/uploads/2psxjmhledfn03z67ck8vbit9arwoy5qu1g.gif" border="0" width="100%"></a><a href="https://www.aa90412.com:1066/vip.html?c=92825219560" rel="nofollow" target="_blank"><img src="https://www.2022tufafa.top/uploads/2w4xbloeayhr2qyrw7r89gb4y0b5mue1kkw.jpg" border="0" width="100%"></a></div><style type="text/css">.header{position: absolute;width: 1000px;left: 50%;margin-left: -500px;margin-top: 97px;}.header>ul>li{list-style: none;float: left;line-height: 40px;padding-right: 48px;}.header>ul>li>a{color: #fff;text-decoration: none;}.header>ul>li>a:hover{color: #f3af12fc;font-weight: bold;}#head img {padding:1px;margin:1px;margin-left: -3px;border-radius: 6px;box-shadow: 0 0 5px #cccccc;border:1px solid #ccc;}</style><div id="bc" style="width:1000px;margin:0 auto"><div style="width:1000px;margin:0 auto;"><div style="width:333px;float:left;"></div><div style="width:334px;float:left;"></div><div style="width:333px;float:left;"></div></div></div><script src="/tj.js"></script>
#6 JavaScript::Write (size: 82) - SHA256: 8ccac637f72792e21049ce06da28f7df47c53ac83b43f7fe79f3b1e26ad4c368
< script type = "text/javascript"
src = "https://js.users.51.la/20315715.js" > < /script>
#7 JavaScript::Write (size: 258) - SHA256: 7609a40956d4ccce62a4206ae7dd7d53b1cc6cbf9ebe1a01e228a4135903105e
< a href = "https://www.51.la/?comId=20315715"
title = "51.La Q�A�ߡ��"
target = "_blank" > < span style = "display:inline-block;background-color:#3F51B5;color:#fff;padding:2px 5px;font-family:arial;font-size:12px;font-weight:bold;line-height:1;" > 51 La < /span></a >


HTTP Transactions (190)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14127
Expires: Thu, 23 Mar 2023 20:53:16 GMT
Date: Thu, 23 Mar 2023 16:57:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14818
Expires: Thu, 23 Mar 2023 21:04:47 GMT
Date: Thu, 23 Mar 2023 16:57:49 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 16:15:07 GMT
age: 2562
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4ad6984a756720fbfff47b37a75513a2
Sha1:   355e35258114452af8b9638985ed9d8ef3bf0aca
Sha256: 43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15325
Expires: Thu, 23 Mar 2023 21:13:14 GMT
Date: Thu, 23 Mar 2023 16:57:49 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: kCJuw35a/i7MxwPnhADiKE/aK/D+ahSx5+M0zVIu2JWLtpMvkBW0XpjUP7zWMDeCfPgKjRxEhoE=
x-amz-request-id: Z81YX9W31W99C6R1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 16:54:07 GMT
age: 222
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 16:57:49 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4977), with CRLF, LF line terminators
Size:   7918
Md5:    43f88bacb9eaecab584743bfda6e19ba
Sha1:   1d6f17baaa5840161b7cdda31d2127e4cfc579ff
Sha256: aa65fef627a5c4f0c8b2e6b19b97a71cfd36c001a5a188726980cf4a1b8020c0
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 16:17:23 GMT
age: 2426
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /tj.js HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:49 GMT
Content-Length: 366
Last-Modified: Thu, 25 Nov 2021 06:59:24 GMT
Connection: keep-alive
ETag: "619f344c-16e"
Expires: Thu, 23 Mar 2023 17:57:49 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document, ASCII text, with CRLF line terminators
Size:   366
Md5:    228b755ac7eec52fbe28bc792ee9d098
Sha1:   c1e8fe50e24113778157e09f80c7a2404e16329a
Sha256: 94ce9ba475de57bb0f98b4ef644241b5fcaddc139f3a503428b574dcbc79e9a4
                                        
                                            GET /jquery.min.js HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:49 GMT
Last-Modified: Sat, 18 Jun 2022 03:57:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62ad4d41-f38"
Expires: Thu, 23 Mar 2023 17:57:49 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (3638)
Size:   809
Md5:    e1026d9e942f919f11b71263bd894603
Sha1:   7c50f2485a330623990aba4afca58a515464db06
Sha256: 66c657588550654a1594c37605b08b5d7493aac7caa65ad862c7e78b4070d7e3

IDS:
  - ET INFO JJEncode Encoded Script
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2830
Expires: Thu, 23 Mar 2023 17:45:00 GMT
Date: Thu, 23 Mar 2023 16:57:50 GMT
Connection: keep-alive

                                        
                                            GET /bajs/style.css HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: text/css;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   513
Md5:    83c2ee25e1845ca54a784beaec171e48
Sha1:   55c537cdf1170f99d6abda366246641ac1b54dc4
Sha256: f3fdc8761b5b10854030dc35ff3a4952e1af350b05d840909c26ef7a37f1c554
                                        
                                            GET /css/mooncode.js HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (3067)
Size:   7114
Md5:    33abfc007b3644f6892c3ba0672749ba
Sha1:   53bfbc6061c288af75b1a8b801eafab88f27f8d4
Sha256: 73051cc66ef6a2241114ce376f3b62de10e5b34ed2544e91707f59a73b203c5a
                                        
                                            GET /min.css HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: text/css;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   3670
Md5:    b446bf0d16ae6aeda0845dd66bce1fb3
Sha1:   097962abbd181fc682badce2d0fb41b79dcd527a
Sha256: 229e0d6e8f4aca4ee87a391ca9ef3c80a487e894b193100fd1a9fe475706deda
                                        
                                            GET /data.asp?menu=session HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size:   1252
Md5:    c0758e34a4f24cede81d25222e3645ed
Sha1:   eba13b3ec70a9bc016e0eb5738fd5fc3be43eb48
Sha256: 6de244d7130454e4886db275e860082781633e0d3479c25304069cf6714b5a50
                                        
                                            GET /css/css.css HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: text/css;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text
Size:   5186
Md5:    a1e8aa0dab181df92ca17f1cf7682309
Sha1:   0421099fe708e559bb53b6130788b93d8e95635f
Sha256: 53ab9760427eae069c921713eef73ac062bba8ff17d32c4f6273b5ea20437432
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gHhc3Ob6FWg6GxpUkmstGg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.202.152.202
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: q1cW+1QnF0TX/eFCe4yJtpK+KQ0=

                                        
                                            GET /bajs/ban.js HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32549), with CRLF, LF line terminators
Size:   42104
Md5:    9efb153f24e6a21ee4ee4490e7531d8f
Sha1:   ca39ee5c66fb8a957d7e3e6ba8d75c7c9ef1624c
Sha256: ae68ff7fb253a634dff7e632c588f3f31c644efe3a450fc2faadaaf8b097db22
                                        
                                            GET /d/_onebox/search.png HTTP/1.1 
Host: p1.qhimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             54.230.111.119
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Content-Length: 2941
Connection: keep-alive
Date: Mon, 06 Feb 2023 18:35:31 GMT
Last-Modified: Tue, 06 Dec 2022 08:33:09 GMT
xzp: zhkbrquvsxaf
Expires: Sun, 07 May 2023 18:35:31 GMT
Cache-Control: max-age=7776000
Access-Control-Allow-Origin: *
XCS: HIT
KCS-Via: MISS from w-fc03.lato;MISS from w-sc09.zzzc
Accept-Ranges: bytes
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UlijKXsIwE92e9YBR8E2XylNP14FpEXlL16eD8oXPT0iAHx2AP5V_A==
Age: 3882139


--- Additional Info ---
Magic:  PNG image data, 260 x 43, 8-bit colormap, non-interlaced\012- data
Size:   2941
Md5:    996729035d9ea7dbd1dcf49bf99e78d9
Sha1:   aba797d529929ca0c864eaf7d3261aee61f3ad78
Sha256: f7b46e16e323b71d7e8308e8aa62ab36453dd3b57935424f4b4166947f0e5863
                                        
                                            GET /images/UpFile/2017-3/Small_2017351837300.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351837300.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735183850.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183850.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351837420.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351837420.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201736846160.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201736846160.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351837540.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351837540.jpg

                                        
                                            GET /images/sy1_47.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_47.jpg

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 16:57:50 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 14:12:26 GMT
ETag: "0c371e22db2f2c41c28e835c3d5bbc2bca79d385"
Last-Modified: Thu, 23 Mar 2023 14:12:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2641
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac8373d8f37fac4-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    41008f71ec2fd6cecd2fb49f1f5e6083
Sha1:   0c371e22db2f2c41c28e835c3d5bbc2bca79d385
Sha256: 5e80a02a29c022442b4e7ceb98c57ace8fb1b0c9d54bfb3c33473e41ecc67370
                                        
                                            GET /images/sy1_62.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_62.jpg

                                        
                                            GET /images/sy1_59.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_59.jpg

                                        
                                            GET /images/sy1_03.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_03.jpg

                                        
                                            GET /images/sy1_26.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_26.jpg

                                        
                                            GET /images/sy1_06.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_06.jpg

                                        
                                            GET /images/sy1_29.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_29.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836270.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351836270.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836390.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351836390.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735183660.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183660.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836170.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351836170.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735183530.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183530.jpg

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8300
Expires: Thu, 23 Mar 2023 19:16:11 GMT
Date: Thu, 23 Mar 2023 16:57:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8300
Expires: Thu, 23 Mar 2023 19:16:11 GMT
Date: Thu, 23 Mar 2023 16:57:51 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:54:24 GMT
age: 32607
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6692
Md5:    c05bfdf1411a931d8ea9adc64b07bc74
Sha1:   156ef59e53564a4f2b27002b2695fafecd578d82
Sha256: 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pFCYGtd2b7lK7OBFHjCsgqqLfhtMAQDB0vyYFyf1sv-3CkSHbEh3mA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:59:52 GMT
age: 68279
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10480
Md5:    6f0b9e85381489dcf646c251722b21d4
Sha1:   5f7ea91288a2170bcabdca6be296718c4191eacd
Sha256: 911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4905
x-amzn-requestid: f2297c3e-1187-48f5-bffb-c5ea1a79a10b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFgcF4_oAMFd6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b602-02696af01c0d586c631c5b45;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:13:06 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: R9mjcik3i0kISOeO4gVZP6XhhvZO00mriabAtJ8vv1kNhRpz_lfsHQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 06:31:03 GMT
age: 37608
etag: "4f25bdbffca3803b02c196c38491223684d36b4d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4905
Md5:    90f64fe111aa6e90ebf52e0335d21b75
Sha1:   4f25bdbffca3803b02c196c38491223684d36b4d
Sha256: 37894e16112286470b7fd2e0bbd5ca74944e6cb5ca6e8aff189c4515122a0d40
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5950
x-amzn-requestid: ce85112e-428d-4ca1-9dac-1d6c8c6dc74a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CKyF9EI3oAMFtyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a96f2-05c5948d6f74948b1c67d68c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 05:49:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: tu0ENc_6tfykYc23nLfwYEMsi5HIfaDWF6dvzVTfX5rfjr3JrmMrCA==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 22:02:44 GMT
age: 68107
etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5950
Md5:    800c2662fd6ab8829a02b7d63084c38d
Sha1:   0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239
Sha256: 76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: soxgrR0B6Rz79QysB7qbMTsNYmkYfG8doOMPpTEd9uLlrE6WTcDKdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 69007
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4912
Md5:    f4a771935927950222124e14b56046df
Sha1:   d07fe53e4ac41048497b2732c017f6666c3eda9e
Sha256: 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10407
x-amzn-requestid: 87aba2e6-d7e8-4456-a12f-e05ac556b839
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqJhGnXIAMF1yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23d6-2b6c3d62366f47f506ce8415;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:38:30 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: lKww3e9Hvk0r0LPn7u6pu6Fx9V8RThNVxQEdyWVFAQdOun-53X-tLw==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:49:35 GMT
age: 68896
etag: "3343851f2128c5f1fe4302c2aa53e8ce1fb661ac"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10407
Md5:    2062cf7a271d4ac7a04c0a746d443e07
Sha1:   3343851f2128c5f1fe4302c2aa53e8ce1fb661ac
Sha256: e479263c1742d2597cf8948ef059b0bc97dbb97f47bb5cafee3d4af12069d2ce
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 15:12:13 GMT
ETag: "31985e85811c114756e87c046ce84fd5307e7e25"
Last-Modified: Thu, 23 Mar 2023 15:12:14 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3034
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac8373fa91ffac4-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    267fb50e660ac08730545ed29220dc79
Sha1:   31985e85811c114756e87c046ce84fd5307e7e25
Sha256: ceecf649ab94ed69c2dfcadd230e341e89699f59856e360e8104f3f902a82d80
                                        
                                            GET /images/UpFile/2017-3/Small_2017351835160.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351835160.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351835340.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351835340.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834270.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834270.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834390.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834390.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351829140.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351829140.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834490.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834490.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351830180.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351830180.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735183420.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183420.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834140.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834140.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351827370.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351827370.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351827510.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351827510.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735182850.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735182850.jpg

                                        
                                            GET /hm.js?c23fc0ac6957c3c18e247c827435d0b0 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11261
Date: Thu, 23 Mar 2023 16:57:51 GMT
Etag: 74275339e94889f2d1e2953e5cf7929d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=583E38707B9F6C1B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (623)
Size:   11261
Md5:    7f3133a5f2c77927344be2e5da57266b
Sha1:   1ed1ff71af568026d1bd55c35d693e67258e42ce
Sha256: d1993634e2f325a92f5f7ef68c90097fd32fa79cebb1107f4784257d6b7a9a2a
                                        
                                            GET /images/UpFile/2017-3/Small_2017351828180.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351828180.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201736846270.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201736846270.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201736846370.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201736846370.jpg

                                        
                                            GET /images/sy1_35.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_35.jpg

                                        
                                            GET /images/sy1_31.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_31.jpg

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 27 Mar 2023 13:20:50 GMT
ETag: "bab67257c3f3d074b3f891f5194143f053fa516a"
Last-Modified: Thu, 23 Mar 2023 13:20:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2644
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac837429bbcfac4-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    137a1d4335055f3fada0f00458c68e8e
Sha1:   bab67257c3f3d074b3f891f5194143f053fa516a
Sha256: a4d458deabb9d8f1f0bbc680756f09cbfc0e478fa6018ca6c30c1056a5b840a7
                                        
                                            GET /web/index/images/logo_440x140.v.4.png HTTP/1.1 
Host: www.sogou.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             118.191.216.42
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 2950
Connection: keep-alive
Last-Modified: Mon, 10 Feb 2020 03:11:55 GMT
Set-Cookie: ABTEST=3|1679590671|v17; expires=Sat, 22-Apr-23 16:57:51 GMT; path=/ IPLOC=NO; expires=Fri, 22-Mar-24 16:57:51 GMT; domain=.sogou.com; path=/ SUID=9A2A5A5B1431A40A00000000641C850F; expires=Wed, 18-Mar-2043 16:57:51 GMT; domain=.sogou.com; path=/
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
ETag: "5e40c9fb-b86"
Expires: Tue, 19 Sep 2023 16:57:51 GMT
Cache-Control: max-age=15552000
UUID: 30695f88-37ac-416a-b564-098062a11141
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 440 x 140, 8-bit colormap, non-interlaced\012- data
Size:   2950
Md5:    31de1d2fa7d918fab2f59984391db1c8
Sha1:   4f4b78796b3fbf19971f182175bcd92b01ee470f
Sha256: 29f87d6615f36a54e3edc8c7f05eb9b480d1f2989dec8da68e82747d060aea85
                                        
                                            GET /logo/gs_img/gs_logo.jpg HTTP/1.1 
Host: www.sdguguo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             119.191.59.53
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Cache-Control: private
Location: https://www.sdguguo.com/logo/gs_img/gs_logo.jpg
Server: Microsoft-IIS/10.0
Set-Cookie: ASPSESSIONIDCCADRTDR=KKGJOINCAHCEONKOMDAEOAII; path=/
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 0

                                        
                                            GET /logo/logo1.png HTTP/1.1 
Host: www.sdguguo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             119.191.59.53
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Cache-Control: private
Location: https://www.sdguguo.com/logo/logo1.png
Server: Microsoft-IIS/10.0
Set-Cookie: ASPSESSIONIDCCADRTDR=LKGJOINCFDGIKJHMBEDOEFPB; path=/
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 0

                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1948327978&si=c23fc0ac6957c3c18e247c827435d0b0&v=1.3.0&lv=1&sn=59700&r=0&ww=1280&u=http%3A%2F%2Fwww.rem-youth.com%2F&tt=%E6%96%B0%E8%91%A1%E8%90%848883%E5%AE%98%E7%BD%91%E7%99%BB%E5%BD%95%E9%A1%B5%E9%9D%A2-%E6%96%B0%E8%90%84%E4%BA%AC%E6%AD%A3%E8%A7%84%E7%BD%91%E7%AB%99 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Thu, 23 Mar 2023 16:57:51 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=C0E2FEBFF431AF88; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /images/UpFile/2017-3/Small_2017351837420.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_201736846160.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_47.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351837540.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_201735183850.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_62.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:51 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /img/baidu_jgylogo3.gif HTTP/1.1 
Host: www.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.193.88.77
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Accept-Ranges: bytes
Cache-Control: max-age=315360000
Content-Length: 705
Date: Thu, 23 Mar 2023 16:57:52 GMT
Etag: "2c1-4a6473f6030c0"
Expires: Sun, 20 Mar 2033 16:57:52 GMT
Last-Modified: Wed, 22 Jun 2011 06:40:43 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: Apache
Set-Cookie: BAIDUID=A5A13F78718479615C03D53B9CE29941:FG=1; expires=Fri, 22-Mar-24 16:57:52 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1


--- Additional Info ---
Magic:  GIF image data, version 89a, 117 x 38\012- data
Size:   705
Md5:    803bb46a6acef395ed9353de2dcf26f5
Sha1:   684764e45ebb267a15c337a6eb671047c7873ead
Sha256: dc506b4253e2bb145e5b370f6088842382a8c2bd0632d9b265744f706727f7f5
                                        
                                            GET /images/UpFile/2017-3/Small_2017351837300.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /20315715.js HTTP/1.1 
Host: js.users.51.la
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.143.19.103
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: CloudWAF
Date: Thu, 23 Mar 2023 16:57:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=8992558c7226e2c9729; path=/ HWWAFSESTIME=1679590668882; path=/
Cache-Control: max-age=360000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (5207)
Size:   2510
Md5:    427b5ce86ab0ec1d0381debd067e7c1c
Sha1:   2cf16ca67f2c3a596c4fd1e0cde3a824fc3446fb
Sha256: 81246a1e79325bc1b179b7c6d61fbb288a95f000f1a9a10e63bf48a094dfe6f9
                                        
                                            GET /images/sy1_03.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_26.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_06.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/sy1_59.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_29.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351836270.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351836390.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_201735183660.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351836170.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /hm.js?57d1b23dc10f80a577949e8a71266f25 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11263
Date: Thu, 23 Mar 2023 16:57:52 GMT
Etag: 6784a9feed91b07293f7fedc9c6dc874
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=04DAB1128427AAC6; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (625)
Size:   11263
Md5:    781ac850d301a11504f8c6e171a77712
Sha1:   ee1599a014f9b72105d8e4481db007f3f8cab6c4
Sha256: 87dd94229ef948010463c9b5decfd46cddbbbb58cd0b2da40a0ee02245f319c2
                                        
                                            GET /logo/logo1.png HTTP/1.1 
Host: www.sdguguo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.rem-youth.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             119.191.59.53
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Mon, 03 Sep 2018 09:15:06 GMT
accept-ranges: bytes
etag: "089989a6643d41:0"
server: Microsoft-IIS/10.0
date: Thu, 23 Mar 2023 16:57:52 GMT
content-length: 7587
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 185 x 22, 8-bit/color RGBA, non-interlaced\012- data
Size:   7587
Md5:    809c337840577a2697b994c2bb0d24a1
Sha1:   cf0582b14d66ea1532350bab2a07354c3b66bec5
Sha256: d4f4e8c62104df81d595d78010b0a65378cb3fdf8d6a8613408a68675f33eb72
                                        
                                            GET /logo/gs_img/gs_logo.jpg HTTP/1.1 
Host: www.sdguguo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.rem-youth.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             119.191.59.53
HTTP/2 200 OK
content-type: image/jpeg
                                            
last-modified: Thu, 20 Dec 2018 01:23:39 GMT
accept-ranges: bytes
etag: "80dfd7a2298d41:0"
server: Microsoft-IIS/10.0
date: Thu, 23 Mar 2023 16:57:52 GMT
content-length: 10212
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 156x44, components 3\012- data
Size:   10212
Md5:    e47de0b85fa1944ce25291b0864d0b2f
Sha1:   f3f80e885cdbdcaa87a471cc7231ebdc526475d8
Sha256: f76c1d6603a265aa65b0b04d4a920215d0a9df2722146f8f1a1a9b13e5a680e6
                                        
                                            GET /images/UpFile/2017-3/Small_201735183530.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351835160.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351835340.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351834270.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351834390.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351829140.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351834490.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351830180.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:52 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=859714804&si=57d1b23dc10f80a577949e8a71266f25&v=1.3.0&lv=1&sn=59701&r=0&ww=1280&u=http%3A%2F%2Fwww.rem-youth.com%2F&tt=%E6%96%B0%E8%91%A1%E8%90%848883%E5%AE%98%E7%BD%91%E7%99%BB%E5%BD%95%E9%A1%B5%E9%9D%A2-%E6%96%B0%E8%90%84%E4%BA%AC%E6%AD%A3%E8%A7%84%E7%BD%91%E7%AB%99 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Thu, 23 Mar 2023 16:57:52 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=81E70607A463A892; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /images/UpFile/2017-3/Small_201735183420.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351834140.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351827370.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351827510.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /go1?id=20315715&rt=1679590680856&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E6%2596%25B0%25E8%2590%2584%25E4%25BA%25AC%25E6%25AD%25A3%25E8%25A7%2584%25E7%25BD%2591%25E7%25AB%2599%25E4%25B8%2580%25E6%25AC%25BE%25E4%25BC%2598%25E8%25B4%25A8%25E7%259A%2584%25E7%25BA%25BF%25E4%25B8%258A%25E5%259C%25A8%25E7%25BA%25BF%25E5%25A8%25B1%25E4%25B9%2590%25E5%2593%2581%25E7%2589%258C%25E7%25BD%2591%25E7%25AB%2599%252C%25E6%2596%25B0%25E8%2591%25A1%25E8%2590%25848883&ing=1&ekc=&sid=1679590680856&tt=%25E6%2596%25B0%25E8%2591%25A1%25E8%2590%25848883%25E5%25AE%2598%25E7%25BD%2591%25E7%2599%25BB%25E5%25BD%2595%25E9%25A1%25B5%25E9%259D%25A2-%25E6%2596%25B0%25E8%2590%2584%25E4%25BA%25AC%25E6%25AD%25A3%25E8%25A7%2584%25E7%25BD%2591%25E7%25AB%2599&kw=%25E6%2596%25B0%25E8%2591%25A1%25E8%2590%25848883%25E5%25AE%2598%25E7%25BD%2591%25E7%2599%25BB%25E5%25BD%2595%25E9%25A1%25B5%25E9%259D%25A2%252C%25E6%2596%25B0%25E8%2590%2584%25E4%25BA%25AC%25E6%25AD%25A3%25E8%25A7%2584%25E7%25BD%2591%25E7%25AB%2599&cu=http%253A%252F%252Fwww.rem-youth.com%252F&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             103.143.19.103
HTTP/1.1 200
                                            
Server: CloudWAF
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=d570d1381630bf1b1040; path=/ HWWAFSESTIME=1679590669459; path=/

                                        
                                            GET /images/UpFile/2017-3/Small_201735182850.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351828180.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_201736846270.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_201736846370.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/sy1_35.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_31.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:53 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trust-provider.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
date: Thu, 23 Mar 2023 16:57:54 GMT
last-modified: Wed, 22 Mar 2023 23:56:13 GMT
expires: Wed, 29 Mar 2023 23:56:12 GMT
etag: "8de1993447e3263693296734fb55f3b938960358"
cache-control: max-age=581802,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb5
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 7ac83750ec8368ef-FRA
via: cache21.l2de2[190,0], cache1.se1[213,0], cache4.se1[217,0]
timing-allow-origin: *, *
eagleid: 2ff62c9816795906740293832e, 2ff62c9816795906740293832e

                                        
                                            GET /jquery.minjs.js HTTP/1.1 
Host: www.kkfafa.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             154.208.101.161
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Last-Modified: Fri, 17 Jun 2022 21:37:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62acf401-d56c"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (54636), with no line terminators
Size:   4274
Md5:    bafc641cf9b014bf30d3c3c3cd4da043
Sha1:   70830a251abd0a930c85954278c5ad5a5ed602da
Sha256: 32d687ecd59f070e92495e063cd3d65d17a40953ea26a3e21844ea516c8adeee
                                        
                                            GET /images/sy1_03.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_03.jpg

                                        
                                            GET /images/sy1_06.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_06.jpg

                                        
                                            GET /images/sy1_26.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_26.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836390.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351836390.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836270.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351836270.jpg

                                        
                                            GET /images/sy1_29.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_29.jpg

                                        
                                            GET /images/banner1.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/bajs/style.css
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/banner1.jpg

                                        
                                            GET /images/btn_main_img.png HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/bajs/style.css
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/btn_main_img.png

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836170.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351836170.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735183660.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183660.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351835160.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351835160.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351835340.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351835340.jpg

                                        
                                            GET /images/sy1_03.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:54 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_06.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:54 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_201735183530.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183530.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834490.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834490.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834390.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834390.jpg

                                        
                                            GET /images/11.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/min.css
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/11.jpg

                                        
                                            GET /images/left11.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/left11.jpg

                                        
                                            GET /images/22.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/22.jpg

                                        
                                            GET /images/sy1_31.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_31.jpg

                                        
                                            GET /images/sy1_26.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_201736846270.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201736846270.jpg

                                        
                                            GET /images/sy1_35.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/sy1_35.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836390.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/33.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/min.css
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/33.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201736846160.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201736846160.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201736846370.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201736846370.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351836270.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/btn_main_img.png HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/sy1_29.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/banner1.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_201735183530.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351834490.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_201735183850.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183850.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735183420.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735183420.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834270.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834270.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351834140.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351834140.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351830180.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351830180.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351829140.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351829140.jpg

                                        
                                            POST / HTTP/1.1 
Host: ocsp.trust-provider.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
date: Thu, 23 Mar 2023 16:57:55 GMT
last-modified: Wed, 22 Mar 2023 22:43:38 GMT
expires: Wed, 29 Mar 2023 22:43:37 GMT
etag: "1b4292275ac433019ac1587d91b3c98485b52026"
cache-control: max-age=586673,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 7ac837594eee3639-FRA
via: cache1.l2de2[128,0], cache1.se1[149,0], cache4.se1[153,0]
timing-allow-origin: *, *
eagleid: 2ff62c9816795906753685831e, 2ff62c9816795906753685831e

                                        
                                            GET /images/sy1_31.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_201736846270.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/sy1_35.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/33.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_201736846160.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351828180.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351828180.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201736846370.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351827510.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351827510.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735182850.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_201735182850.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351827370.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351827370.jpg

                                        
                                            GET /images/banner2.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/bajs/style.css
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/banner2.jpg

                                        
                                            GET /images/banner3.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/bajs/style.css
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/banner3.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_201735183850.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351834140.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351830180.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /hbt/index.php?keyword=%E6%96%B0%E8%91%A1%E8%90%848883%E5%AE%98%E7%BD%91%E7%99%BB%E5%BD%95%E9%A1%B5%E9%9D%A2-%E6%96%B0%E8%90%84%E4%BA%AC%E6%AD%A3%E8%A7%84%E7%BD%91%E7%AB%99&from=pc&originurl=http%3A%2F%2Fwww.rem-youth.com%2F&referer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&v=4130 HTTP/1.1 
Host: www.2022bifa.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.rem-youth.com
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             154.212.113.175
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.41
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (2808), with no line terminators
Size:   865
Md5:    dde63f6e4b346701514b5b3c3dbb7ede
Sha1:   a863b0ff427783e76a88f5bb8b4bb0f0b16b5f7c
Sha256: d744e5ee91212b0457eb01acc2458c347104760f010200ac7e5cf04b73a3cd13
                                        
                                            GET /images/UpFile/2017-3/Small_201735183420.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351834270.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 203
Connection: keep-alive
ETag: "634fd474-cb"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   203
Md5:    cb9cd8b0f034da051cd90e38533da9a8
Sha1:   287e1b09a5609f3760b962872f0499597a2f473c
Sha256: 1bc8f25431b3b49db36352de8ee6bd37efa772699ed7ac658c786e1edc41e9ca
                                        
                                            GET /images/UpFile/2017-3/Small_2017351829140.jpg HTTP/1.1 
Host: www.sgsysjx.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.rem-youth.com/
Connection: keep-alive

                                        
                                             47.91.170.222
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Thu, 23 Mar 2023 16:57:55 GMT
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   204
Md5:    eae76889205a22004a985547b8c2a952
Sha1:   ad01d247f8563ef1dade3fdf40b325319eac362a
Sha256: 977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
                                        
                                            GET /images/UpFile/2017-3/Small_2017351837540.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351837540.jpg

                                        
                                            GET /images/UpFile/2017-3/Small_2017351837420.jpg HTTP/1.1 
Host: www.rem-youth.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/
Cookie: Hm_lvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; Hm_lpvt_c23fc0ac6957c3c18e247c827435d0b0=1679590680; __tins__20315715=%7B%22sid%22%3A%201679590680856%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679592480856%7D; __51cke__=; __51laig__=1; Hm_lvt_57d1b23dc10f80a577949e8a71266f25=1679590681; Hm_lpvt_57d1b23dc10f80a577949e8a71266f25=1679590681

                                        
                                             104.253.189.29
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 16:57:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.41
Location: http://www.sgsysjx.com/images/UpFile/2017-3/Small_2017351837420.jpg

                                        
                                            GET /go1?id=20315715&rt=1679590684388&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=0&vd=2&ce=1&cd=24&ds=&ing=2&ekc=&sid=1679590680856&tt=%25E6%2596%25B0%25E8%2591%25A1%25E8%2590%25848883%25E5%25AE%2598%25E7%25BD%2591%25E7%2599%25BB%25E5%25BD%2595%25E9%25A1%25B5%25E9%259D%25A2-%25E6%2596%25B0%25E8%2590%2584%25E4%25BA%25AC%25E6%25AD%25A3%25E8%25A7%2584%25E7%25BD%2591%25E7%25AB%2599&kw=&cu=http%253A%252F%252Fwww.rem-youth.com%252F&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.rem-youth.com/

                                        
                                             103.143.19.103
HTTP/1.1 200
                                            
Server: CloudWAF
Date: Thu, 23 Mar 2023 16:57:56 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=5fbde285d41a6d778164; path=/ HWWAFSESTIME=1679590671097; path=/

                                        
                                            GET /hm.js?c23fc0ac6957c3c18e247c827435d0b0 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.rem-youth.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: 74275339e94889f2d1e2953e5cf7929d

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11261
Date: Thu, 23 Mar 2023 16:57:56 GMT
Etag: d3ef4ccac6b0daa07844c7d40512fab4
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=CA827AB4B06B8A04; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (623)
Size:   11261
Md5:    b1c6964fd8cf67795a310037e9a87853
Sha1:   d10f85fae7a2b8390b69766ffead362a2807639a
Sha256: 41f802e8ea45ce7bef3316b842f106a22889305d6327eb635adcbe2250007be1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trust-provider.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
date: Thu, 23 Mar 2023 16:57:56 GMT
last-modified: Tue, 21 Mar 2023 18:38:40 GMT
expires: Tue, 28 Mar 2023 18:38:39 GMT
etag: "61abccd9bb1a12a1098d3d173eb8a2dc1d8c80d0"
cache-control: max-age=600397,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb6