keepitneel.com/category/music/page/2
104.166.95.210301 Moved Permanently 0 B URL HTTP/1.1 keepitneel.com/category/music/page/2
IP 104.166.95.210:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /category/music/page/2 HTTP/1.1
Host: keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 31 Jan 2023 06:21:03 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.keepitneel.com/category/music/page/2
www.keepitneel.com/category/music/page/2
104.166.95.210200 OK 553 B URL HTTP/1.1 www.keepitneel.com/category/music/page/2
IP 104.166.95.210:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (756), with CRLF line terminators
Hash 101c85ba540d626df55e2946878e245c
79f8d81efcc5c70bf0835055c00973a9613ca1a8
411cda3003338c65748be5df651a04574e2ea92565c8083e15c2fffb2eec4d4b
GET /category/music/page/2 HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 05:35:52 GMT
content-type: application/json
age: 2712
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: wqlKiSztcU6b25nHqkj82NzfNfwAYz177REE3WZlseNmwaiDsqLTNFVGDXl4ygAYTcBayxd5a04=
x-amz-request-id: E0FH0XK2GHC63ARG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 05:22:05 GMT
age: 3539
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.keepitneel.com/common.js
104.166.95.210200 OK 693 B URL HTTP/1.1 www.keepitneel.com/common.js
IP 104.166.95.210:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (443), with CRLF line terminators
Hash 83a4efa0eb73ebd984942bc2e1f25a61
963c721680ab66879d1332c6d769100573036bec
3233cb151eb3ad7b782c3452c955e6f857e6ca219eeb42371298d536eb5f5acc
GET /common.js HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/category/music/page/2
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:04 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.keepitneel.com/tj.js
104.166.95.210200 OK 260 B IP 104.166.95.210:0
File type ASCII text, with CRLF line terminators
Hash 33b3088d44546517b50f97c50b3a32c7
41280cea921da33bdfb899d2d38dc7d89dd36756
21bde1b508ba154e31b38a7ab1207f54592dd5aa81fb88472aa895d8a4051ea9
GET /tj.js HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/category/music/page/2
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Type: application/x-javascript
Content-Length: 260
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 05:49:04 GMT
age: 1920
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.keepitneel.com/favicon.ico
104.166.95.210200 OK 1.2 kB URL HTTP/1.1 www.keepitneel.com/favicon.ico
IP 104.166.95.210:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.keepitneel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/category/music/page/2
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 06:21:05 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sun, 05 Feb 2023 06:21:05 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
api.xpgys11.xyz/news/index.php
107.164.49.68200 OK 47 B URL HTTP/1.1 api.xpgys11.xyz/news/index.php
IP 107.164.49.68:0
File type HTML document, ASCII text, with no line terminators
Hash fc85f8ae73e9115d7d0db8bdb3049f87
ea85207ece10f485dfafc746433640e1a00a2465
06e8aab0f94e607266dfee3aa62468025bd845498f0912b9dd9b87a0832f3569
GET /news/index.php HTTP/1.1
Host: api.xpgys11.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.keepitneel.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 06:21:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
push.services.mozilla.com/
35.82.179.239101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.82.179.239:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iXYzKqS68lom574lxzhThA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: P2P3u53ubL+g+VZh+/Cr9Qs9tFw=
api.xpgys11.xyz/news/api.php
107.164.49.68200 OK 237 B URL HTTP/1.1 api.xpgys11.xyz/news/api.php
IP 107.164.49.68:0
File type ISO-8859 text, with CRLF line terminators
Hash 0824c72f62b78828aaf6704e108d78bd
5a86d89a03a61ed35299df96872c3c078547e104
a54a46df7209ec09f84f8356dca1951bb21ed45c6914a9e4205746f09d05ed8f
GET /news/api.php HTTP/1.1
Host: api.xpgys11.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://api.xpgys11.xyz/news/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 06:21:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.cqcq9.com/
172.86.83.250200 OK 20 kB IP 172.86.83.250:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (372), with CRLF line terminators
Hash 4a20820e84b0de1c4ced3843ffb89be5
7782e7a95bc6c63e5475408e78affa880d89b18d
6bf54a26f5595748d7011723c21cebedd939cd8ea4b17ca3cec588a1ae8a6bfe
GET / HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://api.xpgys11.xyz/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sun, 04 Sep 2022 16:30:34 GMT
Accept-Ranges: bytes
ETag: "85ef9fa87bc0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 19843
www.cqcq9.com/template/default/images/style.css
172.86.83.250200 OK 4.0 kB URL HTTP/1.1 www.cqcq9.com/template/default/images/style.css
IP 172.86.83.250:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1249), with CRLF line terminators
Hash 453b536cbbbf880c1058af5ebb8d0e08
ffd0649371f7920ffbfa6f61702af4bdccc83607
b00480343fb550d2336c0ab7f182182725ba5a329e83ffec91c34b0121bde3f5
GET /template/default/images/style.css HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 03 Sep 2022 12:11:53 GMT
Accept-Ranges: bytes
ETag: "80a615a8ebfd81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 4032
www.cqcq9.com/ggvip/shang.js
172.86.83.250200 OK 127 B URL HTTP/1.1 www.cqcq9.com/ggvip/shang.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with no line terminators
Hash 37c556ac04a5f5cadb6c241a4ae8d33c
fd2005426212abc958bb547db1b4431ec248d8d1
02c7ae6783a11b627a1786042c000cc1543fa14d4f444fb1c5d71eb026bd0526
GET /ggvip/shang.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:58:59 GMT
Accept-Ranges: bytes
ETag: "8930803034c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 127
www.cqcq9.com/ggvip/dh.js
172.86.83.250200 OK 128 B URL HTTP/1.1 www.cqcq9.com/ggvip/dh.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with no line terminators
Hash 15179ef7a51cf01bcfa62c26f053ba03
83fccea4f10371803de0d124be613daf0b6ca21d
5712dc8eb13199d4b1673a8f74bf281a29ae342ce3a804e69357f807695ae2d8
GET /ggvip/dh.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:57:47 GMT
Accept-Ranges: bytes
ETag: "73daa8534c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 128
www.cqcq9.com/ggvip/zhong.js
172.86.83.250200 OK 258 B URL HTTP/1.1 www.cqcq9.com/ggvip/zhong.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with CRLF line terminators
Hash b98e12c63a82568ac37c45acfbbf9b10
64ae7e8ab2297fa3975fb646c0afdeef98bee922
f672fceda5a1db2bf1c88201fe9a3cfde5527ab18621049a2ca1216297982631
GET /ggvip/zhong.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 08:00:36 GMT
Accept-Ranges: bytes
ETag: "9bb4a76a34c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 258
www.cqcq9.com/ggvip/sp.js
172.86.83.250200 OK 127 B URL HTTP/1.1 www.cqcq9.com/ggvip/sp.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with no line terminators
Hash 077359a6f600f6603c9b05e5a692c692
78bb3067655fbacb12ad65102f03e0125011906d
1be76d46ec17d20873c26476027e7d73e20f564b9cc09d19e0a0838f23ed34b1
GET /ggvip/sp.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:59:09 GMT
Accept-Ranges: bytes
ETag: "a32bec3634c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 127
www.cqcq9.com/ggvip/xxx3.js
172.86.83.250200 OK 135 B URL HTTP/1.1 www.cqcq9.com/ggvip/xxx3.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 0b9733ec2d7643808987165f41fd2046
ec3b3bf6b9e881d1418b766b3af83df2020e6afb
9049eaa99c1e3161be8ab147b11e56e6fb4506da27fdc417520c45050e548348
GET /ggvip/xxx3.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:59:40 GMT
Accept-Ranges: bytes
ETag: "dcaffa4834c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 135
www.cqcq9.com/ggvip/dibu.js
172.86.83.250200 OK 951 B URL HTTP/1.1 www.cqcq9.com/ggvip/dibu.js
IP 172.86.83.250:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (554), with CRLF line terminators
Hash 2f0753de049179b2e3db89f74c1557a9
19c311b06e3f09f7c6b50361c40ea216bb9e632c
18bc9e82631df2723502f57e689dd73c2f7364f13277e56acade536c7e71d751
GET /ggvip/dibu.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sat, 17 Sep 2022 14:38:28 GMT
Accept-Ranges: bytes
ETag: "b637a26a3cad81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 951
www.cqcq9.com/ggvip/dl.js
172.86.83.250200 OK 268 B URL HTTP/1.1 www.cqcq9.com/ggvip/dl.js
IP 172.86.83.250:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 8bb842688c46e8a112377acca9fa43b0
68d7421d58afeb7a86aa9fd668f04fd0a90786fe
7421bbd18febccfa4870a4c4a44e6b0ed66b21556791cfb0dc1a70b3c4c9d245
GET /ggvip/dl.js HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sun, 04 Sep 2022 07:58:33 GMT
Accept-Ranges: bytes
ETag: "5cb3fa2034c0d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 268
www.cqcq9.com/images/bg.jpg
172.86.83.250200 OK 481 B URL HTTP/1.1 www.cqcq9.com/images/bg.jpg
IP 172.86.83.250:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 40x40, components 3\012- data
Hash fc45958c2a7937a709273cbbeb51821e
84d3ef6479ce1070ac197f6bac8f2e4f01f7056e
ef9a6bf14c6822f24ffdfe2ee625ab0b065bdcbc6c0aeaa040ee27bf27bc7d02
GET /images/bg.jpg HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/template/default/images/style.css
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sun, 05 Apr 2015 12:43:57 GMT
Accept-Ranges: bytes
ETag: "b8c0a52e9e6fd01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:04 GMT
Content-Length: 481
fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6f9ffb8f9e99229b45ca5fdb84ce7d5
04577ad69ee9749b14382254eb5bbf0e1edcd7fa
6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8558
x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_BFA8IAMFyvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZP2Mar8l3QoPH733_vv3hUuQjWvaN4_TgfYwme2-6WIxGi55BoSchg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 04:26:31 GMT
age: 6875
etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 15770
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v9Wphg34UGE5kkZ9RKBcphcpPuCn54oVyepzTW5rZ3J9nkL9J501PA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:03:23 GMT
age: 29863
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash fe3492909b8771e1cd672aa0e7b1bb9e
57e2d30c2867319db2dd7d86590c3ace8e0d8d56
334ab0da51510fddc45a3d36107011ae33bfdd98a7572db6f123eae6dcd9fe1e
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 04 Feb 2023 03:42:34 GMT
ETag: "57e2d30c2867319db2dd7d86590c3ace8e0d8d56"
Last-Modified: Tue, 31 Jan 2023 03:42:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2224
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205864af2eb523-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2797bfd35b7ec24888de84be14f7f2ec
8e315ac5856967286eaa8769e081d827fb4ca39e
b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:40:17 GMT
age: 9649
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 42a648f9d34d8fb703f0b80a52e0deec
7ccefd66211d249ae5266c3b6ae3375a19e5cb6d
a57f8792e8caa2a31045a141d019f53f51b633d5d04baebdae97387740c6639d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5903
x-amzn-requestid: f6fca787-17c1-4edd-9ab0-a00e2fccc7a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboufGeSoAMF-1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d487f6-58be6bdc5e3e767e1ea47b86;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:27:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZKuBcZgC6yolu1QcaXZKAIIDynG3Zywq1d7sWI8Jlq3ULwlr6XlhWQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 13:04:11 GMT
age: 62215
etag: "7ccefd66211d249ae5266c3b6ae3375a19e5cb6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash fe3492909b8771e1cd672aa0e7b1bb9e
57e2d30c2867319db2dd7d86590c3ace8e0d8d56
334ab0da51510fddc45a3d36107011ae33bfdd98a7572db6f123eae6dcd9fe1e
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 04 Feb 2023 03:42:34 GMT
ETag: "57e2d30c2867319db2dd7d86590c3ace8e0d8d56"
Last-Modified: Tue, 31 Jan 2023 03:42:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2224
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205864ace1b50c-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63486f2a937aa8fd013fc2c2d1b32f2d
e8868de34c2f79348c1edad764259eb70bebd7a6
fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mXlQ5A2PHadECkKglPquN9x68ubYk8s2to-_JjCgEQe7axfJo6K8Jw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 07:53:36 GMT
age: 80850
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fJHtDyXwBObD1U2ufFIMN54BioONBQeoxesZc8v3yWhjtdXPLgkNM3PTYQZvOaFEEsNMVw8oiEKpGHBKfhZ1Ba8V9lt%2F1M3IQC2YYHsTyS7TtwkDEyiFLAbtIPe6bzyVa9QO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205862eca5b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OYDabJkxL3eFgIGJ%2FEpTZ8QYXgs9wo1yKsRLoYaBdrVOV1V4E%2BDN0b6%2BLGZGHPAbK8F%2Beqx8HPBxjRkTNgVyQ8tXhDddUHUn%2BDm6aEzD1u0biHMY2TlIzM8TS23amw5gX66x"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205862ef0ab4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GjdvbAkdYIJo202u1hOjQ1PXEvmc1iE77XuHEu8FH5FGNtyWPPGbfb%2B3ZjjFIMh3JHMDOlN83mtemeL9lmN7jHtCBHvxKLkCtIu2RwlUIsHjumtzWbJzOfxkZZYsFo41DrXx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205862ee901bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9OwvnPQ8iP%2FQ9nRcYSclSgMrej446mWaJMT58%2B5Z%2FvvyVjoaDrEFpBBcP6%2B9JYv5rItpQ8qDoH5JNKz17y%2Fp24%2B9oAvd0MUfjduKFinNAGcg6bRujHodG%2BtLB11XSaiLuLsj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205862ebb9b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fFC5RBmR4OA64nm12Xm3Wpu6O3F8GE701d%2FsTmf42Mg5Qtxeqq%2FoW6BWAfzmTR6xnvlTigjFHWIRFTFTdWkjZ1%2BiLbKEU0Z45aNuTMazZrRZqP77ucXLfnpgtaK3Esedo%2BHx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205862eac71c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WYxRZsOB5hNXRoEZzcbklUtcKr%2Br1Lxe%2Fb%2FDBXgwvQ76YwVm5Y%2B6fse0RKI4UhVjNkrWW0S714l173YnqJrYoSIedzmxcVru1BxruZkYSRO2OaZ%2FUqAB05T0JzvNxIRwig7v"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205862ec6e1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:04 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NfF3vgTz%2FOmX%2B8GCaSQKkr3UAwyAcI0tccQO068DAPNHTeqhjowhll2YDsouwS8yr16Pkukhhricuov3Fmp50e5t91DXV2A%2FlO1nioJHg6vf8oxvPI%2F8RcbNsekCzHAs%2BmL7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058654c131c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kgb5w5hQxuh0twnT737ifUQPgo1ATS117QEApkZSSsABbbRRWD%2F8nctXi3vKeDOV99n7Pg8GG%2BKXxZEuQHyU9D6RqjeXmBPEebdjRbgCjp8N708xOKRNCkouBRhzQbFp9Qv8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058653f14b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BaB0%2BwzC2iG0gWgiU61k06z%2Fi1v1NddwjEsIEYyjf%2F4LYJzhIDXyuh%2BxI%2BlOpV60eAN9ZHw5lkVYZ6iZJBuDmeK0yeYYF0t%2BAiAfm0s8H8npofv7eEriIVR8RlenVSMq%2FPR0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058653ddcb503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u0HNSraPOPRUniS9R8qoZimHbSd8qctXQkOBHEcouIsQ8pmPQ7gTN215AnXBeFXNbp8aB5SXYPrPRjniNeg0fPCeH3bIBsRuS5%2BZUE1sWdny8jcm3tKckmI993Yncw0yULWE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058653925b4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zDGSxjKlXuDGBXPWeDfoUXvsaysblN%2BcKclQ%2BvoX%2FDqzITNxlcH8T7tQipUVvxxM7Nyiex0gXx%2FNsq8%2FsW8Gx1Uyidt36Omthui6QyJu84DvlJhg45lpQcGwrBgoNMsfaH5K"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058655db11bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EkDOpHvXpmZbdTLLDOVmQOYPk%2FsJ%2B3iP89aZMwi%2FCHPBYxfIbygu9RY0zKWr5VbL3beBGiDam%2FP%2BSRzyXX7la0I%2F8Nftz8e%2FHNoR%2BUWr%2Fk3XY0u6Nxx%2B4PRek88on9GYNnYt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7920586538461bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 9ea2f86e3c834393b9424bea4f473974
5434e7df2ccbee92c41831aa6583d5ea0aee4fbb
bf4abf126cf9291cdbf5f16562d06029aee1658ea8cc1af8eb21bc78e8108564
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=425
Date: Tue, 31 Jan 2023 06:21:07 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 9ea2f86e3c834393b9424bea4f473974
5434e7df2ccbee92c41831aa6583d5ea0aee4fbb
bf4abf126cf9291cdbf5f16562d06029aee1658ea8cc1af8eb21bc78e8108564
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=543
Date: Tue, 31 Jan 2023 06:21:07 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 9ea2f86e3c834393b9424bea4f473974
5434e7df2ccbee92c41831aa6583d5ea0aee4fbb
bf4abf126cf9291cdbf5f16562d06029aee1658ea8cc1af8eb21bc78e8108564
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=443
Date: Tue, 31 Jan 2023 06:21:07 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 9ea2f86e3c834393b9424bea4f473974
5434e7df2ccbee92c41831aa6583d5ea0aee4fbb
bf4abf126cf9291cdbf5f16562d06029aee1658ea8cc1af8eb21bc78e8108564
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=494
Date: Tue, 31 Jan 2023 06:21:07 GMT
Connection: keep-alive
X-N: S
fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
172.247.77.90200 OK 6.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 5c6769f3df7609da570824a6dbcf086d
887e92e93f03af380a0fc9b0dc01088f55eda26c
6a87b1de31c146cc93391ce7842d52516f32abf9b1ce0ea1f0b60731a18c9fbc
GET /upload/vod/2022/09-04/14/32cledzlsjq145932cledzlsjq5285.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 6612
Last-Modified: Wed, 09 Nov 2022 11:59:54 GMT
Connection: keep-alive
ETag: "636b963a-19d4"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
172.247.77.90200 OK 7.7 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash d76f7417a137e4677dd92852500e4371
634c0534af667bcc460a7c8a0e63bae21170b1aa
ae7d6e2c9c85793c746ebd8533cb3ca694d295135e9bcf26cee1bbd1e72c9694
GET /upload/vod/2022/09-04/14/w43n41w1ft51459w43n41w1ft55081.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 7733
Last-Modified: Wed, 09 Nov 2022 12:01:11 GMT
Connection: keep-alive
ETag: "636b9687-1e35"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
172.247.77.90200 OK 7.9 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 3443fb318caf862a9debd9335fc25468
0787c66245eccd6791c6e09e19e69a6c1ec2ff00
92e7515f93cd4f88d3ef20ad4cebc93c9374e2b50e03fbdf6269a9c59e089769
GET /upload/vod/2022/09-04/14/g1jpdwofwfj1459g1jpdwofwfj5183.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 7930
Last-Modified: Wed, 09 Nov 2022 11:56:52 GMT
Connection: keep-alive
ETag: "636b9584-1efa"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
172.247.77.90200 OK 8.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 9f4eb9424327cd5c666b8610a47e062d
128795c77609d677d22b8282f85bb986e3ee3515
bfa101c8fe7bb3bcd5e9af17a783484b59cd87c82739add0e2c51523e7cdb916
GET /upload/vod/2021/06-22/17/dfygq50jx0e1748dfygq50jx0e454707.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 8624
Last-Modified: Wed, 09 Nov 2022 08:22:09 GMT
Connection: keep-alive
ETag: "636b6331-21b0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
172.247.77.90200 OK 12 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash c2fd895cf3ac06ac64e398ff6992ca98
4ee50325a91303e218a659ae408180353bec6273
ba571945ce99699a737bf0ab85733ed93fa76b3a348dec90b37a0bfe1dd453b7
GET /upload/vod/2022/09-04/14/kkmbkym1rpf1459kkmbkym1rpf5387.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 11475
Last-Modified: Wed, 09 Nov 2022 11:41:35 GMT
Connection: keep-alive
ETag: "636b91ef-2cd3"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
172.247.77.90200 OK 9.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 8718225c23ac90d639e0611eef2c4b90
5dad0e9d9913bb96323b7759ebf926e7a3bb0f86
ea0abf168a4a4a65248ed610ba4e3b433e9d1bbaec7a0a8b28ae9e6b8f72338a
GET /upload/vod/2022/09-04/14/0no20n5s3a214590no20n5s3a24877.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 9049
Last-Modified: Wed, 09 Nov 2022 11:56:51 GMT
Connection: keep-alive
ETag: "636b9583-2359"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
push.zhanzhang.baidu.com/push.js
182.61.201.94200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP 182.61.201.94:0
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Tue, 31 Jan 2023 06:21:07 GMT
Etag: "4078521116"
Expires: Wed, 31 Jan 2024 06:21:07 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=859B6E2229FA99F4278197F906F272C1:FG=1; max-age=31536000; expires=Wed, 31-Jan-24 06:21:07 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ysus3WSI8FKGY2zrQNxg7HURd5qd5c2PvRzzkcBRi5ZRue9tIA5%2ByKzfs4GEqIuwuiukTynSHhPfUESH6xdi5TByVdruw7iNba7HJ46ZGuDCwBVrd%2BRCUIYUc9kFn0DJVX6J"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058676d2b1c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M7oASF%2BkpjwDS7peiP9Np2a0ByKu6SDMlwuTojoRL28%2Bw%2Bol7dWXlTOlfzUocCvwyjJ5wwgXXqjh08aRcmXwyolCd3W6aRVfpUnAY1NmbXq3W4SHSlLQxIkbMCdparBqqkWE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205867792fb4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Ex36DC8mT2w5D8kg%2BOSYwCSmxeqo7jRRJ0nadoFqJEQ8dbKYL%2B5nNaG3NlFsLu9UU%2Bp9z4R0Wfu4xQQeYGFY9BpH181lxh2BXcFqhqE5kP9n18rMyxPPnGTTFy3CVSqg%2Fdm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058679857b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
hm.baidu.com/hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (619)
Hash fd0cc611a2ea616d72914124e8431b8d
0535f7fb22dacf92a0f42c808ed76da6d6d2de53
853dfabfea78f082b4dbdb3552588f130648cf5cc847672bce508ee13ebf7db4
GET /hm.js?1ba63a59a17a9eafdf1a25ad1f6b0c33 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.keepitneel.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Tue, 31 Jan 2023 06:21:06 GMT
Etag: d798142422146e6a18b50bef53ae51ac
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=8E004D4A3CC16BE5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
172.247.77.90200 OK 6.4 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 4864c6a34bd8d59804dfb8c16a7bdcce
c87123793be85f9a847daa06f4e7f9d65877552f
c0a8389982608c13b77910a1bebf5630628f45ff85c5acb32353c810783dd541
GET /upload/vod/2022/09-04/14/sfjnx0pub1t1459sfjnx0pub1t4673.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 6426
Last-Modified: Wed, 09 Nov 2022 11:41:32 GMT
Connection: keep-alive
ETag: "636b91ec-191a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
172.247.77.90200 OK 9.1 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 68e8148a048b4e58774617639a56dccf
a7d1fa058a243be0f0e79bc73b974f909de14a91
9545741c830d93de18bf98037a031e01bd08ac7997d6543fd4da06adad7f75eb
GET /upload/vod/2022/09-04/14/3cn4y55tzza14593cn4y55tzza3753.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 9145
Last-Modified: Wed, 09 Nov 2022 12:03:25 GMT
Connection: keep-alive
ETag: "636b970d-23b9"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
172.247.77.90200 OK 10 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 6db6ac8e51aa8a830dabae99acb046e9
528c1eaa5f81ec7ff929fe0f09ac076834e158ed
97e4efaa4926d04b62b1204354626beb2d7f9256f150701d2ea8213bfbf873b0
GET /upload/vod/2022/09-04/14/nozetqcqpgw1459nozetqcqpgw4265.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 10038
Last-Modified: Wed, 09 Nov 2022 11:41:34 GMT
Connection: keep-alive
ETag: "636b91ee-2736"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
172.247.77.90200 OK 10 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash dbcd7086e90d0dc1a9b162e66f723ed8
9d0fd086f20b78c0514612055016cf62b955fcad
05acfb305c3b6f432d4b8b66bee3319a70ef09ba56df135c71a59078193b392a
GET /upload/vod/2022/09-04/14/cnxabsn4stj1459cnxabsn4stj3651.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 10247
Last-Modified: Wed, 09 Nov 2022 11:41:33 GMT
Connection: keep-alive
ETag: "636b91ed-2807"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
172.247.77.90200 OK 9.7 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 60573b859ec466fef551a1a061417e92
dea9f581ad37b196576b1c361bf8f64728c59b1c
b592b8b695147c0c12e9097e4792841f4a9fe2e7487cbe6cca951c4f0c6e996b
GET /upload/vod/2022/09-04/14/2tpvyjnriwq14592tpvyjnriwq3549.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 9744
Last-Modified: Wed, 09 Nov 2022 11:41:32 GMT
Connection: keep-alive
ETag: "636b91ec-2610"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
172.247.77.90200 OK 8.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash f7620194ccc51ce6bbe622fd849d3ae0
871bea122e0a4ac503b408135e62d04145195715
db9dad860a3c5bb024bb1147e1fc15d56c1e5bb3c44e5103231e54b2da7e8464
GET /upload/vod/2022/09-04/14/3cif1ukffsf14593cif1ukffsf4775.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 8607
Last-Modified: Wed, 09 Nov 2022 12:03:22 GMT
Connection: keep-alive
ETag: "636b970a-219f"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
172.247.77.90200 OK 8.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 263a6c573edd5625d080985fd889bef9
4af7f8f02d51546141a7ce09604b126646366d59
802e6c2e5af31821490b2e5cec282c191f1bb27296549c4b5017856e0ddde5b0
GET /upload/vod/2022/09-04/14/3mdqoloas0a14593mdqoloas0a4979.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 8155
Last-Modified: Wed, 09 Nov 2022 11:56:17 GMT
Connection: keep-alive
ETag: "636b9561-1fdb"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
172.247.77.90200 OK 9.1 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash a6dc1deaa0cf7a7755c76977c6c8863d
f3c42f46eff84218016f8ed9303b861bfb930df4
905b17dd217f7ef64d84b9412f1cbd53f62f23fa26c789ebb1f84533de757782
GET /upload/vod/2022/09-04/14/dszvles2oq11459dszvles2oq14571.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 9111
Last-Modified: Wed, 09 Nov 2022 11:41:33 GMT
Connection: keep-alive
ETag: "636b91ed-2397"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
172.247.77.90200 OK 13 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 237bfba9436391fe5b2c3a2168877877
1c6a374d7c745d1c3288177ca32405ed28ee22aa
f2f1f9495e4d3a03adbd182cd55cbc6d80c81c45cde7cd9bec6833f1c0d754d5
GET /upload/vod/2021/06-22/17/onypywdrezv1748onypywdrezv434702.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:05 GMT
Content-Type: image/jpeg
Content-Length: 12631
Last-Modified: Wed, 09 Nov 2022 08:21:12 GMT
Connection: keep-alive
ETag: "636b62f8-3157"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1601329648&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&v=1.3.0&lv=1&sn=5948&r=0&ww=1280&u=http%3A%2F%2Fwww.keepitneel.com%2Fcategory%2Fmusic%2Fpage%2F2&tt=%E5%AE%89%E9%98%B3%E6%93%9E%E5%81%88%E5%BB%BA%E6%9D%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1601329648&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&v=1.3.0&lv=1&sn=5948&r=0&ww=1280&u=http%3A%2F%2Fwww.keepitneel.com%2Fcategory%2Fmusic%2Fpage%2F2&tt=%E5%AE%89%E9%98%B3%E6%93%9E%E5%81%88%E5%BB%BA%E6%9D%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1601329648&si=1ba63a59a17a9eafdf1a25ad1f6b0c33&v=1.3.0&lv=1&sn=5948&r=0&ww=1280&u=http%3A%2F%2Fwww.keepitneel.com%2Fcategory%2Fmusic%2Fpage%2F2&tt=%E5%AE%89%E9%98%B3%E6%93%9E%E5%81%88%E5%BB%BA%E6%9D%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.keepitneel.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 31 Jan 2023 06:21:07 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=512CE12938343EE4; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
api.share.baidu.com/s.gif?r=http%3A%2F%2Fapi.xpgys11.xyz%2F&l=http://www.cqcq9.com/
39.156.68.163200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?r=http%3A%2F%2Fapi.xpgys11.xyz%2F&l=http://www.cqcq9.com/
IP 39.156.68.163:0
ASN #9808 China Mobile Communications Group Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?r=http%3A%2F%2Fapi.xpgys11.xyz%2F&l=http://www.cqcq9.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Tue, 31 Jan 2023 06:21:08 GMT
api.safe-t-first.com/dzt/S2.JS
107.164.49.70200 OK 516 B URL HTTP/2 api.safe-t-first.com/dzt/S2.JS
IP 107.164.49.70:0
File type HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash cce9b9b0f5553c835eebcf077f989c9d
8269aff775feb4d70af608111e4d3ec0a20f2f55
3defa1cb4234f5a8e2946aa44ffb7c9572965b079dc384317552987c1aa45e1d
GET /dzt/S2.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
content-length: 516
last-modified: Wed, 11 Jan 2023 04:23:58 GMT
etag: "63be39de-204"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.cqcq9.com/template/default/images/ico.png
172.86.83.250200 OK 903 B URL HTTP/1.1 www.cqcq9.com/template/default/images/ico.png
IP 172.86.83.250:0
File type PNG image data, 30 x 102, 8-bit colormap, non-interlaced\012- data
Hash cc584c48bdea33f64498bcc859885375
1c092c63a09440c9632aef2868449eda772949fa
9c9453da37e3ed5e631977ce6843ac850d213fc67894d3c7c6a1d66c2335ed1f
GET /template/default/images/ico.png HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/template/default/images/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sun, 24 Apr 2016 09:24:04 GMT
Accept-Ranges: bytes
ETag: "822265bb9ed11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Length: 903
api.safe-t-first.com/dzt/SP.JS
107.164.49.70200 OK 392 B URL HTTP/2 api.safe-t-first.com/dzt/SP.JS
IP 107.164.49.70:0
File type HTML document, ASCII text, with CRLF line terminators
Hash a819d9f803d2813eb3cf31546fe0bc42
dc71e88cc902f54ce7e33b0f10ddda0144b46f90
152c8f1a9ea0a88c5b89891ddf1dae5bcb3737fc02f2ca7feab953f0f73a1b1b
GET /dzt/SP.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
content-length: 392
last-modified: Sat, 17 Sep 2022 15:14:35 GMT
etag: "6325e45b-188"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/6a930f6a23b3124d2ff5aa97be2f83b7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HyzfIpTMwl7eBHwBqpGn%2F6IysrVsqtRD019TA9mG22gJkIisq4Yiyxqls8Kh5GC5tETdKRWgFX49fah5btCK2I1APKNntnILXIhEO9uHB7XRpmFTzp02iffvW29AT42HSjS7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7920587009e1b4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/c1105dabfe33471628d52e5f7330bcef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mYQJJPIvgtTMQ%2BrjbTcbTYA7MhscEFPCIAXPQCKPUGeDPqEdpArUGZBvC8SzCKe5D6GT8%2BkRvv1nwvIuJmZAtkW9vlAn8UWh05ctu7NVd66oNnMqK5PQ3lbMt4%2FIRYLwfM6I"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058700b3f1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/f6e7fbf4aa627c0dde88ce47f339a9ee.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7GpqqfaNeGuxwZW5fvRlLX1NmEi7pQTcH3NI9kJ7o3GIrlf%2FerKVBuwbHUHMbmruOYHVAoWq%2FWX%2BqrFLmvQkk%2BFh%2FjLpHweKBRUsBxQcLBT7bLkY8MIm8gq4EfdGybABBJdA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058700f191bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/36e80c8b098e493e344ad71891b5363c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0JQYmJRD5UthYw4wE3d7MQpqd18Qkxg%2Bl39wNunBuJhB0ULB8SBdsvoF5gapgMzP98yClswgoZgj5Hu8dxFJz7Izfxsyt2XVOS5FKEAmwjuFze1PZbXvf0Y%2BtxZzMCE%2BEATA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7920587019c71c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/0df9f05473ff1f8d019a5b01fa0936ab.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N4ppzUBfZYloaBO1DwZNpCu0220fW6dltYjxOTU2JZ7bIMUmT9Yop1iCYLxJbhgMRK49zaB1KsxO9Clg5%2BpSexIvzQ0yVw%2Bqhdea5qacnZ77Xibu2OuNFIsWh35k8HQztdsm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058701816b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a2430851a591243448289a874e8a1430.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wN34rdSmapXEFJqKoyJIwFZyHM7HJ1ol78g3%2FlyocFBJ3CbR%2BrIu0z6R46ONxLV85r3f05HSPluxI5RDgWahaRvAh%2B8lholoUpUW3L9hFPiK0A8Qg6H8yRB0ZgUZC04Yybsf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205870185db4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/2758820573dbdbe7e4175ecad76ae726.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6NGUSMTXHPfKy9uniLGa7Me399bkYgCojJVhU9alC72jr%2BxyyZkc%2BxwDcxs4il8d2Ql9fFtnzWO7FGXboqpbifL0p6mfxVDw13o9U5QypM6Iolo5Koh15PMSvUCANR8bsdB%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7920587019efb4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/33d3ea6c401d3530a23c7c6fb0472ae7.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eZzlWZ2EpDApXul98PWfv%2BpX5zF5mvsKFf6OZ%2B8o9QbLAiI6wixvqGf2%2FehDuXXDqp8ryYFIl0K%2FCiTn4%2FykGFltjhwRnPvdTDLl5lGK3fn6a66GEM9QIBKgSxI8slAMSy81"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058701b4c1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/4d7c49e3ff6a0dcbd58f1597f5927513.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HlOBWNUVHK2lqnJx9dZYoJ1bAkmSII%2FyLnUfbnVu4aCC79vRtgCJvWXEjsxcNErunSUkuJHU9ygLf3U5cTddsbbJZLnA%2FwTqvWyAJyG7%2B6MtL2ZWlJM8LJzvySW3IH%2FQC7bY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058701f221bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/53326dd3c96d25897c093843012902ef.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=081xrT8KxGE%2B2J0gJtllQ0KkgbWF%2FUidRAnkorV5tElNgGRIrhnkqGLCpQadU8Fre8hTjq4WFDOiuNQwhx6LBucW12DPbC2zdmGjuvpyG0dJ%2Bh28KwGIkUmSEIota4fPYvo8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7920587019cd1c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/af95dfba090cfdb83eb36fc2b9dbc27c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fJcWuoBNnp%2FsHouHvy6FAdJvJ1OYzNuLwpEAIYxgJH3q32Qg8DObJOXogO9gjlSHcNFTqz7fTiTkC7hqFIjugVYMMlA7CEvYzg8VZbDlA8%2BfDLQZin5IoBpDucwfy%2FOi8T1%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205870281db503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/2eec9c469e4e5f5d5dc06360c12476fe.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=85ahqhRJiP3ZrJndR95a9b1%2BNg9OXbLwpVI9ibE6cxdp5XpxtzSYV8o3%2BhbDOZW2EpQxKzevYrssNB07RLaOcMm%2B8bi5pJCnZ9bmtEUDsOFs80GmBXgbw8xUzsIkze93N%2Bgy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058702874b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash fa4612d98081846d98f14cb1c0322db2
7d2a130799b4bb8850b6d9c1286b21273451c1ec
fb211d03ddfa4257f7b6db8463fb4f3b47cdf9e6e48446d3f9c0011f9532d5ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=127654
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 06:21:08 GMT
Etag: "63d802fa-118"
Expires: Wed, 01 Feb 2023 17:48:42 GMT
Last-Modified: Mon, 30 Jan 2023 17:48:42 GMT
Server: nginx
Content-Length: 280
img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/a5a082af3add384b5ac7fc3cdc9c612c.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6oRsjyK1et7vY6YwWv3enORwEEa%2FC%2FQaGYlA871kaQMCkqWhf3uEnpAQsX8hjan6%2BtYrISnHx9RBSlqjzwee63iXPYzkggUm7Zt6%2Fj%2BIdvDY0DHrk1pzez8qgSdk0%2FhYL9sf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058703a05b4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/543db11155c7630375b17f56d9bc7b47.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=16ee6a4MccxTfk4haYhnW4pV%2B8Sp65MSWJi4%2B6ndvcz%2FBxsdi9aq%2F%2FaP9xtIZ2KS3TREVNSNnprxKCRaM0SYOO7sMnacCIkgK%2BffcdhMz0AxS5Mf5u5ZWJPFXWKnSY0T8vWG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058703b5b1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
104.21.60.164404 Not Found 109 B URL HTTP/1.1 img.guoseapi.com/upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg
IP 104.21.60.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /upload/vod/20220726-1/8491ea6348fe266ef2af9abea759725b.jpg HTTP/1.1
Host: img.guoseapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IqqOO9wUtr4bwj9Z1szXDfBgEBCAFiraB7ZMcjkNbLglvxgslHGFoORlzlHQ0KbF9yVQm%2BubyAu%2BVAnAkZbfBV6NPAuYo%2FoI0lNNMZ%2FSN7iUGFIRL7Xu4NN%2F1O45kI5NGB%2BT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792058703f301bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2500
Expires: Tue, 31 Jan 2023 07:02:48 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9486
Expires: Tue, 31 Jan 2023 08:59:14 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18591
Expires: Tue, 31 Jan 2023 11:30:59 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18209
Expires: Tue, 31 Jan 2023 11:24:37 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18591
Expires: Tue, 31 Jan 2023 11:30:59 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12919
Expires: Tue, 31 Jan 2023 09:56:27 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2500
Expires: Tue, 31 Jan 2023 07:02:48 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2500
Expires: Tue, 31 Jan 2023 07:02:48 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2500
Expires: Tue, 31 Jan 2023 07:02:48 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2500
Expires: Tue, 31 Jan 2023 07:02:48 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
172.247.77.90301 Moved Permanently 239 B URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
IP 172.247.77.90:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67194376ec810b1466000b45b043ab94
b5b0840425f5602244750801336e7e8b9efd022f
39e3595d59216b98e54c6f089954d1397d9eb7f75a2a85914881cec2eef07164
GET /upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:06 GMT
Content-Type: text/html
Content-Length: 239
Connection: keep-alive
Location: https://fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 21a26378d63653faaa9b4b9f4b0388b4
6ad7b35960513a7245be0f66b08294851c917569
f35409b8728dbfe20a868ff2046e9fbba497dc218fc1bbe9e5edb1cbb51d03d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F35409B8728DBFE20A868FF2046E9FBBA497DC218FC1BBE9E5EDB1CBB51D03D1"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14658
Expires: Tue, 31 Jan 2023 10:25:26 GMT
Date: Tue, 31 Jan 2023 06:21:08 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash 374cbe5b387f68e3cba20dd11fbab102
bacb395233cb63993ecdaefc4c7add2b009c86a7
7c3bf70c0fa7bcbb9c8a758548c1d2f48ef59908b9257f2a56e8b07e38212c34
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 04 Feb 2023 03:48:24 GMT
ETag: "bacb395233cb63993ecdaefc4c7add2b009c86a7"
Last-Modified: Tue, 31 Jan 2023 03:48:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1919
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79205871c85fb527-OSL
fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
172.247.77.90200 OK 11 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 8f6f03541b1694ba4a55cb8e755295e6
e3e6af7cd5c1068aab2b3bed7f58a60e9699290e
dc4108bf5c109dff942e6b8d0fe4e0f170574f870bea9a0a11e440b17ab4c565
GET /upload/vod/2022/09-03/12/ukgyaqrvmsb1242ukgyaqrvmsb4523587.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cqcq9.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 31 Jan 2023 06:22:06 GMT
Content-Type: image/jpeg
Content-Length: 10589
Last-Modified: Wed, 09 Nov 2022 08:20:28 GMT
Connection: keep-alive
ETag: "636b62cc-295d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
www.cqcq9.com/template/default/images/text.png
172.86.83.250200 OK 646 B URL HTTP/1.1 www.cqcq9.com/template/default/images/text.png
IP 172.86.83.250:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash ea04ca125b03bd020bded6a3ecba1c0a
d6e7e93180689b11ee0e2674c41f5585e688d62d
659f4cdc53e8585ed6e606f0575c03e66e83590e4e2adaa44db2ae539e25a77a
GET /template/default/images/text.png HTTP/1.1
Host: www.cqcq9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/template/default/images/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sat, 07 Jan 2017 10:08:44 GMT
Accept-Ranges: bytes
ETag: "56bba47ce68d21:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 31 Jan 2023 06:21:06 GMT
Content-Length: 646
api.safe-t-first.com/dzt/S4.JS
107.164.49.70200 OK 0 B URL HTTP/2 api.safe-t-first.com/dzt/S4.JS
IP 107.164.49.70:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dzt/S4.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
content-length: 0
last-modified: Fri, 16 Sep 2022 14:01:47 GMT
etag: "632481cb-0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
api.safe-t-first.com/dzt/S1.JS
107.164.49.70200 OK 10 kB URL HTTP/2 api.safe-t-first.com/dzt/S1.JS
IP 107.164.49.70:0
Hash 4e48c7affc999439b7d6586c16bcb070
1e30c1bbefd869b09ac50c0ad8e3995bf84c9feb
436aa25b523ef560f13b3c3c523374f1f125ddb6646225ff7e7b9ca84227cee0
GET /dzt/S1.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:07 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 04:28:13 GMT
vary: Accept-Encoding
etag: W/"63be3add-95c"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
api.safe-t-first.com/dzt/DL.JS
107.164.49.70200 OK 0 B URL HTTP/2 api.safe-t-first.com/dzt/DL.JS
IP 107.164.49.70:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dzt/DL.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
content-length: 0
last-modified: Thu, 15 Sep 2022 10:05:18 GMT
etag: "6322f8de-0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
sc02.alicdn.com/kf/Hf82983e650f140d4baccd79e3f84f3f1f.gif
23.36.79.152200 OK 24 kB URL HTTP/2 sc02.alicdn.com/kf/Hf82983e650f140d4baccd79e3f84f3f1f.gif
IP 23.36.79.152:0
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 200 x 260\012- data
Hash 39202890b8a45718c94d001113e9b4ae
5be1ffe30a5384abc0be6ad69cc5137bcd069870
fc3337d5ddd7f57c17481f1d3a60aaf82cd0f17643df3397b44261d77e7202cc
GET /kf/Hf82983e650f140d4baccd79e3f84f3f1f.gif HTTP/1.1
Host: sc02.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 24524
traceid: 2ff6179616496418008023065e
x-application-context: fileserver2-download:prod,hz:7001
last-modified: Wed, 28 Aug 2019 01:23:30 GMT
access-control-allow-origin: *
strict-transport-security: max-age=0
eagleid: 2ff6179616496418008023065e, 2ff6179a16586985590331043e
server-timing: rt;dur=1.321,eagleid;desc=2ff6179616496418008023065e
ali-swift-global-savetime: 1649641802
x-swift-savetime: Sun, 24 Jul 2022 21:35:59 GMT
x-swift-cachetime: 77343243
served-from: 23.204.146.63
cache-control: max-age=69485723
expires: Mon, 14 Apr 2025 11:56:32 GMT
date: Tue, 31 Jan 2023 06:21:09 GMT
network_info: NO_OSLO_50304
timing-allow-origin: *, *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash d870962b994491f20c8afe4cabe75de5
5e149afa525df646a64447ff2fc81040268df96d
83864fa6fa2ca66a19de155115f97a968719c76a5e92e465c11031943980927e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 20:12:39 GMT
Expires: Mon, 06 Feb 2023 20:12:38 GMT
Etag: "5e149afa525df646a64447ff2fc81040268df96d"
Cache-Control: max-age=567688,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79205872acf6b4e8-OSL
api.safe-t-first.com/dzt/S3.JS
107.164.49.70200 OK 1.1 kB URL HTTP/2 api.safe-t-first.com/dzt/S3.JS
IP 107.164.49.70:0
Hash 1efd98c06f46ddb927c1b81ec9834f64
d88592dea04b6a366eb0db168db7404ac729c3f4
96451be715396591009bd9c4006aec237039d43107a5e5524781c33e9678023e
GET /dzt/S3.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
last-modified: Sat, 17 Dec 2022 02:44:27 GMT
vary: Accept-Encoding
etag: W/"639d2d0b-5b9"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash d870962b994491f20c8afe4cabe75de5
5e149afa525df646a64447ff2fc81040268df96d
83864fa6fa2ca66a19de155115f97a968719c76a5e92e465c11031943980927e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 20:12:39 GMT
Expires: Mon, 06 Feb 2023 20:12:38 GMT
Etag: "5e149afa525df646a64447ff2fc81040268df96d"
Cache-Control: max-age=567688,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79205872acd1b515-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c0825cabd1205308f99c111fde28669e
a79b3a2c8696704c270edc4697e023e52bafbfb7
adf26a95629c46c9d06894523e9b422dae21f3bc091b9edb1737e320533707d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ADF26A95629C46C9D06894523E9B422DAE21F3BC091B9EDB1737E320533707D4"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14451
Expires: Tue, 31 Jan 2023 10:22:00 GMT
Date: Tue, 31 Jan 2023 06:21:09 GMT
Connection: keep-alive
api.safe-t-first.com/dzt/DINGPIAO.JS
107.164.49.70200 OK 959 B URL HTTP/2 api.safe-t-first.com/dzt/DINGPIAO.JS
IP 107.164.49.70:0
Hash bb98506761d9cac4934518eda8ec7541
67a6c8d654f6c257176fb48f6edf4e91f263a1dc
4ae267ad56da917e2327fdf8fa36480ac3678d0438a912db32e642218c2000d5
GET /dzt/DINGPIAO.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 11:27:49 GMT
vary: Accept-Encoding
etag: W/"635fb135-6b1"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?0e4c69192bebb536fa43c8edf6654341
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?0e4c69192bebb536fa43c8edf6654341
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (629)
Hash d36c4b00cebb153c025dca401117098f
f0b7abf4cdaf8be04629c311e8182c67833bbe79
3c22cf592185978739fde702508e14b456296033ea0a78c73e804b25100f4b1d
GET /hm.js?0e4c69192bebb536fa43c8edf6654341 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11267
Content-Type: application/javascript
Date: Tue, 31 Jan 2023 06:21:08 GMT
Etag: 5576c978f328d858d10b52d6532775a2
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A5401FB3C0872202; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
sdk.51.la/js-sdk-pro.min.js
47.253.50.2200 OK 13 kB URL HTTP/1.1 sdk.51.la/js-sdk-pro.min.js
IP 47.253.50.2:0
ASN #45102 Alibaba US Technology Co., Ltd.
File type Unicode text, UTF-8 text, with very long lines (34110)
Hash 29243483fe441404931c046d27be80a6
92a0c68b0169eff0addb8cc05a53f6e009d41d47
4865f22b0a68c6a0a6c2d3cbedb9a190ffbea105c4f1e2a5806172919456f3b1
GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 31 Jan 2023 06:21:09 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 10 Jan 2023 04:34:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63bceaef-861a"
Cache-Control: max-age=1296000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
xx-map.com/storage/websites/June2022/i4v0YIEW1Rq1FlVqI9hv.gif
172.67.196.234200 OK 104 kB URL HTTP/2 xx-map.com/storage/websites/June2022/i4v0YIEW1Rq1FlVqI9hv.gif
IP 172.67.196.234:0
File type GIF image data, version 89a, 200 x 200\012- data
Size 104 kB (104099 bytes)
Hash d93ca83077660fbae7839fa5837af88d
9d6a01bfa19c4cdd6f8f9e9d87864a3eb76b79d6
58aaf2652b398cfe64c8ab1014f021a1cd15a89f10e89f902182615969466207
GET /storage/websites/June2022/i4v0YIEW1Rq1FlVqI9hv.gif HTTP/1.1
Host: xx-map.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:21:09 GMT
content-type: image/gif
content-length: 104099
last-modified: Thu, 13 Oct 2022 14:31:05 GMT
etag: "63482129-196a3"
expires: Thu, 02 Mar 2023 06:21:08 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VMqvicACYLAHi5mEGJTZWivZ6Z6Qaod6AgIdMyZbftUCi%2Bco8%2Feeo%2BY%2F0PGScipFcKQq7rsXQuVTLjmpnXvrxi0TVZV1CwkDtU68zR9ga19YA1pZNKCPZqmb4FNl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 792058705ff10b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1187852318&si=0e4c69192bebb536fa43c8edf6654341&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=5950&r=0&ww=1268&u=http%3A%2F%2Fwww.cqcq9.com%2F&tt=%E5%9B%BD%E4%BA%A7%E6%BF%80%E6%83%85A%E2%88%A8%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E6%92%AD%E6%94%BE_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%BD%91%E7%AB%99_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%94%B5%E5%BD%B1%E4%B9%85%E4%B9%85%E4%B9%85_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E5%A4%A7%E8%A7%86%E9%A2%91
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1187852318&si=0e4c69192bebb536fa43c8edf6654341&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=5950&r=0&ww=1268&u=http%3A%2F%2Fwww.cqcq9.com%2F&tt=%E5%9B%BD%E4%BA%A7%E6%BF%80%E6%83%85A%E2%88%A8%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E6%92%AD%E6%94%BE_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%BD%91%E7%AB%99_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%94%B5%E5%BD%B1%E4%B9%85%E4%B9%85%E4%B9%85_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E5%A4%A7%E8%A7%86%E9%A2%91
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1187852318&si=0e4c69192bebb536fa43c8edf6654341&su=http%3A%2F%2Fapi.xpgys11.xyz%2F&v=1.3.0&lv=1&sn=5950&r=0&ww=1268&u=http%3A%2F%2Fwww.cqcq9.com%2F&tt=%E5%9B%BD%E4%BA%A7%E6%BF%80%E6%83%85A%E2%88%A8%E5%9C%A8%E7%BA%BF%E8%A7%86%E9%A2%91%E6%92%AD%E6%94%BE_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%BD%91%E7%AB%99_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E7%94%B5%E5%BD%B1%E4%B9%85%E4%B9%85%E4%B9%85_%E5%9B%BD%E4%BA%A7%E9%BB%84%E8%89%B2%E5%A4%A7%E8%A7%86%E9%A2%91 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 31 Jan 2023 06:21:09 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A2077D8DE94EA4A6; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
taiwtp1.com/img/200200.gif
220.128.218.220200 OK 75 kB URL HTTP/2 taiwtp1.com/img/200200.gif
IP 220.128.218.220:0
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 200 x 200\012- data
Hash 03c13356e00c2033df2c88cb919251eb
f3a334a0366ddda6a87034f7d6c889c4d159dc8d
0c184e206259e8d0c54d3fc12d3d5332e9f6ff5f0404630fcb2daefe65fe1bfe
GET /img/200200.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:14:10 GMT
content-type: image/gif
content-length: 75259
last-modified: Wed, 09 Mar 2022 04:51:10 GMT
etag: "6228323e-125fb"
expires: Thu, 02 Mar 2023 06:14:10 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
collect-v6.51.la/v6/collect?dt=4
103.143.19.103403 0 B URL HTTP/1.1 collect-v6.51.la/v6/collect?dt=4
IP 103.143.19.103:0
ASN #4837 CHINA UNICOM China169 Backbone
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 360
Origin: http://www.cqcq9.com
Connection: keep-alive
Referer: http://www.cqcq9.com/
HTTP/1.1 403
Server: CloudWAF
Date: Tue, 31 Jan 2023 06:21:10 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=e295b502968a9dbaf1d; path=/
HWWAFSESTIME=1675146069129; path=/
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://www.cqcq9.com
Access-Control-Allow-Credentials: true
api.safe-t-first.com/dzt/SAPP.JS
107.164.49.70200 OK 841 kB URL HTTP/2 api.safe-t-first.com/dzt/SAPP.JS
IP 107.164.49.70:0
Size 841 kB (841343 bytes)
Hash 599c9be3ce6395d703ff1c629fa99deb
b5cdc18e3d06d1757124b669139877603f39ea46
ed217e172d1e421ebfad2f692aea901284de053d9f1ca60fde08971ca2ddfad7
GET /dzt/SAPP.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 04:22:58 GMT
vary: Accept-Encoding
etag: W/"63be39a2-fb5"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
kkgif.oss-cn-hangzhou.aliyuncs.com/960x120-2.gif
47.110.177.134200 OK 319 kB URL HTTP/1.1 kkgif.oss-cn-hangzhou.aliyuncs.com/960x120-2.gif
IP 47.110.177.134:0
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 120\012- data
Size 319 kB (318990 bytes)
Hash aa24656f40e8051bc01ab3b7b54ba39c
c79fad7ee2056cbc38a2934b5836ace69855b335
dd7d9844bcdd274145914d077c70c51a5c873539c6259e5855c367d9ac7e2000
GET /960x120-2.gif HTTP/1.1
Host: kkgif.oss-cn-hangzhou.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Tue, 31 Jan 2023 06:21:09 GMT
Content-Type: image/jpg
Content-Length: 318990
Connection: keep-alive
x-oss-request-id: 63D8B3556FB42B313621AC8D
Accept-Ranges: bytes
ETag: "AA24656F40E8051BC01AB3B7B54BA39C"
Last-Modified: Fri, 14 Oct 2022 13:04:46 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11367310566151348241
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: qiRlb0DoBRvAGrO3tUujnA==
x-oss-server-time: 4
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 1127ceac79ce490d1a9b44828081a54d
6be7fa3c76c78d0152511fa08aaf461e7c619506
f01f3892ebf92bdeb8ae3fba811cbabf900ca669f43c1c963ece144325e8a766
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 18:50:25 GMT
Expires: Sat, 04 Feb 2023 18:50:24 GMT
Etag: "6be7fa3c76c78d0152511fa08aaf461e7c619506"
Cache-Control: max-age=389953,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7920587cdcf7b51d-OSL
img.firefoxcartoon.com/image/im8.webp
23.224.182.179200 OK 1.3 MB URL HTTP/2 img.firefoxcartoon.com/image/im8.webp
IP 23.224.182.179:0
File type GIF image data, version 89a, 225 x 225\012- data
Size 1.3 MB (1324517 bytes)
Hash 570ead008ba41f4b6dbda76cd5f4f928
d7f99ac7f3a3c7b4b2bbb11b73f28c5487171829
7a911fb4c82c82d2fd0afcf9fc87a282157aec861cc197e1e0fcc5a940f57c5b
GET /image/im8.webp HTTP/1.1
Host: img.firefoxcartoon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:09 GMT
content-type: image/webp
content-length: 1324517
last-modified: Mon, 14 Nov 2022 08:14:21 GMT
etag: "6371f8dd-1435e5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img.firefoxcartoon.com/image/a7.gif
23.224.182.179200 OK 1.3 MB URL HTTP/2 img.firefoxcartoon.com/image/a7.gif
IP 23.224.182.179:0
File type GIF image data, version 89a, 200 x 200\012- data
Size 1.3 MB (1264586 bytes)
Hash 24276ed40d33cdc7c91be6aee4a5c649
406a93691820e9768a0190f7a216c61b939ce22c
e6ed2d7c48fa4150292f76a06067d50597c16e7f402b030c9d2d22d8540ff733
GET /image/a7.gif HTTP/1.1
Host: img.firefoxcartoon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:09 GMT
content-type: image/gif
content-length: 1264586
last-modified: Thu, 21 Jul 2022 11:37:53 GMT
etag: "62d93a91-134bca"
expires: Thu, 02 Mar 2023 06:21:09 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash b110df5b0256588d0f217938683b71d6
bd8c2c4bc578825574a217dc0f544ac90c89aa1e
4a4b888b6329fb04ba18bbd37afaa7fd5239eee2805bde3ec4a4f9a6aa919162
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 15:57:13 GMT
Expires: Sat, 04 Feb 2023 15:57:12 GMT
Etag: "bd8c2c4bc578825574a217dc0f544ac90c89aa1e"
Cache-Control: max-age=379561,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7920587cbefcb4e8-OSL
xinchacha2dv.ocsp-certum.com/
95.101.10.193200 OK 1.5 kB URL HTTP/1.1 xinchacha2dv.ocsp-certum.com/
IP 95.101.10.193:0
ASN #20940 Akamai International B.V.
Hash d187b9fc53e6324bbcf64332d33c27bb
f475303f52f1da08285d6ddfe3a7e85abda5d1a1
40c6c2f8ad52efa98d90d7f2c20ab6f5c9d8a1d3bd927fbc79c02ec01e875fd6
POST / HTTP/1.1
Host: xinchacha2dv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1538
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Tue, 31 Jan 2023 06:21:10 GMT
Connection: keep-alive
X-N: S
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 372e9325f57d98bfce3c3b2d1fa2eef1
304a5b0decc751777981b94e9499e5fb582bdc72
afd81845d3144021da8a46e58565bbd8d855a8bae454c4cda5bc1ccf02c31cc6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 09:55:23 GMT
Expires: Mon, 06 Feb 2023 09:55:22 GMT
Etag: "304a5b0decc751777981b94e9499e5fb582bdc72"
Cache-Control: max-age=530650,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7920587fd9f5b4e8-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 5d1d1c4b00bce28b0940fdee92610f89
b71fdee8d414dccc07dcdea028c3d29d9c5cd3f9
8b2caf0602db4f6e97080a1a3f2bda702b2ac30ef07d18c3fb06f9c4e3fcea7a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 23:18:43 GMT
Expires: Mon, 06 Feb 2023 23:18:42 GMT
Etag: "b71fdee8d414dccc07dcdea028c3d29d9c5cd3f9"
Cache-Control: max-age=578850,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7920587f7f16b51d-OSL
n0611.com/a93e1206f6f94c86a27e53bdbe3863f4.gif
52.140.208.180200 OK 246 kB URL HTTP/1.1 n0611.com/a93e1206f6f94c86a27e53bdbe3863f4.gif
IP 52.140.208.180:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 180 x 180\012- data
Size 246 kB (245459 bytes)
Hash 6208f763d9d1013e36b5748d38ffa954
0e086dac9aa7d3d975d8472317bba8b088293857
16b55c3cad0274225824b3287666494454f29e1f7846b4254174803aafd880e7
GET /a93e1206f6f94c86a27e53bdbe3863f4.gif HTTP/1.1
Host: n0611.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 06:21:10 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 08 Jan 2023 13:55:16 GMT
ETag: W/"63bacb44-3c727"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
225962tyy.com/470ed5ee51fd4c618951406988fe976e.gif
103.170.15.78200 OK 276 kB URL HTTP/1.1 225962tyy.com/470ed5ee51fd4c618951406988fe976e.gif
IP 103.170.15.78:0
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 180 x 180\012- data
Size 276 kB (275781 bytes)
Hash e6b935405a2f267592cd1d81fbe51897
475f77009b099e3edfe16b9fa4b3105fab4b62ea
eb05ec6c95dddb68b7615d26c68820ab928b9c32f534b2e3eee12e1c8b97f6f3
Analyzer Verdict Alert quad9 Sinkholed
GET /470ed5ee51fd4c618951406988fe976e.gif HTTP/1.1
Host: 225962tyy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6378f199-43545"
Date: Sun, 22 Jan 2023 03:05:55 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sat, 19 Nov 2022 15:09:13 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-08
Content-Length: 275781
u1044.com/7e7ff64c2a224d31b3316a3a83786276.gif
103.170.15.48200 OK 309 kB URL HTTP/2 u1044.com/7e7ff64c2a224d31b3316a3a83786276.gif
IP 103.170.15.48:0
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 309 kB (309100 bytes)
Hash 85a34441173f1ad7d14a35ca78a4ca92
5d6216548b65b8ac46382cdc4b52c01305c5c1f8
ad6bfce666abcdf98e9ba0b238269d0b1b708c870bc21b0d066fcc57264b965f
GET /7e7ff64c2a224d31b3316a3a83786276.gif HTTP/1.1
Host: u1044.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
etag: "63a96ba3-4b76c"
server: nginx
date: Fri, 27 Jan 2023 08:56:15 GMT
content-type: image/gif
last-modified: Mon, 26 Dec 2022 09:38:43 GMT
accept-ranges: bytes
x-cache: HIT from yd11_02-cdn-g01-la2-38
content-length: 309100
X-Firefox-Spdy: h2
n0633.com/6b5d90373420481eb967eb739d7ed50f.gif
13.229.223.241200 OK 0 B URL HTTP/2 n0633.com/6b5d90373420481eb967eb739d7ed50f.gif
IP 13.229.223.241:0
GET /6b5d90373420481eb967eb739d7ed50f.gif HTTP/1.1
Host: n0633.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 06:21:10 GMT
content-type: image/gif
vary: Accept-Encoding
last-modified: Sun, 08 Jan 2023 13:55:09 GMT
etag: W/"63bacb3d-433f6"
server: WAF/2.4-12.1
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
api.safe-t-first.com/dzt/SDH.JS
107.164.49.70200 OK 0 B URL HTTP/2 api.safe-t-first.com/dzt/SDH.JS
IP 107.164.49.70:0
GET /dzt/SDH.JS HTTP/1.1
Host: api.safe-t-first.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cqcq9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 06:21:08 GMT
content-type: application/javascript
last-modified: Sun, 04 Dec 2022 13:29:13 GMT
vary: Accept-Encoding
etag: W/"638ca0a9-aa4"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2