r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11741
Expires: Sat, 28 Jan 2023 22:16:56 GMT
Date: Sat, 28 Jan 2023 19:01:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14199
Expires: Sat, 28 Jan 2023 22:57:54 GMT
Date: Sat, 28 Jan 2023 19:01:15 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 18:35:31 GMT
content-type: application/json
age: 1544
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2931
Expires: Sat, 28 Jan 2023 19:50:06 GMT
Date: Sat, 28 Jan 2023 19:01:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mcdkvGbHuR7qwcibakZDcDZDzE1I7iBa6I1WlFDtsRxgqFRbqj+ObHgfmQ2Tth+7HHcRKSXPRDc=
x-amz-request-id: KKV2BD72HMAC2V5B
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 18:21:04 GMT
age: 2411
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:15 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 18:41:40 GMT
age: 1176
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12589
Expires: Sat, 28 Jan 2023 22:31:05 GMT
Date: Sat, 28 Jan 2023 19:01:16 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: S/tiAo4m0l5Br8EySTLH0g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: E66UHco/NO2nCnrMq5rgGzKw6q8=
groupmillions.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: groupmillions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 19:01:17 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.groupmillions.com/index.php
www.groupmillions.com/index.php
200 OK 371 B URL HTTP/1.1 www.groupmillions.com/index.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash e4941117a0698ed83c2e9385b93c4591
ac0caedc8d04b274521baeea3efac27dbc36d9a3
f1e714f3a8c829ecd645b148a146bb5014e4866e11e770a7c218769fb0c7d05f
GET /index.php HTTP/1.1
Host: www.groupmillions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:01:17 GMT
Content-Type: text/html
Content-Length: 371
Connection: keep-alive
www.groupmillions.com/common.js
200 OK 749 B URL HTTP/1.1 www.groupmillions.com/common.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (438), with CRLF line terminators
Hash 15c3c0585995c7f58a1a79a0025d69e0
e5cd41244d801b1f13a2aa70fbb90a486f3f1fda
b81925961827073ce4c0edbe9d57c5a89f9563692cae1a2d0b61fc6b3b8248de
GET /common.js HTTP/1.1
Host: www.groupmillions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.groupmillions.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:01:17 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8395
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:01:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8395
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:01:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8395
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:01:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8395
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:01:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8395
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:01:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ed1a0bd725b2078b4cfe4ed83877901
62493ca03be9870aac2341e033611a6d56bd322a
706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12397
x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5HbzoAMFXsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:37 GMT
etag: "62493ca03be9870aac2341e033611a6d56bd322a"
content-type: image/jpeg
age: 75880
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c982569d070f24dba1259603091c22e3
0f93acb5bee53670cc4ef486922f7333d96a2f4e
9a5a2d8a181a763ee6f60c27b396a0e3d7b1527e5177b2aff8d511db250753ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4975
x-amzn-requestid: 633350b7-4686-40d5-8c9d-3c097f8e2d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-EBGuaoAMFbSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b3-4201212c1a0eb2a65d3f494c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: M4VR-I89SGD0-FLzHhZ88PJJJmdWTEi0UrBnAmCBCQAdjRsssqnSzw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:49:06 GMT
age: 76331
etag: "0f93acb5bee53670cc4ef486922f7333d96a2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 23:03:41 GMT
age: 71856
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4afa01d2ffe17f8378e4c0b5afd4608
f5c7e2137efa07a207427a6b6fe1df541f85ea25
84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: otEuPlfCL7DeVwGZiGJuMjxjVyGdMwxPWeCz5T_mpXboi-oRujKhBw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:48:58 GMT
age: 76339
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 75871
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K9YWM9eaEc1DQ6wtEEuADnG1U-ahRBXDaiHIAm20dkWMOxPWBlJidw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:46:13 GMT
age: 72904
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.groupmillions.com/tj.js
200 OK 518 B URL HTTP/1.1 www.groupmillions.com/tj.js
IP
File type ASCII text, with CRLF line terminators
Hash 0833f95bd97634c20080bc6dc31ab52b
f37bf6a53a9eccfa14455375c8cb33a80f8c1197
c664fb53021b5e23ae2f9a0b24a1279bcca419cf12021064fe94aaddf46ac2f4
GET /tj.js HTTP/1.1
Host: www.groupmillions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.groupmillions.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:01:17 GMT
Content-Type: application/x-javascript
Content-Length: 518
Connection: keep-alive
www.groupmillions.com/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.groupmillions.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.groupmillions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.groupmillions.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:01:18 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:22 GMT
Connection: keep-alive
ETag: "4e0d81de-47e"
Expires: Thu, 02 Feb 2023 19:01:18 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
app.gxfc567888.com/api/index.php
200 OK 48 B URL HTTP/1.1 app.gxfc567888.com/api/index.php
IP
ASN #64050 BGPNET Global ASN
File type HTML document, ASCII text, with no line terminators
Hash 046691e8308c2adf72fc25247e2f9e80
a47d4ddf558d878140dd88a539159659e781345e
49f190d90d221b19e342cf6425fbb173e894ca0531935a3b08eaf83d980a6268
GET /api/index.php HTTP/1.1
Host: app.gxfc567888.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.groupmillions.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:01:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
app.gxfc567888.com/api/data.php
200 OK 178 B URL HTTP/1.1 app.gxfc567888.com/api/data.php
IP
ASN #64050 BGPNET Global ASN
Hash 48d1d09b1a2e2afb3718cad43386f749
b391b2f916e2707aadf98a67acbb96f86441f66f
7b0b93146adc8fdff48e6454e1b51be9d878134149ab54a00fc22119a6506f25
GET /api/data.php HTTP/1.1
Host: app.gxfc567888.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://app.gxfc567888.com/api/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:01:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 2396ad0e7ca1831ca353dccce7980589
16c5a642e3d7865d60a12c9a3f47c2627fa7694e
33ac56e323ceb7f8499c717f92602cc7ecd2d81959d4d86e64b2c7ed7faa0934
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 01 Feb 2023 17:35:29 GMT
ETag: "16c5a642e3d7865d60a12c9a3f47c2627fa7694e"
Last-Modified: Sat, 28 Jan 2023 17:35:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2486
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bf9d8eb9fb4fd-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 569915c13f08a3ac2cf83082a7013e4c
aeff359184a3d7b7f729a76df91e58cdd76513ca
eee8c2603167bf71566f983f43c79d56c9a58120c8df16ce6a471a2d7867cbd3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE8C2603167BF71566F983F43C79D56C9A58120C8DF16CE6A471A2D7867CBD3"
Last-Modified: Thu, 26 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 29 Jan 2023 01:01:19 GMT
Date: Sat, 28 Jan 2023 19:01:19 GMT
Connection: keep-alive
hm.baidu.com/hm.js?ee9b92242bc6e8167aa9991d49453ae2
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?ee9b92242bc6e8167aa9991d49453ae2
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (620)
Hash ebe7248a21add371d6eafa4f4c5e5da9
e236b8299004961d7f7c0d45983475e9a4db8e08
ae4cc2a965ca0c9a22f790d832c8ec57aa4eb08438cac35e664d306a23914ec7
GET /hm.js?ee9b92242bc6e8167aa9991d49453ae2 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.groupmillions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Sat, 28 Jan 2023 19:01:19 GMT
Etag: 35d2f5a43f2edead7cef065ac8c462b7
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=952D275EFA0DA565; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?282ad46c18b6295a8bb8e1da991aa804
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?282ad46c18b6295a8bb8e1da991aa804
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (618)
Hash 5ecff6655044658c57d3993440265b79
e735a80f6db911bb7c5caaa672f08b28bad59718
390beb66014d01f85915597888e7a71783600aad794a6f3575d49c312ff5bdab
GET /hm.js?282ad46c18b6295a8bb8e1da991aa804 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.groupmillions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Content-Type: application/javascript
Date: Sat, 28 Jan 2023 19:01:19 GMT
Etag: ef6328019f2b45cfdeb68c92bb1baf55
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=B1497BF754ECA9AA; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
www.jz1014.xyz/template/m1938pc/static/css/footer.css
200 OK 786 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/footer.css
IP
File type ASCII text, with CRLF line terminators
Hash 035c39627f489e6f8371e06f956c23c2
14ac806f3909e4b3d2120ba39936867d292376f1
551bb1c2ffb8a2e628101cedb256030b199a6e1276b6d53cc62f7baf02ead8c7
GET /template/m1938pc/static/css/footer.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
content-length: 786
last-modified: Thu, 14 Oct 2021 16:57:27 GMT
etag: "61686177-312"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/default.css
200 OK 22 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/default.css
IP
File type ASCII text, with no line terminators
Hash 99bd951428de1a6dea7746c9db4face5
45a7071d97b407a28143bafb878477fbfbd5dd05
4d4e1af3c62dde233082e14491f7627f63e370721e38f8f411a26270e18f4c1b
GET /template/m1938pc/static/css/default.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
content-length: 22
last-modified: Mon, 13 Sep 2021 12:37:28 GMT
etag: "613f4608-16"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.jz1014.xyz/upload/site/20211013-1/08f24df38294685d55744d75fa64dc33.png
200 OK 14 kB URL HTTP/2 www.jz1014.xyz/upload/site/20211013-1/08f24df38294685d55744d75fa64dc33.png
IP
File type PNG image data, 180 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash b8549307d46342c96a4b1da5ba0b51e2
f3861dff285c7a5acad503c30a015cd629e341bb
72b949e9c60ad72560df7cbcc9f9e94d169992cf65377371441f7378ac30f193
GET /upload/site/20211013-1/08f24df38294685d55744d75fa64dc33.png HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: image/png
content-length: 13909
last-modified: Wed, 13 Oct 2021 11:54:13 GMT
etag: "6166c8e5-3655"
expires: Mon, 27 Feb 2023 19:01:19 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.jz1014.xyz/static/images/go.gif
200 OK 254 B URL HTTP/2 www.jz1014.xyz/static/images/go.gif
IP
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /static/images/go.gif HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: image/gif
content-length: 254
last-modified: Thu, 14 Oct 2021 06:39:43 GMT
etag: "6167d0af-fe"
expires: Mon, 27 Feb 2023 19:01:19 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=261386454&si=ee9b92242bc6e8167aa9991d49453ae2&v=1.3.0&lv=1&sn=54489&r=0&ww=1280&u=http%3A%2F%2Fwww.groupmillions.com%2Findex.php&tt=%E6%9E%9C%E6%B4%9B%E9%85%9D%E6%B2%A6%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=261386454&si=ee9b92242bc6e8167aa9991d49453ae2&v=1.3.0&lv=1&sn=54489&r=0&ww=1280&u=http%3A%2F%2Fwww.groupmillions.com%2Findex.php&tt=%E6%9E%9C%E6%B4%9B%E9%85%9D%E6%B2%A6%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=261386454&si=ee9b92242bc6e8167aa9991d49453ae2&v=1.3.0&lv=1&sn=54489&r=0&ww=1280&u=http%3A%2F%2Fwww.groupmillions.com%2Findex.php&tt=%E6%9E%9C%E6%B4%9B%E9%85%9D%E6%B2%A6%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.groupmillions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 28 Jan 2023 19:01:19 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=4FFA15765AC86A73; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=958434964&si=282ad46c18b6295a8bb8e1da991aa804&v=1.3.0&lv=1&sn=54489&r=0&ww=1280&u=http%3A%2F%2Fwww.groupmillions.com%2Findex.php&tt=%E6%9E%9C%E6%B4%9B%E9%85%9D%E6%B2%A6%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=958434964&si=282ad46c18b6295a8bb8e1da991aa804&v=1.3.0&lv=1&sn=54489&r=0&ww=1280&u=http%3A%2F%2Fwww.groupmillions.com%2Findex.php&tt=%E6%9E%9C%E6%B4%9B%E9%85%9D%E6%B2%A6%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=958434964&si=282ad46c18b6295a8bb8e1da991aa804&v=1.3.0&lv=1&sn=54489&r=0&ww=1280&u=http%3A%2F%2Fwww.groupmillions.com%2Findex.php&tt=%E6%9E%9C%E6%B4%9B%E9%85%9D%E6%B2%A6%E9%87%91%E8%9E%8D%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.groupmillions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 28 Jan 2023 19:01:20 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=9B61FF83D28B020D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
www.jz1014.xyz/template/m1938pc/static/picture/favimg.png
200 OK 172 kB URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/picture/favimg.png
IP
File type PNG image data, 1080 x 1918, 8-bit/color RGBA, non-interlaced\012- data
Size 172 kB (172027 bytes)
Hash c2cbbd773680667cb8dc7a0b88ee779c
fc158fcd1d5a3280923258eb783bd46428810af9
f72c5939d80e87ad72edf33f96b298c51bf1902e0603c18a4defee4c9c33576a
GET /template/m1938pc/static/picture/favimg.png HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: image/png
content-length: 172027
last-modified: Sun, 14 Mar 2021 06:39:32 GMT
etag: "604dafa4-29ffb"
expires: Mon, 27 Feb 2023 19:01:19 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c340abf0247d6ce2790baaf041b8aa6
736d1c8dbe2b6c755deff4b8e7408b7906eea125
1d47026a7d3d32971cc821337d4c53577262121047c7003d0ba7cfb247fa038c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D47026A7D3D32971CC821337D4C53577262121047C7003D0BA7CFB247FA038C"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6608
Expires: Sat, 28 Jan 2023 20:51:28 GMT
Date: Sat, 28 Jan 2023 19:01:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8f862e465adda5306f4d0e3b4497b6e3
55d73a1a68de11bc960817bf6048ceb88885aae4
f5aa2138ef6402f879865935fe990872dab4e5721b3e83be4fef0d595b89ba09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F5AA2138EF6402F879865935FE990872DAB4E5721B3E83BE4FEF0D595B89BA09"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3644
Expires: Sat, 28 Jan 2023 20:02:04 GMT
Date: Sat, 28 Jan 2023 19:01:20 GMT
Connection: keep-alive
www.jz1014.xyz/pf.js
404 Not Found 13 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (621)
Hash caa326878fa8b6c3318a187499cc3198
0303fccacf31dc47bfb597d95848d96d86ab7006
ede002e647a7e792f45623ee8ff395676284cc2461d887e2e376e48ba9999ec1
GET /pf.js HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 28 Jan 2023 19:01:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/blue.css
200 OK 887 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/blue.css
IP
Hash 88d3edc282805e4844c67f163d2564b1
0c4bce79f12279741283f344179fd040deb8e1ff
7608afa386a2aa9f2a0c40ce9bb6356ad4fdc91236c99505f8ad9985d7448543
GET /template/m1938pc/static/css/blue.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/template/m1938pc/static/css/default.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:28 GMT
vary: Accept-Encoding
etag: W/"613f4608-bf0"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
kvegg.com/67a0474849f4ee10ccbe3b0d2cebf337.gif
200 OK 300 kB URL HTTP/2 kvegg.com/67a0474849f4ee10ccbe3b0d2cebf337.gif
IP
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 300 kB (300302 bytes)
Hash 6133938531bc95e666b63544e0c77d37
db62577b0e8667555132d12e7dd3e2b503a1397b
6844e342c14efe1553f9941e84a36023527ce4dad7b72c020228627600a2c60a
GET /67a0474849f4ee10ccbe3b0d2cebf337.gif HTTP/1.1
Host: kvegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:20 GMT
content-type: image/gif
content-length: 300302
last-modified: Tue, 10 Jan 2023 09:17:07 GMT
etag: "63bd2d13-4950e"
expires: Sun, 29 Jan 2023 07:01:20 GMT
cache-control: max-age=43200
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gPjMaqkoUp28ZR2iwFHH%2BXEjyHxwl8ILsM6EW316iekAqKew%2F8BLLHgFR%2FqtN76HBlsi6uz9tpfwxG65Q%2FHRqnvMuvs%2FJIGtyz%2FZUKdv5g7ppsYaMEDnZC%2BopfJ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 787638a5caf78411-YVR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
n18081.com/68a7807de3933bf7079116fa9df99e6f.gif
200 OK 366 kB URL HTTP/2 n18081.com/68a7807de3933bf7079116fa9df99e6f.gif
IP
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 366 kB (366444 bytes)
Hash 86371c51bf2086f3a40f0e438246b662
9da793de9c620485ee91b88413b256c69dc774c5
8155b44efd09301dca9ec4bdab8e3e6445d1564fe580edd5f7575c9289843ccf
GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1
Host: n18081.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:20 GMT
content-type: image/gif
content-length: 366444
last-modified: Fri, 19 Aug 2022 17:02:28 GMT
etag: "62ffc224-5976c"
expires: Sun, 29 Jan 2023 07:01:20 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 1243237
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQbeWTvw%2Fe1OLHxHWTD5CVkvAsmRnYUZ1ydnI1nxcpeVeNdf%2FqDSth%2BJIRX9X%2F303n%2FaltOF5WPoAoLgbV%2BMDjAl%2Baw4fEDxkcdi72hJFTU9MNoEbu2GyIH%2F8f4p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 78d8e784298a284c-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0100812000a0gbc4iF593.gif
200 OK 212 kB URL HTTP/2 dimg04.c-ctrip.com/images/0100812000a0gbc4iF593.gif
IP
File type GIF image data, version 89a, 1140 x 100\012- data
Size 212 kB (212414 bytes)
Hash 70730bae184e481644c32bb7b632f611
498605c96e0a4b47c79e3ce0af02e111907e77d9
6fd07537bbc60b12f5708a94fb208b3afe0db2e1da1b7159956cb026ee5c535b
GET /images/0100812000a0gbc4iF593.gif HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 212414
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=2710035
expires: Wed, 01 Mar 2023 03:48:36 GMT
date: Sat, 28 Jan 2023 19:01:21 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0101u120009udrvgm786A.gif
200 OK 248 kB URL HTTP/2 dimg04.c-ctrip.com/images/0101u120009udrvgm786A.gif
IP
File type GIF image data, version 89a, 960 x 70\012- data
Size 248 kB (248461 bytes)
Hash aa6b9520d5a9b565794bdd46a2f72b2c
2c3fd7861aa54e3cefa6332c5bec2585fcce095c
356cb950ac303776b9faffc5c34e0e9a00b3f20f64cb02ad5f5d3fb399587a7d
GET /images/0101u120009udrvgm786A.gif HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 248461
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
x-edgeconnect-midmile-rtt: 6
x-edgeconnect-origin-mex-latency: 114
cache-control: max-age=2217256
expires: Thu, 23 Feb 2023 10:55:37 GMT
date: Sat, 28 Jan 2023 19:01:21 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0105c12000ae3a0t3DD7A.gif?proc=autoorient
200 OK 489 kB URL HTTP/2 dimg04.c-ctrip.com/images/0105c12000ae3a0t3DD7A.gif?proc=autoorient
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 489 kB (488987 bytes)
Hash 6a7d54ecdc2d1cce357d304db217ccec
03a803d54b6a1dd16cba5d73bf4e732d8b7be263
7cd4479b97a015f11a04b2d7d94fbe78030a7e0e3de457bf72abdbf53235c7d8
GET /images/0105c12000ae3a0t3DD7A.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 488987
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=5844872
expires: Thu, 06 Apr 2023 10:35:53 GMT
date: Sat, 28 Jan 2023 19:01:21 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
www.tupku.top/lm/031815-80.gif
200 OK 1.6 MB URL HTTP/2 www.tupku.top/lm/031815-80.gif
IP
File type GIF image data, version 89a, 500 x 281\012- data
Size 1.6 MB (1626999 bytes)
Hash 17244f3a8b60a0f7b291f5621c873713
c523f5d5b60d2eabc9084e9ba5803647ac08c2cd
4aed8c090aa7bff3de4c028efced6a87dd7645bc15d265cdddf106f3f5dd9435
GET /lm/031815-80.gif HTTP/1.1
Host: www.tupku.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/gif
content-length: 1626999
last-modified: Thu, 07 Jul 2022 15:13:11 GMT
etag: "62c6f807-18d377"
expires: Wed, 01 Feb 2023 18:22:20 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2248669
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MM2KP2FrpU99KofV1iEuurjYl%2FLLEWtDdk9uJqv6aiy1bNzFDmAsEzYxAF6%2FzjzzPfO%2BXq6bpWEH%2FUMyX0v6eDOOjc7e85zQQ0rsRz0n7nwTh2%2BMZYqE7RVAH0pv4KxD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ee1c79b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/askgnttlpcq.jpg
200 OK 10 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/askgnttlpcq.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5ac4ce1922396cb3b1ea6ea916e859b8
d186a94f8d614c9faa551f321fa468da8e3c2226
7a94cdc333f16840b7fa80197e0e12a631ac1412897ec9fe3e780f8955548ef0
GET /upload/vod/2023/01/askgnttlpcq.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 10540
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11203
content-disposition: inline; filename="askgnttlpcq.webp"
etag: "63cde8d2-2bc3"
last-modified: Mon, 23 Jan 2023 01:54:26 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b76b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/4vqz4etvaly.jpg
200 OK 8.0 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/4vqz4etvaly.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3fb35451564dd3b7b479e4570e2c44d1
39c56b307de25c3c79d85bf2dc602f2407eb46e6
8810ed710f46bbdc96cb76567c979fec442ed1c23a9cf18bb9c7233bc8984a55
GET /upload/vod/2023/01/4vqz4etvaly.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 7974
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9170
content-disposition: inline; filename="4vqz4etvaly.webp"
etag: "63cde8c4-23d2"
last-modified: Mon, 23 Jan 2023 01:54:12 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b71b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/bxduy1vkirv.jpg
200 OK 10 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/bxduy1vkirv.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 1b3472163f14ed05e5cad99138f47ff3
7639778c5d4f26a343e1fd9c68082eb1aaea1803
a7caf002f879840c7de11e9e98fb0597b900b3b00e7728fc42e5647db58c245b
GET /upload/vod/2023/01/bxduy1vkirv.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/jpeg
content-length: 10384
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10923, status=webp_bigger
etag: "63c8edcf-2aab"
last-modified: Thu, 19 Jan 2023 07:14:23 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ed2b95b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/y3n2tzjt4ck.jpg
200 OK 4.5 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/y3n2tzjt4ck.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0a893251ee9797ef53bdcd1f02500792
08f00bb4e2fca6963b0dc7b083233f3b4cc4afad
f1cdd017420c1b15299445674e01af48380ba420afd5b380031a6e7b4ce77908
GET /upload/vod/2023/01/y3n2tzjt4ck.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 4542
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6182
content-disposition: inline; filename="y3n2tzjt4ck.webp"
etag: "63c8edaa-1826"
last-modified: Thu, 19 Jan 2023 07:13:46 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed1b7bb50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/1dvg402lyca.jpg
200 OK 4.5 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/1dvg402lyca.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 466a758c4812a1e42f19928aebc86e87
29240a87571fdeede2a630dcd1ff982942078818
8ed41f2f75731dfa65c4c81da0f9e83243fe2505f4fddeb4bc12a630d2a1beaa
GET /upload/vod/2023/01/1dvg402lyca.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 4462
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6624
content-disposition: inline; filename="1dvg402lyca.webp"
etag: "63c8edd3-19e0"
last-modified: Thu, 19 Jan 2023 07:14:27 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed2b97b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/gx3dohz0ckr.jpg
200 OK 4.7 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/gx3dohz0ckr.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6625a0e47fa928118c4ffb8eec9081a5
76ddef1068936efbcd49c9977d37e4931a943f99
879a38b9a9a34c1a96de054fd5f49cce54db3f31c98ec467e29deee6d8e8b5f0
GET /upload/vod/2023/01/gx3dohz0ckr.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 4734
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7058
content-disposition: inline; filename="gx3dohz0ckr.webp"
etag: "63cde8ce-1b92"
last-modified: Mon, 23 Jan 2023 01:54:22 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b75b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/woq2x5orei1.jpg
200 OK 11 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/woq2x5orei1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 01c691e671e2f116ffd1f901e3ae1508
33ffe9762f7ab7a6fbae3d927c601281e44c1bd1
b83647863c402349af4db937cfe370c1eb8ae751edb4dfa9ae2c04dc8cf9687e
GET /upload/vod/2023/01/woq2x5orei1.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/jpeg
content-length: 10927
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11498, status=webp_bigger
etag: "63cde8b3-2cea"
last-modified: Mon, 23 Jan 2023 01:53:55 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ed0b6cb50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/bheho20r0om.jpg
200 OK 11 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/bheho20r0om.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ea85b743b60e9890160404621debcd8b
213e18e1433caddde93209f3b39ac68f8bbc534c
2ee5e71f5a5f01ebc4f9265b3f090dca079a19a6af26d1e22d5572193d0dcd13
GET /upload/vod/2023/01/bheho20r0om.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 11028
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=12019
content-disposition: inline; filename="bheho20r0om.webp"
etag: "63cde8b8-2ef3"
last-modified: Mon, 23 Jan 2023 01:54:00 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b6db50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/qb22c3bh3ir.jpg
200 OK 10 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/qb22c3bh3ir.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 45cab74fa499e75c099bb3da46035c20
9fcc3dc46d42abc36ca63f1a38561cc4255da244
916b524a64cee229f5f77ec305d8bbf3d1ac0a288fdc3735d71ad92765755a4d
GET /upload/vod/2023/01/qb22c3bh3ir.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/jpeg
content-length: 9971
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10519, status=webp_bigger
etag: "63cde8d6-2917"
last-modified: Mon, 23 Jan 2023 01:54:30 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ed0b78b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/n1zizzvtz3e.jpg
200 OK 6.4 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/n1zizzvtz3e.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a7892eee5237a3cc16d73f3ff3031b73
1e2650d72c38f0c67e6fa89ef455b80afd2b8ad1
dcb9364ed12da6077933043896a1b3b74efa6ba0b64eda8e9475eb1dbc2ed372
GET /upload/vod/2023/01/n1zizzvtz3e.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 6378
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8888
content-disposition: inline; filename="n1zizzvtz3e.webp"
etag: "63c8eda2-22b8"
last-modified: Thu, 19 Jan 2023 07:13:38 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed1b79b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/mv3p0vjqksf.jpg
200 OK 9.2 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/mv3p0vjqksf.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8a0ba1b61123bb81f0b00aad6915193b
2008440d3edf4de845d72c8606028064ce866aa2
58dcb2f769276092610f00c19a547c977d5eb67e6fa3bc39c0331fcc19729a81
GET /upload/vod/2023/01/mv3p0vjqksf.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 9150
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9907
content-disposition: inline; filename="mv3p0vjqksf.webp"
etag: "63cde8bc-26b3"
last-modified: Mon, 23 Jan 2023 01:54:04 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b6fb50b-OSL
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash bf15b2f97822b8d1d7ced4ac7dd3359f
c408c9084e5976ab02e78f31b15e43de6dd314e2
dc71cdc231367f628ff701a488bdacc0edece1e9bf7f625a6fa33f62716dd7b7
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155242
Date: Sat, 28 Jan 2023 19:01:22 GMT
Etag: "63d51c9f-1d7"
Expires: Mon, 30 Jan 2023 14:08:44 GMT
Last-Modified: Sat, 28 Jan 2023 13:01:19 GMT
Server: ECS (dcb/7F3B)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Nq1sIAReJgQgLw7lCDLv-zu5eZSXPcmNmmbsOKtVxUZqUtOFvjuy9w==
Age: 4045
fengmian.fhfhtutu.com/upload/vod/2023/01/iy11fyxgylw.jpg
200 OK 7.2 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/iy11fyxgylw.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7a582de5a9085398d01b7a691640e22c
c5503bda580e26fe826ab50adc9402d3fd11498c
5ffbe7b24c446aaa545109681b4be4815a3b04c875eef7a08389d68adbf2b72a
GET /upload/vod/2023/01/iy11fyxgylw.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 7244
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9704
content-disposition: inline; filename="iy11fyxgylw.webp"
etag: "63c8edd7-25e8"
last-modified: Thu, 19 Jan 2023 07:14:31 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed2b99b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/vb1o3akct1k.jpg
200 OK 8.7 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/vb1o3akct1k.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 41e0456429d98b071a1d263e1ff84233
e9fbdc3723a1552566fab4f906d2f06e1be0bb41
9bdbc07799be6d053bb7520c979e1f525f9073225b1d9d5a854cad6b2501b58a
GET /upload/vod/2023/01/vb1o3akct1k.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 8722
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9386
content-disposition: inline; filename="vb1o3akct1k.webp"
etag: "63c8eddb-24aa"
last-modified: Thu, 19 Jan 2023 07:14:35 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed2b9fb50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2022/12/wizytn25tlx.jpg
200 OK 9.2 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2022/12/wizytn25tlx.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cf543af5608109ca717d7ef94e2d8f03
96e3f4120372fa414c437562e008c21fbf191aad
1279c81dbdcf88ec52d53698ad26eba62ae9aa97613d08917c3bf25c37ce89cd
GET /upload/vod/2022/12/wizytn25tlx.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 9174
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10382
content-disposition: inline; filename="wizytn25tlx.webp"
etag: "6394444e-288e"
last-modified: Sat, 10 Dec 2022 08:33:18 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed2bb0b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/3dfch1vtjrf.jpg
200 OK 12 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/3dfch1vtjrf.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash a5f6fd501668128fee2d43ee9d620a43
82e6f742c0d821c00a1839224bbbff55ddec19c9
0b84644f0a65d1cace61faa7967ee315aa30a7a5f7b31c0d1c50c7b688d1862d
GET /upload/vod/2023/01/3dfch1vtjrf.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/jpeg
content-length: 12083
cf-bgj: imgq:85,h2pri
cf-polished: origSize=12655, status=webp_bigger
etag: "63c8edb5-316f"
last-modified: Thu, 19 Jan 2023 07:13:57 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ed1b81b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2022/11/e4xjv2sdpwt.jpg
200 OK 9.0 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2022/11/e4xjv2sdpwt.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash da5feeced92f8e3c28e810c0ef527631
f08838eae740023bf34c7e5184e9b9cd2412d07f
ea142c4d3bf1564fd7d219049c9be223dc7d7e73947a82ba3cd251a5fd69be69
GET /upload/vod/2022/11/e4xjv2sdpwt.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 8980
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9922
content-disposition: inline; filename="e4xjv2sdpwt.webp"
etag: "6379ed10-26c2"
last-modified: Sun, 20 Nov 2022 09:02:08 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b61b50b-OSL
X-Firefox-Spdy: h2
8881img.com/xcsj/960x80-5.gif
200 OK 523 kB URL HTTP/2 8881img.com/xcsj/960x80-5.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 523 kB (522889 bytes)
Hash d8c74f4c27d5be4113fdf1a4ad695c13
2d6b8a3355ba0a67c3db6f2dec0521d385735cd9
233a63ef3df2519470299524bb5054df03e13804c38410ee797eabaa50bc9091
GET /xcsj/960x80-5.gif HTTP/1.1
Host: 8881img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 522889
server: nginx
date: Tue, 10 Jan 2023 19:54:26 GMT
last-modified: Sat, 07 Jan 2023 12:58:09 GMT
etag: "63b96c61-7fa89"
expires: Thu, 09 Feb 2023 19:54:26 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: piwdtBricrHwF0RjAKJKi2vSFVeQ2gBXqDZfMPZkMu1v3eEf5v60Bw==
age: 1552016
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2022/12/uokxga22ifr.jpg
200 OK 12 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2022/12/uokxga22ifr.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash a436596478a48e7a2d16bd013eea3fd4
ecb7781d589c6d35c859222db2866443d47e301d
1d039c59ff5ede8ab11a9fcad955e8d21fe2faf5ac76bb9e6e5f8eb2aa9f347b
GET /upload/vod/2022/12/uokxga22ifr.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/jpeg
content-length: 11710
cf-bgj: imgq:85,h2pri
cf-polished: origSize=12300, status=webp_bigger
etag: "63944455-300c"
last-modified: Sat, 10 Dec 2022 08:33:25 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ed2bafb50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/1kofpfxjxml.jpg
200 OK 8.3 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/1kofpfxjxml.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 450ad1a765acbf36e476d486ed874bf8
a884ae52bd2705f0965ccf245825b1ca1bf7195d
ba65ce1dad9fa5c9467f1532f4ea122e1ba02851fc1b6c679809dbc471cf9428
GET /upload/vod/2023/01/1kofpfxjxml.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 8316
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9517
content-disposition: inline; filename="1kofpfxjxml.webp"
etag: "63c8edb1-252d"
last-modified: Thu, 19 Jan 2023 07:13:53 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed1b7eb50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/n0bpeviiurh.jpg
200 OK 7.2 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/n0bpeviiurh.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aef049c9c552e7266e772caa1408e148
a35485807ee187088048f6dac74cde24bbfb2d1b
b6542645851bef23af2e22200461b731a77f97e06ce8df7b476277458b0c78a9
GET /upload/vod/2023/01/n0bpeviiurh.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 7194
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8111
content-disposition: inline; filename="n0bpeviiurh.webp"
etag: "63c8eda6-1faf"
last-modified: Thu, 19 Jan 2023 07:13:42 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed1b7ab50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2022/12/b0ikgw5d2zd.jpg
200 OK 11 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2022/12/b0ikgw5d2zd.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 963027282aed9bfd82378e1b9db3fdd7
b0cf43e30d9f4450e5a44c689b0d15d29b803339
ba75d61c02a033548aa4aa1fa3c55d908eedb58f2f61e0ad2a1ff6935af4317f
GET /upload/vod/2022/12/b0ikgw5d2zd.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/jpeg
content-length: 10598
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11188, status=webp_bigger
etag: "639c03ca-2bb4"
last-modified: Fri, 16 Dec 2022 05:36:10 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ed0b69b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/yez24ye24jf.jpg
200 OK 9.1 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/yez24ye24jf.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4466445abf8d47c408ed80e1e7505203
1d0d22f0a1b96183a9ffa7c1e4ff6df08d54f2ce
c712ca48bcbb8a55c52b6f1ef0e94758c01dca4e51a2277fca04b35c6e4e8153
GET /upload/vod/2023/01/yez24ye24jf.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 9082
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9630
content-disposition: inline; filename="yez24ye24jf.webp"
etag: "63c8edca-259e"
last-modified: Thu, 19 Jan 2023 07:14:18 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed1b86b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/mwaq2vax3qh.jpg
200 OK 5.3 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/mwaq2vax3qh.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b08e602eac63c69d33677da14331e670
02be75af95e93ade85835a5ed1b96a6992a9bf77
d922985389b0c2fe5dee94c68763384ea607b87e016626146be342789d7d3489
GET /upload/vod/2023/01/mwaq2vax3qh.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 5328
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7587
content-disposition: inline; filename="mwaq2vax3qh.webp"
etag: "63cde8b0-1da3"
last-modified: Mon, 23 Jan 2023 01:53:52 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b6bb50b-OSL
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 8f18de1684fc20e1c925ad6f9298675d
44a103adf1fe6b1685e5cb3621b1985189dabbb1
e29120d3c99bb16eaf9a63cb06bca750848c6cec03710bb5a34252f4c415bfd9
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=242
Date: Sat, 28 Jan 2023 19:01:22 GMT
Connection: keep-alive
X-N: S
fengmian.fhfhtutu.com/upload/vod/2023/01/4ei3ejqb533.jpg
200 OK 6.8 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/4ei3ejqb533.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3a7961dc98151f99307777ed45ea40a4
8378abdbe0115302662c9528f8e74d92f31071d6
a3543a8f538d17b6125a7a25c03286376342a4f15a184d1ca8946197b8dd8974
GET /upload/vod/2023/01/4ei3ejqb533.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 6794
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8919
content-disposition: inline; filename="4ei3ejqb533.webp"
etag: "63c8edae-22d7"
last-modified: Thu, 19 Jan 2023 07:13:50 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed1b7cb50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/n1nol1abnjb.jpg
200 OK 5.9 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/n1nol1abnjb.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 348077dd9f0d7706ca52fa388ef48c04
fbe4798ded96d764ce5ca1983f51bdb47d20a253
dc76d09523a53ad0a13a4e3e794d3c8c0299e25410390e61ad92269be57775bd
GET /upload/vod/2023/01/n1nol1abnjb.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 5906
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7066
content-disposition: inline; filename="n1nol1abnjb.webp"
etag: "63cde8c0-1b9a"
last-modified: Mon, 23 Jan 2023 01:54:08 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b70b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/3t1l0fkhycj.jpg
200 OK 6.1 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/3t1l0fkhycj.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 60368e69da4111d362295028c5162278
38cb004e6b9f7bedb1ee3a832a968eab5de16a0b
eb570cb861c2e3a1190e0ca07c8892cb098a8bcfdef8d552a17073d3fc3aa4fc
GET /upload/vod/2023/01/3t1l0fkhycj.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 6130
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8489
content-disposition: inline; filename="3t1l0fkhycj.webp"
etag: "63c8edba-2129"
last-modified: Thu, 19 Jan 2023 07:14:02 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed1b85b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2022/12/3j2eylbu2yo.jpg
200 OK 5.4 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2022/12/3j2eylbu2yo.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ffcb5c0498d4b06a31af409a7878308e
f8dc8758e4ed560c11b94cd0132eac88bc8a4e5f
32ace819f819a57f57999334d3db35410e8e92d78c364c71df5ef92bccbacacb
GET /upload/vod/2022/12/3j2eylbu2yo.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 5370
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7687
content-disposition: inline; filename="3j2eylbu2yo.webp"
etag: "63944459-1e07"
last-modified: Sat, 10 Dec 2022 08:33:29 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed2bb5b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/4s20ckzaooc.jpg
200 OK 9.2 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/4s20ckzaooc.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 91e39db35e830dbe6ecbf2f0f77408ff
9ed1264648a9fdb36b8cb8eb23ee3cb3939cf0c8
5f70b08007bcf12e87e635b39d0e4b2d7902523c1fd589ffc4c58469a9a9c7a2
GET /upload/vod/2023/01/4s20ckzaooc.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 9226
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10143
content-disposition: inline; filename="4s20ckzaooc.webp"
etag: "63cde8c9-279f"
last-modified: Mon, 23 Jan 2023 01:54:17 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed0b73b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2022/11/k2v53j32wfq.jpg
200 OK 11 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2022/11/k2v53j32wfq.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 1b8f9d5fef2e7a5ddde54f4a7c271eb0
f758f2ee81e1fc7ed5d9332711c5d6b9bebc2d38
9375f608d940f60b7c5847c1c1de5d2b76de5206c587c4e46879a79f02637554
GET /upload/vod/2022/11/k2v53j32wfq.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/jpeg
content-length: 10722
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11204, status=webp_bigger
etag: "6379ed0c-2bc4"
last-modified: Sun, 20 Nov 2022 09:02:04 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bf9ed2bb2b50b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2022/12/sbj2nwetsbv.jpg
200 OK 10 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2022/12/sbj2nwetsbv.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a3d8e77b8ad0be2f8cd867b71065e0dd
a763be24ff43fc84d14ed7d542c4750c3b81024d
ac5201dc8d46546a4ffed2fdbb389ff1b443ae677b6aeb98289f0bad0d10b139
GET /upload/vod/2022/12/sbj2nwetsbv.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/webp
content-length: 10114
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10969
content-disposition: inline; filename="sbj2nwetsbv.webp"
etag: "6394445d-2ad9"
last-modified: Sat, 10 Dec 2022 08:33:33 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 790bf9ed2ba0b50b-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2946de68fa935006d1bf36c58a43231f
270673decfb1754762a3d253bb450a187ef48b34
91fd3eba2642d692410c6fafdb7ad645e476f12f8578979ea6d66476499eaeaa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 27 Jan 2023 21:49:32 GMT
Expires: Fri, 03 Feb 2023 21:49:31 GMT
Etag: "270673decfb1754762a3d253bb450a187ef48b34"
Cache-Control: max-age=527888,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790bf9ef2b5b0b39-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 062d3eb09ca90a7344d921ddc7149f6c
ecde12a6c004bae4f8a859290e367f6d6b1855ce
1b407631fed5eb5323d48f59675e80c4d8b0d259dc0c6fea134b3e51a2a49170
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:22 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 13:22:16 GMT
Expires: Thu, 02 Feb 2023 13:22:15 GMT
Etag: "ecde12a6c004bae4f8a859290e367f6d6b1855ce"
Cache-Control: max-age=411052,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790bf9ef291b1c0a-OSL
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 576967317a73096b9fc9c911816a0715
a62047f811ff0e926854b2b84be58d2623b3a379
f96035b9e54ee0e8ccae7a02083d788ff5162cf703016c0d7a5bf9c8e757ce1b
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:22 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 07:03:58 GMT
Expires: Sat, 04 Feb 2023 07:03:57 GMT
Etag: "a62047f811ff0e926854b2b84be58d2623b3a379"
Cache-Control: max-age=561154,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790bf9ef2ba9fab4-OSL
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 74a158a2a222174e57b8b2016f8ca791
4934df4229cbd5704643c0da629bf8fce7421393
a54314940746ed9da9b351677da40552b294c8ed4ded7b8a2c427b4d85556912
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=845
Date: Sat, 28 Jan 2023 19:01:22 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 1afea3a524b9a77a959860b97fe7a3d9
67cd7724bb5fa9ea7a6f1fa831b998667771dfaa
d9c0c309cf269f6bc4c8a2a7b5e768868c32900696be8610241a3fe3031af684
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=719
Date: Sat, 28 Jan 2023 19:01:22 GMT
Connection: keep-alive
X-N: S
ocsp.digicert.com/
200 OK 278 B IP
Hash 7449c753a4aa0ac480e5c663f12030d7
332bcfe547cb9912aa670c57cfa06079340f7acf
61434e2f861490a6b554014805720b3f480ba84e6d1d98d8555f7ac592a9f119
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:01:22 GMT
Etag: "63d3dd32-118"
Server: ECS (amb/6BA2)
Content-Length: 278
ocsp.sectigo.com/
200 OK 471 B IP
Hash 31e932de520f10fca985db18b3e8673d
a44872ded7eb11b46f84cea8834cfc1026333867
f2e1a6c7bc596f2c8a8415050b6566ad3ea827d062f8ae0d23567739e9d198a6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 27 Jan 2023 06:56:42 GMT
Expires: Fri, 03 Feb 2023 06:56:41 GMT
Etag: "a44872ded7eb11b46f84cea8834cfc1026333867"
Cache-Control: max-age=474318,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790bf9f01bebb4f4-OSL
ocsp.digicert.com/
200 OK 278 B IP
Hash 7449c753a4aa0ac480e5c663f12030d7
332bcfe547cb9912aa670c57cfa06079340f7acf
61434e2f861490a6b554014805720b3f480ba84e6d1d98d8555f7ac592a9f119
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:01:22 GMT
Last-Modified: Sat, 28 Jan 2023 19:01:22 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7e538e14ea9d5e0b77d45f0e6f091788
c8901fca75c1058cedfa1d7292e4d9d058012d39
29305b7339758372ccc825cd8ab521e1ed2fd94cf6c36bad309181aaa997c7b0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 27 Jan 2023 12:14:19 GMT
Expires: Fri, 03 Feb 2023 12:14:18 GMT
Etag: "c8901fca75c1058cedfa1d7292e4d9d058012d39"
Cache-Control: max-age=493375,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790bf9ef2b1c1bfa-OSL
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash bf15b2f97822b8d1d7ced4ac7dd3359f
c408c9084e5976ab02e78f31b15e43de6dd314e2
dc71cdc231367f628ff701a488bdacc0edece1e9bf7f625a6fa33f62716dd7b7
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 19:01:22 GMT
Server: ECS (dcb/7F15)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4TrrXlj8-E_EEn1L7XpdcZcnrVGiXxAp_Pc5MUK_oEH-kD_lUkdJGQ==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64c1de1ad7913cc8d387313adbda764e
1dd3429d23298122a24e9c01ffffa36a0e377676
946d63faeeb2c05da4f88a4241168c55bcd024f8070fa2a644204de62c3b50e6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "946D63FAEEB2C05DA4F88A4241168C55BCD024F8070FA2A644204DE62C3B50E6"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9765
Expires: Sat, 28 Jan 2023 21:44:08 GMT
Date: Sat, 28 Jan 2023 19:01:23 GMT
Connection: keep-alive
683tuchuang.com/683x120.gif
200 OK 183 kB URL HTTP/1.1 683tuchuang.com/683x120.gif
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type GIF image data, version 89a, 960 x 120\012- data
Size 183 kB (182875 bytes)
Hash ad8f1800661ecd67492f302ba866a381
184ac92a82361aa849ebecc00b03ff1764b949d1
837f1d33712108b510cccb6cd6ab817433ab826221d14847798cdef915ccdb58
GET /683x120.gif HTTP/1.1
Host: 683tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:22 GMT
Content-Type: image/gif
Content-Length: 182875
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 07:09:18 GMT
ETag: "63d4ca1e-2ca5b"
Expires: Mon, 27 Feb 2023 07:09:59 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
fmtu.netfhtu.com/upload/vod/2021/05/f1zrg3bo3x0.jpg
200 OK 14 kB URL HTTP/1.1 fmtu.netfhtu.com/upload/vod/2021/05/f1zrg3bo3x0.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 4dd86c34a0cd3e53157cf1c1be95a0ae
b76bd237ef2f09b89b6febfa8b1fdeef07e1c251
dc6e496a397d736957eea2c5f6eacd8e68b0948f86ebba5bb8ad52894dc537b5
GET /upload/vod/2021/05/f1zrg3bo3x0.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 28 Jan 2023 19:01:22 GMT
Content-Type: image/jpeg
Content-Length: 13932
Connection: keep-alive
Last-Modified: Mon, 24 May 2021 22:01:39 GMT
ETag: "60ac2243-366c"
Accept-Ranges: bytes
66888aaa.com/6a7891198af94f218ccc6ac153fbe699.gif
200 OK 177 kB URL HTTP/1.1 66888aaa.com/6a7891198af94f218ccc6ac153fbe699.gif
IP
File type GIF image data, version 89a, 750 x 100\012- data
Size 177 kB (177167 bytes)
Hash 65f3e7c7cb8287f8477fb705f58a7161
8e09c7d7dd79ff1119bda6fe3732df42c64b0b74
2b94d9ea2bf175666a90d69a766391c1b5475d88509121b7bd784fa37609a808
GET /6a7891198af94f218ccc6ac153fbe699.gif HTTP/1.1
Host: 66888aaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "639ad059-2b40f"
Date: Fri, 13 Jan 2023 12:19:11 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Thu, 15 Dec 2022 07:44:25 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-27
Content-Length: 177167
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 54b3f72e596fe638a4a6ded2f92c0f52
b99ef6713bcc28114686a8b4c1077ae53b700f5e
5c8b7bbd8c05049300cb02e764979866d0aacac079a267d76bfc1baa37096aa8
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:23 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Wed, 01 Feb 2023 17:46:04 GMT
ETag: "b99ef6713bcc28114686a8b4c1077ae53b700f5e"
Last-Modified: Sat, 28 Jan 2023 17:46:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 752
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bf9f49b9ab4f9-OSL
ocsp.digicert.com/
200 OK 727 B IP
Hash a53c538d9b475ffd4b3bf1f449b5ac4f
a219949fa97428fa4f14cc2597b7108e511589f2
6f89d7950d7206ab453fb10495ffbed6ee62d6868d6f149a33592981934b63fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 628
Cache-Control: max-age=97455
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:01:23 GMT
Etag: "63d4483e-2d7"
Expires: Sun, 29 Jan 2023 22:05:38 GMT
Last-Modified: Fri, 27 Jan 2023 21:55:10 GMT
Server: ECS (amb/6B74)
X-Cache: HIT
Content-Length: 727
8499159.com/8499/zzxx/960x60.gif
200 OK 291 kB URL HTTP/2 8499159.com/8499/zzxx/960x60.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 291 kB (290572 bytes)
Hash 57aeaeed8e55b2a1e23b348d9d73f9d5
381bc182c18210ba33ebe13cbf8f20f297d33c16
e10903ca99193ba8ffd6c5f74753461cf070e75026e73fda3c040496f8dcfdb6
GET /8499/zzxx/960x60.gif HTTP/1.1
Host: 8499159.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/gif
content-length: 290572
last-modified: Sat, 24 Dec 2022 13:23:32 GMT
etag: "46f0c-5f092cf097c3f"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/70c57cabb92242258bbf034be8584f7f
200 OK 343 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/70c57cabb92242258bbf034be8584f7f
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 343 kB (343002 bytes)
Hash ce862703bd3a6fd9e7acc3c32453fe84
c27754e24547e935314ba986477cd326628af7e4
eb9f779660b2713488854f27a211239724bb29b842e939424ec882b51520350b
GET /obj/tos-cn-i-dy/70c57cabb92242258bbf034be8584f7f HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 343002
date: Sat, 17 Dec 2022 10:28:23 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Sat, 17 Dec 2022 10:00:43 GMT
nw-session-id: 2022121718004301013113605215982497p5k6801dy
nw-session-trace: 2022-12-17T18:00:43.827293149+08:00 42
x-bdcdn-cache-status: TCP_HIT
x-length: 343002
x-powered-by: ImageX
x-response-date: Sat, 17 Dec 2022 18:00:43 GMT
x-tt-logid: 2022121718004301013113605215982497
via: n128-134-083, cache14.l2de2[0,0,206-0,H], cache5.l2de2[2,0], cache5.l2de2[3,0], cache3.se1[0,0,200-0,H], cache1.se1[1,0]
x-request-ip: fdbd:dc03:15:482::74
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 010ec35d8338a3c1341674e3d2464ee09a429c9c5af2fc930930b9ec60625c05f3b71a3d79f906afd2479681df4ec15d8b01af344e24d3e5df5584a5196f7e0400dfccab4c7d44dab881b7b096fd4eb23fa223bfc14da29e326a459a9a6aa15d8b
x-response-lb: image
ali-swift-global-savetime: 1671272903
age: 3659580
x-cache: HIT TCP_MEM_HIT dirn:9:164853675
x-swift-savetime: Sat, 17 Dec 2022 11:36:55 GMT
x-swift-cachetime: 31531888
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9516749324834056541e
X-Firefox-Spdy: h2
3761121ccc.com/025ebab711b94b6084690936525e9946.gif
200 OK 910 kB URL HTTP/1.1 3761121ccc.com/025ebab711b94b6084690936525e9946.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 910 kB (910251 bytes)
Hash 7765dd886b3a8252706ac71a319898bc
bb1d99a7feeaae8a744e8bca7c4ead0d6da0a492
5b8c556af017878ef03cb2ad0a809ffcc3d8aaaf601361a22d990c0efa6fa6d1
GET /025ebab711b94b6084690936525e9946.gif HTTP/1.1
Host: 3761121ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63a95b27-de3ab"
Date: Tue, 24 Jan 2023 04:26:45 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Mon, 26 Dec 2022 08:28:23 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-34
Content-Length: 910251
5951835ccc.com/1272565d7dac4e9aa3ed8725af8f9082.gif
200 OK 857 kB URL HTTP/1.1 5951835ccc.com/1272565d7dac4e9aa3ed8725af8f9082.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 857 kB (857145 bytes)
Hash cf250ba4debf89cc57f49709d7cb73b0
ef7b4219780eedca6dde0a5b46278cd8120bf00f
952f1be23b3fc8df89b231db9a483f55ccd73486d8fe3e71c07e70405cbd4d4a
GET /1272565d7dac4e9aa3ed8725af8f9082.gif HTTP/1.1
Host: 5951835ccc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63c7f2b5-d1439"
Date: Sat, 21 Jan 2023 16:15:34 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Wed, 18 Jan 2023 13:23:01 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-19
Content-Length: 857145
638236rpn.com/d0245169c64c469c88717a1a417e40b4.gif
200 OK 759 kB URL HTTP/1.1 638236rpn.com/d0245169c64c469c88717a1a417e40b4.gif
IP
File type GIF image data, version 89a, 960 x 100\012- data
Size 759 kB (758664 bytes)
Hash aba678cc899befb96d7234dc3087f2c0
72becd4ad309343a09159b1eaf66ea3c3b05585a
f4ee005ff278376111cf7430637a2be54c202f0ca62bd2afde5c8cff0e5f2c7c
Analyzer Verdict Alert quad9 Sinkholed
GET /d0245169c64c469c88717a1a417e40b4.gif HTTP/1.1
Host: 638236rpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6370b612-b9388"
Date: Tue, 13 Dec 2022 21:23:36 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sun, 13 Nov 2022 09:17:06 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-29
Content-Length: 758664
ocsp.digicert.com/
200 OK 727 B IP
Hash a6dfd060ee5dd6ce8cdc8ab6fcfa77f6
1bb200a0d23a7c437a140b1ba20aa3a041aaea68
3f351ffbf0fc31c125371c8a19a02c9dd6d41d574218d3d29b80e2e50f35f2c5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=151530
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:01:23 GMT
Etag: "63d51ded-2d7"
Expires: Mon, 30 Jan 2023 13:06:53 GMT
Last-Modified: Sat, 28 Jan 2023 13:06:53 GMT
Server: nginx
Content-Length: 727
qp.ezfxpuo.cn/960X60.gif
200 OK 254 kB IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 254 kB (253519 bytes)
Hash f744e995971941b6a95fcd2636f5a545
ac9c1230e04eab9e31512d2afe440fe5f0367dc5
59b1a138fa72df587e61916179965cbd819f91aec53ce6ab606949a7e06b3063
GET /960X60.gif HTTP/1.1
Host: qp.ezfxpuo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NgxFence
date: Sat, 28 Jan 2023 19:01:23 GMT
content-type: image/gif
content-length: 253519
x-oss-request-id: 63A4A4F1B374843830BBB976
etag: "F744E995971941B6A95FCD2636F5A545"
last-modified: Tue, 29 Nov 2022 08:27:54 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17987192695826819902
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
content-md5: 90TplZcZQbapX80mNvWlRQ==
x-oss-server-time: 1
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
img.catu.cc/images/618e9a78804dd02c79868625.gif
302 Found 285 kB URL HTTP/2 img.catu.cc/images/618e9a78804dd02c79868625.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 285 kB (284566 bytes)
Hash 818b1ba0624b3bd70fa10cf7a9420251
a25efd50988612cabac2fa822ffab5fdc8003845
4ece6df8bead56d5893cae4fd33cdb1f2e8c9e221213f3e006111437ff81a688
GET /images/618e9a78804dd02c79868625.gif HTTP/1.1
Host: img.catu.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/6d0f80be2103471896aca67c13a3bcbc
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/index.css
200 OK 2.9 kB URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/index.css
IP
Hash de15f5fe90bca62a2d097f2aafd73cc1
4e195ecc050c1077f30de7b224b7e118cada29e2
6afe5e6f7e465a4e734eba7e1eac3300e8611ee45cdcc1fde217368a7cd0ac19
GET /template/m1938pc/static/css/index.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Fri, 12 Nov 2021 13:36:57 GMT
vary: Accept-Encoding
etag: W/"618e6df9-1837"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 0ab9927fb2689303142f5bc7f8728ead
3a34b91fb7146487997060db7f4aca4c0078e6b6
37e34ada56f2dbde9b81a2b602aa655c6c7ecb3fa33b6f930a4bd7d630d20d48
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 01 Feb 2023 16:59:39 GMT
ETag: "3a34b91fb7146487997060db7f4aca4c0078e6b6"
Last-Modified: Sat, 28 Jan 2023 16:59:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bf9faa9bc0b4d-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 0ab9927fb2689303142f5bc7f8728ead
3a34b91fb7146487997060db7f4aca4c0078e6b6
37e34ada56f2dbde9b81a2b602aa655c6c7ecb3fa33b6f930a4bd7d630d20d48
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 01 Feb 2023 16:59:39 GMT
ETag: "3a34b91fb7146487997060db7f4aca4c0078e6b6"
Last-Modified: Sat, 28 Jan 2023 16:59:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790bf9fafd73b511-OSL
www.jz1014.xyz/template/m1938pc/static/css/menu.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/menu.css
IP
GET /template/m1938pc/static/css/menu.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Thu, 14 Oct 2021 06:03:46 GMT
vary: Accept-Encoding
etag: W/"6167c842-1e6c"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/icon.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/icon.css
IP
GET /template/m1938pc/static/css/icon.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/template/m1938pc/static/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:26 GMT
vary: Accept-Encoding
etag: W/"613f4606-62f"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
img.1201555.com/images/63d2101183b5991e572600e7.gif
302 Found 0 B URL HTTP/2 img.1201555.com/images/63d2101183b5991e572600e7.gif
IP
GET /images/63d2101183b5991e572600e7.gif HTTP/1.1
Host: img.1201555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/70c57cabb92242258bbf034be8584f7f
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/header.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/header.css
IP
GET /template/m1938pc/static/css/header.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Wed, 13 Oct 2021 13:35:12 GMT
vary: Accept-Encoding
etag: W/"6166e090-10db"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/img_list.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/img_list.css
IP
GET /template/m1938pc/static/css/img_list.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Thu, 14 Oct 2021 15:08:47 GMT
vary: Accept-Encoding
etag: W/"616847ff-9dd"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/pagination.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/pagination.css
IP
GET /template/m1938pc/static/css/pagination.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/template/m1938pc/static/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:26 GMT
vary: Accept-Encoding
etag: W/"613f4606-51e"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
kjimg10.360buyimg.com/ott/jfs/t1/46182/9/21860/1411145/63819a6eEcb8ec547/ae47a05d2165a957.gif
200 OK 0 B URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/46182/9/21860/1411145/63819a6eEcb8ec547/ae47a05d2165a957.gif
IP
GET /ott/jfs/t1/46182/9/21860/1411145/63819a6eEcb8ec547/ae47a05d2165a957.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:24 GMT
content-type: image/gif
content-length: 1411145
cache-control: max-age=15552000
expires: Mon, 24 Jul 2023 10:02:15 GMT
last-modified: Sat, 26 Nov 2022 04:47:42 GMT
age: 291549
via: http/1.1 ORI-CLOUD-HUZ-MIX-15 (jcs [cRs f ]), http/1.1 SQ-CT-1-MIX-18 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1674640935378-0-0-0-40-40;200;200-1674877905895-0-0-0-1-1;200-1674932484494-0-0-0-1-1
X-Firefox-Spdy: h2
www.jz1014.xyz/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://app.gxfc567888.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/banner.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/banner.css
IP
GET /template/m1938pc/static/css/banner.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:26 GMT
vary: Accept-Encoding
etag: W/"613f4606-49c"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/common.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/common.css
IP
GET /template/m1938pc/static/css/common.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/template/m1938pc/static/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:26 GMT
vary: Accept-Encoding
etag: W/"613f4606-691"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0
200 OK 0 B URL HTTP/2 p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Sat, 28 Jan 2023 19:01:23 GMT
content-type: image/gif
content-length: 1607696
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:45 GMT
cache-control: max-age=2592000
x-delay: 96471 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1607696
chid: 0
fid: 0
x-nws-log-uuid: bf94a4c5-b9b3-4abd-b6b0-71f107b68b84
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/main.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/main.css
IP
GET /template/m1938pc/static/css/main.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Thu, 14 Oct 2021 14:51:36 GMT
vary: Accept-Encoding
etag: W/"616843f8-85b"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/template/m1938pc/static/css/flickity.min.css
200 OK 0 B URL HTTP/2 www.jz1014.xyz/template/m1938pc/static/css/flickity.min.css
IP
GET /template/m1938pc/static/css/flickity.min.css HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/css
last-modified: Mon, 13 Sep 2021 12:37:28 GMT
vary: Accept-Encoding
etag: W/"613f4608-ab1"
expires: Sun, 29 Jan 2023 07:01:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.jz1014.xyz/pf.js
404 Not Found 0 B IP
GET /pf.js HTTP/1.1
Host: www.jz1014.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 28 Jan 2023 19:01:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
587tuchuang.com/587z80.gif
200 OK 0 B URL HTTP/1.1 587tuchuang.com/587z80.gif
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
GET /587z80.gif HTTP/1.1
Host: 587tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:23 GMT
Content-Type: image/gif
Content-Length: 139025
Connection: keep-alive
Last-Modified: Wed, 21 Dec 2022 13:30:32 GMT
ETag: "63a30a78-21f11"
Expires: Sun, 26 Feb 2023 15:45:01 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
webs24.theavstatic.xyz/static/tmp/x99av/semm.gif
200 OK 0 B URL HTTP/2 webs24.theavstatic.xyz/static/tmp/x99av/semm.gif
IP
GET /static/tmp/x99av/semm.gif HTTP/1.1
Host: webs24.theavstatic.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:22 GMT
content-type: image/gif
last-modified: Fri, 15 Apr 2022 12:43:13 GMT
vary: Accept-Encoding
etag: W/"62596861-4ad05"
expires: Thu, 09 Feb 2023 15:41:30 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1567192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kLAc%2B1UH13C250IALbiYXkegwCL3g9RHswvVRSc9Z7fvDvb2bX32bu12hJ5d9BeF6DHamYkD2h%2B5CPQIDBkRqHnam%2F%2Fr%2FVSiNDO25zDpevR8ui76Ioog67pZklXPwNUc4n%2B2vywgnPYE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790bf9f10e44dcef-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
595tuchuang.com/960x80.gif
200 OK 0 B URL HTTP/1.1 595tuchuang.com/960x80.gif
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
GET /960x80.gif HTTP/1.1
Host: 595tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:01:23 GMT
Content-Type: image/gif
Content-Length: 144990
Connection: keep-alive
Last-Modified: Wed, 21 Dec 2022 13:28:21 GMT
ETag: "63a309f5-2365e"
Expires: Wed, 01 Feb 2023 07:17:46 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
200 OK 0 B URL HTTP/2 p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
IP
ASN #133119 China Unicom IP network
GET /img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image HTTP/1.1
Host: p26.toutiaoimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jz1014.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:01:24 GMT
content-type: image/gif
content-length: 677521
server: openresty
imagex-fmt: gif2gif
last-modified: Thu, 30 Dec 2021 00:07:35 GMT
nw-session-id: 2021123008073501015013614530ADE9B0dprsv01tt
nw-session-trace: 2021-12-30T08:07:35.194015393+08:00 68
x-bdcdn-cache-status: TCP_HIT
x-length: 677521
x-powered-by: ImageX
x-response-date: Thu, 30 Dec 2021 08:07:35 GMT
x-response-lb: image
x-tt-logid: 2021123008073501015013614530ADE9B0
server-timing: cdn-cache;desc=HIT, edge;dur=2
x-tt-trace-host: 016a2077e03b2041825c42669e9a23cec5ee04519515486308eb42b81315658df6aa5ed29ad219c7d25626d5b022cced5274c18183adcd43889f65e87a17fde2315b0226a7e5f07d4c19094125051b3e74699be800dd629619bc2141d5fb81fc89ccc76230d7d3e4f731a9d881f3cb16c4
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
via: CHN-HElangfang-AREACUCC1-CACHE30[2],CHN-HElangfang-AREACUCC1-CACHE35[0,TCP_HIT,1],CHN-TJ-GLOBAL1-CACHE60[39],CHN-TJ-GLOBAL1-CACHE35[0,TCP_HIT,36]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 31536000
nginx-hit: 1
cache-control: max-age=31536000
age: 18804139
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2
104.164.239.190
27.50.59.63
104.21.82.102
95.101.10.193
120.52.95.238
93.184.220.29
3.36.126.81
45.89.208.114
47.246.44.225
43.154.254.32
103.170.15.104