r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14525
Expires: Sat, 04 Feb 2023 09:46:06 GMT
Date: Sat, 04 Feb 2023 05:44:01 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12354
Expires: Sat, 04 Feb 2023 09:09:55 GMT
Date: Sat, 04 Feb 2023 05:44:01 GMT
Connection: keep-alive
cn-ger.com/gaoqingpaogoutu/index_3.html
161.123.34.169301 Moved Permanently 0 B URL HTTP/1.1 cn-ger.com/gaoqingpaogoutu/index_3.html
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /gaoqingpaogoutu/index_3.html HTTP/1.1
Host: cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 05:43:12 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.cn-ger.com/
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 05:43:35 GMT
content-type: application/json
age: 26
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5251
Expires: Sat, 04 Feb 2023 07:11:32 GMT
Date: Sat, 04 Feb 2023 05:44:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 34Vpso3GjIz2oAjRhk9RtbNS6KLcaVjrDcWZRBxy4VoPBEGYvYJQBlq0OPmSVY5odnaGNFcBCOI=
x-amz-request-id: KQ2PBT8G40Z8Z0EP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 04:52:42 GMT
age: 3079
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:01 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 04:49:07 GMT
age: 3295
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13110
Expires: Sat, 04 Feb 2023 09:22:32 GMT
Date: Sat, 04 Feb 2023 05:44:02 GMT
Connection: keep-alive
push.services.mozilla.com/
54.187.195.111101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.195.111:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JFiQG+qgQzlFvS7wJ80eSw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sxpKBC55CKUDDzBNaLkYfk1AtAE=
www.cn-ger.com/
161.123.34.169200 OK 62 kB IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1129), with CRLF, LF line terminators
Hash f5837cd93f8f5393fefa1b919fb05dfe
fb7c0d9a6ff47552c780d94478812d558e44f6c3
431fd95d0513df005ae0e16675a024b9476e41a0f1be4491ccad40cb20952d5a
GET / HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: text/html
Content-Length: 62502
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding
www.cn-ger.com/99reav/css/99reav-font.css
161.123.34.169200 OK 7.8 kB URL HTTP/1.1 www.cn-ger.com/99reav/css/99reav-font.css
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 (with BOM) text, with very long lines (30763)
Hash 9a9dd0783d2e93c46cd6f326f5e2b0a0
e18ceda49eff05f7eba8000d807f4f94e3e25bb8
f35b282762c6e982609588b48d94812bf6938b55ab063bfeec7aa818ee9f5d61
GET /99reav/css/99reav-font.css HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: text/css
Last-Modified: Sat, 13 Aug 2022 19:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f67e-78d1"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/css/99reav-ui.css
161.123.34.169200 OK 8.7 kB URL HTTP/1.1 www.cn-ger.com/99reav/css/99reav-ui.css
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type assembler source, Unicode text, UTF-8 (with BOM) text, with very long lines (1893), with CRLF line terminators
Hash 664c0ada639c4cc76aa9e28dd3f0bc97
cec5b8842619ac495dbce726f201e2e8bf0a7519
f59da6943cf5ca7b014d7dcd377626411df90bb5a63957bcd2a23646516ae744
GET /99reav/css/99reav-ui.css HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: text/css
Last-Modified: Sat, 13 Aug 2022 19:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f67e-8a71"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/css/99reav-site.css
161.123.34.169200 OK 2.7 kB URL HTTP/1.1 www.cn-ger.com/99reav/css/99reav-site.css
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 981912d348936b56a27536b208041fcb
b48b6fe7f7bef36dd7228298b6c3274b10aaa3fc
773133f8c5c8f8a301a352c83b28fc7d35c8cd32b362b0f6d0b74175c1d81c96
GET /99reav/css/99reav-site.css HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: text/css
Last-Modified: Sat, 13 Aug 2022 19:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f67e-2936"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/css/main.css
161.123.34.169200 OK 940 B URL HTTP/1.1 www.cn-ger.com/99reav/css/main.css
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 87752e0daddd13d5416d067f875c56e8
6fe6075aa90b0832387b2b380fb061895aca0329
1bf38ddb53f820a11c294286e6f6b31edbbcf63cc17e66d7f2c2b694663cded0
GET /99reav/css/main.css HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: text/css
Last-Modified: Sat, 13 Aug 2022 19:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f67e-b8b"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/css/99reav-color.css
161.123.34.169200 OK 1.7 kB URL HTTP/1.1 www.cn-ger.com/99reav/css/99reav-color.css
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type assembler source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 84dfc6fcde070175e2a96f7bbea5d232
8975fcd593d99aebfbfe12264312ad0ab1c317e2
4d9a97892f65340b49df0b99daba871886e9c98663a5552a75da15524a0e067a
GET /99reav/css/99reav-color.css HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: text/css
Last-Modified: Sat, 13 Aug 2022 19:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f67e-1563"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/jquery.min.js
161.123.34.169200 OK 34 kB URL HTTP/1.1 www.cn-ger.com/99reav/js/jquery.min.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type ASCII text, with very long lines (65451)
Hash bf13a6b8435f80e19d7827f205845b59
44dbd2aadc6e3ad655f88d469ad53268443bf781
ddc9353b24962d31baeffabe4aa408e001f282ab19d15b2e887a0243fdf358d0
GET /99reav/js/jquery.min.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: application/javascript
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f682-1538f"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/99reav-ui.js
161.123.34.169200 OK 5.3 kB URL HTTP/1.1 www.cn-ger.com/99reav/js/99reav-ui.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash c862a0e994a1a8c237f05792471f0f8f
6af91f9c0dd1973d78b1c8f73f5248753c2385a9
38b49ed7745bd424341543a12be060801eff756851790a4d6fa957444b17ca0a
GET /99reav/js/99reav-ui.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: application/javascript
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f682-4016"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/jquery.autocomplete.js
161.123.34.169200 OK 6.4 kB URL HTTP/1.1 www.cn-ger.com/99reav/js/jquery.autocomplete.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text
Hash ab4e6698a8a7d810a8aab0d0dc641939
ef7a6ba2ed5c339c6684eb49a6e67c2dfce0b38e
ca54e84102f467653b49516960e4b41bb3b7a67de20afc64dad092fc5ce30e53
GET /99reav/js/jquery.autocomplete.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: application/javascript
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f682-6288"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/tj.js
161.123.34.169200 OK 520 B URL HTTP/1.1 www.cn-ger.com/99reav/js/tj.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type ASCII text, with CRLF line terminators
Hash a030790f0be50a6eabac190086627296
6222e04ba78f25620e2c11930f181e9973f380b8
786b688c56289a8ea460d1d719cf1b66ed3211b8939008160e6094af7b4b653c
GET /99reav/js/tj.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: application/javascript
Content-Length: 520
Last-Modified: Sat, 17 Sep 2022 06:21:34 GMT
Connection: keep-alive
ETag: "6325676e-208"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.cn-ger.com/99reav/js/header.js
161.123.34.169200 OK 334 B URL HTTP/1.1 www.cn-ger.com/99reav/js/header.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash eadfd4d25bc69f2656c0a10ab58171db
691d98a04190b4d5c4002e003f1ddbe25e2f741c
89839301b960fcedd40a3cf6d94544b4801aebcb57cb8591ca47efe1893db466
GET /99reav/js/header.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: application/javascript
Content-Length: 334
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Connection: keep-alive
ETag: "62f7f682-14e"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.cn-ger.com/99reav/js/all-nav.js
161.123.34.169200 OK 703 B URL HTTP/1.1 www.cn-ger.com/99reav/js/all-nav.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 8d2246244117d48ce08592cc70c4f4dc
68a488d9e2292016a947a250364f56f36fc018e4
05bc1c968ec236221f43d936d364804807f02ebe7a96bb006564826407a232ed
GET /99reav/js/all-nav.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: application/javascript
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f682-1eea"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/99reav-site.js
161.123.34.169200 OK 41 kB URL HTTP/1.1 www.cn-ger.com/99reav/js/99reav-site.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type ASCII text, with very long lines (8746)
Hash fd5571de47727ced04138c19c17854ff
ba66344c6375b3eccbff18aec87646bba4356527
031ab5316f441e8084621e2ae4c367c98ad5a3393f4bcfe58fbe7bff9064c3d2
GET /99reav/js/99reav-site.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:13 GMT
Content-Type: application/javascript
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f682-1f8cf"
Expires: Sat, 04 Feb 2023 17:43:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/pc-nav.js
161.123.34.169200 OK 304 B URL HTTP/1.1 www.cn-ger.com/99reav/js/pc-nav.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash d9b75c12bf132dcfefcbf3a3ab9699e0
139e7af517c7d9e080092198ac5e14f01484d13f
87ec82d8a3857d890af239cc9590fc40aabf5cd13b7ce62908be2dd2d0a1620a
GET /99reav/js/pc-nav.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f682-545"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/search-dropdown.js
161.123.34.169200 OK 751 B URL HTTP/1.1 www.cn-ger.com/99reav/js/search-dropdown.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 797f5eae2d912edb4de916a965f4c2eb
1455e2b7226d27bf4c52dca6552e471c31405089
e30aeb729488f45ccc6b2a830c89be97a00d97476f97a3cf1263dba80e81fc3d
GET /99reav/js/search-dropdown.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f7f682-100c"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/0gg/gglmx.js
161.123.34.169200 OK 2.9 kB URL HTTP/1.1 www.cn-ger.com/0gg/gglmx.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type ASCII text, with very long lines (6238), with no line terminators
Hash 16ddef8a37cc425974ab0db988adf15d
e2adbb71372fba8144efc69d3e1bd106f75dd69a
874ef817da2d64b0f7d5097062160b1db57d6749a6f43f925659641624de6b3d
GET /0gg/gglmx.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Last-Modified: Thu, 12 Jan 2023 20:13:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63c069f3-185e"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/0gg/ggsxpdl.js
161.123.34.169200 OK 882 B URL HTTP/1.1 www.cn-ger.com/0gg/ggsxpdl.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (509), with CRLF line terminators
Hash 1245e09bce8351e235adc9666052eaa9
832b7dc383f637e23f7cf05b4498337dde1cd7da
25f044cb39412ae5b400de45446d2cd55b27cfb0fc133f232d53191e8fc07e21
GET /0gg/ggsxpdl.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Last-Modified: Sat, 17 Sep 2022 05:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63255e6a-de4"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/0gg/gglms.js
161.123.34.169200 OK 2.8 kB URL HTTP/1.1 www.cn-ger.com/0gg/gglms.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type ASCII text, with very long lines (6150), with no line terminators
Hash 1243b1680569b3c6a59956d27b3b9a07
619a6b092c398a2b67b072af82eed2718a0cdbb6
6de716478d9e47cb5a1a5826e68a9061e040d0da83bfd18f4790c2685b414ef1
GET /0gg/gglms.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Last-Modified: Thu, 12 Jan 2023 20:13:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63c069f3-1806"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/0gg/gg.js
161.123.34.169200 OK 5.3 kB IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (549), with CRLF line terminators
Hash bd9c9a4c858ba326c62b3c73df783254
00f63fbc9fd9f8b77f8221bbf730efee4e689b35
7fe3bf1d9dac674bf607baa2c66cc549075136917c23ddaaf7965ea94c58143f
GET /0gg/gg.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Last-Modified: Thu, 12 Jan 2023 20:13:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63c069f4-7581"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.cn-ger.com/99reav/js/index-marquee.js
161.123.34.169200 OK 316 B URL HTTP/1.1 www.cn-ger.com/99reav/js/index-marquee.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 48b6f4b914f063709f7179aae05195c2
546c3caf55ccf85207bc7ac1a17eb25355c1eab5
223ea98a350a77f8f1ac48861089d1a0eb7bb271f4b48233197d10f11efa05ed
GET /99reav/js/index-marquee.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Content-Length: 316
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Connection: keep-alive
ETag: "62f7f682-13c"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.cn-ger.com/99reav/js/business.js
161.123.34.169200 OK 138 B URL HTTP/1.1 www.cn-ger.com/99reav/js/business.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash abc8d8528bf9927bed74114e744b38da
fe730b2981128905d862f7480913a91b76216934
dba58cc53d7e51d86a3ab800387e05117ee66a04a06d5802c6989fc90a733074
GET /99reav/js/business.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Content-Length: 138
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Connection: keep-alive
ETag: "62f7f682-8a"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.cn-ger.com/99reav/js/bottom-txt.js
161.123.34.169200 OK 523 B URL HTTP/1.1 www.cn-ger.com/99reav/js/bottom-txt.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 0a1870fedd01fb86162d77346481f58e
8816acfdba0f9c16f62f10a01a83bfecdf68c7ff
2bac365aa075caa6e9cb013c214f2942b1529deb3cb210bd32b1cb0864e205fe
GET /99reav/js/bottom-txt.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Content-Length: 523
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Connection: keep-alive
ETag: "62f7f682-20b"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.cn-ger.com/0gg/xt.js
161.123.34.169404 Not Found 53 B IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type ASCII text, with no line terminators
Hash d5ed5e4d486aff1551d48131e88104db
aa59f086d578f12b510f302cd269c6178802d33c
347aaae3c37f80e44cdcfddfd267db1b99c58152b08242a1b590b7ae6fc81d4c
GET /0gg/xt.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.cn-ger.com/99reav/images/logo.gif
161.123.34.169200 OK 16 kB URL HTTP/1.1 www.cn-ger.com/99reav/images/logo.gif
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type GIF image data, version 89a, 150 x 50\012- data
Hash 0811a6bbbdf5e1104d76c109d3a0260f
686d14f83422fd09eb944f64f35cbae8d59cac2e
c51075ab9d7bcb9650d480e7453b9a5ecdb748ca07e996b2b1ce3dcd0cfbe2c2
GET /99reav/images/logo.gif HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: image/gif
Content-Length: 15701
Last-Modified: Sat, 13 Aug 2022 19:07:44 GMT
Connection: keep-alive
ETag: "62f7f680-3d55"
Expires: Mon, 06 Mar 2023 05:43:14 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.cn-ger.com/99reav/js/wztg.js
161.123.34.169200 OK 651 B URL HTTP/1.1 www.cn-ger.com/99reav/js/wztg.js
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
Hash cb254d0499b79d0e24bd894fe0f284dc
115f4d32f8edaefc45d6934bbe8691728e039be1
4ecafcde0a13433a53b92338f85f00f27cc31905dbf63f84f7ce4c29ae44e83d
GET /99reav/js/wztg.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: application/javascript
Content-Length: 651
Last-Modified: Sat, 13 Aug 2022 19:07:46 GMT
Connection: keep-alive
ETag: "62f7f682-28b"
Expires: Sat, 04 Feb 2023 17:43:14 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.cn-ger.com/99reav/fonts/fontawesome-webfont.woff2
161.123.34.169200 OK 77 kB URL HTTP/1.1 www.cn-ger.com/99reav/fonts/fontawesome-webfont.woff2
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /99reav/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.cn-ger.com/99reav/css/99reav-font.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: font/woff2
Content-Length: 77160
Last-Modified: Sat, 13 Aug 2022 19:07:44 GMT
Connection: keep-alive
ETag: "62f7f680-12d68"
Accept-Ranges: bytes
www.cn-ger.com/0gg/xt.js
161.123.34.169404 Not Found 53 B IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type ASCII text, with no line terminators
Hash d5ed5e4d486aff1551d48131e88104db
aa59f086d578f12b510f302cd269c6178802d33c
347aaae3c37f80e44cdcfddfd267db1b99c58152b08242a1b590b7ae6fc81d4c
GET /0gg/xt.js HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.cn-ger.com/99reav/images/play.png
161.123.34.169200 OK 2.5 kB URL HTTP/1.1 www.cn-ger.com/99reav/images/play.png
IP 161.123.34.169:0
ASN #327790 Wirels-Connect
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 10a11cc31a1fe5126ae5f1e359679cbb
7d30dcc97bb4aed52948a5b040b4fa63149a405e
82b4aac50bdda11a5069442a4a6f593f4f3debbc2a4499b919d61691301c5537
GET /99reav/images/play.png HTTP/1.1
Host: www.cn-ger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/99reav/css/99reav-ui.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 05:43:14 GMT
Content-Type: image/png
Content-Length: 2457
Last-Modified: Sat, 13 Aug 2022 19:07:44 GMT
Connection: keep-alive
ETag: "62f7f680-999"
Expires: Mon, 06 Mar 2023 05:43:14 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash c45b5d23d78c603a4f679957cc907c55
c0c6131e462224b19bf52c269ffda26be7dcc3ce
7acbb574f2c3ce64da98b8bf9e8af19ba063535e4cbf9fadaf803c34381178dd
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 08 Feb 2023 04:09:39 GMT
ETag: "c0c6131e462224b19bf52c269ffda26be7dcc3ce"
Last-Modified: Sat, 04 Feb 2023 04:09:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1946
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117a4bcdeb4f4-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash c45b5d23d78c603a4f679957cc907c55
c0c6131e462224b19bf52c269ffda26be7dcc3ce
7acbb574f2c3ce64da98b8bf9e8af19ba063535e4cbf9fadaf803c34381178dd
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 08 Feb 2023 04:09:39 GMT
ETag: "c0c6131e462224b19bf52c269ffda26be7dcc3ce"
Last-Modified: Sat, 04 Feb 2023 04:09:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1946
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117a4b8cffab4-OSL
u23055.com/d166c51104b5da4212fe6891a3d07afe.gif
13.227.254.28200 OK 234 kB URL HTTP/2 u23055.com/d166c51104b5da4212fe6891a3d07afe.gif
IP 13.227.254.28:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 234 kB (233522 bytes)
Hash 4479a11968da9b06a91e777c3c17e74a
22eb0fd3d5239f1571bf7520837700af5908b116
155f01c68f263ee44ea2ae1ef75b2debebcb64afa3bcbac9348bf45dda87257a
GET /d166c51104b5da4212fe6891a3d07afe.gif HTTP/1.1
Host: u23055.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 233522
last-modified: Mon, 19 Dec 2022 08:26:23 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 18:40:50 GMT
etag: "4479a11968da9b06a91e777c3c17e74a"
x-cache: Hit from cloudfront
via: 1.1 42d31def379658b708a4d27c9bcbd98a.cloudfront.net (CloudFront)
x-amz-cf-pop: SIN52-C3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KDiQw3UcyQJuaRCeSpk8ln26NoelPX9fSOfTZ9tWD47nUg-KXubxnw==
age: 39794
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
143.204.48.16200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash 131cfa577a0f753e49000d8571206ac8
a822a68ad88a6740ba8c610b2355cc099564f6a6
4d5ca8c5ddcba2b6b2c606d235fc8d3658cc23b8078cabcd60d5585dcb9767ec
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115682
Date: Sat, 04 Feb 2023 05:44:04 GMT
Etag: "63dd05a3-1d7"
Expires: Sun, 05 Feb 2023 13:52:06 GMT
Last-Modified: Fri, 03 Feb 2023 13:01:23 GMT
Server: ECS (dcb/7F5C)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1ejHLXJiwZntNBu1gZibEsf8PNZI7xTrHS2-j2MhspXKh6zkLkTWTg==
Age: 3043
8881img.com/xcsj/960x60.gif
143.204.55.6200 OK 407 kB URL HTTP/2 8881img.com/xcsj/960x60.gif
IP 143.204.55.6:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 407 kB (407078 bytes)
Hash 679674700ddf4c200bbe9da8cd522c04
51f329eda5a2504a29006ae687e4976d8a6d5f99
3fc1c452f912bb72924cca62b85dc0d86131ad3a8785e061a8745ba721f23671
GET /xcsj/960x60.gif HTTP/1.1
Host: 8881img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 407078
server: nginx
date: Sun, 08 Jan 2023 08:33:14 GMT
last-modified: Sat, 07 Jan 2023 12:58:09 GMT
etag: "63b96c61-63626"
expires: Tue, 07 Feb 2023 08:33:14 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: L9GQaJ7N-PiEwRlIZ_jjKT52jyxTWsTBoxiTdE8JiWqT6AB54A1svA==
age: 2322650
X-Firefox-Spdy: h2
u22077.com/bb7f858c0dad171784517c02e7bff891.gif
13.227.254.96200 OK 391 kB URL HTTP/2 u22077.com/bb7f858c0dad171784517c02e7bff891.gif
IP 13.227.254.96:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 391 kB (390953 bytes)
Hash f849b3b0e9c6fdb31c56074c38c5123c
78200f076e1512a0f4b6f56f37d9f7ad355f0ad7
f9d4b673a595159370aa060f5d8b025842504116efc5b85269129a6c02110f6c
GET /bb7f858c0dad171784517c02e7bff891.gif HTTP/1.1
Host: u22077.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 390953
last-modified: Sat, 17 Dec 2022 12:33:46 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 19:52:48 GMT
etag: "f849b3b0e9c6fdb31c56074c38c5123c"
x-cache: Hit from cloudfront
via: 1.1 625de659a90e36a729e80cd3fdf6ae3c.cloudfront.net (CloudFront)
x-amz-cf-pop: SIN52-C3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: s4ZimvkAy-RTIgfE7naDO8J-utEfIpXfHWyHwVkno_YPmfifrpTZYA==
age: 35476
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g3
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g3
IP 104.18.21.226:0
Hash dde0746b7558a6f33ba86fd4a364ec2d
012f3338e8dd25183fa9eb263b7829ba5e225379
85201e73fb6129e969fddac50f3557789f285a1fe3d8179aac3f96e83bcb5821
POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Wed, 08 Feb 2023 03:02:19 GMT
ETag: "012f3338e8dd25183fa9eb263b7829ba5e225379"
Last-Modified: Sat, 04 Feb 2023 03:02:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117a4ea26b4ee-OSL
push.zhanzhang.baidu.com/push.js
182.61.201.94200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP 182.61.201.94:0
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Sat, 04 Feb 2023 05:44:04 GMT
Etag: "4078521116"
Expires: Sun, 04 Feb 2024 05:44:04 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=7344FAD56B06CB8A26C5CB7C8A84E358:FG=1; max-age=31536000; expires=Sun, 04-Feb-24 05:44:04 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
hm.baidu.com/hm.js?11e61b446cd820464fba274f42765d10
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?11e61b446cd820464fba274f42765d10
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (618)
Hash c72d3653157040294681b0098ea1f1c7
0e3b250fec943c1fa1383cfbf5eaacbfe9b48086
e73680cd7d97a53a960bd009bc4c300967a2e3a77ff803fb6215fc88db0fc4fd
GET /hm.js?11e61b446cd820464fba274f42765d10 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11256
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 05:44:04 GMT
Etag: f571dc89ceeed1ac761068f398b082c7
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=58E345AFADF1A8B1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?86f5e35bffe0534fffe779d577952b07
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?86f5e35bffe0534fffe779d577952b07
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (619)
Hash 013c62d1cf3a57267b8fcc7c0cd71f3f
526a95c65e2deb5babd46ee46144d4eb1cee3693
7c2eedfdd6dfed010329dcc8ce91ae948ee9d0f6d752596a57573b99d2da24b3
GET /hm.js?86f5e35bffe0534fffe779d577952b07 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Sat, 04 Feb 2023 05:44:04 GMT
Etag: eecb1cf20705205f6fb47f764bcee3b4
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F9EF995A79962290; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp2.globalsign.com/gsorganizationvalsha2g3
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g3
IP 104.18.21.226:0
Hash a4f18602d16d0edda4feaa09b2cf49ea
23b33f15bf2f29bbe929415226968f90a1eecab6
388aa7dc9573c786978bc6d934540af523fc03efe9e6086de3501d6cc656fdeb
POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Wed, 08 Feb 2023 04:23:53 GMT
ETag: "23b33f15bf2f29bbe929415226968f90a1eecab6"
Last-Modified: Sat, 04 Feb 2023 04:23:54 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117a8cc8ab4ee-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3dfa693ecc48bef05cd6bb5786f22370
0c88e861813a3f7ba4f0114302f7caf74a971e35
bcead8a0fb3711af0eabf0a8a0bea8c9bcf0ca8bffd8fe611f0d0b8b9b2e4788
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCEAD8A0FB3711AF0EABF0A8A0BEA8C9BCF0CA8BFFD8FE611F0D0B8B9B2E4788"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6493
Expires: Sat, 04 Feb 2023 07:32:18 GMT
Date: Sat, 04 Feb 2023 05:44:05 GMT
Connection: keep-alive
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1355160285&si=86f5e35bffe0534fffe779d577952b07&v=1.3.0&lv=1&sn=21670&r=0&ww=1280&u=http%3A%2F%2Fwww.cn-ger.com%2F&tt=%E5%9B%9B%E8%99%8E%E6%88%90%E4%BA%BA%E4%B9%85%E4%B9%85%E7%B2%BE%E5%93%81%E6%97%A0%E7%A0%81%2C%E4%BA%9A%E6%B4%B2%E5%8D%88%E5%A4%9C%E6%9C%AA%E6%BB%A1%E5%8D%81%E5%85%AB%E5%8B%BF%E5%85%A5%E7%BD%91%E7%AB%992%2C%E7%BE%8E%E5%A5%B3%E9%9C%B2100%25%E8%83%B8%E6%97%A0%E9%81%AE%E6%8C%A1%2C%E4%BA%BA%E5%A6%BB%E5%9C%A8%E5%8E%A8%E6%88%BF%E8%A2%AB%E8%89%B2%E8%AF%B1%20%E4%B8%AD%E6%96%87%E5%AD%97%E5%B9%95
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1355160285&si=86f5e35bffe0534fffe779d577952b07&v=1.3.0&lv=1&sn=21670&r=0&ww=1280&u=http%3A%2F%2Fwww.cn-ger.com%2F&tt=%E5%9B%9B%E8%99%8E%E6%88%90%E4%BA%BA%E4%B9%85%E4%B9%85%E7%B2%BE%E5%93%81%E6%97%A0%E7%A0%81%2C%E4%BA%9A%E6%B4%B2%E5%8D%88%E5%A4%9C%E6%9C%AA%E6%BB%A1%E5%8D%81%E5%85%AB%E5%8B%BF%E5%85%A5%E7%BD%91%E7%AB%992%2C%E7%BE%8E%E5%A5%B3%E9%9C%B2100%25%E8%83%B8%E6%97%A0%E9%81%AE%E6%8C%A1%2C%E4%BA%BA%E5%A6%BB%E5%9C%A8%E5%8E%A8%E6%88%BF%E8%A2%AB%E8%89%B2%E8%AF%B1%20%E4%B8%AD%E6%96%87%E5%AD%97%E5%B9%95
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1355160285&si=86f5e35bffe0534fffe779d577952b07&v=1.3.0&lv=1&sn=21670&r=0&ww=1280&u=http%3A%2F%2Fwww.cn-ger.com%2F&tt=%E5%9B%9B%E8%99%8E%E6%88%90%E4%BA%BA%E4%B9%85%E4%B9%85%E7%B2%BE%E5%93%81%E6%97%A0%E7%A0%81%2C%E4%BA%9A%E6%B4%B2%E5%8D%88%E5%A4%9C%E6%9C%AA%E6%BB%A1%E5%8D%81%E5%85%AB%E5%8B%BF%E5%85%A5%E7%BD%91%E7%AB%992%2C%E7%BE%8E%E5%A5%B3%E9%9C%B2100%25%E8%83%B8%E6%97%A0%E9%81%AE%E6%8C%A1%2C%E4%BA%BA%E5%A6%BB%E5%9C%A8%E5%8E%A8%E6%88%BF%E8%A2%AB%E8%89%B2%E8%AF%B1%20%E4%B8%AD%E6%96%87%E5%AD%97%E5%B9%95 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 05:44:05 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=96A299EFF326FED2; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
kzecc.com/8fdce7479dd03f1ee73805e8d2e9bab8.gif
13.227.254.13200 OK 864 kB URL HTTP/2 kzecc.com/8fdce7479dd03f1ee73805e8d2e9bab8.gif
IP 13.227.254.13:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 864 kB (864004 bytes)
Hash d2c820747a9b9b8c3abaab0775436ab7
99651afd10bd3874fb84d7973845482cd2c81f23
8aa3c7b05ba9bb5176a7155ead2a0ea562b07fb0dd7b27a9cf91c38e95ed43ed
GET /8fdce7479dd03f1ee73805e8d2e9bab8.gif HTTP/1.1
Host: kzecc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 864004
last-modified: Mon, 19 Dec 2022 09:06:34 GMT
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 Feb 2023 03:10:10 GMT
etag: "d2c820747a9b9b8c3abaab0775436ab7"
x-cache: Hit from cloudfront
via: 1.1 0fa3b62de49c01129844acc24e390b56.cloudfront.net (CloudFront)
x-amz-cf-pop: SIN52-C3
x-amz-cf-id: My_PzkY6Dz6ETRtE9jqDE4knqdmJj3rI4A9u4dcvIQ9Jx8uXZvZ9Og==
age: 54664
X-Firefox-Spdy: h2
kzeqq.com/3452e6815c59e9149b94c505e9bb4abd.gif
88.99.102.224200 OK 228 kB URL HTTP/2 kzeqq.com/3452e6815c59e9149b94c505e9bb4abd.gif
IP 88.99.102.224:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 960 x 60\012- data
Size 228 kB (228331 bytes)
Hash 071d2c3b39f6cb11b6de27e7ca7ca0af
0abe57cc261ad0c6f1e299005c4885ce969ac715
f7df02cd92df16e23878af2d4c24c483c78d613ed8d66a6218b11e7c1cf273af
GET /3452e6815c59e9149b94c505e9bb4abd.gif HTTP/1.1
Host: kzeqq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:05 GMT
content-type: image/gif
content-length: 228331
last-modified: Fri, 30 Dec 2022 03:00:18 GMT
etag: "63ae5442-37beb"
expires: Sat, 04 Feb 2023 17:44:05 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 79212
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TDDQYTIr190P7P%2BIv4NQA2g42xV3n4%2BeTMZDZqP52d6S9Yib2R84bKg3fopQ940iJ9JCg0Cd4nuwbFh1qBNtokknSBQ6jgFEVGCP3LrlKyE2x5tyfKTqSCwFMv57"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 7917aeb13e19c30f-VIE
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
kzeoo.com/145498385d51f6114f01924b07a536b5.gif
172.83.155.45200 OK 419 kB URL HTTP/2 kzeoo.com/145498385d51f6114f01924b07a536b5.gif
IP 172.83.155.45:0
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 1000 x 70\012- data
Size 419 kB (419407 bytes)
Hash 1ad3a6e666c8887f86803257e9cd8e60
e2de9f10e84ac7bed0888a6c413f828cd821e363
d7ea8e56a04ae30d7b34c85f2251d385895e999f5f03ecfb03a9a98b4c6f3c92
GET /145498385d51f6114f01924b07a536b5.gif HTTP/1.1
Host: kzeoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:05 GMT
content-type: image/gif
content-length: 419407
last-modified: Tue, 16 Aug 2022 11:20:14 GMT
etag: "62fb7d6e-6664f"
expires: Sat, 04 Feb 2023 17:44:05 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 103693
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2pTHuXf%2FFaRPgr82bSfnjKCvNAcRVmnjOr5OC8Wx%2BwFFXgRdItQy85TY8F%2FgH49cKr7ql4KRy8WGXCVXh%2B12OHjnXTp3rEls2OXNbF8H7HpvCvFMBTE5TIt%2F3tSP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 793fdd09ce34275f-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5b4e4f15da3323c73974c3f1cdb5d74
1f14971d0cf979cc34ff191849dc43d86e8ac463
5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EFAHIAMFQQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 27225
etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7afd5ce8fb9ec7b62e528bf97705e49
afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3
b2d93ba6c0ed2c858d91afba1c81251afbffa41c779be2e9203994dcfb7bbc9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: 007ce521-ed5c-4074-a314-684ad0df2e22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9GH5goAMF_ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8053-7060f02b767c90371991a190;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fTV_e56nzjiXo4Guu67WXDDvp3nrjB0Yfyy6ByjcDSx23J-8r0fmQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 27225
etag: "afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kzeoo.com/39ece0ec38182f6a9c5191222a2a17bd.gif
172.83.155.45200 OK 452 kB URL HTTP/2 kzeoo.com/39ece0ec38182f6a9c5191222a2a17bd.gif
IP 172.83.155.45:0
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 1000 x 70\012- data
Size 452 kB (451650 bytes)
Hash d36b47fd223d12e145bef662950636ca
e4a8fcb7fc1cd333568eba0beb86d21c7134d33d
38eb2d417d15a38f262f8cce57c2ce0deb020c3d2823332c4cb760d87c39db8a
GET /39ece0ec38182f6a9c5191222a2a17bd.gif HTTP/1.1
Host: kzeoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:05 GMT
content-type: image/gif
content-length: 451650
last-modified: Fri, 19 Aug 2022 17:02:33 GMT
etag: "62ffc229-6e442"
expires: Sat, 04 Feb 2023 17:44:05 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 395379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TkCS%2FAEGx839PHb6dRAedn1DKyQSQAvRfVM%2FwaCroBNT92kDa9p%2FZpTT8rf5xr6TuoDO0bSqXcelxlnFlOS5g3ehqSMYAlNlC0dQPhmkdxI1ieUXWMHWutkZRiZq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 793fdd08fe62c369-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.loli.net/2022/05/21/zAxwCKkLnFjlaQ8.jpg
104.26.1.190200 OK 9.2 kB URL HTTP/2 s2.loli.net/2022/05/21/zAxwCKkLnFjlaQ8.jpg
IP 104.26.1.190:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3\012- data
Hash 43ae14560cdbc69ce960a28002f04309
4dc694c2754882f840c77807016676732c38138b
af0e248de25efb22e6edd4e1453e686154b00ce5039f94dceb2684a332ddad0e
GET /2022/05/21/zAxwCKkLnFjlaQ8.jpg HTTP/1.1
Host: s2.loli.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 05:44:06 GMT
content-type: image/jpeg
content-length: 9166
last-modified: Sat, 21 May 2022 11:42:12 GMT
etag: "6288d014-23ce"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept, Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NLPZDwFXEVJxE631ORGUQDfxSexqz%2FoP5n5%2B2Aay4nAOmXEq%2FyGpBg9%2Fl237%2F1Hu7pyzwMsaHue3LbN%2FXqxE4MtLJVZ7WD516UIy7QAZrjn3gW2u8gFAi914WhAu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794117aebedf1bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kaiyuan-advertising.oss-cn-hongkong.aliyuncs.com/900X60.gif
47.75.19.73200 OK 254 kB URL HTTP/1.1 kaiyuan-advertising.oss-cn-hongkong.aliyuncs.com/900X60.gif
IP 47.75.19.73:0
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 254 kB (253519 bytes)
Hash f744e995971941b6a95fcd2636f5a545
ac9c1230e04eab9e31512d2afe440fe5f0367dc5
59b1a138fa72df587e61916179965cbd819f91aec53ce6ab606949a7e06b3063
GET /900X60.gif HTTP/1.1
Host: kaiyuan-advertising.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 04 Feb 2023 05:44:04 GMT
Content-Type: image/gif
Content-Length: 253519
Connection: keep-alive
x-oss-request-id: 63DDF0A49DB578313184E4CA
Accept-Ranges: bytes
ETag: "F744E995971941B6A95FCD2636F5A545"
Last-Modified: Tue, 29 Nov 2022 08:26:20 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17987192695826819902
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
Content-MD5: 90TplZcZQbapX80mNvWlRQ==
x-oss-server-time: 2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: f95a2821-ae89-4ea9-93b2-43e570285df3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3FyboAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-7e2177f11d5715d4092cad2c;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcFgY5x3Ef0J__7wGn3llTjZ9as5nX1H4HErIT3VlKfeQaQTjymW2g==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:33 GMT
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
age: 27213
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
383guanggao.oss-cn-shenzhen.aliyuncs.com/960x60.gif
120.77.166.67200 OK 299 kB URL HTTP/1.1 383guanggao.oss-cn-shenzhen.aliyuncs.com/960x60.gif
IP 120.77.166.67:0
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 299 kB (299398 bytes)
Hash f4b7967855549e81f65598b93a43d9db
6ab53e8a9af687c1dddad236af323080a04499cf
2e95dc2082af7cc833e0aef825efc261c04b69e3ec4350203854008cc4a12dc6
GET /960x60.gif HTTP/1.1
Host: 383guanggao.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 04 Feb 2023 05:44:05 GMT
Content-Type: image/gif
Content-Length: 299398
Connection: keep-alive
x-oss-request-id: 63DDF0A5D0DEFE30325C3770
Accept-Ranges: bytes
ETag: "F4B7967855549E81F65598B93A43D9DB"
Last-Modified: Thu, 08 Dec 2022 07:20:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8810428828543929982
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: 9LeWeFVUnoH2VZi5OkPZ2w==
x-oss-server-time: 3
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:05 GMT
age: 28561
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75b9c67fbf2d207afec78eb14b95d7ec
c0b7e9e9ca9ee71761489e738a3a308ff0b6e5c8
42ddfef2fc1e0200a1ff3d615fd6da42fd8bdea4551344580c13af07092d401f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5917
x-amzn-requestid: 095185b4-b608-4ac8-9041-6e5fcf9033d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEW_EA4IAMFxVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd80f9-1d780a2a58fcc30613bdfdab;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:47:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -4TwLeMENj7WdI_QQWKgwxTj9MldN5z7qmo7_OX_eXIVba9zjDEoaA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:17:42 GMT
age: 26784
etag: "c0b7e9e9ca9ee71761489e738a3a308ff0b6e5c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65cd12302c9ca5468dbc9a98155970e0
a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1
8463155faca74f13ec4500fed98289d8bfbdc4a989d1cb7580736018eadf1000
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7992
x-amzn-requestid: ba4f95d9-6081-4b34-955c-bbe8e7b2335c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEjGsdIAMF84w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8083-7666baa66ccdec9b5fec8736;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A3c6sSs_b8KkREPa26a8X9NTEZpHGDjElR9hT-NXwg6dYpeuRNZXfA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
etag: "a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1"
content-type: image/jpeg
age: 27226
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kvevv.com/4bf88adf466b90cef3686374a27fc0e2.gif
13.227.254.70200 OK 507 kB URL HTTP/1.1 kvevv.com/4bf88adf466b90cef3686374a27fc0e2.gif
IP 13.227.254.70:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 507 kB (506851 bytes)
Hash 720e80d2a7ff4cf1bbf0b1608c2f35de
bf0a987ac8d4c7728171fe41e5c45b61b45a2f73
e177aeb64efe8103f8af0afc0a768394d970bbe60edcf103a083d56b915c18b1
GET /4bf88adf466b90cef3686374a27fc0e2.gif HTTP/1.1
Host: kvevv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 506851
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 08:08:10 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 03 Feb 2023 13:35:14 GMT
ETag: "720e80d2a7ff4cf1bbf0b1608c2f35de"
X-Cache: Hit from cloudfront
Via: 1.1 c57dcf725f15a754ea7be2a7d262cec2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SIN52-C3
X-Amz-Cf-Id: E3p-M7_Uull9hOrF-NwAQjJq4Iagmlj2JP9wcrKdcOpnUB7nO0bshg==
Age: 58133
www.yssydh.top/upload/vod/20220727-1/216a680fcabdc4f622130059f8ea82da.gif
104.21.23.48200 OK 48 kB URL HTTP/2 www.yssydh.top/upload/vod/20220727-1/216a680fcabdc4f622130059f8ea82da.gif
IP 104.21.23.48:0
File type GIF image data, version 89a, 150 x 150\012- data
Hash 238e06fae36a60963dd217adc895c9e4
feb1b8c405b5e162fb23a7727aedb83eae0a9e9f
321e056f1cd521d36cde0b3579d208fd0118f423b07b92622a215ca551639fce
GET /upload/vod/20220727-1/216a680fcabdc4f622130059f8ea82da.gif HTTP/1.1
Host: www.yssydh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 05:44:07 GMT
content-type: image/gif
content-length: 47538
last-modified: Wed, 27 Jul 2022 08:34:24 GMT
etag: "62e0f890-b9b2"
expires: Mon, 06 Mar 2023 03:10:51 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 9196
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p%2BqttXWSrGIr2DT5S7p9WjP0YycwUSJg09VLclJqsX5OAM6SKQ0ZNux46mgffreZNQoVQN5x4asJcUpV6I9Jjukmvi3HgVRkUcolKs4R6dkVtgEwcX5G5RrtEYGpV3Hmrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794117b799f11bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3p8801.co/yy-960x60.gif
107.148.202.17200 OK 37 kB IP 107.148.202.17:0
File type GIF image data, version 89a, 960 x 60\012- data
Hash 95ec3b09499f1a1828b7e7921f7fa2f5
ceff74a70c81395fcd3704fc94929968dc5d3a63
4cd52a6e9acb566d7bb83c792f04df294ac22c11645bdc0d8a6c9e19c5625644
GET /yy-960x60.gif HTTP/1.1
Host: 3p8801.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:08 GMT
content-type: image/gif
content-length: 37300
last-modified: Sat, 12 Nov 2022 07:15:04 GMT
etag: "636f47f8-91b4"
expires: Mon, 06 Mar 2023 05:44:08 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 11eb0122eb5ce0731d245cb563246e30
3c23aaf2d29ce2acefdf5cea22b60c1eb6fa9a40
6caa222b438411a109acd7a43677f197c183ba5854ae478c21a7e12e9cf58359
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Sat, 04 Feb 2023 05:44:08 GMT
Connection: keep-alive
X-N: S
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3dfa693ecc48bef05cd6bb5786f22370
0c88e861813a3f7ba4f0114302f7caf74a971e35
bcead8a0fb3711af0eabf0a8a0bea8c9bcf0ca8bffd8fe611f0d0b8b9b2e4788
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCEAD8A0FB3711AF0EABF0A8A0BEA8C9BCF0CA8BFFD8FE611F0D0B8B9B2E4788"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6490
Expires: Sat, 04 Feb 2023 07:32:18 GMT
Date: Sat, 04 Feb 2023 05:44:08 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g3
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g3
IP 104.18.21.226:0
Hash dde0746b7558a6f33ba86fd4a364ec2d
012f3338e8dd25183fa9eb263b7829ba5e225379
85201e73fb6129e969fddac50f3557789f285a1fe3d8179aac3f96e83bcb5821
POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Wed, 08 Feb 2023 03:02:19 GMT
ETag: "012f3338e8dd25183fa9eb263b7829ba5e225379"
Last-Modified: Sat, 04 Feb 2023 03:02:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 4
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117bf8943b4ee-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b30239e0de9eb041fdbedc33c6b3fc12
4e8f000c47dc0422eb34e334003e0c0eca88d1a5
8c67a1789d1c6e7e18ffae385ea89db69effd3724598917e2316571f600cf76a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C67A1789D1C6E7E18FFAE385EA89DB69EFFD3724598917E2316571F600CF76A"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12694
Expires: Sat, 04 Feb 2023 09:15:42 GMT
Date: Sat, 04 Feb 2023 05:44:08 GMT
Connection: keep-alive
884329.com/45be61f50f4744859fecfdf3689c8b45.gif
47.75.19.177200 OK 258 kB URL HTTP/1.1 884329.com/45be61f50f4744859fecfdf3689c8b45.gif
IP 47.75.19.177:0
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 240\012- data
Size 258 kB (258172 bytes)
Hash a53153eb12c55eb6e54fc1c07ecda014
867b817db9860bd080cb8b6ffadf34fac234b9b5
9da91e03112d1593b225d27051df6f683606c05b461563f839ecfe986fa22a67
GET /45be61f50f4744859fecfdf3689c8b45.gif HTTP/1.1
Host: 884329.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 04 Feb 2023 05:44:07 GMT
Content-Type: image/gif
Content-Length: 258172
Connection: keep-alive
x-oss-request-id: 63DDF0A7D14BBC3330DF8D52
Accept-Ranges: bytes
ETag: "A53153EB12C55EB6E54FC1C07ECDA014"
Last-Modified: Sun, 10 Jul 2022 06:54:51 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9389287877325039094
x-oss-storage-class: Standard
Content-MD5: pTFT6xLFXrblT8HAfs2gFA==
x-oss-server-time: 1
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4586
Expires: Sat, 04 Feb 2023 07:00:34 GMT
Date: Sat, 04 Feb 2023 05:44:08 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash dd0de68155fb36464c27d7bcb1d5d25d
11a204f8c7e83d50d1b89457e31f4a61aaea24d9
d609713c6845cb6f7275086ee301a362023543bcfb64e6dfa7d70ccc0610f67e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1728
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:44:08 GMT
Last-Modified: Sat, 04 Feb 2023 05:15:20 GMT
Server: ECS (amb/6BC0)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4586
Expires: Sat, 04 Feb 2023 07:00:34 GMT
Date: Sat, 04 Feb 2023 05:44:08 GMT
Connection: keep-alive
fmlb.netlbtu.com/upload/vod/2022/05-21/15/ns1knhm4oqj1549ns1knhm4oqj392229.jpg
172.247.77.90200 OK 7.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/05-21/15/ns1knhm4oqj1549ns1knhm4oqj392229.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash cc1ac6f9498cfae2478806915c37d6ff
9c8fde5cbfa383c549b6be9810c44472018517e8
4c206418aab2c843ccfd83b47613f2a8a00deb5dfeca0b4e783c663c7655858c
GET /upload/vod/2022/05-21/15/ns1knhm4oqj1549ns1knhm4oqj392229.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:03 GMT
Content-Type: image/jpeg
Content-Length: 7588
Last-Modified: Wed, 09 Nov 2022 11:40:51 GMT
Connection: keep-alive
ETag: "636b91c3-1da4"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4586
Expires: Sat, 04 Feb 2023 07:00:34 GMT
Date: Sat, 04 Feb 2023 05:44:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4586
Expires: Sat, 04 Feb 2023 07:00:34 GMT
Date: Sat, 04 Feb 2023 05:44:08 GMT
Connection: keep-alive
fmlb.netlbtu.com/upload/vod/2022/08-22/12/j5dicohbx3s1222j5dicohbx3s2219575.jpg
172.247.77.90200 OK 7.1 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-22/12/j5dicohbx3s1222j5dicohbx3s2219575.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 8f8af8f7b5c19fd4a581ebd84797cf28
c5ab534c2c806b7494831d18f8bbea700deba7f2
df6a3e182700b52e21a6a6ff874591cefbb34ea3ef33a412513b790be7bffaba
GET /upload/vod/2022/08-22/12/j5dicohbx3s1222j5dicohbx3s2219575.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:03 GMT
Content-Type: image/jpeg
Content-Length: 7118
Last-Modified: Wed, 09 Nov 2022 11:42:52 GMT
Connection: keep-alive
ETag: "636b923c-1bce"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4585
Expires: Sat, 04 Feb 2023 07:00:34 GMT
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
fmlb.netlbtu.com/upload/vod/2022/08-03/12/vzoa1dyk0r51252vzoa1dyk0r50512627.jpg
172.247.77.90200 OK 8.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-03/12/vzoa1dyk0r51252vzoa1dyk0r50512627.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash e7f49eea16dd3e57537a1cc5784da7b6
91942e149392c6d67c871ad12e17f3a6f6fd1a88
1d1891ab4bc8525c8e83be93349757a56a67087bf9d67fedc64469b32c02c41a
GET /upload/vod/2022/08-03/12/vzoa1dyk0r51252vzoa1dyk0r50512627.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:03 GMT
Content-Type: image/jpeg
Content-Length: 8617
Last-Modified: Wed, 09 Nov 2022 08:20:24 GMT
Connection: keep-alive
ETag: "636b62c8-21a9"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.21.226:0
Hash f38afc042b766155d3203668570039c7
87b1828e4bc2031ca28b0900d0a2636726acb346
1102214c98fe8b0a62cacd5385f96019fcb64f534035f759b6d962c982e54fb3
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Wed, 08 Feb 2023 04:49:02 GMT
ETag: "87b1828e4bc2031ca28b0900d0a2636726acb346"
Last-Modified: Sat, 04 Feb 2023 04:49:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 136
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117c079b3b4ee-OSL
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7f803548b643e60d05d9e804e1380cd4
78de3b2a6017f01d2d76100816ea5c4a2d9d6e74
01678fa919d1e4a3723ec9e688b87dbcf68e0e3c4bb0a405e6a24ff25012bb1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:44:09 GMT
Server: ECS (amb/6BB8)
Content-Length: 279
ocsp.buypass.com/
23.36.76.200200 OK 1.7 kB IP 23.36.76.200:0
ASN #20940 Akamai International B.V.
Hash ca6ecc75be9ccf18d08d0295126391a8
ce63d7bb24ab23f31ac73eebb8fde17450cb06bb
53800b244d902a114ba949e56f3be84251bf0f37155600d4306d4dafec634771
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 0f1a56f4-125c-44c8-9c6e-7a62ecb713d9
Content-Length: 1701
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 11eb0122eb5ce0731d245cb563246e30
3c23aaf2d29ce2acefdf5cea22b60c1eb6fa9a40
6caa222b438411a109acd7a43677f197c183ba5854ae478c21a7e12e9cf58359
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=899
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 11eb0122eb5ce0731d245cb563246e30
3c23aaf2d29ce2acefdf5cea22b60c1eb6fa9a40
6caa222b438411a109acd7a43677f197c183ba5854ae478c21a7e12e9cf58359
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=899
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 11eb0122eb5ce0731d245cb563246e30
3c23aaf2d29ce2acefdf5cea22b60c1eb6fa9a40
6caa222b438411a109acd7a43677f197c183ba5854ae478c21a7e12e9cf58359
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=899
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
X-N: S
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash 4a196cc08e3b153790ec4fdae811edf6
1b4c09eb8d41a2edac67db35d5cd2b4ec6ec0f88
fd232468006c80004b6be6420e240eb99ba73ebb36076824ce10f186a83d42b3
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 22:45:42 GMT
Expires: Fri, 10 Feb 2023 22:45:41 GMT
Etag: "1b4c09eb8d41a2edac67db35d5cd2b4ec6ec0f88"
Cache-Control: max-age=579091,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c0e887b523-OSL
fmlb.netlbtu.com/upload/vod/2022/07-01/11/bacrae2plze1136bacrae2plze201479.jpg
172.247.77.90200 OK 9.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-01/11/bacrae2plze1136bacrae2plze201479.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 172b7402baea67d1a9c134c49948b993
004b12afd666ab156572fdf5fa484bf5b63bc992
f649168d19642c5d7b1fb59ea6a60e87cd612213b54d7b2b5923386259179aab
GET /upload/vod/2022/07-01/11/bacrae2plze1136bacrae2plze201479.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 9196
Last-Modified: Wed, 09 Nov 2022 11:41:27 GMT
Connection: keep-alive
ETag: "636b91e7-23ec"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b1261709629504a5e00761a6fde813e7
f49c512823a27c7d3c87d925db5b44805f9e1a16
a965ead1ced4feb72e5003a59d4a2f72adeae70991f1dc0b08be5a93ee27152d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A965EAD1CED4FEB72E5003A59D4A2F72ADEAE70991F1DC0B08BE5A93EE27152D"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7168
Expires: Sat, 04 Feb 2023 07:43:37 GMT
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
fmlb.netlbtu.com/upload/vod/2022/06-29/10/gh1ezor3lph1056gh1ezor3lph47569.jpg
172.247.77.90200 OK 6.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/06-29/10/gh1ezor3lph1056gh1ezor3lph47569.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ef5cd925bf3bb139a55f67d156448235
995eb7eb4e2f07e7d803760caaa1987dbc0fc938
db4220b79f9cf9ab9589e9a44b524a4399434bdcf0d3ed0effc6377f1e1ef2bb
GET /upload/vod/2022/06-29/10/gh1ezor3lph1056gh1ezor3lph47569.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 6194
Last-Modified: Wed, 09 Nov 2022 11:44:05 GMT
Connection: keep-alive
ETag: "636b9285-1832"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-02/09/g0c1i5zhvqo0930g0c1i5zhvqo271627.jpg
172.247.77.90200 OK 8.1 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-02/09/g0c1i5zhvqo0930g0c1i5zhvqo271627.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 68d4bc6030129ac01466ab8d954ab26b
0065c6e33a039314d1b620dad303d0484766fc9a
83c484338e5eab035d168634a6d1c6a2b39b3aaf9198be53c94b69f640e9c690
GET /upload/vod/2022/07-02/09/g0c1i5zhvqo0930g0c1i5zhvqo271627.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 8096
Last-Modified: Wed, 09 Nov 2022 11:43:40 GMT
Connection: keep-alive
ETag: "636b926c-1fa0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash 5faed8649412cdae36280456c081dc2b
d7b8a86d02609a3d8d7cf8ce956909cdcf3837fd
e3fa083dd4e46c71b274f472558c36d762b2163dfb8212298a9bd64245dad88e
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=120
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
95.101.10.107200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 95.101.10.107:0
ASN #20940 Akamai International B.V.
Hash d9f8895b25c44ccc106132a918b644bf
8422e24c6b868cf79b04e8b24223a7dc890230f9
a3e080be3eb12b796470009b3cb262525d27e306c9e2625132dd4ff2f29ea49c
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=899
Date: Sat, 04 Feb 2023 05:44:09 GMT
Connection: keep-alive
X-N: S
ocsp.r2m02.amazontrust.com/
143.204.48.16200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash 131cfa577a0f753e49000d8571206ac8
a822a68ad88a6740ba8c610b2355cc099564f6a6
4d5ca8c5ddcba2b6b2c606d235fc8d3658cc23b8078cabcd60d5585dcb9767ec
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 04 Feb 2023 05:44:09 GMT
Etag: "63dd05a3-1d7"
Server: ECS (dcb/7EC7)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jC-2sjEv0w4KWZUhtjMwQOleVADyX5LM0d8tL5LmWwMIEgDqdTwxpw==
3p8801.co/xx/960x60.gif
107.148.202.17200 OK 582 kB IP 107.148.202.17:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 582 kB (582523 bytes)
Hash cad4eee9d07382a2f695b53aae0c2089
66ad44b09567bbbebffa772d2b416cb9f5b2bafb
e3af64bc06d2e37e60ab6ad902668894b1484cf356e7cab9742fee72899c3124
GET /xx/960x60.gif HTTP/1.1
Host: 3p8801.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:08 GMT
content-type: image/gif
content-length: 582523
last-modified: Wed, 21 Dec 2022 15:24:38 GMT
etag: "63a32536-8e37b"
expires: Mon, 06 Mar 2023 05:44:08 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
3p8801.co/11-960x60.gif
107.148.202.17200 OK 242 kB IP 107.148.202.17:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 242 kB (242091 bytes)
Hash b9072e166e9ab28d08854aab05882d3b
a88df27293f6525b000cc1112084fe4f2cdd0e8c
1ad655eb5ad6ce6d519f757b4e78afc39cd41e892897faadf5610e11e3d437b2
GET /11-960x60.gif HTTP/1.1
Host: 3p8801.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:08 GMT
content-type: image/gif
content-length: 242091
last-modified: Sat, 19 Nov 2022 11:26:07 GMT
etag: "6378bd4f-3b1ab"
expires: Mon, 06 Mar 2023 05:44:08 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 2ea3c50036d69f9e9f11254bd21efab8
e8550a6e7beb70f9e3554c858736b3edf8015dd7
c2bc5ca67f5c3a44163d566cbbf71bfcff11924e7d96e598b0660c2f08a2a85b
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 08 Feb 2023 03:46:30 GMT
ETag: "e8550a6e7beb70f9e3554c858736b3edf8015dd7"
Last-Modified: Sat, 04 Feb 2023 03:46:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1946
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117c1cb1eb4f4-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 70e1827dafabe8607908bc9bb591347c
1bdacc609d237f83701d7e5399968f1d2b7728d7
72074f2fc3293441791cb992babfa38146cf79b6c60b898fdd8d6a213657f510
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 14:00:06 GMT
Expires: Wed, 08 Feb 2023 14:00:05 GMT
Etag: "1bdacc609d237f83701d7e5399968f1d2b7728d7"
Cache-Control: max-age=374755,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c0be30b51e-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 2ea3c50036d69f9e9f11254bd21efab8
e8550a6e7beb70f9e3554c858736b3edf8015dd7
c2bc5ca67f5c3a44163d566cbbf71bfcff11924e7d96e598b0660c2f08a2a85b
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 08 Feb 2023 03:46:30 GMT
ETag: "e8550a6e7beb70f9e3554c858736b3edf8015dd7"
Last-Modified: Sat, 04 Feb 2023 03:46:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1946
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794117c1f878fab4-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 70e1827dafabe8607908bc9bb591347c
1bdacc609d237f83701d7e5399968f1d2b7728d7
72074f2fc3293441791cb992babfa38146cf79b6c60b898fdd8d6a213657f510
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 14:00:06 GMT
Expires: Wed, 08 Feb 2023 14:00:05 GMT
Etag: "1bdacc609d237f83701d7e5399968f1d2b7728d7"
Cache-Control: max-age=374755,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c0cd3e0b31-OSL
fmlb.netlbtu.com/upload/vod/2022/05-15/21/44bitbdnvdw213844bitbdnvdw071707.jpg
172.247.77.90200 OK 6.9 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/05-15/21/44bitbdnvdw213844bitbdnvdw071707.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash ae1dca6ae2978d405f11131067d42a27
3f18d7534e287bb0db887137f07957946329561d
85f61d3ec02159f64c1a12ee2544e824948198d58ed451c6dd3fd486a12cb33d
GET /upload/vod/2022/05-15/21/44bitbdnvdw213844bitbdnvdw071707.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 6927
Last-Modified: Wed, 09 Nov 2022 11:42:40 GMT
Connection: keep-alive
ETag: "636b9230-1b0f"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash dd0de68155fb36464c27d7bcb1d5d25d
11a204f8c7e83d50d1b89457e31f4a61aaea24d9
d609713c6845cb6f7275086ee301a362023543bcfb64e6dfa7d70ccc0610f67e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1729
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:44:09 GMT
Last-Modified: Sat, 04 Feb 2023 05:15:20 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7f803548b643e60d05d9e804e1380cd4
78de3b2a6017f01d2d76100816ea5c4a2d9d6e74
01678fa919d1e4a3723ec9e688b87dbcf68e0e3c4bb0a405e6a24ff25012bb1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:44:09 GMT
Last-Modified: Sat, 04 Feb 2023 05:44:09 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
fmlb.netlbtu.com/upload/vod/2022/07-11/11/u0voi231zl41121u0voi231zl4403565.jpg
172.247.77.90200 OK 9.4 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-11/11/u0voi231zl41121u0voi231zl4403565.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 9f9f7b589595d03b067aa6fb9b0f4325
d57beb795d409d1ad220c6113e440bf811f6f2b3
fa87f9c26806cfff1a73aaf9fe1f0e10b3c4d1a70f6eb14b604c267319bb7c45
GET /upload/vod/2022/07-11/11/u0voi231zl41121u0voi231zl4403565.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 9355
Last-Modified: Wed, 09 Nov 2022 11:42:28 GMT
Connection: keep-alive
ETag: "636b9224-248b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
p.qlogo.cn/qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7KC5LIMic1KaQhBZDBbzmUjzOujmHe0Lkhnw9WASia6AaU/0
43.154.254.32200 OK 206 kB URL HTTP/2 p.qlogo.cn/qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7KC5LIMic1KaQhBZDBbzmUjzOujmHe0Lkhnw9WASia6AaU/0
IP 43.154.254.32:0
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 206 kB (205622 bytes)
Hash 8a22a6888c325aa3acf83e7cedfe35e7
37da1ea976724d35c1c32ae18d7924192184ba32
2e90b20d4c2067ff68444790955d65d2745365cf025c486c8c2b685696faeeaa
GET /qqmail_head/PiajxSqBRaELwR4xf94eWENgvxiczrusib7KC5LIMic1KaQhBZDBbzmUjzOujmHe0Lkhnw9WASia6AaU/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Sat, 04 Feb 2023 05:44:07 GMT
content-type: image/gif
content-length: 205622
vary: Accept,Origin
last-modified: Mon, 19 Dec 2022 10:10:38 GMT
cache-control: max-age=2592000
x-delay: 44594 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 9
x-reqgue: 0
size: 205622
chid: 0
fid: 0
x-nws-log-uuid: a82b3619-2e97-40f5-92f5-fb2a924dd8a2
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=725463858&si=11e61b446cd820464fba274f42765d10&v=1.3.0&lv=1&sn=21670&r=0&ww=1280&u=http%3A%2F%2Fwww.cn-ger.com%2F&tt=%E5%9B%9B%E8%99%8E%E6%88%90%E4%BA%BA%E4%B9%85%E4%B9%85%E7%B2%BE%E5%93%81%E6%97%A0%E7%A0%81%2C%E4%BA%9A%E6%B4%B2%E5%8D%88%E5%A4%9C%E6%9C%AA%E6%BB%A1%E5%8D%81%E5%85%AB%E5%8B%BF%E5%85%A5%E7%BD%91%E7%AB%992%2C%E7%BE%8E%E5%A5%B3%E9%9C%B2100%25%E8%83%B8%E6%97%A0%E9%81%AE%E6%8C%A1%2C%E4%BA%BA%E5%A6%BB%E5%9C%A8%E5%8E%A8%E6%88%BF%E8%A2%AB%E8%89%B2%E8%AF%B1%20%E4%B8%AD%E6%96%87%E5%AD%97%E5%B9%95
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=725463858&si=11e61b446cd820464fba274f42765d10&v=1.3.0&lv=1&sn=21670&r=0&ww=1280&u=http%3A%2F%2Fwww.cn-ger.com%2F&tt=%E5%9B%9B%E8%99%8E%E6%88%90%E4%BA%BA%E4%B9%85%E4%B9%85%E7%B2%BE%E5%93%81%E6%97%A0%E7%A0%81%2C%E4%BA%9A%E6%B4%B2%E5%8D%88%E5%A4%9C%E6%9C%AA%E6%BB%A1%E5%8D%81%E5%85%AB%E5%8B%BF%E5%85%A5%E7%BD%91%E7%AB%992%2C%E7%BE%8E%E5%A5%B3%E9%9C%B2100%25%E8%83%B8%E6%97%A0%E9%81%AE%E6%8C%A1%2C%E4%BA%BA%E5%A6%BB%E5%9C%A8%E5%8E%A8%E6%88%BF%E8%A2%AB%E8%89%B2%E8%AF%B1%20%E4%B8%AD%E6%96%87%E5%AD%97%E5%B9%95
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=725463858&si=11e61b446cd820464fba274f42765d10&v=1.3.0&lv=1&sn=21670&r=0&ww=1280&u=http%3A%2F%2Fwww.cn-ger.com%2F&tt=%E5%9B%9B%E8%99%8E%E6%88%90%E4%BA%BA%E4%B9%85%E4%B9%85%E7%B2%BE%E5%93%81%E6%97%A0%E7%A0%81%2C%E4%BA%9A%E6%B4%B2%E5%8D%88%E5%A4%9C%E6%9C%AA%E6%BB%A1%E5%8D%81%E5%85%AB%E5%8B%BF%E5%85%A5%E7%BD%91%E7%AB%992%2C%E7%BE%8E%E5%A5%B3%E9%9C%B2100%25%E8%83%B8%E6%97%A0%E9%81%AE%E6%8C%A1%2C%E4%BA%BA%E5%A6%BB%E5%9C%A8%E5%8E%A8%E6%88%BF%E8%A2%AB%E8%89%B2%E8%AF%B1%20%E4%B8%AD%E6%96%87%E5%AD%97%E5%B9%95 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 04 Feb 2023 05:44:09 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=330C61FE2C15D6E0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
fmlb.netlbtu.com/upload/vod/2022/09-03/13/puqirvbd2xy1304puqirvbd2xy1523633.jpg
172.247.77.90200 OK 11 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/09-03/13/puqirvbd2xy1304puqirvbd2xy1523633.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 47db6f77e83402b2ce71099aaa02150b
4e894824e4830cd68adf180004267c2940c30f6a
42171ae8a3f80914dc498c5329597298b5bc8c63326f972007716683ce4abe77
GET /upload/vod/2022/09-03/13/puqirvbd2xy1304puqirvbd2xy1523633.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 11326
Last-Modified: Wed, 09 Nov 2022 11:46:38 GMT
Connection: keep-alive
ETag: "636b931e-2c3e"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-26/11/wglnhsqyh3u1145wglnhsqyh3u299253.jpg
172.247.77.90200 OK 8.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-26/11/wglnhsqyh3u1145wglnhsqyh3u299253.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash bd300bd18fcf342bd7e84a272e696986
f2626ce9310b2c07183d936630fd19f7735f65cd
fef84a73b159003b763b5805c9a016acf515bae5a39067798c637a9ba9a97482
GET /upload/vod/2022/07-26/11/wglnhsqyh3u1145wglnhsqyh3u299253.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 8585
Last-Modified: Wed, 09 Nov 2022 11:45:27 GMT
Connection: keep-alive
ETag: "636b92d7-2189"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 70e1827dafabe8607908bc9bb591347c
1bdacc609d237f83701d7e5399968f1d2b7728d7
72074f2fc3293441791cb992babfa38146cf79b6c60b898fdd8d6a213657f510
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 14:00:06 GMT
Expires: Wed, 08 Feb 2023 14:00:05 GMT
Etag: "1bdacc609d237f83701d7e5399968f1d2b7728d7"
Cache-Control: max-age=374755,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c0dea01c0e-OSL
fmlb.netlbtu.com/upload/vod/2022/07-30/08/wp5hynkugz50857wp5hynkugz54211071.jpg
172.247.77.90200 OK 6.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-30/08/wp5hynkugz50857wp5hynkugz54211071.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 6db035c5dae3e9887543ad5f0ec7c709
e339d0e92df032b5e1b18a101e12a22ab20744fd
cee967a5882921b51db5b510561b219d69d3ba1424ab948926ec272477fc33b3
GET /upload/vod/2022/07-30/08/wp5hynkugz50857wp5hynkugz54211071.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 5969
Last-Modified: Wed, 09 Nov 2022 11:41:36 GMT
Connection: keep-alive
ETag: "636b91f0-1751"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-11/11/lgywql5pgpd1153lgywql5pgpd3715019.jpg
172.247.77.90200 OK 13 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-11/11/lgywql5pgpd1153lgywql5pgpd3715019.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash adc840a0aa0e9e1fba70a387392dce3a
070c7245ded11bceb84c8e50e240056548228eb8
b7fa5d04578b7500882dc5c652096440712a9a8035625b16782d1e285565dfde
GET /upload/vod/2022/08-11/11/lgywql5pgpd1153lgywql5pgpd3715019.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 13088
Last-Modified: Wed, 09 Nov 2022 11:42:59 GMT
Connection: keep-alive
ETag: "636b9243-3320"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
api.share.baidu.com/s.gif?l=http://www.cn-ger.com/
39.156.68.163200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.cn-ger.com/
IP 39.156.68.163:0
ASN #9808 China Mobile Communications Group Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.cn-ger.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cn-ger.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Sat, 04 Feb 2023 05:44:09 GMT
fmlb.netlbtu.com/upload/vod/2022/08-24/11/kssd2xmnnvh1132kssd2xmnnvh3020121.jpg
172.247.77.90200 OK 7.5 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-24/11/kssd2xmnnvh1132kssd2xmnnvh3020121.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 95c63ea2bd06c6a8dc84103999fd3e7a
0c6939c1ca580ce9b1592ee8f95ee396a6cee333
159a24232e426e1f7b5f37a63960ed18206659a4e792beeab9de921ea5eb3675
GET /upload/vod/2022/08-24/11/kssd2xmnnvh1132kssd2xmnnvh3020121.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 7547
Last-Modified: Wed, 09 Nov 2022 11:42:39 GMT
Connection: keep-alive
ETag: "636b922f-1d7b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 704e43a19a19b8dc2e2fb6ee71dc4d11
a5370f1edd6cf57a0962bfd04f1ff65bc64d9a35
4d9aadd1e432e16848724d8e2bbcae1b9947b82c2ac72b2f117f03abf9fda7d6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 06:05:20 GMT
Expires: Fri, 10 Feb 2023 06:05:19 GMT
Etag: "a5370f1edd6cf57a0962bfd04f1ff65bc64d9a35"
Cache-Control: max-age=519069,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c04de2b51d-OSL
fmlb.netlbtu.com/upload/vod/2022/07-13/11/yx0iau444nz1147yx0iau444nz544081.jpg
172.247.77.90200 OK 7.8 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-13/11/yx0iau444nz1147yx0iau444nz544081.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 90x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 22726daa57faab4052c45d67d411b79a
11033ceb3d474e1c0645fb69963ec8c501d7296e
c5a9e7968c0e7dffafaaa305f291f404d6560f09aa4f2684365336e3d2b6e1cf
GET /upload/vod/2022/07-13/11/yx0iau444nz1147yx0iau444nz544081.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 7844
Last-Modified: Wed, 09 Nov 2022 11:43:07 GMT
Connection: keep-alive
ETag: "636b924b-1ea4"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-29/09/kyrmuosyxb50953kyrmuosyxb52322345.jpg
172.247.77.90200 OK 8.7 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-29/09/kyrmuosyxb50953kyrmuosyxb52322345.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash 3d1dce06a0748a0bcad92980f248cc8f
8484f0d416d3ac6b32e171e805a09e258535a2c3
b1c1d38b453601538be00cbce29943aa22b5e09213b1a47e68313e48927647b6
GET /upload/vod/2022/08-29/09/kyrmuosyxb50953kyrmuosyxb52322345.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 8684
Last-Modified: Wed, 09 Nov 2022 11:42:35 GMT
Connection: keep-alive
ETag: "636b922b-21ec"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.sectigochina.com/
104.18.33.217200 OK 599 B IP 104.18.33.217:0
Hash 5ed5ef1c3e173efe0e6e979d0025957e
2b8d03394013adb20480d2b2b4d95211edbea9ef
d208b7f7c5cc37c93f5006d78a67aaf55fd9232c8a485810dd39f21a1d9190dd
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 00:32:21 GMT
Expires: Sat, 11 Feb 2023 00:32:20 GMT
Etag: "2b8d03394013adb20480d2b2b4d95211edbea9ef"
Cache-Control: max-age=585490,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c329780b3d-OSL
fmlb.netlbtu.com/upload/vod/2022/07-17/11/11t53ssjfnf111211t53ssjfnf425725.jpg
172.247.77.90200 OK 8.5 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-17/11/11t53ssjfnf111211t53ssjfnf425725.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ee96326f4db83b6283b67bae9f4d915a
fa802912b5313fb78c087d56cb98f0253180a50a
cca207233805c69c3c6a33d3e81cd27f90ec2bd27aed53165062319fd63c9496
GET /upload/vod/2022/07-17/11/11t53ssjfnf111211t53ssjfnf425725.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 8477
Last-Modified: Wed, 09 Nov 2022 11:43:20 GMT
Connection: keep-alive
ETag: "636b9258-211d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-08/12/p3gkhf3x35g1229p3gkhf3x35g0014097.jpg
172.247.77.90200 OK 6.3 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-08/12/p3gkhf3x35g1229p3gkhf3x35g0014097.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash cf91efab0daea4e3e7518b2f0ac1a51d
d337849531125b3d9ca2a2c31ed4e563a58bc83d
68d455f4bf3d2bf8fe9b336d56dd68c5ede84291ab4af5061558da44315f82af
GET /upload/vod/2022/08-08/12/p3gkhf3x35g1229p3gkhf3x35g0014097.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 6288
Last-Modified: Wed, 09 Nov 2022 11:40:23 GMT
Connection: keep-alive
ETag: "636b91a7-1890"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-04/13/tvnag2apsub1324tvnag2apsub0012811.jpg
172.247.77.90200 OK 10 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-04/13/tvnag2apsub1324tvnag2apsub0012811.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash aba7f94ca903d293c0a341dc3f2aebae
8cef5e57c36bbf0b7eca6869af5ae8cc971b01c6
986538618cdde4455dba48fb6c7264dc5611d75d57e47c3591be6d2e9f8ac664
GET /upload/vod/2022/08-04/13/tvnag2apsub1324tvnag2apsub0012811.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 10388
Last-Modified: Wed, 09 Nov 2022 11:42:09 GMT
Connection: keep-alive
ETag: "636b9211-2894"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
8499583.com/8499/mi/960x60.gif
172.247.109.212200 OK 291 kB URL HTTP/2 8499583.com/8499/mi/960x60.gif
IP 172.247.109.212:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 291 kB (290572 bytes)
Hash 57aeaeed8e55b2a1e23b348d9d73f9d5
381bc182c18210ba33ebe13cbf8f20f297d33c16
e10903ca99193ba8ffd6c5f74753461cf070e75026e73fda3c040496f8dcfdb6
GET /8499/mi/960x60.gif HTTP/1.1
Host: 8499583.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 05:44:08 GMT
content-type: image/gif
content-length: 290572
last-modified: Sat, 07 Jan 2023 12:00:21 GMT
etag: "46f0c-5f1ab474e52ba"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/07-02/09/zw4xdxunj0q0929zw4xdxunj0q541583.jpg
172.247.77.90200 OK 9.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-02/09/zw4xdxunj0q0929zw4xdxunj0q541583.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash b762b6c1e4faf18fee69de579db40b51
43c4d3dd674b2934d56a028c720ff6e76f047a63
a49ee3827affa6bf32dbdfcc094b4bae5b8375edfebb1ae36821c45ad63d107c
GET /upload/vod/2022/07-02/09/zw4xdxunj0q0929zw4xdxunj0q541583.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 9002
Last-Modified: Wed, 09 Nov 2022 11:45:34 GMT
Connection: keep-alive
ETag: "636b92de-232a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.sectigochina.com/
104.18.33.217200 OK 599 B IP 104.18.33.217:0
Hash 6a825379700cf1222c172541817416ac
41ae29b4faa8da35b84d233674539f5e75fcd661
564bb7f3d640153996fbe7f0c19fdba77d9509a9dac17078496607d926c76215
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 19:57:35 GMT
Expires: Tue, 07 Feb 2023 19:57:34 GMT
Etag: "41ae29b4faa8da35b84d233674539f5e75fcd661"
Cache-Control: max-age=309804,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c32ac8b509-OSL
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 771181635d9c7fe1ddf5bb82d4bf2c12
b146bc4dee082bc0209b582e6fc2705a1ada6abb
fc3f89dd283c7a8ea1a0b75ee6962321fdadc102c0c4edb801038a4bd4590417
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5144
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:44:09 GMT
Last-Modified: Sat, 04 Feb 2023 04:18:25 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 727
fmlb.netlbtu.com/upload/vod/2022/07-28/11/okzdcdzxvgq1120okzdcdzxvgq3310041.jpg
172.247.77.90200 OK 12 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-28/11/okzdcdzxvgq1120okzdcdzxvgq3310041.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ad0c891938a898652047cbe47bec124c
4b14425c0369df511360179f0fef6cbcb0433c70
6e217b89b50b87b6331719c38adbc61964b046e38e15d8c3536d8b6cb6144c1c
GET /upload/vod/2022/07-28/11/okzdcdzxvgq1120okzdcdzxvgq3310041.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 12259
Last-Modified: Wed, 09 Nov 2022 11:43:54 GMT
Connection: keep-alive
ETag: "636b927a-2fe3"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-21/11/p3bdgm2hafz1151p3bdgm2hafz4218981.jpg
172.247.77.90200 OK 12 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-21/11/p3bdgm2hafz1151p3bdgm2hafz4218981.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 5d1d4e57256137bc2187543e39910811
9a3e8c4570d02c29059b0060d5f86e09d67f00f3
65da99df5ed9ab2dbf2843e7b96efe0c4599b1a24434c6dc18169aef246c7df4
GET /upload/vod/2022/08-21/11/p3bdgm2hafz1151p3bdgm2hafz4218981.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 11622
Last-Modified: Wed, 09 Nov 2022 11:40:55 GMT
Connection: keep-alive
ETag: "636b91c7-2d66"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-01/12/w2t41irhjqs1239w2t41irhjqs5911875.jpg
172.247.77.90200 OK 11 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-01/12/w2t41irhjqs1239w2t41irhjqs5911875.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash c0c6fa4139dcf73e17cad7b3cc29e8a4
58fafdf451ddf27ead1f43d995aa9ca2e586f807
d29c662475ecbd7437c06f24105c7eedbc645503e1aac0b5ad7b3468f56d5321
GET /upload/vod/2022/08-01/12/w2t41irhjqs1239w2t41irhjqs5911875.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 10756
Last-Modified: Wed, 09 Nov 2022 08:21:27 GMT
Connection: keep-alive
ETag: "636b6307-2a04"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.sectigochina.com/
104.18.33.217200 OK 599 B IP 104.18.33.217:0
Hash 5ed5ef1c3e173efe0e6e979d0025957e
2b8d03394013adb20480d2b2b4d95211edbea9ef
d208b7f7c5cc37c93f5006d78a67aaf55fd9232c8a485810dd39f21a1d9190dd
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 00:32:21 GMT
Expires: Sat, 11 Feb 2023 00:32:20 GMT
Etag: "2b8d03394013adb20480d2b2b4d95211edbea9ef"
Cache-Control: max-age=585490,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794117c32fb11c0e-OSL
fmlb.netlbtu.com/upload/vod/2022/06-09/13/qgweoz31yqo1313qgweoz31yqo253821.jpg
172.247.77.90200 OK 6.8 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/06-09/13/qgweoz31yqo1313qgweoz31yqo253821.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 0788cf81ad30ee1dd65828aaf3990514
bdc79e12827ce4473b712920b89add9fdceaf696
d9e33b6ac8fb511b8d254ff3aebd6603655f7aeb1bc91c749c4e28133c97254c
GET /upload/vod/2022/06-09/13/qgweoz31yqo1313qgweoz31yqo253821.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 6776
Last-Modified: Wed, 09 Nov 2022 11:43:01 GMT
Connection: keep-alive
ETag: "636b9245-1a78"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
p3.douyinpic.com/obj/tos-cn-i-dy/e6cf00521c224de2bd31a77950b73158
47.246.44.226200 OK 408 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/e6cf00521c224de2bd31a77950b73158
IP 47.246.44.226:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 408 kB (407956 bytes)
Hash 456052cfab11e5c1230c2b8b07b28937
b04dc3234615beefb7c12b1788be71b1f61f10a3
a9495c045c83eae51ff9edee2d31d707218b5542946d2466c4d8d806f323324e
GET /obj/tos-cn-i-dy/e6cf00521c224de2bd31a77950b73158 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 407956
date: Sun, 08 Jan 2023 15:06:53 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Sun, 08 Jan 2023 07:41:40 GMT
nw-session-id: 2023010815414052B9E5F3A4CB6A4EDC5Djtdjh03dy
nw-session-trace: 2023-01-08T15:41:40.494529921+08:00 33
x-bdcdn-cache-status: TCP_HIT
x-length: 407956
x-powered-by: ImageX
x-response-date: Sun, 08 Jan 2023 15:41:40 GMT
x-tt-logid: 2023010815414052B9E5F3A4CB6A4EDC5D
via: n204-100-030, cache5.l2de2[0,0,206-0,H], cache3.l2de2[1,0], cache3.l2de2[1,0], cache7.se1[0,0,200-0,H], cache7.se1[1,0]
x-request-ip: fdbd:dc01:29:602::101
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 01b61bbfa40a11236b563acf66ff2ee034432be024f351fe7e1e881a6098a88f2b75408e371f48f28e5e7153b28f72584e7ed216301de0876dd92bcbf16cab5968c5e65654aaab6e4b583b9a93c3f9566c48906cbb6f9ed6beb42729b58d2578e3
x-response-lb: image
ali-swift-global-savetime: 1673190413
age: 2299036
x-cache: HIT TCP_MEM_HIT dirn:5:182721965
x-swift-savetime: Sun, 08 Jan 2023 15:15:49 GMT
x-swift-cachetime: 31535464
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9b16754894497205021e
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/07-12/12/5par1rko2pa12315par1rko2pa374023.jpg
172.247.77.90200 OK 17 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-12/12/5par1rko2pa12315par1rko2pa374023.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 2750b933fbaef65ee071e703122138e8
e6db278e6dc40554eb79f06f28b6619a9ba87440
0c20cb9bdfb78adbe9a8e5e2a7d9fd3c3e475a05d1d81d1609284fa691128b5c
GET /upload/vod/2022/07-12/12/5par1rko2pa12315par1rko2pa374023.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 16753
Last-Modified: Wed, 09 Nov 2022 11:41:30 GMT
Connection: keep-alive
ETag: "636b91ea-4171"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
kvegg.com/241ffcf0a5007067dad148a90c317e01.gif
172.83.155.45200 OK 134 kB URL HTTP/2 kvegg.com/241ffcf0a5007067dad148a90c317e01.gif
IP 172.83.155.45:0
ASN #201106 Spartan Host Ltd
File type GIF image data, version 89a, 150 x 150\012- data
Size 134 kB (133613 bytes)
Hash e57b5f97083fad6c1d7b17a59a1a2a66
d8340909630bba8ec702df6647b63ca2451c3b43
b4237c21b35605809bb572e991c599d850f2bff1ce00f9734dee99a0de56044e
GET /241ffcf0a5007067dad148a90c317e01.gif HTTP/1.1
Host: kvegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:09 GMT
content-type: image/gif
content-length: 133613
last-modified: Sat, 04 Feb 2023 02:05:52 GMT
etag: "63ddbd80-209ed"
expires: Sat, 04 Feb 2023 17:44:09 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 10637
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gUR5q5YNsltbxe82RWqpZPZDNNRgIml5sM7UnhFVmAiw2SLR52axnqClow2p64GXqDNeCNYvc5ULF9Wkt%2BMqpZBSzSxxgrN90K97Zr1P3Q2BZYiKq5obuiosuX8x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 7940e0741a46c62c-SEA
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/08-17/12/tzfusok0t4b1243tzfusok0t4b3717633.jpg
172.247.77.90200 OK 5.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-17/12/tzfusok0t4b1243tzfusok0t4b3717633.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 700afa63d112e313d21a5cedc756f553
eeafd32db2d486bd36cd849a6b436f787edbab9e
090b7cce5cc973155b32eef7880d7beccf9ea3fa9b1f31b54163f4140fd1ee39
GET /upload/vod/2022/08-17/12/tzfusok0t4b1243tzfusok0t4b3717633.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 5011
Last-Modified: Wed, 09 Nov 2022 11:40:55 GMT
Connection: keep-alive
ETag: "636b91c7-1393"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.trust-provider.cn/
47.246.44.205200 OK 599 B IP 47.246.44.205:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash be64ae331ee1b32ba2a64c5bc93b45a1
259a0566695fba8ad1e5af228da4ff3f8ce7605f
8dda2d27e82e1efd36936b0740557065e941b532e8cabbacc6b3041663fdbd1f
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Sat, 04 Feb 2023 05:34:31 GMT
last-modified: Wed, 01 Feb 2023 20:07:08 GMT
expires: Wed, 08 Feb 2023 20:07:07 GMT
etag: "259a0566695fba8ad1e5af228da4ff3f8ce7605f"
cache-control: max-age=596691,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 794109a88c9d9116-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1675488871
via: cache25.l2de2[0,0,304-0,H], cache21.l2de2[3,0], cache3.se1[0,0,200-0,H], cache5.se1[3,0], cache1.se1[5,0]
age: 578
x-cache: HIT TCP_MEM_HIT dirn:2:172825403
x-swift-savetime: Sat, 04 Feb 2023 05:35:09 GMT
x-swift-cachetime: 1762
timing-allow-origin: *, *
eagleid: 2ff62c9516754894498244627e, 2ff62c9516754894498244627e
dg.xjssjc.com/sc/2432?n=ksaxyuuw
113.1.0.117200 OK 9.5 kB URL HTTP/1.1 dg.xjssjc.com/sc/2432?n=ksaxyuuw
IP 113.1.0.117:0
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with very long lines (9451), with no line terminators
Hash 0fa811c0933a3837c8644c226ba26bf3
ee5254c845053c72326b447c6c38256840a4565e
3705b89d921fa57bc4584ccd1cbec45ed6bacc43ff7a35f31719e0d3b3d1b63c
GET /sc/2432?n=ksaxyuuw HTTP/1.1
Host: dg.xjssjc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 03 Feb 2023 20:48:38 GMT
Content-Type: text/javascript; charset=utf-8
X-Powered-By: PHP/5.6.31
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Origin: *
Pragma: max-age=1800
Cache-Control: max-age=1800
Age: 30063
Content-Length: 9451
Accept-Ranges: bytes
X-NWS-LOG-UUID: 1644691619074037675
Connection: keep-alive
X-Cache-Lookup: Cache Hit
static.qwahk.com/960x60.gif
38.6.225.4200 OK 477 kB URL HTTP/1.1 static.qwahk.com/960x60.gif
IP 38.6.225.4:0
File type GIF image data, version 89a, 960 x 60\012- data
Size 477 kB (477289 bytes)
Hash 760cc21f91ee02e848650627ffa47ae2
22df8e62d12977ffd032aba17e5fd7632032633f
2b36a60cb734e5ebcaa9ad4d93f914157e563da89c4e08231bd02b72678875bd
GET /960x60.gif HTTP/1.1
Host: static.qwahk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Methods: *
Access-Control-Allow-Orign: *
Content-Length: 477289
Content-Type: image/gif;charset=UTF-8
Date: Thu, 02 Feb 2023 16:13:44 GMT
ETag: "1675354424"
Last-Modified: Thu, 02 Feb 2023 16:13:44 GMT
Server: PWS/8.3.1.0.8
Via: 1.1 anxun31:15 (W)
X-Cache: HIT, server, memory
X-Px: ms anxun31000(origin)
X-Reqid: 201921416722818020230203001344F3pEg6tnsampled
X-Ws-Request-Id: 63dbe138_PS-000-018Gq36_20263-12059
fmlb.netlbtu.com/upload/vod/2022/08-29/09/1bcs1dvcfyr09531bcs1dvcfyr0622323.jpg
172.247.77.90200 OK 8.4 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-29/09/1bcs1dvcfyr09531bcs1dvcfyr0622323.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash cc844ee0e056eab7ce91a6b53ac16e20
30ef0e176c5308a0be1e157fb6700aad8edda9a2
b2d96f6bf1634daec7ce83753094a05ee7bffa935aea340fd94438fd64c6d966
GET /upload/vod/2022/08-29/09/1bcs1dvcfyr09531bcs1dvcfyr0622323.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 8425
Last-Modified: Wed, 09 Nov 2022 11:41:53 GMT
Connection: keep-alive
ETag: "636b9201-20e9"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-18/12/xwb4mnh0s541254xwb4mnh0s540917977.jpg
172.247.77.90200 OK 11 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-18/12/xwb4mnh0s541254xwb4mnh0s540917977.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash b47b87ddd401677b017c4635423a9c34
0a5a4300d7f336676a2d90ff06fbae9fce71b78f
08e56e3d46eb7eb8c39ed564b7fdd3ff6b270ecd870b4d36b2a18a4e66aa9865
GET /upload/vod/2022/08-18/12/xwb4mnh0s541254xwb4mnh0s540917977.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 11122
Last-Modified: Wed, 09 Nov 2022 11:44:54 GMT
Connection: keep-alive
ETag: "636b92b6-2b72"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-07/11/ytgaghy3m5p1116ytgaghy3m5p371747.jpg
172.247.77.90200 OK 12 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-07/11/ytgaghy3m5p1116ytgaghy3m5p371747.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 67f5f4a705979a6ba0a809cc05c7a328
4cb45a963bd51cc1b34edeed5162e15b618ef757
cdc42ba792e37df626207f5408fab12d90475ff8c337b4384ce767914228f0e1
GET /upload/vod/2022/07-07/11/ytgaghy3m5p1116ytgaghy3m5p371747.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 12179
Last-Modified: Wed, 09 Nov 2022 11:40:35 GMT
Connection: keep-alive
ETag: "636b91b3-2f93"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/05-05/09/qurekeqt1o30929qurekeqt1o309623.jpg
172.247.77.90200 OK 6.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/05-05/09/qurekeqt1o30929qurekeqt1o309623.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 4482122229cd5bdf545ed978329e3532
aca556508218ab9cc42dfe216ad4805acc6063eb
93047eb9b12a263b3537ee7b032faf2a8343157bb7a03676d7796170fa612588
GET /upload/vod/2022/05-05/09/qurekeqt1o30929qurekeqt1o309623.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 5952
Last-Modified: Wed, 09 Nov 2022 11:41:12 GMT
Connection: keep-alive
ETag: "636b91d8-1740"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-29/11/j0ynhpgnuo01133j0ynhpgnuo04910551.jpg
172.247.77.90200 OK 7.3 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-29/11/j0ynhpgnuo01133j0ynhpgnuo04910551.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 206a2a398db3066646f92cecbec7d881
3fe055ad59401d81f44308ea95fd4ef81dd29d71
189a58f618ac1feaad365875cd193d6b59081209cb87943cea239791819cf531
GET /upload/vod/2022/07-29/11/j0ynhpgnuo01133j0ynhpgnuo04910551.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 7339
Last-Modified: Wed, 09 Nov 2022 11:44:22 GMT
Connection: keep-alive
ETag: "636b9296-1cab"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/05-21/15/3xioce4pcqk15503xioce4pcqk572351.jpg
172.247.77.90200 OK 12 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/05-21/15/3xioce4pcqk15503xioce4pcqk572351.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 8b9e28d096b1882abcee29cfca0da0a7
95ad8be8285c8b379005563a6a667a5e822bb9d7
72d3c1c441ab6fc3cc6386408dfd90e55eb4d0a7997df47e81b3e0211be20e9d
GET /upload/vod/2022/05-21/15/3xioce4pcqk15503xioce4pcqk572351.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 11983
Last-Modified: Wed, 09 Nov 2022 11:41:19 GMT
Connection: keep-alive
ETag: "636b91df-2ecf"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
kg.awyyzx.com/sc/1600?n=cvbwfaqm
119.167.147.248200 OK 9.7 kB URL HTTP/1.1 kg.awyyzx.com/sc/1600?n=cvbwfaqm
IP 119.167.147.248:0
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with very long lines (9689), with no line terminators
Hash 3d956968e0adc8229341a5ae63ed1dd9
0167b17a483d4fc8daf6d46dd8607bba72a34f91
a2bcb9387636491627f6cba50a67825e4732c35da58979f19adba919ac651f68
GET /sc/1600?n=cvbwfaqm HTTP/1.1
Host: kg.awyyzx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 03 Feb 2023 20:49:24 GMT
Content-Type: text/javascript; charset=utf-8
X-Powered-By: PHP/5.6.31
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Origin: *
Pragma: max-age=1800
Accept-Ranges: bytes
Cache-Control: max-age=1800
Age: 1800
Content-Length: 9689
X-NWS-LOG-UUID: 11358971201974922056
Connection: keep-alive
X-Cache-Lookup: Cache Hit, Hit From Inner Cluster
fmlb.netlbtu.com/upload/vod/2022/07-15/11/ge2jg14rnnt1159ge2jg14rnnt515193.jpg
172.247.77.90200 OK 9.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-15/11/ge2jg14rnnt1159ge2jg14rnnt515193.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash c9351c78579c43735ec9d340796e1dfa
835562b6d7ba45e986c9c87274b849a465700df0
293597f0fd60905e202d4ffb0b6c316266095eb3a03b3add0f6a9e33dd713063
GET /upload/vod/2022/07-15/11/ge2jg14rnnt1159ge2jg14rnnt515193.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 9239
Last-Modified: Wed, 09 Nov 2022 11:40:55 GMT
Connection: keep-alive
ETag: "636b91c7-2417"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-31/12/fmybl3ci5on1257fmybl3ci5on3411493.jpg
172.247.77.90200 OK 8.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-31/12/fmybl3ci5on1257fmybl3ci5on3411493.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash d361f80b71c670ffe7b831cd8cf91401
9b10c740ddce58b38d3bd6eadfc315051083537f
c07a13b2440e011d7414b16f7775a8a689be5b646ccbcd8bef8d4429c531108f
GET /upload/vod/2022/07-31/12/fmybl3ci5on1257fmybl3ci5on3411493.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 8194
Last-Modified: Wed, 09 Nov 2022 11:41:14 GMT
Connection: keep-alive
ETag: "636b91da-2002"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-01/12/ohgkefoiyoh1239ohgkefoiyoh5011855.jpg
172.247.77.90200 OK 7.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-01/12/ohgkefoiyoh1239ohgkefoiyoh5011855.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 08e7f875585f96a5d7f78ca7a8447646
3f7dcbcc44e1a6dba03c6803a4a66eaa8a8072d1
d0913b1c06d83b3a8a37ca7462c6c0beecdf588e8de9f9e004be5d168a6bb0df
GET /upload/vod/2022/08-01/12/ohgkefoiyoh1239ohgkefoiyoh5011855.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 7244
Last-Modified: Wed, 09 Nov 2022 11:41:36 GMT
Connection: keep-alive
ETag: "636b91f0-1c4c"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-12/12/qsydbccuxld1231qsydbccuxld364019.jpg
172.247.77.90200 OK 8.7 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-12/12/qsydbccuxld1231qsydbccuxld364019.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 9a20858701e4104dba0cb75460403c79
8b5e8a18e8a89a0bea0b049be056cfc1a8ee49bb
8ff0f3ff327fc4c3f518bd7b18db9a1138818232d437e53fa6fdee81040728ca
GET /upload/vod/2022/07-12/12/qsydbccuxld1231qsydbccuxld364019.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:04 GMT
Content-Type: image/jpeg
Content-Length: 8653
Last-Modified: Wed, 09 Nov 2022 11:42:04 GMT
Connection: keep-alive
ETag: "636b920c-21cd"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-28/11/gaqwm5hcyrv1136gaqwm5hcyrv1810357.jpg
172.247.77.90200 OK 8.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-28/11/gaqwm5hcyrv1136gaqwm5hcyrv1810357.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 28x45, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash ff79a8fddafde600682ab0a1e3cf1d55
d210c47768b5810b7ded70374786d3e66b85f9d6
d6852b689273545b762d42ce5e7bfb19ed1cff76c0835e50a8aae5cdc54a817f
GET /upload/vod/2022/07-28/11/gaqwm5hcyrv1136gaqwm5hcyrv1810357.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 7970
Last-Modified: Wed, 09 Nov 2022 08:21:08 GMT
Connection: keep-alive
ETag: "636b62f4-1f22"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-24/11/dhmikndwek51131dhmikndwek54420065.jpg
172.247.77.90200 OK 9.8 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-24/11/dhmikndwek51131dhmikndwek54420065.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 107x80, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ea71c7164fa83a4ed6be0bd12340917e
6dc59cc58544f23678b92ea261ce3504bf0afec5
d09e7df3b5e5a18d6af7203474151f3767361e0498d1bc421bc01e80fc5a7c2c
GET /upload/vod/2022/08-24/11/dhmikndwek51131dhmikndwek54420065.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 9826
Last-Modified: Wed, 09 Nov 2022 11:44:51 GMT
Connection: keep-alive
ETag: "636b92b3-2662"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-15/12/dhscxfgfv051201dhscxfgfv05125227.jpg
172.247.77.90200 OK 13 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-15/12/dhscxfgfv051201dhscxfgfv05125227.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 95cf1a04810c0dfab46b10da8e6e946d
315b4303e2481b3d50e053e163b57de74fb75b9a
e517b779516b86b6b7c21af3cbd3e391b8f82dbd2b6a3d58ef82650f81ace9db
GET /upload/vod/2022/07-15/12/dhscxfgfv051201dhscxfgfv05125227.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 13248
Last-Modified: Wed, 09 Nov 2022 11:41:40 GMT
Connection: keep-alive
ETag: "636b91f4-33c0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/07-13/11/q3w2gy2zalp1147q3w2gy2zalp574089.jpg
172.247.77.90200 OK 9.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/07-13/11/q3w2gy2zalp1147q3w2gy2zalp574089.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash dc4aa95b83398bff9eda2cb074602d1c
5915d6a012f224676eded20102cab7bfd77162d4
6b742aee86366503b53f84878be3c97cfe3c5e9be4f9ad026098565e8fd15986
GET /upload/vod/2022/07-13/11/q3w2gy2zalp1147q3w2gy2zalp574089.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 9579
Last-Modified: Wed, 09 Nov 2022 11:42:08 GMT
Connection: keep-alive
ETag: "636b9210-256b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-30/12/uymi3wsjkmj1247uymi3wsjkmj4522421.jpg
172.247.77.90200 OK 10 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-30/12/uymi3wsjkmj1247uymi3wsjkmj4522421.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 0d737e3e63857d6f35313ddf03f8215b
3da3570eb24ae16ab63b52b193e2279a1b134971
d404a367fa51db397aa8055773fe0a7c32538fe1a918932126a640a78913ca40
GET /upload/vod/2022/08-30/12/uymi3wsjkmj1247uymi3wsjkmj4522421.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 10096
Last-Modified: Wed, 09 Nov 2022 11:41:38 GMT
Connection: keep-alive
ETag: "636b91f2-2770"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-22/12/5ii4atyyjqn12215ii4atyyjqn2019527.jpg
172.247.77.90200 OK 14 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-22/12/5ii4atyyjqn12215ii4atyyjqn2019527.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 00b806c4949be0d92998026be2954b09
557973e107e6efe0b7e0d917c114dd962a698212
68f73377dcecd40d21e16104ffcb28d9ad6ea48ee07ab711564972e080ef3bb9
GET /upload/vod/2022/08-22/12/5ii4atyyjqn12215ii4atyyjqn2019527.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 13626
Last-Modified: Wed, 09 Nov 2022 11:42:00 GMT
Connection: keep-alive
ETag: "636b9208-353a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/06-26/05/llnrv4cgtlr0524llnrv4cgtlr135578.jpg
172.247.77.90200 OK 7.0 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/06-26/05/llnrv4cgtlr0524llnrv4cgtlr135578.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1281x956, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 8d5ca57ca494a80e474d4014b2699930
b5a5e3695071d0c831e9e12e49441e4960b2cb6f
b177b20ab088cc6d52be9e88356b2c47871b3a0abf1e8fc29143dadeca7b171c
GET /upload/vod/2022/06-26/05/llnrv4cgtlr0524llnrv4cgtlr135578.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 6982
Last-Modified: Wed, 09 Nov 2022 11:44:15 GMT
Connection: keep-alive
ETag: "636b928f-1b46"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
vns86.oss-cn-hongkong.aliyuncs.com/sstu/st.gif
47.75.19.4200 OK 300 kB URL HTTP/1.1 vns86.oss-cn-hongkong.aliyuncs.com/sstu/st.gif
IP 47.75.19.4:0
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 300 kB (299985 bytes)
Hash 5d7118c19a9bd8ff78641a72cb481144
5cf8f1709330929db0f38141e5e18518a2ddcb12
ebd1f7b5795943f0b6e779047bfd82e03c020056e9ae9f4a4f8b400d3835cd85
GET /sstu/st.gif HTTP/1.1
Host: vns86.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 04 Feb 2023 05:44:08 GMT
Content-Type: image/gif
Content-Length: 299985
Connection: keep-alive
x-oss-request-id: 63DDF0A822AAFC39314F0071
Accept-Ranges: bytes
ETag: "5D7118C19A9BD8FF78641A72CB481144"
Last-Modified: Tue, 10 Jan 2023 09:27:44 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5878332609690177558
x-oss-storage-class: Standard
x-oss-version-id: CAEQRhiBgIDwy4PsrBgiIGVlOTJjOGM4NTBkZDQ5NTBhMzAzYjhiYTJjYjQ0NTI5
Content-MD5: XXEYwZqb2P94ZBpyy0gRRA==
x-oss-server-time: 2
fmlb.netlbtu.com/upload/vod/2022/05-21/15/uo3xdaeweto1551uo3xdaeweto522421.jpg
172.247.77.90200 OK 21 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/05-21/15/uo3xdaeweto1551uo3xdaeweto522421.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 124e4c2cbf25b616a2b6855de803df48
d947028dd34bcf3bc4fadf72c123a1442a4f30e2
f4bcde04216640a49e153e0c63bf3e2634eb98e6cab046301236fffe802570fa
GET /upload/vod/2022/05-21/15/uo3xdaeweto1551uo3xdaeweto522421.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 20752
Last-Modified: Wed, 09 Nov 2022 11:40:33 GMT
Connection: keep-alive
ETag: "636b91b1-5110"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-26/12/vpwpltwrzqi1252vpwpltwrzqi2421099.jpg
172.247.77.90200 OK 7.6 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-26/12/vpwpltwrzqi1252vpwpltwrzqi2421099.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 578ee305b25f565274bd8191929206de
2ff385d3f71532edf78220005584adb3a39c0f5a
09c89ee90653d33270a098e229e878e77277333c70a2cca287442318b4d87198
GET /upload/vod/2022/08-26/12/vpwpltwrzqi1252vpwpltwrzqi2421099.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 7632
Last-Modified: Wed, 09 Nov 2022 11:42:16 GMT
Connection: keep-alive
ETag: "636b9218-1dd0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-13/12/ctbmfd2wpzw1232ctbmfd2wpzw0716099.jpg
172.247.77.90200 OK 7.1 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-13/12/ctbmfd2wpzw1232ctbmfd2wpzw0716099.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 21668be9091facd0dd7d785e6bfcbfd4
5aa229ce40ba5d21ca0a860cb93161ae6a4baee3
3ef80576e197ae59040d704b2c4023a7f75f177c9074a26d857cf0dd190b3a0e
GET /upload/vod/2022/08-13/12/ctbmfd2wpzw1232ctbmfd2wpzw0716099.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 7050
Last-Modified: Wed, 09 Nov 2022 11:42:46 GMT
Connection: keep-alive
ETag: "636b9236-1b8a"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/06-22/12/kwynnhyipwt1201kwynnhyipwt475162.jpg
172.247.77.90200 OK 8.2 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/06-22/12/kwynnhyipwt1201kwynnhyipwt475162.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash d274f4fc1b6fda19d83838664928602b
17eb866336318f3f557da833f2695f0e800ff87a
3bfe33cd203c4839cb0c6babb8b0b23ce3d20c7c99dc51c7792c2b2e2cd5c04a
GET /upload/vod/2022/06-22/12/kwynnhyipwt1201kwynnhyipwt475162.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 8232
Last-Modified: Wed, 09 Nov 2022 11:41:13 GMT
Connection: keep-alive
ETag: "636b91d9-2028"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/08-03/12/rthkpjkinru1243rthkpjkinru5112421.jpg
172.247.77.90200 OK 10 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/08-03/12/rthkpjkinru1243rthkpjkinru5112421.jpg
IP 172.247.77.90:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash bdf22d2411f23ea60c5c34641a85f1cc
61e95011a33a49eaf13ab9c2caee2c0bc484794f
bf51799be038d879c3b65da82d3239129ff905c4082108f914145671aad69414
GET /upload/vod/2022/08-03/12/rthkpjkinru1243rthkpjkinru5112421.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 10001
Last-Modified: Wed, 09 Nov 2022 11:42:07 GMT
Connection: keep-alive
ETag: "636b920f-2711"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
fmlb.netlbtu.com/upload/vod/2022/05-21/15/du1ru03fbjv1551du1ru03fbjv432399.jpg
172.247.77.90200 OK 13 kB URL HTTP/1.1 fmlb.netlbtu.com/upload/vod/2022/05-21/15/du1ru03fbjv1551du1ru03fbjv432399.jpg
IP 172.247.77.90:0
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash d1d1d031b1c1dd3902579e45fc01bd37
72009a6ecc77245781a3c2d07cca19defbd555e2
9200f432a0f514a7b966a8b71492155ff699e60277c5d1d07a700ade8050848b
GET /upload/vod/2022/05-21/15/du1ru03fbjv1551du1ru03fbjv432399.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sat, 04 Feb 2023 05:45:05 GMT
Content-Type: image/jpeg
Content-Length: 13094
Last-Modified: Wed, 09 Nov 2022 11:42:50 GMT
Connection: keep-alive
ETag: "636b923a-3326"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
sz88.oss-cn-shenzhen.aliyuncs.com/js960x80%20.gif
120.77.166.72200 OK 394 kB URL HTTP/1.1 sz88.oss-cn-shenzhen.aliyuncs.com/js960x80%20.gif
IP 120.77.166.72:0
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 394 kB (394237 bytes)
Hash 03123a07739f511b3306d13415cd72b1
6dbf38767657a15b922e4d153f46fe4829e012cb
72b3fa6461c39eace9c154e56b66b437457ecde50ae7c615cd923e442d058cdd
GET /js960x80%20.gif HTTP/1.1
Host: sz88.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: image/gif
Content-Length: 394237
Connection: keep-alive
x-oss-request-id: 63DDF0A990531238339CEDDE
Accept-Ranges: bytes
ETag: "03123A07739F511B3306D13415CD72B1"
Last-Modified: Tue, 20 Dec 2022 14:44:22 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13376170837400656090
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: AxI6B3OfURszBtE0Fc1ysQ==
x-oss-server-time: 1
kjimg10.360buyimg.com/ott/jfs/t1/48391/16/19388/893726/6380d3c5E0d000912/3cef13072ce017c1.gif
121.226.246.3200 OK 0 B URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/48391/16/19388/893726/6380d3c5E0d000912/3cef13072ce017c1.gif
IP 121.226.246.3:0
GET /ott/jfs/t1/48391/16/19388/893726/6380d3c5E0d000912/3cef13072ce017c1.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:09 GMT
content-type: image/gif
content-length: 893726
cache-control: max-age=15552000
expires: Mon, 31 Jul 2023 01:41:38 GMT
last-modified: Fri, 25 Nov 2022 14:40:05 GMT
age: 273751
via: http/1.1 ORI-CLOUD-HUZ-MIX-29 (jcs [cHs f ]), http/1.1 SQ-CT-1-MIX-13 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1675215698456-0-0-0-21-21;200;200-1675355768527-0-0-0-5-5;200-1675489449378-0-0-0-1-1
X-Firefox-Spdy: h2
kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif
121.226.246.3200 OK 0 B URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif
IP 121.226.246.3:0
GET /ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:09 GMT
content-type: image/gif
content-length: 1197751
cache-control: max-age=15552000
expires: Sun, 30 Jul 2023 13:46:27 GMT
last-modified: Fri, 25 Nov 2022 14:36:03 GMT
age: 316663
via: http/1.1 ORI-CLOUD-HUZ-MIX-22 (jcs [cRs f ]), http/1.1 SQ-CT-1-MIX-13 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1675172786894-0-0-0-430-430;200;200-1675182152059-0-0-0-1-1;200-1675489449384-0-0-0-1-1
X-Firefox-Spdy: h2
link.imgapp.top/images/63ba73b1a92cd2097e833f9c.gif
3.36.126.81302 Found 0 B URL HTTP/2 link.imgapp.top/images/63ba73b1a92cd2097e833f9c.gif
IP 3.36.126.81:0
GET /images/63ba73b1a92cd2097e833f9c.gif HTTP/1.1
Host: link.imgapp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
cache-control: max-age=3600
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/e6cf00521c224de2bd31a77950b73158
X-Firefox-Spdy: h2
kjimg10.360buyimg.com/ott/jfs/t1/46182/9/21860/1411145/63819a6eEcb8ec547/ae47a05d2165a957.gif
121.226.246.3200 OK 0 B URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/46182/9/21860/1411145/63819a6eEcb8ec547/ae47a05d2165a957.gif
IP 121.226.246.3:0
GET /ott/jfs/t1/46182/9/21860/1411145/63819a6eEcb8ec547/ae47a05d2165a957.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:44:09 GMT
content-type: image/gif
content-length: 1411145
cache-control: max-age=15552000
expires: Fri, 28 Jul 2023 15:35:37 GMT
last-modified: Sat, 26 Nov 2022 04:47:42 GMT
age: 482912
via: http/1.1 ORI-CLOUD-HUZ-MIX-15 (jcs [cRs f ]), http/1.1 SQ-CT-1-MIX-13 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1675006537496-0-0-1-92-92;200;200-1675137336071-0-0-0-0-0;200-1675489449395-0-0-0-0-0
X-Firefox-Spdy: h2
683tuchuang.com/960x120.gif
183.255.106.34200 OK 0 B URL HTTP/1.1 683tuchuang.com/960x120.gif
IP 183.255.106.34:0
ASN #9808 China Mobile Communications Group Co., Ltd.
GET /960x120.gif HTTP/1.1
Host: 683tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.cn-ger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 05:44:09 GMT
Content-Type: image/gif
Content-Length: 223983
Connection: keep-alive
Last-Modified: Thu, 15 Dec 2022 15:47:40 GMT
ETag: "639b419c-36aef"
Expires: Wed, 01 Mar 2023 06:35:38 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes