Overview

URLhttp://qingya168.com/fsbl.htm
IP124.172.147.2
ASNAS4134 Chinanet
Location China
Report completed2012-11-06 21:52:42 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 21:52:05 urlQuery Client 184.105.178.841ET CNC Zeus/Spyeye/Palevo Tracker Reported CnC Server (group 5)
2012-11-06 21:52:06 124.172.147.2 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-06 21:52:06 124.172.147.2 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-06 21:52:07 124.172.147.2 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 124.172.147.2

Date Alerts / IDS URL IP
2013-02-11 14:10:030 / 4http://qingya168.com/iso.htm124.172.147.2
2013-01-30 12:52:130 / 1http://qingya168.com/stores1.htm124.172.147.2
2013-01-30 12:52:080 / 4http://qingya168.com/stores5.htm124.172.147.2
2012-11-07 23:04:570 / 5http://qingya168.com/stores5.htm124.172.147.2
2012-11-07 21:57:190 / 1http://qingya168.com/stores1.htm124.172.147.2
2012-11-07 14:10:040 / 4http://qingya168.com/iso.htm124.172.147.2

Last 6 reports on ASN: AS4134 Chinanet

Date Alerts / IDS URL IP
2013-02-19 05:21:570 / 1http://weiqi.sports.tom.com/newjava/2000d101.jar122.228.228.176
2013-02-19 05:15:170 / 1http://www.xmjianan.cn/gb/images/pop/AnFade.jar218.85.139.189
2013-02-19 05:14:220 / 1http://www.xmjianan.cn218.85.139.189
2013-02-19 05:07:160 / 4http://news.missevan.cn/58.215.240.77
2013-02-19 05:02:430 / 4http://www.moedao.com/117.21.191.69
2013-02-19 04:27:350 / 2http://xiazai.3lsoft.com/0213/setup_272.exe121.63.160.40

Last 6 reports on domain: qingya168.com

Date Alerts / IDS URL IP
2013-02-11 14:10:030 / 4http://qingya168.com/iso.htm124.172.147.2
2013-01-30 12:52:130 / 1http://qingya168.com/stores1.htm124.172.147.2
2013-01-30 12:52:080 / 4http://qingya168.com/stores5.htm124.172.147.2
2012-11-07 23:04:570 / 5http://qingya168.com/stores5.htm124.172.147.2
2012-11-07 21:57:190 / 1http://qingya168.com/stores1.htm124.172.147.2
2012-11-07 14:10:040 / 4http://qingya168.com/iso.htm124.172.147.2



JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (5)

#1 JavaScript::Write (size: 9, repeated: 1) 

</object>

#2 JavaScript::Write (size: 183, repeated: 1) 

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0" width="596" height="169">

#3 JavaScript::Write (size: 428, repeated: 1) 

<param name="FlashVars" value="pics=img/b3.jpg|img/b1.jpg|img/b2.jpg|img/b4.jpg|img/b5.jpg|img/b6.jpg&links=http%3A//www.qingya168.comimg/b3.jpg|http%3A//www.qingya168.comimg/b1.jpg|http%3A//www.qingya168.comimg/b2.jpg|http%3A//www.qingya168.comimg/b4.jpg|http%3A//www.qingya168.comimg/b5.jpg|img/b6.jpg&texts=,ÜJ01|,ÜJ02|,ÜJ03|,ÜJ04|,ÜJ05|img/b6.jpg&borderwidth=596&borderheight=169&textheight=0">

#4 JavaScript::Write (size: 163, repeated: 1) 

<param name="allowScriptAccess" value="sameDomain"><param name="movie" value="focus1.swf"><param name="quality" value="high"><param name="bgcolor" value="#F0F0F0">

#5 JavaScript::Write (size: 66, repeated: 1) 

<param name="menu" value="false"><param name=wmode value="opaque">


HTTP Transactions (22)


Request Response 
GET /fsbl.htm HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 20:52:03 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Sat, 27 Feb 2010 07:51:10 GMT
Etag: &quot;6ed0de-2edc-477f1780&quot;
Accept-Ranges: bytes
Content-Length: 11996
Connection: close
GET /mystyle.css HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Tue, 06 Nov 2012 20:52:04 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 14:37:46 GMT
Etag: &quot;6ed2e5-4fc-165cc280&quot;
Accept-Ranges: bytes
Content-Length: 1276
Connection: close
GET /img/fsbl_profile.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:04 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:56:28 GMT
Etag: &quot;71cfd2-1a24-2fd0c300&quot;
Accept-Ranges: bytes
Content-Length: 6692
Connection: close
GET /img/menubar.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/mystyle.css
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:05 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 16:01:22 GMT
Etag: &quot;71d00c-106-4156d880&quot;
Accept-Ranges: bytes
Content-Length: 262
Connection: close
GET /img/fqbl_pic1.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:04 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:56:06 GMT
Etag: &quot;71cfcd-5f93-2e811180&quot;
Accept-Ranges: bytes
Content-Length: 24467
Connection: close
GET /img/fqbl_pic2.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:04 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:56:12 GMT
Etag: &quot;71cfce-7542-2edc9f00&quot;
Accept-Ranges: bytes
Content-Length: 30018
Connection: close
GET /index/mm.js HTTP/1.1

Host: mm.aa88567.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 403 Forbidden

Content-Type: text/html

Server: nginx/1.0.14
Date: Tue, 06 Nov 2012 20:52:06 GMT
Content-Length: 169
Connection: keep-alive
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Tue, 06 Nov 2012 20:52:06 GMT
Connection: keep-alive
GET /lig.swf HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Date: Tue, 06 Nov 2012 20:52:06 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 14:26:03 GMT
Etag: &quot;6ed2d3-1187-ec75d4c0&quot;
Accept-Ranges: bytes
Content-Length: 4487
Connection: close
GET /img/banner.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/mystyle.css
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:05 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:53:16 GMT
Etag: &quot;71cfaa-f112-245f1300&quot;
Accept-Ranges: bytes
Content-Length: 61714
Connection: close
GET /banner_flash.swf HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Date: Tue, 06 Nov 2012 20:52:06 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 14:05:53 GMT
Etag: &quot;6ed2be-3fc7-a456b240&quot;
Accept-Ranges: bytes
Content-Length: 16327
Connection: close
GET /img/yeji_btm.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:08 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 16:02:33 GMT
Etag: &quot;71d033-707-45923840&quot;
Accept-Ranges: bytes
Content-Length: 1799
Connection: close
GET /img/fqbl_pic6.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:06 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:56:27 GMT
Etag: &quot;71cfd1-774b-2fc180c0&quot;
Accept-Ranges: bytes
Content-Length: 30539
Connection: close
GET /img/fqbl_pic5.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:07 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:56:22 GMT
Etag: &quot;71cfd0-7fed-2f753580&quot;
Accept-Ranges: bytes
Content-Length: 32749
Connection: close
GET /img/fqbl_pic4.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:07 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:56:16 GMT
Etag: &quot;71cfcf-814e-2f19a800&quot;
Accept-Ranges: bytes
Content-Length: 33102
Connection: close
GET /img/2.jpg HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 20:52:07 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 16:02:38 GMT
Etag: &quot;71d036-9092-45de8380&quot;
Accept-Ranges: bytes
Content-Length: 37010
Connection: close
GET /img/yeji_bg.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:09 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 16:02:29 GMT
Etag: &quot;71d032-d3-45552f40&quot;
Accept-Ranges: bytes
Content-Length: 211
Connection: close
GET /img/index_pic/yeji_pic023.gif HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 20:52:08 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 15:48:16 GMT
Etag: &quot;71cde0-616e-127d7000&quot;
Accept-Ranges: bytes
Content-Length: 24942
Connection: close
GET /img/7.jpg HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 20:52:07 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 16:02:42 GMT
Etag: &quot;71d037-122e5-461b8c80&quot;
Accept-Ranges: bytes
Content-Length: 74469
Connection: close
GET /Twins.swf HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://qingya168.com/fsbl.htm
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Date: Tue, 06 Nov 2012 20:52:07 GMT
Server: Apache/2.0.52 (Red Hat)
Last-Modified: Thu, 21 May 2009 14:37:45 GMT
Etag: &quot;6ed2e4-11416-164d8040&quot;
Accept-Ranges: bytes
Content-Length: 70678
Connection: close
GET /favicon.ico HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 20:52:11 GMT
Server: Apache/2.0.52 (Red Hat)
Content-Length: 209
Connection: close
GET /favicon.ico HTTP/1.1

Host: qingya168.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 20:52:14 GMT
Server: Apache/2.0.52 (Red Hat)
Content-Length: 209
Connection: close