Overview

URLhttp://www.567kino.com/play.asp?id=941
IP121.12.118.168
ASNAS4134 Chinanet
Location China
Report completed2012-11-06 23:37:26 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 23:36:59 202.108.23.74 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-06 23:36:56 123.125.115.75 urlQuery Client1BROWSER-IE Microsoft Internet Explorer userdata behavior memory corruption attempt


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 121.12.118.168

Date Alerts / IDS URL IP
2012-11-15 02:04:110 / 2http://567kino.com/play.asp?id=851121.12.118.168
2012-11-14 18:52:030 / 9http://www.567kino.com/play.asp?id=911121.12.118.168
2012-11-07 22:33:260 / 3http://www.567kino.com/play.asp?id=686121.12.118.168
2012-11-07 17:25:480 / 7http://567kino.com/play.asp?id=969121.12.118.168
2012-11-07 10:07:450 / 3http://www.567kino.com/play.asp?id=972121.12.118.168
2012-11-07 10:07:440 / 3http://www.567kino.com/play.asp?id=976121.12.118.168

Last 6 reports on ASN: AS4134 Chinanet

Date Alerts / IDS URL IP
2013-02-21 18:09:390 / 1http://jrsx.jre.net.cn/logos.gif?1d906=605470222.186.222.250
2013-02-21 18:09:380 / 1http://jrsx.jre.net.cn/logos.gif?242d7=889098222.186.222.250
2013-02-21 18:09:370 / 1http://jrsx.jre.net.cn/logos.gif?227d9=706365222.186.222.250
2013-02-21 18:09:310 / 1http://jrsx.jre.net.cn/logos.gif?2500f=454701222.186.222.250
2013-02-21 18:09:230 / 1http://jrsx.jre.net.cn/logos.gif?234c1=722885222.186.222.250
2013-02-21 18:09:220 / 1http://jrsx.jre.net.cn/logos.gif?21aa0=1240992222.186.222.250

Last 6 reports on domain: www.567kino.com

Date Alerts / IDS URL IP
2012-11-14 18:52:030 / 9http://www.567kino.com/play.asp?id=911121.12.118.168
2012-11-07 22:33:260 / 3http://www.567kino.com/play.asp?id=686121.12.118.168
2012-11-07 10:07:450 / 3http://www.567kino.com/play.asp?id=972121.12.118.168
2012-11-07 10:07:440 / 3http://www.567kino.com/play.asp?id=976121.12.118.168
2012-11-07 03:45:270 / 9http://www.567kino.com/play.asp?id=509121.12.118.168
2012-11-07 02:19:440 / 3http://www.567kino.com/play.asp?id=916121.12.118.168



JavaScript

Executed Scripts (20)


Executed Evals (0)


Executed Writes (9)

#1 JavaScript::Write (size: 489, repeated: 1) 

<!doctype html><html><body><script>google_ad_client="ca-pub-0738522940583005";google_ad_height=90;google_ad_slot="6799934811";google_ad_width=728;google_language="zh-CN";google_show_ads_impl=true;google_unique_id=1;google_async_iframe_id="aswift_0";google_ad_unit_key="1867216859";google_start_time=1352241412151;google_expand_experiment="none";google_bpp=32;</script><script src="http://pagead2.googlesyndication.com/pagead/js/r20121031/r20120730/show_ads_impl.js"></script></body></html>

#2 JavaScript::Write (size: 189, repeated: 1) 

<a href='http://www.cnzz.com/stat/website.php?web_id=3494456' target=_blank title='&#31449;&#38271;&#32479;&#35745;'><img border=0 hspace=0 vspace=0 src='http://icon.cnzz.com/pic1.gif'></a>

#3 JavaScript::Write (size: 336, repeated: 1) 

<embed width="120" height="270" src="http://drmcmm.baidu.com/media/id=rHD4P1TkPHm&gp=403&time=nHndnHT1P1TzPs.swf" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" WMode="opaque" allowFullScreen="false" allowScriptAccess="never" allowNetworking="internal" salign="" type="application/x-shockwave-flash" > </embed>

#4 JavaScript::Write (size: 835, repeated: 1) 

<iframe allowtransparency=true frameborder=0 height=90 hspace=0 id=google_ads_frame1 marginheight=0 marginwidth=0 name=google_ads_frame1 scrolling=no src="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-0738522940583005&output=html&h=90&slotname=6799934811&w=728&lmt=1352241406&flash=10.0.45&hl=zh-CN&url=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&dt=1352241412151&bpp=32&shv=r20121031&jsv=r20110914&correlator=1352241412842&frm=20&adk=1867216859&ga_vid=1772944563.1352241413&ga_sid=1352241413&ga_hid=1192091248&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=alpida%20unicode%20system&dfs=14&adx=345&ady=468&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=954&xpc=on1p8LpWKa&p=http%3A//www.567kino.com" style="left:0;position:absolute;top:0" vspace=0 width=728></iframe>

#5 JavaScript::Write (size: 766, repeated: 1) 

<ins style="display:inline-table;border:none;height:90px;margin:0;padding:0;position:relative;visibility:visible;width:728px"><ins id="aswift_0_anchor" style="display:block;border:none;height:90px;margin:0;padding:0;position:relative;visibility:visible;width:728px"><iframe allowtransparency="true" frameborder="0" height="90" hspace="0" marginwidth="0" marginheight="0" onload="var i=this.id,s=window.google_iframe_oncopy,H=s&amp;&amp;s.handlers,h=H&amp;&amp;H[i],w=this.contentWindow,d;try{d=w.document}catch(e){}if(h&amp;&amp;d&amp;&amp;(!d.body||!d.body.firstChild)){if(h.call){setTimeout(h,0)}else if(h.match){w.location.replace(h)}}" scrolling="no" vspace="0" width="728" id=aswift_0 name=aswift_0 style="left:0;position:absolute;top:0;" ></iframe></ins></ins>

#6 JavaScript::Write (size: 86, repeated: 1) 

<script src="http://pagead2.googlesyndication.com/pagead/expansion_embed.js"></script>

#7 JavaScript::Write (size: 126, repeated: 1) 

<script src='http://c.cnzz.com/cnzz_core.php?web_id=3494456&show=pic1&l=none' charset='utf-8' type='text/javascript'></script>

#8 JavaScript::Write (size: 170, repeated: 1) 

<script type="text/javascript" charset="utf-8" src="http://pos.baidu.com/ecom?di=u926728&tm=BAIDU_CPRO_SETJSONADSLOT&fn=BAIDU_CPRO_SETJSONADSLOTFLOAT&baidu_id="></script>

#9 JavaScript::Write (size: 105, repeated: 1) 

<script>google_protectAndRun("ads_core.google_render_ad", google_handleError, google_render_ad);</script>


HTTP Transactions (52)


Request Response 
GET /play.asp?id=941 HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.0 200 OK

Content-Type: text/html; Charset=utf-8

Date: Tue, 06 Nov 2012 22:37:13 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 18131
Set-Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG; path=/
Cache-Control: private
X-Cache: MISS from 121-12-118-168
X-Cache-Lookup: MISS from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /js/UyghurInput_C.js HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: application/x-javascript

Content-Length: 6785
Last-Modified: Sun, 20 May 2012 08:34:40 GMT
Accept-Ranges: bytes
Etag: &quot;5cb128666336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 21:58:05 GMT
Age: 2349
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /pic/kinoqi.css HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: text/css

Content-Length: 31047
Last-Modified: Sun, 20 May 2012 08:34:53 GMT
Accept-Ranges: bytes
Etag: &quot;74ccde6d6336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7377
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /pagead/show_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
If-None-Match: 15032493890200785914
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 11458789474174950078
Date: Tue, 06 Nov 2012 22:01:11 GMT
Expires: Tue, 06 Nov 2012 23:01:11 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5118
X-XSS-Protection: 1; mode=block
Age: 2138
Cache-Control: public, max-age=3600
GET /kinohana.gif HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/gif

Content-Length: 8159
Last-Modified: Sun, 20 May 2012 08:45:37 GMT
Accept-Ranges: bytes
Etag: &quot;c6198ced6436cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7380
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /uptupian/kinoqi_com201122413753338.jpg HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Content-Length: 5457
Last-Modified: Sun, 20 May 2012 08:38:56 GMT
Accept-Ranges: bytes
Etag: &quot;70d09dfe6336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 22:28:35 GMT
Age: 522
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /stat.php?id=3494456&web_id=3494456&show=pic1 HTTP/1.1

Host: s84.cnzz.com
GET /stat.php?id=3494456&amp;web_id=3494456&amp;show=pic1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Tue, 06 Nov 2012 22:36:50 GMT
Server: Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8e-fips-rhel5
Last-Modified: Tue, 06 Nov 2012 22:36:50 GMT
Expires: Wed, 07 Nov 2012 00:06:50 GMT
Content-Length: 6601
Connection: close
GET /logo.gif HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/gif

Content-Length: 3777
Last-Modified: Wed, 22 Aug 2012 15:46:37 GMT
Accept-Ranges: bytes
Etag: &quot;7e95dd507d80cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 21:41:43 GMT
Age: 3332
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /logo.gif HTTP/1.1

Host: www.axkim.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 4676
Last-Modified: Tue, 03 Apr 2012 16:28:36 GMT
Accept-Ranges: bytes
Etag: &quot;6a52dfd1b611cd1:436&quot;
Server: Microsoft-IIS/6.0
Date: Tue, 06 Nov 2012 22:36:43 GMT
GET /logo.gif HTTP/1.1

Host: www.alogli.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 4258
Last-Modified: Sun, 12 Aug 2012 06:15:41 GMT
Accept-Ranges: bytes
Etag: &quot;d18d3fe65178cd1:436&quot;
Server: Microsoft-IIS/6.0
Date: Tue, 06 Nov 2012 22:36:43 GMT
GET /cpro/ui/f.js HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Tue, 06 Nov 2012 22:36:47 GMT
Content-Length: 17853
Last-Modified: Fri, 26 Oct 2012 03:00:00 GMT
Connection: keep-alive
Content-Encoding: gzip
Server: Apache
Set-Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1; expires=Wed, 06-Nov-13 22:36:47 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
P3P: CP=&quot; OTI DSP COR IVA OUR IND COM &quot;
Expires: Tue, 06 Nov 2012 23:36:47 GMT
Cache-Control: max-age=3600
GET /logo.gif HTTP/1.1

Host: www.ulinix.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 3371
Last-Modified: Wed, 29 Dec 2010 04:08:49 GMT
Accept-Ranges: bytes
Etag: &quot;accac518ea7cb1:382&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 22:37:15 GMT
GET /up/uplogo/2011011901683657.gif HTTP/1.1

Host: nurlan.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.0 200 OK

Content-Type: image/gif

Content-Length: 7954
Last-Modified: Wed, 06 Jun 2012 12:48:34 GMT
Accept-Ranges: bytes
Etag: &quot;101a22afe243cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:29:50 GMT
Age: 7647
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /elan/ok.jpg HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Content-Length: 35515
Last-Modified: Sun, 20 May 2012 08:34:04 GMT
Accept-Ranges: bytes
Etag: &quot;7e4d99506336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 21:58:08 GMT
Age: 2349
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /ecom?di=u926728&tm=BAIDU_CPRO_SETJSONADSLOT&fn=BAIDU_CPRO_SETJSONADSLOTFLOAT&baidu_id= HTTP/1.1

Host: pos.baidu.com
GET /ecom?di=u926728&amp;tm=BAIDU_CPRO_SETJSONADSLOT&amp;fn=BAIDU_CPRO_SETJSONADSLOTFLOAT&amp;baidu_id= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8

Date: Tue, 06 Nov 2012 22:36:51 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
Server: Apache
GET /U-img/images/1_02.gif HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 404 Not Found

Content-Type: text/html

Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 22:37:19 GMT
X-Cache: MISS from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: close
GET /logo.gif HTTP/1.1

Host: ulinix.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: max-age=18000
Content-Length: 11721
Last-Modified: Thu, 15 Jul 2010 16:03:52 GMT
Accept-Ranges: bytes
Etag: &quot;0248a513724cb1:5e9&quot;
Server: Microsoft-IIS/6.0
http: //ulinix.com: http://www.ulinix.com
Date: Tue, 06 Nov 2012 22:36:52 GMT
GET /pagead/js/r20121031/r20120730/show_ads_impl.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 5206557930112377484
Date: Tue, 06 Nov 2012 19:40:17 GMT
Expires: Tue, 20 Nov 2012 19:40:17 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 19221
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 10595
GET /bgd.jpg HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Content-Length: 9976
Last-Modified: Sun, 20 May 2012 08:45:26 GMT
Accept-Ranges: bytes
Etag: &quot;b6da36e76436cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7383
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /pagead/expansion_embed.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 2372832783343406230
Date: Tue, 06 Nov 2012 01:11:37 GMT
Expires: Wed, 07 Nov 2012 01:11:37 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 25450
X-XSS-Protection: 1; mode=block
Age: 77115
Cache-Control: public, max-age=86400
GET /2.gif HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/gif

Content-Length: 2064
Last-Modified: Sun, 20 May 2012 08:45:24 GMT
Accept-Ranges: bytes
Etag: &quot;86c018e66436cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7383
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /pic/page_bg.jpg HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/pic/kinoqi.css
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Content-Length: 822
Last-Modified: Sun, 20 May 2012 08:34:59 GMT
Accept-Ranges: bytes
Etag: &quot;7c2a2716336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7382
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /pagead/osd.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
If-None-Match: 13350759849962699205
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 6549576333968007708
Date: Tue, 06 Nov 2012 22:08:53 GMT
Expires: Tue, 06 Nov 2012 23:08:53 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5986
X-XSS-Protection: 1; mode=block
Age: 1680
Cache-Control: public, max-age=3600
GET /pagead/ads?client=ca-pub-0738522940583005&output=html&h=90&slotname=6799934811&w=728&lmt=1352241406&flash=10.0.45&hl=zh-CN&url=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&dt=1352241412151&bpp=32&shv=r20121031&jsv=r20110914&correlator=1352241412842&frm=20&adk=1867216859&ga_vid=1772944563.1352241413&ga_sid=1352241413&ga_hid=1192091248&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=alpida%20unicode%20system&dfs=14&adx=345&ady=468&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=954&xpc=on1p8LpWKa&p=http%3A//www.567kino.com HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/ads?client=ca-pub-0738522940583005&amp;output=html&amp;h=90&amp;slotname=6799934811&amp;w=728&amp;lmt=1352241406&amp;flash=10.0.45&amp;hl=zh-CN&amp;url=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;dt=1352241412151&amp;bpp=32&amp;shv=r20121031&amp;jsv=r20110914&amp;correlator=1352241412842&amp;frm=20&amp;adk=1867216859&amp;ga_vid=1772944563.1352241413&amp;ga_sid=1352241413&amp;ga_hid=1192091248&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=alpida%20unicode%20system&amp;dfs=14&amp;adx=345&amp;ady=468&amp;biw=1159&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=954&amp;xpc=on1p8LpWKa&amp;p=http%3A//www.567kino.com HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
 
HTTP/1.1 400 Bad Request

Content-Type: text/html; charset=UTF-8

P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Date: Tue, 06 Nov 2012 22:36:53 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
GET /pic/rnd_Area_a.gif HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/pic/kinoqi.css
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/gif

Content-Length: 1089
Last-Modified: Sun, 20 May 2012 08:35:02 GMT
Accept-Ranges: bytes
Etag: &quot;6ac74c736336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 21:41:43 GMT
Age: 3335
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /cnzz_core.php?web_id=3494456&show=pic1&l=none HTTP/1.1

Host: c.cnzz.com
GET /cnzz_core.php?web_id=3494456&amp;show=pic1&amp;l=none HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Tue, 06 Nov 2012 22:36:53 GMT
Server: Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8e-fips-rhel5
Last-Modified: Tue, 06 Nov 2012 22:36:53 GMT
Expires: Tue, 06 Nov 2012 22:51:53 GMT
Content-Length: 569
Connection: close
GET /stat.htm?id=3494456&r=&lg=en-us&ntime=none&repeatip=0&rtime=0&cnzz_eid=24593934-1352241410-&showp=1176x885&st=0&sin=&res=0&rnd=1723401032 HTTP/1.1

Host: hzs1.cnzz.com
GET /stat.htm?id=3494456&amp;r=&amp;lg=en-us&amp;ntime=none&amp;repeatip=0&amp;rtime=0&amp;cnzz_eid=24593934-1352241410-&amp;showp=1176x885&amp;st=0&amp;sin=&amp;res=0&amp;rnd=1723401032 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: Tengine/1.3.0
Date: Tue, 06 Nov 2012 22:36:53 GMT
Transfer-Encoding: chunked
Connection: close
GET /alpidau0.eot HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/pic/kinoqi.css
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: application/octet-stream

Content-Length: 30578
Last-Modified: Sun, 20 May 2012 08:45:26 GMT
Accept-Ranges: bytes
Etag: &quot;a67cd7e66436cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7382
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /pic/bgd.jpg HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/pic/kinoqi.css
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Content-Length: 27731
Last-Modified: Sun, 20 May 2012 08:34:48 GMT
Accept-Ranges: bytes
Etag: &quot;16a2c96a6336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7382
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /cpro/ui/uijs.php?tu=u926728&tn=float_xuanfusld_120_270&n=18050058_cpr&rsi1=270&rsi0=120&rad=&rsi6=-1&rsi7=0&at=6&ch=0&cad=1&aurl=&rss7=&cpa=0&fv=10&cn=1&if=16&word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&refer=&ready=1&jk=7bd3d2740f493a55&jn=3&lmt=1352241406&csp=1176,885&csn=1176,855&ccd=24&chi=1&cja=true&cpl=8&cmi=54&cce=true&csl=en-US&did=1&rt=191&dt=1352241412&ev=16777216&c01=0&prt=1352241412076&fa=1&ls=3&pt=1&flw=1&ct=1&ccw=950&ww=0&i3=f HTTP/1.1

Host: cpro.baidu.com
GET /cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=1&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=7bd3d2740f493a55&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=1&amp;rt=191&amp;dt=1352241412&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 22:36:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Wed Nov  7 06:36:53 2012
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Server: Apache
Content-Encoding: gzip
GET /stat.htm?id=3494456&r=&lg=en-us&ntime=none&repeatip=0&rtime=0&cnzz_eid=24593934-1352241410-&showp=1176x885&st=0&sin=&res=0&rnd=275567860 HTTP/1.1

Host: g8.cnzz.com
GET /stat.htm?id=3494456&amp;r=&amp;lg=en-us&amp;ntime=none&amp;repeatip=0&amp;rtime=0&amp;cnzz_eid=24593934-1352241410-&amp;showp=1176x885&amp;st=0&amp;sin=&amp;res=0&amp;rnd=275567860 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: Tengine/1.4.1
Date: Tue, 06 Nov 2012 22:36:53 GMT
Content-Length: 43
Last-Modified: Fri, 19 Oct 2012 06:37:39 GMT
Connection: close
Accept-Ranges: bytes
GET /pic1.gif HTTP/1.1

Host: icon.cnzz.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: Tengine/1.3.0
Date: Tue, 06 Nov 2012 22:36:54 GMT
Content-Length: 428
Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Expires: Wed, 07 Nov 2012 22:36:54 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GET /9.gif?abc=1&rnd=2066745970 HTTP/1.1

Host: cnzz.mmstat.com
GET /9.gif?abc=1&amp;rnd=2066745970 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 302 Found

Content-Type: image/gif

Server: Tengine
Date: Tue, 06 Nov 2012 22:36:54 GMT
Content-Length: 43
Connection: close
Set-Cookie: cna=Bn8gCVYUdTYCAVDLqP6GLXPR; expires=Fri, 04-Nov-22 22:36:54 GMT; path=/; domain=.mmstat.com
sc=fa99710c; path=/; domain=.cnzz.mmstat.com
atpsid=adfb47c30bc9b2dd258f5fe9_1352241414; expires=Fri, 04-Nov-22 22:36:54 GMT; path=/; domain=.cnzz.mmstat.com
Location: http://pcookie.cnzz.com/app.gif?&amp;cna=Bn8gCVYUdTYCAVDLqP6GLXPR
Expires: Tue, 06 Nov 2012 22:36:53 GMT
Cache-Control: no-cache, no-store
P3P: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV
GET /cpro/ui/uijs.php?tu=u926728&tn=float_xuanfusld_120_270&n=18050058_cpr&rsi1=270&rsi0=120&rad=&rsi6=-1&rsi7=0&at=6&ch=0&cad=1&aurl=&rss7=&cpa=0&fv=10&cn=0&if=16&word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&refer=&ready=1&jk=e3b56eac0141cc1f&jn=3&lmt=1352241406&csp=1176,885&csn=1176,855&ccd=24&chi=1&cja=true&cpl=8&cmi=54&cce=true&csl=en-US&did=2&rt=241&dt=1352241412&pn=1|float_xuanfusld_120_270|6&ev=16777216&c01=0&prt=1352241412076&fa=1&ls=3&pt=1&flw=1&ct=1&ccw=950&ww=0&i3=f HTTP/1.1

Host: cpro.baidu.com
GET /cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=0&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=e3b56eac0141cc1f&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=2&amp;rt=241&amp;dt=1352241412&amp;pn=1|float_xuanfusld_120_270|6&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 22:36:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Wed Nov  7 06:36:54 2012
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Server: Apache
Content-Encoding: gzip
GET /pic/btn.gif HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/pic/kinoqi.css
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG
 
HTTP/1.0 200 OK

Content-Type: image/gif

Content-Length: 17955
Last-Modified: Sun, 20 May 2012 08:34:50 GMT
Accept-Ranges: bytes
Etag: &quot;92f7e26b6336cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 20:34:16 GMT
Age: 7383
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /img/float/bg_slide2_120_270.png HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=1&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=7bd3d2740f493a55&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=1&amp;rt=191&amp;dt=1352241412&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 22:36:54 GMT
Content-Length: 657
Last-Modified: Mon, 05 Sep 2011 08:00:00 GMT
Connection: keep-alive
Server: Apache
Expires: Wed, 07 Nov 2012 22:36:54 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GET /app.gif?&cna=Bn8gCVYUdTYCAVDLqP6GLXPR HTTP/1.1

Host: pcookie.cnzz.com
GET /app.gif?&amp;cna=Bn8gCVYUdTYCAVDLqP6GLXPR HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: Tengine
Date: Tue, 06 Nov 2012 22:36:55 GMT
Content-Length: 43
Connection: close
Set-Cookie: cna=Bn8gCVYUdTYCAVDLqP6GLXPR; expires=Fri, 04-Nov-22 22:36:55 GMT; path=/; domain=.cnzz.com
Expires: Tue, 06 Nov 2012 22:36:54 GMT
Cache-Control: no-cache, no-store
P3P: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV
GET /sync.htm?cproid=568C23CD5583FFB5CC1D2D50221C2144%3AFG%3D1 HTTP/1.1

Host: cpro.baidustatic.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=1&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=7bd3d2740f493a55&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=1&amp;rt=191&amp;dt=1352241412&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 22:36:55 GMT
Last-Modified: Fri, 19 Oct 2012 03:00:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
P3P: CP=&quot; OTI DSP COR IVA OUR IND COM &quot;
Content-Encoding: gzip
GET /extra/text_flash/AC_RunActiveContent.js HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=0&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=e3b56eac0141cc1f&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=2&amp;rt=241&amp;dt=1352241412&amp;pn=1|float_xuanfusld_120_270|6&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Tue, 06 Nov 2012 22:36:55 GMT
Content-Length: 2455
Last-Modified: Mon, 05 Sep 2011 08:00:00 GMT
Connection: keep-alive
Content-Encoding: gzip
Server: Apache
Expires: Tue, 06 Nov 2012 23:36:55 GMT
Cache-Control: max-age=3600
GET /logo.gif HTTP/1.1

Host: nurlan.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
 
HTTP/1.0 200 OK

Content-Type: image/gif

Content-Length: 74689
Last-Modified: Wed, 06 Jun 2012 14:42:46 GMT
Accept-Ranges: bytes
Etag: &quot;bea06ba3f243cd1:9bf&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 18:16:08 GMT
Age: 15669
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: keep-alive
GET /sync.htm?cproid=568C23CD5583FFB5CC1D2D50221C2144%3AFG%3D1 HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidustatic.com/sync.htm?cproid=568C23CD5583FFB5CC1D2D50221C2144%3AFG%3D1
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 22:36:55 GMT
Last-Modified: Fri, 19 Oct 2012 03:00:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
P3P: CP=&quot; OTI DSP COR IVA OUR IND COM &quot;
Content-Encoding: gzip
GET /img/float/cpro_float_smallLightgrey.jpg HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=1&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=7bd3d2740f493a55&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=1&amp;rt=191&amp;dt=1352241412&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 22:36:54 GMT
Content-Length: 14640
Last-Modified: Mon, 05 Sep 2011 08:00:00 GMT
Connection: keep-alive
Server: Apache
Expires: Wed, 07 Nov 2012 22:36:54 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GET /sync.htm?cproid=568C23CD5583FFB5CC1D2D50221C2144%3AFG%3D1 HTTP/1.1

Host: cpro.baidustatic.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=0&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=e3b56eac0141cc1f&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=2&amp;rt=241&amp;dt=1352241412&amp;pn=1|float_xuanfusld_120_270|6&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
Cookie: CPROID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
If-Modified-Since: Fri, 19 Oct 2012 03:00:00 GMT
 
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified

Date: Tue, 06 Nov 2012 22:36:55 GMT
Last-Modified: Fri, 19 Oct 2012 03:00:00 GMT
Connection: keep-alive
Server: Apache
P3P: CP=&quot; OTI DSP COR IVA OUR IND COM &quot;
GET /cpro/ui/e.html HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.567kino.com/play.asp?id=941
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 22:36:56 GMT
Last-Modified: Fri, 19 Oct 2012 06:30:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Expires: Wed, 07 Nov 2012 00:36:56 GMT
Cache-Control: max-age=7200
Content-Encoding: gzip
GET /img//float/cpro_float_smallLightgrey.jpg HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=0&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=e3b56eac0141cc1f&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=2&amp;rt=241&amp;dt=1352241412&amp;pn=1|float_xuanfusld_120_270|6&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 22:36:54 GMT
Content-Length: 14640
Last-Modified: Mon, 05 Sep 2011 08:00:00 GMT
Connection: keep-alive
Server: Apache
Expires: Wed, 07 Nov 2012 22:36:54 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GET /media/id=nHfsPjb3n1D&gp=403&time=nHc4P1b1n1cdrf.gif HTTP/1.1

Host: drmcmm.baidu.com
GET /media/id=nHfsPjb3n1D&amp;gp=403&amp;time=nHc4P1b1n1cdrf.gif HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=1&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=7bd3d2740f493a55&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=1&amp;rt=191&amp;dt=1352241412&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: image/gif

media: media
Cache-Control: max-age=31536000
Expires: Fri, 26 Oct 2012 12:24:13 GMT
Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT
Date: Tue, 06 Nov 2012 22:36:55 GMT
Server: apache
Content-Length: 14732
GET /sync.htm?cproid=568C23CD5583FFB5CC1D2D50221C2144%3AFG%3D1 HTTP/1.1

Host: cpro.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidustatic.com/sync.htm?cproid=568C23CD5583FFB5CC1D2D50221C2144%3AFG%3D1
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1; CPROID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
If-Modified-Since: Fri, 19 Oct 2012 03:00:00 GMT
 
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified

Date: Tue, 06 Nov 2012 22:36:57 GMT
Last-Modified: Fri, 19 Oct 2012 03:00:00 GMT
Connection: keep-alive
Server: Apache
P3P: CP=&quot; OTI DSP COR IVA OUR IND COM &quot;
GET /media/id=rHD4P1TkPHm&gp=403&time=nHndnHT1P1TzPs.swf HTTP/1.1

Host: drmcmm.baidu.com
GET /media/id=rHD4P1TkPHm&amp;gp=403&amp;time=nHndnHT1P1TzPs.swf HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cpro.baidu.com/cpro/ui/uijs.php?tu=u926728&amp;tn=float_xuanfusld_120_270&amp;n=18050058_cpr&amp;rsi1=270&amp;rsi0=120&amp;rad=&amp;rsi6=-1&amp;rsi7=0&amp;at=6&amp;ch=0&amp;cad=1&amp;aurl=&amp;rss7=&amp;cpa=0&amp;fv=10&amp;cn=0&amp;if=16&amp;word=http%3A%2F%2Fwww.567kino.com%2Fplay.asp%3Fid%3D941&amp;refer=&amp;ready=1&amp;jk=e3b56eac0141cc1f&amp;jn=3&amp;lmt=1352241406&amp;csp=1176,885&amp;csn=1176,855&amp;ccd=24&amp;chi=1&amp;cja=true&amp;cpl=8&amp;cmi=54&amp;cce=true&amp;csl=en-US&amp;did=2&amp;rt=241&amp;dt=1352241412&amp;pn=1|float_xuanfusld_120_270|6&amp;ev=16777216&amp;c01=0&amp;prt=1352241412076&amp;fa=1&amp;ls=3&amp;pt=1&amp;flw=1&amp;ct=1&amp;ccw=950&amp;ww=0&amp;i3=f
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

media: media
Cache-Control: max-age=31536000
Expires: Fri, 26 Oct 2012 12:24:13 GMT
Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT
Date: Tue, 06 Nov 2012 22:36:57 GMT
Server: apache
Content-Length: 45368
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Tue, 06 Nov 2012 22:36:58 GMT
Connection: keep-alive
GET /favicon.ico HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG; CNZZDATA3494456=cnzz_eid=24593934-1352241410-&amp;ntime=1352241410&amp;cnzz_a=0&amp;retime=1352241412619&amp;sin=&amp;ltime=1352241412619&amp;rtime=0
 
HTTP/1.0 404 Not Found

Content-Type: text/html

Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 22:37:26 GMT
X-Cache: MISS from 121-12-118-168
X-Cache-Lookup: MISS from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: close
GET /media/id=P1TYnHm3PH0&gp=404&time=nHnYPj6YnWbzn6.jpg HTTP/1.1

Host: drmcmm.baidu.com
GET /media/id=P1TYnHm3PH0&amp;gp=404&amp;time=nHnYPj6YnWbzn6.jpg HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: BAIDUID=568C23CD5583FFB5CC1D2D50221C2144:FG=1
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

media: media
Cache-Control: max-age=31536000
Expires: Fri, 26 Oct 2012 12:24:13 GMT
Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT
Date: Tue, 06 Nov 2012 22:36:58 GMT
Server: apache
Content-Length: 19857
GET /favicon.ico HTTP/1.1

Host: www.567kino.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASPSESSIONIDCQRTSRRS=CAFNFDHAHLIENKALNFDODBKG; CNZZDATA3494456=cnzz_eid=24593934-1352241410-&amp;ntime=1352241410&amp;cnzz_a=0&amp;retime=1352241412619&amp;sin=&amp;ltime=1352241412619&amp;rtime=0
 
HTTP/1.0 404 Not Found

Content-Type: text/html

Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 22:37:26 GMT
Age: 2
X-Cache: HIT from 121-12-118-168
X-Cache-Lookup: HIT from 121-12-118-168:80
Via: 1.1 121-12-118-168:80 (squid/2.7.STABLE8)
Connection: close