Overview

URLhttp://hhmq.com/ryzz2.html
IP223.6.32.41
ASNAS37963 Alibaba (China) Technology Co., Ltd.
Location China
Report completed2012-11-06 01:02:18 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-06 01:01:38 123.125.115.126 urlQuery Client1BROWSER-IE Microsoft Internet Explorer userdata behavior memory corruption attempt


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 223.6.32.41

Date Alerts / IDS URL IP
2013-01-15 19:19:340 / 1http://www.hhmq.com/ryzz2.html223.6.32.41
2013-01-14 21:49:440 / 1http://www.hhmq.com/ryzz2.html223.6.32.41
2012-12-30 06:26:490 / 1http://www.hhmq.com/gsjj.html223.6.32.41
2012-12-25 12:34:170 / 1http://hhmq.com/ryzz2.html223.6.32.41
2012-11-29 05:22:050 / 1http://hhmq.com/223.6.32.41
2012-11-28 22:54:400 / 1http://hhmq.com/223.6.32.41

Last 6 reports on ASN: AS37963 Alibaba (China) Technology Co., Ltd.

Date Alerts / IDS URL IP
2013-02-25 08:39:570 / 2http://www.rdcnzz.com/110.75.187.200
2013-02-25 08:39:520 / 1http://url7.me/xrdw?qqdrsign=05815110.75.187.212
2013-02-25 07:39:491 / 0http://rayjoychem.com/ProductShow.asp?ArticleID=107223.5.123.119
2013-02-25 06:59:550 / 1http://42.121.85.148/42.121.85.148
2013-02-25 06:47:570 / 1http://www.hrecchina.org/42.121.85.148
2013-02-25 06:15:290 / 0http://www.linuxeden.com/42.120.0.40

Last 6 reports on domain: hhmq.com

Date Alerts / IDS URL IP
2012-12-25 12:34:170 / 1http://hhmq.com/ryzz2.html223.6.32.41
2012-11-29 05:22:050 / 1http://hhmq.com/223.6.32.41
2012-11-28 22:54:400 / 1http://hhmq.com/223.6.32.41
2012-11-07 11:45:420 / 1http://hhmq.com/ryzz3.html223.6.32.41
2012-11-07 07:12:560 / 1http://hhmq.com/gcsl3.html223.6.32.41
2012-11-07 03:44:430 / 1http://hhmq.com/gcsl1.html223.6.32.41



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (2)

#1 JavaScript::Write (size: 190, repeated: 1) 

<a href="http://tongji.baidu.com/hm-web/welcome/ico?s=f671abb7394d78b0339a0f3cc07aaf54" target="_blank"><img border="0" src="http://eiv.baidu.com/hmt/icon/21.gif" width="20" height="20"></a>

#2 JavaScript::Write (size: 105, repeated: 1) 

<script src=' http://hm.baidu.com/h.js?f671abb7394d78b0339a0f3cc07aaf54' type='text/javascript'></script>


HTTP Transactions (33)


Request Response 
GET /ryzz2.html HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 00:01:32 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 06:08:52 GMT
Etag: &quot;9e8ebb-12aa-42efdda5d6500&quot;
Accept-Ranges: bytes
Content-Length: 4778
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=300
Connection: Keep-Alive
GET /images/ryzz2_06.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:33 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:08:22 GMT
Etag: &quot;9e9154-0-42efc2b6c5980&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=299
Connection: Keep-Alive
GET /images/%E5%88%86%E9%9A%94%E7%AC%A6.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:33 GMT
Server: Apache
Content-Length: 218
Keep-Alive: timeout=15, max=300
Connection: Keep-Alive
GET /images/ryzz2_05.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:33 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=300
Connection: Keep-Alive
GET /images/ryzz2_07.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:34 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=298
Connection: Keep-Alive
GET /images/ryzz2_08.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:34 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:09:23 GMT
Etag: &quot;9e9155-0-42efc2f0f22c0&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=299
Connection: Keep-Alive
GET /images/ryzz2_02.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:33 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:06:18 GMT
Etag: &quot;9e9151-f3d-42efc24084280&quot;
Accept-Ranges: bytes
Content-Length: 3901
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=300
Connection: Keep-Alive
GET /images/ryzz2_09.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:34 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=299
Connection: Keep-Alive
GET /images/ryzz2_10.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:34 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:10:24 GMT
Etag: &quot;9e9156-0-42efc32b1ec00&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=297
Connection: Keep-Alive
GET /images/ryzz2_11.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:34 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=298
Connection: Keep-Alive
GET /images/ryzz2_12.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:34 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:11:25 GMT
Etag: &quot;9e9157-0-42efc3654b540&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=299
Connection: Keep-Alive
GET /images/ryzz2_13.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:34 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=298
Connection: Keep-Alive
GET /images/ryzz2_03.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:33 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:06:19 GMT
Etag: &quot;9e9152-31d8-42efc241784c0&quot;
Accept-Ranges: bytes
Content-Length: 12760
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=300
Connection: Keep-Alive
GET /images/ryzz2_14.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:12:25 GMT
Etag: &quot;9e9158-0-42efc39e83c40&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=297
Connection: Keep-Alive
GET /%E5%BC%80%E5%A4%B4%E5%8A%A8%E7%94%BB.swf HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Content-Length: 214
Keep-Alive: timeout=15, max=296
Connection: Keep-Alive
GET /images/ryzz2_15.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=298
Connection: Keep-Alive
GET /images/ryzz2_16.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:13:26 GMT
Etag: &quot;9e9159-0-42efc3d8b0580&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=297
Connection: Keep-Alive
GET /images/ryzz2_17.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=299
Connection: Keep-Alive
GET /66/index.htm HTTP/1.1

Host: www.ac86.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: DNSPod v1.0
Location: http://bai4.com/?dn=ac86.cn/66/index.htm
Content-Length: 0
Connection: close
GET /images/ryzz2_18.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:14:27 GMT
Etag: &quot;9e915a-0-42efc412dcec0&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=296
Connection: Keep-Alive
GET /images/ryzz2_19.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=295
Connection: Keep-Alive
GET /images/ryzz2_20.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:35 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:15:27 GMT
Etag: &quot;9e915b-0-42efc44c155c0&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=297
Connection: Keep-Alive
GET /images/ryzz2_22.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:36 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:16:28 GMT
Etag: &quot;9e915c-0-42efc48641f00&quot;
Accept-Ranges: bytes
Content-Length: 0
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=298
Connection: Keep-Alive
GET /images/ryzz2_21.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:36 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=296
Connection: Keep-Alive
GET /images/ryzz2_04.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 00:01:33 GMT
Server: Apache
Last-Modified: Thu, 26 Apr 2007 04:06:49 GMT
Etag: &quot;9e9153-98c2-42efc25e14840&quot;
Accept-Ranges: bytes
Content-Length: 39106
X-UA-Compatible: IE=EmulateIE7
Keep-Alive: timeout=15, max=300
Connection: Keep-Alive
GET /images/ryzz2_23.gif HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:36 GMT
Server: Apache
Content-Length: 217
Keep-Alive: timeout=15, max=295
Connection: Keep-Alive
GET /?dn=ac86.cn/66/index.htm HTTP/1.1

Host: bai4.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hhmq.com/ryzz2.html
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: kangle/3.0
Date: Tue, 06 Nov 2012 00:00:45 GMT
X-Powered-By: PHP/5.2.17p1
Content-Encoding: gzip
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
GET /contact.png HTTP/1.1

Host: bai4.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bai4.com/?dn=ac86.cn/66/index.htm
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: kangle/3.0
Date: Tue, 06 Nov 2012 00:00:45 GMT
Last-Modified: Mon, 06 Aug 2012 07:49:06 GMT
Content-Length: 2594
Connection: keep-alive
Keep-Alive: timeout=60
GET /h.js?f671abb7394d78b0339a0f3cc07aaf54 HTTP/1.1

Host: hm.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bai4.com/?dn=ac86.cn/66/index.htm
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Etag: ede932cf22704bcec2e2a7e930eb683e
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Set-Cookie: HMACCOUNT=3AC224513C047586; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
P3P: CP=&quot;CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Connection: close
Content-Length: 5091
Date: Tue, 06 Nov 2012 00:01:37 GMT
Server: apache
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1176x885&et=0&fl=10.0&ja=1&ln=en-US&lo=0&nv=1&rnd=947357756&si=f671abb7394d78b0339a0f3cc07aaf54&st=3&su=http%3A%2F%2Fhhmq.com%2Fryzz2.html&v=1.0.34&lv=1 HTTP/1.1

Host: hm.baidu.com
GET /hm.gif?cc=1&amp;ck=1&amp;cl=24-bit&amp;ds=1176x885&amp;et=0&amp;fl=10.0&amp;ja=1&amp;ln=en-US&amp;lo=0&amp;nv=1&amp;rnd=947357756&amp;si=f671abb7394d78b0339a0f3cc07aaf54&amp;st=3&amp;su=http%3A%2F%2Fhhmq.com%2Fryzz2.html&amp;v=1.0.34&amp;lv=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bai4.com/?dn=ac86.cn/66/index.htm
Cookie: HMACCOUNT=3AC224513C047586
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: private, max-age=0, no-cache
Pragma: no-cache
X-Content-Type-Options: nosniff
Connection: close
Content-Length: 43
Date: Tue, 06 Nov 2012 00:01:39 GMT
Server: apache
GET /hmt/icon/21.gif HTTP/1.1

Host: eiv.baidu.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bai4.com/?dn=ac86.cn/66/index.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Etag: &quot;762990053&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 13 Apr 2010 09:38:40 GMT
Expires: Thu, 15 Sep 2022 00:01:39 GMT
Cache-Control: max-age=311040000
Content-Length: 1119
Date: Tue, 06 Nov 2012 00:01:39 GMT
Server: BWS/1.0
GET /favicon.ico HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:39 GMT
Server: Apache
Content-Length: 209
Keep-Alive: timeout=15, max=294
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: hhmq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 00:01:42 GMT
Server: Apache
Content-Length: 209
Keep-Alive: timeout=15, max=296
Connection: Keep-Alive