Overview

URL www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
IP211.149.198.216
ASNAS38283 CHINANET SiChuan Telecom Internet Data Center
Location China
Report completed2017-12-07 09:15:09 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 211.149.198.216


Last 10 reports on ASN: AS38283 CHINANET SiChuan Telecom Internet Data Center

Date UQ / IDS / BL URL IP
2017-12-15 07:56:12 +0100
0 - 0 - 10 51piaoyi.com/ 211.149.152.161
2017-12-15 07:40:28 +0100
0 - 0 - 1 www.ncrieo.com.cn/yjsh_5.htm 125.64.5.100
2017-12-15 07:40:28 +0100
0 - 0 - 1 www.ncrieo.com.cn/yjsh_8.htm 125.64.5.100
2017-12-15 05:10:50 +0100
0 - 0 - 1 www.askfgz.com/strong/Pfc/uvZ 61.188.37.220
2017-12-15 05:01:04 +0100
0 - 0 - 2 quanbanyisheng.com/index.php/quan/index/keywo (...) 118.123.13.241
2017-12-15 04:57:19 +0100
0 - 0 - 1 www.askfgz.com/strong/QClC/FJq 61.188.37.220
2017-12-15 04:42:00 +0100
0 - 0 - 1 www.askfgz.com/strong/Pfc/efSxY 61.188.37.220
2017-12-15 04:17:45 +0100
0 - 0 - 1 www.askfgz.com/strong/Pfc/Lhfwa/Qam 61.188.37.220
2017-12-15 03:28:30 +0100
0 - 0 - 2 quanbanyisheng.com/index.php/quan/index/keywo (...) 118.123.13.241
2017-12-15 01:37:38 +0100
0 - 3 - 2 gvods.com/search.php?searchword=?珍? 221.236.7.214

No other reports on domain: beihaiting.com



JavaScript

Executed Scripts (113)


Executed Evals (84)

#1 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 694d04645e0bf03f8d16ee408d276be6c57d18c3aceff3ab4f4eef04745f241f

                                        0,
function(x) {
    K(x, 1);
}
                                    

#2 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 032d9e37aa320f09689e17ffce9332caeb89ceb7edc863af8bc5644be5529a53

                                        0,
function(x) {
    K(x, 2);
}
                                    

#3 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 9ca3dd7e0e39543cfdf97c24cfa8ab36c95e2c0ea2858f4ae0d4b7656d819a37

                                        0,
function(x) {
    K(x, 4);
}
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 633e5068e5fdf54febb523a67eb602306b1aa5e08807c1a29f858c486213a01a

                                        0,
function(x) {
    t(x, 1);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 1) - SHA256: a0e04e169e4971ce965219bc0b663696ce4e936158d54cc9fcc7280615f63d01

                                        0,
function(x) {
    t(x, 2);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 713b9abf6a884a5a51c0162b7dedd8aa8975fbfbf1e4f1e21272fe333e0962f8

                                        0,
function(x) {
    t(x, 4);
}
                                    

#7 JavaScript::Eval (size: 38, repeated: 1) - SHA256: 860d538699a954de9b788e1a776a0610f1c2e1c7d6380dd93879432e93a666e2

                                        0,
function(x) {
    x.J && J(x, 0);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7693ee49eea00748ecca87c409a996715fcceb0a7e0fab74d53dd33365a0184a

                                        0,
function(x) {
    x.m(0);
}
                                    

#9 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7b603adf5a84784f6c829313fe8050335a92d6d96eee105c99d9da45c095a1c8

                                        0,
function(x) {
    x.m(3);
}
                                    

#10 JavaScript::Eval (size: 30, repeated: 1) - SHA256: d373ec7a8005a1c55cf136fbe02236f669a1881d0f2d4e7f67ca35f4c4f9f42e

                                        0,
function(x) {
    x.m(4);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 1742febf92e48d62f677bcd0db75ed8948ba6ca0be7606935ba0635179ea10c2

                                        0,
function(x) {
    x.m(7);
}
                                    

#12 JavaScript::Eval (size: 187, repeated: 1) - SHA256: 0aa3d91913e4c42668d2cffb83fe87257746e62d46f69260fbcf66efefbc389b

                                        0,
function(x, n) {
    ((n.push(x[0] << 24 | x[1] << 16 | x[2] << 8 | x[3]), n).push(x[4] << 24 | x[5] << 16 | x[6] << 8 | x[7]), n).push(x[8] << 24 | x[9] << 16 | x[10] << 8 | x[11]);
}
                                    

#13 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 117304da6302590b65eec888eaf89796bb4c12c9897401a45981b6efa30011b6

                                        0,
function(x, n) {
    (n = f(x), x = x.R(n), x)[0].removeEventListener(x[1], x[2], false);
}
                                    

#14 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 7d5375ccad246740bd0fbda1817900e16743b5a77ecdfbf002c3056c2ff31890

                                        0,
function(x, n) {
    E(x, 1, 5) || (n = H(x), w(x, n.H, n.D.apply(n.Z, n.V)));
}
                                    

#15 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 589f1167233c68139f01c747e943ba05340914f842786b22a1849f13a58b5902

                                        0,
function(x, n) {
    if (n = this.s[x], void 0 === n) {
        throw V(this, 30, 0, x), this.I;
    }
    return n();
}
                                    

#16 JavaScript::Eval (size: 49, repeated: 1) - SHA256: eaa0d73bfd0adbf74a722bba676e7cf6712d4c3f5aeee2812379b6722b8ee573

                                        0,
function(x, n) {
    n = x.R(f(x)), q(x, n);
}
                                    

#17 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 4daa99f22d9d35ef340bf76af6c3d499d9ad84f4a35cce02c86bd567bc21425a

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) % x.R(n));
}
                                    

#18 JavaScript::Eval (size: 78, repeated: 1) - SHA256: f58cd63d35d85aa9582c1678eb4f3226987fbc4e31c9bb4253d51dd607dd334e

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) * x.R(n));
}
                                    

#19 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 1f6423b02ef91e5e888423f40dde89418054b06ac0c59a9579e8bb4c8fa4952e

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) + x.R(n));
}
                                    

#20 JavaScript::Eval (size: 78, repeated: 1) - SHA256: a35e94600348a14384c4b6a4edbc0016ddaa5b55fdbafdbce47fe2d024410b76

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) - x.R(n));
}
                                    

#21 JavaScript::Eval (size: 86, repeated: 1) - SHA256: e291a53cf9dc95443047182927a14229a89d227480884d140c44146e2ecd6cc2

                                        0,
function(x, n, R) {
    (n = (n = f(x), R = f(x), x).s[n] && x.R(n), w)(x, R, n);
}
                                    

#22 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 6e42f58f116f53d5f223147686e5bda62aa33050bcc3fa7f4ac0e159b5965536

                                        0,
function(x, n, R) {
    0 != (R = (n = f(x), f(x)), x.R(n)) && w(x, 36, x.R(R));
}
                                    

#23 JavaScript::Eval (size: 121, repeated: 1) - SHA256: 42fbd5f28b314dfb99425f7c9ca3338755bb986dd310d19cdeed277133c0a94f

                                        0,
function(x, n, R) {
    E(x, 1, 5) ||
        (n = f(x), R = f(x), w(x, R, function(x) {
            return eval(x);
        }(x.R(n))));
}
                                    

#24 JavaScript::Eval (size: 72, repeated: 1) - SHA256: d0e3dba5139c920f76010efa9d452b7dff58c7aa2727f93e78e6d043579f74c3

                                        0,
function(x, n, R) {
    R = (n = f(x), f(x)), w(x, R, "" + x.R(n));
}
                                    

#25 JavaScript::Eval (size: 244, repeated: 1) - SHA256: 584d4f7ba49416a337f0e789d9c23f12e4f641127b6d3021b5c347cb699cb887

                                        0,
function(x, n, R) {
    if (3 == x.length) {
        for (R = 0; 3 > R; R++) {
            n[R] += x[R];
        }
        for (x = [13, 8, 13, 12, 16, 5, 3, (R = 0, 10), 15]; 9 > R; R++) {
            n[3](n, R % 3, x[R]);
        }
    }
}
                                    

#26 JavaScript::Eval (size: 79, repeated: 1) - SHA256: a4ef6b1bd3bd39ce1ccc707db8e20c3106bf4757d727aa592653fa79a4a28410

                                        0,
function(x, n, R) {
    n = (R = (n = f(x), f)(x), x.R(n)), w(x, R, z(n));
}
                                    

#27 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 7d55deb518836528a10dd830c704bd7c892bf5c79d36803ff3a7c846d936e333

                                        0,
function(x, n, R) {
    return R = function() {
        return x;
    }, n = function() {
        return R();
    }, n[this.l] = function(n) {
        x = n;
    }, n;
}
                                    

#28 JavaScript::Eval (size: 296, repeated: 1) - SHA256: f1dcfa9aaf4b604944072e52ea74f49007834b2aa0587d2963dd42c12f5e3018

                                        0,
function(x, n, R, S, N, k, p) {
    if ((S = (R = (n = f(x), F(x)), ""), x).s[215]) {
        for (N = x.R(215), p = N.length, k = 0; R--;) {
            k = (k + F(x)) % p, S += c[N[k]];
        }
    } else {
        for (; R--;) {
            S += c[f(x)];
        }
    }
    w(x, n, S);
}
                                    

#29 JavaScript::Eval (size: 89, repeated: 1) - SHA256: a0097d912c4cdc270ce5907bad2e6cab428e96a23d516ae453ef609f534f80d9

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f(x)), f(x)), w)(x, c, x.R(n) << R);
}
                                    

#30 JavaScript::Eval (size: 89, repeated: 1) - SHA256: c65404fd09bca8366385e3006c8b7ed9f05ff15acc2a3d7474301a4dc4eaaaa1

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f(x)), f(x)), w)(x, c, x.R(n) >> R);
}
                                    

#31 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 0dc311cdf819835eb2cd7d225b379feb352b5aadb1618e36ba9b2bee36dcaf7f

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f)(x), f(x)), R = x.R(R), n = x.R(n), w)(x, c, n[R]);
}
                                    

#32 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 5b0b5d23a7f9b71432aec701fa48fb26fa72f752b811c9b72c91118dbe2ec034

                                        0,
function(x, n, R, c) {
    (n = f(x), R = f(x), c = f(x), x).R(n)[x.R(R)] = x.R(c);
}
                                    

#33 JavaScript::Eval (size: 192, repeated: 1) - SHA256: c86aa0fa7933ddad14220d6714c91253c675f4b25534cdf51f55f09154e71a97

                                        0,
function(x, n, R, c) {
    R = (c = (R = (n = x & 4, x &= 3, f)(this), f)(this), this.R(R)), n && (R = m(("" + R).replace(/\r\n/g, "\n"))), x && e(this, c, W(R.length, 2)), e(this, c, R);
}
                                    

#34 JavaScript::Eval (size: 89, repeated: 1) - SHA256: 1328a9fa2a8af0f3a9f37fd50c761702496612f6d353b782c904f8dfeeb4035b

                                        0,
function(x, n, R, c) {
    R = (n = f(x), f(x)), c = f(x), w(x, c, x.R(n) | x.R(R));
}
                                    

#35 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 14b6a0e59f7de92d69d1bc084973fa5c0e4328397c809ed16354c4da45b2df91

                                        0,
function(x, n, R, c) {
    R = (n = f(x), f(x)), c = f(x), w(x, c, x.R(n) || x.R(R));
}
                                    

#36 JavaScript::Eval (size: 98, repeated: 1) - SHA256: 911cb40484470e34bde1c10d2210288faf4a6eebf5801a2079d4e63185a39e82

                                        0,
function(x, n, R, c) {
    c = (R = (n = f(x), f(x)), f(x)), w(x, c, (x.R(n) in x.R(R)) + 0);
}
                                    

#37 JavaScript::Eval (size: 142, repeated: 1) - SHA256: 366055a5301db6297e73a4ae097bb20e4ff41bf2a26219faf63444890dbed03c

                                        0,
function(x, n, R, c) {
    for (; R--;) {
        36 != R && 239 != R && n.s[R] && (n.s[R] = n[c](n[x](R), this));
    }
    n[x] = this;
}
                                    

#38 JavaScript::Eval (size: 240, repeated: 1) - SHA256: 5935d4b30a1ed3eaeed1a373ec687bcf08da65c05ccf42b5c41992a1af801c64

                                        0,
function(x, n, R, c) {
    if ((n = x.A.pop())) {
        for (R = f(x); 0 < R; R--) {
            c = f(x), n[c] = x.s[c];
        }
        n[104] = x.s[104], n[94] = x.s[94], x.s = n;
    } else {
        w(x, 36, x.f.length);
    }
}
                                    

#39 JavaScript::Eval (size: 101, repeated: 1) - SHA256: e1bffe99165e32ce7c20e2be855dbd6a6377763c985c1ccccf40efc892043531

                                        0,
function(x, n, R, c) {
    n = (R = (n = f(x), f)(x), c = f(x), x.R(n) == x.R(R)), w(x, c, +n);
}
                                    

#40 JavaScript::Eval (size: 100, repeated: 1) - SHA256: 40f58666d4e74cce971daf9b45614c88a5904a75562efec5922c2d698cf1bdd7

                                        0,
function(x, n, R, c) {
    n = (R = (n = f(x), f)(x), c = f(x), x.R(n) > x.R(R)), w(x, c, +n);
}
                                    

#41 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 722c6a230e189e8a27ebb5c72ea5263be92f262cfded7d55b8eaeb51e0065d0c

                                        0,
function(x, n, R, c) {
    try {
        c = x[(n + 2) % 3], x[n] = x[n] - x[(n + 1) % 3] - c ^ (1 == n ? c << R : c >>> R);
    } catch (S) {
        throw S;
    }
}
                                    

#42 JavaScript::Eval (size: 128, repeated: 1) - SHA256: 194da0241e9ea19f43d595a6240c2d52140a613d5055fbc57763840caef667f2

                                        0,
function(x, n, R, c, S) {
    R = (S = (c = (R = (n = f(x), f(x)), x).R(f(x)), x).R(f(x)), x.R(R)), w(x, n, M(x, R, c, S));
}
                                    

#43 JavaScript::Eval (size: 215, repeated: 1) - SHA256: 18ce8743a11514a7584d059ef24251aecfcb904550f20a139fa2d9a4de7dbd36

                                        0,
function(x, n, R, c, S) {
    c = (n = (n = f(x), R = f(x), c = f(x), x.R(n)), S = x.R(f(x)), R = x.R(R), x.R(c)), 0 !== n &&
        (c = M(x, c, S, 1, n, R), n.addEventListener(R, c, b), w(x, 90, [n, R, c]));
}
                                    

#44 JavaScript::Eval (size: 238, repeated: 1) - SHA256: 775ec7070ded63a5e4534e28bcc9deac9f38aa9fe4df936bafeb0068280fba32

                                        0,
function(x, n, R, c, S) {
    for (R = (n = [], f(x)), c = 0; c < R; c++) {
        S = f(x), n.push(x.R(S));
    }
    R = f(x), w(x, R, function(x, R) {
        x.K++;
        try {
            for (R = 0; R < n.length; R++) {
                (0, n[R])(x);
            }
        } finally {
            x.K--;
        }
    });
}
                                    

#45 JavaScript::Eval (size: 134, repeated: 1) - SHA256: ce688ec52ac640685c13c4ea2eb52241c1fdd85d476142e8c8a6b24a6d680d15

                                        0,
function(x, n, R, c, S) {
    for (R = (n = f(x), F(x)), S = 0, c = []; S < R; S++) {
        c.push(f(x));
    }
    w(x, n, c);
}
                                    

#46 JavaScript::Eval (size: 397, repeated: 1) - SHA256: 144f8ba09b73f7a12396a68f679bc68abb9ff09c5509d095e365fb82ee8b6746

                                        0,
function(x, n, R, c, S, k) {
    if (!E(x, 1, 255)) {
        if (R = (S = (c = (R = (n = f(x), f)(x), f)(x), f(x)), n = x.R(n), x.R(R)), c = x.R(c), x = x.R(S), "object" == z(n)) {
            for (k in S = [], n) {
                S.push(k);
            }
            n = S;
        }
        for (k = (S = 0, n.length); S < k; S += c) {
            R(n.slice(S, S + c), x);
        }
    }
}
                                    

#47 JavaScript::Eval (size: 216, repeated: 1) - SHA256: 70483dd82ddf31d7da3d3daa9cc8ffb1f173b27ce8cf0615c49e9f076d455ce0

                                        0,
function(x, n, R, c, S, k) {
    return k = (R = (c = (S = function() {
        return c();
    }, function() {
        return c[R.O + (S[R.g] === n) - !k[R.g]];
    }), this), R.a), S[R.l] = function(x) {
        c[R.Y] = x;
    }, S[R.l](x), x = S;
}
                                    

#48 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 699ac4fa59e2bb00c8b97acd3cfaeff5ff0ea88ce3d4e74359c68fec8694b868

                                        0,
function(x, n, R, c, S, k, p) {
    E(x, 1, 5) ||
        (n = H(x), S = n.D, c = n.Z, R = n.V, p = R.length, 0 == p ? (k = new(c[S])) : 1 == p ? (k = new(c[S])(R[0])) : 2 == p ? (k = new(c[S])(R[0], R[1])) : 3 == p ? (k = new(c[S])(R[0], R[1], R[2])) : 4 == p ? (k = new(c[S])(R[0], R[1], R[2], R[3])) : V(x, 22), w(x, n.H, k));
}
                                    

#49 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#50 JavaScript::Eval (size: 1, repeated: 1) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#51 JavaScript::Eval (size: 366, repeated: 1) - SHA256: e3bc7ebdb8b938752ae75b548b9dd746295d60d35f1fa60dfa84e84389630671

                                        B = function(x, n, R, c) {
    try {
        for (c = 0; 79669387488 != c;) {
            x += (n << 4 ^ n >>> 5) + n ^ c + R[c & 3], c += 2489668359, n += (x << 4 ^ x >>> 5) + x ^ c + R[c >>> 11 & 3];
        }
        return [x >>> 24, x >> 16 & 255, x >> 8 & 255, x & 255, n >>> 24, n >> 16 & 255, n >> 8 & 255, n & 255];
    } catch (S) {
        throw S;
    }
}
                                    

#52 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#53 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 515637809fe2f171c0c18b4662d21bb40d821be1511ffeba1b8eb2bb827f29ca

                                        C = function(x, n) {
    return x[n] << 24 | x[n + 1] << 16 | x[n + 2] << 8 | x[n + 3];
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9

                                        F
                                    

#55 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 24fdb8cdaf1ceed5fecbee127dcc1f7d0d827a5ef4af0961c233157239e60fc5

                                        F = function(x, n) {
    return n = f(x), n & 128 && (n = n & 127 | f(x) << 7), n;
}
                                    

#56 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 44bd7ae60f478fae1061e11a7739f4b94d1daf917982d33b6fc8a01a63f89c21

                                        H
                                    

#58 JavaScript::Eval (size: 260, repeated: 1) - SHA256: 818a86df8e2c8271937ae826a56dad413f5866af5d7daef70ac3961a21de0e0a

                                        H = function(x, n, R, c, S, A) {
    for (A = (S = ((R = (n = {}, f(x)), n).H = f(x), n.V = [], c = f(x) - 1, f)(x), 0); A < c; A++) {
        n.V.push(f(x));
    }
    for (n.D = x.R(R), n.Z = x.R(S); c--;) {
        n.V[c] = x.R(n.V[c]);
    }
    return n;
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#60 JavaScript::Eval (size: 118, repeated: 1) - SHA256: 400af398790f722d634d6f846ffbbe90d454ac455a20b1e8017eabea1cf4a220

                                        K = function(x, n, R, c) {
    for (c = (R = f(x), 0); 0 < n; n--) {
        c = c << 8 | f(x);
    }
    w(x, R, c);
}
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1

                                        M
                                    

#62 JavaScript::Eval (size: 272, repeated: 1) - SHA256: ad7e3aa2aa31529a83a90544656132c955733ff0c849ba02f2c084b0407d1cab

                                        M = function(x, n, R, c, S, A) {
    return function() {
        var P = c & 1,
            Y = [6, n, R, void 0, S, A, arguments];
        if (c & 2) {
            var D = (O(x, Y), g)(x, true, false, false);
        } else {
            P && x.T.length ? O(x, Y) : P ? (O(x, Y), g(x, true, false, false)) : (D = I(x, Y));
        }
        return D;
    };
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#64 JavaScript::Eval (size: 596, repeated: 1) - SHA256: 2f6c0c7a3bb5a0a249c741e65a1d7a341565eae2f34460a5253e09bde6661bf9

                                        T = function(x, n, R, c, S, A, P) {
    x.K++;
    try {
        for (S = (c = 5001, void 0), A = 0, R = x.f.length;
            (--c || x.L) && (A = x.R(36)) < R;) {
            try {
                w(x, 239, A), P = f(x), (S = x.R(P)) && S.call ? S(x) : V(x, 21, 0, P), x.F = true, E(x, 0, 2);
            } catch (Y) {
                Y != x.I && (x.R(227) ? V(x, 22, Y) : w(x, 227, Y));
            }
        }
        c || V(x, 33);
    } catch (Y) {
        try {
            V(x, 22, Y);
        } catch (D) {
            Q(x, D);
        }
    }
    return R = x.R(161), n && w(x, 36, n), x.K--, R;
}
                                    

#65 JavaScript::Eval (size: 1, repeated: 1) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#66 JavaScript::Eval (size: 421, repeated: 1) - SHA256: 827f029c6d94af2c0d976ffcd0dd126d25a2af5cf1c96f658821b54306c367fb

                                        V = function(x, n, R, c, S) {
    ((R = (n = [(S = x.R(239), n), S >> 8 & 255, S & 255], void 0 != c && n.push(c), 0 == x.R(104).length && (x.s[104] = void 0, w(x, 104, n)), c = "", R &&
            (R.message && (c += R.message), R.stack && (c += ":" + R.stack)), x).R(94), 3 < R) &&
        (c = c.slice(0, R - 3), R -= c.length + 3, c = m(c.replace(/\r\n/g, "\n")), e(x, 145, W(c.length, 2).concat(c), 12)), w)(x, 94, R);
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#68 JavaScript::Eval (size: 132, repeated: 1) - SHA256: 7c5c6a8c908dac72a9f3b6389796b3d6de39d36d93471fc02d2008bcbc810565

                                        X = function(x, n, R) {
    return ((R = x.R(36), x.f && R < x.f.length) ? (w(x, 36, x.f.length), q(x, n)) : w(x, 36, n), T)(x, R);
}
                                    

#69 JavaScript::Eval (size: 2, repeated: 11) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#70 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#71 JavaScript::Eval (size: 29, repeated: 1) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#72 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#73 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#74 JavaScript::Eval (size: 413, repeated: 1) - SHA256: 910e8329e71668fe3081e03f8e79338796594da3fd105f4b834f0a3ac7b3fb61

                                        e = function(x, n, R, c, S, A) {
    for (x = (((S = x.R(n), 145 == n) ? (n = function(x, n, R, c) {
                if (S.i != (n = S.length, R = n - 4 >> 3, R)) {
                    R = ((c = [(S.i = R, 0), 0, 0, A], R) << 3) - 4;
                    try {
                        S.h = B(C(S, R), C(S, R + 4), c);
                    } catch (k) {
                        throw k;
                    }
                }
                S.push(S.h[n & 7] ^ x);
            }, A = x.R(150)) : (n = function(x) {
                S.push(x);
            }), c) &&
            n(c & 255), c = 0, R).length; c < x; c++) {
        n(R[c]);
    }
}
                                    

#75 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#76 JavaScript::Eval (size: 292, repeated: 1) - SHA256: 73a662b7b5cefb41b9d17e09dd83d23edd7bfee9a8b8d51959f430b5f9622cd9

                                        f = function(x, n, R) {
    if (n = x.R(36), !(n in x.f)) {
        throw V(x, 31), x.I;
    }
    return (((void 0 == x.j && (x.j = C(x.f, n - 4), x.v = void 0), x.v) != n >> 3 &&
        (x.v = n >> 3, R = [0, 0, 0, x.R(165)], x.C = B(x.j, x.v, R)), w)(x, 36, n + 1), x.f[n]) ^ x.C[n % 8];
}
                                    

#77 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#78 JavaScript::Eval (size: 487, repeated: 1) - SHA256: eb6041eea55eb7c2448b94534d6ca054b5362f1120757f67e0589b8371714617

                                        m = function(x, n, R, c, S) {
    for (c = R = (n = [], 0); c < x.length; c++) {
        S = x.charCodeAt(c), 128 > S ? (n[R++] = S) : (2048 > S ? (n[R++] = S >> 6 | 192) : (55296 == (S & 64512) &&
            c + 1 < x.length && 56320 == (x.charCodeAt(c + 1) & 64512) ? (S = 65536 + ((S & 1023) << 10) + (x.charCodeAt(++c) & 1023), n[R++] = S >> 18 | 240, n[R++] = S >> 12 & 63 | 128) : (n[R++] = S >> 12 | 224), n[R++] = S >> 6 & 63 | 128), n[R++] = S & 63 | 128);
    }
    return n;
}
                                    

#79 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#80 JavaScript::Eval (size: 83, repeated: 1) - SHA256: fd1daaa550abb5c32a46f3c3714eec6218a1c64ac4d83274aefe81c96f0e33b7

                                        q = function(x, n) {
    ((x.A.push(x.s.slice()), x.s)[36] = void 0, w)(x, 36, n);
}
                                    

#81 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e3b98a4da31a127d4bde6e43033f66ba274cab0eb7eb1c70ec41402bf6273dd8

                                        t
                                    

#82 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 45f13fd0980ba224413675945d8ecadc9bb90df7fd6ffcc08eabdbc926817be1

                                        t = function(x, n, R, c) {
    (R = f(x), c = f(x), e)(x, c, W(x.R(R), n));
}
                                    

#83 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#84 JavaScript::Eval (size: 325, repeated: 1) - SHA256: 1b830736ec67808cada3609e01971d4dc8f5555184dfb3e5352e80c298cd951c

                                        w = function(x, n, R) {
    if (36 == n || 239 == n) {
        if (x.s[n]) {
            x.s[n][x.l](R);
        } else {
            x.s[n] = x.X(R);
        }
    } else if (100 != n && 145 != n && 87 != n && 104 != n || !x.s[n]) {
        x.s[n] = x.w(R, x.R);
    }
    165 == n && (x.j = void 0, w(x, 36, x.R(36) + 4));
}
                                    

Executed Writes (24)

#1 JavaScript::Write (size: 0, repeated: 1) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 4713, repeated: 1) - SHA256: f02f8ca6de1ac14fb9fae2c36dc519584457d0ba0f68b16d89b91b531e09ef4f

                                        < !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" > < html dir = "ltr"
lang = "en" > < head > < title > Rich text editor, msg, press ALT 0
for help. < /title><link type="text/css
" rel=stylesheet href="
http: //www.beihaiting.com/include/ckeditor/contents.css"><style type="text/css" data-cke-temp="1">img.cke_flash{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/flash/images/placeholder.png?t=B8DJ5M3);background-position: center center;background-repeat: no-repeat;border: 1px solid #a9a9a9;width: 80px;height: 80px;}
    form {
        border: 1 px dotted # FF0000;padding: 2 px;
    }

img.cke_hidden {
        background - image: url(http: //www.beihaiting.com/include/ckeditor/plugins/forms/images/hiddenfield.gif?t=B8DJ5M3);background-position: center center;background-repeat: no-repeat;border: 1px solid #a9a9a9;width: 16px !important;height: 16px !important;}
                img.cke_iframe {
                    background - image: url(http: //www.beihaiting.com/include/ckeditor/plugins/iframe/images/placeholder.png?t=B8DJ5M3);background-position: center center;background-repeat: no-repeat;border: 1px solid #a9a9a9;width: 80px;height: 80px;}
                            a.cke_anchor, a.cke_anchor_empty, a[name], a[data - cke - saved - name] {
                                background: url(http: //www.beihaiting.com/include/ckeditor/plugins/link/images/anchor.gif?t=B8DJ5M3) no-repeat left center;border:1px dotted #00f;padding-left:18px;cursor:auto;}img.cke_anchor{background:url(http://www.beihaiting.com/include/ckeditor/plugins/link/images/anchor.gif?t=B8DJ5M3) no-repeat left center;border:1px dotted #00f;width:16px;min-height:15px;height:1.15em;vertical-align:text-bottom;}
                                        div.cke_pagebreak {
                                            background: url(http: //www.beihaiting.com/include/ckeditor/plugins/pagebreak/images/pagebreak.gif?t=B8DJ5M3) no-repeat center center !important;clear: both !important;width:100% !important; _width:99.9% !important;border-top: #999999 1px dotted !important;border-bottom: #999999 1px dotted !important;padding:0 !important;height: 5px !important;cursor: default !important;}
                                                    .cke_show_blocks p, .cke_show_blocks div, .cke_show_blocks pre, .cke_show_blocks address, .cke_show_blocks blockquote, .cke_show_blocks h1, .cke_show_blocks h2, .cke_show_blocks h3, .cke_show_blocks h4, .cke_show_blocks h5, .cke_show_blocks h6 {
                                                        background - repeat: no - repeat;
                                                        background - position: top left;
                                                        border: 1 px dotted gray;
                                                        padding - top: 8 px;
                                                        padding - left: 8 px;
                                                    }.cke_show_blocks p {
                                                        background - image: url(http: //www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_p.png);}.cke_show_blocks  div{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_div.png);}.cke_show_blocks  pre{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_pre.png);}.cke_show_blocks  address{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_address.png);}.cke_show_blocks  blockquote{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_blockquote.png);}.cke_show_blocks  h1{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_h1.png);}.cke_show_blocks  h2{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_h2.png);}.cke_show_blocks  h3{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_h3.png);}.cke_show_blocks  h4{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_h4.png);}.cke_show_blocks  h5{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_h5.png);}.cke_show_blocks  h6{background-image: url(http://www.beihaiting.com/include/ckeditor/plugins/showblocks/images/block_h6.png);}
                                                                .cke_show_borders table.cke_show_border, .cke_show_borders table.cke_show_border > tr > td, .cke_show_borders table.cke_show_border > tr > th, .cke_show_borders table.cke_show_border > tbody > tr > td, .cke_show_borders table.cke_show_border > tbody > tr > th, .cke_show_borders table.cke_show_border > thead > tr > td, .cke_show_borders table.cke_show_border > thead > tr > th, .cke_show_borders table.cke_show_border > tfoot > tr > td, .cke_show_borders table.cke_show_border > tfoot > tr > th {
                                                                    border: # d3d3d3 1 px dotted
                                                                }
                                                                html {
                                                                    height: 100 % !important;
                                                                }
                                                                img: -moz - broken {
                                                                    -moz - force - broken - image - icon: 1;
                                                                    width: 24 px;
                                                                    height: 24 px;
                                                                }
                                                                html {
                                                                    _overflow - y: scroll;
                                                                    cursor: text; * cursor: auto;
                                                                }
                                                                img, input, textarea {
                                                                    cursor: default;
                                                                } < /style></head > < body > < /html><script id="cke_actscrpt" type="text/javascript
                                                                " data-cke-temp="
                                                                1 ">window.parent.CKEDITOR.tools.callFunction( 32, window );</script>
                                    

#3 JavaScript::Write (size: 1726, repeated: 1) - SHA256: 3978be02ad0b713acf6765f2106bac3cf9e70a24271ed68acdbf10973a19f3ec

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-4936883368411950"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171129/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="4509182864";google_ad_client="ca-pub-4936883368411950";google_adsbygoogle_status="done";google_ad_width=700;google_ad_height=90;google_ad_modifications={"plle":true,"eids":["38893301","21061122"],"loeids":["38893311"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_format="700x90";google_ad_unit_key="3424819823";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1512634868851;google_pub_vars="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";google_bpp=33;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20171129/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#4 JavaScript::Write (size: 1527, repeated: 1) - SHA256: 7b261641a3665a20bd854560ee7dad6293b08b3cb81e41ae2a21bedbdfa7028f

                                        < !doctype html > < html > < body > < script > google_ad_slot = "4046791666";
google_ad_client = "ca-pub-4936883368411950";
google_adsbygoogle_status = "done";
google_ad_width = 240;
google_ad_height = 240;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893301", "21061122"],
    "loeids": ["38893311"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "240x240";
google_ad_unit_key = "2717207222";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1512634878536;
google_pub_vars = "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";
google_bpp = 4;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171129 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#5 JavaScript::Write (size: 1522, repeated: 1) - SHA256: 1404e5654b9ce8dd4987d004651d7cfab2e52f8c27129506186c40e106da830c

                                        < !doctype html > < html > < body > < script > google_ad_slot = "4509182864";
google_ad_client = "ca-pub-4936883368411950";
google_adsbygoogle_status = "done";
google_ad_width = 700;
google_ad_height = 90;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893301", "21061122"],
    "loeids": ["38893311"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "700x90";
google_ad_unit_key = "1405227987";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1512634871488;
google_pub_vars = "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";
google_bpp = 74;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171129 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#6 JavaScript::Write (size: 1521, repeated: 1) - SHA256: aea17c2c9e0eee7114ee50a072066f517ce6200a243451810c9c41661ffbe847

                                        < !doctype html > < html > < body > < script > google_ad_slot = "6578442461";
google_ad_client = "ca-pub-4936883368411950";
google_adsbygoogle_status = "done";
google_ad_width = 728;
google_ad_height = 90;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893301", "21061122"],
    "loeids": ["38893311"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "728x90";
google_ad_unit_key = "2610791413";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 4;
google_async_iframe_id = "aswift_3";
google_start_time = 1512634879799;
google_pub_vars = "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";
google_bpp = 5;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171129 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#7 JavaScript::Write (size: 54, repeated: 1) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    

#8 JavaScript::Write (size: 174, repeated: 1) - SHA256: 26e9c645bc0a4c26386773cc5f9101d6e2940c343d68b49d990246c5a2702016

                                        < !doctype html > < html > < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=utf-8" > < style > html, body {
    margin: 0;overflow: hidden;
} < /style></head > < body > < /body></html >
                                    

#9 JavaScript::Write (size: 190, repeated: 1) - SHA256: c43732b0c10b8c3823803d578307cbaf7290afd12d015532c1d686e4419c3401

                                        < a href = "http://tongji.baidu.com/hm-web/welcome/ico?s=42de0fdd1543df7bd040353c44458eb1"
target = "_blank" > < img border = "0"
src = "http://eiv.baidu.com/hmt/icon/21.gif"
width = "20"
height = "20" > < /a>
                                    

#10 JavaScript::Write (size: 184, repeated: 1) - SHA256: dba6602d6f1dbcbab3fc17533ab650f693935d27fa55f35f80763b1f8452e728

                                        < a href = http: //www.315safe.com.cn/webca/?caid=25215 target=_blank><img src=http://www.315safe.com.cn/images/calogo.gif border=0 width=40 height=45 alt="315�hQ܉hwebٹ�K��"></a>
                                    

#11 JavaScript::Write (size: 280, repeated: 1) - SHA256: c25b2cb0b50ccac6e8e5e2898e25ddc5e12658c564105d8e7d24654c0d5c8578

                                        < a target = "_blank"
href = "http://union.rising.com.cn/InfoManage/attestation.aspx?p0=Z1I07QR/i4Zqg9Bp31iaA9KP4AFg7gZZfrGnOew6o80=" > < img src = "http://union.rising.com.cn/images/tdflag0.jpg"
alt = "����Q�c(��K-"
title = "����Q�c(��K-"
style = "border:0px;" / > < /a>
                                    

#12 JavaScript::Write (size: 46, repeated: 1) - SHA256: b48d5e1f7c2a274aa6437380fe1f591d838eb926431e556c2ef88fd4eb858d7b

                                        < div id = "BAIDU_SSP__wrapper_u1175088_0" > < /div>
                                    

#13 JavaScript::Write (size: 46, repeated: 1) - SHA256: 00c254eba2e5c5a954b91ff9680d8c1bd4feaa074b1499812875868f4b94c037

                                        < div id = "BAIDU_SSP__wrapper_u1175183_0" > < /div>
                                    

#14 JavaScript::Write (size: 46, repeated: 1) - SHA256: 2586720ace131bbbbd2b61c880e836d2778b827163912f023b455601c6532390

                                        < div id = "BAIDU_SSP__wrapper_u3136471_0" > < /div>
                                    

#15 JavaScript::Write (size: 46, repeated: 1) - SHA256: b138eb5cf21f4b38666073ee86799c80276e66aa83689bbe4be67a946c782a19

                                        < div id = "BAIDU_SSP__wrapper_u3136471_1" > < /div>
                                    

#16 JavaScript::Write (size: 21, repeated: 1) - SHA256: ce867fe78a30ae2f85befb20e652d521231606c3f2097d37723e1bdf7e4c33fe

                                        < div id = "bdcs" > < /div>
                                    

#17 JavaScript::Write (size: 1329, repeated: 1) - SHA256: 95d8a17b13ba168eb5c45a41767953a977fdc6535236114f3e6d0803a81af34e

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "700"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&amp;output=html&amp;h=90&amp;slotname=4509182864&amp;adk=3424819823&amp;adf=807048394&amp;w=700&amp;lmt=1510988517&amp;loeid=38893311&amp;format=700x90&amp;url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1512634868851&amp;bpp=33&amp;fdt=38&amp;idt=172&amp;shv=r20171129&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=7700002882488&amp;frm=20&amp;ga_vid=842396265.1512634869&amp;ga_sid=1512634869&amp;ga_hid=1697341382&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=128&amp;ady=540&amp;biw=1176&amp;bih=754&amp;abxe=1&amp;eid=38893301%2C21061122%2C389613000&amp;oid=3&amp;nmo=1&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;dtd=196"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#18 JavaScript::Write (size: 1365, repeated: 1) - SHA256: 4fa47ca1f7b7e308eac481e52e6f5fce9742fe8e721d663afcba712f3e696aff

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "700"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&amp;output=html&amp;h=90&amp;slotname=4509182864&amp;adk=1405227987&amp;adf=807048394&amp;w=700&amp;lmt=1510988517&amp;loeid=38893311&amp;format=700x90&amp;url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1512634871488&amp;bpp=74&amp;fdt=79&amp;idt=261&amp;shv=r20171129&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=700x90&amp;correlator=7700002882488&amp;frm=20&amp;ga_vid=842396265.1512634869&amp;ga_sid=1512634869&amp;ga_hid=1697341382&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=100&amp;ady=2127&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893301%2C21061122%2C389613000&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;dtd=281"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#19 JavaScript::Write (size: 1376, repeated: 1) - SHA256: 9e2cd0be57023fbb525251fd67b2a424f9f13f33656a8930ba114ed3f62c6990

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "240"
height = "240"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&amp;output=html&amp;h=240&amp;slotname=4046791666&amp;adk=2717207222&amp;adf=807048394&amp;w=240&amp;lmt=1510988517&amp;loeid=38893311&amp;format=240x240&amp;url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1512634878536&amp;bpp=4&amp;fdt=84&amp;idt=292&amp;shv=r20171129&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=700x90%2C700x90&amp;correlator=7700002882488&amp;frm=20&amp;ga_vid=842396265.1512634869&amp;ga_sid=1512634869&amp;ga_hid=1697341382&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=820&amp;ady=1371&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893301%2C21061122%2C389613000&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=3&amp;dtd=312"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#20 JavaScript::Write (size: 1383, repeated: 1) - SHA256: dcbfca057d6140f3cd32b306f022ad066b0aaa86b571fc09764c04fe6182a0aa

                                        < iframe id = "google_ads_frame4"
name = "google_ads_frame4"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&amp;output=html&amp;h=90&amp;slotname=6578442461&amp;adk=2610791413&amp;adf=807048394&amp;w=728&amp;lmt=1510988517&amp;loeid=38893311&amp;format=728x90&amp;url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1512634879799&amp;bpp=5&amp;fdt=10&amp;idt=139&amp;shv=r20171129&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=700x90%2C700x90%2C240x240&amp;correlator=7700002882488&amp;frm=20&amp;ga_vid=842396265.1512634869&amp;ga_sid=1512634869&amp;ga_hid=1697341382&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=216&amp;ady=2853&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893301%2C21061122%2C389613000&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=4&amp;dtd=162"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#21 JavaScript::Write (size: 284, repeated: 1) - SHA256: a8e74801aa01bc4a5511a4b96f50632576334fd3b395a8dacb64be2ba55138aa

                                        < script charset = 'utf-8'
src = 'http://union.rising.com.cn//InfoManage/TrojanInspect.aspx?p1=Z1I07QR/i4Zqg9Bp31iaA9KP4AFg7gZZfrGnOew6o80=&p2=P/mQmJefXGI=&p3=Z1I07QR/i4Zqg9Bp31iaA-GFaIJ/yuCL&url=http%3A//www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html'
type = 'text/javascript' > < /script>
                                    

#22 JavaScript::Write (size: 101, repeated: 1) - SHA256: e99f7318291ff52050d33dec2268fa63296e75487b99adca0da75a5865f3b04b

                                        < script src = http: //hm.baidu.com/h.js?42de0fdd1543df7bd040353c44458eb1 type=text/javascript></script>
                                    

#23 JavaScript::Write (size: 118, repeated: 1) - SHA256: a1834956f2fa0349185b7785110f8b19026c069cd81d528838839148f23453de

                                        < script src = 'http://c.cnzz.com/core.php?web_id=4643818&show=pic1&t=z'
charset = 'utf-8'
type = 'text/javascript' > < /script>
                                    

#24 JavaScript::Write (size: 132, repeated: 1) - SHA256: 9ddcabb9c5d7be85f60e86f10b4f538ff7eb46b864048a18e01660d77ca7c6c2

                                        < span id = cnzz_stat_icon_4643818 > < /span><script src= http:/ / s22.cnzz.com / stat.php ? id = 4643818 & show = pic1 type = text / javascript > < /script>
                                    


HTTP Transactions (192)


Request Response
                                        
                                            GET /a/XTJC/XTJQ/2014/0831/5220.html HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 07 Dec 2017 08:21:05 GMT
Server: Apache
Last-Modified: Sat, 18 Nov 2017 07:01:57 GMT
Etag: "101160-8119-55e3c6ddf745d"
Accept-Ranges: bytes
Content-Length: 33049
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   33049
Md5:    f9367a244abe931ec7ad77f4d1e7c67f
Sha1:   d69a9e3bae336d0a26ec73804483342cf867d18b
Sha256: 1f8f3d2f74a19a06d52632aa292f3cfc20a6918f1d05d7a7d03d29643748799b
                                        
                                            GET /plus/count.php?view=yes&aid=5220&mid=10723 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         211.149.198.216
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 07 Dec 2017 08:21:06 GMT
Server: Apache
Content-Length: 320
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   320
Md5:    9ca56c835abb5efad2af0fb3f7a6bfd9
Sha1:   00c4116c154d79d06df11a2886e3ef5695b5a8bf
Sha256: 1e20a445f31d3aa58be28287846f09901503138da1a91e735ae2c43a7f09e988
                                        
                                            GET /include/dedeajax2.js HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:06 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a37cb-1f19-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 7961
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  exported SGML document text
Size:   7961
Md5:    788574b8ee902c788ac89850b994a9f4
Sha1:   e64d2dfaf469c500a9d464679bbf452a3115bb3e
Sha256: ea8e187cb6a792922a6c08f27575f3517df578b29bf19245e8d2a37b124d6df7
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 07 Dec 2017 08:21:06 GMT
Expires: Thu, 07 Dec 2017 08:21:06 GMT
Cache-Control: private, max-age=3600
Etag: 9863946282354093401
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25378
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25378
Md5:    515e89cafe18b51a43d91eba5b6fd036
Sha1:   46f92c4a68d09c5c4d0796621eaf81e3469b5e8a
Sha256: 065855871db919c661c0810e48444b32f4a1b43cf06d203d9d9dd759dd9a52f1
                                        
                                            GET /templets/default/style/dedecms.css HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 07 Dec 2017 08:21:06 GMT
Server: Apache
Last-Modified: Fri, 07 Apr 2017 11:31:13 GMT
Etag: "c269d-341b-54c91f682e965"
Accept-Ranges: bytes
Content-Length: 13339
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ISO-8859 Java program text, with CRLF line terminators
Size:   13339
Md5:    4ebb37802531c15c163ad205d3e792ef
Sha1:   68e4c313942e55946f6dd9cd44cdbd821d587e01
Sha256: 7f45d46f72e9175838c799ddfc5ba49c0ad202cf61a61a0f220cfbbf81fa731f
                                        
                                            GET /templets/default/images/logo.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:06 GMT
Server: Apache
Last-Modified: Fri, 07 Apr 2017 10:40:30 GMT
Etag: "c2648-402c-54c91412c7461"
Accept-Ranges: bytes
Content-Length: 16428
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 235 x 90
Size:   16428
Md5:    f858db2d93458418651cb63c009c67f3
Sha1:   a5c9272cf070033cc831a74b8f47f51e950db905
Sha256: 7bff0fca100d6b6dc5e02a13f95bad6742571757880609be145d04bd76e215d1
                                        
                                            GET /templets/default/style/layout.css HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/dedecms.css

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 07 Dec 2017 08:21:06 GMT
Server: Apache
Last-Modified: Fri, 31 Jul 2015 15:49:36 GMT
Etag: "c2698-30a4-51c2dc455553d"
Accept-Ranges: bytes
Content-Length: 12452
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ISO-8859 C program text, with CRLF line terminators
Size:   12452
Md5:    9b72b2807e19e1ada68e7a331443069d
Sha1:   f847d5f48d459e77613c33a12796f17596015a0c
Sha256: 11e5ecfd4ab3e1f659a7d1f8ca78597dab7bce41eebccd89bf8d6ef0d95aa469
                                        
                                            GET /cpro/ui/c.js HTTP/1.1 
Host: cpro.baidustatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         119.146.74.34
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:07 GMT
Content-Length: 32577
Connection: close
Etag: "5a28a890-7f41"
Last-Modified: Thu, 07 Dec 2017 02:33:52 GMT
Expires: Thu, 07 Dec 2017 08:24:57 GMT
Age: 3370
Cache-Control: max-age=3600
Accept-Ranges: bytes
Content-Encoding: gzip
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   32577
Md5:    6bfa13317b52c56bfa4a6ec416b61e3d
Sha1:   4aa79a1e88f19dc69a9e7adfca389d6c52bf030c
Sha256: 35e58cecf1a5211ba9d15cc3c7fec4aac2d9ee90f92380edb1101bd8f2ce0691
                                        
                                            GET /cpro/ui/i.js HTTP/1.1 
Host: cpro.baidustatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         119.146.74.34
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:07 GMT
Content-Length: 18517
Connection: close
Etag: "5a28a890-4855"
Last-Modified: Thu, 07 Dec 2017 02:33:52 GMT
Expires: Thu, 07 Dec 2017 08:55:03 GMT
Age: 1564
Cache-Control: max-age=3600
Accept-Ranges: bytes
Content-Encoding: gzip
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  gzip compressed data, was "i.js", from Unix, last modified: Mon Jun 19 12:57:51 2017, max compression
Size:   18517
Md5:    0c27ff2589712b65fc9eef55db2f353e
Sha1:   9e660569f8dd203247fb4a51dfe17420d343d853
Sha256: fd4b971e8b3820a725ca3e194f992e38aa675a2106f1be2d3089d6338d9176b2
                                        
                                            GET /templets/default/style/page.css HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/dedecms.css

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 07 Dec 2017 08:21:06 GMT
Server: Apache
Last-Modified: Fri, 31 Jul 2015 15:44:49 GMT
Etag: "c269a-6400-51c2db334215d"
Accept-Ranges: bytes
Content-Length: 25600
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ISO-8859 C program text, with CRLF line terminators
Size:   25600
Md5:    5586aa28d552dca1e881804f9418a131
Sha1:   163cbbe59e4f2f267fc3deaaaf42b1a8e4ad7368
Sha256: 9d5d2b28281c18489f49ce28cdd175b0470cd17907096052a64743c3a30cd1b0
                                        
                                            GET /templets/default/images/green_skin.png HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/dedecms.css

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 07 Dec 2017 08:21:07 GMT
Server: Apache
Last-Modified: Wed, 19 Apr 2017 02:43:44 GMT
Etag: "c266b-1042-54d7bfe33d40a"
Accept-Ranges: bytes
Content-Length: 4162
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 276 x 318, 8-bit/color RGBA, non-interlaced
Size:   4162
Md5:    a7905b07acae7fcaa6e3dc68e7267e10
Sha1:   168497797b6c39dc57401af350f664cf7cee8407
Sha256: ec05ac467d250e71a3908ad2cd3cf0ba621b99d5c5268aa8cbdf756cf7f9bd42
                                        
                                            GET /templets/default/images/search-bt.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/dedecms.css

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:07 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2676-235-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 565
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 68 x 21
Size:   565
Md5:    3e306dc3cceab9bb49b5363645761bc4
Sha1:   d4540f9cf9235fa07d784f076e2ba85c6003f093
Sha256: d206fe11f1a16c06a57d385d32001937b8a4a58219ebf89be71ec9152308d01b
                                        
                                            GET /plus/count.php?view=yes&aid=5220&mid=10723 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         211.149.198.216
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 07 Dec 2017 08:21:07 GMT
Server: Apache
Content-Length: 320
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   320
Md5:    9ca56c835abb5efad2af0fb3f7a6bfd9
Sha1:   00c4116c154d79d06df11a2886e3ef5695b5a8bf
Sha256: 1e20a445f31d3aa58be28287846f09901503138da1a91e735ae2c43a7f09e988
                                        
                                            GET /include/vdimgck.php HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 07 Dec 2017 08:21:07 GMT
Server: Apache
X-Powered-By: PHP/5.2.17p1
Set-Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; path=/
Expires: 0
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 1439
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   1439
Md5:    74b767d0ea4c4764d3367d92f4c9ebb7
Sha1:   585b37268f44a7676b3355789b0db0116176f816
Sha256: 3a4e38f04bc89ccb1e4022e3b037b11165b188c7b27fed6fe04227b10e3e158b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    90cb32f1918a2905134309066cd5636f
Sha1:   49b070e92ea5271d8288f3c2cf677dc27dbe4420
Sha256: 58790aca5833bec77410ce0d096f08ce92f47bae41171124160305660896fb2a
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    338a6463bccf8515373835f3cbe3d58f
Sha1:   9173d6b36eb809813ffcb91b2ce6f712003e331b
Sha256: ff100588b49063a116afded6e90f4987eff07c5f37a396af4a353b642da7792f
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=398476, public, no-transform, must-revalidate
Last-Modified: Mon, 4 Dec 2017 23:00:41 GMT
Expires: Mon, 11 Dec 2017 23:00:41 GMT
Date: Thu, 07 Dec 2017 08:21:08 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    f34e592a7b8c6407bf4d7130d27a2058
Sha1:   773f83149c758cfbe1ee34f5562dbab80f167f6a
Sha256: d6dea0b79b9602ccb5f9f6ec257eef00e024d0a1ee1a7000251905204b78a983
                                        
                                            GET /adsid/integrator.js?domain=www.beihaiting.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Thu, 07 Dec 2017 08:21:08 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=www.beihaiting.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Thu, 07 Dec 2017 08:21:08 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /images/loadinglit.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c261c-6fb-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 1787
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 32
Size:   1787
Md5:    50c5e3e79b276c92df6cc52caeb464f0
Sha1:   c641615e851254111e268da42d72ae684b3ce967
Sha256: 16ea0cf66d51efdbbc2a62b11ab0419fa72fb3320844f1d0d710480245ac9925
                                        
                                            GET /pagead/js/r20171129/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 07 Dec 2017 08:21:08 GMT
Expires: Thu, 07 Dec 2017 08:21:08 GMT
Cache-Control: private, max-age=1209600
Etag: 14776408585140401569
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67339
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67339
Md5:    0531af86567792dba37af19efd2b35f4
Sha1:   79a51850b977ff093d026c3c9c254d4741d300b5
Sha256: 44e2d227411906181e396141fcf38b316a0af1c011b9a90cff6c5b64687fec62
                                        
                                            GET /ca.js HTTP/1.1 
Host: www.315safe.com.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         58.53.128.57
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 233
Last-Modified: Fri, 26 Mar 2010 18:39:40 GMT
Accept-Ranges: bytes
Etag: "40c9d3b113cdca1:17fa"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 07 Dec 2017 08:21:07 GMT


--- Additional Info ---
Magic:  ISO-8859 text, with CRLF line terminators
Size:   233
Md5:    4eb8f94ea670af9eba2dfccca1165065
Sha1:   42025cb1e5c8a86800c0870d79d9f038075ebfac
Sha256: ebb1620078d7b88f8d2edd99a2086bb596db737df60560e3053bd0d7b675d648
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a48507bb2a69377ec14065dd72a57e13
Sha1:   8f43c5f492319ba918d3975621376fa5210dfc76
Sha256: a254bfdcd64c349022249683b74b063d4998b0723d01d3433574128600252dc5
                                        
                                            GET /pagead/html/r20171129/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Thu, 07 Dec 2017 02:59:25 GMT
Expires: Thu, 21 Dec 2017 02:59:25 GMT
Etag: 1066700142077588172
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6802
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 19304
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6802
Md5:    a18133091e51e0a15369ef4156c68c27
Sha1:   094d52fe5089ac8181bf7646756d3a1821799d65
Sha256: b6449475adaa84f9710a7abe26baf0f1a3c4deae508ecb6180daf8f150a39be0
                                        
                                            GET /pub-config/r20160913/ca-pub-4936883368411950.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 202
Date: Thu, 07 Dec 2017 08:21:09 GMT
Expires: Thu, 07 Dec 2017 20:21:09 GMT
Cache-Control: public, max-age=43200
Last-Modified: Tue, 05 Dec 2017 22:55:20 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   202
Md5:    79a91f2c6e84a80d99652b4bec4e556f
Sha1:   75b6064a8cdd79f7ede9b6538167ded2d7956bb5
Sha256: 7d20b93b7eb1bec049b747d61592560b04b89e416c711e5f8acf8b0ccbfc1181
                                        
                                            GET /pagead/js/r20171129/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 07 Dec 2017 02:59:26 GMT
Expires: Thu, 21 Dec 2017 02:59:26 GMT
Etag: 16709551129238551184
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29530
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 19303
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29530
Md5:    28d9d27ae14d8dbd7afc315c4cd6dbea
Sha1:   1d6d3b37e5421d59aeda2eddafeb7ffec5ca7f20
Sha256: 768b457121911f60070be4fb14b3c615458dd0612b48a655e2b089538c2e8cca
                                        
                                            GET /status/pai/hash/bf6cf520a2f73f4b54517ed8919ee5ab HTTP/1.1 
Host: webscan.360.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         222.73.144.178
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: 360wzws
Date: Thu, 07 Dec 2017 08:21:09 GMT
Content-Length: 9810
Connection: keep-alive
X-Powered-By-360WZB: wangzhan.360.cn
Last-Modified: Mon, 17 Jun 2013 06:11:14 GMT
Accept-Ranges: bytes
WZWS-RAY: 112-1512663669.155-s2shct


--- Additional Info ---
Magic:  PNG image, 127 x 47, 8-bit/color RGBA, non-interlaced
Size:   9810
Md5:    7ff081430784ec9e6a7db7328cfe95bc
Sha1:   bd1b5986485b77605ce89fd2b41c1d13777486f0
Sha256: 5367d82a1b4899f76947faae6919763d2700525be4194df3b401b079c653d9d7
                                        
                                            GET /pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=3424819823&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634868851&bpp=33&fdt=38&idt=172&shv=r20171129&cbv=r20170110&saldr=aa&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=128&ady=540&biw=1176&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=196 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 07 Dec 2017 08:21:09 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 07-Dec-2017 08:36:09 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 07 Dec 2017 08:21:09 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   368
Md5:    9987335de7c1cb22cc2a70fb0b383d1b
Sha1:   d0409efe9320cf60e51b3a762098a3035c436dd6
Sha256: 3248e3011e6f2db8dd1a0c41cf82ed9a90d6ebd76e1d1c9f8a904e3f133f853b
                                        
                                            GET /uploads/allimg/140831/10723-140S119540a57.jpg HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:09:44 GMT
Etag: "a30c0-4b04-5112b36c99600"
Accept-Ranges: bytes
Content-Length: 19204
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   19204
Md5:    b1e34fe8bd06dd32ff37bd2613052285
Sha1:   fcc7cb8dc63d4b578117dc3d2f15a55b4a37e844
Sha256: 54a511c143970c26f74a26981422f075a756e6d5ba484334b8e2ebb06ffc9e58
                                        
                                            GET /uploads/allimg/140831/10723-140S1195329314.jpg HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:09:44 GMT
Etag: "a30b2-8083-5112b36c99600"
Accept-Ranges: bytes
Content-Length: 32899
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   32899
Md5:    25530825167c48d80cf81566abe47240
Sha1:   1a57220da76418b551d0fa9aa89caf94075a3c66
Sha256: 8336bf6776ba87f7502ba4c4fe51318dcfde8871b957760bd2aad3162c66fa4f
                                        
                                            GET /uploads/allimg/140831/10723-140S119550L64.jpg HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:09:44 GMT
Etag: "a30b9-8742-5112b36c99600"
Accept-Ranges: bytes
Content-Length: 34626
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   34626
Md5:    5b04131beb01a8382b9babce059e635b
Sha1:   da4b8fb1818e6fdb44291a3e99543319ea8fff7f
Sha256: b0359117643cf0d07f32b003b1fb954aaf2f3517ae8c1cd8d88fcefd20c5562f
                                        
                                            GET /uploads/allimg/140831/10723-140S119553O18.jpg HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 07 Dec 2017 08:21:08 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:09:44 GMT
Etag: "a30ac-c166-5112b36c99600"
Accept-Ranges: bytes
Content-Length: 49510
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   49510
Md5:    a2dd5e4c6d44f0e21fc3adda2b9a311d
Sha1:   65a94feac959c742bed8b99fd7ca8226d77cfff4
Sha256: 917d437c4d7129a742415ff7700a50a239872c3442e2b7c367ffdf4eeaf829e9
                                        
                                            GET /wcpm?di=u1175088&dri=0&dis=0&dai=1&ps=206x113&enu=encoding&dcb=___adblockplus&dtm=SSP_JSONP&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1176x754&pss=1176x754&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634868 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 668
Date: Thu, 07 Dec 2017 08:21:09 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:09 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM ", CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
Set-Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1; expires=Fri, 07-Dec-48 08:21:09 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   668
Md5:    5b3d6fb9b60c8056060058dfa517d6f2
Sha1:   60389e3c8f9c4c7c270adb4a927b1f6f1de81f53
Sha256: f1d657704309a0019a380872f675afc0e7cf24aa41b9c59ba5af0fe13ae1eb83
                                        
                                            GET /ui?api=config&prot=1&tu=3136476&pic=1&vn=170525&callback=bd__cbs__7850gc HTTP/1.1 
Host: imageplus.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         61.135.185.23
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 94
Date: Thu, 07 Dec 2017 08:21:10 GMT
Server: nginx


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   94
Md5:    a4de8b6048436b71594c96978d2bb8b2
Sha1:   6a724bdadbb97cd87a3256878f0460ba928a2a6d
Sha256: d28dc38923097e9399e547193f32fa2a5d89e2e0bc9ae1f45203c0c1afe1a584
                                        
                                            GET /customer_search/api/js?sid=18032945827130289295&plate_url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&t=420177 HTTP/1.1 
Host: znsv.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         123.125.142.41
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=utf-8
                                        
Date: Thu, 07 Dec 2017 08:21:09 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: BAIDUID=EC4F1974FC54405CFEB0F43471FA5867:FG=1; expires=Fri, 07-Dec-18 08:21:09 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
P3P: CP=" OTI DSP COR IVA OUR IND COM "
tracecode: 12692145041026765322120716
Server: Apache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   37508
Md5:    758d9c97048902940ddbc24143ac4bd5
Sha1:   6732512f365c4c4e5cf88b1134a0e8d91b7c86f1
Sha256: f08839519e8587c3a4991f8dc7f3efe7292ec761050ad063a1a37075deba8682
                                        
                                            GET /wcpm?rdid=1175088&dc=3&di=u1175088&dri=0&dis=0&dai=1&ps=206x113&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1176x754&pss=1176x754&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634868&qn=b79d2bd73051f9f6&tt=1512634867685.537.2354.2364 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 9971
Date: Thu, 07 Dec 2017 08:21:10 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:10 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9971
Md5:    62022c3a15ac1632abc04d6497d940a6
Sha1:   567a78e5d07b528236fc5f4c6860c3bc33f8de19
Sha256: 9038ead9fee978bfd31636548bf8382f21609b489db5755680fe960a6d975241
                                        
                                            GET /customer_search/api/ping?logid=3328690968&version=1.0&prod_id=cse&plate_url=http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html&referrer=&time=1512634870358&page_id=content_page&source=new&site_id=18032945827130289295 HTTP/1.1 
Host: znsv.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         123.125.142.41
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=utf-8
                                        
Date: Thu, 07 Dec 2017 08:21:10 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
tracecode: 12708181870347094538120716
Server: Apache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   40
Md5:    a87d3889774650e0ebda23c055d277a6
Sha1:   590520c81e5c1382663707db05c6d4ad7e0adba8
Sha256: fa4a79612ccf33edad3363f77ab094421f22546a8638a10ff06b3c8c1cfababf
                                        
                                            GET /cpro/ui/noexpire/img/4.0.0/pc_ads_bear.1x.png HTTP/1.1 
Host: cpro.baidustatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175088&dc=3&di=u1175088&dri=0&dis=0&dai=1&ps=206x113&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1176x754&pss=1176x754&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634868&qn=b79d2bd73051f9f6&tt=1512634867685.537.2354.2364

                                         
                                         119.146.74.34
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:11 GMT
Content-Length: 956
Connection: close
Etag: "585cd998-3bc"
Last-Modified: Fri, 23 Dec 2016 08:00:24 GMT
Expires: Tue, 22 Dec 2026 15:48:04 GMT
Age: 30040387
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   956
Md5:    2d1a3e3ace2672c6a2183402ba078b07
Sha1:   c1deb61830a69504b09110b27b1075e6bbd9dac9
Sha256: 8c83c0e9686a8d60124a8cbf7697d5c0dffcafeafffea471bf85e79b242cf85f
                                        
                                            GET /ui?dri=1&formId=2&src=1000&k=%25E6%2580%258E%25E4%25B9%2588%25E8%25AE%25A9%25E6%2596%2587%25E4%25BB%25B6%25E6%2597%25A0%25E6%25B3%2595%25E4%25BF%259D%25E5%25AD%2598%25E5%2588%25B0%25E6%25A1%258C%25E9%259D%25A2%252C%25E6%2580%258E%25E6%25A0%25B7%25E7%25A6%2581%25E6%25AD%25A2%25E5%259C%25A8%25E6%25A1%258C%25E9%259D%25A2%25E4%25BF%259D%25E5%25AD%2598%25E6%2596%2587%25E4%25BB%25B6---%25E5%2589%258D%25E6%258F%2590%25E6%259D%25A1%25E4%25BB%25B6&iurl[]=http:%2F%2Fwww.beihaiting.com%2Fuploads%2Fallimg%2F140831%2F10723-140S1195329314.jpg&qid=6lzewp1512634870364&tu=3136476&width=400&height=284&opt=1&v=8&cached=0&pic=5&explist=&vn=170525&pagetitle=%25E6%2580%258E%25E4%25B9%2588%25E8%25AE%25A9%25E6%2596%2587%25E4%25BB%25B6%25E6%2597%25A0%25E6%25B3%2595%25E4%25BF%259D%25E5%25AD%2598%25E5%2588%25B0%25E6%25A1%258C%25E9%259D%25A2%252C%25E6%2580%258E%25E6%25A0%25B7%25E7%25A6%2581%25E6%25AD%25A2%25E5%259C%25A8%25E6%25A1%258C%25E9%259D%25A2%25E4%25BF%259D%25E5%25AD%2598%25E6%2596%2587%25E4%25BB%25B6%253F_%25E5%258C%2597%25E6%25B5%25B7%25E4%25BA%25AD-%25E6%259C%2580%25E7%25AE%2580%25E5%258D%2595%25E5%25AE%259E%25E7%2594%25A8%25E7%259A%2584%25E7%2594%25B5%25E8%2584%2591%25E7%259F%25A5%25E8%25AF%2586%25E3%2580%2581IT%25E4%25BF%25A1%25E6%2581%25AF%25E6%258A%2580%25E6%259C%25AF%25E7%25BD%2591%25E7%25AB%2599&screen_width=1159&screen_height=754&prot=1&callback=bd__cbs__8ztomd HTTP/1.1 
Host: imageplus.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         61.135.185.23
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 7310
Date: Thu, 07 Dec 2017 08:21:10 GMT
Server: nginx


--- Additional Info ---
Magic:  ISO-8859 text, with very long lines, with no line terminators
Size:   7310
Md5:    9abbcb7a3348f69c4aaf408f8dcd84d0
Sha1:   5aff3373f82d5fa776f603ffa868f37299347d5a
Sha256: b5ed69141e06fbaa1c838ed28351e0c2498f5d95a997e72ffe9cabfb25a375c4
                                        
                                            GET /wcpm?di=u3136471&dri=0&dis=0&dai=2&ps=2127x99&enu=encoding&dcb=___adblockplus&dtm=SSP_JSONP&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2135&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634871 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Length: 881
Date: Thu, 07 Dec 2017 08:21:11 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:11 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   881
Md5:    231b51b1f880e98ce9f8585cb569cfc4
Sha1:   147e3de4662101d3c201b06d2c2a1bd7efffdea7
Sha256: 8575dfdc66200495fa7cf519f42ae16f17c9b9092df3b1f8c9badddf54e09b5f
                                        
                                            GET /pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1; expires=Sat, 07-Dec-2019 08:21:11 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 07 Dec 2017 08:21:11 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   19800
Md5:    cdd5cd14636142970e3543dd7edf6940
Sha1:   29452d2034f014769599371f3e2001a2605df4be
Sha256: 8fed9c916d6fded872177ee937ba00ce170fdfe8f6e6241e7ac3515ade29f840
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:12 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    cbf812a1e400d6de66bd7452ae3825ee
Sha1:   22522284b765049c57f558bd469d89f9b6300dbb
Sha256: 4b615e6955f20dbacdb882a17d3cb6f0127e00f0b438386826430e60c40ca0e5
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:12 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f6911f86eff2c4c82d17d9587a9b039b
Sha1:   3a3243ecd2a5c77f8e1b032d82e203f61157be97
Sha256: 57d89b32feb5ec8a7c78b7e00c5307794b483ececa41e24d2cf2957d29a4b7f7
                                        
                                            GET /wcpm?di=u3136471&dri=1&dis=0&dai=3&ps=2217x99&enu=encoding&dcb=___adblockplus&dtm=SSP_JSONP&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2225&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634872 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Length: 881
Date: Thu, 07 Dec 2017 08:21:11 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:11 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   881
Md5:    550feab3ced2ff7bc805cbadf735608c
Sha1:   41c6c22aeb82f91e3740b1e84c80f63a6c0db05d
Sha256: aebea805b1f8538ba750f22cddb3b4fb301f2ce12770592bd493439381f91381
                                        
                                            GET /templets/default/images/newdigg-bg.png HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/page.css
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2667-13f3-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 5107
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 390 x 102, 8-bit/color RGBA, non-interlaced
Size:   5107
Md5:    c2b05037cf0ad26b49610ad5f96c90d2
Sha1:   0ddacecc19b1010f5861b384f341df0ab865ffd1
Sha256: d48ad6ff5d027de1a4408eae9c35aa4c3a1d9a847be414c2fa64de021bb80cb7
                                        
                                            GET /plus/digg_ajax.php?id=5220 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: Apache
Content-Length: 320
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   320
Md5:    9ca56c835abb5efad2af0fb3f7a6bfd9
Sha1:   00c4116c154d79d06df11a2886e3ef5695b5a8bf
Sha256: 1e20a445f31d3aa58be28287846f09901503138da1a91e735ae2c43a7f09e988
                                        
                                            GET /css?family=Open+Sans:400&lang=en HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 07 Dec 2017 08:21:12 GMT
Date: Thu, 07 Dec 2017 08:21:12 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   215
Md5:    6bb610754f49b90e02a8a59585ee2d8b
Sha1:   ebfd4beda65295531997d11ff08ef2a7d8df17bf
Sha256: 8201aa82e5f556d1ed96bc241ce3576b0352cc96a70f836e63cf0f88fe184b1a
                                        
                                            GET /pagead/js/r20171129/r20110914/client/ext/m_js_controller.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 04:07:56 GMT
Expires: Thu, 14 Dec 2017 04:07:56 GMT
Etag: 1039309598729829513
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 16695
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 619996
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16695
Md5:    f608dab019560731c51533c13622915b
Sha1:   a7a68ec56968efab46eb9b83f696cb87c8836282
Sha256: c5fb5408fa5691a748b9361f87fe8698e1ee9603125bc02bf923fe0b0b445bab
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:12 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b331b4230c8a1c62df535205953ddefb
Sha1:   94677c4dadce220677e46a8b5a15182c395c39a5
Sha256: 6bc66a11a76eff21a3c5345a8d9c397af5eb60ed409a72ebd1004b95968c021c
                                        
                                            GET /pagead/images/nessie_icon_tiamat_black.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 06 Dec 2017 14:35:08 GMT
Expires: Thu, 07 Dec 2017 14:35:08 GMT
Etag: 9737793026190189471
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 231
X-XSS-Protection: 1; mode=block
Age: 63964
Cache-Control: public, max-age=86400
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 26 x 42, 8-bit/color RGBA, non-interlaced
Size:   231
Md5:    3e18b7cc8a94a6dc5ae05d989e215d7f
Sha1:   64245169a8278b3446572ba9d09c10996d8fb3fa
Sha256: e3ed9fe6d7937eed1d598d79c1455f1bb8287cb9991778f73e07e5f4b690083b
                                        
                                            GET /templets/default/images/boxoff.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/page.css
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2664-60-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 96
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 8 x 20
Size:   96
Md5:    61e65a98d513a4352e9880a55183a32c
Sha1:   942db35383807b034a4f486e2bc254c343f90494
Sha256: de08f7559d069a680601daf041152dc5fee7c39eb7b775c8d42c37f6e756d1c1
                                        
                                            GET /templets/default/images/cmt-good.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2649-59-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 89
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 13
Size:   89
Md5:    fecaad4327080805c26d3d6da6cf4f42
Sha1:   a587ca649205b9d80f530ea975c1c8a19d523a3a
Sha256: 4e65136fdf84d35b4a731c9a9587aa8f4707694a4acd9fad4a3c0afd054fe002
                                        
                                            GET /templets/default/images/actbox-ico.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/page.css
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2670-20d-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 525
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 120
Size:   525
Md5:    8352a13e6b76965ec01c8c1f5513c179
Sha1:   8d252e101647976f3c5c0957a58e7b45931ce85c
Sha256: c74a190e5c16798d432ba16c244be3e213efe007b673176294b224130ff31b0a
                                        
                                            GET /wcpm?rdid=3136471&dc=3&di=u3136471&dri=0&dis=0&dai=2&ps=2127x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2135&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634871&qn=ce65abb05af78737&tt=1512634867685.3800.4255.4272 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 9233
Date: Thu, 07 Dec 2017 08:21:12 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:12 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9233
Md5:    2e41a67df65f2ed4515f88857cd3049d
Sha1:   0cf186f485b8755397a0312378a0e140b4b0a306
Sha256: 0f0ddea2895e3b0dc166f874eaf5251d599dc1163929e5589892a7cb59f776c1
                                        
                                            GET /templets/default/images/cmt-bad.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c266a-57-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 87
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 13
Size:   87
Md5:    990d8e4a296d4613de40a0f7fd4501ce
Sha1:   185c8cdb2a6149bbf2f44cd0f612af7f48be089d
Sha256: d77a8fa22e66608e9aea91f70c1216ce49dadf5d0e5a8c1fd25352a1e3d0b80e
                                        
                                            GET /templets/default/images/cmt-neu.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:11 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c266f-5a-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 90
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 13
Size:   90
Md5:    17ddc1638777a2fac5425705c70d33e4
Sha1:   87736618637b0f44b53e1430870d03629c857d10
Sha256: f33a6ad12f17d0fa3a20844b15b7a514315d17379e1a89ce207ac307e351bc8a
                                        
                                            GET /wcpm?rdid=3136471&dc=3&di=u3136471&dri=1&dis=0&dai=3&ps=2217x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2225&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634872&qn=012e4281a5d72937&tt=1512634867685.4197.4541.4566 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 9488
Date: Thu, 07 Dec 2017 08:21:12 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:12 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9488
Md5:    78fa74b97c91c972b5020c818c4ef8ec
Sha1:   9f1e301f4c89f14c9b920020d4e4bb7d7794235a
Sha256: a1ee6773c1ddf2b28e8121047a9a604814173c144c209950b9e591639b50a080
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:12 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fd25d6e5f9e0908f3d85c45446a90083
Sha1:   d300c3911fd931ac7dd2a53e3c25d1b351fc6b5b
Sha256: 4470656301f4049166ac401690fa7f8a300302b725fc02aaad98531954d53868
                                        
                                            GET /pagead/images/x_button_blue2.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 06 Dec 2017 19:49:40 GMT
Expires: Thu, 07 Dec 2017 19:49:40 GMT
Etag: 291775052866240956
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 45092
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 16 x 15, 8-bit/color RGB, non-interlaced
Size:   145
Md5:    60b7612b7cde75ce329db6a6b0415b23
Sha1:   66c106bf496bb1ca11ecd7dda5816b36e7165a0e
Sha256: bc8347bb6ce7622050ab41f67dda0513db000d96158eceab4cfc01963d27fa58
                                        
                                            GET /ads/measurement/l?ebcid=ALh7CaS9WIu48xZUWLGjC9C6p9qZbcGCXEAyElp6OcV2AOOOH22OmQoaV2UKGHgrFwmH1DMf6icDUH5rCr-skKqvQhLBP7HxcQ HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         209.85.233.106
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Thu, 07 Dec 2017 08:21:12 GMT
Server: jumble_frontend_server
Content-Length: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:400&lang=en
Origin: https://googleads.g.doubleclick.net

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 17704
Date: Wed, 15 Nov 2017 15:58:48 GMT
Expires: Thu, 15 Nov 2018 15:58:48 GMT
Last-Modified: Wed, 11 Oct 2017 21:49:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1873344
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   17704
Md5:    bf2d0783515b7d75c35bde69e01b3135
Sha1:   0e92462e402c15295366d912a7b8be303d0257d8
Sha256: 054349dda27b80bb105fbc59b5973ef9889ed976aca1fbe39f77688dcff8c552
                                        
                                            GET /pagead/js/r20171129/r20110914/activeview/osd_listener.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 04:02:05 GMT
Expires: Thu, 14 Dec 2017 04:02:05 GMT
Etag: 15026055567239389927
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 12940
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 620347
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12940
Md5:    2b6265d9dffdca4f6512922b0c8e48ca
Sha1:   f4c4ed97752cce9abc1a71f94acedb4a4b1d6889
Sha256: 2cc4dbcb168bf35ae30281ed880e75be61a3b464b46a098dcd32d68a2967edf0
                                        
                                            GET /pagead/js/r20171129/r20110914/client/ext/m_qs_click_protection.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 04:07:56 GMT
Expires: Thu, 14 Dec 2017 04:07:56 GMT
Etag: 9566754754863973915
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 3648
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 619996
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3648
Md5:    ae83c6831051fa005b0183ed93561065
Sha1:   a456bc8023b55f1972d00f9b8515d7a6ec157109
Sha256: f23a56e02c8a4ba7f9a735326ed5a2cfb12c41524c4d5b3ba9713530d6cb0302
                                        
                                            GET /pagead/js/r20171129/r20110914/client/ext/m_window_focus_non_hydra.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 04:02:05 GMT
Expires: Thu, 14 Dec 2017 04:02:05 GMT
Etag: 11176212102450413199
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 1218
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 620347
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1218
Md5:    3e1fe1160846d42504041240ac99abe1
Sha1:   02ec6880848b4f1926bf63676be67f24c15be952
Sha256: 14d566db627806fc4353b915bab1ac3c5b2737cede5cd0b4a3a9a673a92ea183
                                        
                                            GET /pagead/js/r20171129/r20110914/abg.js HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 04:07:56 GMT
Expires: Thu, 14 Dec 2017 04:07:56 GMT
Etag: 3670727170429105090
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25249
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 619996
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25249
Md5:    c3abff25ca48d2e17d7ed334a08d4a64
Sha1:   62897dc07c7e92153469abf9972d655904fdb860
Sha256: 37a61ce200db317993b38ab8e0bf2e9b44f4963e13e0988f3e85e37b52d58067
                                        
                                            GET /pagead/s/cookie_push.html HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Wed, 06 Dec 2017 17:04:55 GMT
Expires: Thu, 07 Dec 2017 17:04:55 GMT
Etag: 13472698117776506427
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 742
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 54978
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   742
Md5:    e550a33cfee69dfae0dcf3dc9a16b617
Sha1:   db917798fdba57df233396ef0fd93e97745783bb
Sha256: 648c26f5eb64f36e58cb24e08293274a5be34c4aaba8a1578588dad911e7c8a8
                                        
                                            GET /pagead/adview?ai=CToe_9_koWrzhK5Gd6gSswIGIAtHTqrxN7J-gltcFss_ZjxMQASD7u90eYMPcpIWYGKAB94DfkQPIAQGpArIeKXlVuWg-qAMByAPLBKoEsgFP0G9hpXy4M0S2v_duDrmCSrjwhb19dtZ10KYZxyTBNwLL3uVicUJv76iaSok8DZIul35o9iYtaNJH2xc03IjgkfRl_MjQDuqdDLNHKwGVkR0wuzrGfB8G1NdDCY6GBF8XezO9fJv2ziVT1Ghl4rQec9sx7vXG_rMoJKXGZNUCrk7tpmhGLOcKtGSD_3tC6DAcGJv7bTf82FZwUA8hB9CbX16WCJGSUBgRojNMjnGNs3xTgAfx_qBuqAemvhvYBwHyBwMQwTbSCAcIgGEQARgCgAoB2BMD&sigh=dm4RshN6UpA&vis=0 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281
Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/images/transparent.png HTTP/1.1 
Host: tpc.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 07 Dec 2017 07:40:40 GMT
Expires: Fri, 08 Dec 2017 07:40:40 GMT
Etag: 2462972746714251406
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 2433
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   67
Md5:    3f318b569cc43578a73d1c38270b6857
Sha1:   244717a495885a727dc67313ebb1ef7b447dfe7d
Sha256: bdf72009ad226c17f1954ba602292902a780b80af07dbcbab1322bdf5c32be66
                                        
                                            GET /pcs/activeview?xai=AKAOjsuL33yXiZysgMb7B3BXWrFTF8lWlJL44TFr3CzhbdOMLtGtdpUDPiK4qNx_FNtzDUmw4ZrAm-PxOZJsPd76fU1HOPC0A_1-s1c4dM01hH7gLTdQpheK6w&sig=Cg0ArKJSzBdUrzhchD02EAE&id=osdim&ti=1&r=pv&uc=0&tgt=nf&cl=0&v=r20171129 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Date: Thu, 07 Dec 2017 08:21:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/drt/s?v=r20120211 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281
Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 07 Dec 2017 07:50:50 GMT
Server: safe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1823
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   145
Md5:    92235b51835ea17fa6d313a73f3c2b8f
Sha1:   1e310139fd2be77b54f39c7c64e1616fd35785ad
Sha256: 2cf3e738572a24733a96c3be1d798e95e2bff434d37d6f28cde31ce53df8e333
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Dec 2017 08:21:13 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    b0915164a5f9d61fe10c193ebfa4ffdc
Sha1:   f477ed019b7e81b1d3d65b3cc5627b783c1fb213
Sha256: b815aa6fae37773628b0d86a6a577649b493764a1df44d549891e50f257d534c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 07 Dec 2017 08:21:13 GMT
Etag: "5a28a2fb-1d7"
Expires: Sat, 09 Dec 2017 08:21:13 GMT
Last-Modified: Thu, 07 Dec 2017 02:10:03 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    539a38cbf1ef904e670317b29030828e
Sha1:   56fdcbed4b8a7f9a19cda0cc7f2a09747ebb231a
Sha256: ec626f71e982b9bc723601e5eb41c421d7147f03c91aafbdf2354320b453885f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 07 Dec 2017 08:21:13 GMT
Etag: "5a289774-1d7"
Expires: Sat, 09 Dec 2017 08:21:13 GMT
Last-Modified: Thu, 07 Dec 2017 01:20:52 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    29eff5d0b1b01b0e538c01c86cc565a0
Sha1:   9641677c3d24535320facfe67e74fc68236812a1
Sha256: 3da45b50e8e64467fc31f0487e17b998fc2ae66e4133fcff9178cca2cdfecca8
                                        
                                            GET /ads/measurement/l?ebcid=ALh7CaS9WIu48xZUWLGjC9C6p9qZbcGCXEAyElp6OcV2AOOOH22OmQoaV2UKGHgrFwmH1DMf6icDUH5rCr-skKqvQhLBP7HxcQ HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         209.85.233.106
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
X-Content-Type-Options: nosniff
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: jumble_frontend_server
Content-Length: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pixel/attr?d=AHNF13IjeUCiQhG2af2rorBC_wQlmsbNPaTN HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1

                                         
                                         216.58.211.130
HTTP/1.1 204 No Content
Content-Type: text/html
                                        
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: HTTP server (unknown)
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
                                        
                                            GET /pagead/drt/ui HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         209.85.233.106
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://googleads.g.doubleclick.net/pagead/drt/si
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: safe
Content-Length: 246
X-XSS-Protection: 1; mode=block
Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   246
Md5:    12d3bb478cfbdfd43b2451e457c7e45c
Sha1:   311750b25d944af1375dd12d32f8f842f13514a9
Sha256: eb9b81fa102425307404e896040d2b2c3dbbc913dfc5315e97a2b4bfc321c7c8
                                        
                                            GET /exchange/sync.php?p=dfp&google_gid=CAESEJ72oNEK-bGsb31kYZVG7GA&google_cver=1&google_push=AHNF13Ji3zlGLnEFii0lsT66_jv3s6c9_JLlq-2AIX2vpg HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html

                                         
                                         213.19.162.80
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /sync.php?cookie_redirect=1&p=dfp&google_gid=CAESEJ72oNEK-bGsb31kYZVG7GA&google_cver=1&google_push=AHNF13Ji3zlGLnEFii0lsT66_jv3s6c9_JLlq-2AIX2vpg
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Thu, 07 Dec 2017 08:21:12 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /sync.php?cookie_redirect=1&p=dfp&google_gid=CAESEJ72oNEK-bGsb31kYZVG7GA&google_cver=1&google_push=AHNF13Ji3zlGLnEFii0lsT66_jv3s6c9_JLlq-2AIX2vpg HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: c=1

                                         
                                         213.19.162.80
HTTP/1.1 307 Temporary Redirect
                                        
X-RPHost: TmDI_LVTysrDFlN7evkuyw
Location: https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=SkFXN1FYWlotUi0yNlFU&google_push=AHNF13Ji3zlGLnEFii0lsT66_jv3s6c9_JLlq-2AIX2vpg
Connection: keep-alive
Set-Cookie: khaos=JAW7QXZZ-R-26QT; Domain=.rubiconproject.com; Expires=Thu, 07-Jun-2018 20:21:13 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Thu, 07 Dec 2017 08:21:12 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /pagead/drt/si HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
X-Content-Type-Options: nosniff
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: DSID=NO_DATA; expires=Thu, 07-Dec-2017 09:21:13 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Thu, 07 Dec 2017 08:21:13 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=rp&google_hm=SkFXN1FYWlotUi0yNlFU&google_push=AHNF13Ji3zlGLnEFii0lsT66_jv3s6c9_JLlq-2AIX2vpg HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://pagead2.googlesyndication.com/pagead/s/cookie_push.html
Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 07 Dec 2017 08:21:13 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 170
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   170
Md5:    e7673c60af825466f83d46da72ca1635
Sha1:   fc0fcbee0835709ba2d28798a612bfd687903fb5
Sha256: 0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
                                        
                                            GET /eye.php?actionid=100&attach=3136476_c_1&timestamp=1512634871404_8h5mnh&vn=170525 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /bg/xyxcEPMYnyQfHtFyj8FViRmgUG09fasClMCir8_uuGA.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=4509182864&adk=1405227987&adf=807048394&w=700&lmt=1510988517&loeid=38893311&format=700x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634871488&bpp=74&fdt=79&idt=261&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=100&ady=2127&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=281

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4708
Date: Thu, 07 Dec 2017 02:59:28 GMT
Expires: Fri, 07 Dec 2018 02:59:28 GMT
Last-Modified: Mon, 27 Nov 2017 13:45:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 19305
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4708
Md5:    06043d65796e432a870a9ddcc0d530ff
Sha1:   ba3584c4f2e79b916f77b5f6dfcb2d91e53567e5
Sha256: 75098040e083627066b701e9ff06bad8e763aa5e0c39bacd2c1ce0330be03bba
                                        
                                            GET /ui?dri=2&formId=2&src=1000&k=%25E6%2580%258E%25E4%25B9%2588%25E8%25AE%25A9%25E6%2596%2587%25E4%25BB%25B6%25E6%2597%25A0%25E6%25B3%2595%25E4%25BF%259D%25E5%25AD%2598%25E5%2588%25B0%25E6%25A1%258C%25E9%259D%25A2%252C%25E6%2580%258E%25E6%25A0%25B7%25E7%25A6%2581%25E6%25AD%25A2%25E5%259C%25A8%25E6%25A1%258C%25E9%259D%25A2%25E4%25BF%259D%25E5%25AD%2598%25E6%2596%2587%25E4%25BB%25B6---%25E6%25A1%258C%25E9%259D%25A2%25E6%2596%2587%25E4%25BB%25B6%25E5%25A4%25B9%25E5%258F%25B3%25E9%2594%25AE%25E8%258F%259C%25E5%258D%2595&iurl[]=http:%2F%2Fwww.beihaiting.com%2Fuploads%2Fallimg%2F140831%2F10723-140S119550L64.jpg&qid=6lzewp1512634870364&tu=3136476&width=400&height=284&opt=1&v=8&cached=0&pic=5&explist=&vn=170525&pagetitle=%25E6%2580%258E%25E4%25B9%2588%25E8%25AE%25A9%25E6%2596%2587%25E4%25BB%25B6%25E6%2597%25A0%25E6%25B3%2595%25E4%25BF%259D%25E5%25AD%2598%25E5%2588%25B0%25E6%25A1%258C%25E9%259D%25A2%252C%25E6%2580%258E%25E6%25A0%25B7%25E7%25A6%2581%25E6%25AD%25A2%25E5%259C%25A8%25E6%25A1%258C%25E9%259D%25A2%25E4%25BF%259D%25E5%25AD%2598%25E6%2596%2587%25E4%25BB%25B6%253F_%25E5%258C%2597%25E6%25B5%25B7%25E4%25BA%25AD-%25E6%259C%2580%25E7%25AE%2580%25E5%258D%2595%25E5%25AE%259E%25E7%2594%25A8%25E7%259A%2584%25E7%2594%25B5%25E8%2584%2591%25E7%259F%25A5%25E8%25AF%2586%25E3%2580%2581IT%25E4%25BF%25A1%25E6%2581%25AF%25E6%258A%2580%25E6%259C%25AF%25E7%25BD%2591%25E7%25AB%2599&screen_width=1159&screen_height=754&prot=1&callback=bd__cbs__ypzf8c HTTP/1.1 
Host: imageplus.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         61.135.185.23
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 6814
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: nginx


--- Additional Info ---
Magic:  ISO-8859 text, with very long lines, with no line terminators
Size:   6814
Md5:    df0d03597b2fd3d1ab55e7322380649d
Sha1:   6021e7212f4fb2441b46445cb89e66ed25e80935
Sha256: aefed4436dea6294fd70f071810789fe0279af801685bf139a47ce3769a0a2e0
                                        
                                            GET /public03/imageplus/sticker/pa_lu_nobtn_inviewshow.app.js?cacheTime=420176 HTTP/1.1 
Host: ecma.bdimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         119.146.74.49
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:13 GMT
Transfer-Encoding: chunked
Connection: close
Etag: W/"17793591110558e3f7ffe1bfeb9b2ef9"
Last-Modified: Mon, 25 Apr 2016 10:13:51 GMT
Expires: Sun, 10 Dec 2017 08:00:11 GMT
Age: 1207
Accept-Ranges: bytes
Content-MD5: F3k1kREFWOP3/+G/65su+Q==
x-bce-debug-id: TgyL974hSmcEbQB1a6ZdLFj9JI1jgyHE6DAgXo1QcJA9c9wRztJvKptirimzNmfmIxV2hJhOq/4wzGvZSIUI7g==
x-bce-request-id: 6dd1cf28-7a3a-4566-969a-d7ccfdca1bb5
x-bce-storage-class: STANDARD
Ohc-Response-Time: 1 0 0 0 0 0
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16620
Md5:    a660e14541c8fb2da5d7bc0425069221
Sha1:   dd523ca15b9e9d450e1c6435b67353110761a6f1
Sha256: 3c49ba9ca90eb88c0ef5288c04047add16268afb8fa7551ddd0d847e2a1b287e
                                        
                                            GET /it/u=4244025284,1300786779&fm=76 HTTP/1.1 
Host: f12.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=0&dis=0&dai=2&ps=2127x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2135&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634871&qn=ce65abb05af78737&tt=1512634867685.3800.4255.4272
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:13 GMT
Content-Length: 4762
Connection: keep-alive
Etag: cbc496b6ecfaf11b2c85200e6c6e6902
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:38:23 GMT
Age: 675770
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 1 0 0 0 1
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4762
Md5:    cbc496b6ecfaf11b2c85200e6c6e6902
Sha1:   abf36f0a67da6005f04f5df4faa2d6b2b2a81b0e
Sha256: 48988bb6d317a225343374354684ca65d98dd84486f11734698f4634c458ff25
                                        
                                            GET /static/api/js/share.js?v=89860593.js?cdnversion=420175 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2970148472"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:21 GMT
Expires: Fri, 07 Dec 2018 08:21:13 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6211
Date: Thu, 07 Dec 2017 08:21:13 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6211
Md5:    31400b379dba1c1c3270de1f27d83f5b
Sha1:   955dfc81cbd5dba5f64eaae51fa8d4d1c74d7688
Sha256: a90f7d2558ca896773ddca382048ccfd2ae768842210cb8d7d48061db22dbd60
                                        
                                            GET /it/u=998978665,1410743907&fm=76 HTTP/1.1 
Host: f11.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=1&dis=0&dai=3&ps=2217x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2225&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634872&qn=012e4281a5d72937&tt=1512634867685.4197.4541.4566
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:13 GMT
Content-Length: 50262
Connection: keep-alive
Etag: fdc04e0e5c754f2680d59a33cecb426b
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:39:09 GMT
Age: 675724
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   50262
Md5:    fdc04e0e5c754f2680d59a33cecb426b
Sha1:   97445781ad37d1205da7d3e4a3d15d181a066614
Sha256: 0361535c65e7a93363bf966460872ad3927d82eb34789cfcabedf3173af6c015
                                        
                                            GET /eye.php?t=000000000000000000000000000000000000000000KP2c7ea6000KPKxpqd08VYqEbCy600000.mLFW5HmYPHn40A-Vu1Y4rjn1P1fsP1n3nHbLnW0YPHf10AnqwRnYwWD4P1wAf1RYPj0df161PHf1P10LwDFafHmvPHn0IgF_5fKsTWY0UyNz5fK9IZw9mv6qnH0snaRzPWnkn1mYP1m0&start=1512634869213&site_api_loaded=1512634870362&opt=1&v=8&found=1512634870372&loading=1512634870380&loaded=1512634871404&render_loaded=1512634874181&ad_count=1&pg_rect=0_0_1159_754&img_rect=950_267_400_284&showed=1512634874222&render=http%3A%2F%2Fecma.bdimg.com%2Fpublic03%2Fimageplus%2Fsticker%2Fpa_lu_nobtn_inviewshow.app.js&union_id=3136476&actionid=8&exp_list=191;201;70002;90003;90013;91001;99002&render_id=369 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:14 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /it/u=95289677,2008503943&fm=76 HTTP/1.1 
Host: f12.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 20375
Connection: keep-alive
Etag: 8f44c0ec659b0594ed1da77478292f95
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Sat, 30 Dec 2017 00:44:54 GMT
Age: 668180
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 1 0 0 0 1
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   20375
Md5:    8f44c0ec659b0594ed1da77478292f95
Sha1:   a5a5e040cab3ec180c7fa2c9b34ebc999a9aa8af
Sha256: 7dccd64cd2b59d2b4ddbfdd08a32082c40796db3a4de0efdc6538eacfa2c7d00
                                        
                                            GET /it/u=4263116329,1612644806&fm=76 HTTP/1.1 
Host: f11.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 7004
Connection: keep-alive
Etag: 4b01f51a82d9c99bc56b26b5abbd0490
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:38:59 GMT
Age: 675735
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   7004
Md5:    4b01f51a82d9c99bc56b26b5abbd0490
Sha1:   028a1b7b8c2855b960888b4a6570feed8e31bbd8
Sha256: 558c07100ec8025cc2d866125e6b832dd4abf9077af908b8b2fc37299d84b8ee
                                        
                                            GET /pixel?dspid=6470425 HTTP/1.1 
Host: cm.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=1&dis=0&dai=3&ps=2217x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2225&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634872&qn=012e4281a5d72937&tt=1512634867685.4197.4541.4566
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.202.114.35
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Connection: keep-alive
Content-Length: 0
Date: Thu, 07 Dec 2017 08:21:14 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: http://mapping.yoyi.com.cn/s/mapping/?baidu_user_id=b978e640d6191fbfec4677f62df3fccacb8a188c0b56725d327045500e5b480bb7c3feda0bced9b834d051d8cbf72798&cookie_version=2&timestamp=1512634874&ext_data=
Server: nginx


--- Additional Info ---
                                        
                                            GET /public03/imageplus/v2/dock/close.png HTTP/1.1 
Host: ecma.bdimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         119.146.74.49
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 1843
Connection: close
Etag: "4ba92276354e607c5f663de4b2b5422c"
Last-Modified: Tue, 29 Mar 2016 03:52:55 GMT
Expires: Thu, 07 Dec 2017 15:53:55 GMT
Age: 232039
Accept-Ranges: bytes
Content-MD5: S6kidjVOYHxfZj3ksrVCLA==
x-bce-debug-id: MTAuNjMuMTEyLjM5OlNhdCwgMjQgRGVjIDIwMTYgMjM6NDE6MjMgQ1NUOjI0ODM0OTM3Ng==
x-bce-request-id: 0541aea7-b960-4b68-8e47-1fa3c86029fe
x-bce-storage-class: STANDARD
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  PNG image, 25 x 25, 8-bit/color RGBA, non-interlaced
Size:   1843
Md5:    4ba92276354e607c5f663de4b2b5422c
Sha1:   76c296890e5dcec499ef4209ef78e8144a8132c8
Sha256: a5e93e407b1452d9a24407d72238e2ee33279173cea5cdf8fd001a3ef373d9d4
                                        
                                            GET /cpro/ui/noexpire/img/2.0.1/bg.png HTTP/1.1 
Host: cpro.baidustatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         119.146.74.34
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 1804
Connection: close
Etag: "58760cb6-70c"
Last-Modified: Wed, 11 Jan 2017 10:45:10 GMT
Expires: Sat, 09 Jan 2027 19:56:51 GMT
Age: 28470263
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  PNG image, 139 x 106, 8-bit colormap, non-interlaced
Size:   1804
Md5:    6595692f7f8ff3fd627a12db1b2f7fd3
Sha1:   2b717ba50d3f21f3aaed31cf07343b38b137405c
Sha256: 91bc5f1d07699c5ccdfc049bd732d3a93f2e7571223745e415e19f94759504de
                                        
                                            GET /public03/imageplus/tip.png HTTP/1.1 
Host: ecma.bdimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         119.146.74.49
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 1535
Connection: close
Etag: "9f235d8d825e25caedf9fb6b20bd3b7f"
Last-Modified: Tue, 29 Mar 2016 03:52:38 GMT
Expires: Thu, 07 Dec 2017 19:14:42 GMT
Age: 219992
Accept-Ranges: bytes
Content-MD5: nyNdjYJeJcrt+ftrIL07fw==
x-bce-debug-id: MTAuMTgxLjY4LjEzOlNhdCwgMjQgRGVjIDIwMTYgMjM6NDE6NDggQ1NUOjI1MDg3NjI3NDQ=
x-bce-request-id: 753a8098-c5cd-4da4-b207-24497e715693
x-bce-storage-class: STANDARD
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  PNG image, 38 x 38, 8-bit/color RGBA, non-interlaced
Size:   1535
Md5:    9f235d8d825e25caedf9fb6b20bd3b7f
Sha1:   b85929435022c59551acd156fe12fd6f385b5f7f
Sha256: ca70e83adbd50fd4e38c7a2f165c8c71eb12fbbdf58380a44b2925c075946d67
                                        
                                            GET /eye.php?t=000000000000000000000000000000000000000000KP2c7ea6000QziQLXcN_DGSxbCy600000.mLFW5HT4PHD0pydM5HDsP1RYnj63P16snH63nHRYnWmd0AnqwRnYwWD4P1wAf1RYPj0df161PHf1P10LwDFafHmvPHn0IgF_5fKsTWY0UyNz5fK9IZw9mv6qnH0snaRzPWnkn1mYP1m0&start=1512634869213&site_api_loaded=1512634870362&opt=1&v=8&found=1512634872698&loading=1512634872706&loaded=1512634874249&render_loaded=1512634874266&ad_count=2&pg_rect=0_0_1159_754&img_rect=1284_267_400_284&showed=1512634874323&render=http%3A%2F%2Fecma.bdimg.com%2Fpublic03%2Fimageplus%2Fsticker%2Fpa_lu_nobtn_inviewshow.app.js&union_id=3136476&actionid=8&exp_list=191;201;70002;90013;90086;91001;99002&render_id=369 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:14 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /it/u=741892582,1221411791&fm=76 HTTP/1.1 
Host: f11.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 31460
Connection: keep-alive
Etag: e49d64ab9cf50c931c958de322ea379a
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:39:09 GMT
Age: 675725
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 3 0 0 0 3
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   31460
Md5:    e49d64ab9cf50c931c958de322ea379a
Sha1:   55b73318626d6ab08b65354f81b54392e1ea7012
Sha256: d73e60c46d8ef0d1b8a802713cb04904c0391337b1a32ecb3467d49e41c039d7
                                        
                                            GET /it/u=2754278886,3178204329&fm=76 HTTP/1.1 
Host: f10.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 6928
Connection: keep-alive
Etag: f0d01b2195e99f76758eb32a342ab04f
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:38:15 GMT
Age: 675779
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6928
Md5:    f0d01b2195e99f76758eb32a342ab04f
Sha1:   b60f0d8a2660f6cdd490d068c94a8dc5d830357a
Sha256: 066e4b6ba8aedf373fcbed09bd90192324d80c13c79d0e0763700368ddb52504
                                        
                                            GET /eye.php?t=000000000000000000000000000000000000000000KP2c7ea6000QziQLXcN_DGSxbCy600000.mLFW5HT4PHD0pydM5HDsP1RYnj63P16snH63nHRYnWmd0AnqwRnYwWD4P1wAf1RYPj0df161PHf1P10LwDFafHmvPHn0IgF_5fKsTWY0UyNz5fK9IZw9mv6qnH0snaRzPWnkn1mYP1m0&actionid=4&attach=0&time=1512634874323&exp_list=191;201;70002;90013;90086;91001;99002&render_id=369 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:14 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /adx.php?c=d25pZD0yOWMxNTY4ODc3MmY5MmJjAHM9MjljMTU2ODg3NzJmOTJiYwB0PTE1MTI2MzQ4NzMAc2U9NQBidT00AHByaWNlPVdpajUtUUFDRUVwN2pFcGdXNUlBOHBOdGY0RXlLc3l5akhRUVBBAGNoYXJnZV9wcmljZT0yMQBzaGFyaW5nX3ByaWNlPTIxMDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1FQzRGMTk3NEZDNTQ0MDVDODM1NDM3MDdEQkJBNjY1MwBjcHJvaWQ9AHdkPTAAcG9zPTAAYmNobWQ9MAB2PTEAaT1hZWZkMGI5OA HTTP/1.1 
Host: wn.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         106.39.162.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 49
Date: Thu, 07 Dec 2017 08:21:14 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: nginx


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /public03/imageplus/leftbottom.png HTTP/1.1 
Host: ecmb.bdimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         119.146.74.49
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 1267
Connection: close
Etag: "b650c5c28d9cf7056735a185b8ec231e"
Last-Modified: Fri, 12 Aug 2016 10:07:50 GMT
Expires: Thu, 07 Dec 2017 20:09:16 GMT
Age: 216718
Accept-Ranges: bytes
Content-MD5: tlDFwo2c9wVnNaGFuOwjHg==
x-bce-debug-id: MTAuMTgxLjY3LjM3OlNhdCwgMjQgRGVjIDIwMTYgMjM6NDg6MDUgQ1NUOjI4ODU4NTM1Ng==
x-bce-request-id: 6df5c9d4-8809-4260-90f2-20aedad2c851
x-bce-storage-class: STANDARD
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1267
Md5:    b650c5c28d9cf7056735a185b8ec231e
Sha1:   894e6f29e2d0303efaef94cd1f68abfc878cb290
Sha256: d501b6b37216a6f01e352cb62d3eff001a424de03dd4514048ffd090e7b62a2a
                                        
                                            GET /it/u=2465428275,3172915966&fm=76 HTTP/1.1 
Host: f10.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 27605
Connection: keep-alive
Etag: 984f9fe5724c4a0a96fe7196aee3b42a
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:45:06 GMT
Age: 675368
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 2 0 0 0 2
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   27605
Md5:    984f9fe5724c4a0a96fe7196aee3b42a
Sha1:   874ac05118731bc35069623e4b6c085cbb888b35
Sha256: d039a5a7371ccd378430f3cfe2745eac6614676de39daae4bc284c9947d0d66c
                                        
                                            GET /it/u=3849593877,3693189529&fm=76 HTTP/1.1 
Host: f10.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 15048
Connection: keep-alive
Etag: 7aed67fb5505bc5dc48b0071da195192
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:49:16 GMT
Age: 675118
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   15048
Md5:    7aed67fb5505bc5dc48b0071da195192
Sha1:   d8f0dd30128ca622e4f81f482f7c26bbcb6d328f
Sha256: 5ece091852739eafabd00ad23d2938dd8ad6f41e0ddcebd9607e2ea8a4f255e5
                                        
                                            GET /ui?dri=3&formId=2&src=1000&k=%25E6%2580%258E%25E4%25B9%2588%25E8%25AE%25A9%25E6%2596%2587%25E4%25BB%25B6%25E6%2597%25A0%25E6%25B3%2595%25E4%25BF%259D%25E5%25AD%2598%25E5%2588%25B0%25E6%25A1%258C%25E9%259D%25A2%252C%25E6%2580%258E%25E6%25A0%25B7%25E7%25A6%2581%25E6%25AD%25A2%25E5%259C%25A8%25E6%25A1%258C%25E9%259D%25A2%25E4%25BF%259D%25E5%25AD%2598%25E6%2596%2587%25E4%25BB%25B6---%25E6%25A1%258C%25E9%259D%25A2%25E5%25B1%259E%25E6%2580%25A7&iurl[]=http:%2F%2Fwww.beihaiting.com%2Fuploads%2Fallimg%2F140831%2F10723-140S119553O18.jpg&qid=6lzewp1512634870364&tu=3136476&width=377&height=454&opt=1&v=8&cached=0&pic=5&explist=&vn=170525&pagetitle=%25E6%2580%258E%25E4%25B9%2588%25E8%25AE%25A9%25E6%2596%2587%25E4%25BB%25B6%25E6%2597%25A0%25E6%25B3%2595%25E4%25BF%259D%25E5%25AD%2598%25E5%2588%25B0%25E6%25A1%258C%25E9%259D%25A2%252C%25E6%2580%258E%25E6%25A0%25B7%25E7%25A6%2581%25E6%25AD%25A2%25E5%259C%25A8%25E6%25A1%258C%25E9%259D%25A2%25E4%25BF%259D%25E5%25AD%2598%25E6%2596%2587%25E4%25BB%25B6%253F_%25E5%258C%2597%25E6%25B5%25B7%25E4%25BA%25AD-%25E6%259C%2580%25E7%25AE%2580%25E5%258D%2595%25E5%25AE%259E%25E7%2594%25A8%25E7%259A%2584%25E7%2594%25B5%25E8%2584%2591%25E7%259F%25A5%25E8%25AF%2586%25E3%2580%2581IT%25E4%25BF%25A1%25E6%2581%25AF%25E6%258A%2580%25E6%259C%25AF%25E7%25BD%2591%25E7%25AB%2599&screen_width=1159&screen_height=754&prot=1&callback=bd__cbs__ily6qa HTTP/1.1 
Host: imageplus.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         61.135.185.23
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 5737
Date: Thu, 07 Dec 2017 08:21:15 GMT
Server: nginx


--- Additional Info ---
Magic:  ISO-8859 text, with very long lines, with no line terminators
Size:   5737
Md5:    bebf1f572e05eacf0e7efc0f832de164
Sha1:   4b41d88f5ece8bbfade57d843545d2685daede21
Sha256: 6958fbb73df0871ccebca5805e80311d83ce0466e52193f39002de63852d2dab
                                        
                                            GET /s/mapping/?baidu_user_id=b978e640d6191fbfec4677f62df3fccacb8a188c0b56725d327045500e5b480bb7c3feda0bced9b834d051d8cbf72798&cookie_version=2&timestamp=1512634874&ext_data= HTTP/1.1 
Host: mapping.yoyi.com.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=1&dis=0&dai=3&ps=2217x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2225&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634872&qn=012e4281a5d72937&tt=1512634867685.4197.4541.4566

                                         
                                         42.159.236.181
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Thu, 07 Dec 2017 08:21:15 GMT
Content-Length: 35
Connection: keep-alive
Set-Cookie: AMP_UID=64247F577893480C9DBF1624C477A8CD- ; path=/ ; domain=.yoyi.com.cn ; expires=Saturday, 07-Dec-2019 16:21:15 GMT
Cache-Control: max-age=0
Expires: Thu, 07 Dec 2017 08:21:15 GMT


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1
Size:   35
Md5:    04d590ce36fcc6369f590ccfb7409e57
Sha1:   a3a71e8194f5541400b26be34f791d106f33256e
Sha256: b18c315b986e7bcf03bbfff949dd65345f4cbabeec5267ade74c354d73cf5e28
                                        
                                            GET /it/u=2466548019,3178480584&fm=76 HTTP/1.1 
Host: f10.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:14 GMT
Content-Length: 80089
Connection: keep-alive
Etag: a3a3c65d8ff6ea3bc5c850ea5864b618
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:40:15 GMT
Age: 675659
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 2 0 0 0 2
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   80089
Md5:    a3a3c65d8ff6ea3bc5c850ea5864b618
Sha1:   22a6d3d34113344f0d0e734a2b801d03a4197c08
Sha256: 944ad10cb2e953650efefe7c62bae61c8ea15ddfd11366feec6101b0dee9568a
                                        
                                            GET /adx.php?c=d25pZD04MTRmODBiNTIyNDBmOTg2AHM9ODE0ZjgwYjUyMjQwZjk4NgB0PTE1MTI2MzQ4NzIAc2U9MQBidT00AHByaWNlPVdpajUtQUFHVmRaN2pFcGdXNUlBOGlZaGZFX3BWTlpHeThoTlZnAGNoYXJnZV9wcmljZT00NQBzaGFyaW5nX3ByaWNlPTQ1MDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1FQzRGMTk3NEZDNTQ0MDVDODM1NDM3MDdEQkJBNjY1MwBjcHJvaWQ9AHdkPTAAcG9zPTAAYmNobWQ9MAB2PTEAaT03ZmViNTBkYg HTTP/1.1 
Host: wn.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=0&dis=0&dai=2&ps=2127x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2135&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634871&qn=ce65abb05af78737&tt=1512634867685.3800.4255.4272
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         106.39.162.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 49
Date: Thu, 07 Dec 2017 08:21:16 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: nginx


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /cpro/ui/noexpire/js/4.0.0/adClosefeedbackUpgrade.min.js HTTP/1.1 
Host: cpro.baidustatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=0&dis=0&dai=2&ps=2127x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2135&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634871&qn=ce65abb05af78737&tt=1512634867685.3800.4255.4272

                                         
                                         119.146.74.34
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:16 GMT
Transfer-Encoding: chunked
Connection: close
Etag: W/"58760cb6-7c0f"
Last-Modified: Wed, 11 Jan 2017 10:45:10 GMT
Expires: Sat, 09 Jan 2027 19:56:43 GMT
Age: 28470273
Cache-Control: max-age=315360000
Ohc-Response-Time: 1 0 0 0 0 0
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8928
Md5:    0d006394985aef7c1843c20b4fd4d719
Sha1:   e57ec22ec5ef186e414ddb8d0049014c5887dd2f
Sha256: 82e02ec328ce46cd9c2a1ef4850535102365a4860eb7d5c3c68b37aa810a2965
                                        
                                            GET /include/ckeditor/ckeditor.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:14 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a374d-599ad-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 367021
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C program text, with very long lines, with CRLF line terminators
Size:   367021
Md5:    d7af71ec68b0bb4b6c53a6f60e3c44c8
Sha1:   866c4813d449484ad3fb11bed83ccc25a869e4d2
Sha256: 031b14f475bf9e2af2b3a4e2cacfec745833868f9c470de79062cfb6a81eb9cc
                                        
                                            GET /cpro/exp/closead/img/bd_logo.png HTTP/1.1 
Host: cpro.baidustatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=0&dis=0&dai=2&ps=2127x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2135&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634871&qn=ce65abb05af78737&tt=1512634867685.3800.4255.4272

                                         
                                         119.146.74.34
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:17 GMT
Content-Length: 2781
Connection: close
Etag: "5a24f26e-add"
Last-Modified: Mon, 04 Dec 2017 06:59:58 GMT
Expires: Thu, 07 Dec 2017 16:37:24 GMT
Age: 56633
Cache-Control: max-age=86400
Accept-Ranges: bytes
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  PNG image, 59 x 19, 8-bit/color RGBA, non-interlaced
Size:   2781
Md5:    83a417759a4b7c28d9ea937b30d4b4d2
Sha1:   0dd9f86f689a5b8ee9f2f6894379628bfd6a72b1
Sha256: 7b398494507aa0e9e6046520b8ee83046d6646b93c129a46633a9117bf7118a2
                                        
                                            GET /cpro/ui/noexpire/img/4.0.0/pc_ads.1x.png HTTP/1.1 
Host: cpro.baidustatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=0&dis=0&dai=2&ps=2127x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2135&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634871&qn=ce65abb05af78737&tt=1512634867685.3800.4255.4272

                                         
                                         119.146.74.34
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:17 GMT
Content-Length: 611
Connection: close
Etag: "585cd998-263"
Last-Modified: Fri, 23 Dec 2016 08:00:24 GMT
Expires: Tue, 22 Dec 2026 15:48:05 GMT
Age: 30040392
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Ohc-Response-Time: 1 0 0 0 0 0


--- Additional Info ---
Magic:  PNG image, 30 x 16, 8-bit/color RGBA, non-interlaced
Size:   611
Md5:    09ad5377f14a7fe42cfe2859acf7819a
Sha1:   d1ac93121923b100a04535f2a2ee3551b0962be7
Sha256: 9be3b35721fafc7ede5b0040b63379bd50c1601227042841f798723a0f77b4b4
                                        
                                            GET /eye.php?actionid=100&attach=3136476_c_1&timestamp=1512634877228_qpzf5j&vn=170525 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /eye.php?t=000000000000000000000000000000000000000000KP2c7ea6000rIwifGhkRLASObCy600000.mLFW5HDznHRY0A-Vu1Yknjm3nWnvPjc3nWfkPHm1PWmznsKW5RNjPDmkrHTYwbndPjfsPRn3n1RYn1TsPYwafbDvPWR10ZNzUjY0TZcq0Ad-TWY0mgwYmyPC5HDsnj0-nWm1nHnvPjTv00&start=1512634869213&site_api_loaded=1512634870362&opt=1&v=8&found=1512634874698&loading=1512634874706&loaded=1512634877228&render_loaded=1512634877239&ad_count=3&pg_rect=0_0_1159_754&img_rect=1593_279_377_454&showed=1512634877273&render=http%3A%2F%2Fecma.bdimg.com%2Fpublic03%2Fimageplus%2Fsticker%2Fpa_lu_nobtn_inviewshow.app.js&union_id=3136476&actionid=8&exp_list=191;201;70002;90013;90086;91001;99002&render_id=369 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /include/ckeditor/config.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:16 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a3796-2ca-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 714
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ISO-8859 C program text, with CRLF line terminators
Size:   714
Md5:    56b757eda3fc842a9911c00f821045d6
Sha1:   e2fec8ad93be525a25ff12c5d079c4dcf580f22d
Sha256: f628de12cc7636180a6774d76f22e60072bc54037ed6f3d9da83e068630fa0c0
                                        
                                            GET /adx.php?c=d25pZD1jNjRkYzU2NjBhNDk1MWU3AHM9YzY0ZGM1NjYwYTQ5NTFlNwB0PTE1MTI2MzQ4NzUAc2U9NQBidT00AHByaWNlPVdpajUtd0FESEpON2pFcGdXNUlBOHUweFFrWkZTQTFYNkRROG9RAGNoYXJnZV9wcmljZT0yNABzaGFyaW5nX3ByaWNlPTI0MDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1FQzRGMTk3NEZDNTQ0MDVDODM1NDM3MDdEQkJBNjY1MwBjcHJvaWQ9AHdkPTAAcG9zPTAAYmNobWQ9MAB2PTEAaT1jNDMxOTBhZQ HTTP/1.1 
Host: wn.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         106.39.162.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 49
Date: Thu, 07 Dec 2017 08:21:17 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: nginx


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /it/u=3118428872,3071454351&fm=76 HTTP/1.1 
Host: f12.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:17 GMT
Content-Length: 15492
Connection: keep-alive
Etag: d64447d8d3e904f779a0844dfd6cf329
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Sun, 24 Dec 2017 17:59:56 GMT
Age: 1124481
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 1 0 0 0 1
Timing-Allow-Origin: http://www.beihaiting.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   15492
Md5:    d64447d8d3e904f779a0844dfd6cf329
Sha1:   68938d7eb0d9d4d5d9cbd0b4426f885b3e67cfa6
Sha256: bd1b128c846da6292c7592e3d737967f8d909805198ebc24fe5c04fe5aca5e5e
                                        
                                            GET /eye.php?actionid=100&attach=3136476_c_1&timestamp=1512634874249_61ylp6&vn=170525 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /adx.php?c=d25pZD03NGViMDI3NWFmN2Q0MTEzAHM9NzRlYjAyNzVhZjdkNDExMwB0PTE1MTI2MzQ4NzAAc2U9NQBidT00AHByaWNlPVdpajU5Z0FLS21GN2pFcGdXNUlBOHM0ZmVKZUZycEtMckpIeVFBAGNoYXJnZV9wcmljZT0zMQBzaGFyaW5nX3ByaWNlPTMxMDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1FQzRGMTk3NEZDNTQ0MDVDODM1NDM3MDdEQkJBNjY1MwBjcHJvaWQ9AHdkPTAAcG9zPTAAYmNobWQ9MAB2PTEAaT1jNGU2ZDMzOA HTTP/1.1 
Host: wn.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         106.39.162.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 49
Date: Thu, 07 Dec 2017 08:21:17 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: nginx


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /eye.php?t=000000000000000000000000000000000000000000KP2c7ea6000rIwifGhkRLASObCy600000.mLFW5HDznHRY0A-Vu1Yknjm3nWnvPjc3nWfkPHm1PWmznsKW5RNjPDmkrHTYwbndPjfsPRn3n1RYn1TsPYwafbDvPWR10ZNzUjY0TZcq0Ad-TWY0mgwYmyPC5HDsnj0-nWm1nHnvPjTv00&actionid=4&attach=0&time=1512634877273&exp_list=191;201;70002;90013;90086;91001;99002&render_id=369 HTTP/1.1 
Host: bzclk.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.206.37.219
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 1
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: nginx/1.2.0


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    93b885adfe0da089cdf634904fd59f71
Sha1:   5ba93c9db0cff93f52b521d7420e43f6eda2784f
Sha256: 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                        
                                            GET /plus/feedback_ajax.php?dopost=getlist&aid=5220&page=1 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: Apache
Content-Length: 320
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   320
Md5:    9ca56c835abb5efad2af0fb3f7a6bfd9
Sha1:   00c4116c154d79d06df11a2886e3ef5695b5a8bf
Sha256: 1e20a445f31d3aa58be28287846f09901503138da1a91e735ae2c43a7f09e988
                                        
                                            GET /templets/default/images/btn-bg2.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/page.css
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2651-180-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 384
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 70 x 23
Size:   384
Md5:    4c57cbaecdcdc2e0dd2226aa8cdce23d
Sha1:   9d3b465239be560bfe41a9896ce070bb0e854c11
Sha256: 33993d6f56dad4e2d5a201d6a6fc6210d4a2c3eb1f5178c572ac95c60f2b9c9c
                                        
                                            GET /templets/default/images/ico-3.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/layout.css
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2669-36-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 54
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 4 x 5
Size:   54
Md5:    8a0682e722b0a0de78adeee46d8ba49e
Sha1:   8c678b6ae415408cc6a01236a036c56647b6f9f9
Sha256: 352fe6dfc5774411623233cfc4a128d6bd2eeb4674f91c5fdebce8856e7d0d5d
                                        
                                            GET /templets/default/images/ico-2.gif HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/templets/default/style/layout.css
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:12 GMT
Etag: "c2666-32-5112b3c085c00"
Accept-Ranges: bytes
Content-Length: 50
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 3 x 3
Size:   50
Md5:    2b2377c9daff8b34c55bb270d016cb23
Sha1:   ae50ac50405209163c62ffbc4555e998d0157602
Sha256: 8eaad20f0e957f43a6b6a9ffe595dfb2583e5d40216454f831513c75667f925b
                                        
                                            GET /include/ckeditor/lang/en.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a378f-437e-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 17278
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C program text, with very long lines, with CRLF line terminators
Size:   17278
Md5:    434b2c6b2f77f1a92c30e10cd577fcd2
Sha1:   ff9a42e2d34c0209a9be96bfc091f50ae425c6d1
Sha256: bdf830efdc406b3079d683c2ebc5f1614b2d7b976509897eacfa7dce4b0aa635
                                        
                                            GET /wcpm?di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=SSP_JSONP&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 667
Date: Thu, 07 Dec 2017 08:21:18 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:18 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   667
Md5:    68db6506116b27a36ea60d00dbaaa6c4
Sha1:   d5e31eca438dc147017b5ae7e82b0d9881e8d98b
Sha256: be85d0f2cc0015cfc8ea23d885ae7ef12bbe7494a5dea13a6414d8eeee24de63
                                        
                                            GET /include/ckeditor/skins/kama/editor.css?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 07 Dec 2017 08:21:17 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a37a6-77d6-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 30678
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII C program text, with very long lines, with CRLF line terminators
Size:   30678
Md5:    70e7d15eb761984377a8fbac6868f362
Sha1:   8c70fda255510b72a200a1fa43716f19a80e1ffb
Sha256: 145ab098ba975aabfd25400c3b13bb36b72f18785b18801e9b89c71eb2a3e74a
                                        
                                            GET /include/ckeditor/plugins/dedepage/plugin.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:18 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "c237c-378-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 888
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ISO-8859 C++ program text, with CRLF line terminators
Size:   888
Md5:    b242638f265954a71833e8bbfab80d97
Sha1:   20f948ab07c3acbfa147f3a07f775bc531458626
Sha256: d0f0d7b9ba50ffc778fca76e1568ccf9a79329e6fcf91b0152ffb8a4272923f0
                                        
                                            GET /include/ckeditor/plugins/multipic/plugin.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:18 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "c233a-482-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 1154
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ISO-8859 C++ program text, with CRLF line terminators
Size:   1154
Md5:    de63140a8123747c9d35098ce69395bf
Sha1:   6750f20a99676574249f280a9750316825275097
Sha256: 9f5ed2e0ffb9278dbdb2c7d665c968d4f8609937fa9135887d109bda33f11ab9
                                        
                                            GET /wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955 HTTP/1.1 
Host: pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         115.239.210.141
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Cache-Control: post-check=0, pre-check=0
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 7914
Date: Thu, 07 Dec 2017 08:21:18 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Thu Dec 7 16:21:18 2017
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7914
Md5:    1b57f82c34a85d414e1d525aa50336b9
Sha1:   1920c0773935f3c8e4f34c70a44af7a7f289c18d
Sha256: 6c8a4cb97af8ea4b4d7396ee21e4922b15ff3522f4ab83c3c0b7570baf4b3912
                                        
                                            GET /it/u=410054634,2181761146&fm=76 HTTP/1.1 
Host: f10.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:19 GMT
Content-Length: 9569
Connection: keep-alive
Etag: 6e51b221d6771f96b3d6507476d8a942
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:38:35 GMT
Age: 675764
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9569
Md5:    6e51b221d6771f96b3d6507476d8a942
Sha1:   87a8e519c0f68e844998d63a6c0cdbda6dc2ac59
Sha256: a21bae06e04a5f610f9ee4a08f9eb81febd556b32eded32e2d26d71184246d2c
                                        
                                            GET /pagead/ads?client=ca-pub-4936883368411950&output=html&h=240&slotname=4046791666&adk=2717207222&adf=807048394&w=240&lmt=1510988517&loeid=38893311&format=240x240&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634878536&bpp=4&fdt=84&idt=292&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90%2C700x90&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=820&ady=1371&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=312 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1; DSID=NO_DATA

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 07 Dec 2017 08:21:19 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   369
Md5:    d0ce0d5c07c824ab8cb0b269fe8882fb
Sha1:   32c6ab61daf954269b016fa3daeef2bffcb5f690
Sha256: bc3a9a7dfd54cf7f02c3f169570d37e44103437e545fa1d6f679639074c8e828
                                        
                                            GET /include/ckeditor/plugins/addon/plugin.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:18 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "c2380-2b0-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 688
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C program text, with CRLF line terminators
Size:   688
Md5:    5a9f66f1714759e623a035be2eef308b
Sha1:   4cb380e38bcfcb7648583e18d74ef78de136ff76
Sha256: 545ce2af3f019329429342d668bf7044c825018cb00065a7210f57ca70b08de9
                                        
                                            GET /pixel?dspid=19345814&ext_data= HTTP/1.1 
Host: cm.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         111.202.114.35
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Connection: keep-alive
Content-Length: 0
Date: Thu, 07 Dec 2017 08:21:19 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: http://match.p4p.1688.com:80/besmap?&baidu_error=2&timestamp=1512634879
Server: nginx


--- Additional Info ---
                                        
                                            GET /adx.php?c=d25pZD1jYTRlYTkzMTZiNDVlNTg4AHM9Y2E0ZWE5MzE2YjQ1ZTU4OAB0PTE1MTI2MzQ4NzgAc2U9MQBidT00AHByaWNlPVdpajVfZ0FOVDU5N2pFcGdXNUlBOGpwZ3pnaG10NkRCM2U0U3N3AGNoYXJnZV9wcmljZT00NgBzaGFyaW5nX3ByaWNlPTQ2MDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1FQzRGMTk3NEZDNTQ0MDVDODM1NDM3MDdEQkJBNjY1MwBjcHJvaWQ9AHdkPTAAcG9zPTAAYmNobWQ9MAB2PTEAaT1mMGRjMGRhOA HTTP/1.1 
Host: wn.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         106.39.162.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 49
Date: Thu, 07 Dec 2017 08:21:19 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: nginx


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /it/u=1580877922,2164374536&fm=76 HTTP/1.1 
Host: f11.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:19 GMT
Content-Length: 26438
Connection: keep-alive
Etag: 1faf1e680bba0cb21bf6dc1316ef7ee5
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:44:00 GMT
Age: 675439
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   26438
Md5:    1faf1e680bba0cb21bf6dc1316ef7ee5
Sha1:   35e5aa61befda0c041f816253f27a16c43113900
Sha256: 619c954cb0dd28b472d0b30b285409c6db716b928efeb33c5ba7ac4686e44044
                                        
                                            GET /it/u=78041141,1486761205&fm=76 HTTP/1.1 
Host: f12.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:19 GMT
Content-Length: 9221
Connection: keep-alive
Etag: 7bdf8efb4ce420828d84bb126d40fa7f
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:37:52 GMT
Age: 675807
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9221
Md5:    7bdf8efb4ce420828d84bb126d40fa7f
Sha1:   7e1cf74743cae739d87a11d13515940789ad8a23
Sha256: c37d913cec42b2ba54eab68742c5230ea75d4ef390c6a33f3a64d9db99e9ff15
                                        
                                            GET /it/u=480923042,1026870700&fm=76 HTTP/1.1 
Host: f12.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:19 GMT
Content-Length: 31706
Connection: keep-alive
Etag: c567e80c3657ed25c21aca6944494396
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:38:49 GMT
Age: 675750
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 0 0 0 0 0
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   31706
Md5:    c567e80c3657ed25c21aca6944494396
Sha1:   36957f72358c991a377d0995fa04ff78b0804706
Sha256: d7a8974aa4ba710d02bc87f516cbc0e1351b5c6420ea72714d963bf32d447435
                                        
                                            GET /it/u=928769438,1774876841&fm=76 HTTP/1.1 
Host: f12.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:19 GMT
Content-Length: 25374
Connection: keep-alive
Etag: 92f5e670ba78f915697a576c7c3aa4ca
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:47:28 GMT
Age: 675231
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 6 0 0 0 6
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   25374
Md5:    92f5e670ba78f915697a576c7c3aa4ca
Sha1:   63e7c1b352d18c84d1fa0c8bb8d5e762ac932637
Sha256: 440259cdc4e86542cc1c1c9da87a58daa27f50e759f641522f6a7faed295bc7e
                                        
                                            GET /include/ckeditor/plugins/bbcode/plugin.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:18 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a3772-66ee-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 26350
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C program text, with CRLF line terminators
Size:   26350
Md5:    4e141c9023b2e59f6f33a1a28e240f94
Sha1:   accaa607abe52077af16023392ead2e546ce8f18
Sha256: 31b9dbfc93114ddbb46e13ec9941b99539d1dc4523b66584a478881a3e9969fa
                                        
                                            GET /it/u=572940023,1529046588&fm=76 HTTP/1.1 
Host: f12.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         104.193.88.109
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: JSP3/2.0.14
Date: Thu, 07 Dec 2017 08:21:19 GMT
Content-Length: 83252
Connection: keep-alive
Etag: 666610114d94633204ad3c9f120f3dc2
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Expires: Fri, 29 Dec 2017 22:38:48 GMT
Age: 675751
Cache-Control: max-age=2628000
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Response-Time: 1 2 0 0 0 2
Timing-Allow-Origin: http://pos.baidu.com


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   83252
Md5:    666610114d94633204ad3c9f120f3dc2
Sha1:   a78c6568d8f15d8588192b439d34c9a3dac8e2ba
Sha256: 8512773f3af8f711f9e2ed669ef6a0a92f396f582c975bd68e1f61c1f45e41f5
                                        
                                            GET /besmap?&baidu_error=2&timestamp=1512634879 HTTP/1.1 
Host: match.p4p.1688.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175183&dc=3&di=u1175183&dri=0&dis=0&dai=4&ps=1121x819&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2842&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634878&qn=5c10ec26614f0cd9&tt=1512634867685.10474.10938.10955

                                         
                                         106.11.15.1
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 07 Dec 2017 08:21:20 GMT
Content-Length: 0
Connection: keep-alive
Eagleeye-Id: 0bfa043515126348800068321e8403
Server: Tengine/Aserver
EagleEye-TraceId: 0bfa043515126348800068321e8403
Timing-Allow-Origin: *


--- Additional Info ---
                                        
                                            GET /pagead/ads?client=ca-pub-4936883368411950&output=html&h=90&slotname=6578442461&adk=2610791413&adf=807048394&w=728&lmt=1510988517&loeid=38893311&format=728x90&url=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512634879799&bpp=5&fdt=10&idt=139&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=700x90%2C700x90%2C240x240&correlator=7700002882488&frm=20&ga_vid=842396265.1512634869&ga_sid=1512634869&ga_hid=1697341382&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=216&ady=2853&biw=1159&bih=754&abxe=1&eid=38893301%2C21061122%2C389613000&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=4&dtd=162 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: IDE=AHWqTUkd36WAA2ngF7psiuofNbh85cSdbe50FuIEp9h0hRW5NbDGbONUrxxipTB1; DSID=NO_DATA

                                         
                                         216.58.209.98
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 07 Dec 2017 08:21:20 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   368
Md5:    2b8c590c0652488f7be826b7c803b8b1
Sha1:   451cbf1e81d251bd0f6e57c722912f36ec7018ba
Sha256: 40afc037e16175520d5b4fad4cc527c19ab684140b1f667475579a2fbb50e755
                                        
                                            GET /include/ckeditor/skins/kama/icons.png HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/include/ckeditor/skins/kama/editor.css?t=B8DJ5M3
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 07 Dec 2017 08:21:19 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a37a5-15de-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 5598
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 16 x 1295, 8-bit colormap, non-interlaced
Size:   5598
Md5:    c95409aa0037202b7f586b6b12ae02c6
Sha1:   b16b131f227893150771f7d9af11475b680aebc9
Sha256: 2712c4aba308e8cfbe5306111f2a2da01b32c5073253bd8f04896ccf2e1b5c2d
                                        
                                            GET /include/ckeditor/skins/kama/images/sprites.png HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/include/ckeditor/skins/kama/editor.css?t=B8DJ5M3
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 07 Dec 2017 08:21:19 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a379f-1bae-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 7086
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 20 x 2000, 8-bit/color RGBA, non-interlaced
Size:   7086
Md5:    cbd4af5841f83007604ac6d065c4613d
Sha1:   afa8ef1a031e27a61d44c342608f287bafd54883
Sha256: 29da84bca9404039618acae997d699b314ccfb309d6e454e7fbae78928e01f82
                                        
                                            GET /include/ckeditor/contents.css HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 07 Dec 2017 08:21:19 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "a3795-22f-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 559
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII C program text, with CRLF line terminators
Size:   559
Md5:    1d0fca6109d6c6face79f4d3e59671b8
Sha1:   2e0eef3d74138f63a149665e62557928962c4237
Sha256: ba74daec35d5ee37202ba256f77a7356badaac26d4781b736fccd91756fcda9e
                                        
                                            GET /include/ckeditor/plugins/styles/styles/default.js?t=B8DJ5M3 HTTP/1.1 
Host: www.beihaiting.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: PHPSESSID=47ac41ea604ab06c758771388aca23ae; BDTUJIAID=88d25c0bf643b8f880850556a3d8e2c6

                                         
                                         211.149.198.216
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 07 Dec 2017 08:21:20 GMT
Server: Apache
Last-Modified: Fri, 13 Mar 2015 13:11:08 GMT
Etag: "c234a-555-5112b3bcb5300"
Accept-Ranges: bytes
Content-Length: 1365
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C program text, with very long lines, with CRLF line terminators
Size:   1365
Md5:    bea0cf87bd1092b545dadc255d424bcb
Sha1:   f9f1ab6492976a740101f7126da98c5455123ea2
Sha256: 84a221c707b66f0fe364995174046ff6894dc38300414795682f131ed23d74b6
                                        
                                            GET /adx.php?c=d25pZD03MGU4N2FhYTU4NTA5YmQxAHM9NzBlODdhYWE1ODUwOWJkMQB0PTE1MTI2MzQ4NzAAc2U9MQBidT00AHByaWNlPVdpajU5Z0FFUmtKN2pFcGdXNUlBOHV3Y1NjNWZCX0o0VjhRcG9BAGNoYXJnZV9wcmljZT02MQBzaGFyaW5nX3ByaWNlPTYxMDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1FQzRGMTk3NEZDNTQ0MDVDODM1NDM3MDdEQkJBNjY1MwBjcHJvaWQ9AHdkPTAAcG9zPTAAYmNobWQ9MAB2PTEAaT1hN2NmMzE5NQ HTTP/1.1 
Host: wn.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=1175088&dc=3&di=u1175088&dri=0&dis=0&dai=1&ps=206x113&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1176x754&pss=1176x754&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634868&qn=b79d2bd73051f9f6&tt=1512634867685.537.2354.2364
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         106.39.162.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 49
Date: Thu, 07 Dec 2017 08:21:21 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: nginx


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /adx.php?c=d25pZD0xYjI0MmRkMTQxMWU0ODAwAHM9MWIyNDJkZDE0MTFlNDgwMAB0PTE1MTI2MzQ4NzIAc2U9MQBidT00AHByaWNlPVdpajUtQUFIR0hSN2pFcGdXNUlBOHE3bkdUb1ZZT0RBa3V6SWlnAGNoYXJnZV9wcmljZT00MwBzaGFyaW5nX3ByaWNlPTQzMDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1FQzRGMTk3NEZDNTQ0MDVDODM1NDM3MDdEQkJBNjY1MwBjcHJvaWQ9AHdkPTAAcG9zPTAAYmNobWQ9MAB2PTEAaT0yMjcwZTAwMA HTTP/1.1 
Host: wn.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pos.baidu.com/wcpm?rdid=3136471&dc=3&di=u3136471&dri=1&dis=0&dai=3&ps=2217x99&enu=encoding&dcb=___adblockplus&dtm=HTML_POST&dvi=0.0&dci=-1&dpt=none&tsr=0&tpr=1512634867826&ti=%E6%80%8E%E4%B9%88%E8%AE%A9%E6%96%87%E4%BB%B6%E6%97%A0%E6%B3%95%E4%BF%9D%E5%AD%98%E5%88%B0%E6%A1%8C%E9%9D%A2%2C%E6%80%8E%E6%A0%B7%E7%A6%81%E6%AD%A2%E5%9C%A8%E6%A1%8C%E9%9D%A2%E4%BF%9D%E5%AD%98%E6%96%87%E4%BB%B6%3F_%E5%8C%97%E6%B5%B7%E4%BA%AD-%E6%9C%80%E7%AE%80%E5%8D%95%E5%AE%9E%E7%94%A8%E7%9A%84%E7%94%B5%E8%84%91%E7%9F%A5%E8%AF%86%E3%80%81IT%E4%BF%A1%E6%81%AF%E6%8A%80%E6%9C%AF%E7%BD%91%E7%AB%99&ari=2&dbv=0&drs=1&pcs=1159x754&pss=1159x2225&cfv=10&cpl=10&chi=1&cce=true&cec=GB2312&tlm=1510988517&rw=754&ltu=http%3A%2F%2Fwww.beihaiting.com%2Fa%2FXTJC%2FXTJQ%2F2014%2F0831%2F5220.html&ecd=1&uc=1176x855&pis=-1x-1&sr=1176x885&tcn=1512634872&qn=012e4281a5d72937&tt=1512634867685.4197.4541.4566
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         106.39.162.36
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: keep-alive
Content-Length: 49
Date: Thu, 07 Dec 2017 08:21:21 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: nginx


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET //InfoManage/TrojanInspect.aspx?p1=Z1I07QR/i4Zqg9Bp31iaA9KP4AFg7gZZfrGnOew6o80=&p2=P/mQmJefXGI=&p3=Z1I07QR/i4Zqg9Bp31iaA-GFaIJ/yuCL&url=http%3A//www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html HTTP/1.1 
Host: union.rising.com.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         211.103.159.102
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Thu, 07 Dec 2017 08:21:22 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Length: 319


--- Additional Info ---
Magic:  UTF-8 Unicode text, with no line terminators
Size:   319
Md5:    ca42cf3aca3d72af633c0ea8ea7eb113
Sha1:   3c42421f7805476668866785b9f21a2c37040d77
Sha256: 745ecc66553fd11e2e088ab40f6925196418adf9040512e51aa3fbcd25d0a791
                                        
                                            GET /images/calogo.gif HTTP/1.1 
Host: www.315safe.com.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html

                                         
                                         58.53.128.57
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 2134
Last-Modified: Sat, 21 Jan 2006 12:35:26 GMT
Accept-Ranges: bytes
Etag: "a2571128871ec61:17fa"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 07 Dec 2017 08:21:20 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 45 x 45
Size:   2134
Md5:    c032a90188a676e683aaab1a3e38e9c1
Sha1:   78b79ed8a1d29406b5f9eec098fc94b5ca008cb3
Sha256: a42e54aca54099868ad338b8155f4274c04d744b3627568a45dd81d461af6b91
                                        
                                            GET /h.js?42de0fdd1543df7bd040353c44458eb1 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.beihaiting.com/a/XTJC/XTJQ/2014/0831/5220.html
Cookie: BAIDUID=EC4F1974FC54405C83543707DBBA6653:FG=1

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 9588
Date: Thu, 07 Dec 2017 08:21:22 GMT
Etag: 40380d091b0d1220f707884aa9ddc49c
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=B688958B9DC744CD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT