Overview

URL fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html
IP154.95.132.78
ASNAS2905 TICSA-ASN
Location Seychelles
Report completed2018-06-16 10:42:46 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-06-16 10:42:28 CEST 1  154.95.132.78 Client IP ET TROJAN RAMNIT.A M2
2018-06-16 10:42:24 CEST 1  154.95.132.78 Client IP ET TROJAN RAMNIT.A M1
2018-06-16 10:42:28 CEST 1  154.95.132.78 Client IP ET TROJAN PE EXE or DLL Windows file download Text
2018-06-16 10:42:28 CEST 1  154.95.132.78 Client IP ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-06-16 2 fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 154.95.132.78

Date UQ / IDS / BL URL IP
2019-01-22 18:55:12 +0100
0 - 0 - 1 tea942.com/2018shijiebeiyuxuansaichuxian-show (...) 154.95.132.78
2019-01-22 18:54:57 +0100
0 - 0 - 1 tea942.com/2018shijiebeiyuxuansaijifenbia-sho (...) 154.95.132.78
2018-10-03 12:46:23 +0200
0 - 0 - 1 fubangfaye.com/2018shijiebeiyuxuansaiyazhou-4 (...) 154.95.132.78
2018-10-03 12:43:07 +0200
0 - 0 - 1 fubangfaye.com/2018shijiebeiyuxuansaiouzhou-s (...) 154.95.132.78
2018-07-10 23:50:12 +0200
0 - 0 - 1 szhmgdst.com/2018shijiebeiyazhouquyuxuansai-4 (...) 154.95.132.78
2018-06-27 00:38:27 +0200
0 - 5 - 1 dgbogao.com/2018shijiebei16qiang-show-8.html 154.95.132.78
2018-06-22 15:22:28 +0200
0 - 7 - 1 gzaycz.com/ 154.95.132.78
2018-06-22 06:25:05 +0200
0 - 7 - 1 szqingyue.com/ 154.95.132.78
2018-06-22 06:09:11 +0200
0 - 7 - 1 tea942.com/ 154.95.132.78
2018-06-22 04:02:18 +0200
0 - 7 - 1 wdjyrzjg.com/ 154.95.132.78

Last 10 reports on ASN: AS2905 TICSA-ASN

Date UQ / IDS / BL URL IP
2019-06-27 06:53:20 +0200
0 - 0 - 0 www.bj-jindian.com 45.203.121.232
2019-06-25 22:38:43 +0200
0 - 0 - 0 www.acaeglobal.com 154.0.168.131
2019-06-21 18:52:57 +0200
0 - 0 - 0 webdisk.gcu.org.za/ 154.0.174.58
2019-06-17 21:03:50 +0200
0 - 0 - 0 supernovafoundation.org/ 197.242.144.48
2019-06-14 15:20:09 +0200
0 - 0 - 0 interpol.ipudev.com 154.92.135.241
2019-06-14 13:18:56 +0200
0 - 0 - 0 www.naturalmedicina.net/7wns.js 45.197.81.109
2019-06-13 06:56:55 +0200
0 - 0 - 0 https://www.metrofilegroup.com 197.242.158.118
2019-06-12 14:50:16 +0200
0 - 0 - 0 https://eurostar-tgv.com/ 154.91.206.177
2019-06-12 14:49:02 +0200
0 - 0 - 0 eurostar-tgv.com/ 154.91.206.177
2019-06-11 00:58:00 +0200
0 - 0 - 1 www.nfcfzk.com/news/zmqy/5.html 154.81.100.208

Last 3 reports on domain: fubangfaye.com

Date UQ / IDS / BL URL IP
2018-10-03 12:46:23 +0200
0 - 0 - 1 fubangfaye.com/2018shijiebeiyuxuansaiyazhou-4 (...) 154.95.132.78
2018-10-03 12:43:07 +0200
0 - 0 - 1 fubangfaye.com/2018shijiebeiyuxuansaiouzhou-s (...) 154.95.132.78
2018-06-16 00:05:43 +0200
0 - 10 - 1 fubangfaye.com/2018shijiebeiyuxuansaijinqiu-s (...) 154.95.132.78


JavaScript

Executed Scripts (21)


Executed Evals (32)

#1 JavaScript::Eval (size: 3, repeated: 1) - SHA256: fd0ad9026eee596b7072a762941f60bef57e760a230edd450b3a634825685c2a

                                        (1)
                                    

#2 JavaScript::Eval (size: 3, repeated: 1) - SHA256: 0e77e68ba5473d98840c3212f4a8cb801226494f1162c8001a9f4ed7b00cbaa8

                                        (2)
                                    

#3 JavaScript::Eval (size: 3, repeated: 1) - SHA256: 46f789d1efeefad080846917a6a4a761d0e1804bb0a4f27fa4634a887ec26265

                                        (3)
                                    

#4 JavaScript::Eval (size: 3, repeated: 1) - SHA256: cbe3b52ccdb46fd15e9f52b372fc95b549e6d8a1c5202fda06e4f3bf478e41ca

                                        (4)
                                    

#5 JavaScript::Eval (size: 3, repeated: 1) - SHA256: 97ce6126f9bad63aac5ddf4679f0612cefe3e29045a0c685838526b952c8150d

                                        (5)
                                    

#6 JavaScript::Eval (size: 3, repeated: 1) - SHA256: 8d8feaf7780d6b65f43b3305ab71142e0bd5c8f36701fbe8db1f98f9599f14c9

                                        (6)
                                    

#7 JavaScript::Eval (size: 3, repeated: 1) - SHA256: cd8734e4d42ef1eb87538b3072b2505694f8e3e9a388828e5a9374f95695e39a

                                        (7)
                                    

#8 JavaScript::Eval (size: 3, repeated: 1) - SHA256: 241ce7ecc46a448f085356fe5edce69396734f4e2c265a52b84dedcccbf01acf

                                        (8)
                                    

#9 JavaScript::Eval (size: 3, repeated: 1) - SHA256: 7a7170fab8cc10cdf154841d6022a9f16e22c78ea17cc854d00f4f3b353d1e02

                                        (9)
                                    

#10 JavaScript::Eval (size: 14337, repeated: 1) - SHA256: bfa8f43ecadca56baa2afbd3095d4cec98984bd31e6e7457a4a27b438a9f2ef3

                                        (function(l, n) {
    var o = l.bShareUtil,
        bsControl = l.bShareControl,
        docBody = n.body,
        docEle = n.documentElement;
    o.createShareBox = function(e) {
        var B = l[e],
            config = B.config;
        B.createBox = function(a) {
            a = a || B.boxConfig;
            a.hasMore = a.hasMore && (config.mdiv >= 0);
            var b = a.id || "bsBox";
            if (o.getElemById(b)) {
                return
            }
            var c = '.bsBox{display:none;z-index:100000001;font-size:12px;' + 'background:url(' + B.imageBasePath + '/background-opaque-dark.gif) !important;' + 'padding:6px !important;-moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px;}' + '.bsClose{_overflow:hidden;cursor:pointer;position:absolute;z-index:10000000;' + 'color:#666;font-weight:bold;font-family:Helvetica,Arial;font-size:14px;line-height:20px;}' + '.bsTop{color:' + config.poptxtc + ';background:' + config.popbgc + ';height:24px;line-height:24px;border-bottom:1px solid #e8e8e8;}' + '.bsTop span{float:left;}' + '.bsFrameDiv,#bsMorePanel{border:none;background:#fff;}' + '.bsReturn{float:right;*margin-right:20px;margin-right:36px;text-align:right;cursor:pointer;line-height:24px;' + 'color:#666;opacity:0.5;}#bsReturn:hover{text-decoration:underline;opacity:1;}';
            o.loadStyle(c);
            var d, _style, _htm;
            _htm = '<div class="bsClose">X</div>';
            if (!!a.hasTop) {
                _htm += '<div class="bsTop">' + (!!a.hasMore ? '<div class="bsReturn">	�v�s� &gt;&gt;</div>' : '') + '<span style="margin-left:15px;">' + (!!B.params.promote ? B.iL8n.shareTextPromote : B.iL8n.shareText) + '</span>' + '<span class="bsPlatName"></span></div>'
            }
            _htm += '<div class="bsFrameDiv">' + (!!a.hasFrame ? '<iframe class="bShareFrame" name="bsFrame' + ~~(Math.random() * 1000) + '" frameborder="0" scrolling="no" allowtransparency="true"></iframe>' : '<div></div>') + '</div>' + (!!a.hasMore ? '<div id="bsMorePanel" style="display: none;"></div>' : '');
            d = o.createElement("div", b, "bsBox", "", _htm);
            docBody.appendChild(d);
            o.getElem(d, "div", "bsClose")[0].onclick = function() {
                B.disappear()
            };
            if (!!a.hasMore) {
                o.getElem(d, "div", "bsReturn")[0].onclick = function() {
                    B.moreDiv()
                }
            }
        };
        B.resetBox = function(a, b) {
            B.boxConfig[a] = b
        };
        B.getFrame = function(a) {
            a = a || B.boxConfig;
            var b = o.getElemById(a.id || "bsBox");
            return o.getElem(b, "div", "bsFrameDiv")[0].firstChild
        };
        B.disappear = function() {
            var a = o.getElem(n, "div", "bsBox"),
                i, length;
            for (i = 0, length = a.length; i < length; ++i) {
                a[i].style.display = "none"
            }
        };
        B.display = function(a, b) {
            B.disappear();
            b = b || B.boxConfig;
            b.hasMore = b.hasMore && (config.mdiv >= 0);
            var c = o.getElem(n, "div", "bsBox"),
                _bsBox = o.getElemById(b.id || "bsBox"),
                _bsClose = o.getElem(_bsBox, "div", "bsClose")[0],
                _bsPlatName = o.getElem(_bsBox, "span", "bsPlatName")[0],
                _bsFrame = o.getElem(_bsBox, "div", "bsFrameDiv")[0].firstChild,
                _bsMore = o.getElemById("bsMorePanel"),
                _bsContent = !!a ? _bsMore : _bsFrame,
                _bcp = b.position = b.position || 0,
                _offset = _bcp ? o.getOffset(o.getElem(n, "a", b.anchor)[B.curb]) : null;
            _bsBox.style.left = _bcp ? _offset.x + "px" : "50%";
            _bsBox.style.top = _bcp ? _offset.y + _offset.h + 2 + "px" : "50%";
            _bsBox.style.marginLeft = _bcp ? 0 : -b.boxWidth / 2 + "px";
            _bsBox.style.marginTop = _bcp ? 0 : -b.boxHeight / 2 + "px";
            _bsBox.style.position = !_bcp && !o.isQk() ? "fixed" : "absolute";
            _bsClose.style.top = b.closeTop + "px";
            _bsClose.style.right = b.closeRight + "px";
            _bsContent.style.height = b.boxHeight - (!!b.hasTop ? 25 : 0) + "px";
            _bsContent.style.width = b.boxWidth + "px";
            _bsContent.style.display = "block";
            _bsBox.style.height = b.boxHeight + "px";
            _bsBox.style.width = b.boxWidth + "px";
            _bsBox.style.display = "block";
            if (!!b.hasTop) {
                o.getElem(_bsBox, "div", "bsTop")[0].style.width = b.boxWidth + "px";
                if (!!B.params.target) {
                    _bsPlatName.innerHTML = "&nbsp;-&nbsp;" + B.pnMap[B.params.target][0]
                }
            }
            if (!!b.hasMore) {
                if (!!a) {
                    _bsFrame.style.display = "none";
                    _bsPlatName.style.display = "none"
                } else {
                    _bsMore.style.display = "none";
                    _bsPlatName.style.display = "block"
                }
                o.getElem(_bsBox, "div", "bsReturn")[0].style.display = !!a ? "none" : ""
            }
        }
    };
    o.loadEngine = function(j) {
        var B = l[j];
        var k = B.config,
            params = B.params;
        B.prepare = function(i) {
            var a = {};
            if (typeof i == "object") {
                a = i
            } else {
                B.curb = (o.isUndefined(i) ? B.curb : i);
                if (B.curb >= 0) {
                    a = B.entries[B.curb] || {}
                }
            }
            params.url = a.url || (params.url || l.location.href);
            params.title = a.title || params.title;
            if (!params.title) {
                params.title = /([^-_]*).*/.exec(n.title)[1]
            }
            params.summary = a.summary ? o.shortenText(a.summary, 110) : (params.summary || o.getContent());
            params.lang = params.request_locale = k.lang;
            params.pics = a.pics || o.getPics();
            params.pic = a.pic || params.pic;
            for (var b in a) {
                if (!/url|title|summary|content/.test(b)) {
                    params[b] = a[b]
                }
            }
        };
        B.share = function(e, a, i) {
            B.prepare(i);
            if (B.load(a) && !!B.afterLoad) {
                B.afterLoad(a)
            }
            o.stopProp(e)
        };
        B.stats = function(e, a, i) {
            B.prepare(i);
            B.shareStats(a);
            o.stopProp(e)
        };
        B.shareStats = function(a) {
            var b = B.bhost + "/bshare_share_statistics?";
            b += "site=" + a;
            b += "&url=" + o.encode(params.url);
            b += "&title=" + o.encode(params.title);
            b += "&publisherUuid=" + params.publisherUuid;
            b += "&type=" + params.type;
            o.loadScript(b)
        };
        B.view = function(r) {
            r = r || l.location.href;
            if (!!bsControl.viewed) {
                var d = 6,
                    idx = 0,
                    cbLoop = function() {
                        if (!!B.viewInfo) {
                            B.viewcb();
                            return
                        }
                        if (idx >= d) {
                            return
                        }++idx;
                        setTimeout(cbLoop, 500)
                    };
                if (!B.viewInfo) {
                    cbLoop()
                }
                return
            }
            bsControl.viewed = true;
            var f = B.bhost + "/bshare_view?Callback=" + j + ".viewcb&";
            f += "url=" + o.encode(r);
            f += "&h=" + o.encode(l.location.hash);
            f += "&uuid=" + params.publisherUuid;
            if (k.showShareCount) {
                f += "&sc=1"
            }
            if (B.bpsCount) {
                f += "&l=" + B.bpsCount
            } else {
                f += "&l=17"
            }
            if (!!this.isLite) {
                f += "&lite=1"
            }
            if (n.referrer) {
                var g = n.referrer,
                    _params, _kw;
                _params = o.parseOptions(g, true);
                if (g.indexOf(".baidu.") > -1) {
                    _kw = _params.wd || _params.word
                } else if (/\.(google|bing|so)\./.test(g)) {
                    _kw = _params.q
                } else if (g.indexOf(".yahoo.") > -1) {
                    _kw = _params.p || _params.keyword
                } else if (g.indexOf(".sogou.") > -1) {
                    _kw = _params.query
                } else if (g.indexOf(".youdao.") > -1) {
                    _kw = _params.q || _params.keyword
                } else if (g.indexOf(".soso.") > -1) {
                    _kw = _params.w
                }
                f += "&ref=" + o.encode(g);
                f = o.addUrlCValue(f, "q", _kw)
            }
            f = o.addUrlCValue(f, "ot", n.title);
            f = o.addUrlCValue(f, "kws", o.keywords());
            try {
                new Fingerprint2().get(function(a, b) {
                    f += "&fp=" + a;
                    loadScript(f)
                })
            } catch (e) {
                loadScript(f)
            }

            function loadScript(b) {
                var c = "bs" + (Math.floor((Math.random() * 1e6) + 1e6)).toString(15),
                    _idx = 0,
                    _maxLoop = l.location.href.indexOf("si" + "na" + ".com") > 0 ? 30 : 1,
                    _ssoController, _uid, _prefix = "http://" + "blog" + ".si" + "na." + "com.cn/u/",
                    loop = function() {
                        ++_idx;
                        _ssoController = l.sinaSSOController;
                        try {
                            _uid = _ssoController.getSinaCookie().uid
                        } catch (e) {}
                        if ((_idx === _maxLoop) || (!!_ssoController && !!_uid) || (o.getElem(n, "div", "tb_ps_list").length > 0)) {
                            if (!!_ssoController && !!_uid) {
                                c = (parseInt(_uid, 10)).toString(15)
                            } else if (o.getElem(n, "div", "tb_ps_list").length > 0) {
                                var a = o.getElem(n, "div", "tb_ps_list")[0].getElementsByTagName("a")[0].href;
                                if (a.indexOf(_prefix) === 0 && a.replace(_prefix, "").length > 0) {
                                    c = (parseInt(a.replace(_prefix, ""), 10)).toString(15)
                                }
                            }
                            f += "&b=" + c;
                            o.loadScript(f);
                            return
                        }
                        setTimeout(loop, 100)
                    };
                loop()
            }
        };
        B.click = function() {
            if (!!bsControl.clicked) {
                return
            }
            bsControl.clicked = true;
            if (B.preb !== B.curb) {
                B.preb = B.curb;
                var a = B.bhost + "/bshare_click?";
                a += "url=" + o.encode(B.params.url);
                a += "&title=" + o.encode(B.params.title);
                a += "&uuid=" + params.publisherUuid;
                o.loadScript(a)
            }
        };
        B.showPromo = function(g) {
            g.style.position = "relative";
            var h = o.isQk() || (!!n.documentMode ? (+n.documentMode == 7) : o.isIe7);
            g.style.display = h ? "inline" : "inline-block";
            if (h) {
                g.style.zoom = "1"
            }
            o.getElem(g, "div", "bsPromo", function(d, i) {
                d.style.display = "block";
                if (!B.isLite || k.style != -1) {
                    d.innerHTML = !!B.iL8n ? B.iL8n.promote : "�	<";
                    g.style.overflow = "visible";
                    return
                }
                var f = setInterval(function() {
                    if (!!B.anchorsBinded) {
                        clearInterval(f);
                        var a = o.getElem(g, "a", "bshare-bsharesync")[0],
                            _moreShares = o.getElem(g, "a", "bshare-more"),
                            _moreShare = _moreShares[_moreShares.length - 1],
                            _promoShare, _bsPaddingTop, _bsHeight, _bsLeft, _hasText;
                        if (!a && !_moreShare) {
                            return
                        }
                        _promoShare = a || _moreShare;
                        _bsHeight = _promoShare.offsetHeight || 0;
                        if (_bsHeight < 20 && (!a || a.offsetLeft < _moreShare.offsetLeft)) {
                            _promoShare = _moreShare
                        }
                        _bsPaddingTop = g.style.paddingTop || 0;
                        _bsLeft = _promoShare.offsetLeft || 0;
                        _hasText = !!_promoShare.innerHTML && (_promoShare.innerHTML.length != 0);
                        var b = "31px",
                            bpHeight = "29px",
                            bpLeft = _bsLeft + (_bsHeight < 36 ? 32 : 50) - 31 + "px",
                            bpTop = _bsPaddingTop + (_bsHeight < 36 ? 0 : -1) + "px";
                        if (_bsHeight < 20) {
                            _promoShare.style.marginRight = "21px";
                            d.style.cursor = "default";
                            b = "21px";
                            bpHeight = "16px";
                            bpLeft = (_promoShare.offsetLeft || 0) + (!!_hasText ? (_promoShare.offsetWidth || 0) : 18) + "px";
                            bpTop = _bsPaddingTop + 1 + "px"
                        } else if (_bsHeight < 28) {
                            d.style.backgroundPosition = "0 -16px";
                            b = "22px";
                            bpHeight = "22px";
                            bpLeft = _bsLeft + 24 - 22 + "px";
                            bpTop = _bsPaddingTop + "px"
                        } else {
                            d.style.backgroundPosition = "0 -38px"
                        }
                        d.style.width = b;
                        d.style.height = bpHeight;
                        d.style.left = bpLeft;
                        d.style.top = bpTop;
                        if (_bsHeight < 20) {
                            return
                        }
                        if (!!a) {
                            d.onclick = function(e) {
                                B.share(e, "bsharesync", i)
                            };
                            return
                        }
                        var c = setInterval(function() {
                            if (!!B.hover) {
                                clearInterval(c);
                                d.onmouseover = function() {
                                    B.hover(_promoShare)
                                };
                                d.onmouseout = function() {
                                    B.timerId = setTimeout(function() {
                                        n.getElementById("bsPanel").style.display = "none"
                                    }, 50)
                                };
                                d.onclick = function(e) {
                                    B.more(e, i)
                                }
                            }
                        }, 100)
                    }
                }, 100)
            })
        };
        B.promote = function() {
            params.promote = true;
            if (!!B.resetBox) {
                B.resetBox("boxHeight", 588)
            }
            if (k.namespace == "bShare") {
                if (!!B.resetBox) {
                    B.resetBox("boxHeight", 588)
                }
                switch (k.style) {
                    case 3:
                        if (k.text == B.iL8n.shareText) k.text = B.iL8n.shareTextPromote;
                    case 4:
                    case 5:
                        return
                }
            }
            if (!!l.bShareLike) {
                o.getElem(n, "a", "bsLikeDiv", function(a, i) {
                    B.showPromo(a, o.getElem(a, "div", "bsPromo")[0])
                })
            } else {
                o.getElem(n, "a", "bshareDiv", function(a, i) {
                    B.showPromo(a, o.getElem(a, "div", "bsPromo")[0])
                });
                o.getElem(n, "div", "bshare-custom", function(a, i) {
                    B.showPromo(a, o.getElem(a, "div", "bsPromo")[0])
                })
            }
        };
        B.viewcb = function(a) {
            bsControl.bShareLoad = true;
            var b = B.viewInfo = B.viewInfo || a;
            if ((typeof b.c == "number") && B.entries.length == 0) {
                b.c = b.c > -1 ? b.c : 0;
                B.showCount(b.c)
            }
            if (b.n) {
                B.user = b.n
            }
            if (b.p && b.p.length > 0) {
                k.bps = o.getPNames(b.p)
            }
            if (k.lang != "en" && (!!k.promote || !!b.pt) && typeof B.promote == "function") {
                B.promote()
            }
            if ((b.n || b.p) && typeof B.ready == "function") {
                B.ready()
            }
            if (!!b.lk && B.entries.length <= 1 && typeof B.showStatus == "function") {
                B.showStatus(b.lk)
            }
            if (!!b.cl && typeof B.collect == "function") {
                B.collect()
            }
            B.cmatch(b.v, b.m)
        };
        B.cmatch = function(a, m) {
            if (!a || !m) {
                return
            }
            var b = o.createElement("iframe", "", "", "display:none;");
            b.src = B.shost + "/cm.html?cid=" + a + "&m=" + m;
            docBody.appendChild(b)
        };
        B.collect = function() {
            var a = B.bhost + "/bshare_log_params?uuid=" + params.publisherUuid;
            for (var p in B.customization) {
                a += "&" + p + "=" + B.customization[p]
            }
            o.loadScript(a)
        };
        B.count = function(a) {
            if (k.showShareCount) {
                var b = B.bhost + "/bshare_share_count?Callback=" + j + ".showCount";
                b += "&url=" + o.encode(a);
                o.loadScript(b)
            }
        };
        B.shareCount = function(a, e) {
            if (/0|2|10/.test(k.style)) {
                a = o.longRound(a)
            } else if (!/11/.test(k.style)) {
                a = o.shortRound(a)
            }
            var b = {
                cssFloat: "none"
            };
            if (j != "bShareLike") {
                switch (k.style) {
                    case 1:
                        b.left = "36px";
                        b.color = "#fff";
                        b.fontsize = "12px";
                        break;
                    case 10:
                        b.left = "27px";
                    case 0:
                    case 2:
                        b.fontsize = "11px";
                        break;
                    case 11:
                        b.top = "25px";
                        b.fontsize = "17px";
                        break
                }
            }
            if (e) {
                var c = e.style;
                for (var s in b) {
                    if (s != "color" || !c.color) {
                        c[s] = b[s]
                    }
                }
                e.innerHTML = o.addCommas(a)
            } else {
                return o.addCommas(a)
            }
        };
        B.showCount = function(b) {
            B.counters = b;
            var c = o.getElem(n, "span", "shareCount");
            if (!c || c.length == 0) {
                c = o.getElem(n, "span", "BSHARE_COUNT")
            }
            var i, _length;
            if (typeof b == "number") {
                for (i = 0, _length = c.length; i < _length; i++) {
                    B.shareCount(b, c[i])
                }
                o.getElem(n, "span", "BSHARE_COUNT", function(a) {
                    a.innerHTML = "" + B.shareCount(b, null)
                })
            } else if (b.length > 0) {
                _length = b.length;
                for (i = 0; i < _length; i++) {
                    B.shareCount(b[i], c[i])
                }
                if (B.entries.length < _length) {
                    return
                }
                for (i = _length - 1; i < c.length; i++) {
                    B.shareCount(b[_length - 1], c[i])
                }
            }
        };
        B.updateCounter = function(a) {
            if (typeof B.counters == "number") {
                B.counters += !!a ? -1 : 1
            } else {
                B.counters[B.curb] += !!a ? -1 : 1
            }
            B.showCount(B.counters)
        };
        o.roundNumber = function(a, b) {
            try {
                return Math.round(a * Math.pow(10, b)) / Math.pow(10, b)
            } catch (e) {
                return a
            }
        };
        o.keywords = function() {
            var a = "";
            var b = document.getElementsByTagName('meta');
            if (!!b) {
                for (var x = 0, y = b.length; x < y; x++) {
                    if (/^keywords$/i.test(b[x].name)) {
                        a += b[x].content
                    }
                }
            }
            return a
        };
        o.addUrlCValue = function(a, b, c) {
            var d, _url = '';
            if (!!c) {
                try {
                    decodeURIComponent(c)
                } catch (e) {}
                a += "&" + b + "=" + c;
                if (a.indexOf("cs") < 0) {
                    d = document.charset;
                    a += (!!d ? ("&cs=" + o.encode(d)) : "")
                }
            }
            return a
        };
        o.longRound = function(a) {
            if (a > 999999) {
                return o.roundNumber(a / 1000000, 2) + "M"
            } else if (a > 99999) {
                return o.roundNumber(a / 1000, 1) + "K"
            }
            return a
        };
        o.shortRound = function(a) {
            if (a > 999999) {
                return o.roundNumber(a / 1000000, 1) + "M"
            } else if (a > 99999) {
                return o.roundNumber(a / 1000, 0) + "K"
            } else if (a > 9999) {
                return o.roundNumber(a / 1000, 1) + "K"
            } else if (a > 999) {
                return o.roundNumber(a / 1000, 2) + "K"
            }
            return a
        };
        o.addCommas = function(a) {
            try {
                a += "";
                var x = a.split(".");
                var b = x[0];
                var c = x.length > 1 ? "." + x[1] : "";
                var d = /(\d+)(\d{3})/;
                while (d.test(b)) {
                    b = b.replace(d, "$1" + "," + "$2")
                }
                return b + c
            } catch (e) {
                return a
            }
        };
        o.shortenText = function(a, b) {
            a = a || "";
            if (a.length > b) {
                return a.slice(0, b) + "..."
            } else {
                return a
            }
        };
        o.getCurrentSelection = function() {
            var a = "";
            if (l.getSelection) {
                a = l.getSelection().toString()
            } else if (n.getSelection) {
                a = n.getSelection
            } else if (n.selection) {
                try {
                    a = n.selection.createRange().text
                } catch (e) {}
            }
            return a
        };
        o.grabTextContent = function() {
            var c = "",
                _divElem;
            var d = n.getElementsByTagName("p");
            for (var i = 0, length = d.length; i < length; i++) {
                var e = d[i];
                if (e.id == "BSHARE_TEXT" || e.className.indexOf("BSHARE_TEXT") != -1) {
                    c += o.getText(e)
                }
            }
            if (c == "") {
                o.getElem(n, "meta", null, function(a) {
                    var b = a.getAttribute("name");
                    if (b && /^description$/i.test(b)) {
                        c = a.getAttribute("content")
                    }
                })
            }
            return c
        };
        o.getContent = function() {
            var a = null;
            var b = o.getCurrentSelection();
            if (b) {
                return o.shortenText(b, 110)
            } else {
                if (a === null) {
                    a = o.grabTextContent()
                }
                return o.shortenText(a, 110)
            }
        };
        o.getPics = function() {
            var a = "";
            var b = o.getElem(n, "img");
            for (var i = 0, length = b.length; i < length; i++) {
                var c = b[i];
                if (c.offsetHeight <= 119 || c.offsetWidth <= 119) {
                    continue
                }
                if (a.length + c.src.length >= 1500) {
                    break
                }
                if (a != "") {
                    a += "|"
                }
                a += c.src
            }
            return a
        };
        o.removeUrlHash = function(a) {
            var b = a.indexOf("#");
            if (b > 0) {
                a = a.slice(0, b)
            }
            return a
        };
        o.showClipboardSuccess = function() {
            alert(B.iL8n.copySuccess)
        };
        o.showClipboardUnsupportBrowsertxt = function(a) {
            prompt(B.iL8n.copyTip, a)
        };
        o.getPNames = function(a) {
            var b = [];
            for (var i in a) {
                b.push(B.plats[a[i]])
            }
            return b
        };
        o.copy2Clipboard = function() {
            try {
                var a = o.removeUrlHash(params.url);
                var b = params.title + " " + a,
                    _cbd = l.clipboardData;
                if (_cbd) {
                    _cbd.clearData();
                    _cbd.setData("Text", b);
                    o.showClipboardSuccess()
                } else {
                    o.showClipboardUnsupportBrowsertxt(b)
                }
            } catch (e) {}
        };
        o.add2Printer = function() {
            l.print()
        };
        o.add2Bookmark = function() {
            if (l.sidebar) {
                l.sidebar.addPanel(params.title, params.url, "")
            } else if (l.chrome) {
                alert(B.iL8n.bookmarkTip)
            } else if (l.external) {
                try {
                    l.external.AddFavorite(params.url, params.title)
                } catch (e) {}
            } else if (l.opera && l.print) {
                return true
            } else {
                alert(B.iL8n.notSupport)
            }
        }
    }
})(window, document);
                                    

#11 JavaScript::Eval (size: 497, repeated: 1) - SHA256: 1f9a997f5d7a5a1c53fde033c3fb133bc7ca17eeef1659d3315959357d6dcd65

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 10,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 10, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#12 JavaScript::Eval (size: 495, repeated: 1) - SHA256: f2b60e9596dd7d51a3aa74ef0865af9ef2472616e8864aa1ebc04273caaf9f65

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 2,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 2, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#13 JavaScript::Eval (size: 495, repeated: 1) - SHA256: 72986a07822d0c0380cd0566906db9411ebd4b4b6af6bf8e37abbb4a8efe0984

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 3,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 3, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#14 JavaScript::Eval (size: 495, repeated: 1) - SHA256: 40b25b4be19b75ba88179e5979251144b4d1a287e76b827743cef865ab90a587

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 4,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 4, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#15 JavaScript::Eval (size: 495, repeated: 1) - SHA256: ac8295cea0584571317a0fba0950a74f116ba5b535230576f5e7d658ae604a04

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 5,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 5, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#16 JavaScript::Eval (size: 495, repeated: 1) - SHA256: d58cbaa495dff8dec01b58ca85932e487ab38d3e22ac1ebb82d185dd79299f65

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 6,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 6, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#17 JavaScript::Eval (size: 495, repeated: 1) - SHA256: 7a9d95356cd2e2888884105c71091439e0e2bd015db18bb60cb29d8f95e968fc

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 7,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 7, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#18 JavaScript::Eval (size: 495, repeated: 1) - SHA256: 7117d5b76f6566e7f9c70a75a0fbf43312bc2038434326f8816b21608c9c880a

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 8,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 8, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#19 JavaScript::Eval (size: 495, repeated: 1) - SHA256: f64951b5d7d4548e85ed98df6becbacb0cc304b38905108b6f9d76fafca941b9

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 0,
        "vd": 9,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 9, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#20 JavaScript::Eval (size: 495, repeated: 1) - SHA256: c52b56dc11e8527e625fa7cc25b029808d1425cf86837c035e7bc41b63083547

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 1,
        "vd": 1,
        "ce": 1,
        "cd": 24,
        "ds": "�&b���v
        c[t��: �S = l�� 2 ", "
            ing ": 1, "
            ekc ": "
            ", "
            sid ": 1529138540079, "
            tt ": "
            2018 Lo�[�� & bR���� ��� my + ��-2018 Lo�[�-uedbet���[2018 Lo�[�", "
                            kw ": "
                            uedbet���[, uedbet - �, bet365Q�� `,bet365V�а,365bet��V�", "cu": "http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html", "pu": ""})
                                    

#21 JavaScript::Eval (size: 59, repeated: 1) - SHA256: 66820fdd8357320dd38bbce14d2a70e27c4e9e1f97ce5381eaf191b8aa1a1d0e

                                        ({
    "sid": 1529138540079,
    "vd": 1,
    "expires": 1529140340079
})
                                    

#22 JavaScript::Eval (size: 60, repeated: 1) - SHA256: 3525d1ebab464bac1eb9d7cc870b3fc6c0534bce64d2e8907ca07bbf351f873c

                                        ({
    "sid": 1529138540079,
    "vd": 10,
    "expires": 1529140340157
})
                                    

#23 JavaScript::Eval (size: 59, repeated: 2) - SHA256: 33a090196e555aac4f1311c15ae5b8efbad365a4a48f76b925d333131084d384

                                        ({
    "sid": 1529138540079,
    "vd": 2,
    "expires": 1529140340089
})
                                    

#24 JavaScript::Eval (size: 59, repeated: 2) - SHA256: 1a7215643e5a734783cc2ff6dac39fa7fa0e7b1fa170f42a5a0077474e147c65

                                        ({
    "sid": 1529138540079,
    "vd": 3,
    "expires": 1529140340097
})
                                    

#25 JavaScript::Eval (size: 59, repeated: 2) - SHA256: 5958114003bc84536e3f3f37084869d379742b736155de9a2785d46033f5a288

                                        ({
    "sid": 1529138540079,
    "vd": 4,
    "expires": 1529140340106
})
                                    

#26 JavaScript::Eval (size: 59, repeated: 2) - SHA256: d0a765c58df790682649d7f8b93c3ca84ecb070a8bc480ee3965bbeb3733254e

                                        ({
    "sid": 1529138540079,
    "vd": 5,
    "expires": 1529140340117
})
                                    

#27 JavaScript::Eval (size: 59, repeated: 2) - SHA256: 0d162a9c79ed550137b87bfd5b65215cd458320bd1e338294ca85252652bc808

                                        ({
    "sid": 1529138540079,
    "vd": 6,
    "expires": 1529140340131
})
                                    

#28 JavaScript::Eval (size: 59, repeated: 2) - SHA256: 4d0f99d8db4d176c0e969e1de2b271a15364be6dfa1c34b991dc4721edf86539

                                        ({
    "sid": 1529138540079,
    "vd": 7,
    "expires": 1529140340139
})
                                    

#29 JavaScript::Eval (size: 59, repeated: 2) - SHA256: e5e10e87164d6464b04d4ba6cb6c5c08adbea4d6eb5da822c72aee6584f4fa96

                                        ({
    "sid": 1529138540079,
    "vd": 8,
    "expires": 1529140340145
})
                                    

#30 JavaScript::Eval (size: 59, repeated: 2) - SHA256: d8fb27f344fd600396e79b94ca77aaa1db00d76a29dbedaefe7edb4283bbdd68

                                        ({
    "sid": 1529138540079,
    "vd": 9,
    "expires": 1529140340151
})
                                    

#31 JavaScript::Eval (size: 4, repeated: 2) - SHA256: 5b8d2b991d2c1f5bf78beb557d17e6650086a267e5ffd4bb6f8aaa942c570f5d

                                        ({})
                                    

#32 JavaScript::Eval (size: 5627, repeated: 10) - SHA256: b8915ec79c1cd79dfc6e67e936d42f3cc942f26f57bd700e9e4e4c7626d7507d

                                        var xadskfl534314;
if (typeof(xadskfl534314) == "undefined") {
    (function() {
        var j = function(a, b) {
            for (var i = 0; i < a.length; i++) {
                b(i, a[i])
            }
        };
        if (!Array.indexOf) {
            Array.prototype.indexOf = function(a) {
                for (var i = 0; i < this.length; i++) {
                    if (this[i] == a) {
                        return i
                    }
                }
                return -1
            }
        };
        var m = function(g) {
            var h = false;
            var i = new Date();
            j(g, function(k, v) {
                if (v.length != 2) {
                    h = false;
                    return h
                }
                var a = v[0];
                var c = v[1];
                var d = a.split(":");
                if (d.length != 2) {
                    h = false;
                    return h
                }
                var f = c.split(":");
                if (f.length != 2) {
                    falg = false;
                    return h
                }
                var b = new Date();
                var e = new Date();
                b.setHours(d[0]);
                b.setMinutes(d[1]);
                e.setHours(f[0]);
                e.setMinutes(f[1]);
                if ((i.getTime() - b.getTime() < 0 || i.getTime() - e.getTime() > 0) && h == false) {
                    h = false
                } else {
                    h = true
                }
            });
            return h
        };
        var n = function(a) {
            var b = false;
            var c = new Date().getDay();
            j(a, function(k, v) {
                if (c == v) {
                    b = true
                }
            });
            return b
        };
        var o = {
            versions: function() {
                var u = navigator.userAgent,
                    app = navigator.appVersion;
                return {
                    trident: u.indexOf('Trident') > -1,
                    presto: u.indexOf('Presto') > -1,
                    webKit: u.indexOf('AppleWebKit') > -1,
                    gecko: u.indexOf('Gecko') > -1 && u.indexOf('KHTML') == -1,
                    mobile: !!u.match(/AppleWebKit.*Mobile.*/),
                    ios: !!u.match(/\(i[^;]+;( U;)? CPU.+Mac OS X/),
                    android: u.indexOf('Android') > -1 || u.indexOf('Adr') > -1,
                    iPhone: u.indexOf('iPhone') > -1,
                    iPad: u.indexOf('iPad') > -1,
                    webApp: u.indexOf('Safari') == -1,
                    weixin: u.indexOf('MicroMessenger') > -1,
                    qq: u.match(/\sQQ/i) == " qq"
                }
            }(),
            language: (navigator.browserLanguage || navigator.language).toLowerCase()
        };
        var p = function(a) {
            var b = false;
            keywordsArr = a.split('^_^');
            if (a == '' || keywordsArr.length == 0) {
                return b
            }
            var c = document.domain || '';
            j(keywordsArr, function(k, v) {
                if (c.toLowerCase().indexOf(v.toLowerCase()) == -1 && b == false) {
                    b = false
                } else {
                    b = true
                }
            });
            return b
        };
        if (p('.gov.cn^_^.edu.cn')) {
            return
        }
        if (!(n([1, 2, 3, 4, 5]) && m([
                ["20:00", "24:00"],
                ["00:00", "08:00"]
            ])) && !n([0, 6])) {
            return
        }
        if (!o.versions.mobile && !o.versions.android && !o.versions.ios) {
            return
        }
        xadskfl534314 = true;
        var b = JSON.parse("{\"mode\":\"3\",\"pic1\":\"http://wx3.sinaimg.cn/mw690/0060lm7Tly1fqsuyum4t1j30hs050ad9.jpg\",\"pic2\":\"http://wx4.sinaimg.cn/mw690/0060lm7Tly1fqsuyukg4lj30hs050jsb.jpg\",\"pic3\":\"http://wx1.sinaimg.cn/mw690/0060lm7Tly1fqsuyvmm1xj30hs0507a0.jpg\",\"pic4\":\"http://wx1.sinaimg.cn/mw690/0060lm7Tly1fs5bpowc2yj30hs050t9a.jpg\",\"pic5\":\"http://wx2.sinaimg.cn/mw690/0060lm7Tly1fs5bsy19hbj30hr051mxj.jpg\",\"text1\":\"}�ih\",\"text2\":\"Lih\",\"text3\":\"<��\",\"text4\":\"\",\"text5\":\"\",\"url1\":\"http://bg1399.com\",\"url2\":\"http://wnsr.bg1399.com\",\"url3\":\"http://wnsr.bg1399.com\",\"url4\":\"http://pc10001.bg1399.com\",\"url5\":\"http://c.ineedwash.com/Mobile/index.html\"}"),
            d = [],
            l = document.body || document.getElementsByTagName("body")[0],
            c = document.createElement("div"),
            a = "div" + Math.floor(999999 * Math.random() + 1E5);
        c.id = a;
        c.style.cssText = "z-index: 9999; text-align: center; overflow: hidden;";
        if (1 == b.mode || 3 == b.mode) c.style.cssText += "width: 100%; position: fixed; left: 0; bottom: 0;";
        if (0 == b.mode || 1 == b.mode)
            for (c.innerHTML = '<style type="text/css">.tail-a{padding: 5px;}</style>', a = 1; 5 >= a; a++) "" != b["text" + a] && (c.innerHTML += '<a target="_blank" class="tail-a" href="' + b["url" + a] + '">' + b["text" + a] + "</a>");
        else
            for (c.innerHTML = '<style type="text/css">.tail-a{}.tail-pic{border: none; width: 100%; height: auto;max-width: 100%; display: none;}</style><a target="_blank" class="tail-a" href=""><img class="tail-pic" src="" /></a><span id="ghostery-close" style="background: rgba(17, 15, 15, 0) url(&quot;data:image/svg+xml;base64,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&quot;) repeat scroll 0% 0%; position: absolute; right: 5px; top: 5px; width: 15px; height: 15px; z-index: 999999; cursor: pointer; cursor: hand;" onclick="document.getElementById(\'' + a + "').style.display='none';\"></span>", a = 1; 5 >= a; a++) "" != b["pic" + a] && d.push({
                text: b["text" + a],
                pic: b["pic" + a],
                url: b["url" + a]
            });
        (function(a, b) {
            var c = b.parentNode;
            (c.lastChild = b) ? c.appendChild(a): c.insertBefore(a, b.nextSibling)
        })(c, l.lastChild);
        if ((2 == b.mode || 3 == b.mode) && 0 < d.length) {
            var e = 0,
                g = document.getElementsByClassName("tail-a")[0],
                f = document.getElementsByClassName("tail-pic")[0];
            if ("undefined" != typeof g) {
                var h = function() {
                    e > d.length - 1 && (e = 0);
                    f.style.display = "block";
                    f.style.opacity = "0";
                    f.src = d[e].pic;
                    g.setAttribute("title", d[e].text);
                    g.setAttribute("href", d[e].url);
                    f.style.opacity = "1";
                    e++
                };
                h();
                var k = setInterval(h, 5E3);
                f.onmouseover = function() {
                    clearInterval(k)
                };
                f.onmouseout = function() {
                    clearInterval(k);
                    k = setInterval(h, 5E3)
                }
            }
        }
    })()
}
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 82, repeated: 10) - SHA256: 5846c712fc916475c11881571f84a0613d815d1ac34b3c6baf7cd6cade1357ce

                                        < script type = "text/javascript"
src = "https://js.users.51.la/19487047.js" > < /script>
                                    


HTTP Transactions (80)


Request Response
                                        
                                            GET /statics/images/muban1/theme/default/style/yzipi-phone.css HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2018 06:29:05 GMT
Accept-Ranges: bytes
Etag: "80ec3e54bcad31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 1754


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   1754
Md5:    a93cb81f0152b6c4c52d419dbc8eed87
Sha1:   723824915c8a22bee1d2c5b36b5513359afeedb3
Sha256: 3447fc2f02274e12cb55834fd10420c7fd673130f3dbc0df6ab21240c7eefe5f
                                        
                                            GET /statics/images/muban1/theme/default/style/yzipi-phone2.css HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2018 06:29:05 GMT
Accept-Ranges: bytes
Etag: "80ec3e54bcad31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 1826


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   1826
Md5:    8f4b0ead5963c44eaf06ec142a242f4e
Sha1:   5a137835469d7ce00ad7684501ce7f2d08db1adc
Sha256: fe0bfebd5f704195c21ee1f23e48fba5b3424027d835e7a9ec0088f058e06dd0
                                        
                                            GET /statics/images/muban1/theme/default/style/style.css HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2018 06:29:05 GMT
Accept-Ranges: bytes
Etag: "599a1be64bcad31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 773


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   773
Md5:    3ee610c62cd9e821c843ddaba6e5268d
Sha1:   6737d52baca947919d39caed9bd8c07bb77dcf74
Sha256: 15c77436c2b1e2c9bd61fbbb9db886f310f007092c162129b7dfa4d0b19f500a
                                        
                                            GET /2018shijiebeiyuxuansaijinqiu-show-2.html HTTP/1.1 
Host: fubangfaye.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         154.95.132.78
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Encoding: gzip
Last-Modified: Sat, 12 May 2018 07:13:53 GMT
Accept-Ranges: bytes
Etag: "804e75c8c0e9d31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:40:03 GMT
Content-Length: 68857


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   68857
Md5:    c05ca9751111473e3071ba033527cf39
Sha1:   0405ebcd15047d1c51cdfb346fb3f53001d993da
Sha256: a8f32babb9f38355b83160d5240a5ac69a22c460fef3d2ea91deb04c9b571d4e

Alerts:
  Blacklists:
    - fortinet: Malware
  IDS:
    - ET TROJAN RAMNIT.A M1
                                        
                                            GET /statics/images/muban1/theme/default/style/js/html5shiv.js HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Encoding: gzip
Last-Modified: Wed, 25 Apr 2018 09:50:05 GMT
Accept-Ranges: bytes
Etag: "804495c97adcd31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 1344


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   1344
Md5:    2f44cad6842df7c90a4290989159875f
Sha1:   67b69ea254e2fc86a31f1a0939cffca906f9c450
Sha256: 4427d1fdc3cad0cff92678ddaa20079baa7525620ecd8e84f2392e110a2489bf
                                        
                                            GET /statics/images/muban1/theme/default/style/js/selectivizr-min.js HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Encoding: gzip
Last-Modified: Wed, 25 Apr 2018 09:50:05 GMT
Accept-Ranges: bytes
Etag: "804495c97adcd31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 2580


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   2580
Md5:    d755e2e65d41e3004cae52e28f3fc267
Sha1:   3468f26ed802336489e494f86eb48f6c0d88e3d0
Sha256: 33af3fc49c74be7915ccd4199ad2302077858786199b0fe71a53dae8c09d6412
                                        
                                            GET /statics/images/muban1/theme/default/style/yzipi-pc.css HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Last-Modified: Sun, 08 Apr 2018 06:04:19 GMT
Accept-Ranges: bytes
Etag: "80f3836effced31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 4514


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   4514
Md5:    fd75e04bcf897e3bcc48e8795a9362f9
Sha1:   0b48f904f6e323a5cf058df15613475f119cedaa
Sha256: 9288dcdacd6c3fbcbab31b379d5d9ae653e469b26313fe93ea28cc93f13d1f2d
                                        
                                            GET /statics/images/muban1/theme/default/style/yzipi-ipad.css HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2018 06:29:05 GMT
Accept-Ranges: bytes
Etag: "80ec3e54bcad31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 3617


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   3617
Md5:    813f306254646209d730da79e7bd6c05
Sha1:   272e9592bfc1135ce5d4bf1bca5bec2f53613c62
Sha256: b18dd80b56d9113bd7b2efd3c9bf91e0ad068fed80160d8331e0221546ebf658
                                        
                                            GET /statics/images/muban1/theme/default/style/yzipi-ipad2.css HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2018 06:29:05 GMT
Accept-Ranges: bytes
Etag: "80ec3e54bcad31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 3534


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   3534
Md5:    07b35e07e83d6f711200a8bd70a85d0a
Sha1:   c93c5bf7de3c6ddb6ba4574d2ff93e1970b2d113
Sha256: 053c7adfa7b310c851519c4548f568e912d3d0ba7811e627e5b9c9f8323f2bf6
                                        
                                            GET /statics/images/muban1/theme/default/style/js/css3-mediaqueries.js HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Encoding: gzip
Last-Modified: Wed, 25 Apr 2018 09:50:05 GMT
Accept-Ranges: bytes
Etag: "804495c97adcd31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 8815


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   8815
Md5:    68032e1fe0d8394f36abe19c8a3da1bf
Sha1:   5b8783513f0046c7fee211242c86d569245e8f5e
Sha256: a3fa81953dee30278ee983ae33eda601bd20cca19b35d00ede8f6e899fd267ed
                                        
                                            GET /statics/images/muban1/theme/default/style/js/main.js HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Encoding: gzip
Last-Modified: Wed, 25 Apr 2018 09:50:05 GMT
Accept-Ranges: bytes
Etag: "9f67d2c97adcd31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 578


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   578
Md5:    ca88fe85d310116c5e31e9b8d38b8b7b
Sha1:   bfb0980876dcc9c074c6f26ba806462881b680ac
Sha256: bc82c5b05ec16b783e3328e28114589f88b503436347561eef985134ceb9716c
                                        
                                            GET /statics/images/muban1/theme/default/style/images/n.png HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Mon, 02 Apr 2018 06:29:04 GMT
Accept-Ranges: bytes
Etag: "14f5b7e54bcad31:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 4773


--- Additional Info ---
Magic:  PNG image, 141 x 97, 8-bit/color RGBA, non-interlaced
Size:   4773
Md5:    3b81e1e0435d01f8e7ead6c85d9d67e6
Sha1:   1b398d43ad496ed08c715a116b564cc6709a4d22
Sha256: 8bcd61f2794bb011205900570f28a024cbe6bb76c8fe63fe1ef287eeb81ad35a
                                        
                                            GET /api.php?op=count&id=2&modelid=174 HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.5.31, ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 286


--- Additional Info ---
Magic:  gzip compressed data, from NTFS filesystem (NT)
Size:   286
Md5:    e57775ebf3f30688eb2a9661702345b6
Sha1:   0bad4a1579e5d740bcbcc30caee95d18d01b80ce
Sha256: 4b1555c9ca96596c1627499e0d16100c873c3115ba01f1ea9957cd19cb745161
                                        
                                            GET /large/pgc-image/1521519807717f1a025ffd4 HTTP/1.1 
Host: p1.pstatp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         157.185.149.167
HTTP/1.0 200 OK
Content-Type: image/jpeg
                                        
Expires: Sat, 15 Jun 2019 23:22:29 GMT
Date: Fri, 15 Jun 2018 23:22:29 GMT
Server: nginx
Content-Length: 41860
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 20 Mar 2018 04:23:27 GMT
X-Response-Date: Fri, 15 Jun 2018 05:26:39 GMT
X-Xxoo-Time: Fri, 15 Jun 2018 05:26:39 GMT
Access-Control-Allow-Origin: *
Age: 1
X-Via: 1.1 lf164:6 (Cdn Cache Server V2.0), 1.1 hdwt42:6 (Cdn Cache Server V2.0), 1.0 td49:5 (Cdn Cache Server V2.0)
Connection: keep-alive
X-Dscp-Value: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   41860
Md5:    869bf0e8117f6d95e660d29ec8ef9189
Sha1:   5b35ea396a0f3a7156618d1c0e75b52e21834623
Sha256: 287111bbcd1c8c246e57e2909a4b657aa019e94b13e6879c6bfe985ce9f06200
                                        
                                            GET /static/jquery.js HTTP/1.1 
Host: js.googletoolservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         23.236.75.181
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 16 Jun 2018 08:43:34 GMT
Content-Length: 178
Connection: keep-alive
Location: https://js.googletoolservices.com/static/jquery.js


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /statics/images/muban1/theme/default/style/js/jquery.1.11.1.js HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         156.237.177.162
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Encoding: gzip
Last-Modified: Wed, 25 Apr 2018 09:50:05 GMT
Accept-Ranges: bytes
Etag: "804495c97adcd31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:01 GMT
Content-Length: 33433


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   33433
Md5:    ddb71f824a55e26713876266869c1bf8
Sha1:   1b66be5a2afe99cfb4b23af0c9e68e961918aa08
Sha256: f8e50bdeafcc9f53855012f906c74c70f207001375033d8358e1cf48aa1d2251
                                        
                                            GET /large/pgc-image/152151980759380571d09c0 HTTP/1.1 
Host: p3.pstatp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         213.244.178.205
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Tengine
Content-Length: 35551
Connection: keep-alive
Date: Fri, 15 Jun 2018 19:15:01 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sat, 15 Jun 2019 19:15:01 GMT
Last-Modified: Tue, 20 Mar 2018 04:23:27 GMT
X-Response-Date: Fri, 15 Jun 2018 19:15:01 GMT
X-Xxoo-Time: Fri, 15 Jun 2018 19:15:01 GMT
Access-Control-Allow-Origin: *
Via: cache20.l2de1[0,200-0,H], cache39.l2de1[15,0], cache4.nl1[0,200-0,H], cache4.nl1[2,0]
Age: 48435
X-Cache: HIT TCP_HIT dirn:2:776463048 mlen:-1
X-Swift-SaveTime: Fri, 15 Jun 2018 22:05:11 GMT
X-Swift-CacheTime: 31525790
Timing-Allow-Origin: *
EagleId: d5f4b28415291385362173689e


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   35551
Md5:    62764915dceb6a35b3405e0528c75b7c
Sha1:   a68df6e41937721a8e9812f74e2750ddf187abc0
Sha256: 191a78b43f5bd68dd7defb9f01ab896624115dc489859cf6d3694f267dba3bda
                                        
                                            GET /large/pgc-image/15215198076264e8d26248b HTTP/1.1 
Host: p3.pstatp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         213.244.178.205
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Tengine
Content-Length: 45118
Connection: keep-alive
Date: Fri, 15 Jun 2018 19:15:02 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sat, 15 Jun 2019 19:15:02 GMT
Last-Modified: Tue, 20 Mar 2018 04:23:27 GMT
X-Response-Date: Fri, 15 Jun 2018 19:15:02 GMT
X-Xxoo-Time: Fri, 15 Jun 2018 19:15:02 GMT
Access-Control-Allow-Origin: *
Via: cache51.l2de1[0,200-0,H], cache10.l2de1[11,0], cache3.nl1[0,200-0,H], cache3.nl1[1,0]
Age: 48434
X-Cache: HIT TCP_HIT dirn:11:391400705 mlen:-1
X-Swift-SaveTime: Fri, 15 Jun 2018 22:05:11 GMT
X-Swift-CacheTime: 31525791
Timing-Allow-Origin: *
EagleId: d5f4b28315291385362236482e


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   45118
Md5:    22d88a5e75330696bf97bad46ee606c7
Sha1:   a1ad147183ab5e8de051b6a942c32c51626cf265
Sha256: b0ae310d9049b85a4f0e1b53d118f7c2083d690bec91cc6f6af0dee94e92499f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         80.239.159.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "916BE46A4137C9CBD1FB23033271C4196FF808941E396C7939627EDE00901823"
Last-Modified: Fri, 15 Jun 2018 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Sat, 16 Jun 2018 20:42:16 GMT
Date: Sat, 16 Jun 2018 08:42:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    0b03b2f91f9e019698cb9c0be7787b2b
Sha1:   3d2798f3bf0bcb4e75dfc8adf4162615f5663cb2
Sha256: 916be46a4137c9cbd1fb23033271c4196ff808941e396c7939627ede00901823
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Fri, 15 Jun 2018 21:04:20 GMT
Etag: "83cf2ac46b0a2c007e27bc9a04a378e630016fce"
Content-Length: 1396
Cache-Control: public, no-transform, must-revalidate, max-age=5296
Expires: Sat, 16 Jun 2018 10:10:32 GMT
Date: Sat, 16 Jun 2018 08:42:16 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1396
Md5:    6a4fb9345c6aade75248fb678c1484ba
Sha1:   83cf2ac46b0a2c007e27bc9a04a378e630016fce
Sha256: 0333128aa00f1f6b5635e5972995184aae0104fc83acf4f14a1f44f1964c2e3d
                                        
                                            GET /static/jquery.js HTTP/1.1 
Host: js.googletoolservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         23.236.75.181
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 16 Jun 2018 08:43:35 GMT
Last-Modified: Sun, 10 Jun 2018 14:52:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5b1d3b34-16a6"
Expires: Sat, 16 Jun 2018 20:43:35 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3464
Md5:    07e200cff0ad951f3e53e95f6731b0f2
Sha1:   cc20fad262b08cad779436daba6804ea15723e57
Sha256: e5c7f1154f4e245e77bd49475bdfd52b3c2a193561185d007b24cc2d539d3deb
                                        
                                            GET /b/bshareC0.js HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Thu, 07 Jun 2018 11:30:22 GMT
Cache-Control: max-age=604800
Expires: Thu, 14 Jun 2018 11:30:22 GMT
Last-Modified: Mon, 26 Feb 2018 07:16:51 GMT
Etag: W/"5a93b463-12eb"
SID: bsweb2
Fw-Cache-Status: hit
Fw-Via: DISK HIT NOT MODIFIED from 222.88.94.134
Via: cache16.l2sg1[0,304-0,H], cache34.l2sg1[2,0], cache2.de1[0,200-0,H], cache2.de1[1,0]
Age: 767515
X-Cache: HIT TCP_MEM_HIT dirn:3:309122546 mlen:-1
X-Swift-SaveTime: Wed, 13 Jun 2018 17:18:27 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: c31b1fca15291385373635590e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1667
Md5:    6a818dc8a628d22d11eb85989a5416a7
Sha1:   4290bddae0c9973fded5db3a945671fdfe202b59
Sha256: 81ecdf2ff30c6c2f00c3596dfdb68851023076092e7ba855d98919fb80029a78
                                        
                                            GET /b/buttonLite.js HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Thu, 07 Jun 2018 22:13:00 GMT
Cache-Control: max-age=604800
Expires: Thu, 14 Jun 2018 22:13:00 GMT
Last-Modified: Mon, 26 Feb 2018 07:16:52 GMT
Etag: W/"5a93b464-4f76"
SID: bsweb2
Fw-Cache-Status: hit
Fw-Via: DISK HIT NOT MODIFIED from 222.88.94.134
Via: cache11.l2sg1[0,304-0,H], cache19.l2sg1[1,0], cache2.de1[0,200-0,H], cache3.de1[1,0]
Age: 728957
X-Cache: HIT TCP_MEM_HIT dirn:6:314287575 mlen:-1
X-Swift-SaveTime: Wed, 13 Jun 2018 17:18:30 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: c31b1fcb15291385373688364e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9207
Md5:    47a9c853ccf893f6612ae30d2d324651
Sha1:   82325f966f251eb270a724280b60c3cc93c8ec89
Sha256: fe39e1261f5dae6458da9d9106d8b448cb4435b67a3192afc555ded6cc94a64a
                                        
                                            GET /push.js HTTP/1.1 
Host: push.zhanzhang.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         111.206.37.189
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Date: Sat, 16 Jun 2018 08:42:17 GMT
Etag: "4078520127"
Expires: Sun, 16 Jun 2019 08:42:17 GMT
Last-Modified: Wed, 25 Nov 2015 07:46:06 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=EF95EB7BF0153DDEFB69912E4CCFDC7E:FG=1; max-age=31536000; expires=Sun, 16-Jun-19 08:42:17 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   227
Md5:    e548b6ce15bb616c2bfba36e9cfbf307
Sha1:   a348285d9928a6548a57569f1fb9d62bdd747f33
Sha256: 7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
                                        
                                            GET /large/pgc-image/152151980757808378b3ddf HTTP/1.1 
Host: p9.pstatp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         65.153.196.139
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 16 Jun 2018 08:42:17 GMT
Content-Length: 33682
Connection: keep-alive
Expires: Sat, 15 Jun 2019 22:05:11 GMT
Server: nginx
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Last-Modified: Tue, 20 Mar 2018 04:23:27 GMT
X-Response-Date: Fri, 15 Jun 2018 05:26:40 GMT
X-Xxoo-Time: Fri, 15 Jun 2018 05:26:40 GMT
Access-Control-Allow-Origin: *
X-Ser: BC51_dx-lt-yd-zhejiang-huzhou-2-cache-5, BC198_US-DistColumbia-washingtonDC-1-cache-1, BC137_US-Texas-Dallas-1-cache-3
X-Cache: HIT from BC137_US-Texas-Dallas-1-cache-3(baishan)


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   33682
Md5:    52949b4531ec33f748969841806c3e87
Sha1:   ce184538119eca9c34ed6fd4e66cc44b4e65792f
Sha256: 29658a6811c4d0e7f1327e428e0c65beae2ad8b21fca2c2076133ee62d39dc34
                                        
                                            POST /gsdomainvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 16 Jun 2018 08:42:18 GMT
Content-Length: 1558
Connection: keep-alive
Set-Cookie: __cfduid=dc4924cbf4ae195d9d61ebcb8eb9b16551529138538; expires=Sun, 16-Jun-19 08:42:18 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Sat, 16 Jun 2018 05:21:20 GMT
Expires: Wed, 20 Jun 2018 05:21:20 GMT
Etag: "88ad8bf04303818101994031d37cdb31cecac59b"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 42bbfb7ae2c84255-OSL


--- Additional Info ---
Magic:  data
Size:   1558
Md5:    47eb48d2e6fc33f8bf0a2b081f190d91
Sha1:   88ad8bf04303818101994031d37cdb31cecac59b
Sha256: 8e0dde26c0143f62c2f7e3849a4f52bac50cbd2528f00d9f2a8ab2396401edfd
                                        
                                            GET /s.gif?l=http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html
Cookie: BAIDUID=EF95EB7BF0153DDEFB69912E4CCFDC7E:FG=1

                                         
                                         111.206.37.189
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache, no-store, must-revalidate
Date: Sat, 16 Jun 2018 08:42:19 GMT
Expires: 0
Pragma: no-cache
Server: apache
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /19487047.js HTTP/1.1 
Host: js.users.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:20 GMT
Content-Length: 2824
Connection: keep-alive
Set-Cookie: HWWAFSESID=a53ab178fadc8654b4a5; path=/ HWWAFSESTIME=1529138536149; path=/
Content-Encoding: gzip
Last-Modified: Sat, 12 May 2018 06:39:37 GMT
Accept-Ranges: bytes
Etag: "332783ffbbe9d31:0"
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   2824
Md5:    4979fe4fcab13a562c6c1c500bba813c
Sha1:   a81954d661892eec37abdfc64b84842b11385c45
Sha256: c7981665bb42bfd963b00bc19a009978d97bb7f5c29288dbe6748a17209ec53d
                                        
                                            GET /b/components/bsStatic.js?v=20180226 HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Fri, 08 Jun 2018 05:33:26 GMT
Cache-Control: max-age=604800
Expires: Fri, 15 Jun 2018 05:33:26 GMT
Last-Modified: Mon, 26 Feb 2018 07:15:46 GMT
Etag: W/"5a93b422-cd6"
SID: bsweb2
Fw-Via: UGenerate MISS from 222.88.94.134
Via: cache16.l2sg1[0,304-0,H], cache9.l2sg1[1,0], cache2.de1[0,200-0,H], cache2.de1[0,0]
Age: 702534
X-Cache: HIT TCP_MEM_HIT dirn:7:296535588 mlen:-1
X-Swift-SaveTime: Wed, 13 Jun 2018 17:18:27 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: c31b1fca15291385402987936e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1748
Md5:    5aa85085b48e82adf6d6c2607b5382aa
Sha1:   d368628587f6a3083be3b854d297714f544b1f54
Sha256: 90407f20e4d0c221ddd2aee890a6d76aad809801ceb79af6b37d70b3e0cbc656
                                        
                                            GET /b/engines/bs-engine.js?v=20180226 HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Fri, 15 Jun 2018 05:33:26 GMT
Expires: Mon, 18 Jun 2018 05:54:38 GMT
Last-Modified: Mon, 26 Feb 2018 07:25:18 GMT
Cache-Control: max-age=432000
Etag: W/"5a93b65e-2c24"
SID: bsweb2
Fw-Cache-Status: hit
Fw-Via: DISK HIT NOT MODIFIED from 222.88.94.134
Via: cache3.l2sg1[0,304-0,H], cache33.l2sg1[1,0], cache7.de1[0,200-0,H], cache2.de1[1,0]
Age: 97734
X-Cache: HIT TCP_MEM_HIT dirn:4:587062334 mlen:-1
X-Swift-SaveTime: Fri, 15 Jun 2018 05:33:31 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: c31b1fca15291385404088018e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6310
Md5:    fb16f45ceb9125f7b5d54e503bbd8ea4
Sha1:   d5915b6952056e287e439b9e7a82431c6410103c
Sha256: 9456e7c3283303f6bd6691e9fc465c04e6fdd35450d51edcebee8770b929af41
                                        
                                            GET /js/libs/fingerprint2.min.js HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Tue, 12 Jun 2018 11:20:51 GMT
Expires: Sun, 17 Jun 2018 11:20:50 GMT
Last-Modified: Tue, 06 Sep 2016 10:43:54 GMT
Cache-Control: max-age=432000
Etag: W/"57ce9dea-7ffb"
SID: bsweb1
Fw-Via: UGenerate MISS from 222.88.94.134
Via: cache4.l2sg1[0,304-0,H], cache34.l2sg1[1,0], cache7.de1[0,200-0,H], cache3.de1[2,0]
Age: 336089
X-Cache: HIT TCP_MEM_HIT dirn:3:530744015 mlen:-1
X-Swift-SaveTime: Wed, 13 Jun 2018 00:54:11 GMT
X-Swift-CacheTime: 432000
Timing-Allow-Origin: *
EagleId: c31b1fcb15291385404123033e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11140
Md5:    838353ec59fba8351f610f3f61297998
Sha1:   d679c86c9e8ccf6c55ea79d8ff1a5d8fd6f9cf7d
Sha256: 28e2295b681589c8ad2b42dc041a5e984fde699edc90f0c94d931dd1fe2f18dc
                                        
                                            GET /statics/images/muban1/theme/default/style/images/imgbg.gif HTTP/1.1 
Host: www.jifengs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.jifengs.cn/statics/images/muban1/theme/default/style/yzipi-ipad2.css

                                         
                                         156.237.177.162
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:42:07 GMT
Content-Length: 1163


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1163
Md5:    8363acaeab9cbb099b59b78a44127ca6
Sha1:   aef448ce5500e3734059ec285cf6ec0b547075f2
Sha256: 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
                                        
                                            GET /go1?id=19487047&rt=1529138540089&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=2&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=2&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:20 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=6a727d1e8a294f5c004; path=/ HWWAFSESTIME=1529138539696; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540079&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=1&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:20 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=ae92b1966a390ea8bea9; path=/ HWWAFSESTIME=1529138538731; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540131&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=6&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=6&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:20 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=aa19a29e36fa8e37bda5; path=/ HWWAFSESTIME=1529138536812; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540106&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=4&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=4&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:20 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=aa19a2a256fa8e37bda5; path=/ HWWAFSESTIME=1529138536812; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540117&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=5&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=5&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:20 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=ae92b19eaa390ea8bea9; path=/ HWWAFSESTIME=1529138538731; path=/


--- Additional Info ---
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=dc4924cbf4ae195d9d61ebcb8eb9b16551529138538

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 16 Jun 2018 08:42:21 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Sat, 16 Jun 2018 06:37:46 GMT
Expires: Wed, 20 Jun 2018 06:37:46 GMT
Etag: "e12d97dd62d4947172c0cefc99171e0d46db0ecc"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 42bbfb8b74e94255-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    40281278f5e3cec62e8fbd35749c9078
Sha1:   e12d97dd62d4947172c0cefc99171e0d46db0ecc
Sha256: a473c069f33443d2acac3e6a66290bc0335ef7f4e51c3a08129ac8aeec2782a3
                                        
                                            GET /go1?id=19487047&rt=1529138540139&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=7&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=7&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:21 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=6a72711d48a294f5c004; path=/ HWWAFSESTIME=1529138539696; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540145&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=8&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=8&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:21 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=ae92b1d9ba390ea8bea9; path=/ HWWAFSESTIME=1529138538731; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540151&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=9&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=9&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:21 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=aa19a2deb6fa8e37bda5; path=/ HWWAFSESTIME=1529138536812; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540157&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=10&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=10&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:21 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=aa19a2e3c6fa8e37bda5; path=/ HWWAFSESTIME=1529138536812; path=/


--- Additional Info ---
                                        
                                            GET /go1?id=19487047&rt=1529138540097&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=0&vd=3&ce=1&cd=24&ds=%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BA%2594%25E8%25AF%25A5%25E8%2583%25BD%25E8%25B5%25B6%25E4%25B8%258A%25E5%25AD%25A3%25E5%2590%258E%25E8%25B5%259B%25E9%2589%25B4%25E4%25BA%258E%25E4%25B8%259C%25E9%2583%25A8%25E5%25BC%25BA%25E9%2598%259F%25E4%25B8%258A%25E6%2598%259F%25E6%259C%259F%25E9%259B%2586%25E4%25BD%2593%25E8%2590%25BD%25E9%25A9%25AC%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E4%25BB%25A52&ing=3&ekc=&sid=1529138540079&tt=2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583%25EF%25BC%259A%25E6%25B3%25B0%25E4%25BC%25A6%25E5%258D%25A2%25E5%25BD%2592%25E6%259C%259F%25E4%25B8%258D%25E5%2586%25B3%25EF%25BC%258C%25E9%25AA%2591%25E5%25A3%25AB%25E6%2596%25B0%25E5%25B8%2585%25E8%25BF%258E%25E9%25A6%2596%25E8%2583%259C%25EF%25BC%258C%25E5%258B%2592%25E5%25B8%2583%25E6%259C%2597%25E5%2586%258D%25E9%2581%25AD%25E7%2589%25B9%25E5%2588%25AB%25E5%25AF%25B9%25E5%25BE%2585%2520-%25202018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E8%25BF%259B%25E7%2590%2583%2520-%2520uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B2018%25E4%25B8%2596%25E7%2595%258C%25E6%259D%25AF%25E9%25A2%2584%25E9%2580%2589%25E8%25B5%259B%25E7%25AF%25AE%25E7%2590%2583&kw=uedbet%25E5%25AE%2598%25E6%2596%25B9%25E8%25AE%25BA%25E5%259D%259B%252Cuedbet%25E6%259C%2589%25E4%25B8%25AD%25E8%25B6%2585%25E5%2590%2597%252Cbet365%25E7%25BD%2591%25E7%25AB%2599%25E5%258F%25AF%25E9%259D%25A0%25E5%2590%2597%252Cbet365%25E5%25A5%2596%25E9%2587%2591%25E4%25B8%258E%25E6%258F%2590%25E7%258E%25B0%252C365bet%25E9%25A2%2586%25E5%258F%2596%25E5%25A5%2596%25E9%2587%2591&cu=http%253A%252F%252Ffubangfaye.com%252F2018shijiebeiyuxuansaijinqiu-show-2.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sat, 16 Jun 2018 08:42:21 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=aa19a29d46fa8e37bda5; path=/ HWWAFSESTIME=1529138536812; path=/


--- Additional Info ---
                                        
                                            GET /hm.js?33b48debf5252e7e4488c5dfb129a3ba HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html
Cookie: BAIDUID=EF95EB7BF0153DDEFB69912E4CCFDC7E:FG=1

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 9031
Date: Sat, 16 Jun 2018 08:42:21 GMT
Etag: 4d91d533d208bdc3005cf33b2f2c0499
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=31F6F9B839045FFC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   9031
Md5:    dad10ac0efa434a5c457674d3a514d6f
Sha1:   769dcb44ee9f560e7b9281b652d37bd9c2ae3087
Sha256: 0b49b7de9e71c7fa64babb26c9d45345e02a508b48fa066e2e6a47537e1b544c
                                        
                                            GET /frame/images/bshare_promo_sprite.gif HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 906
Connection: keep-alive
Date: Sun, 22 Apr 2018 05:07:16 GMT
Last-Modified: Tue, 06 Sep 2016 10:43:53 GMT
Etag: "57ce9de9-38a"
Expires: Tue, 22 May 2018 05:07:16 GMT
Cache-Control: max-age=2592000
SID: bsweb2
Accept-Ranges: bytes
Via: cache19.l2sg1[0,200-0,H], cache5.l2sg1[1,0], cache6.de1[0,200-0,H], cache3.de1[0,0]
Age: 4764907
X-Cache: HIT TCP_MEM_HIT dirn:5:254574604 mlen:-1
X-Swift-SaveTime: Sat, 28 Apr 2018 13:36:37 GMT
X-Swift-CacheTime: 25920000
Timing-Allow-Origin: *
EagleId: c31b1fcb15291385434835530e


--- Additional Info ---
Magic:  GIF image data, version 89a, 31 x 67
Size:   906
Md5:    32832f381c7fcaa3c1aae1786faa450b
Sha1:   fc48c19a9f9b3f50b363eac30977a24ee6296ef6
Sha256: 751082174d3e1ee60290f56085e130ce31f900c9f4c0a6a1441e395dc582a5e3
                                        
                                            GET /b/components/bsMore.js?v=20180226 HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Fri, 15 Jun 2018 05:33:32 GMT
Expires: Wed, 20 Jun 2018 05:33:25 GMT
Last-Modified: Mon, 26 Feb 2018 07:15:44 GMT
Cache-Control: max-age=432000
Etag: W/"5a93b420-137e"
SID: bsweb1
Fw-Cache-Status: hit
Fw-Via: DISK HIT NOT MODIFIED from 222.88.94.134
Via: cache9.l2sg1[462,304-0,H], cache19.l2sg1[464,0], cache10.de1[0,200-0,H], cache2.de1[1,0]
Age: 97731
X-Cache: HIT TCP_MEM_HIT dirn:5:298487879 mlen:-1
X-Swift-SaveTime: Fri, 15 Jun 2018 05:33:33 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: c31b1fca15291385434782282e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2082
Md5:    e7e38ad032bc378b2365e568c53ca84c
Sha1:   b48e3d648c6d93ad2e1c7ebb86759bc07718ff5d
Sha256: 31fe392b635df2211b30512fe8f1c106cba511da99fce72258ae8a887e93b74a
                                        
                                            GET /b/styles/bshareS887.js?v=20180226 HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Fri, 15 Jun 2018 05:33:27 GMT
Expires: Wed, 20 Jun 2018 05:33:24 GMT
Last-Modified: Mon, 26 Feb 2018 07:15:40 GMT
Cache-Control: max-age=432000
Etag: W/"5a93b41c-1a57"
SID: bsweb2
Fw-Cache-Status: hit
Fw-Via: DISK HIT NOT MODIFIED from 222.88.94.134
Via: cache26.l2sg1[0,304-0,H], cache2.l2sg1[1,0], cache11.de1[0,200-0,H], cache3.de1[0,0]
Age: 97736
X-Cache: HIT TCP_MEM_HIT dirn:1:861372862 mlen:-1
X-Swift-SaveTime: Fri, 15 Jun 2018 05:33:32 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: c31b1fcb15291385435165557e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2907
Md5:    cd8dbbce78d12a356ce8d2cff40413cc
Sha1:   6fe069bc269651e606bd3af83bb72b4ee7caf722
Sha256: 744dc04c5e52c7b165a3086caf4aa0965e96e246a67e57089961128d8450f0c5
                                        
                                            GET /frame/images/logos/s4/weixin.png HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Tengine
Content-Length: 822
Connection: keep-alive
Date: Mon, 07 May 2018 10:23:23 GMT
Last-Modified: Tue, 06 Sep 2016 10:43:54 GMT
Etag: "57ce9dea-336"
Expires: Wed, 06 Jun 2018 10:23:23 GMT
Cache-Control: max-age=2592000
SID: bsweb2
Accept-Ranges: bytes
Via: cache9.l2sg1[0,200-0,H], cache3.l2sg1[1,0], cache5.de1[0,200-0,H], cache3.de1[1,0]
Age: 3449940
X-Cache: HIT TCP_MEM_HIT dirn:3:236939255 mlen:-1
X-Swift-SaveTime: Mon, 07 May 2018 12:09:45 GMT
X-Swift-CacheTime: 25920000
Timing-Allow-Origin: *
EagleId: c31b1fcb15291385438235785e


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   822
Md5:    6cc0c6c89c6b855339585022e1f1906d
Sha1:   0e01b8ae6453b1cf4da3fe1e9c22f88cdb2737de
Sha256: 5abc7bc2a5b412b4d62264400d935c84619d15326c484345e053a905074ced12
                                        
                                            GET /frame/images/logos/s4/sprite/top_logos_sprite.png HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Tengine
Content-Length: 21798
Connection: keep-alive
Date: Wed, 02 May 2018 05:06:49 GMT
Last-Modified: Tue, 06 Sep 2016 10:43:53 GMT
Etag: "57ce9de9-5526"
Expires: Fri, 01 Jun 2018 05:06:49 GMT
Cache-Control: max-age=2592000
SID: bsweb1
Accept-Ranges: bytes
Via: cache9.l2sg1[0,200-0,H], cache4.l2sg1[1,0], cache6.de1[0,200-0,H], cache2.de1[1,0]
Age: 3900934
X-Cache: HIT TCP_MEM_HIT dirn:0:8620401 mlen:-1
X-Swift-SaveTime: Wed, 02 May 2018 09:34:41 GMT
X-Swift-CacheTime: 25920000
Timing-Allow-Origin: *
EagleId: c31b1fca15291385438182581e


--- Additional Info ---
Magic:  PNG image, 16 x 358, 16-bit/color RGBA, non-interlaced
Size:   21798
Md5:    bb93d873bad10ac58ca8a0ae70b5ff67
Sha1:   1677de08c80e94455847134a762827a75d777909
Sha256: bdbd82d5e283598657c0d0bb8b1b6c266d26369dbd239df78457f2419cda623a
                                        
                                            GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1176x885&vl=754&et=0&fl=10.0&ja=1&ln=en-us&lo=0&rnd=1004239081&si=33b48debf5252e7e4488c5dfb129a3ba&v=1.2.30&lv=1&ct=!!&tt=2018%E4%B8%96%E7%95%8C%E6%9D%AF%E9%A2%84%E9%80%89%E8%B5%9B%E7%AF%AE%E7%90%83%EF%BC%9A%E6%B3%B0%E4%BC%A6%E5%8D%A2%E5%BD%92%E6%9C%9F%E4%B8%8D%E5%86%B3%EF%BC%8C%E9%AA%91%E5%A3%AB%E6%96%B0%E5%B8%85%E8%BF%8E%E9%A6%96%E8%83%9C%EF%BC%8C%E5%8B%92%E5%B8%83%E6%9C%97%E5%86%8D%E9%81%AD%E7%89%B9%E5%88%AB%E5%AF%B9%E5%BE%85%20-%202018%E4%B8%96%E7%95%8C%E6%9D%AF%E9%A2%84%E9%80%89%E8%B5%9B%E8%BF%9B%E7%90%83%20-%20uedbet%E5%AE%98%E6%96%B9%E8%AE%BA%E5%9D%9B2018%E4%B8%96%E7%95%8C%E6%9D%AF%E9%A2%84%E9%80%89%E8%B5%9B%E7%AF%AE%E7%90%83&sn=10388 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html
Cookie: BAIDUID=EF95EB7BF0153DDEFB69912E4CCFDC7E:FG=1; HMACCOUNT=31F6F9B839045FFC

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sat, 16 Jun 2018 08:42:23 GMT
Pragma: no-cache
Server: apache
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /bshare_view?Callback=bShare.viewcb&url=http%3A%2F%2Ffubangfaye.com%2F2018shijiebeiyuxuansaijinqiu-show-2.html&h=&uuid=&sc=1&l=17&lite=1&ot=2018%E4%B8%96%E7%95%8C%E6%9D%AF%E9%A2%84%E9%80%89%E8%B5%9B%E7%AF%AE%E7%90%83%EF%BC%9A%E6%B3%B0%E4%BC%A6%E5%8D%A2%E5%BD%92%E6%9C%9F%E4%B8%8D%E5%86%B3%EF%BC%8C%E9%AA%91%E5%A3%AB%E6%96%B0%E5%B8%85%E8%BF%8E%E9%A6%96%E8%83%9C%EF%BC%8C%E5%8B%92%E5%B8%83%E6%9C%97%E5%86%8D%E9%81%AD%E7%89%B9%E5%88%AB%E5%AF%B9%E5%BE%85%20-%202018%E4%B8%96%E7%95%8C%E6%9D%AF%E9%A2%84%E9%80%89%E8%B5%9B%E8%BF%9B%E7%90%83%20-%20uedbet%E5%AE%98%E6%96%B9%E8%AE%BA%E5%9D%9B2018%E4%B8%96%E7%95%8C%E6%9D%AF%E9%A2%84%E9%80%89%E8%B5%9B%E7%AF%AE%E7%90%83&kws=uedbet%E5%AE%98%E6%96%B9%E8%AE%BA%E5%9D%9B,uedbet%E6%9C%89%E4%B8%AD%E8%B6%85%E5%90%97,bet365%E7%BD%91%E7%AB%99%E5%8F%AF%E9%9D%A0%E5%90%97,bet365%E5%A5%96%E9%87%91%E4%B8%8E%E6%8F%90%E7%8E%B0,365bet%E9%A2%86%E5%8F%96%E5%A5%96%E9%87%91&b=bs1dd943 HTTP/1.1 
Host: bshare.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         106.75.125.56
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
                                        
Date: Sat, 16 Jun 2018 08:42:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: v="2018061616422600065512700110782273|::"; Version=1; Domain=optimix.asia; Max-Age=62208000; Expires=Fri, 05-Jun-2020 08:42:26 GMT; Path=/ opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:26 GMT; Path=/ u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:26 GMT; Path=/
P3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Cache-Control: no-cache
Content-Language: zh
SID: button5


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   176
Md5:    5934401c2e8efebb55d73ac44240540c
Sha1:   badc099cae66c95c539a7843cbb6c6200ccecddd
Sha256: b98c3cacddf8d7865c54f8e1ee64803d05de57dacc86e757607d6f7ad435b3ed
                                        
                                            GET /cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24 HTTP/1.1 
Host: static.bshare.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fubangfaye.com/2018shijiebeiyuxuansaijinqiu-show-2.html

                                         
                                         195.27.31.221
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Date: Sun, 10 Jun 2018 02:55:15 GMT
Cache-Control: max-age=604800
Expires: Sun, 17 Jun 2018 02:55:15 GMT
Last-Modified: Thu, 07 Dec 2017 02:15:14 GMT
Etag: W/"5a28a432-1053"
SID: bsweb1
Fw-Cache-Status: hit
Fw-Via: DISK HIT NOT MODIFIED from 222.88.94.134
Via: cache35.l2sg1[0,304-0,H], cache3.l2sg1[0,0], cache8.de1[0,200-0,H], cache3.de1[1,0]
Age: 539232
X-Cache: HIT TCP_MEM_HIT dirn:1:393269343 mlen:-1
X-Swift-SaveTime: Tue, 12 Jun 2018 09:05:13 GMT
X-Swift-CacheTime: 604800
Timing-Allow-Origin: *
EagleId: c31b1fcb15291385475878670e
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1893
Md5:    f2ce4b25e9e2f3dea29c6008ad7b3690
Sha1:   21b46d90c8430341d01f610dca291aeb91cf3260
Sha256: eb06fbe1feba04f859863852b66f2926e742290f1a02c25520d587d41d2a2b10
                                        
                                            GET /pixel?google_nid=iclick&google_cm&origin=bshare HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         172.217.21.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3p: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://cm.g.doubleclick.net/pixel?google_nid=iclick&google_cm=&origin=bshare&google_tc=
Date: Sat, 16 Jun 2018 08:42:27 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 296
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 16-Jun-2018 08:57:27 GMT; path=/; domain=.doubleclick.net


--- Additional Info ---
Magic:  HTML document text
Size:   296
Md5:    c482731610622339a115861356b4ba3b
Sha1:   c37257504c6dd936fb0e267d0679ec13787b3b9b
Sha256: 3f9d45b15abbc8cc83c6a7073f7fba961bd0b42f02a750fe289f65c404edcbc8
                                        
                                            GET /?dspid=100016&hparam=c&gethuid=1&dspuid=2018061616422600065512700110782273 HTTP/1.1 
Host: cm.fastapi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         42.62.119.69
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
P3p: CP=CAO PSA OUR
Date: Sat, 16 Jun 2018 08:42:27 GMT
Location: http://bx01.optimix.asia/cms.gif?a=hz&c=33674e724dc29703936a8bacea2a5d24
Connection: close
Set-Cookie: cid=33674e724dc29703936a8bacea2a5d24; Path=/; Domain=fastapi.net; Expires=Mon, 24 Apr 2028 08:42:27 GMT dsp=100016:2018061616422600065512700110782273; Path=/; Domain=fastapi.net; Expires=Thu, 13 Dec 2018 08:42:27 GMT
Content-Length: 111


--- Additional Info ---
Magic:  ASCII text
Size:   111
Md5:    5f3880b03f3f42f62e75b9ff29c86b4f
Sha1:   68cdf30ddadd25effcd1b18be5f0cfc019b7e594
Sha256: 538d4c55253800d5395d7cccbdbbd1ab424c0cf1b4c67b05a523f5e22b60677b
                                        
                                            GET /pixel?google_nid=iclick&google_cm=&origin=bshare&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3p: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://bx01.optimix.asia/cms.gif?a=google&origin=bshare&google_gid=CAESENMvTFYlXsUrki3WeRUncAE&google_cver=1
Date: Sat, 16 Jun 2018 08:42:27 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 317
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnqq-5sA52zz1nxF2Rl0XpihuJ_tdfvYBpd0Gc4RPTsEQlZpngVaA; expires=Mon, 15-Jun-2020 08:42:27 GMT; path=/; domain=.doubleclick.net; HttpOnly


--- Additional Info ---
Magic:  HTML document text
Size:   317
Md5:    58b6b01f6b19bc12d1be23768a2dec17
Sha1:   ba6423ac68716f4668f57c2ead7503876db8f94b
Sha256: f602d964ab8c7761457bbbcf678f10efb1baa6170f14303548fc826afc681675
                                        
                                            GET /pixel?allyes_dspid=182&allyes_cm&extra=2018061616422600065512700110782273 HTTP/1.1 
Host: cm.qtmojo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         122.225.219.90
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Sat, 16 Jun 2018 08:42:28 GMT
Server: Apache
Set-Cookie: uid=I3jLY0jkz0BTf8C0jdv; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.qtmojo.com
Location: http://bx01.optimix.asia/cms.gif?a=allyes&allyes_id=XLTnL7Od8FpvExgA05hH0jdv&allyes_cver=2&extra=2018061616422600065512700110782273
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /cm.gif?ver=1&mid=10030&uid=2018061616422600065512700110782273 HTTP/1.1 
Host: t.go.sohu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         175.100.207.233
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Sat, 16 Jun 2018 08:42:28 GMT
Set-Cookie: SUV=1806161642285281 ;expires=Tue, 19 Jan 2038 08:00:00 GMT; path=/; domain=.sohu.com;
Location: http://bx01.optimix.asia/cms.gif?a=sohu&suid=1806161642285281&ver=1
FSS-Proxy: Powered by 11615879.19152529.15026426


--- Additional Info ---
                                        
                                            GET /t.gif?id=30875969&extendata=2018061616422600065512700110782273 HTTP/1.1 
Host: cms.tanx.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         140.205.250.8
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 49
Connection: close
Server: Tengine
P3p: CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV"
Location: http://bx.optimix.asia/cms.gif?tid=E0&ver=1&extendata=2018061616422600065512700110782273&a=tanx
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /bg.gif?p=2567&g=2018061616422600065512700110782273 HTTP/1.1 
Host: its.fugetech.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         180.76.96.124
HTTP/1.1 302 Found
                                        
Server: BLB/
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, no-transform, max-age=0
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Location: http://idm.bce.baidu.com/t/ping.gif?dm=bce.baidu.com/a1002&ac=1007906241111203840&v=bce-1.0&rnd=4280&ext_bce_tid=a1002&ext_bce_pid=1021&ext_bce_uid=1007906241111203840
Set-Cookie: fuge=CIDA1OKtrLP+DQ==; expires=Tue, 13 Jun 2028 08:42:28 GMT; domain=fugetech.com; HttpOnly fuge1=CIDA1OKtrLP+DQ==; expires=Tue, 13 Jun 2028 08:42:28 GMT; domain=fugetech.com; HttpOnly parter_2567=1007906241111203840,2018061616422600065512700110782273; expires=Tue, 13 Jun 2028 08:42:28 GMT; domain=fugetech.com; HttpOnly


--- Additional Info ---
                                        
                                            GET /cm.gif?dspid=11202 HTTP/1.1 
Host: c.yes.youku.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         198.11.132.53
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 154
Connection: keep-alive
Set-Cookie: __ysuid=1529138548301sxO; path=/; domain=.youku.com; expires=Fri, 13-Mar-2043 03:22:29 GMT
Cache-Control: no-cache
Pragma: no-cache
P3p: CP='CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
Location: http://bx01.optimix.asia/cms.gif?a=youku&mzid=1529138548301sxO
Expires: Sat, 16 Jun 2018 08:42:27 GMT
Server: Tengine/Aserver
Timing-Allow-Origin: *
s-rt: 1


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /cm.fcg?a=379448&j=optimix&time=1529138547 HTTP/1.1 
Host: cm.e.qq.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         140.207.127.100
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 16 Jun 2018 08:42:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://bx.optimix.asia/gdt/cms.gif?status=2&id=&name=4ae9219f70&time=1529138547&j=optimix&s=37864
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /pixel?vamaker_dspid=15400018&vamaker_cm&v=1 HTTP/1.1 
Host: cm.vamaker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         60.191.140.209
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 0
Connection: close
Set-Cookie: LINGXIAOID0=79VXReEcq0WgIwpB; expires=Thu, 31-Dec-20 23:59:59 GMT; path=/; domain=.vamaker.com
Location: http://bx01.optimix.asia/cms.gif?a=vam&vamaker_id=r9WttFLWRtr6VF1TIu15QN&vamaker_cver=1&v=1


--- Additional Info ---
                                        
                                            GET /?tid=1575&type=1&uid=2018061616422600065512700110782273&redir=http%3a%2f%2fbx01.optimix.asia%2fcms.gif%3fa%3dadmaster HTTP/1.1 
Host: iclick.cm.admaster.com.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         58.215.168.157
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.10.2
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 0
Connection: keep-alive
P3p: CP=CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, no-transform, max-age=0
Pragma: no-cache
Set-Cookie: admckid=1806161642281462080;expires=Sun, 16 Jun 2019 16:42:28 GMT;domain=.n1q.co;path=/
Location: http://bx01.optimix.asia/cms.gif?a=admaster&uid=s4340a5fcb94a77fc37


--- Additional Info ---
                                        
                                            GET /cms.gif?a=google&origin=bshare&google_gid=CAESENMvTFYlXsUrki3WeRUncAE&google_cver=1 HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb9


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /cms.gif?a=sohu&suid=1806161642285281&ver=1 HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb11


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /cms.gif?a=allyes&allyes_id=XLTnL7Od8FpvExgA05hH0jdv&allyes_cver=2&extra=2018061616422600065512700110782273 HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb9


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /cms.gif?a=hz&c=33674e724dc29703936a8bacea2a5d24 HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb10


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: fubangfaye.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __tins__19487047=%7B%22sid%22%3A%201529138540079%2C%20%22vd%22%3A%2010%2C%20%22expires%22%3A%201529140340157%7D; __51cke__=; __51laig__=10; Hm_lvt_33b48debf5252e7e4488c5dfb129a3ba=1529138543; Hm_lpvt_33b48debf5252e7e4488c5dfb129a3ba=1529138543

                                         
                                         154.95.132.78
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Sat, 16 Jun 2018 08:40:17 GMT
Content-Length: 114285


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   114285
Md5:    e024aee73ef9751ada346fd1253bf88f
Sha1:   c5ef8628c5a3d35dd94ff6e7b1ac0a20dbd0b701
Sha256: 855a2e188e81f3004812f5a27f8132efdb2687a54deb3d6d7ae3e1c5e6d5514a

Alerts:
  IDS:
    - ET TROJAN RAMNIT.A M2
    - ET TROJAN PE EXE or DLL Windows file download Text
    - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
                                        
                                            GET /cms.gif?tid=E0&ver=1&extendata=2018061616422600065512700110782273&a=tanx HTTP/1.1 
Host: bx.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb12


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /cms.gif?a=youku&mzid=1529138548301sxO HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb14


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /cms.gif?a=admaster&uid=s4340a5fcb94a77fc37 HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb9


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /gdt/cms.gif?status=2&id=&name=4ae9219f70&time=1529138547&j=optimix&s=37864 HTTP/1.1 
Host: bx.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 204 No Content
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Connection: keep-alive
SID: bxweb14


--- Additional Info ---
                                        
                                            GET /cms.gif?a=vam&vamaker_id=r9WttFLWRtr6VF1TIu15QN&vamaker_cver=1&v=1 HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:28 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:28 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb10


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /t/ping.gif?dm=bce.baidu.com/a1002&ac=1007906241111203840&v=bce-1.0&rnd=4280&ext_bce_tid=a1002&ext_bce_pid=1021&ext_bce_uid=1007906241111203840 HTTP/1.1 
Host: idm.bce.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: BAIDUID=EF95EB7BF0153DDEFB69912E4CCFDC7E:FG=1

                                         
                                         111.206.37.206
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=0, must-revalidate
Connection: keep-alive
Date: Sat, 16 Jun 2018 08:42:29 GMT
Etag: EF95EB7BF0153DDEFB69912E4CCFDC7E
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: Apache
Set-Cookie: BAIDUID=D3E9C2D4984C47C26AD8AE03C4E68A89:FG=1; expires=Sun, 16-Jun-19 08:42:29 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Tracecode: 25490534560310325770061616
Content-Length: 43


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /cm?_t=r&type=imp&hat_id=MTUwJjczJjI1NiYxMTIzJjIwMjM5Jt1S&l=aHR0cDovL2J4Lm9wdGltaXguYXNpYS9jbXMuZ2lmP2E9dml2YWtp HTTP/1.1 
Host: t1.chinavivaki.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         54.223.77.239
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Sat, 16 Jun 2018 08:42:30 GMT
Content-Length: 154
Connection: close
Location: http://t1.chinavivaki.com/cm?_t=r&type=imp&hat_id=MTUwJjczJjI1NiYxMTIzJjIwMjM5Jt1S&l=aHR0cDovL2J4Lm9wdGltaXguYXNpYS9jbXMuZ2lmP2E9dml2YWtp&_z=_
P3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Cache-Control: private,no-store,no-cache,must-revalidate,proxy-revalidate,no-transform,max-age=0
Pragma: no-cache
Expires: 0
Set-Cookie: _hid=vR4frHbNJFuyIHgAR1Vx_wA; expires=Mon, 15-Jun-20 08:42:30 GMT; domain=.chinavivaki.com; path=/


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /cm?_t=r&type=imp&hat_id=MTUwJjczJjI1NiYxMTIzJjIwMjM5Jt1S&l=aHR0cDovL2J4Lm9wdGltaXguYXNpYS9jbXMuZ2lmP2E9dml2YWtp&_z=_ HTTP/1.1 
Host: t1.chinavivaki.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: _hid=vR4frHbNJFuyIHgAR1Vx_wA

                                         
                                         54.223.77.239
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Sat, 16 Jun 2018 08:42:30 GMT
Content-Length: 154
Connection: close
Set-Cookie: _hid=vR4frHbNJFuyIHgAR1Vx_wA; expires=Mon, 15-Jun-20 08:42:30 GMT; domain=.chinavivaki.com; path=/
Location: http://bx.optimix.asia/cms.gif?a=vivaki&_hid=vR4frHbNJFuyIHgAR1Vx_wA
P3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Cache-Control: private,no-store,no-cache,must-revalidate,proxy-revalidate,no-transform,max-age=0
Pragma: no-cache
Expires: 0


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /cms.gif?a=vivaki&_hid=vR4frHbNJFuyIHgAR1Vx_wA HTTP/1.1 
Host: bx.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:30 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:30 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb12


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /rm.gif?ext=16 HTTP/1.1 
Host: m.reachmax.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         47.93.76.169
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 16 Jun 2018 08:42:31 GMT
Content-Length: 43
Connection: keep-alive
Location: http://bx01.optimix.asia/cms.gif?a=rm&xxid=6eAl9TUUhg
P3p: CP=CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR
Cache-Control: no-cache,must-revalidate
Set-Cookie: a=6eAl9TUUhg; expires=Mon, 23-May-2118 16:42:31 GMT; Max-Age=3153600000; path=/; domain=.reachmax.cn a=6eAl9TUUhg; expires=Mon, 23-May-2118 16:42:31 GMT; Max-Age=3153600000; path=/; domain=.reachmax.cn
Expires: 0


--- Additional Info ---
Magic:  data
Size:   39301
Md5:    95910f1d3f3ae8b0d90b957d299ee5aa
Sha1:   95a94b61e6cc071a942edd24bd15e99574aa50dd
Sha256: 954aa7560bb8393b47e78085b3c7eaf515bddbef462e182ee2c0a8dcd06af8a0
                                        
                                            GET /cms.gif?a=rm&xxid=6eAl9TUUhg HTTP/1.1 
Host: bx01.optimix.asia
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24
Cookie: v="2018061616422600065512700110782273|::"; opxPID=2018061616422600065512700110782273; u=1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|1529138546655|

                                         
                                         106.75.125.26
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Date: Sat, 16 Jun 2018 08:42:31 GMT
Content-Length: 45
Connection: keep-alive
Set-Cookie: opxPID=2018061616422600065512700110782273; Domain=optimix.asia; Expires=Fri, 05-Jun-2020 08:42:31 GMT; Path=/
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache
SID: bxweb11


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   45
Md5:    c8817d472077ebfc04593c1fa019d32d
Sha1:   e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
Sha256: dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
                                        
                                            GET /pixel?qiyi_nid=71000033&qiyi_no_sc HTTP/1.1 
Host: ckm.iqiyi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.bshare.cn/cm.html?cid=2018061616422600065512700110782273&m=3,8,11,12,13,14,17,16,19,18,21,20,23,22,25,24

                                         
                                         0.0.0.0
                                        


--- Additional Info ---