Overview

URL hkmdta.org/
IP104.148.62.233
ASNAS46573 Global Frag Networks
Location United States
Report completed2019-03-24 14:09:31 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-03-24 2 js.users.51.la/19559573.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 104.148.62.233


Last 10 reports on ASN: AS46573 Global Frag Networks

Date UQ / IDS / BL URL IP
2019-06-10 18:25:41 +0200
0 - 0 - 1 lcxunjie.cn/html/hdxzxstd86190.html 107.179.119.78
2019-06-10 18:25:19 +0200
0 - 0 - 1 sdvmj.cn/html/info345....xbjjxbjj.html 107.179.119.158
2019-06-10 18:25:02 +0200
0 - 0 - 1 jxylmuye.cn/html/bmgkjgsz.html 107.179.119.198
2019-06-10 18:24:57 +0200
0 - 0 - 1 phyxgs.com.cn/html/zsjz14252847496.html 107.179.119.182
2019-06-10 17:50:47 +0200
0 - 0 - 1 lylhf.com.cn/html/jiuyebaozhanghezuodanwei201 (...) 107.179.119.197
2019-06-10 17:50:45 +0200
0 - 0 - 1 jensmay.cn/html/.tztg201611....hysqk.html 107.179.119.216
2019-06-10 17:50:11 +0200
0 - 0 - 1 lyjiuhua136.cn/html/hyzx7641.html 107.179.119.198
2019-06-10 17:49:34 +0200
0 - 0 - 1 jinaotanye.com.cn/htmlzt2016bkhpc_hashaymnR1.html 107.179.119.16
2019-06-10 17:49:17 +0200
0 - 0 - 2 lczhggwz.com.cn/xzzxxwbgzl.html 107.179.119.77
2019-06-10 17:48:36 +0200
0 - 0 - 2 lczhggwz.com.cn/html/jxsw234404.html 107.179.119.77

No other reports on domain: hkmdta.org



JavaScript

Executed Scripts (19)


Executed Evals (4)

#1 JavaScript::Eval (size: 74, repeated: 1) - SHA256: 113facc0d4a205ce1c24c8ab79eff86d5202c745fbba8c122986df9f3c663c76

                                        (function() {
    return function() {
        this.NewStock.apply(this, arguments);
    }
})()
                                    

#2 JavaScript::Eval (size: 162, repeated: 1) - SHA256: 1445d501f50f570f7d9aa4de0764128d71b08eec7a675811d829bc38de002ffc

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 1,
        "vd": 1,
        "ce": 1,
        "cd": 24,
        "ds": "",
        "ing": 1,
        "ekc": "",
        "sid": 1553432942491,
        "tt": "
        w
                                    

#3 JavaScript::Eval (size: 4, repeated: 2) - SHA256: 5b8d2b991d2c1f5bf78beb557d17e6650086a267e5ffd4bb6f8aaa942c570f5d

                                        ({})
                                    

#4 JavaScript::Eval (size: 22784, repeated: 1) - SHA256: f9f7ba6f4fbb350559667c6d3781b94705653ce5473c19dd935b2de7e75f9c46

                                        function Marquee() {
    var b = this,
        a = arguments;
    b.$ = function(c) {
        return document.getElementById(c)
    };
    b.t = (b.F = ["MSClass 2.85.110708", "Class Of Marquee Scroll", "General Uninterrupted Scrolling(JS)", "http://www.popub.net/script/MSClass.html", "Yongxiang Cui(333) zhadan007@21cn.com"]).join("\n");
    b.a = a[0]["MSClass"] || a[0] || a[0][0];
    b.b = (b.c = typeof b.a == "object" ? b.$(b.a[0]) || b.$(b.a.MSClassID) : b.$(b.a)) && b.constructor.toString().substr(79 >>> 99, 14 >> 97) == b.F[1].substr(79 >>> 99, 14 >> 97);
    if (!b.c || !b.b) {
        return alert("The [" + (b.a.MSClassID || b.a[0] || b.a) + "] initialization error!") || (b.c = -1)
    }
    b.BakStep = 1 + (b.i = b.Bound = -1);
    b.f = b.q = b.r = b.s = b.B = b.u = b.k = b.e = b.d = b.j = 0;
    b.Direction = a[1] || a[0]["Direction"] || 0;
    b.Step = a[2] || a[0]["Step"] || 1;
    b.Width = a[3] || a[0]["Width"] || 0;
    b.Height = a[4] || a[0]["Height"] || 0;
    b.Timer = a[5] || a[0]["Timer"] || 30;
    b.DelayTime = a[6] || a[0]["DelayTime"] || 0;
    b.WaitTime = a[7] || a[0]["WaitTime"] || 800;
    b.ScrollStep = a[8] || a[0]["ScrollStep"] || -10;
    b.SwitchType = a[9] || a[0]["SwitchType"] || 0;
    b.HiddenID = a[10] || a[0]["HiddenID"];
    b.PrevBtn = b.$(a[0]["PrevBtnID"]) || 0;
    b.NextBtn = b.$(a[0]["NextBtnID"]) || 0;
    b.ContextMenu = a[0]["ContextMenu"] || [];
    b.c.style.overflow = b.c.style.overflowX = b.c.style.overflowY = "hidden";
    b.IsNotOpera = (navigator.userAgent.toLowerCase().indexOf("opera") == -1);
    b.m = (document.all) ? 1 : 0;
    if (a.length >= 7 || a[0]["AutoStart"] == 1) {
        b.Start()
    }
}
Marquee.prototype.Start = function() {
    if (this.c == -1 || this.i >= 0) {
        if (this.i == 2) {
            this.Continue()
        }
        return false
    }
    var f = this,
        G, r, P, K, u, O, e = "active",
        N = Marquee,
        E = 0,
        p = [],
        D = 0,
        B = 0,
        n, b = 0,
        L = {
            altertop: -1,
            alterup: -1,
            top: 0,
            up: 0,
            bottom: 1,
            down: 1,
            left: 2,
            right: 3,
            alterleft: 4
        },
        h = 0,
        A = 0,
        T = 0,
        w = 0,
        t = 0,
        q = 0,
        F = 0,
        M = 0,
        a = [],
        S = null;
    var g = function(m, j, i) {
        i ? 0 : i = 0;
        return f.m ? (m.currentStyle[j] != "auto" && m.currentStyle[j] != "medium" && m.currentStyle[j] != "0px" && m.currentStyle[j] != "30pt" && m.currentStyle[j] != "1em" && m.currentStyle[j] != "static") ? m.currentStyle[j] : i : (window.getComputedStyle(m, null)[j] != "auto" && window.getComputedStyle(m, null)[j] != "medium" && window.getComputedStyle(m, null)[j] != "0px" && window.getComputedStyle(m, null)[j] != "12px" && window.getComputedStyle(m, null)[j] != "static") ? window.getComputedStyle(m, null)[j] : i
    };
    var v = function(j) {
        var i = j || window.event;
        keyCode = i.keyCode || i.witch;
        if (keyCode == 113) {
            alert(f.t)
        }
    };
    f.c.style.position = g(f.c, "position", "relative");
    var H = {
        b: function() {
            return '<tr><td height="8"><div style="border:0;border-top:1px solid #808080;border-bottom:1px solid #FFF;margin:0;padding:0;margin-bottom:-2px;"></div></td></tr>'
        },
        c: function(i, j) {
            return isNaN(j) ? '<tr><td valign="bottom" height="17" onmouseover="this.style.backgroundColor=\'#0A246A\';this.style.color=\'#FFF\';" onmouseout="this.style.backgroundColor=\'\';this.style.color=\'#000\';" onmousedown="' + j + '">' + i + "</td></tr>" : "<tr><td height=\"17\" onmouseover=\"this.style.backgroundColor='#0A246A';this.style.color='#FFF';document.getElementById('" + n + "_" + R + "').style.display='none';\" onmouseout=\"this.style.backgroundColor='';this.style.color='#000';document.getElementById('" + n + "_" + R + '\').style.display=\'\';" ><div style="height:17px;position:relative;"><div id="' + n + "_" + R + '" style="position:absolute;left:1px;top:3px;color:#FFF;z-index:0;font-size:12px;width:100%;border:0;margin:0;padding:0;">' + i + '</div><div style="position:absolute;left:0px;top:2px;color:#808080;-moz-user-select:none;font-size:12px;width:100%;border:0;margin:0;padding:0;">' + i + "</div></div></td></tr>"
        },
        f: function() {
            var i = f.$(n);
            if (!i) {
                return false
            }
            i.style.display = "none"
        },
        d: function(j) {
            var m = f.$(n);
            if (!m) {
                return false
            }
            var i = j || window.event;
            m.style.top = (i.clientY + (document.documentElement.scrollTop || document.body.scrollTop)) + "px";
            m.style.left = document.body.clientWidth - i.clientX <= 170 ? (i.clientX - 170) + "px" : i.clientX + "px";
            m.style.display = "";
            return false
        },
        a: function() {
            if (!N.c) {
                N.c = 1;
                f.m ? document.attachEvent("onkeydown", v) : document.addEventListener("keydown", v, true)
            }
            if (!f.ContextMenu[0]) {
                return false
            }
            f.c.oncontextmenu = function() {
                return false
            };
            var j = document.createElement("DIV");
            n = j.id = "M" + (Math.random().toString().slice(-6));
            j.style.cssText = "display:none;z-index:100;position:absolute;left:0;top:-10000px;width:170px;border-left:1px solid #D4D0C8;border-top:1px solid #D4D0C8;border-right:1px solid #404040;border-bottom:1px solid #404040;margin:0;padding:0;";
            var i = '<div style="font-family:\'\u5B8B\u4F53\',arial;cursor:default;background-color:#D4D0C8;width:168px;border-left:1px solid #FFF;border-top:1px solid #FFF;border-right:1px solid #808080;border-bottom:1px solid #808080;margin:0;padding:0;"><table border="0" cellpadding="0" style="font-size:12px;text-indent:10px;margin:1px;width:166px;text-align:left;-moz-user-select:none; border-collapse:collapse" onselectstart="return false;" oncontextmenu="return false">';
            for (R = 1; R < f.ContextMenu.length; R++) {
                i += (!f.ContextMenu[R] || !f.ContextMenu[R][0] || f.ContextMenu[R][0] == "") ? H.b() : H.c(f.ContextMenu[R][0], f.ContextMenu[R][1] || R)
            }
            i += H.b();
            i += "<tr><td height=\"17\" onmouseover=\"this.style.backgroundColor='#0A246A';this.style.color='#FFF';\" onmouseout=\"this.style.backgroundColor='';this.style.color='#000';\" onmousedown=\"alert('" + f.F.join("\\n") + "')\">About " + f.F[0] + "</td></tr></table></div>";
            j.innerHTML = i;
            if (f.m) {
                window.attachEvent("onload", function() {
                    document.body.appendChild(j)
                });
                f.c.attachEvent("oncontextmenu", H.d);
                document.attachEvent("onclick", H.f)
            } else {
                window.addEventListener("load", function() {
                    document.body.appendChild(j)
                }, true);
                f.c.addEventListener("contextmenu", H.d, true);
                document.addEventListener("click", H.f, true)
            }
        }
    };
    H.a();
    if (f.Timer < 20) {
        f.Timer = 20
    }
    if (f.WaitTime < 800) {
        f.WaitTime = 800
    }
    if (f.Width == 0) {
        f.Width = parseInt(f.c.style.width)
    }
    if (f.Height == 0) {
        f.Height = parseInt(f.c.style.height)
    }
    f.c.style.width = f.Width + "px";
    f.c.style.height = f.Height + "px";
    if (typeof f.Direction == "string") {
        f.Direction = L[f.Direction.toString().toLowerCase()]
    }
    G = f.Direction > 1 ? "<table cellspacing='0' cellpadding='0' style='border-collapse:collapse;display:inline;'><tr><td noWrap=true style='white-space: nowrap;word-break:keep-all;'>MSCLASS_TEMP_HTML</td><td noWrap=true style='white-space: nowrap;word-break:keep-all;'>MSCLASS_TEMP_HTML</td></tr></table>" : "<table cellspacing='0' cellpadding='0' style='border-collapse:collapse;'><tr><td>MSCLASS_TEMP_HTML</td></tr><tr><td>MSCLASS_TEMP_HTML</td></tr></table>";
    r = f.Direction > 1 ? f.Width : f.Height;
    P = f.Direction > 1 ? "scrollWidth" : "scrollHeight";
    f.d = f.Direction > 1 ? "scrollLeft" : "scrollTop";
    f.w = f.Direction > 1 ? "left" : "top";
    if (f.Direction > 4) {
        f.Direction = 2
    }
    if (f.Direction < -1) {
        f.Direction = 0
    }
    f.n = f.c.innerHTML;
    var c = {
        0: function() {
            return 1
        },
        inquad: function(i, m, j) {
            return m * (i /= j) * i
        },
        outquad: function(i, m, j) {
            return -m * (i /= j) * (i - 2)
        },
        inoutquad: function(i, m, j) {
            if ((i /= j / 2) < 1) {
                return m / 2 * i * i
            }
            return -m / 2 * ((--i) * (i - 2) - 1)
        },
        incubic: function(i, m, j) {
            return m * (i /= j) * i * i
        },
        outcubic: function(i, m, j) {
            return m * ((i = i / j - 1) * i * i + 1)
        },
        inoutcubic: function(i, m, j) {
            if ((i /= j / 2) < 1) {
                return m / 2 * i * i * i
            }
            return m / 2 * ((i -= 2) * i * i + 2)
        },
        inquart: function(i, m, j) {
            return m * (i /= j) * i * i * i
        },
        outquart: function(i, m, j) {
            return -m * ((i = i / j - 1) * i * i * i - 1)
        },
        inoutquart: function(i, m, j) {
            if ((i /= j / 2) < 1) {
                return m / 2 * i * i * i * i
            }
            return -m / 2 * ((i -= 2) * i * i * i - 2)
        },
        inquint: function(i, m, j) {
            return m * (i /= j) * i * i * i * i
        },
        outquint: function(i, m, j) {
            return m * ((i = i / j - 1) * i * i * i * i + 1)
        },
        inoutquint: function(i, m, j) {
            if ((i /= j / 2) < 1) {
                return m / 2 * i * i * i * i * i
            }
            return m / 2 * ((i -= 2) * i * i * i * i + 2)
        },
        insine: function(i, m, j) {
            return -m * Math.cos(i / j * (Math.PI / 2)) + m
        },
        outsine: function(i, m, j) {
            return m * Math.sin(i / j * (Math.PI / 2))
        },
        inoutsine: function(i, m, j) {
            return -m / 2 * (Math.cos(Math.PI * i / j) - 1)
        },
        inexpo: function(i, m, j) {
            return (i == 0) ? 0 : m * Math.pow(2, 10 * (i / j - 1))
        },
        outexpo: function(i, m, j) {
            return (i == j) ? m : m * (-Math.pow(2, -10 * i / j) + 1)
        },
        inoutexpo: function(i, m, j) {
            if (i == 0) {
                return 0
            }
            if (i == j) {
                return m
            }
            if ((i /= j / 2) < 1) {
                return m / 2 * Math.pow(2, 10 * (i - 1))
            }
            return m / 2 * (-Math.pow(2, -10 * --i) + 2)
        },
        incirc: function(i, m, j) {
            return -m * (Math.sqrt(1 - (i /= j) * i) - 1)
        },
        outcirc: function(i, m, j) {
            return m * Math.sqrt(1 - (i = i / j - 1) * i)
        },
        inoutcirc: function(i, m, j) {
            if ((i /= j / 2) < 1) {
                return -m / 2 * (Math.sqrt(1 - i * i) - 1)
            }
            return m / 2 * (Math.sqrt(1 - (i -= 2) * i) + 1)
        },
        inelastic: function(j, W, V) {
            var m = 1.70158;
            var U = 0;
            var i = W;
            if (j == 0) {
                return 0
            }
            if ((j /= V) == 1) {
                return W
            }
            if (!U) {
                U = V * 0.3
            }
            if (i < Math.abs(W)) {
                i = W;
                var m = U / 4
            } else {
                var m = U / (2 * Math.PI) * Math.asin(W / i)
            }
            return -(i * Math.pow(2, 10 * (j -= 1)) * Math.sin((j * V - m) * (2 * Math.PI) / U))
        },
        outelastic: function(j, W, V) {
            var m = 1.70158;
            var U = 0;
            var i = W;
            if (j == 0) {
                return 0
            }
            if ((j /= V) == 1) {
                return W
            }
            if (!U) {
                U = V * 0.3
            }
            if (i < Math.abs(W)) {
                i = W;
                var m = U / 4
            } else {
                var m = U / (2 * Math.PI) * Math.asin(W / i)
            }
            return i * Math.pow(2, -10 * j) * Math.sin((j * V - m) * (2 * Math.PI) / U) + W
        },
        inoutelastic: function(j, W, V) {
            var m = 1.70158;
            var U = 0;
            var i = W;
            if (j == 0) {
                return 0
            }
            if ((j /= V / 2) == 2) {
                return W
            }
            if (!U) {
                U = V * (0.3 * 1.5)
            }
            if (i < Math.abs(W)) {
                i = W;
                var m = U / 4
            } else {
                var m = U / (2 * Math.PI) * Math.asin(W / i)
            }
            if (j < 1) {
                return -0.5 * (i * Math.pow(2, 10 * (j -= 1)) * Math.sin((j * V - m) * (2 * Math.PI) / U))
            }
            return i * Math.pow(2, -10 * (j -= 1)) * Math.sin((j * V - m) * (2 * Math.PI) / U) * 0.5 + W
        },
        inback: function(i, U, m, j) {
            if (j == undefined) {
                j = 1.70158
            }
            return U * (i /= m) * i * ((j + 1) * i - j)
        },
        outback: function(i, U, m, j) {
            if (j == undefined) {
                j = 1.70158
            }
            return U * ((i = i / m - 1) * i * ((j + 1) * i + j) + 1)
        },
        inoutback: function(i, U, m, j) {
            if (j == undefined) {
                j = 1.70158
            }
            if ((i /= m / 2) < 1) {
                return U / 2 * (i * i * (((j *= (1.525)) + 1) * i - j))
            }
            return U / 2 * ((i -= 2) * i * (((j *= (1.525)) + 1) * i + j) + 2)
        },
        inbounce: function(i, m, j) {
            return m - c.outbounce(j - i, m, j)
        },
        outbounce: function(i, m, j) {
            if ((i /= j) < (1 / 2.75)) {
                return m * (7.5625 * i * i)
            } else {
                if (i < (2 / 2.75)) {
                    return m * (7.5625 * (i -= (1.5 / 2.75)) * i + 0.75)
                } else {
                    if (i < (2.5 / 2.75)) {
                        return m * (7.5625 * (i -= (2.25 / 2.75)) * i + 0.9375)
                    } else {
                        return m * (7.5625 * (i -= (2.625 / 2.75)) * i + 0.984375)
                    }
                }
            }
        },
        inoutbounce: function(i, m, j) {
            if (i < j / 2) {
                return c.inbounce(i * 2, m, j) * 0.5
            }
            return c.outbounce(i * 2 - j, m, j) * 0.5 + m * 0.5
        }
    };
    if (f.Step.length) {
        f.k = (function(i) {
            f.Step = f.Step[0] < 1 ? parseFloat(f.Step[0].toString().replace("0.", "")) : parseFloat(f.Step[0]);
            for (R in c) {
                var j = ++j || 0;
                if ((R.substr(4) == i || i.substr(4) == R || R == i || i == j) && j > 0) {
                    E = j;
                    return R
                }
            }
        })(f.Step[1].toString().toLowerCase()).toString()
    }
    if (f.Step < 1) {
        f.k = f.Step
    }
    if (f.SwitchType > 0 || (f.DelayTime > 0 && f.ScrollStep == -10)) {
        f.ScrollStep = r
    }
    if (f.ScrollStep == -10) {
        f.ScrollStep = null
    }
    f.BakStep = f.Step;
    if (f.SwitchType > 1) {
        if (f.SwitchType == 3) {
            f.SwitchType = 0;
            f.e = M = 1
        } else {
            f.SwitchType == 2 ? D = 1 : f.q = f.m ? f.SwitchType : 1 - (D = 1);
            if (f.m && f.q > 0) {
                f.c.style.filter = "revealTrans(Duration=" + (f.DelayTime / 1000 * 0.2) + ",Transition=" + (f.q - 10) + ")";
                if (f.q >= 33 || f.q < 10) {
                    f.c.filters.revealTrans.Transition = Math.round(Math.random() * 22)
                }
                f.c.filters.revealTrans.apply();
                f.c.filters.revealTrans.play()
            }
            f.Step = r;
            f.k = 1 - (f.SwitchType = 1)
        }
    }
    if (f.HiddenID) {
        var J = (typeof f.HiddenID) == "string" ? [f.HiddenID] : f.HiddenID;
        for (R = 0; R < J.length; R++) {
            var y = f.$(J[R]);
            if (y && y.style.display == "none") {
                f.f = 1;
                p[R] = [y, g(y, "position", "static"), g(y, "top")];
                y.style.position = "absolute";
                y.style.visibility = "hidden";
                y.style.top = "-10000px";
                y.style.display = "block"
            }
        }
    }
    f.G = function() {
        if (typeof f.a == "object" && (!f.a.length || f.a.length > 0)) {
            f.D = f.$(f.a[1]) || f.$(f.a.ContentID);
            if (f.D) {
                var ab = 0;
                var m = 0;
                if (f.D.tagName == "UL") {
                    f.D.style.fontSize = "0"
                }
                f.D.style.display = "inline-block";
                f.D.style.margin = f.D.style.padding = 0;
                f.D.style.listStyle = "none";
                for (var W = 0, V = f.D.childNodes.length; W < V; W++) {
                    var ae = f.D.childNodes[W];
                    if (ae.nodeType == 1) {
                        m++;
                        ae.style.listStyle = "none";
                        ae.style.styleFloat = ae.style.cssFloat = "left";
                        ae.style.display = "inline";
                        if (f.Direction > 1) {
                            ae.style.marginLeft = g(ae, "marginLeft");
                            ae.style.marginRight = g(ae, "marginRight");
                            ae.style.borderLeftWidth = g(ae, "borderLeftWidth");
                            ae.style.borderRightWidth = g(ae, "borderRightWidth");
                            ab += ae[P] + parseInt(ae.style.marginLeft) + parseInt(ae.style.marginRight) + parseInt(ae.style.borderLeftWidth) + parseInt(ae.style.borderRightWidth)
                        } else {
                            ae.style.marginTop = g(ae, "marginTop");
                            ae.style.marginBottom = g(ae, "marginBottom");
                            ae.style.borderTopWidth = g(ae, "borderTopWidth");
                            ae.style.borderBottomWidth = g(ae, "borderBottomWidth");
                            ab += ae[P] + parseInt(ae.style.marginTop) + parseInt(ae.style.marginBottom) + parseInt(ae.style.borderTopWidth) + parseInt(ae.style.borderBottomWidth)
                        }
                        if (M) {
                            a[a.length] = ae
                        }
                    }
                }
                f.Direction > 1 ? (f.D.style.width = ab + "px") || (f.D.style.height = f.Height + "px") : (f.D.style.height = ab + "px") || (f.D.style.width = f.Width + "px");
                f.C = parseInt(f.c[P] / f.ScrollStep);
                f.B = f.Counter = 1;
                f.v = [];
                if (typeof f.a == "object" && (!f.a.length || f.a.length > 1)) {
                    var Z = f.$(f.a[2]) || f.a[2] || f.$(f.a.TabID);
                    if (Z && (Z.length || Z.tagName)) {
                        var Y = (f.a[3] || f.a.TabEvent || "onmouseover").toString().toLowerCase();
                        (Y == "onmouseover" || Y == "onclick") ? 0: Y = "onmouseover";
                        var U = (f.a[4] || f.a.TabTimeout || 0);
                        f.ScrollStep = r;
                        if (f.Step >= f.ScrollStep) {
                            f.Step = r - 1
                        }
                        var ac = parseInt(f.c[P] / f.ScrollStep);
                        l = Z.length || 1;
                        var X = 0,
                            ad = Z;
                        for (var aa = 0; aa < l; aa++) {
                            if (l > 1) {
                                ad = f.$(Z[aa])
                            }
                            ad.style.margin = ad.style.padding = 0;
                            ad.style.listStyle = "none";
                            if (ad.tagName == "UL") {
                                ad.style.fontSize = "0"
                            }
                            f.C = ad.childNodes.length;
                            for (var W = 0; W < f.C; W++) {
                                if (ad.childNodes[W].nodeType == 1) {
                                    if (ac == X) {
                                        ad.childNodes[W].style.display = "none";
                                        continue
                                    }
                                    ad.childNodes[W].style.fontSize = g(ad.childNodes[W], "fontSize", "12px");
                                    ad.childNodes[W].style.overflow = "hidden";
                                    f.v[X] = ad.childNodes[W];
                                    f.v[X][Y] = (function(i) {
                                        return function() {
                                            F = setTimeout(function() {
                                                f.u = 1;
                                                for (var af = 0; af < f.v.length; af++) {
                                                    f.v[af].className = ""
                                                }
                                                f.v[i].className = e;
                                                s(i)
                                            }, U)
                                        }
                                    })(X);
                                    f.v[X].onmouseout = (function(i) {
                                        return function() {
                                            clearTimeout(F);
                                            if (f.u == 1) {
                                                f.u = 0;
                                                if (f.i == 0) {
                                                    clearInterval(t);
                                                    t = setInterval(w, f.Timer)
                                                } else {
                                                    clearTimeout(q);
                                                    q = setTimeout(k, f.DelayTime)
                                                }
                                                C(i)
                                            }
                                        }
                                    })(X);
                                    X += 1
                                }
                            }
                        }
                        f.C = X;
                        f.r = f.C > 1 ? 1 : 0;
                        if (f.v.length > 0) {
                            f.v[0].className = e
                        }
                        if (ac > f.C) {
                            f.s = ac - f.C;
                            for (var V = 0; V < f.v.length; V++) {
                                f.v[V].onmouseover = f.v[V].onmouseout = function() {}
                            }
                            f.C = ac;
                            alert("The [" + f.c.id + "] pages or tab numbers less [" + f.s + "] than actual pages!") || 0
                        }
                    }
                }
                if (M == 0 && f.SwitchType == 0 && D == 0 && f.q == 0 && f.Direction >= 0 && f.Direction <= 3) {
                    if (f.Direction > 1) {
                        f.D.style.width = ab * 2 + "px";
                        f.D.style.height = f.Height + "px";
                        f.D.innerHTML += f.D.innerHTML
                    } else {
                        f.D.style.styleFloat = f.D.style.cssFloat = "left";
                        f.D.style.width = f.Width + "px";
                        f.c.innerHTML += f.c.innerHTML
                    }
                }
            }
        }
    };
    f.G();
    if (f.B == 0 && M) {
        for (var R = 0, Q = f.c.childNodes.length; R < Q; R++) {
            if (f.c.childNodes[R].nodeType == 1) {
                a[a.length] = f.c.childNodes[R]
            }
        }
    }
    if (f.B == 0 && M == 0 && (f.Direction == 0 || f.Direction == 1)) {
        f.c.innerHTML = G.replace(/MSCLASS_TEMP_HTML/g, f.c.innerHTML)
    } else {
        if (f.B == 0 && M == 0 && (f.Direction == 2 || f.Direction == 3)) {
            f.c.noWrap = true;
            f.c.style.whiteSpace = "nowrap";
            (f.ScrollStep == 0 && f.DelayTime == 0) ? f.c.innerHTML += f.c.innerHTML: f.c.innerHTML = G.replace(/MSCLASS_TEMP_HTML/g, f.c.innerHTML)
        } else {
            if (f.Direction == 4 || f.Direction == -1) {
                f.Direction = 6 % f.Direction;
                f.e = 1
            }
        }
    }
    K = f.ScrollStep;
    u = f.Direction;
    O = f.k;
    if (f.SwitchType > 0) {
        f.E = document.createElement("div");
        f.E.style.width = f.Width + "px";
        f.E.style.height = f.Height + "px";
        f.E.style.position = "absolute";
        f.E.style[f.w] = f.Direction % 2 ? -r + "px" : r + "px";
        f.Direction > 1 ? f.E.style.top = "0" : f.E.style.left = "0";
        f.E.innerHTML = f.c.innerHTML;
        f.E.style.overflow = f.E.style.overflowX = f.E.style.overflowY = "hidden";
        f.c.appendChild(f.E);
        f.E[f.d] = r
    }
    var w = function() {
        f.k > 0 ? f.Step = Math.ceil((f.ScrollStep - b) * f.k) : 0;
        f.Scroll()
    };
    var C = function(j) {
        if (f.i == 2) {
            return false
        }
        if (f.SwitchType > 0 && (D == 1 || f.q > 0)) {
            j + 1 >= f.C ? f.E[f.d] = 0 : f.E[f.d] = r * (j + 1)
        }
    };
    var s = function(j) {
        if (f.i == 2) {
            return false
        }
        clearTimeout(q);
        clearInterval(t);
        if (f.SwitchType == 0) {
            f.Counter = parseInt(f.c[f.d] / K) + 1;
            if (f.Counter > f.C) {
                f.Counter -= f.C
            }
            j += 1;
            f.u = 1;
            if (j <= f.Counter) {
                f.ScrollStep = K * (f.Counter - j) + f.c[f.d] % K;
                f.Direction = f.Direction > 1 ? 3 : 1
            } else {
                if (j - f.Counter == f.C - 1) {
                    if (E == 24) {
                        f.k = "inelastic"
                    }
                    if (E == 27 || E == 26) {
                        f.k = "inback"
                    }
                }
                if (f.Counter <= 2 && j == f.C && E == 23) {
                    f.k = "inelastic"
                }
                f.ScrollStep = K * (j - f.Counter) - f.c[f.d] % K;
                f.Direction = f.Direction > 1 ? 2 : 0
            }
        } else {
            if (f.i == 0 && f.e == 1) {
                f.Direction = f.Direction > 1 ? 5 - f.Direction : 1 - f.Direction;
                u = f.Direction
            }
            f.Direction % 2 ? f.E.style[f.w] = -r + f.c[f.d] + "px" : f.E.style[f.w] = r + f.c[f.d] + "px";
            j == f.C ? f.E[f.d] = 1 - (f.Counter = 1) : f.E[f.d] = r * (j);
            f.Counter = j + 1
        }
        b = 0;
        if (f.ScrollStep > 0) {
            k()
        }
    };
    var I = function(m) {
        clearTimeout(B);
        var j = m || f.c;
        var i = 5;
        (function() {
            f.m ? j.style.filter = "alpha(opacity=" + i + ")" : j.style.opacity = (i / 100);
            i += 5;
            if (i <= 100) {
                B = setTimeout(arguments.callee, 20)
            }
        })()
    };
    var k = function() {
        var m = f.Direction % 2;
        if (D == 1) {
            I()
        }
        if (f.q > 0) {
            if (f.q >= 33 || f.q < 10) {
                f.c.filters.revealTrans.Transition = Math.round(Math.random() * 22)
            }
            f.c.filters.revealTrans.apply();
            f.c.filters.revealTrans.play()
        }
        if (f.j == 1) {
            q = setTimeout(k, f.DelayTime)
        } else {
            clearInterval(t);
            h = A = b = f.i = 0;
            if (f.e == 1 && f.k > 0) {
                if ((f.Direction == 2 || f.Direction == 0) && f.c[P] - r - f.c[f.d] < f.ScrollStep) {
                    f.ScrollStep = f.c[P] - r - f.c[f.d]
                }
                if (m && f.c[f.d] < f.ScrollStep) {
                    f.ScrollStep = f.c[f.d]
                }
            }
            if (f.B == 1 && f.u == 0) {
                f.Counter = parseInt(f.c[f.d] / K) + 2;
                if (f.e == 1) {
                    if (f.SwitchType == 1) {
                        if (f.Counter > f.C) {
                            f.Counter = 1
                        }
                    } else {
                        if (m) {
                            f.Counter -= 2;
                            if (f.Counter <= 0) {
                                f.Counter = 1
                            }
                        } else {
                            if (f.Counter >= f.C) {
                                f.Counter = f.C
                            }
                        }
                    }
                } else {
                    if (f.Counter > f.C) {
                        f.Counter -= f.C
                    }
                }
                if (f.r == 1 && f.s == 0) {
                    for (var j = 0; j < f.C; j++) {
                        f.v[j].className = ""
                    }
                    f.e == 0 && D == 0 && f.q == 0 && f.SwitchType == 0 && m ? f.v[f.Counter + f.C - 2 > f.C ? f.Counter - 3 : f.Counter + f.C - 3].className = e : f.v[f.Counter - 1].className = e
                }
            }
            if (f.e == 1 && f.C > 1) {
                if (((E == 22 || E == 24) && !m && f.Counter == 2) || ((E == 22 || E == 24) && m && f.Counter == f.C - 1)) {
                    f.k = "outelastic"
                }
                if (((E == 23 || E == 24) && !m && f.Counter == f.C) || ((E == 23 || E == 24) && m && f.Counter == 1)) {
                    f.k = "inelastic"
                }
                if (((E == 25 || E == 27) && !m && f.Counter == 2) || ((E == 25 || E == 27) && m && f.Counter == f.C - 1)) {
                    f.k = "outback"
                }
                if (((E == 26 || E == 27) && !m && f.Counter == f.C) || ((E == 26 || E == 27) && m && f.Counter == 1)) {
                    f.k = "inback"
                }
            }
            if (f.e == 1 && f.Bound >= 0) {
                f.Bound = -1;
                f.UnBound()
            }
            t = setInterval(w, f.Timer);
            f.OnScroll()
        }
    };
    f.Run = function(j) {
        if (f.i == 1) {
            var i = -1;
            if (typeof arguments[0] == "number") {
                i = arguments[0]
            }
            if (typeof arguments[0] == "string") {
                u = i = L[arguments[0].toString().toLowerCase()]
            }
            if (i < 0 || i > 3) {
                alert("Parameters set wrong!");
                return false
            }
            if (f.Bound == i) {
                return false
            }
            f.Direction = i;
            if (typeof arguments[0] == "string" || f.e == 1) {
                u = f.Direction
            }
            f.Play()
        }
    };
    f.OnBound = f.UnBound = f.OnScroll = f.OnPause = function() {};
    f.Play = function() {
        clearTimeout(q);
        q = setTimeout(k, arguments[0])
    };
    f.Reset = function() {
        f.Stop();
        f.c[f.d] = f.i = h = A = 0;
        f.i = -1
    };
    f.Continue = function() {
        if (f.i == 2 && !arguments[0]) {
            f.i = b > 1 ? 0 : 1;
            t = setInterval(w, f.Timer);
            return false
        }
        if (f.i == 0) {
            clearInterval(t);
            t = setInterval(w, f.Timer)
        }
        if (f.i == 1) {
            f.Play(f.DelayTime)
        }
    };
    f.Stop = function() {
        if (f.i != 2) {
            f.Pause();
            f.i = 2
        }
    };
    f.Pause = f.Destroy = f.Terminate = function() {
        clearTimeout(F);
        clearInterval(t);
        clearTimeout(q)
    };
    var x = function() {
        if (S) {
            I(S)
        }
        var j = f.B == 0 ? f.c : f.D,
            U = f.Direction % 2;
        var m = U ? a.length - 1 : 0;
        S = a[m].cloneNode(true);
        f.ScrollStep = a[m][P];
        f.m ? S.style.filter = "alpha(opacity = 0)" : S.style.opacity = 0;
        U ? j.insertBefore(S, j.childNodes[0]) : j.appendChild(S);
        j.removeChild(a[m]);
        U ? f.c[f.d] = f.ScrollStep : f.c[f.d] = f.c[P] - r - f.ScrollStep;
        if (U) {
            a.unshift(S);
            a.pop()
        } else {
            a.push(S);
            a.shift()
        }
    };
    var o = function() {
        clearInterval(t);
        h = A = b = 1 - (f.i = 1);
        f.ScrollStep = K;
        f.Direction = u;
        f.k = O;
        if (f.u == 1) {
            return false
        }
        if (f.e == 1) {
            if (f.SwitchType == 1) {
                u = f.Direction = f.Direction > 1 ? 5 - f.Direction : 1 - f.Direction
            } else {
                if (f.c[f.d] == 0 || f.c[f.d] >= f.c[P] - r) {
                    if (M) {
                        x()
                    } else {
                        f.Bound = f.Direction;
                        f.OnBound();
                        u = f.Direction = f.Direction > 1 ? 5 - f.Direction : 1 - f.Direction
                    }
                }
            }
        }
        f.OnPause();
        q = setTimeout(k, f.DelayTime)
    };
    var z = function() {
        f.G();
        setTimeout(d, 0)
    };
    var d = function() {
        f.y = f.c[P] / 2;
        if (f.SwitchType == 0 && f.y <= r + f.Step && f.e == 0) {
            if (f.B == 1) {
                var j = f.c.getAttribute("fixnum") / 1 + 1 || 1;
                f.c.setAttribute("fixnum", j);
                if (j < 5) {
                    z()
                }
            } else {
                f.c.innerHTML = f.n;
                delete(f.n)
            }
            return false
        }
        delete(f.n);
        if (f.e == 1) {
            f.Bound = f.Direction > 1 ? 5 - f.Direction : 1 - f.Direction
        }
        if (f.f == 1) {
            for (R = 0; R < p.length; R++) {
                var i = p[R][0];
                i.style.position = p[R][1];
                i.style.display = "none";
                i.style.visibility = "visible";
                i.style.top = p[R][2]
            }
        }
        if (f.DelayTime > 0 && f.PrevBtn) {
            f.PrevBtn.onclick = function() {
                f.Run(f.Direction > 1 ? 5 - f.Direction : 1 - f.Direction)
            }
        }
        if (f.DelayTime > 0 && f.NextBtn) {
            f.NextBtn.onclick = function() {
                f.Run(f.Direction)
            }
        }
        f.c[f.d] = f.i = h = A = 0;
        if (M) {
            x()
        }
        T = Math.round(f.ScrollStep / f.Step);
        if (f.WaitTime >= 60000) {
            f.i = 1;
            if (f.WaitTime == 100000) {
                f.DelayTime = 3600000
            }
            f.WaitTime = 3600000;
            return
        }
        setTimeout(function() {
            if ((f.ScrollStep >= 0 && (f.B == 0 || (f.B == 1 && (f.r == 0 || f.r == 1))) && f.l) || (f.DelayTime == 0 && f.ScrollStep == -2 && f.l)) {
                f.l()
            }
            k()
        }, f.WaitTime)
    };
    if (f.SwitchType == 1) {
        f.Scroll = function() {
            var i = f.Direction % 2;
            b += f.Step;
            if (b >= f.ScrollStep && f.DelayTime > 0) {
                i ? f.E.style[f.w] = (parseInt(f.E.style[f.w]) - (f.ScrollStep - f.Step - b)) + "px" : f.E.style[f.w] = (parseInt(f.E.style[f.w]) + (f.ScrollStep - f.Step - b)) + "px";
                o();
                f.c[f.d] = f.E[f.d];
                i ? f.E.style[f.w] = -r + f.c[f.d] + "px" : f.E.style[f.w] = r + f.c[f.d] + "px";
                f.Counter == f.C ? f.Counter = 1 - (f.E[f.d] = 0) : f.E[f.d] = r * (f.Counter);
                return
            }
            switch (i) {
                case 0:
                    f.E.style[f.w] = (parseInt(f.E.style[f.w]) - f.Step) + "px";
                    break;
                case 1:
                    f.E.style[f.w] = (parseInt(f.E.style[f.w]) + f.Step) + "px"
            }
        }
    } else {
        if (typeof f.k == "string") {
            f.Scroll = function() {
                b += h;
                if (h <= T) {
                    A += (f.Step = Math.round(c[f.k](h++, f.ScrollStep, T)) - A);
                    if (f.c[f.d] <= f.Step && f.e == 0) {
                        f.c[f.d] += f.y
                    }
                    f.Direction % 2 ? f.c[f.d] -= f.Step : f.c[f.d] += f.Step
                } else {
                    if (f.c[f.d] > f.y && f.e == 0) {
                        f.c[f.d] -= f.y
                    }
                    o()
                }
            }
        } else {
            f.Scroll = function() {
                var i = f.Direction % 2;
                b += f.Step;
                if ((b >= f.ScrollStep && f.DelayTime > 0) || (f.e == 1 && b > f.Step && (f.c[f.d] <= 0 || f.c[f.d] >= f.c[P] - r))) {
                    i ? f.c[f.d] -= f.ScrollStep + f.Step - b : f.c[f.d] += f.ScrollStep + f.Step - b;
                    o();
                    return
                }
                switch (i) {
                    case 0:
                        if (f.c[f.d] >= f.y && f.e == 0) {
                            f.c[f.d] -= f.y
                        }
                        f.c[f.d] += f.Step;
                        break;
                    case 1:
                        if (f.c[f.d] <= f.Step && f.e == 0) {
                            f.c[f.d] += f.y
                        }
                        f.c[f.d] -= f.Step
                }
            }
        }
    }
    setTimeout(d, 800)
};
Marquee.prototype.l = function() {
    var g = this,
        f = null,
        j = null,
        k = 0,
        m = 0,
        b = 0,
        d = 0,
        i = 0,
        h = Math.round(g.Width / 2);
    var a = function(n) {
        var n = n || window.event;
        if (g.DelayTime != 0 || (n.which && n.which != 1) || (n.button && n.button != 1) || g.i == 2 || g.i == -1) {
            return false
        }
        if (k == 0) {
            g.i = k = 1;
            g.Pause();
            n.stopPropagation ? n.stopPropagation() : n.cancelBuble = true;
            n.preventDefault ? n.preventDefault() : n.returnValue = false;
            b = g.c[g.d];
            m = g.Direction > 1 ? window.event ? n.clientX : n.pageX : window.event ? n.clientY : n.pageY;
            f = n.srcElement || n.target;
            j = f.style.cursor;
            f.style.cursor = "move";
            if (g.m) {
                f.setCapture();
                document.attachEvent("onmousemove", e);
                document.attachEvent("onmouseup", c)
            } else {
                document.addEventListener("mousemove", e, false);
                document.addEventListener("mouseup", c, false)
            }
        }
    };
    var e = function(o) {
        var o = o || window.event;
        d = g.Direction > 1 ? window.event ? o.clientX : o.pageX : window.event ? o.clientY : o.pageY;
        var n = m - d + b;
        if (n <= 0 || n >= g.y) {
            n <= 0 ? g.c[g.d] += g.y : g.c[g.d] = g.y - n;
            m = g.Direction > 1 ? window.event ? o.clientX : o.pageX : window.event ? o.clientY : o.pageY;
            b = g.c[g.d];
            n = m - d + b
        }
        g.c[g.d] = n
    };
    var c = function(n) {
        if (g.m) {
            f.releaseCapture();
            document.detachEvent("onmousemove", e);
            document.detachEvent("onmouseup", c)
        } else {
            document.removeEventListener("mousemove", e, false);
            document.removeEventListener("mouseup", c, false)
        }
        k = g.j = 0;
        f.style.cursor = j;
        g.Continue()
    };
    if (g.e == 0) {
        g.m ? g.c.attachEvent("onmousedown", a) : g.c.addEventListener("mousedown", a, false)
    }
    if (g.ScrollStep == -2) {
        g.c.onmousemove = function(n) {
            if (g.Direction > 1) {
                var n = n || window.event;
                if (window.event) {
                    if (g.IsNotOpera) {
                        i = n.srcElement.id == g.c.id ? n.offsetX - g.c[g.d] : n.srcElement.offsetLeft - g.c[g.d] + n.offsetX
                    } else {
                        g.ScrollStep = null;
                        return
                    }
                } else {
                    i = n.layerX - g.c[g.d]
                }
                g.Direction = i > h ? 3 : 2;
                g.Step = Math.round(Math.abs(h - i) * (g.BakStep * 2) / h)
            }
        };
        g.c.onmouseout = function() {
            if (g.Step == 0) {
                g.Step = 1
            }
        }
    } else {
        g.c.onmouseover = function() {
            if ((g.i == 0 && g.DelayTime > 0) || g.i == 2 || g.i == -1) {
                return false
            }
            g.j = 1;
            g.Pause()
        };
        g.c.onmouseout = function() {
            if (g.j == 1) {
                g.j = 0;
                g.Continue()
            }
        }
    }
};
                                    

Executed Writes (9)

#1 JavaScript::Write (size: 9, repeated: 1) - SHA256: 196c7c813d82c026b1111acb891087e8f52e9e7c936a6ea3edd38fcf0eea3a3e

                                        < /object>
                                    

#2 JavaScript::Write (size: 546, repeated: 1) - SHA256: 8c0f2b04f3033c9f89465bb865955a458369acf5e90c2dbabb03642f0b37c1f9

                                        < embed src = "images/focus2.swf"
wmode = "opaque"
FlashVars = "pics=uploads/01.jpg|uploads/02.jpg|uploads/03.jpg|uploads/04.jpg|uploads/05.jpg&links=PhotoNewsDetail.aspx?cid=227|PhotoNewsDetail.aspx?cid=226|PhotoNewsDetail.aspx?cid=225|PhotoNewsDetail.aspx?cid=211|PhotoNewsDetail.aspx?cid=210&texts=||||&borderwidth=465&borderheight=165&textheight=0"
menu = "false" ? bgcolor = "#ffffff"
quality = "high"
width = "465"
height = "165"
allowScriptAccess = "sameDomain"
type = "application/x-shockwave-flash"
pluginspage = "http://www.macromedia.com/go/getflashplayer" / >
                                    

#3 JavaScript::Write (size: 788, repeated: 1) - SHA256: 6cb8945af3336f1c8fb54de9b04c088aaee7c53107f64cf5a706ebf1d656413f

                                        < object classid = "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
codebase = "http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,0,0"
width = "432"
height = "238"
id = "stockAnalyser" >
    < param name = "movie"
value = "http://flash.tool.hexun.com/flash_luan/Stock/MiniStockChart.swf " / > < param name = "quality"
value = "high" / > < param name = "allowFullScreen"
value = "true" / > < param name = "allowScriptAccess"
value = "always" / > < param name = "wmode"
value = "transparent" > < embed src = "http://flash.tool.hexun.com/flash_luan/Stock/MiniStockChart.swf "
width = "432"
height = "238"
quality = "high"
allowFullScreen = "true"
pluginspage = "http://www.macromedia.com/go/getflashplayer"
type = "application/x-shockwave-flash"
allowScriptAccess = "always"
name = "stockAnalyser"
id = "stockAnalyser" > < /embed></object >
                                    

#4 JavaScript::Write (size: 183, repeated: 1) - SHA256: 9199ae81fafb26299b235f98b540c8e0dfd32f492f6ccee190f7f31135cfaf28

                                        < object classid = "clsid:d27cdb6e-ae6d-11cf-96b8-444553540000"
codebase = "http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0"
width = "465"
height = "165" >
                                    

#5 JavaScript::Write (size: 320, repeated: 1) - SHA256: 67bc16d0f28c6a1135985b7dfa731dcb187251390f59aa9b6196bd355bb383fe

                                        < param name = "FlashVars"
value = "pics=uploads/01.jpg|uploads/02.jpg|uploads/03.jpg|uploads/04.jpg|uploads/05.jpg&links=PhotoNewsDetail.aspx?cid=227|PhotoNewsDetail.aspx?cid=226|PhotoNewsDetail.aspx?cid=225|PhotoNewsDetail.aspx?cid=211|PhotoNewsDetail.aspx?cid=210&texts=||||&borderwidth=465&borderheight=165&textheight=0" >
                                    

#6 JavaScript::Write (size: 170, repeated: 1) - SHA256: df7a515683d0c7042b1b23eebb3f40ff926d279b9056972f81aac430fc4d49cf

                                        < param name = "allowScriptAccess"
value = "sameDomain" > < param name = "movie"
value = "images/focus2.swf" > < param name = "quality"
value = "high" > < param name = "bgcolor"
value = "#FFFFFF" >
                                    

#7 JavaScript::Write (size: 66, repeated: 1) - SHA256: 5a2f7c8295471fc699e4d60ac96c0a660dc53d455c7c1c11d3c8ce4a04df25ab

                                        < param name = "menu"
value = "false" > < param name = wmode value = "opaque" >
                                    

#8 JavaScript::Write (size: 82, repeated: 1) - SHA256: f4818236b3603c7fd0daa00b2bd15813722b051d24f2a1ca33f1c60f4d4a7745

                                        < script type = "text/javascript"
src = "https://js.users.51.la/19559573.js" > < /script>
                                    

#9 JavaScript::Write (size: 793, repeated: 1) - SHA256: b4be7dc57102bc9ecd0ad3ed5f0086e52a259e18363fda57826cb6a856a5344d

                                        < script type = "text/javascript" > imgUrl1 = "uploads/01.jpg";
imgLink1 = escape("PhotoNewsDetail.aspx?cid=227");
imgtext1 = "";
imgUrl2 = "uploads/02.jpg";
imgLink2 = escape("PhotoNewsDetail.aspx?cid=226");
imgtext2 = "";
imgUrl3 = "uploads/03.jpg";
imgLink3 = escape("PhotoNewsDetail.aspx?cid=225");
imgtext3 = "";
imgUrl4 = "uploads/04.jpg";
imgLink4 = escape("PhotoNewsDetail.aspx?cid=211");
imgtext4 = "";
imgUrl5 = "uploads/05.jpg";
imgLink5 = escape("PhotoNewsDetail.aspx?cid=210");
imgtext5 = "";
var pics = "";
pics = "uploads/01.jpg|uploads/02.jpg|uploads/03.jpg|uploads/04.jpg|uploads/05.jpg";
var links = "";
links = "PhotoNewsDetail.aspx?cid=227|PhotoNewsDetail.aspx?cid=226|PhotoNewsDetail.aspx?cid=225|PhotoNewsDetail.aspx?cid=211|PhotoNewsDetail.aspx?cid=210";
var texts = "";
texts = "||||"; < /script>
                                    


HTTP Transactions (42)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.148.62.233
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:33 GMT
Content-Length: 178
Connection: keep-alive
Location: http://www.hkmdta.org/


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET / HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.5.38
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5061
Md5:    654d33232482030a808e79dce079b049
Sha1:   0c2efd5960f924ecc80b4f26b7a21767d16e0980
Sha256: 03e0955fd80ad1a37404770864a3a88c7a72a1597c265c2bcca655d7fd27df98
                                        
                                            GET /JS/tool.js HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:34 GMT
Content-Length: 715
Last-Modified: Mon, 23 Jul 2018 07:22:20 GMT
Connection: keep-alive
Etag: "5b55822c-2cb"
Expires: Mon, 25 Mar 2019 09:14:34 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   715
Md5:    eda6cec8663507f47418f20c9c2cf839
Sha1:   999be7ad1a1b3aab9c5ba905649f12281885c3d3
Sha256: baeda02ac5727a6f8addfb734146535236d39fd4bfe00b27bc2201aaa16c7263
                                        
                                            GET / HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.5.38
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5061
Md5:    654d33232482030a808e79dce079b049
Sha1:   0c2efd5960f924ecc80b4f26b7a21767d16e0980
Sha256: 03e0955fd80ad1a37404770864a3a88c7a72a1597c265c2bcca655d7fd27df98
                                        
                                            GET /JS/ImgSwitch.js HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:34 GMT
Last-Modified: Thu, 13 Aug 2015 08:34:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"55cc567e-ff1"
Expires: Mon, 25 Mar 2019 09:14:34 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1539
Md5:    6763890802f39f033e937595cc0da816
Sha1:   de81b7d45030261bf9ac05a88bf54cceb5f9d875
Sha256: 52ad718221b5b32ef06f155b7c17858ea6a787bc8bede5f6b1e9a338f051f16d
                                        
                                            GET /CssIndex2.css HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:34 GMT
Last-Modified: Wed, 09 Aug 2017 12:03:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"598afa06-d12"
Expires: Mon, 25 Mar 2019 09:14:34 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1176
Md5:    f83e1e8104ce3fadda06bbf7f908dfbb
Sha1:   907cae2fb71dda7de805be7afc8f7d3d0aa86d99
Sha256: 8a488cac729af0b0188783bad3d4010f333406f67b23b2f01708d4a804a1d87e
                                        
                                            GET /JS/MSClass.js HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:34 GMT
Last-Modified: Thu, 13 Aug 2015 08:34:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"55cc5682-5030"
Expires: Mon, 25 Mar 2019 09:14:34 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9226
Md5:    3799a79770334ff0a60a60c2a584b429
Sha1:   40d92146adfcce7b23af3eb6cde30382569db65e
Sha256: 04b3215e2fd830eda19fab0f659bd856b371cfdce0dec21b1ad7d35507e09758
                                        
                                            GET /images/zhaoppwz.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:34 GMT
Content-Length: 17308
Last-Modified: Tue, 13 Mar 2012 02:19:32 GMT
Connection: keep-alive
Etag: "4f5eaeb4-439c"
Expires: Tue, 23 Apr 2019 21:14:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   17308
Md5:    23cfddf87931bb9b9849afc01ec978f1
Sha1:   c1c719f4445e48632578f7b8349d689acab783b6
Sha256: 5e59e34bcad5a7934d6df910cbd62087e9e69fd6e001d04519a4e57f1bbc6edb
                                        
                                            POST /gsdomainvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 24 Mar 2019 13:09:00 GMT
Content-Length: 1558
Connection: keep-alive
Set-Cookie: __cfduid=d440d440e795d7af15d0e6a5fceb534b51553432940; expires=Mon, 23-Mar-20 13:09:00 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Sun, 24 Mar 2019 10:41:02 GMT
Expires: Thu, 28 Mar 2019 10:41:02 GMT
Etag: "4d25e30f71cbce6564e3b339f1ed6b4c2c5eb112"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4bc8e083fb3442a3-OSL


--- Additional Info ---
Magic:  data
Size:   1558
Md5:    691a25e10a3ebb45ca34aa05e05b429e
Sha1:   4d25e30f71cbce6564e3b339f1ed6b4c2c5eb112
Sha256: 103465eed4290d85d71ee0462e5d26f11b61959d434772850e1ba37b1d0a9eb6
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d440d440e795d7af15d0e6a5fceb534b51553432940

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 24 Mar 2019 13:09:00 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Sun, 24 Mar 2019 11:40:40 GMT
Expires: Thu, 28 Mar 2019 11:40:40 GMT
Etag: "36dde1e9961f8817b0e8fbe614d6a1ced371f004"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4bc8e085fd5e42a3-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    b4c5de3c7a5e95824d6e936320a32032
Sha1:   36dde1e9961f8817b0e8fbe614d6a1ced371f004
Sha256: b03c5342a74a96a31e048078b2037dd3eb9faa4a8b497f00de7f1a5cf51ae305
                                        
                                            GET /19559573.js HTTP/1.1 
Host: js.users.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         163.171.140.202
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Sun, 24 Mar 2019 13:09:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.14.0
id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSdVjz+l3A1bFfbymoWW6lPnijTaRa4a
Etag: "3496bbd7ea4fdf22c84279c1c4f1b2f5"
x-id: 19559573
version-id: G001116542248363FFFF900B0083286F
Last-Modified: Thu Aug 16 17:50:13 CST 2018
request-id: 00000169AEA37D049051794F90C434C8
x-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc
Content-Disposition: inline;filename=f.txt
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 19797
X-Via: 1.1 ld88:0 (Cdn Cache Server V2.0)[453 200 2], 1.1 PShlamstdAMS1tq87:7 (Cdn Cache Server V2.0)[0 200 0]


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Sun Mar 24 08:39:03 2019
Size:   2349
Md5:    ddbf5f5a618f76a6ded3c30875b4da64
Sha1:   353c2d67c8c29372e7005f8ffbae8b21a932607f
Sha256: eeb8221fee56d42c1fd26cb9c6ccd049c49059b86a9814fa1fc8dd44145f45ff

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /hm.js?e04a4d6f603849616ec2f76893a08afa HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 10380
Date: Sun, 24 Mar 2019 13:09:01 GMT
Etag: f97a538dd831810d5568dca153ef7621
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=DB98E91639D02E36; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   10380
Md5:    9656cf8d9158efbc0f9f0ce9999e183d
Sha1:   8c47ee6bb31af6600087f31fb75c608de4fd9cb2
Sha256: 04d17cb252e3847848dc04beabc06efe1f1c4c0b278cca8fa92c700947060aa2
                                        
                                            GET /list=sh600097 HTTP/1.1 
Host: hq.sinajs.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         203.90.242.126
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=GBK
                                        
Cache-Control: no-cache
Content-Length: 164
Connection: Keep-Alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   164
Md5:    5036d7478f3cb680f59cd69fd2930006
Sha1:   cd3c65deafa2be3d86dd09a916e327dcc250a07c
Sha256: 2e0a67026fb717c3cd93b1a5652704d98855ed9d77238302b6c63a4791aad9d7
                                        
                                            GET /images/index2_05.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/CssIndex2.css
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:37 GMT
Content-Length: 4275
Last-Modified: Thu, 28 Jul 2011 04:45:26 GMT
Connection: keep-alive
Etag: "4e30e966-10b3"
Expires: Tue, 23 Apr 2019 21:14:37 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   4275
Md5:    7936c8a933e121afea9054b959356d05
Sha1:   73b6388dd3c6788d3e2d729cd1ca07c7233b4b49
Sha256: de74a1645f7a6480ef5a6482ccc6c9f180cf11513bba64f7c37efe4a71ec1760
                                        
                                            GET /images/Icon6_06.html HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/CssIndex2.css
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:37 GMT
Last-Modified: Fri, 13 Jul 2018 04:53:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5b483048-12b5"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2165
Md5:    54f10dacfc036969cc89c6281244d42f
Sha1:   b191290ece28d1751b23e9a48953a75fc31df976
Sha256: 5e42ca037ec01804339086002a687b17cad50f7762261e098ac02bb20ad2f24c
                                        
                                            GET / HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.5.38
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5061
Md5:    654d33232482030a808e79dce079b049
Sha1:   0c2efd5960f924ecc80b4f26b7a21767d16e0980
Sha256: 03e0955fd80ad1a37404770864a3a88c7a72a1597c265c2bcca655d7fd27df98
                                        
                                            GET /images/index2_03.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/CssIndex2.css
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:37 GMT
Content-Length: 28421
Last-Modified: Thu, 28 Jul 2011 04:45:24 GMT
Connection: keep-alive
Etag: "4e30e964-6f05"
Expires: Tue, 23 Apr 2019 21:14:37 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   28421
Md5:    3d29ddd42e63923b2a6e2d62c21f7ee5
Sha1:   02d8ae33e05ecb2aee9ce5b0caef859d2003612a
Sha256: 8b1eabe4d09e590b382d3f38ea74478981139d2a1271a1a7f1878620005f93cf
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1176x885&vl=754&et=0&fl=10.0&ja=1&ln=en-us&lo=0&rnd=440766404&si=e04a4d6f603849616ec2f76893a08afa&v=1.2.43&lv=1&ct=!!&tt=%E4%B8%8A%E6%B5%B7%E5%BC%80%E5%88%9B%E5%9B%BD%E9%99%85%E6%B5%B7%E6%B4%8B%E8%B5%84%E6%BA%90%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8&sn=56837 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/
Cookie: HMACCOUNT=DB98E91639D02E36

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 24 Mar 2019 13:09:02 GMT
Pragma: no-cache
Server: apache
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /images/Icon2.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/CssIndex2.css
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:38 GMT
Content-Length: 340
Last-Modified: Thu, 28 Jul 2011 04:45:16 GMT
Connection: keep-alive
Etag: "4e30e95c-154"
Expires: Tue, 23 Apr 2019 21:14:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   340
Md5:    7cd3931db25a32985c296b9001e1654e
Sha1:   f2d3e01d816afac689fc53b3b5c24d53db482f66
Sha256: 7b6fb7660ceacbc03716610ad3d49e9533d50b5414c7955cfbaf8c19f3303171
                                        
                                            GET /images/Index2_072b.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/CssIndex2.css
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:38 GMT
Content-Length: 8744
Last-Modified: Wed, 13 Sep 2017 05:29:52 GMT
Connection: keep-alive
Etag: "59b8c250-2228"
Expires: Tue, 23 Apr 2019 21:14:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   8744
Md5:    9b87bf5edc0cca4a20758e5510c29aa1
Sha1:   3a48f4eee0276c65ce8b8a65fadc931038714c71
Sha256: 52e4ff9912bc8c203742a54e2958aedd41205918d7c573b214c569f4a6e418c6
                                        
                                            GET /images/index2_08.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/CssIndex2.css
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:38 GMT
Content-Length: 3478
Last-Modified: Thu, 28 Jul 2011 04:45:28 GMT
Connection: keep-alive
Etag: "4e30e968-d96"
Expires: Tue, 23 Apr 2019 21:14:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   3478
Md5:    5e4c51fe4d235c84625240c61736fcc8
Sha1:   28bd4c9f63bbc3a7235ea9ffd4c3ae7c6af27c45
Sha256: e826beb9e1b015545c7662b8ba354f2dca14d7aa4ad6cb4f8fa946ded3a2fd8a
                                        
                                            GET /images/Index2_072bbb.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/CssIndex2.css
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:38 GMT
Content-Length: 20597
Last-Modified: Fri, 19 Aug 2011 07:52:48 GMT
Connection: keep-alive
Etag: "4e4e1650-5075"
Expires: Tue, 23 Apr 2019 21:14:38 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   20597
Md5:    bea1f5a6921b76249fffd58f8f172993
Sha1:   67087d052cac08750ff8ed4bfd3db17b77268197
Sha256: 96fa2a305598509d83decf553c0d1053a8ef3d955d2bc0936eb96eb9be42db3a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:38 GMT
Content-Length: 34442
Last-Modified: Fri, 22 Jun 2018 08:53:20 GMT
Connection: keep-alive
Etag: "5b2cb900-868a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   34442
Md5:    e298e6059dafd1a83c0f6fc39866ff15
Sha1:   d3b4e86a3b43593df8804acf19f1550c9a789ef7
Sha256: c3e71a68c8efdd43f092ac11de325b6b35613e7fb867c7cffc02a2b034ced5b9
                                        
                                            GET /images/focus2.swf HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:39 GMT
Content-Length: 10305
Last-Modified: Thu, 28 Jul 2011 04:45:08 GMT
Connection: keep-alive
Etag: "4e30e954-2841"
Expires: Tue, 23 Apr 2019 21:14:39 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 6
Size:   10305
Md5:    777970f78a57aeb5d518bf4449e4b7b6
Sha1:   99cf3dd2684962e489ecc9b71e9d8e16203680fc
Sha256: 4b4ab28446a9aa49f69479dadef45b46e0e8f03075c7077eb47957ff73d16f4d
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.8
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 12 Mar 2019 07:20:49 GMT
Etag: "60e-583e0874d57a7"
Accept-Ranges: bytes
Content-Length: 1550
Date: Sun, 24 Mar 2019 13:09:03 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1550
Md5:    98c554abfd0ba1a8d6fbfd947dbd0b19
Sha1:   9b0f1e4577ecc7429408ff280486bd2246555cc0
Sha256: 437bea0b833e78655b912de7e65aae12c2c30061b58a9b7bf2a827ddbc6b2d8d
                                        
                                            GET /uploads/01.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:39 GMT
Last-Modified: Thu, 19 Jul 2018 07:28:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5b503db2-3997"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5025
Md5:    66de705e946a06afdbd9045d8432e8f2
Sha1:   3ed230235a822fe79b1f82043d327946bc9da7e4
Sha256: 3c1a76f1046f75d0453c9a42f7e0725ce4c5659658356e093eaa39bb9346425c
                                        
                                            GET /uploads/02.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:39 GMT
Last-Modified: Thu, 19 Jul 2018 07:28:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5b503db2-3997"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5025
Md5:    66de705e946a06afdbd9045d8432e8f2
Sha1:   3ed230235a822fe79b1f82043d327946bc9da7e4
Sha256: 3c1a76f1046f75d0453c9a42f7e0725ce4c5659658356e093eaa39bb9346425c
                                        
                                            GET /uploads/03.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:39 GMT
Last-Modified: Thu, 19 Jul 2018 07:28:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5b503db2-3997"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5025
Md5:    66de705e946a06afdbd9045d8432e8f2
Sha1:   3ed230235a822fe79b1f82043d327946bc9da7e4
Sha256: 3c1a76f1046f75d0453c9a42f7e0725ce4c5659658356e093eaa39bb9346425c
                                        
                                            GET /uploads/04.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:39 GMT
Last-Modified: Thu, 19 Jul 2018 07:28:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5b503db2-3997"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5025
Md5:    66de705e946a06afdbd9045d8432e8f2
Sha1:   3ed230235a822fe79b1f82043d327946bc9da7e4
Sha256: 3c1a76f1046f75d0453c9a42f7e0725ce4c5659658356e093eaa39bb9346425c
                                        
                                            GET /uploads/05.jpg HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1

                                         
                                         104.148.62.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:39 GMT
Last-Modified: Thu, 19 Jul 2018 07:28:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5b503db2-3997"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5025
Md5:    66de705e946a06afdbd9045d8432e8f2
Sha1:   3ed230235a822fe79b1f82043d327946bc9da7e4
Sha256: 3c1a76f1046f75d0453c9a42f7e0725ce4c5659658356e093eaa39bb9346425c
                                        
                                            GET /2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0 HTTP/1.1 
Host: stockdata.stock.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         1.31.128.138
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Sun, 24 Mar 2019 13:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 08 Feb 2019 15:23:16 GMT
Etag: W/"b61d9a36c2bfd41:9f3"
X-Via-JSL: 2e45f6a,-
Set-Cookie: __jsluid=47e1316c104fde782989d84645a18055; max-age=31536000; path=/; HttpOnly
X-Cache: bypass
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2810
Md5:    1a29f2fe853439765c31ea9243c4ef8c
Sha1:   25ab3fae72e516c66b7f1216cc4bcb07b511f341
Sha256: 83fc233d2de0f50ffbc50a80589ad46f1b5b080cf426e113bf498f14e5eba43b
                                        
                                            GET /flash/add_flash_object.js HTTP/1.1 
Host: stockdata.stock.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0
Cookie: __jsluid=47e1316c104fde782989d84645a18055

                                         
                                         1.31.128.138
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sun, 24 Mar 2019 13:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=10800
Etag: W/"02bd88dbfbfd41:acb"
Last-Modified: Fri, 08 Feb 2019 15:04:14 GMT
X-Via-JSL: 2e45f6a,mem(2.4.2)
Expires: Sun, 24 Mar 2019 16:09:04 GMT
X-Cache: hit
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   632
Md5:    0ac32e7055c7ee80b252dd331651647c
Sha1:   d54cf6b5ec2f9716a45f3747a0a8574610fea9eb
Sha256: 5e9e9862559d0ea65c76138fc8244a7451ec5326ae5532e0e6d8d22e3e0eae91
                                        
                                            GET /flash/menu.js HTTP/1.1 
Host: stockdata.stock.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0
Cookie: __jsluid=47e1316c104fde782989d84645a18055

                                         
                                         1.31.128.138
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Sun, 24 Mar 2019 13:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=10800
Etag: W/"02bd88dbfbfd41:acb"
Last-Modified: Fri, 08 Feb 2019 15:04:14 GMT
X-Via-JSL: 2e45f6a,mem(2.4.2)
Expires: Sun, 24 Mar 2019 16:09:04 GMT
X-Cache: hit
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   387
Md5:    e4e972b53cb3fb702bdf7ca4a6117d33
Sha1:   b2e1753be9cb84c6628d2be0dd0dc4147af7ef3e
Sha256: 347f1ce293f11781a54f36f61173666168cea04e9d6a2230d7788ed7dd9a0b75
                                        
                                            GET /flash/gegu.css HTTP/1.1 
Host: stockdata.stock.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0
Cookie: __jsluid=47e1316c104fde782989d84645a18055

                                         
                                         1.31.128.138
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 24 Mar 2019 13:09:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=10800
Etag: W/"02bd88dbfbfd41:acb"
Last-Modified: Fri, 08 Feb 2019 15:04:14 GMT
X-Via-JSL: 2e45f6a,mem(2.4.2)
Expires: Sun, 24 Mar 2019 16:09:04 GMT
X-Cache: hit
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5002
Md5:    4e4ceb0b86192bfc7a95be1e83c9a188
Sha1:   793146643c74f826e1a512ab9d60dfa93857932b
Sha256: 2cd783e97a9c31044a0e9f914403956cc5f50d0e63170795edc0237868e89d95
                                        
                                            GET /OtherInterFace/style/newbase.css HTTP/1.1 
Host: login.tool.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0

                                         
                                         42.81.124.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 24 Mar 2019 13:09:05 GMT
Content-Length: 927
Connection: keep-alive
Last-Modified: Tue, 22 May 2018 02:32:13 GMT
Etag: "2a27ce1775f1d31:216a"
X-Powered-By: ASP.NET
Accept-Ranges: bytes


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) text, with CRLF line terminators
Size:   927
Md5:    2043a3647ef78aeb76103fbf06eb8593
Sha1:   615e15cc2b2c49b4ac1921a8a09662384709b413
Sha256: 4a87c440623c7d905b36fe7823c1ebc9d6ddc1eb5d1a7b21c08d720e75077201
                                        
                                            GET /js/newStock_little.js HTTP/1.1 
Host: img.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0

                                         
                                         119.97.159.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: ATS/4.2.3
Date: Sun, 24 Mar 2019 11:51:44 GMT
Last-Modified: Fri, 14 Dec 2018 07:59:45 GMT
Vary: Accept-Encoding
Etag: "5c1362f1-273a"
Expires: Sun, 24 Mar 2019 13:51:44 GMT
Cache-Control: max-age=7200
X-UA-Compatible: IE=EmulateIE7
Content-Encoding: gzip
Age: 4642
Content-Length: 3873
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3873
Md5:    6cb2053820a89c644853f57042c1506b
Sha1:   a9fbb8b211e34afa299f304bd89f741083e8a68b
Sha256: 93cf54cb1868d745fcf095731533592ce89f8196cd9bfe42eb2c76c107840775
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.hkmdta.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: Hm_lvt_e04a4d6f603849616ec2f76893a08afa=1553432942; Hm_lpvt_e04a4d6f603849616ec2f76893a08afa=1553432942; __tins__19559573=%7B%22sid%22%3A%201553432942491%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201553434742491%7D; __51cke__=; __51laig__=1
Range: bytes=0-
If-Range: "5b2cb900-868a"

                                         
                                         104.148.62.233
HTTP/1.1 206 Partial Content
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sun, 24 Mar 2019 21:14:42 GMT
Content-Length: 34442
Last-Modified: Fri, 22 Jun 2018 08:53:20 GMT
Connection: keep-alive
Etag: "5b2cb900-868a"
Content-Range: bytes 0-34441/34442


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   34442
Md5:    e298e6059dafd1a83c0f6fc39866ff15
Sha1:   d3b4e86a3b43593df8804acf19f1550c9a789ef7
Sha256: c3e71a68c8efdd43f092ac11de325b6b35613e7fb867c7cffc02a2b034ced5b9
                                        
                                            GET /OtherInterFace/js/popup.js HTTP/1.1 
Host: login.tool.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0

                                         
                                         42.81.124.68
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 24 Mar 2019 13:09:08 GMT
Content-Length: 12669
Connection: keep-alive
Last-Modified: Mon, 04 Jun 2018 10:12:15 GMT
Etag: "c0492a83ecfbd31:0"
X-Powered-By: ASP.NET
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ISO-8859 C++ program text, with CRLF line terminators
Size:   12669
Md5:    d1dd2265de151bbee935527c3b756a36
Sha1:   b7ae4f6c1a0917b8fd611bc20d77464fa4212472
Sha256: eac6d8b0cb150e4e93e0b32a202272403a53e55e64501f9f63d44005b38830b8
                                        
                                            GET /img/img08.gif HTTP/1.1 
Host: stockdata.stock.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/flash/gegu.css
Cookie: __jsluid=47e1316c104fde782989d84645a18055

                                         
                                         1.31.128.138
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 24 Mar 2019 13:09:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Via-JSL: 2e45f6a,-
X-Cache: miss
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   962
Md5:    0eb8ff10e98bb3b9ed97dd1327fb664e
Sha1:   f6b3dfede059529417cf800e5d4b0a8f84dc37f0
Sha256: 396929b80f43e19237dc1273c957c2187b3a2eac827fd05eeea711365bf3565b
                                        
                                            GET /flash_luan/Stock/MiniStockChart.swf HTTP/1.1 
Host: flash.tool.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0

                                         
                                         119.97.159.10
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Server: nginx
Date: Sun, 24 Mar 2019 13:09:09 GMT
Content-Length: 96798
Connection: keep-alive
Last-Modified: Tue, 27 Jan 2015 04:25:38 GMT
Etag: "54c71342-17a1e"
Expires: Sat, 06 Apr 2019 07:22:48 GMT
Cache-Control: max-age=1296000
X-UA-Compatible: IE=EmulateIE7
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 17
Size:   96798
Md5:    ce5de982bf2eca0994690e6eebafdf73
Sha1:   e9c3b8e054ddd03a0cec243fa0d75fb553b9ee38
Sha256: 8518bca1ea55a26d5561ccf0a67dcbdb74101410ef4c2c5678761ad0d386b8cc
                                        
                                            GET /go1?id=19559573&rt=1553432942491&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1553432942491&tt=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25BC%2580%25E5%2588%259B%25E5%259B%25BD%25E9%2599%2585%25E6%25B5%25B7%25E6%25B4%258B%25E8%25B5%2584%25E6%25BA%2590%25E8%2582%25A1%25E4%25BB%25BD%25E6%259C%2589%25E9%2599%2590%25E5%2585%25AC%25E5%258F%25B8&kw=&cu=http%253A%252F%252Fwww.hkmdta.org%252F&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.hkmdta.org/

                                         
                                         183.131.207.78
HTTP/1.1 200
Content-Type: application/octet-stream
                                        
Server: HuaweiCloudWAF
Date: Sun, 24 Mar 2019 13:09:12 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=f0d1a1735e669ed31885; path=/ HWWAFSESTIME=1553432949215; path=/


--- Additional Info ---
                                        
                                            GET /flash/img/myButton.gif HTTP/1.1 
Host: flashquote.stock.hexun.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://stockdata.stock.hexun.com/2008/stock.html?c=600097&m=1&p=20600097&t=1&yc=0

                                         
                                         119.97.159.13
HTTP/1.1 502 Bad Gateway
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 24 Mar 2019 13:09:12 GMT
Content-Length: 166
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   166
Md5:    261b1f079fa0a5c0c32d181e43440c05
Sha1:   300ee04911225728b015abd82d7ca5f43f999b79
Sha256: c79255f6cb550eaa07d6e90d859b8c1abe81658115ae8175e74b67ac22c7ed87