Overview

URL zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
IP211.149.177.95
ASNAS38283 CHINANET SiChuan Telecom Internet Data Center
Location China
Report completed2017-12-06 18:38:02 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-12-06 2 js.users.51.la/18925658.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 211.149.177.95

Date UQ / IDS / BL URL IP
2017-12-13 19:43:13 +0100
0 - 0 - 1 gaodengjiaoyuyanjiu.qwqk.org/ 211.149.177.95
2017-12-07 14:46:17 +0100
0 - 0 - 1 chaoyingcailiaogongcheng.caigaowang.com/ 211.149.177.95
2017-12-07 12:53:10 +0100
0 - 0 - 1 guohuajia.caigaowang.com/ 211.149.177.95
2017-12-02 11:23:35 +0100
0 - 0 - 1 6318.caigaowang.com/ 211.149.177.95
2017-12-01 13:54:59 +0100
0 - 0 - 1 chuzhouxueyuanxuebao.caigaowang.com/ 211.149.177.95
2017-11-30 04:41:17 +0100
0 - 0 - 1 chengshiwenti.caigaowang.com/ 211.149.177.95
2017-11-26 01:07:30 +0100
0 - 0 - 1 hongwaijishu.caigaowang.com/ 211.149.177.95
2017-11-25 14:25:14 +0100
0 - 0 - 1 jimeidaxuexuebaozhexueshehuikexueban.caigaowa (...) 211.149.177.95
2017-11-25 00:40:09 +0100
0 - 0 - 1 zhongxiyijiehehulizhongyingwen.qwqk.org/ 211.149.177.95
2017-11-23 23:29:04 +0100
0 - 0 - 1 fujiandiannao.caigaowang.com/ 211.149.177.95

Last 10 reports on ASN: AS38283 CHINANET SiChuan Telecom Internet Data Center

Date UQ / IDS / BL URL IP
2017-12-15 07:56:12 +0100
0 - 0 - 10 51piaoyi.com/ 211.149.152.161
2017-12-15 07:40:28 +0100
0 - 0 - 1 www.ncrieo.com.cn/yjsh_5.htm 125.64.5.100
2017-12-15 07:40:28 +0100
0 - 0 - 1 www.ncrieo.com.cn/yjsh_8.htm 125.64.5.100
2017-12-15 05:10:50 +0100
0 - 0 - 1 www.askfgz.com/strong/Pfc/uvZ 61.188.37.220
2017-12-15 05:01:04 +0100
0 - 0 - 2 quanbanyisheng.com/index.php/quan/index/keywo (...) 118.123.13.241
2017-12-15 04:57:19 +0100
0 - 0 - 1 www.askfgz.com/strong/QClC/FJq 61.188.37.220
2017-12-15 04:42:00 +0100
0 - 0 - 1 www.askfgz.com/strong/Pfc/efSxY 61.188.37.220
2017-12-15 04:17:45 +0100
0 - 0 - 1 www.askfgz.com/strong/Pfc/Lhfwa/Qam 61.188.37.220
2017-12-15 03:28:30 +0100
0 - 0 - 2 quanbanyisheng.com/index.php/quan/index/keywo (...) 118.123.13.241
2017-12-15 01:37:38 +0100
0 - 3 - 2 gvods.com/search.php?searchword=?珍? 221.236.7.214

No other reports on domain: qwqk.org



JavaScript

Executed Scripts (34)


Executed Evals (2)

#1 JavaScript::Eval (size: 382, repeated: 1) - SHA256: 851fe209c44085b05ca9839d9fbab6cc42ec0911aeb30a0024aca2409bcab17f

                                        ({
        "rl": "1176*885",
        "lang": "en-US",
        "ct": "unknow",
        "pf": 1,
        "ins": 1,
        "vd": 1,
        "ce": 1,
        "cd": 24,
        "ds": "��
        L� / fbf� c� 1988 t / 1� ", "
        ing ": 1, "
        ekc ": "
        ", "
        sid ": 1512582236805, "
        tt ": "��
        L� / fbf� B� > � ? ", "
        kw ": "��
        L� / fbf�,
        ��L� / fbf� B�,
        ��L� / fbf� B� > ", "
        cu ": "
        http : //zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/", "pu": ""})
                                    

#2 JavaScript::Eval (size: 4, repeated: 2) - SHA256: 5b8d2b991d2c1f5bf78beb557d17e6650086a267e5ffd4bb6f8aaa942c570f5d

                                        ({})
                                    

Executed Writes (20)

#1 JavaScript::Write (size: 2, repeated: 1) - SHA256: 73475cb40a568e8da8a045ced110137e159f890ac4da883b6b17dc651b3a8049

                                        42
                                    

#2 JavaScript::Write (size: 6, repeated: 1) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#3 JavaScript::Write (size: 49, repeated: 1) - SHA256: b6aa6ce4f22b1e77dbcfcf350180dee98cedf2dbe2e7f972af62e143fe6b21f8

                                        < a class = "bds_more"
href = "#"
data - cmd = "more" > < /a>
                                    

#4 JavaScript::Write (size: 170, repeated: 1) - SHA256: a53eaf6e7bc99346021d259d927e8f6d88380d76de28b56186fa4a184023f404

                                        < a href = "https://www.51.la/?18925658"
target = "_blank"
title = "51.La &#x7F51;&#x7AD9;&#x6D41;&#x91CF;&#x7EDF;&#x8BA1;&#x7CFB;&#x7EDF;" > & # x7F51; & # x7AD9; & # x7EDF; & # x8BA1; < /a>
                                    

#5 JavaScript::Write (size: 156, repeated: 1) - SHA256: 690f65511da9a3914276d4a009c7defcebb97f519e757ac0cfe978a40c127a4d

                                        < a href = 'http://www.cnzz.com/stat/website.php?web_id=1261631948'
target = _blank title = '&#31449;&#38271;&#32479;&#35745;' > & #31449;&# 38271; & #32479;&# 35745; < /a>
                                    

#6 JavaScript::Write (size: 71, repeated: 1) - SHA256: bea0335181872ba34a107bcb9d4eb34afcb290855863bdd8e97921752bdbaf36

                                        < a title = "�0QQz�"
class = "bds_qzone"
href = "#"
data - cmd = "qzone" > < /a>
                                    

#7 JavaScript::Write (size: 69, repeated: 1) - SHA256: 2f6dd59e6a900cf023d0a0b93827936b65ee4455ef8de2ffc61f618399890a72

                                        < a title = "�0~��Z"
class = "bds_tqq"
href = "#"
data - cmd = "tqq" > < /a>
                                    

#8 JavaScript::Write (size: 73, repeated: 1) - SHA256: ff752910e34a2ce93a30d2c6c9e01731a2f7b8d5c386da26c244c89a5503c38e

                                        < a title = "�0��"
class = "bds_weixin"
href = "#"
data - cmd = "weixin" > < /a>
                                    

#9 JavaScript::Write (size: 73, repeated: 1) - SHA256: 7884c7eda00c88130e7ab1db07183c51a2f3e15e24195aeeecabccb38ab0a5e7

                                        < a title = "�0�j�Z"
class = "bds_tsina"
href = "#"
data - cmd = "tsina" > < /a>
                                    

#10 JavaScript::Write (size: 74, repeated: 1) - SHA256: 8e719ed929a19d127f488f917a574e34f311730830c8be780a92962fddc7a126

                                        < a title = "�0��Q"
class = "bds_renren"
href = "#"
data - cmd = "renren" > < /a>
                                    

#11 JavaScript::Write (size: 30, repeated: 1) - SHA256: 9be7d220701d1705ab725f1326d107842e117f71a1120cba4daa135804124a2b

                                        < div class = "bdsharebuttonbox" >
                                    

#12 JavaScript::Write (size: 30, repeated: 1) - SHA256: b6bf941c92fe7bb3a98bef9309fff4defccb886c7337cbf1e59c15f7030a031b

                                        < div id = "doyoo_monitor" > < /div>
                                    

#13 JavaScript::Write (size: 28, repeated: 1) - SHA256: 2390337e9ccc00f407eea401759f1c1e61cce9037b3ccbed8be530b61603b9d1

                                        < div id = "doyoo_panel" > < /div>
                                    

#14 JavaScript::Write (size: 50, repeated: 1) - SHA256: 58a40fa8eb91e10231a19748c7fd89f9663bd1d76b02baa6868ffa4daafe8db2

                                        < div id = "doyoo_share"
style = "display:none;" > < /div>
                                    

#15 JavaScript::Write (size: 31, repeated: 1) - SHA256: b1d5b6e31c5bddab3dee51e8e7f42a622c66c967c96750fd8feb7502f78f709d

                                        < div id = "talk99_message" > < /div>
                                    

#16 JavaScript::Write (size: 106, repeated: 1) - SHA256: 00aded97f3cdaee1bc12e469c408231a506436681447c9ed28bb8dabbe41538f

                                        < link rel = "stylesheet"
type = "text/css"
href = "http://yun-static.soperson.com/131221/oms.css?171107" > < /link>
                                    

#17 JavaScript::Write (size: 86, repeated: 1) - SHA256: 122eca43837e98b3ebff1a6eb1b59e618727b22094a90e11514b6582535111f1

                                        < script charset = "utf-8"
src = "http://s7.qhres.com/static/ab77b6ea7f3fbf79.js" > < /script>
                                    

#18 JavaScript::Write (size: 107, repeated: 1) - SHA256: dc61a32ff00d5becef9597ccb54e533e99da24bc87dc441c8c06d834c6b5f525

                                        < script src = "http://js.passport.qihucdn.com/11.0.1.js?9c59892d2e21b12ce6d6db04606eeec6"
id = "sozz" > < /script>
                                    

#19 JavaScript::Write (size: 112, repeated: 1) - SHA256: 9fb1dbdfd9225b53fb946bd33af6c20ce7287634b4abe6462fea9d209a1bb7ea

                                        < script src = 'https://c.cnzz.com/core.php?web_id=1261631948&t=z'
charset = 'utf-8'
type = 'text/javascript' > < /script>
                                    

#20 JavaScript::Write (size: 114, repeated: 1) - SHA256: 26bd29effb93a14c38c4c1f8aac426fecbec17fe627db9ef61be97dcbfc41c1c

                                        < script type = "text/javascript"
src = "http://yun-static.soperson.com/131221/oms.js?171117"
charset = "utf-8" > < /script>
                                    


HTTP Transactions (119)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Wed, 06 Dec 2017 17:43:51 GMT
Server: Apache
Set-Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; expires=Sun, 10-Dec-17 01:43:51 GMT; path=/; HttpOnly yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; expires=Sun, 10-Dec-17 01:43:51 GMT; path=/; HttpOnly yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; expires=Sun, 10-Dec-17 01:43:51 GMT; path=/; HttpOnly yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; expires=Sun, 10-Dec-17 01:43:51 GMT; path=/; HttpOnly DedeUserID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ DedeUserID__ckMd5=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ DedeLoginTime=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ DedeLoginTime__ckMd5=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
X-Powered-By: PHP/5.5.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9113
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9113
Md5:    94be4d1dd76bb09c500804aa463b0f76
Sha1:   a15c581a1238c0c09d19329526d8c792c998c9e6
Sha256: 3ed8d989021f00bff6c552d5e97781a0c7bd778ba2ccdee74bd11ef20ed41aee
                                        
                                            GET /images/pa.gif HTTP/1.1 
Host: zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Thu, 12 Jan 2017 05:29:44 GMT
Etag: "222200-4db-545df0137a200"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1266
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1266
Md5:    a6a1948f97a30bf4313d964bc04317ad
Sha1:   6b5eaeb150d17c95c8a65822123e5583a989e44f
Sha256: 95a8543db681063884ed17402f346f8df5754153fca1868a9ca9d3b0d6832690
                                        
                                            GET /templets/qwqk/style/style.css HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Mon, 25 Sep 2017 01:49:21 GMT
Etag: "2226a4-ce6e-559f9c47d410a"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9240
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9240
Md5:    2d65d538f100cfb4099d8f840b2c69b3
Sha1:   c6221f6c07e325b79b45a377ef1c7c9d3c6a1665
Sha256: 1b2f1e24e30bc907207ba983909cbdcd997e95d8e2b18cd44a402c40a557c031
                                        
                                            GET /templets/qwqk/style/pro.css HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Wed, 30 Aug 2017 06:17:19 GMT
Etag: "22269f-13eed-557f27ae80af4"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12024
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12024
Md5:    6c0d33e9e82a4d565af594e5be173ed9
Sha1:   53990f679a235234f63fb97e3a7d56346c4aa411
Sha256: 0862ae497392cfe61c2ba61e45f9e9fe14d97af6c879a104f352fd69aa23c2d7
                                        
                                            GET /templets/qwqk/images/guanggao.gif HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Wed, 20 Jul 2016 04:18:38 GMT
Etag: "2225db-1ac4-538097edfa380"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6831
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6831
Md5:    d9df4a291b35a4b3a2d81e2f49d1adbf
Sha1:   13a4e9068ce3c5f089ff946f11a65834115567f4
Sha256: c9bcc6d97c17bbe62356912cfa2aa749997f8d04e8def55a0db01fd36becd7da
                                        
                                            GET /templets/qwqk/js/share.js HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Sun, 10 Jul 2016 02:05:36 GMT
Etag: "222664-580-5373e78b23c00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 606
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   606
Md5:    26880e03123c6c1426a2dcef6afc482d
Sha1:   3331b200326f18b84853c8bca4775ec6a51a3f53
Sha256: 2a03404667ca9e77bfe433b36171f69d0863c3327303aaf9e660065611c2d618
                                        
                                            GET /plus/count.php?view=yes&aid=7785&mid=9 HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Set-Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; expires=Sun, 10-Dec-17 01:43:52 GMT; path=/; HttpOnly yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; expires=Sun, 10-Dec-17 01:43:52 GMT; path=/; HttpOnly
X-Powered-By: PHP/5.5.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 43
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   43
Md5:    70dcca67e7a4f7869621d23bec50267f
Sha1:   cde29cb36e5a63a283d141a08cb1a4a965eae62a
Sha256: c1883f21ad0bed3335c5b78ff6c81ef100c0f46141217392aa702ce72ad254f1
                                        
                                            GET /templets/qwqk/style/style1.css HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Tue, 19 Sep 2017 09:33:31 GMT
Etag: "2226a5-1c20f-559878d6f82a8"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16671
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   16671
Md5:    c1b79bd89b8e91ff27ab6c57f6fece33
Sha1:   c1b4119619e9daf78228fa2bae03ddb162f489b7
Sha256: 7d9d77e894d6f25b1a893e50302d423b0cf7b36a9adcf0507346df26f5434b0b
                                        
                                            GET /templets/qwqk/js/common.js HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Mon, 06 Feb 2017 03:52:10 GMT
Etag: "222657-2150-547d48e530e80"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2378
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2378
Md5:    1cad9e44084801b5f3ad023c7e3955f0
Sha1:   d56633ec5e8571162baa9dc528ef8ab47e24170c
Sha256: 862848aefd66d78503ffdfff1838cfc597653cc6adf71fc546df1f07951b46dd
                                        
                                            GET /uploads/allimg/161114/9-161114104U60-L.jpg HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Mon, 14 Nov 2016 02:48:56 GMT
Etag: "303b8b-a36a-54139e183b600"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 40973
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   40973
Md5:    a733a4ff08e28f174a33e8f619c6a42e
Sha1:   cd9bbcedc047aee91a6dd85d08618b89b6eb700c
Sha256: d3e690593603d2e40aaa8cda6d67f5b98e9f1ecdc54e7d912a6d871eaf0abd93
                                        
                                            GET /templets/qwqk/images/400.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2017 08:52:48 GMT
Etag: "2225af-3c07-546466ca59800"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14638
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14638
Md5:    ae79493b490eca601aca2d8b0fd73d4f
Sha1:   792e9a41616de77cfc454453529f63adddb9c0e8
Sha256: 5501ec221804de77d41f59529ab62a2c7c8ed0b06db34aaf5a463f9820f71cca
                                        
                                            GET /templets/qwqk/js/jquery.min.js HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 06 Dec 2017 17:43:52 GMT
Server: Apache
Last-Modified: Tue, 23 Aug 2016 01:20:36 GMT
Etag: "22265e-16dc5-53ab2f8c80100"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33397
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33397
Md5:    31529bc61ec265edf8ebda08b04cda9c
Sha1:   9f2b1776725f1300fb6a7782e1512f2f8ffc2384
Sha256: 740e1275660028bbfac7f9dd1f59810abbad380a21b449e2f7d3da2efe3944dc
                                        
                                            GET /push.js HTTP/1.1 
Host: push.zhanzhang.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Set-Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1; max-age=31536000; expires=Thu, 06-Dec-18 17:43:54 GMT; domain=.baidu.com; path=/; version=1
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Etag: "4078520126"
Accept-Ranges: bytes
Last-Modified: Wed, 25 Nov 2015 07:46:07 GMT
Expires: Thu, 06 Dec 2018 17:43:54 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 227
Date: Wed, 06 Dec 2017 17:43:54 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   227
Md5:    e548b6ce15bb616c2bfba36e9cfbf307
Sha1:   a348285d9928a6548a57569f1fb9d62bdd747f33
Sha256: 7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
                                        
                                            GET /uploads/161124/9-161124104JA07.jpg HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Thu, 24 Nov 2016 02:47:46 GMT
Etag: "282b50-65e7-5420307c15880"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24059
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24059
Md5:    eb7fcc84835f1b523cfc4b36e72d33fa
Sha1:   44ae23377ca62d7d9dbb23e8d772951f285a9382
Sha256: 200f2874f5a79b7b9af0a66d1b293732970a773a91661619f19cf63fd6305760
                                        
                                            GET /18925658.js HTTP/1.1 
Host: js.users.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         14.17.102.106
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Wed, 06 Dec 2017 17:43:54 GMT
Content-Length: 6761
Last-Modified: Tue, 28 Nov 2017 14:17:37 GMT
Connection: keep-alive
Etag: "5a1d7001-1a69"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   6761
Md5:    d44c52ecd3489a0bb88113502b32393f
Sha1:   088e74a017d352ec164a9960deed94d0c652e62a
Sha256: bfaaf9caf43fa15d524c1ac36f5067aa38e05039bc0e38dd6a56d4628a50f613

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /uploads/170905/2-1FZ5152J0339.jpg HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Tue, 05 Sep 2017 07:27:40 GMT
Etag: "2655a3-941e-5586c2992a0a6"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 37425
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   37425
Md5:    0c8dc37c0658b986ec3b220889979de8
Sha1:   2a50b49fbe6dba0dbd2b032db94912d631a6c8a4
Sha256: 6127daa0291a4abdacd2685bcd9411f6aca6760089093d8b317d3f373514fc54
                                        
                                            GET /uploads/161124/9-1611241054163S.jpg HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Thu, 24 Nov 2016 02:54:16 GMT
Etag: "282b52-cbb7-542031f004600"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 51817
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   51817
Md5:    d643fae20215c38843b4b102f45eec0d
Sha1:   6020aa2ea515e4aea8a99b0d1a4e66e416ef1dce
Sha256: c40a9f850db26de1a7633620e87cf02cf2efc4d5033bbeaf8874fd3a1ec3d692
                                        
                                            GET /templets/qwqk/images/btbt.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:54 GMT
Server: Apache
Last-Modified: Thu, 05 Jan 2017 03:53:20 GMT
Etag: "2225b9-4a5-54550d7932c00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 889
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   889
Md5:    afd371810c6e2f173ae2916e9993e7ad
Sha1:   6f69b619e6ae6b6761dc49cdf81a0e02d19e352b
Sha256: 12fbd1080c10d3d5b62870e8064e1a5bdfea78ba8cfabea43140ecfa93ffec2a
                                        
                                            GET /uploads/161124/9-161124110252S6.jpg HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Thu, 24 Nov 2016 03:02:52 GMT
Etag: "282b54-fe50-542033dc1cf00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 64964
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   64964
Md5:    3212893648a6bf8493c019c31c5f3833
Sha1:   d508de8c6cee6438f0c52ff4621d4fe1893420b7
Sha256: 32936f4088d2e234ecccc968b5d6c793451692ac7f414f8302557dd5d4d52b99
                                        
                                            GET /templets/qwqk/images/qrcode.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Wed, 13 Jul 2016 08:21:12 GMT
Etag: "222627-9728-5378011786e00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 38541
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38541
Md5:    be2cefede8aceea3a0f35b5808b8bc54
Sha1:   03c5ebc089818fafc87adde6f02482c8a5c30766
Sha256: dab28c86f2613e6ad6bdaee4501fe71cbb29391fadfc43044a64e782067a89ff
                                        
                                            GET /uploads/170914/2-1F914162113E3.jpg HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 06 Dec 2017 17:43:53 GMT
Server: Apache
Last-Modified: Thu, 14 Sep 2017 08:21:13 GMT
Etag: "2657b3-190a6-55921f59e231c"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   90222
Md5:    bb3e764af1992ba2f2a305ba9c215d20
Sha1:   7c9451ad408f19abfd4fe3795526368db40d9d5b
Sha256: 8933d4bbe3bc19beb6821dbb307c47e39086057fa3ade165360cd04d3d36ab1c
                                        
                                            GET /70373.js HTTP/1.1 
Host: s.union.360.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         180.163.251.76
HTTP/1.1 200 OK
Content-Type: text/plain
                                        
Server: openresty/1.7.2.1
Date: Wed, 06 Dec 2017 17:43:55 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: __guid=40320251.102355912498920000.1512582235000.0801; domain=.360.cn;path=/;expires=Thu, 06-Dec-18 17:43:55 GMT
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Timing-Allow-Origin: *
Cache-Control: max-age=120, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7155
Md5:    3cc4e866b8fd5deb47307fc4ff4c8cdc
Sha1:   3730841010092db27a3721856f17824ab1a06038
Sha256: da5f5d0d9f353d321cea458c4d7c901dcea898b1ca3fed7f73b2158e5b66d93d
                                        
                                            GET /s.gif?l=http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/ HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.115
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Transfer-Encoding: chunked
Date: Wed, 06 Dec 2017 17:43:55 GMT
Server: apache


--- Additional Info ---
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=d557f2e4990df979edef9b1bc2c7f276e1512582235; expires=Thu, 06-Dec-18 17:43:55 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Wed, 06 Dec 2017 14:32:17 GMT
Expires: Sun, 10 Dec 2017 14:32:17 GMT
Etag: "ed1b7c1f7d4f8d7cf71a1371308be57687f49e1a"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3c910cdb901142af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    3b295c6dbc9c2896e38d7f7530848f4d
Sha1:   ed1b7c1f7d4f8d7cf71a1371308be57687f49e1a
Sha256: 9f7500aa01c7aca987e5dc40c925f3dfd714746e6af80947d5fb3e65b7b9df8d
                                        
                                            GET /11.0.1.js?9c59892d2e21b12ce6d6db04606eeec6 HTTP/1.1 
Host: js.passport.qihucdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         117.21.187.23
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 01 Aug 2017 05:52:07 GMT
Cache-Control: max-age=600
X-QHCDN: EXPIRED
Content-Encoding: gzip
Expires: Wed, 06 Dec 2017 17:53:55 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   115
Md5:    a659c05aa08de913449206f839c5be92
Sha1:   c1add2ddc38d7eb0de89211e6cc52693c3529575
Sha256: 04672318efd6641c46a9723a7c610a92f52a4996af6e420d3c042607f6e7cd6b
                                        
                                            GET /10039837/10065011.js HTTP/1.1 
Host: lead.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.206
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 06 Dec 2017 17:43:55 GMT
Set-Cookie: JSESSIONID=D4AE8D2D9830BC0ECE17ABEA4D6212F7; Path=/; HttpOnly
Content-Encoding: gzip
Vary: Accept-Encoding
Expires: Wed, 06 Dec 2017 17:53:55 GMT
Cache-Control: max-age=600
Access-Control-Allow-Origin: *
Via: cache59.l2de1[717,200-0,M], cache5.l2de1[730,0], cache4.by1[855,200-0,M], cache9.by1[859,0]
X-Cache: MISS TCP_REFRESH_MISS dirn:11:476921945 mlen:-1
X-Swift-SaveTime: Wed, 06 Dec 2017 17:43:55 GMT
X-Swift-CacheTime: 600
Timing-Allow-Origin: *
EagleId: d462b28b15125822348228089e


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1514
Md5:    067a44823771bb03b2cb546855d98aaf
Sha1:   79d3282e175628eaf5a91202dd0f0bc7965e8b40
Sha256: 638b40be561fe3f1150c510787f9205bdbfc9cfa0967019f7de5c42416b6f2d2
                                        
                                            GET /static/ab77b6ea7f3fbf79.js HTTP/1.1 
Host: s7.qhres.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         117.21.187.31
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-QSTATIC-HIT: 1
Expires: Sat, 04 Dec 2027 17:43:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
X-QHCDN: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   354
Md5:    522dbfe2a6f4fb8873efa5b4b11ec820
Sha1:   d0d5e7250e8e2113ac9a34d8a8e37fcddf8cc8f8
Sha256: 085e3b16ab610efe897406b27955f99d51cbca38eb92410f0d268e096cfaaa39
                                        
                                            GET /templets/qwqk/images/sanjiao.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.qwqk.org/templets/qwqk/style/style.css
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Server: Apache
Last-Modified: Sun, 03 Jul 2016 05:32:22 GMT
Etag: "22262b-429-536b48b432580"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 745
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   745
Md5:    d7bab0ff55c83e7b496df64c8ba6c8f4
Sha1:   f8124918d9e0e70c5ba466b272f9fbd421ff62e7
Sha256: 28a726e5e9ae0e82c6e1a89252dd70693621f81cda5fb1f1edc1b86b0b2ca75d
                                        
                                            GET /templets/qwqk/images/uploads.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.qwqk.org/templets/qwqk/style/pro.css
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2017 07:10:04 GMT
Etag: "222636-5a7-54644fd3e6b00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1158
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1158
Md5:    72c81bff40c14d4ce96ce8c93bbf22c9
Sha1:   54a37b45947b66035ee0c0acf6fba1444adbadeb
Sha256: 694cb9667b15f58fb2a799f633c17561644fc92367697364084d402b44551198
                                        
                                            GET /z_stat.php?id=1261631948&web_id=1261631948 HTTP/1.1 
Host: s4.cnzz.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         122.228.95.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Content-Length: 10996
Connection: keep-alive
Date: Wed, 06 Dec 2017 16:28:09 GMT
Last-Modified: Wed, 06 Dec 2017 16:28:09 GMT
Cache-Control: max-age=5400,s-maxage=5400
Via: cache40.l2cn624[74,200-0,M], cache39.l2cn624[74,0], kunlun4.cn250[0,200-0,H], kunlun7.cn250[0,0]
Age: 4547
X-Cache: HIT TCP_MEM_HIT dirn:2:60400129 mlen:-1
X-Swift-SaveTime: Wed, 06 Dec 2017 16:28:09 GMT
X-Swift-CacheTime: 5400
Timing-Allow-Origin: *
EagleId: 7ae44a8715125822361762903e


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   10996
Md5:    1c7b9eb162c2ff27fbdaaac98f7a4ffa
Sha1:   2a6cc64c7e47a53a3541aab2f23707464cc29620
Sha256: eb0e3b5b1db08b514af0e673dbc5b761ba21cda60ffbe15a0b6b3ee18285ee0f
                                        
                                            GET /templets/qwqk/images/qkjb.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.qwqk.org/templets/qwqk/style/pro.css
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2017 06:30:42 GMT
Etag: "222623-1244-5464470752880"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4699
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4699
Md5:    8e19bb2dec3805b7ecdbbd59b762d965
Sha1:   60ec2e1bc4221bcf04be85f8c0551c93fe31910b
Sha256: 80e23e7cbe2d133ef57c330695a0adb230d0fca54b5f049e0b4a55536db38a58
                                        
                                            GET /so/zz.gif?url=http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F&sid=9c59892d2e21b12ce6d6db04606eeec6&token=9/cg5r9o8.9k2qdw2qe.2o1abb1e2ucx HTTP/1.1 
Host: s.360.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: __guid=40320251.102355912498920000.1512582235000.0801

                                         
                                         125.88.193.226
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.0.12
Date: Wed, 06 Dec 2017 17:43:56 GMT
Content-Length: 0
Last-Modified: Wed, 16 Mar 2016 09:18:58 GMT
Connection: close
Accept-Ranges: bytes


--- Additional Info ---
                                        
                                            GET /templets/qwqk/images/preview.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.qwqk.org/templets/qwqk/style/pro.css
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2017 06:19:22 GMT
Etag: "222622-43d9-5464447ed2e80"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17223
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17223
Md5:    38fc107704514eee513a29b32e77fbe0
Sha1:   5ccac7339384280a0b12e1440e5eee78424b25ab
Sha256: b63c21c7b1209e21e7789de02e03258f4fe522c9904211a05606c5e855d5e144
                                        
                                            GET /static/api/js/share.js?v=89860593.js?cdnversion=420160 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2970148496"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Thu, 06 Dec 2018 17:43:56 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6211
Date: Wed, 06 Dec 2017 17:43:56 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6211
Md5:    31400b379dba1c1c3270de1f27d83f5b
Sha1:   955dfc81cbd5dba5f64eaae51fa8d4d1c74d7688
Sha256: a90f7d2558ca896773ddca382048ccfd2ae768842210cb8d7d48061db22dbd60
                                        
                                            GET /templets/qwqk/images/logo.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Server: Apache
Last-Modified: Thu, 09 Mar 2017 01:11:44 GMT
Etag: "2225f2-3d45-54a41eda69400"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15452
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15452
Md5:    35360d4f04cf34d184156fbd687b8fb7
Sha1:   011a7538d65b36f8c02a688ed83d123401e6b0a5
Sha256: 6446be145d7d5149fef690ae69dfd586707ba2ab4e594f6e24976b29cb0a074a
                                        
                                            GET /templets/qwqk/style/icon.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.qwqk.org/templets/qwqk/style/style1.css
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:55 GMT
Server: Apache
Last-Modified: Wed, 13 Jul 2016 08:25:58 GMT
Etag: "222695-7e08-5378022847180"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 31726
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   31726
Md5:    d8f63baa6007f9cced1e5c01a8854e2a
Sha1:   bde4131bd752726f6588bffe1cb8d60bd8605d96
Sha256: c3e39b7ec17fdb235d24f9555ec47f4dccd8ec65e69a5cb40059f53577caf899
                                        
                                            GET /go1?id=18925658&rt=1512582236805&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E3%2580%258A%25E5%25BC%25A0%25E5%25AE%25B6%25E5%258F%25A3%25E8%2581%258C%25E4%25B8%259A%25E6%258A%2580%25E6%259C%25AF%25E5%25AD%25A6%25E9%2599%25A2%25E5%25AD%25A6%25E6%258A%25A5%25E3%2580%258B%25EF%25BC%2588%25E5%25AD%25A3%25E5%2588%258A%25EF%25BC%2589%25E5%2588%259B%25E5%2588%258A%25E4%25BA%258E1988%25E5%25B9%25B4%25EF%25BC%258C%25E6%2598%25AF%25E7%2594%25B1%25E5%25BC%25A0%25E5%25AE%25B6&ing=1&ekc=&sid=1512582236805&tt=%25E5%25BC%25A0%25E5%25AE%25B6%25E5%258F%25A3%25E8%2581%258C%25E4%25B8%259A%25E6%258A%2580%25E6%259C%25AF%25E5%25AD%25A6%25E9%2599%25A2%25E5%25AD%25A6%25E6%258A%25A5%25E6%259D%2582%25E5%25BF%2597%25E7%25A4%25BE%25E6%258A%2595%25E7%25A8%25BF&kw=%25E5%25BC%25A0%25E5%25AE%25B6%25E5%258F%25A3%25E8%2581%258C%25E4%25B8%259A%25E6%258A%2580%25E6%259C%25AF%25E5%25AD%25A6%25E9%2599%25A2%25E5%25AD%25A6%25E6%258A%25A5%252C%25E5%25BC%25A0%25E5%25AE%25B6%25E5%258F%25A3%25E8%2581%258C%25E4%25B8%259A%25E6%258A%2580%25E6%259C%25AF%25E5%25AD%25A6%25E9%2599%25A2%25E5%25AD%25A6%25E6%258A%25A5%25E6%259D%2582%25E5%25BF%2597%252C%25E5%25BC%25A0%25E5%25AE%25B6%25E5%258F%25A3%25E8%2581%258C%25E4%25B8%259A%25E6%258A%2580%25E6%259C%25AF%25E5%25AD%25A6%25E9%2599%25A2%25E5%25AD%25A6%25E6%258A%25A5%25E6%259D%2582%25E5%25BF%2597%25E7%25A4%25BE&cu=http%253A%252F%252Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%252F&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         14.17.102.100
HTTP/1.1 200
                                        
Content-Length: 0
Date: Wed, 06 Dec 2017 17:43:57 GMT


--- Additional Info ---
                                        
                                            GET /go.asp?svid=12&id=18925658&tpages=1&ttimes=1&tzone=1&tcolor=24&sSize=1176,885&referrer=&vpage=http%3A//zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/&vvtime=1512582236797 HTTP/1.1 
Host: web.users.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         42.236.74.242
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Cache-Control: private
Expires: Wed, 06 Dec 2017 01:04:04 GMT
Server: Microsoft-IIS/8.5
Date: Wed, 06 Dec 2017 17:44:04 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /stat.htm?id=1261631948&r=&lg=en-us&ntime=none&cnzz_eid=236572134-1512577689-&showp=1176x885&t=%E5%BC%A0%E5%AE%B6%E5%8F%A3%E8%81%8C%E4%B8%9A%E6%8A%80%E6%9C%AF%E5%AD%A6%E9%99%A2%E5%AD%A6%E6%8A%A5%E6%9D%82%E5%BF%97%E7%A4%BE%E6%8A%95%E7%A8%BF&umuuid=1602ced4a9089-0d071bee2f0e2d8-6c242d76-fe178-1602ced4a915f&h=1&rnd=1058118403 HTTP/1.1 
Host: z11.cnzz.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         140.205.61.61
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Tengine
Date: Wed, 06 Dec 2017 17:43:57 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    8bd3e739a9ba80a435f0214811da0c2a
Sha1:   bfc17d1e04e56542eb8037f08ed142efd252ea82
Sha256: a2dd5774b01bbfc29140279e02fea087df42a4c257dce8858226737a2e521986
                                        
                                            GET /core.php?web_id=1261631948&t=z HTTP/1.1 
Host: c.cnzz.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         122.228.95.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Content-Length: 765
Connection: keep-alive
Date: Wed, 06 Dec 2017 17:43:58 GMT
Last-Modified: Wed, 06 Dec 2017 17:43:58 GMT
Expires: Wed, 06 Dec 2017 17:58:58 GMT
Via: cache15.l2cn8[51,200-0,M], cache8.l2cn8[52,0], kunlun7.cn250[59,200-0,M], kunlun5.cn250[59,0]
X-Cache: MISS TCP_REFRESH_MISS dirn:-2:-2 mlen:-1
X-Swift-SaveTime: Wed, 06 Dec 2017 17:43:58 GMT
X-Swift-CacheTime: 900
Timing-Allow-Origin: *
EagleId: 7ae44a8515125822382467301e


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   765
Md5:    cfb263ca3f09d0ee34a0bc667f5dbd87
Sha1:   08a17335e76cfb910b3936491a234ec42d56e3ee
Sha256: 59911347b34d3d66d31d035acd6fa6d6e1891b6cf5f447e32cbcabb956d9e2c2
                                        
                                            GET /131221/oms.css?171107 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: Tengine
Content-Length: 16815
Connection: keep-alive
Date: Sat, 11 Nov 2017 06:39:47 GMT
Last-Modified: Fri, 28 Jul 2017 03:29:21 GMT
Vary: Accept-Encoding
Etag: "597aaf91-41af"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache7.l2de1[0,200-0,H], cache63.l2de1[591,0], cache1.by1[0,200-0,H], cache10.by1[0,0]
Age: 2199851
X-Cache: HIT TCP_MEM_HIT dirn:8:272302414 mlen:-1
X-Swift-SaveTime: Tue, 28 Nov 2017 22:48:57 GMT
X-Swift-CacheTime: 313833050
Timing-Allow-Origin: *
EagleId: d462b28c15125822385542620e


--- Additional Info ---
Magic:  ASCII text, with very long lines, with CRLF line terminators
Size:   16815
Md5:    1b8ec502c0222dd0c903f2739e3ec180
Sha1:   cbfab7400db9caf72f83a6d31f022b7c64c94758
Sha256: 3cbb56f8fb52edbe429bce676c58e821409920d7a0c9232127a1a6ff763d86e9
                                        
                                            GET /131221/oms.js?171117 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Content-Length: 60209
Connection: keep-alive
Date: Thu, 16 Nov 2017 20:08:33 GMT
Last-Modified: Thu, 16 Nov 2017 20:07:46 GMT
Etag: "5a0df012-eb31"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache55.l2de1[0,200-0,H], cache37.l2de1[584,0], cache8.by1[0,200-0,H], cache9.by1[1,0]
Age: 1719325
X-Cache: HIT TCP_MEM_HIT dirn:9:500294782 mlen:-1
X-Swift-SaveTime: Tue, 28 Nov 2017 22:48:57 GMT
X-Swift-CacheTime: 314313576
Timing-Allow-Origin: *
EagleId: d462b28b15125822386072551e


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   60209
Md5:    7ee667b767503f1bdbd06f3f433c0e5f
Sha1:   1a9b555873246ff536fa56f161ed7df2687405c7
Sha256: 0d43e4bf39c83c073cdc18fcb2dc709796353c077f384bd78192ff7a679df5c9
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d557f2e4990df979edef9b1bc2c7f276e1512582235

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:43:59 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Wed, 06 Dec 2017 13:33:29 GMT
Expires: Sun, 10 Dec 2017 13:33:29 GMT
Etag: "e814c5f03b9efcdbb2a8fc33a4136b2218967024"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3c910cf567c042af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    590c7eb5265f916a8abb5415179a2c16
Sha1:   e814c5f03b9efcdbb2a8fc33a4136b2218967024
Sha256: 67669b9d847fd27e9c4740da708c26e1015fa079c15cc487ed63ff0bf25c9e06
                                        
                                            GET /default/images/plat_foot.gif HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://yun-static.soperson.com/131221/oms.css?171107

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 1445
Connection: keep-alive
Date: Sat, 11 Nov 2017 06:40:24 GMT
Last-Modified: Tue, 22 Mar 2011 09:11:04 GMT
Etag: "4d8867a8-5a5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache12.l2de1[0,200-0,H], cache40.l2de1[0,0], cache1.by1[0,200-0,H], cache10.by1[1,0]
Age: 2199815
X-Cache: HIT TCP_HIT dirn:1:280233896 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 10:31:20 GMT
X-Swift-CacheTime: 315346144
Timing-Allow-Origin: *
EagleId: d462b28c15125822395883295e


--- Additional Info ---
Magic:  GIF image data, version 89a, 66 x 20
Size:   1445
Md5:    201104053bc452e1870a5b8021dbf404
Sha1:   13e21843ad6afeed1437331a8f8deb8d4a96695d
Sha256: 38203df7b156a93bbd7ac35f819a4fc4a20655d82473caaa3d0a272220530f5b
                                        
                                            GET /default/images/message/m_b_0.gif?131127 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 5580
Connection: keep-alive
Date: Sat, 11 Nov 2017 07:22:51 GMT
Last-Modified: Tue, 06 Sep 2011 09:21:18 GMT
Etag: "4e65e60e-15cc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache58.l2de1[0,200-0,H], cache33.l2de1[0,0], cache5.by1[0,200-0,H], cache9.by1[1,0]
Age: 2197268
X-Cache: HIT TCP_HIT dirn:1:29137709 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 07:27:50 GMT
X-Swift-CacheTime: 315359701
Timing-Allow-Origin: *
EagleId: d462b28b15125822397183245e


--- Additional Info ---
Magic:  GIF image data, version 89a, 213 x 241
Size:   5580
Md5:    7bf58a8c4614a5110c2642e0be625abc
Sha1:   a5005d1a755b2f59197dc62005de0b1beed58b93
Sha256: d5182307bcea010c239f6d31a7d21287ba628c968183285845c40d3b7ba8f256
                                        
                                            GET /default/images/message/m_close_0.gif?131127 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 12459
Connection: keep-alive
Date: Sat, 11 Nov 2017 08:06:30 GMT
Last-Modified: Tue, 06 Sep 2011 09:44:14 GMT
Etag: "4e65eb6e-30ab"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache52.l2de1[0,200-0,H], cache42.l2de1[1,0], cache4.by1[0,200-0,H], cache10.by1[0,0]
Age: 2194649
X-Cache: HIT TCP_HIT dirn:2:400354896 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 08:56:24 GMT
X-Swift-CacheTime: 315357006
Timing-Allow-Origin: *
EagleId: d462b28c15125822396673360e


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   12459
Md5:    8243540b9a102c1ab65f262452d5b63f
Sha1:   2947cabae930f1d6c194adc3bd2566435a5225dd
Sha256: d154465d8763fbfa4a127c02492db742958b1991ec3451aa4f4e8ef34ca070b5
                                        
                                            GET /default/images/message/m_icon_email.gif HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://yun-static.soperson.com/131221/oms.css?171107

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 13334
Connection: keep-alive
Date: Sat, 11 Nov 2017 07:10:34 GMT
Last-Modified: Tue, 06 Sep 2011 14:40:00 GMT
Etag: "4e6630c0-3416"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache25.l2de1[625,200-0,M], cache63.l2de1[626,0], cache3.by1[0,200-0,H], cache10.by1[1,0]
Age: 2198005
X-Cache: HIT TCP_HIT dirn:7:860543676 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 07:10:34 GMT
X-Swift-CacheTime: 315360000
Timing-Allow-Origin: *
EagleId: d462b28c15125822397073382e


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   13334
Md5:    a2419cfdbd8d6a4e0c428b9834a41869
Sha1:   1ddc2938f051cc35f7fa560a6ff68bf9e1db7770
Sha256: 2617f3372a3530b4db15a3e67614260c55f1d44624196d03827264837ec91744
                                        
                                            GET /default/images/message/m_btn_0.gif?131127 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 13890
Connection: keep-alive
Date: Sat, 11 Nov 2017 08:06:30 GMT
Last-Modified: Tue, 06 Sep 2011 14:37:32 GMT
Etag: "4e66302c-3642"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache55.l2de1[0,200-0,H], cache1.l2de1[1,0], cache7.by1[0,200-0,H], cache9.by1[1,0]
Age: 2194649
X-Cache: HIT TCP_HIT dirn:5:610900474 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 08:56:24 GMT
X-Swift-CacheTime: 315357006
Timing-Allow-Origin: *
EagleId: d462b28b15125822397633269e


--- Additional Info ---
Magic:  GIF image data, version 89a, 63 x 32
Size:   13890
Md5:    dc4e3cde93d5047c74fb4440c84644fa
Sha1:   eff3909519ddd916d817a8f587fbec92ed4d5ac6
Sha256: a844d153ca00a48d5873c57cfbfe754bc108608af26c1e6361b2b1c202077013
                                        
                                            GET /default/images/message/m_icon_name.gif HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://yun-static.soperson.com/131221/oms.css?171107

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 13335
Connection: keep-alive
Date: Sat, 11 Nov 2017 07:10:35 GMT
Last-Modified: Tue, 06 Sep 2011 14:40:12 GMT
Etag: "4e6630cc-3417"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache61.l2de1[635,200-0,M], cache63.l2de1[1967,0], cache2.by1[0,200-0,H], cache2.by1[0,0]
Age: 2198004
X-Cache: HIT TCP_MEM_HIT dirn:0:113689943 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 07:10:35 GMT
X-Swift-CacheTime: 315360000
Timing-Allow-Origin: *
EagleId: d462b28415125822397164163e


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   13335
Md5:    a54b4217f2b48739bb43b66df805d88b
Sha1:   62bd0b205e0345a77cdb0bda4e932fd4ff0125e9
Sha256: 2ee99bb88bef128861ffcaf756261340881b66b5497fc16729b665df6e02ec8a
                                        
                                            GET /default/images/message/m_p_0.gif?131127 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 14680
Connection: keep-alive
Date: Sat, 11 Nov 2017 08:06:30 GMT
Last-Modified: Tue, 06 Sep 2011 14:41:00 GMT
Etag: "4e6630fc-3958"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache58.l2de1[0,200-0,H], cache17.l2de1[1,0], cache8.by1[0,200-0,H], cache10.by1[0,0]
Age: 2194649
X-Cache: HIT TCP_HIT dirn:11:307684184 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 08:56:24 GMT
X-Swift-CacheTime: 315357006
Timing-Allow-Origin: *
EagleId: d462b28c15125822397143385e


--- Additional Info ---
Magic:  GIF image data, version 89a, 92 x 32
Size:   14680
Md5:    8badbe91e96cf9123e8158c6ec66651a
Sha1:   4042989dcf345e417500f2f9a41af8fa8850364d
Sha256: fa3bb1d4dbb05b7a28338ef80678e1b70cc75da0464df2f2c3cf5cf96dba8026
                                        
                                            GET /default/images/message/m_icon_qq.gif HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://yun-static.soperson.com/131221/oms.css?171107

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 13491
Connection: keep-alive
Date: Sat, 11 Nov 2017 07:10:34 GMT
Last-Modified: Tue, 06 Sep 2011 14:40:34 GMT
Etag: "4e6630e2-34b3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache30.l2de1[584,200-0,M], cache5.l2de1[730,0], cache8.by1[0,200-0,H], cache9.by1[0,0]
Age: 2198005
X-Cache: HIT TCP_HIT dirn:9:298462713 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 07:10:34 GMT
X-Swift-CacheTime: 315360000
Timing-Allow-Origin: *
EagleId: d462b28b15125822397663270e


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   13491
Md5:    be42c904a7013d07f566b7ecccb3a815
Sha1:   74db6273ebbd135c1bd5d1402fd025d7caf8129a
Sha256: e57fad240f167924b55315c9b8be5e6f4a7422e9bb66cd791c6ed00dfdae3804
                                        
                                            GET /templets/qwqk/images/qq-t.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; UM_distinctid=1602ced4a9089-0d071bee2f0e2d8-6c242d76-fe178-1602ced4a915f; looyu_id=0b42d39bc86d874b60bf6aef00e8aef8d8_10039837%3A1; looyu_10039837=v%3A0b42d39bc86d874b60bf6aef00e8aef8d8%2Cref%3A%2Cr%3A%2Cmon%3Ahttp%3A//m2425.talk99.cn/monitor%2Cp0%3Ahttp%253A//zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:58 GMT
Server: Apache
Last-Modified: Thu, 05 Jan 2017 03:52:26 GMT
Etag: "222626-4f5-54550d45b3280"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 976
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   976
Md5:    7875bb33d88fd8fb6a2b0a7a8a569ea9
Sha1:   77b3aeda507e4a1d44ba6c3767e529ec59f9832b
Sha256: c07baed44d604af406c4728725991ade52afebeec14a46eaa8906993c205bfb2
                                        
                                            GET /templets/qwqk/images/qq-lb.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; UM_distinctid=1602ced4a9089-0d071bee2f0e2d8-6c242d76-fe178-1602ced4a915f; looyu_id=0b42d39bc86d874b60bf6aef00e8aef8d8_10039837%3A1; looyu_10039837=v%3A0b42d39bc86d874b60bf6aef00e8aef8d8%2Cref%3A%2Cr%3A%2Cmon%3Ahttp%3A//m2425.talk99.cn/monitor%2Cp0%3Ahttp%253A//zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:58 GMT
Server: Apache
Last-Modified: Thu, 05 Jan 2017 03:52:36 GMT
Etag: "222625-bba-54550d4f3c900"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2749
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2749
Md5:    a33582567d5e118bb693b8f7f4150d4d
Sha1:   556da7e30a5029357237d58986c7258e3387a734
Sha256: 452b17883b78b6a5f16c5da51743169dba30e64e5b23adcbc84aa130f7da05da
                                        
                                            GET /templets/qwqk/images/qq-b.png HTTP/1.1 
Host: www.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; UM_distinctid=1602ced4a9089-0d071bee2f0e2d8-6c242d76-fe178-1602ced4a915f; looyu_id=0b42d39bc86d874b60bf6aef00e8aef8d8_10039837%3A1; looyu_10039837=v%3A0b42d39bc86d874b60bf6aef00e8aef8d8%2Cref%3A%2Cr%3A%2Cmon%3Ahttp%3A//m2425.talk99.cn/monitor%2Cp0%3Ahttp%253A//zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 06 Dec 2017 17:43:58 GMT
Server: Apache
Last-Modified: Thu, 05 Jan 2017 03:52:46 GMT
Etag: "222624-4f2-54550d58c5f80"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 969
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   969
Md5:    8c3c6b0cec2441f26912b9703ecd550a
Sha1:   d9003f9e660e0abb67a41d9211e5ebd2ffb6dac5
Sha256: 79642012a038df0d558849ab39df002b4b73cf4728873015fa7db022d59895cf
                                        
                                            GET /default/images/message/m_icon_phone.gif HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://yun-static.soperson.com/131221/oms.css?171107

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 13307
Connection: keep-alive
Date: Sat, 11 Nov 2017 07:10:34 GMT
Last-Modified: Tue, 06 Sep 2011 14:40:22 GMT
Etag: "4e6630d6-33fb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache47.l2de1[593,200-0,M], cache59.l2de1[593,0], cache8.by1[0,200-0,H], cache1.by1[1,0]
Age: 2198005
X-Cache: HIT TCP_HIT dirn:11:292778118 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 07:10:34 GMT
X-Swift-CacheTime: 315360000
Timing-Allow-Origin: *
EagleId: d462b28315125822397305358e


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   13307
Md5:    eaf055420f345227135b5c99a728f645
Sha1:   11a9b6aeccb2b1cc803affa1b5eda75c8734f7dc
Sha256: 3fb9206e0f5957e48127bdf17a789f1163df58d35e65411f5d85f7153ded1723
                                        
                                            GET /s.gif?et=100&si=70373&ldt=1&vis=&prv=0&guid=40320251.102355912498920000.1512582235000.0801&t=1512582239601&v=3.0.1&_mtd=im HTTP/1.1 
Host: s.union.360.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: __guid=40320251.102355912498920000.1512582235000.0801

                                         
                                         180.163.251.76
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty/1.7.2.1
Date: Wed, 06 Dec 2017 17:43:59 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
Set-Cookie: __huid=11yXLfYZ037jo8muT9sta2bKFsv14oHY6PY46UKcehQvo=; Expires=Sat, 04-Dec-27 17:43:59 GMT; Domain=.360.cn; Path=/
Expires: Fri, 01 Jan 1980 00:00:00 GMT
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /static/api/js/share/share_api.js?v=226108fe.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2156485466"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Thu, 06 Dec 2018 17:44:00 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 374
Date: Wed, 06 Dec 2017 17:44:00 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   374
Md5:    d83d9b2e8f9991d48228eacaa36ed9d8
Sha1:   43f570d57795ff92f4f9765ca13fe8e7c04004dc
Sha256: 0823a3af4f618739366bd95c18c78716313d835adb2b20bcfa1bf44265fb7cfb
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=441661, public, no-transform, must-revalidate
Last-Modified: Mon, 4 Dec 2017 20:20:38 GMT
Expires: Mon, 11 Dec 2017 20:20:38 GMT
Date: Wed, 06 Dec 2017 17:44:00 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    4c92dc8e26a8e353d7a0ad4cbe633520
Sha1:   8ab13f60a3f736ebfb606443b395648db26fb17b
Sha256: 3464c1082a2c391df9b8aa39651e6d8410280a2a9edba6f07de6c16e966bd26e
                                        
                                            GET /static/api/js/view/share_view.js?v=3ae6026d.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2743687061"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:12 GMT
Expires: Thu, 06 Dec 2018 17:44:00 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 751
Date: Wed, 06 Dec 2017 17:44:00 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   751
Md5:    2f70d93b9f03bdfbd94c882baa358ba0
Sha1:   f2ff3411db7c99b8c38f88ef83d8d2c1e36cc97c
Sha256: 2d79560384a4a5d390dc9979d68b9db79d01076b2e89a110d16a42af3dbfaadc
                                        
                                            GET /mv.html HTTP/1.1 
Host: 360fenxi.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         123.125.54.233
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: openresty/1.7.2.1
Date: Wed, 06 Dec 2017 17:44:00 GMT
Last-Modified: Mon, 20 Nov 2017 12:44:34 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   869
Md5:    1b6a403e8beb9bf7019eddb18e6bf02c
Sha1:   d8b83221d1f08dcb89b1df2518d1af43a73c5ec5
Sha256: bcf0c8c173265078e8903e37dc365e48f79e4d7c53ce496246ddceb4be4f3a75
                                        
                                            GET /9.gif?abc=1&rnd=1081956073 HTTP/1.1 
Host: cnzz.mmstat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         106.11.249.143
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 06 Dec 2017 17:44:00 GMT
Content-Length: 43
Connection: close
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=YBqvEqIILxYCAU0ogXuOkPl1; expires=Sat, 04-Dec-27 17:44:00 GMT; path=/; domain=.mmstat.com sca=b070938e; path=/; domain=.cnzz.mmstat.com atpsida=2824133daf552ef3ab75274e_1512582240_1; path=/; domain=.cnzz.mmstat.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /s.gif?et=0&ck=0&adb=0&cl=24&ds=1176x885&ln=en-US&url=http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F&si=70373&su=&flt=1512582239&lt=1512582239&pt=2509850982487585000&guid=40320251.102355912498920000.1512582235000.0801&v=3.0.1&t=1512582240127&_mtd=im HTTP/1.1 
Host: s.union.360.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: __guid=40320251.102355912498920000.1512582235000.0801; __huid=11yXLfYZ037jo8muT9sta2bKFsv14oHY6PY46UKcehQvo=

                                         
                                         180.163.251.76
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty/1.7.2.1
Date: Wed, 06 Dec 2017 17:44:00 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
Expires: Fri, 01 Jan 1980 00:00:00 GMT
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /search/c.js?u=2771473087 HTTP/1.1 
Host: e.so.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         180.163.251.138
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=utf-8
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:00 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: private
X-Cache: MISS


--- Additional Info ---
                                        
                                            GET /monitor/s?c=a&i=10039837&v=0b42d39bc86d874b60bf6aef00e8aef8d8&u=0b42d39bc86d874b60bf6aef00e8aef8d8&p=&ref=&site=14437&h=%E5%BC%A0%E5%AE%B6%E5%8F%A3%E8%81%8C%E4%B8%9A%E6%8A%80%E6%9C%AF%E5%AD%A6%E9%99%A2%E5%AD%A6%E6%8A%A5%E6%9D%82%E5%BF%97%E7%A4%BE%E6%8A%95%E7%A8%BF&w=http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F&scn=1176*885&t=&ct=1&r=&p0=http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F&x=1512582239921 HTTP/1.1 
Host: m2425.talk99.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         58.83.208.25
HTTP/1.1 200 OK
                                        
Server: Apache-Coyote/1.1
Set-Cookie: __t99_10039837="_u:0b42d39bc86d874b60bf6aef00e8aef8d8,_v:0b42d39bc86d874b60bf6aef00e8aef8d8,_site:14437,_ct:1,_ref:,_p0:http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F,_r:"; Version=1; Domain=.talk99.cn; Max-Age=630720000; Path=/
P3P: CP: "CAO PSA OUR"
Transfer-Encoding: chunked
Date: Wed, 06 Dec 2017 17:43:59 GMT


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   79
Md5:    1f5515d3848fc0845666739652003dac
Sha1:   3ce5baf2700289f397eb5d75f3cdc907f1ccaf67
Sha256: 1c9c1d290f80b53cc71b92b0a8db2ed8b7671e2f4466f8bfdddee64ad39498ba
                                        
                                            GET /hm.js?fd3ed2b12cc36777a313fe409216a92e HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 9373
Date: Wed, 06 Dec 2017 17:44:00 GMT
Etag: 24fa1efa6d40b1edb76f2c6d67781903
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=EFB56147A426EE31; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   9373
Md5:    1f4a719e0b1742626842317f908ba6e0
Sha1:   676d6a02baec0d433c7d7b87c3cb8da4d0a37fc6
Sha256: 6cf4471d39d8f5e2f48beb62971891520d444945b74429bf317e542740131c07
                                        
                                            GET /b?type=10 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://360fenxi.mediav.com/mv.html

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95; expires=Saturday, 06-Jan-2018 01:44:01 CST; path=/; domain=.mediav.com;
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   458
Md5:    a0dfaee71537d4442239d49e055292a5
Sha1:   49c1e80b115ae89582967742a589d499ee51e24e
Sha256: 9ce021d873016d8212d2baa8fc17c48965e1aa502aa133f048639ab3201e748f
                                        
                                            GET /static/api/js/share/api_base.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "3616102293"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:12 GMT
Expires: Thu, 06 Dec 2018 17:44:01 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 580
Date: Wed, 06 Dec 2017 17:44:01 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   580
Md5:    a2f2cddb86ee350731a332b4c44f5e0d
Sha1:   e8ec70d2a62da5fff2ce1b684a4a9d112d640315
Sha256: 142e59628a500e248c6155c8fe279eeb70bc6aebf516c1bb6cd9486ea1b207b1
                                        
                                            GET /static/api/js/view/view_base.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2693355284"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:57 GMT
Expires: Thu, 06 Dec 2018 17:44:01 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 728
Date: Wed, 06 Dec 2017 17:44:01 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   728
Md5:    7ee144ca4be853ced65e63463259e6eb
Sha1:   a171d2b09ecb55590628a71a7f50fc05eb2d7e92
Sha256: 89119613d47f7bd1c2daf15d878fea5cfbca158fbd90930fcf106b4dc177d9f6
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:01 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    bb816588c6c99bdfb3014594033f6b19
Sha1:   47dc621f4847fa444c7170be3523d6699232b579
Sha256: 814e90836de4db41e9969eba9c647582c595a56b9fbeb8ec49c062c580e7a0c6
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:01 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /static/api/js/base/tangram.js?v=37768233.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "809096466"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Thu, 06 Dec 2018 17:44:01 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 35922
Date: Wed, 06 Dec 2017 17:44:01 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35922
Md5:    0500aea044b97839ccf4ca39593da8f9
Sha1:   7a89f247cf7f261032d03b5d2f8ae8cd64b74db0
Sha256: a25ea8575231daaa13e04fd0780a5ae682f807d5bad2e789db3a42da483d3fc4
                                        
                                            GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1176x885&vl=754&et=0&fl=10.0&ja=1&ln=en-us&lo=0&rnd=941674073&si=fd3ed2b12cc36777a313fe409216a92e&v=1.2.27&lv=1&ct=!!&tt=%E5%BC%A0%E5%AE%B6%E5%8F%A3%E8%81%8C%E4%B8%9A%E6%8A%80%E6%9C%AF%E5%AD%A6%E9%99%A2%E5%AD%A6%E6%8A%A5%E6%9D%82%E5%BF%97%E7%A4%BE%E6%8A%95%E7%A8%BF&sn=34441 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1; HMACCOUNT=EFB56147A426EE31

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Wed, 06 Dec 2017 17:44:01 GMT
Pragma: no-cache
Server: apache
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pixel?google_nid=MEV&google_sc&google_cm&tid=3&from_mv=1&google_ula=2121606 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         216.58.209.98
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://cm.g.doubleclick.net/pixel?google_nid=MEV&google_sc=&google_cm=&tid=3&from_mv=1&google_ula=2121606&google_tc=
Date: Wed, 06 Dec 2017 17:44:02 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 338
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 06-Dec-2017 17:59:02 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   338
Md5:    d280fad95d123f9e4ea7db22383a7e69
Sha1:   8ada87e0ab0a2556397a06833004792b901024bc
Sha256: 6db75a1896bb60205543384b42428dbb3b23308a454e9e62c44cccc43c0ea1a9
                                        
                                            GET /static/api/js/component/partners.js?v=911c4302.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2978568079"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:12 GMT
Expires: Thu, 06 Dec 2018 17:44:03 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 821
Date: Wed, 06 Dec 2017 17:44:03 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   821
Md5:    1ff0612f0ade672442df56d9d41ba774
Sha1:   48f5b84a02ddad184dd8b2085264ac2e0931081e
Sha256: b50d3b649b306497c8baa5f77c41430c0f8c764508b19e109932b156f6e39084
                                        
                                            GET /static/api/js/trans/logger.js?v=d16ec0e3.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2986956754"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Thu, 06 Dec 2018 17:44:03 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1039
Date: Wed, 06 Dec 2017 17:44:03 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1039
Md5:    490ead5836a58910e18ab0e929e50fe3
Sha1:   cf04dc219fe85d9c752c8636cc546d9f8f21dea2
Sha256: 9ba8ca2bd9e21c0203818c09aa7c1d69f4d51c613c1f785c2e8e4b6dc903b5b4
                                        
                                            GET /static/api/css/share_style1_16.css HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Etag: "3263780444"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:57 GMT
Expires: Thu, 06 Dec 2018 17:44:03 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 909
Date: Wed, 06 Dec 2017 17:44:03 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   909
Md5:    d9d1ddb00ae9ef32128975059e248400
Sha1:   cd6550333b9eada5dbaa13f6ac60092806f5fdd6
Sha256: 46c0000594c3259aa490090afa0eaf8e0b3bc9187edf9599b89479653dbe776e
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=351094, public, no-transform, must-revalidate
Last-Modified: Sun, 3 Dec 2017 19:15:37 GMT
Expires: Sun, 10 Dec 2017 19:15:37 GMT
Date: Wed, 06 Dec 2017 17:44:03 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1628
Md5:    d1e852f4727ba5d6c38138d4c31f4068
Sha1:   4851e1a34fcfff559596f8c9e20610f0f71d9083
Sha256: d6e940db76d6194f9d2e0b6bd67af25f8f485c45a333897c262641fa6d713597
                                        
                                            GET /v.gif?pid=307&type=3071&sign=&desturl=&linkid=javcewddcna&apitype=1 HTTP/1.1 
Host: nsclick.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         115.239.211.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Cache-Control: max-age=0
Content-Length: 0
Date: Wed, 06 Dec 2017 17:44:03 GMT
Etag: "4280832337"
Expires: Wed, 06 Dec 2017 17:44:03 GMT
Last-Modified: Fri, 23 Oct 2009 08:06:04 GMT
Pragma: no-cache
Server: BWS/1.0


--- Additional Info ---
                                        
                                            GET /v.gif?l=http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.115
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Transfer-Encoding: chunked
Date: Wed, 06 Dec 2017 17:44:03 GMT
Server: apache


--- Additional Info ---
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d557f2e4990df979edef9b1bc2c7f276e1512582235

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:03 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Wed, 06 Dec 2017 17:32:01 GMT
Expires: Sun, 10 Dec 2017 17:32:01 GMT
Etag: "082c4bfe26c9fa862b24806ca30e7e33343c8813"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3c910d0d76e142af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    39b5bf306be5921a754dd9ac41ce5ab7
Sha1:   082c4bfe26c9fa862b24806ca30e7e33343c8813
Sha256: e657449c7dac4e96a479198f098a98091642c858bb0e55b0a7bb3b706d6593cf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:03 GMT
Server: Apache
Last-Modified: Sun, 03 Dec 2017 20:08:48 GMT
Expires: Sun, 10 Dec 2017 20:08:48 GMT
Etag: EE2C380EB6625EE07CD70F9DA767A09EDD24A0D3
Cache-Control: max-age=353684,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp18
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6cee14c42fa6fdf42a1205e380a8d26c
Sha1:   ee2c380eb6625ee07cd70f9da767a09edd24a0d3
Sha256: 6096f576be76e9b030bf910ca4126abdf7dcd442aae78d839e279756bda90729
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:03 GMT
Server: Apache
Last-Modified: Sun, 03 Dec 2017 10:16:14 GMT
Expires: Sun, 10 Dec 2017 10:16:14 GMT
Etag: 1A61434EB77E8A08FC231D666C471313D6E9FE9A
Cache-Control: max-age=318130,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp27
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    a1752ae5dcb0690967ef021b3b76f6c6
Sha1:   1a61434eb77e8a08fc231d666c471313d6e9fe9a
Sha256: b36b4e7d5ef2eb0406f1b8ff6b6e952a4f5ee81babd5ef05094608b3f6b6ffdd
                                        
                                            GET /static/api/img/share/icons_1_16.png?v=774cfc30.png HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bdimg.share.baidu.com/static/api/css/share_style1_16.css
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "4035501901"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:12 GMT
Expires: Thu, 06 Dec 2018 17:44:03 GMT
Cache-Control: max-age=31536000
Content-Length: 12846
Date: Wed, 06 Dec 2017 17:44:03 GMT
Server: apache


--- Additional Info ---
Magic:  PNG image, 16 x 3260, 8-bit colormap, non-interlaced
Size:   12846
Md5:    2140d70428939dc0c9555b39774cfc30
Sha1:   3793c3265429ab7b830bfaf18322259cd0b4c4ef
Sha256: 457350cabd9fcfead36be570cfc6d88f38449847b1c91b7ce037ce66cbafafec
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:04 GMT
Server: Apache
Last-Modified: Sun, 03 Dec 2017 10:16:14 GMT
Expires: Sun, 10 Dec 2017 10:16:14 GMT
Etag: 7DEFD7AE058C9FA5E93D758ED2B274FD8FD7E348
Cache-Control: max-age=318129,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp18
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    baa2492cb8a205d549febea37749ffba
Sha1:   7defd7ae058c9fa5e93d758ed2b274fd8fd7e348
Sha256: 3aa1bd19f533806dd413a35410ef2d415546ed5375b6aa5247bf3a7d6b87f7c8
                                        
                                            GET /cm.gif?dspid=11172 HTTP/1.1 
Host: cc.xtgreat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         101.251.218.35
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
                                        
Date: Wed, 06 Dec 2017 17:44:03 GMT
Transfer-Encoding: chunked
Server: XTServer
P3P: CP='CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
Set-Cookie: a=njdMe0uXq860; Expires=Fri, 06-Dec-19 17:44:03 GMT; Domain=.xtgreat.com; Path=/
Location: https://ckmap.mediav.com/m?tid=8&xtid=njdMe0uXq860&mzid=njdMe0uXq860


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: wosign-ovca.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         104.192.110.216
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.7.2
Date: Wed, 06 Dec 2017 17:44:04 GMT
Content-Length: 1539
Connection: keep-alive
Content-Transfer-Encoding: Binary
Last-Modified: Wed, 06 Dec 2017 17:32:12 GMT
Expires: Wed, 13 Dec 2017 17:32:12 GMT
Etag: "5B1DB82B97BB229CEC8051C5905F2685E12E73A6"
Cache-Control: max-age=172800,public,no-transform,must-revalidate


--- Additional Info ---
Magic:  data
Size:   1539
Md5:    059116ed01c68b0a7fc0bfab32ee6f10
Sha1:   5b1db82b97bb229cec8051c5905f2685e12e73a6
Sha256: 94dd4ab2f9a897d08ad7b600b8460d7289c52c66e0fd7908e6e1007742b3b7c0
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d557f2e4990df979edef9b1bc2c7f276e1512582235

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:04 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Wed, 06 Dec 2017 16:01:34 GMT
Expires: Sun, 10 Dec 2017 16:01:34 GMT
Etag: "f8f93b6c2ef36f93fa3128f7f422c9e33015b04a"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3c910d1651a442af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    1319046baba000b8dab5e7135d50e2c8
Sha1:   f8f93b6c2ef36f93fa3128f7f422c9e33015b04a
Sha256: 6c16d53f1b11b8b9f505cc0cd322de03b46b2f15b3a348189326226083449761
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:04 GMT
Server: Apache
Last-Modified: Mon, 04 Dec 2017 05:54:56 GMT
Expires: Mon, 11 Dec 2017 05:54:56 GMT
Etag: 08824D9AA946B8CD5804131EE8503A423908CABA
Cache-Control: max-age=388851,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp18
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    f04fe2a99c944c17856d9791c130ae77
Sha1:   08824d9aa946b8cd5804131ee8503a423908caba
Sha256: 71117038cf2eddc5c99d48b990a0f787ed32a11e8252e9b1998ff8752e225228
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d557f2e4990df979edef9b1bc2c7f276e1512582235

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:04 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Wed, 06 Dec 2017 15:43:49 GMT
Expires: Sun, 10 Dec 2017 15:43:49 GMT
Etag: "2d3bcfab0c759e5ea9f4b74f29de454a17327bcc"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3c910d1731dd42af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    10eeb19f481967d4eb312a81a41a4fe6
Sha1:   2d3bcfab0c759e5ea9f4b74f29de454a17327bcc
Sha256: 6293d183c2efc484b4d029689d754f875059890211659b1d005912412b7d2e86
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d557f2e4990df979edef9b1bc2c7f276e1512582235

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:05 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Wed, 06 Dec 2017 15:07:06 GMT
Expires: Sun, 10 Dec 2017 15:07:06 GMT
Etag: "5b978e1516d70d0ec443be847e5ee187b21e027d"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3c910d1761eb42af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    6d2163cff3eb7cb89a286f47d0aae24a
Sha1:   5b978e1516d70d0ec443be847e5ee187b21e027d
Sha256: 89e67331140155cfc5bddb2a3a1d60ddaaf52ac878a789f47d21ef4863340caf
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
Cookie: __cfduid=d557f2e4990df979edef9b1bc2c7f276e1512582235

                                         
                                         104.31.75.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:05 GMT
Content-Length: 1570
Connection: keep-alive
Last-Modified: Wed, 06 Dec 2017 16:13:34 GMT
Expires: Sun, 10 Dec 2017 16:13:34 GMT
Etag: "635c9012aa8a0eb6f95007990d7dcd4a07189bae"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3c910d17a20142af-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    3db4e72f32c1664881c2df1611c8671e
Sha1:   635c9012aa8a0eb6f95007990d7dcd4a07189bae
Sha256: 7953b5a327076faebb81489843ac01e94aafb48cafe472deab243b2a6c1f17cd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 06 Dec 2017 17:44:05 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121779, public, no-transform, must-revalidate
Last-Modified: Wed, 06 Dec 2017 17:20:34 GMT
Expires: Fri, 08 Dec 2017 05:20:34 GMT
Etag: "09ec63047409437905ba243d86a19d0ca9f67d75"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    b82b1b3b2d644ffe7518b5b5e0b80e70
Sha1:   09ec63047409437905ba243d86a19d0ca9f67d75
Sha256: 62b59c1307a5ffd0a0db8aeac985dec5dd57864332a2d7e4e92717f4b78e3f46
                                        
                                            GET /?pid=dmp_1000 HTTP/1.1 
Host: max.dmp.360.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: __guid=40320251.102355912498920000.1512582235000.0801; __huid=11yXLfYZ037jo8muT9sta2bKFsv14oHY6PY46UKcehQvo=

                                         
                                         36.110.213.174
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: openresty/1.9.15.1
Date: Wed, 06 Dec 2017 17:44:05 GMT
Content-Length: 167
Connection: close
Location: https://ckmap.mediav.com/m?tid=627&tck=c8adbf7536b6913f66960cc964d5e42d


--- Additional Info ---
Magic:  HTML document text
Size:   167
Md5:    138c353d2c91f30c4b10014703c72778
Sha1:   2414f52f13e3d4e686f7577fea289e75e290364d
Sha256: c66a644150978c6cfaec135e762a4f79c6dbde85d14919b011af3804b79aa720
                                        
                                            GET /jdx?dsp=1000217&ver=1 HTTP/1.1 
Host: jcm.jd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         202.77.129.166
HTTP/1.1 302 Found
                                        
Server: JDWS/1.0.0
Date: Wed, 06 Dec 2017 17:44:05 GMT
Content-Length: 0
Connection: close
Set-Cookie: __jda=122270672.151258224508515513046.1512582245.1512582245.1512582245.0; Domain=.jd.com; Expires=Mon, 04-Jun-2018 17:44:05 GMT; Path=/
Location: https://ckmap.mediav.com/m?tid=23&tck=b9491fb267a5aae6e152b910a1a86fff&ts=1512582245085&ver=1
Content-Language: zh-CN
Expires: Wed, 06 Dec 2017 17:44:05 GMT
Cache-Control: max-age=0


--- Additional Info ---
                                        
                                            GET /pixel?dspid=6455766&ext_data=1 HTTP/1.1 
Host: cm.pos.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: BAIDUID=000ABA2AB89797FB4FC8B5B4CF436403:FG=1

                                         
                                         111.202.114.35
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Connection: keep-alive
Content-Length: 0
Date: Wed, 06 Dec 2017 17:44:05 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: https://ckmap.mediav.com/m?tid=5&&baidu_user_id=2565e16e5da280c81d5583ed52610ee2adb38673cf14d0cbcd069546aeb5ef756e1cd7db35f88b05ffcb91d4a0979164&cookie_version=2&timestamp=1512582245&ext_data=1
Server: nginx


--- Additional Info ---
                                        
                                            GET /t.gif?tanx_nid=29628860&tanx_cm&mediav_tid=15&from_mv=1 HTTP/1.1 
Host: cms.tanx.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         140.205.243.64
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
Date: Wed, 06 Dec 2017 17:44:05 GMT
Content-Length: 49
Connection: close
Server: Tengine
P3P: CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV"
Location: https://ckmap.mediav.com/m?tanx_err=1&tanx_ver=1&mediav_tid=15&from_mv=1
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   49
Md5:    ed280a0ea3cc38f3cbbc747acfbef47d
Sha1:   6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
Sha256: 8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
                                        
                                            GET /m?tid=3&from_mv=1&google_gid=CAESEDLHg7WEXr2sumZtahwR8fM&google_cver=1&google_ula=2121606,0 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: v=RV^H@Wr'f(9zBv*7%iVf; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.mediav.com
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /pixel?vamaker_dspid=16164270&vamaker_cm HTTP/1.1 
Host: cm.vamaker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         60.191.140.210
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:05 GMT
Content-Length: 0
Connection: close
Set-Cookie: LINGXIAOID0=W9cBHwa8QJbAL4QO; expires=Thu, 31-Dec-20 23:59:59 GMT; path=/; domain=.vamaker.com
Location: https://ckmap.mediav.com/m?tid=21&vamaker_id=s9WOQjZdvYZRIGLfY7RRY5&vamaker_cver=1


--- Additional Info ---
                                        
                                            GET /cm.gif?dspid=11115 HTTP/1.1 
Host: cm.miaozhen.atm.youku.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         198.11.132.53
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Wed, 06 Dec 2017 17:44:05 GMT
Content-Length: 154
Connection: keep-alive
Set-Cookie: __ysuid=1512582245577brx; path=/; domain=.youku.com; expires=Tue, 02-Sep-2042 12:24:06 GMT
Cache-Control: no-cache
Pragma: no-cache
P3P: CP='CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
Location: https://ckmap.mediav.com/m?tid=7&mzid=1512582245577brx
Expires: Wed, 06 Dec 2017 17:44:04 GMT
Server: Tengine/Aserver
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /?dspid=100068&gethuid=1 HTTP/1.1 
Host: cm.fastapi.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         42.62.119.68
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
P3P: CP=CAO PSA OUR
Date: Wed, 06 Dec 2017 17:44:05 GMT
Location: https://ckmap.mediav.com/m?tid=30&tck=05a81ab8d0b9b2d495ab1495528db316
Connection: close
Set-Cookie: cid=05a81ab8d0b9b2d495ab1495528db316; Path=/; Domain=fastapi.net; Expires=Fri, 15 Oct 2027 17:44:05 GMT
Content-Length: 109


--- Additional Info ---
Magic:  ASCII text
Size:   109
Md5:    1ee9f49df78c58b750cc8ff51a739032
Sha1:   8859c7b2ff54e00708289f421c258dca347a4475
Sha256: eef99a3595f9231c5f0921304b45736c528bc1e3e9bfb1da3e9048735337b526
                                        
                                            GET /m?tid=21&vamaker_id=s9WOQjZdvYZRIGLfY7RRY5&vamaker_cver=1 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95; v=RV^H@Wr'f(9zBv*7%iVf

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /m?tid=7&mzid=1512582245577brx HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95; v=RV^H@Wr'f(9zBv*7%iVf

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /pixel?allyes_dspid=122&_ssl=1&allyes_cm&tid=17 HTTP/1.1 
Host: cm.qtmojo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10

                                         
                                         122.225.219.90
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Wed, 06 Dec 2017 17:44:06 GMT
Server: Apache
Set-Cookie: uid=GwGIQ1BV60BTf8G6XrH; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.qtmojo.com
Location: https://ckmap.mediav.com/m?allyes_id=r%23qzXGxWJkUeExgA05hz6XrH&allyes_cver=2&tid=17
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /m?tid=627&tck=c8adbf7536b6913f66960cc964d5e42d HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: v=RH!4w[yY2!9zBv*GJq34; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.mediav.com huid=c8adbf7536b6913f66960cc964d5e42d; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.mediav.com
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /m?tid=30&tck=05a81ab8d0b9b2d495ab1495528db316 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95; v=RV^H@Wr'f(9zBv*7%iVf

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /m?tid=23&tck=b9491fb267a5aae6e152b910a1a86fff&ts=1512582245085&ver=1 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: v=RA7z(-C)349zBv*t-Mz>; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.mediav.com
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /m?tid=8&xtid=njdMe0uXq860&mzid=njdMe0uXq860 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: v=RV*RLQIu)99zBv*4eaI>; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.mediav.com
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /m?allyes_id=r%23qzXGxWJkUeExgA05hz6XrH&allyes_cver=2&tid=17 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95; v=RV^H@Wr'f(9zBv*7%iVf

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /m?tid=5&&baidu_user_id=2565e16e5da280c81d5583ed52610ee2adb38673cf14d0cbcd069546aeb5ef756e1cd7db35f88b05ffcb91d4a0979164&cookie_version=2&timestamp=1512582245&ext_data=1 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: v=RRb?X$vQ<p9zBv*U]rV+; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.mediav.com
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /ckmap.htm HTTP/1.1 
Host: 3m.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95

                                         
                                         117.21.187.23
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Wed, 06 Dec 2017 17:44:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 19 Jul 2012 03:19:29 GMT
Vary: Accept-Encoding
Expires: Thu, 21 Dec 2017 17:44:07 GMT
Cache-Control: max-age=1296000
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Encoding: gzip
X-QHCDN: HIT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   198
Md5:    a7067d06b2cb8e06995646c7a64a22d3
Sha1:   ced30a345cea84fb2c907808f58e723993fe1a13
Sha256: f8d46972eab7f36f5f1bfe8b133be0aa7626ce60b067aa642974e08fe8f46f98
                                        
                                            GET /m?tanx_err=1&tanx_ver=1&mediav_tid=15&from_mv=1 HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ckmap.mediav.com/b?type=10
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: v=RD(Lue#ULx9zBv*7J@yA; expires=Wednesday, 02-Nov-2099 00:00:00 GMT; path=/; domain=.mediav.com
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /m?thirdparty_id=1&thirdparty_cookie_id=4tiqa9u9msfpcvntog18g5t7qg HTTP/1.1 
Host: ckmap.mediav.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://3m.mediav.com/ckmap.htm
Cookie: ckmts=PUJ9Nb95,P6J9Nb95,-GJ9Nb95,RGJ9Nb95,R6J9Nb95,U6J9Nb95,qrJ9Nb95,JGJ9Nb95,L6C9Nb95,J6J9Nb95,bUJ9Nb95; v=RRb?X$vQ<p9zBv*U]rV+; huid=c8adbf7536b6913f66960cc964d5e42d

                                         
                                         112.65.69.50
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 06 Dec 2017 17:44:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: no-cache
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   56
Md5:    eebed1f68d26000e93aa24144f7d4d73
Sha1:   dc18ab1cb2d1097d8a57126caffb4f7d293cbe5c
Sha256: 68ea8e4d82da8a934a44fbc1554ebcb23bcb3cb489a8e7ec9cbcb322c998d269
                                        
                                            GET /s.gif?et=20&eid=272753&ep=&vid=RD(Lue%23ULx9zBv*7J%40yA&ctn=&url=http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F&si=70373&su=&flt=1512582239&lt=1512582239&pt=2509850982487585000&guid=40320251.102355912498920000.1512582235000.0801&v=3.0.1&t=1512582247566&_mtd=im HTTP/1.1 
Host: s.union.360.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: __guid=40320251.102355912498920000.1512582235000.0801; __huid=11yXLfYZ037jo8muT9sta2bKFsv14oHY6PY46UKcehQvo=

                                         
                                         180.163.251.76
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty/1.7.2.1
Date: Wed, 06 Dec 2017 17:44:07 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
Expires: Fri, 01 Jan 1980 00:00:00 GMT
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: yunsuo_session_verify=d6596ae8c6d1bff46b30e2da8c6b4755; a5658_pages=1; a5658_times=1; __tins__18925658=%7B%22sid%22%3A%201512582236805%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201512584036805%7D; __51cke__=; __51laig__=1; UM_distinctid=1602ced4a9089-0d071bee2f0e2d8-6c242d76-fe178-1602ced4a915f; CNZZDATA1261631948=236572134-1512577689-%7C1512577689; looyu_id=0b42d39bc86d874b60bf6aef00e8aef8d8_10039837%3A1; looyu_10039837=v%3A0b42d39bc86d874b60bf6aef00e8aef8d8%2Cref%3A%2Cr%3A%2Cmon%3Ahttp%3A//m2425.talk99.cn/monitor%2Cp0%3Ahttp%253A//zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/; Qs_lvt_70373=1512582239; Qs_pv_70373=2509850982487585000; Hm_lvt_fd3ed2b12cc36777a313fe409216a92e=1512582241; Hm_lpvt_fd3ed2b12cc36777a313fe409216a92e=1512582241

                                         
                                         211.149.177.95
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 06 Dec 2017 17:44:06 GMT
Server: Apache
Last-Modified: Wed, 20 Jul 2016 09:10:10 GMT
Etag: "2221e5-10be-5380d917a6080"
Accept-Ranges: bytes
Content-Length: 4286
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   4286
Md5:    e888e07a15ac901df1ee46781c5ba2cf
Sha1:   fbb74dcf8344ffe34930e1d2c6de5e9a9dd65f6f
Sha256: b21948e3bc9415186ae209035e3742c188bd9450aa24ea8f40c39ba721a3daf5
                                        
                                            GET /monitor/s?c=e&i=10039837&v=0b42d39bc86d874b60bf6aef00e8aef8d8&p=8456807251&x=1512582251345 HTTP/1.1 
Host: m2425.talk99.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: __t99_10039837="_u:0b42d39bc86d874b60bf6aef00e8aef8d8,_v:0b42d39bc86d874b60bf6aef00e8aef8d8,_site:14437,_ct:1,_ref:,_p0:http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F,_r:"

                                         
                                         58.83.208.25
HTTP/1.1 200 OK
Content-Type: text/plain;charset=utf-8
                                        
Server: Apache-Coyote/1.1
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 06 Dec 2017 17:44:11 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   48
Md5:    ac357a0c50f88604b183ce2f8081d67d
Sha1:   28adc9a4afa9f3718f0c1c630c175eb9537c9550
Sha256: 58ffda2c48ea983df25a3bbb94db54a7de263989ed77476cacb0c1abbf5c399a
                                        
                                            GET /default/images/monitor/dn_sc.gif?131127 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 13957
Connection: keep-alive
Date: Sat, 11 Nov 2017 06:41:25 GMT
Last-Modified: Thu, 07 Nov 2013 02:40:14 GMT
Etag: "527afd8e-3685"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache10.l2de1[0,200-0,H], cache63.l2de1[1,0], cache1.by1[0,200-0,H], cache2.by1[1,0]
Age: 2199771
X-Cache: HIT TCP_HIT dirn:9:82990716 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 06:44:29 GMT
X-Swift-CacheTime: 315359816
Timing-Allow-Origin: *
EagleId: d462b28415125822563816716e


--- Additional Info ---
Magic:  GIF image data, version 89a, 78 x 25
Size:   13957
Md5:    96123bd9568d9c020e3b1b566c68454e
Sha1:   0eab0d7fead93b0a87cdc31f71b25fdbff22fb86
Sha256: c4d245a2cae99cafed61350bc57383d61039eaacc85dd5f164ac93110f24bba6
                                        
                                            GET /default/images/monitor/acc_sc.gif?131127 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 15100
Connection: keep-alive
Date: Sat, 11 Nov 2017 06:41:24 GMT
Last-Modified: Thu, 07 Nov 2013 02:40:14 GMT
Etag: "527afd8e-3afc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache25.l2de1[0,200-0,H], cache51.l2de1[1,0], cache9.by1[0,200-0,H], cache9.by1[1,0]
Age: 2199772
X-Cache: HIT TCP_HIT dirn:2:76983812 mlen:-1
X-Swift-SaveTime: Mon, 27 Nov 2017 04:25:46 GMT
X-Swift-CacheTime: 313985738
Timing-Allow-Origin: *
EagleId: d462b28b15125822564316067e


--- Additional Info ---
Magic:  GIF image data, version 89a, 78 x 25
Size:   15100
Md5:    7041f9431e557015e064988a89dcd4cd
Sha1:   2c4bea2337f4d945e36ef2126c08e56ba5338354
Sha256: da4134ae8dcfbe8489566eca53654ac025ad400a2ff860cb7d38622b2bf7ae5a
                                        
                                            GET /default/images/monitor/m_bg_1.gif?131127 HTTP/1.1 
Host: yun-static.soperson.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/

                                         
                                         212.98.178.242
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Tengine
Content-Length: 66456
Connection: keep-alive
Date: Sat, 11 Nov 2017 06:40:24 GMT
Last-Modified: Thu, 07 Nov 2013 02:40:14 GMT
Etag: "527afd8e-10398"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Via: cache26.l2de1[0,200-0,H], cache62.l2de1[1,0], cache8.by1[0,200-0,H], cache10.by1[1,0]
Age: 2199832
X-Cache: HIT TCP_HIT dirn:2:294799624 mlen:-1
X-Swift-SaveTime: Sat, 11 Nov 2017 06:40:41 GMT
X-Swift-CacheTime: 315359983
Timing-Allow-Origin: *
EagleId: d462b28c15125822563796603e


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   66456
Md5:    9d5bd5ecc5d860b9dfb4980ba520f8b6
Sha1:   54c56bbef81302e131976206fb92b487c763b496
Sha256: 3944ad3275e20e4aa2d832e6ce988fd71e30ae7c2dbcd4218190df83d65241bf
                                        
                                            GET /monitor/s?c=e&i=10039837&v=0b42d39bc86d874b60bf6aef00e8aef8d8&p=8456807251&x=1512582261344 HTTP/1.1 
Host: m2425.talk99.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zhangjiakouzhiyejishuxueyuanxuebao.qwqk.org/
Cookie: __t99_10039837="_u:0b42d39bc86d874b60bf6aef00e8aef8d8,_v:0b42d39bc86d874b60bf6aef00e8aef8d8,_site:14437,_ct:1,_ref:,_p0:http%3A%2F%2Fzhangjiakouzhiyejishuxueyuanxuebao.qwqk.org%2F,_r:"

                                         
                                         58.83.208.25
HTTP/1.1 200 OK
Content-Type: text/plain;charset=utf-8
                                        
Server: Apache-Coyote/1.1
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 06 Dec 2017 17:44:21 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   48
Md5:    ac357a0c50f88604b183ce2f8081d67d
Sha1:   28adc9a4afa9f3718f0c1c630c175eb9537c9550
Sha256: 58ffda2c48ea983df25a3bbb94db54a7de263989ed77476cacb0c1abbf5c399a