Overview

URL 1mdg4.npxvb.cn/inter
IP107.164.192.149
ASNAS18779 EGIHosting
Location United States
Report completed2018-01-11 08:29:38 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-01-11 08:35:29 CET 1  107.164.192.149 Client IP ET TROJAN RAMNIT.A M1
2018-01-11 08:35:29 CET 1  107.164.192.149 Client IP ET TROJAN PE EXE or DLL Windows file download Text
2018-01-11 08:35:58 CET 1  107.164.192.149 Client IP ET TROJAN RAMNIT.A M1
2018-01-11 08:35:47 CET 1  107.164.192.149 Client IP ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
2018-01-11 08:35:47 CET 1  107.164.192.149 Client IP ET TROJAN RAMNIT.A M2
2018-01-11 08:35:29 CET 1  107.164.192.149 Client IP ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
2018-01-11 08:35:47 CET 1  107.164.192.149 Client IP ET TROJAN PE EXE or DLL Windows file download Text
2018-01-11 08:35:29 CET 1  107.164.192.149 Client IP ET TROJAN RAMNIT.A M2


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-01-11 2 1mdg4.npxvb.cn/js/jquery.min.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 107.164.192.149

Date UQ / IDS / BL URL IP
2018-04-22 13:56:47 +0200
0 - 0 - 1 5km6q.npxvb.cn/SZ/74548.html 107.164.192.149
2018-04-21 14:47:17 +0200
0 - 0 - 1 c2fss.npxvb.cn/kaifa/ 107.164.192.149
2018-03-17 21:54:51 +0100
0 - 0 - 1 fh3ec.npxvb.cn/qil 107.164.192.149
2018-03-17 14:27:45 +0100
0 - 0 - 2 npxvb.cn/535/viewspace-931.html 107.164.192.149
2018-03-16 20:24:11 +0100
0 - 0 - 1 3jgis.npxvb.cn/dgm 107.164.192.149
2018-03-16 17:17:56 +0100
0 - 0 - 1 3pdxi.npxvb.cn/inter 107.164.192.149
2018-03-16 09:52:43 +0100
0 - 0 - 1 c0t9e.npxvb.cn/LH/ 107.164.192.149
2018-03-10 15:15:59 +0100
0 - 0 - 1 bua3u.npxvb.cn/ 107.164.192.149
2018-03-10 02:21:51 +0100
0 - 0 - 1 kxfpf.npxvb.cn/ys/39222.html 107.164.192.149
2018-02-24 00:04:58 +0100
0 - 0 - 1 69k7k.npxvb.cn/zjg/50315.html 107.164.192.149

Last 10 reports on ASN: AS18779 EGIHosting

Date UQ / IDS / BL URL IP
2018-07-15 15:06:15 +0200
0 - 1 - 0 0374life.com/360/1.exe 23.230.137.48
2018-07-15 14:16:09 +0200
0 - 1 - 0 miaojiyinpin.com/ 69.46.82.46
2018-07-15 13:07:43 +0200
0 - 1 - 0 rblnzd.loan/ 104.165.106.173
2018-07-15 12:43:03 +0200
0 - 0 - 14 6787w.cn/Item/2060.aspx 107.186.201.48
2018-07-15 12:24:17 +0200
0 - 0 - 1 y7beb.cn/show/20147298.html 103.232.215.159
2018-07-15 12:10:58 +0200
0 - 0 - 5 yntscp.com/nnz_383_2317.exe 23.230.218.140
2018-07-15 12:07:38 +0200
0 - 0 - 5 yntscp.com/tfw_383_2285.exe 23.230.218.140
2018-07-15 12:07:31 +0200
0 - 0 - 5 yntscp.com/jsb_383_2133.exe 23.230.218.140
2018-07-15 12:05:34 +0200
0 - 1 - 0 0374life.com/360/1.exe 23.230.137.48
2018-07-15 11:59:34 +0200
0 - 1 - 5 yntscp.com/kxb_383_2287.exe 23.230.218.140

No other reports on domain: npxvb.cn



JavaScript

Executed Scripts (11)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (56)


Request Response
                                        
                                            GET /xuanchuan/logo.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:08:56 GMT
Accept-Ranges: bytes
Etag: "d8a9266cd226d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:07 GMT
Content-Length: 1265


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1265
Md5:    3d026444746be775d71bc25ec80bf7bd
Sha1:   7c4a2d03f549c6cc09c5d840f691cd394c6dece5
Sha256: ea4d15ac03329151462b7f5c39b3e840db4eb81941b22f69d90ed224e5a3500b
                                        
                                            GET /css/nr.css HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Last-Modified: Tue, 24 Nov 2015 05:17:15 GMT
Accept-Ranges: bytes
Etag: "803f8c617726d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:07 GMT
Content-Length: 5664


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   5664
Md5:    ef9771f634c2b9802906da9cd5832654
Sha1:   c2b51ae8ee65aaef23f11442e7a11cdb4a94422e
Sha256: bf41178c72e7c8f351c9c716992927c52ee861b232b95e9426d38c260b230c3d
                                        
                                            GET /js/jquery.min.js HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Encoding: gzip
Last-Modified: Wed, 18 Nov 2015 13:21:48 GMT
Accept-Ranges: bytes
Etag: "07eed13422d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:07 GMT
Content-Length: 33252


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   33252
Md5:    a9bbebf76cefd061b0b01161d966d758
Sha1:   acd3443cfbfc6fba5613cb5e91d10114bb6550f6
Sha256: ff1e5abdea275858fa4f51f0ca2a0f11e6ffb0b2fd0d310db623907a2658ff08

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /inter HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.3.28, ASP.NET
Date: Thu, 11 Jan 2018 07:36:07 GMT
Content-Length: 142842


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   142842
Md5:    dfd641fadb88cbb647b725775d1bc0f3
Sha1:   9e942b79e8c07051973c3a67eec3047ac17a457c
Sha256: 32426985cace6ef5a1a5adabc30247993a91f806d270078559c54bbb0b2401df

Alerts:
  IDS:
    - ET TROJAN RAMNIT.A M1
    - ET TROJAN PE EXE or DLL Windows file download Text
    - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
    - ET TROJAN RAMNIT.A M2
                                        
                                            GET /images/0605.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Sun, 13 Oct 2013 07:51:50 GMT
Accept-Ranges: bytes
Etag: "64636d13e9c7ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 1313


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1313
Md5:    685155f48faae14f68894caae1a71f27
Sha1:   500e421e3d0b457edd4c7ac49c14de27eac0b71e
Sha256: 9f3c25df0186dd73dd23fda56b2124504811131a0205c2c941bffec3f0289c7b
                                        
                                            GET /images/157.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:06 GMT
Accept-Ranges: bytes
Etag: "b4ce7024d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 3075


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3075
Md5:    3051078b3b61029a2ed5a793f695a8f7
Sha1:   9772c974d1b87bd69366dd09412d8c65eee4885c
Sha256: 7ddd2b66cf7df097051065a05247b9b4e7b148f085e9a787600b473e7089adea
                                        
                                            GET /images/179.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:06 GMT
Accept-Ranges: bytes
Etag: "fa169024d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 6599


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6599
Md5:    97b4a66fbe9de5f18aa16cd2b8d53030
Sha1:   0bb5b14421a0cf7914ef429b3657c3b5c12a22f4
Sha256: 8bd17cfe7a4faad922fd81a58ee9fc782589724b54f9d37cdf9c06c91e46d4c6
                                        
                                            GET /images/0718.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 29 Oct 2013 05:57:08 GMT
Accept-Ranges: bytes
Etag: "8bb89bb36bd4ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 1296


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1296
Md5:    9d3cc7700400a8abcbd8d781adf79166
Sha1:   d86181f394063e682577d78ab821212144b1da15
Sha256: 1728bfdfb9776e31e0791a0406f721b7020bb776ea96ec2b50c14516bdd9e509
                                        
                                            GET /images/0555.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Sun, 13 Oct 2013 07:51:50 GMT
Accept-Ranges: bytes
Etag: "b8e17213e9c7ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 1242


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1242
Md5:    f957cc4a32db89a42f6678178a220d1b
Sha1:   26140823277bf20e75bf07c630a2036ac693fc2e
Sha256: f450e53bd6928ee626c6e9f7ca694dc3923301871ae372e1d9f3325c30af7c73
                                        
                                            GET /images/0323.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Thu, 10 Oct 2013 08:35:19 GMT
Accept-Ranges: bytes
Etag: "ba3f36a793c5ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 1507


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1507
Md5:    1601774ef20731449764527733bbf527
Sha1:   378d684197deaa4fcec0654491fc87bb6a03ce7c
Sha256: 4eb9d5505e1ad5f9d449e8003b7ed7343d28093e9120987ad2c94ba26cce3a4a
                                        
                                            GET /images/0634.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Fri, 11 Oct 2013 09:48:20 GMT
Accept-Ranges: bytes
Etag: "f214f567c6ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 1330


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1330
Md5:    613e1b24d21e3516c4263531ac45ce69
Sha1:   7b4580d9c75529cce5808a95de66fdf83b17c2e0
Sha256: a36df3b6d9f552e06b9b03ad8b23f117bcbdd08e148a8d51e8ed99d5c33a150e
                                        
                                            GET /images/0811.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Fri, 11 Oct 2013 09:48:20 GMT
Accept-Ranges: bytes
Etag: "3152a567c6ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 1293


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1293
Md5:    9c0080c528667bb3356e0c515b4f4f6e
Sha1:   1b4febb880c1e53ab1a7381325ae2733b7417f03
Sha256: 19cce3f46e03151fb7712118b3ea0b179dfec8378629e062c2b4ad0239245fea
                                        
                                            GET /images/215.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:07 GMT
Accept-Ranges: bytes
Etag: "97e61725d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 5440


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5440
Md5:    c8420c434d2b350f7b4436a55fcea450
Sha1:   26012ef3706ec1bc2ec0cbfc572b2be085ba4798
Sha256: d0ae9df7e6db9e23e0e3f383e9ad32979ada4e90d314efcfe084c486318e35e9
                                        
                                            GET /images/186.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:06 GMT
Accept-Ranges: bytes
Etag: "719e9a24d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 3273


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3273
Md5:    8255e7e542a9d8d5fa1a9527a23c8046
Sha1:   5692733a4cf21194119eafd822af206494783424
Sha256: 450193b7634a5cb21c20e39733142090014315fdb2f0231e362ee408a98e527d
                                        
                                            GET /images/303.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:09 GMT
Accept-Ranges: bytes
Etag: "9759ad26d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 5121


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5121
Md5:    faec134d050e12a1fba12fa309ec4a0a
Sha1:   7282ee8010b336446545f136be056f382eae8121
Sha256: b9f220ba92ea6ad744c53c724bd99dd542df8f629d49711d8c103f82cfaad1ed
                                        
                                            GET /images/272.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:09 GMT
Accept-Ranges: bytes
Etag: "648b26d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 6285


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6285
Md5:    3e259f3205b43de19cba0618ca405fb1
Sha1:   a75a4945d1cd0b1d30f9f57b7cf552780b890d4f
Sha256: 631bcef8677bd889105bb8e8a05a687b3f091dfba1ae6c05d3bb0c2495f7acf2
                                        
                                            GET /image/default/linebg.png HTTP/1.1 
Host: blog.itpub.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/css/nr.css

                                         
                                         65.153.158.146
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Jan 2018 07:35:38 GMT
Content-Length: 1273
Connection: keep-alive
Server: nginx
Last-Modified: Fri, 29 Dec 2017 06:44:48 GMT
Etag: "5a45e460-4f9"
Accept-Ranges: bytes
X-Ser: BC24_dx-lt-hebei-shijiazhuang-4-cache-2, BC167_US-Georgia-atlanta-1-cache-1, BC148_US-Washington-seattle-1-cache-3
X-Cache: HIT from BC148_US-Washington-seattle-1-cache-3(baishan)


--- Additional Info ---
Magic:  PNG image, 10 x 77, 8-bit colormap, non-interlaced
Size:   1273
Md5:    db06a97562595576bbfc1e61bb04194f
Sha1:   e0e3ce820fdf1202eddfba22bdcbc5f717f15835
Sha256: 79f7e1db2b091d20c49fa0c887aa043b77dbc4d4d1a80b9bb5544e5e2a599c99
                                        
                                            GET /images/0613.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Sun, 13 Oct 2013 07:51:50 GMT
Accept-Ranges: bytes
Etag: "4d417413e9c7ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 1270


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1270
Md5:    4a4e774c0149868ff2aef46e72673602
Sha1:   0368d5fcaa24c572a2a13637171259a29dd567ee
Sha256: cd2cc06fc7f68776e3f32124a4ea3fdb3f45456688cf03cd1080a5b8e49c6e4c
                                        
                                            GET /images/28.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:13:58 GMT
Accept-Ranges: bytes
Etag: "68ada81fd326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:08 GMT
Content-Length: 5341


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5341
Md5:    96e031a8075f9f77971c84e7e3a4ed40
Sha1:   097f5563a61cfd28dca0e3b04676e21aab597ca4
Sha256: 027ec580cbdcb2304feccaac6fadac8455c59b0c23f2b3fafc5f1fa38e58c36f
                                        
                                            GET /images/29.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:13:58 GMT
Accept-Ranges: bytes
Etag: "8c71b21fd326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 8135


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8135
Md5:    2159649790b4d03231eeecf2943ef3ea
Sha1:   0f36183ad71c3ec2e8ca5d407f14a0b1d38cd85e
Sha256: 61d53b3ebc512a5d0f4a613f4a6130558d1f6e4a87ad9645a91b2c58f39f0c46
                                        
                                            GET /image/default/bg.png HTTP/1.1 
Host: blog.itpub.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/css/nr.css

                                         
                                         65.153.158.146
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 11 Jan 2018 07:35:38 GMT
Content-Length: 48482
Connection: keep-alive
Server: nginx
Last-Modified: Fri, 29 Dec 2017 06:44:48 GMT
Etag: "5a45e460-bd62"
Accept-Ranges: bytes
X-Ser: BC153_dx-lt-yd-jiangsu-zhenjiang-3-cache-1, BC166_US-Georgia-atlanta-1-cache-1, BC145_US-Washington-seattle-1-cache-3
X-Cache: HIT from BC145_US-Washington-seattle-1-cache-3(baishan)


--- Additional Info ---
Magic:  PNG image, 758 x 500, 8-bit/color RGBA, non-interlaced
Size:   48482
Md5:    3223c3770c8b00ced46430450d2d8167
Sha1:   e318c5f8a06cee2a810473057b3a55092af1e2a4
Sha256: 23b199ca6a8a44e129a4749843c603af83f67c24e043f5120eb99be0da7e3fb0
                                        
                                            GET /images/127.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:04 GMT
Accept-Ranges: bytes
Etag: "da36b223d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 6428


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6428
Md5:    51f626282197e439c1afa526bd9d09f8
Sha1:   b626caa2d78f92c3d7c5d7d5e2130f963602fa1d
Sha256: aa93cc21e0cf9cf84599309ade7da97f02627ff2122d34a010f5bfe6b54f4ecd
                                        
                                            GET /static/api/js/share.js?v=89860593.js?cdnversion=421014 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Set-Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1; max-age=31536000; expires=Fri, 11-Jan-19 07:35:38 GMT; domain=.baidu.com; path=/; version=1
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Etag: "2970148496"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Fri, 11 Jan 2019 07:35:38 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6211
Date: Thu, 11 Jan 2018 07:35:38 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6211
Md5:    31400b379dba1c1c3270de1f27d83f5b
Sha1:   955dfc81cbd5dba5f64eaae51fa8d4d1c74d7688
Sha256: a90f7d2558ca896773ddca382048ccfd2ae768842210cb8d7d48061db22dbd60
                                        
                                            GET /images/263.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:08 GMT
Accept-Ranges: bytes
Etag: "ac9aee25d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 9085


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9085
Md5:    1b6d8add672fddaa0542f7876c6858d8
Sha1:   f00ca27c3d526e6aaecd977b01e8a2283f47a380
Sha256: e849935ef574a549332cc532781303660e13fe2a56e044670ae7066a425b967e
                                        
                                            GET /images/1376.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 29 Oct 2013 05:57:08 GMT
Accept-Ranges: bytes
Etag: "27ce9ab36bd4ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 1341


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1341
Md5:    352af77536d8429443bdf0ed94c5dde3
Sha1:   5ed0a257bf811ea7d4ee715e42bb6560b600739f
Sha256: 7f9772046a21a139a1ae87678b267dd92fa9173ed3d17ba48e297ebda0003c25
                                        
                                            GET /images/329.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Fri, 18 Apr 2014 20:16:15 GMT
Accept-Ranges: bytes
Etag: "f2c034d435bcf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 4740


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4740
Md5:    cbff2e865716af5054b1c21dcb3fc020
Sha1:   54e826bbf5f0847a8f87aef196cc6ec93286e18c
Sha256: 967fead9ff8b9e66f40949627798b56f4baacad240d1d0dd4a542d5ceb008c49
                                        
                                            GET /images/210.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:06 GMT
Accept-Ranges: bytes
Etag: "cc3ec824d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 3764


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3764
Md5:    b6ceb317b68af9f394baf371ec62305e
Sha1:   d8980085c429efca406dfd6b4350f1dc67acca27
Sha256: 7ddfd71fd91ff7b0a0d3924edc4b0391d3e963cf8e253d4ecc6ac9cfc05a86ef
                                        
                                            GET /images/0942.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Sun, 13 Oct 2013 07:51:50 GMT
Accept-Ranges: bytes
Etag: "d0be7013e9c7ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 1411


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1411
Md5:    8e04d329f0277715dee5ecdae47efa70
Sha1:   d8b59f0aba3c71cedd34c4b9a234c4a24600be9d
Sha256: df3eaa962c2335b060070431dfa78e4ddf7657756ba4f69342b024310696ce31
                                        
                                            GET /images/0379.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 29 Oct 2013 11:52:54 GMT
Accept-Ranges: bytes
Etag: "ca5b29679dd4ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 1250


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1250
Md5:    850351ab2f1cc80c68109daeab80e64f
Sha1:   91d47b3610e7bc1a7d9b136d2adc55e26f0f13dc
Sha256: e39074f7fff90f394a5a356870327401585275738c91cd0d6c89e0451d0e6bab
                                        
                                            GET /images/330.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:11 GMT
Accept-Ranges: bytes
Etag: "6db17727d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 9918


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9918
Md5:    7d88b8b6768358fee18ebb64d66bd4d7
Sha1:   b87f113bb6e93fabcdafe3cedcdc4b9843d42158
Sha256: fb5491801e3796bde40ad52bdc148fd8ac5a8aec4d1c481f722e64fa0eaa2e51
                                        
                                            GET /static/api/js/share/share_api.js?v=226108fe.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2156485466"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Fri, 11 Jan 2019 07:35:38 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 374
Date: Thu, 11 Jan 2018 07:35:38 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   374
Md5:    d83d9b2e8f9991d48228eacaa36ed9d8
Sha1:   43f570d57795ff92f4f9765ca13fe8e7c04004dc
Sha256: 0823a3af4f618739366bd95c18c78716313d835adb2b20bcfa1bf44265fb7cfb
                                        
                                            GET /images/254.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:08 GMT
Accept-Ranges: bytes
Etag: "7fc3a225d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 4877


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4877
Md5:    fab8db31441b6770d7088bd4fb4665e6
Sha1:   72619daafc7bc01da08dc367cdbe866967b251da
Sha256: 4c3d2282e614166b269f629981762b455cfa30daa02dc483d7a2ec8e9de575b8
                                        
                                            GET /static/api/js/view/share_view.js?v=3ae6026d.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2743682998"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:41 GMT
Expires: Fri, 11 Jan 2019 07:35:38 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 751
Date: Thu, 11 Jan 2018 07:35:38 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   751
Md5:    2f70d93b9f03bdfbd94c882baa358ba0
Sha1:   f2ff3411db7c99b8c38f88ef83d8d2c1e36cc97c
Sha256: 2d79560384a4a5d390dc9979d68b9db79d01076b2e89a110d16a42af3dbfaadc
                                        
                                            GET /images/247.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:08 GMT
Accept-Ranges: bytes
Etag: "f7149825d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 6512


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6512
Md5:    a6244ca03682c0eac4ed1c1fbab550f6
Sha1:   08c7de7b76675aec4bc283a992715a98bd11af68
Sha256: b78817a914ae3c8f2838dded072ee0aa525d4373f820c6b1915a52f33c8c8e40
                                        
                                            GET /images/323.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:11 GMT
Accept-Ranges: bytes
Etag: "cd256f27d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:09 GMT
Content-Length: 5630


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5630
Md5:    2d16eabd316ac355fea3e18b52863b1e
Sha1:   b8cd8acd80778e6424fcd85961ca50e9aa28543c
Sha256: 4b4b7d954f84b0e9cdaaed1f742a6e65a1ed5f979d4f6fba7040a862ed75bb85
                                        
                                            GET /images/212.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:06 GMT
Accept-Ranges: bytes
Etag: "8c5dcc24d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:10 GMT
Content-Length: 6161


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6161
Md5:    a8808c6fc6d57f552824da09f7f547f1
Sha1:   40f1a823e7fc500f55d41f38f2b9e24bf029e1a7
Sha256: 015cae0e0e781449b34b3a46804c73c14ad3d755a542d0585b6240d2e320be68
                                        
                                            GET /static/api/js/share/api_base.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "3616099152"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:17 GMT
Expires: Fri, 11 Jan 2019 07:35:39 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 580
Date: Thu, 11 Jan 2018 07:35:39 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   580
Md5:    a2f2cddb86ee350731a332b4c44f5e0d
Sha1:   e8ec70d2a62da5fff2ce1b684a4a9d112d640315
Sha256: 142e59628a500e248c6155c8fe279eeb70bc6aebf516c1bb6cd9486ea1b207b1
                                        
                                            GET /static/api/js/view/view_base.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2693351346"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:41 GMT
Expires: Fri, 11 Jan 2019 07:35:39 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 728
Date: Thu, 11 Jan 2018 07:35:39 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   728
Md5:    7ee144ca4be853ced65e63463259e6eb
Sha1:   a171d2b09ecb55590628a71a7f50fc05eb2d7e92
Sha256: 89119613d47f7bd1c2daf15d878fea5cfbca158fbd90930fcf106b4dc177d9f6
                                        
                                            GET /images/26.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:13:58 GMT
Accept-Ranges: bytes
Etag: "3eeea51fd326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:10 GMT
Content-Length: 3209


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3209
Md5:    14ec4a819810ee8f73cdb40023867888
Sha1:   c6b3232a6af1f4291f61f4295f15d20d69ab9d8b
Sha256: 197d7f5eb5317af45654d795f4b6b5189fa71cce4d3af4c288b2de347339176c
                                        
                                            GET /images/0968.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Fri, 11 Oct 2013 09:48:20 GMT
Accept-Ranges: bytes
Etag: "f214f567c6ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:10 GMT
Content-Length: 1338


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1338
Md5:    5d98d17f7960888ab6b98e4e5350d61c
Sha1:   f76a8bfe2c806f7d647db8dfa20afa90a3ad8bae
Sha256: 83d9031875cfb9f31803933553a3ecdf7cd1b4168aa115a97c458e6280f30ff4
                                        
                                            GET /images/0914.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Thu, 10 Oct 2013 08:35:19 GMT
Accept-Ranges: bytes
Etag: "59de33a793c5ce1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:10 GMT
Content-Length: 1424


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1424
Md5:    00ee7a562a593c82abc54cf8718209d6
Sha1:   f0def40d6f2da2d2a2345a820d66deb8ba73e01b
Sha256: c8608c85768e017a5ef6e9eff58c0abf8802337aa5e1187928ed94fd429c20b4
                                        
                                            GET /static/api/js/base/tangram.js?v=37768233.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "809096466"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Fri, 11 Jan 2019 07:35:38 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 35922
Date: Thu, 11 Jan 2018 07:35:38 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35922
Md5:    0500aea044b97839ccf4ca39593da8f9
Sha1:   7a89f247cf7f261032d03b5d2f8ae8cd64b74db0
Sha256: a25ea8575231daaa13e04fd0780a5ae682f807d5bad2e789db3a42da483d3fc4
                                        
                                            GET /images/77.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:04 GMT
Accept-Ranges: bytes
Etag: "2b73c23d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:10 GMT
Content-Length: 3625


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3625
Md5:    14c8508ce3fbd4d85f8c594e65fccf48
Sha1:   848e5fcc1b2a665e54ec955d43b857931214a60a
Sha256: 45428ef88744e9cbd71361f8de4bc7451475c7bf9e0020ee022941130d97c593
                                        
                                            GET /images/161.jpg HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 24 Nov 2015 16:14:06 GMT
Accept-Ranges: bytes
Etag: "b6897524d326d11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 11 Jan 2018 07:36:10 GMT
Content-Length: 3872


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3872
Md5:    98ff68e4e9fdf24801def52f210a6266
Sha1:   6f552e3e832da126a19216bbeadd669faabf5a7c
Sha256: 3b9534dc9ee2ee4d325dd8e0eeebbb4eb8d5a24a40af3e7650620025cf6dbc88
                                        
                                            GET /static/api/js/component/partners.js?v=911c4302.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2978564938"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:17 GMT
Expires: Fri, 11 Jan 2019 07:35:41 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 821
Date: Thu, 11 Jan 2018 07:35:41 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   821
Md5:    1ff0612f0ade672442df56d9d41ba774
Sha1:   48f5b84a02ddad184dd8b2085264ac2e0931081e
Sha256: b50d3b649b306497c8baa5f77c41430c0f8c764508b19e109932b156f6e39084
                                        
                                            GET /static/api/css/share_style0_24.css HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Etag: "4144580398"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:41 GMT
Expires: Fri, 11 Jan 2019 07:35:40 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 830
Date: Thu, 11 Jan 2018 07:35:40 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   830
Md5:    1218d1be5128c27c30f9d80b6a43e2ce
Sha1:   c83290ee6f89623e229522f43c29657991ba7980
Sha256: 5604e6d0bb48832f578e3a0ca190ddce0b8e31ddb93230d8cb0913ad054867d8
                                        
                                            GET /static/api/js/trans/logger.js?v=d16ec0e3.js HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2986953628"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:17 GMT
Expires: Fri, 11 Jan 2019 07:35:41 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1039
Date: Thu, 11 Jan 2018 07:35:41 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1039
Md5:    490ead5836a58910e18ab0e929e50fe3
Sha1:   cf04dc219fe85d9c752c8636cc546d9f8f21dea2
Sha256: 9ba8ca2bd9e21c0203818c09aa7c1d69f4d51c613c1f785c2e8e4b6dc903b5b4
                                        
                                            GET /static/api/img/share/icons_0_24.png?v=dcaa92d6.png HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bdimg.share.baidu.com/static/api/css/share_style0_24.css
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "4152935772"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:00:59 GMT
Expires: Fri, 11 Jan 2019 07:35:41 GMT
Cache-Control: max-age=31536000
Content-Length: 28548
Date: Thu, 11 Jan 2018 07:35:41 GMT
Server: apache


--- Additional Info ---
Magic:  PNG image, 24 x 3260, 8-bit colormap, non-interlaced
Size:   28548
Md5:    cc6389da0e1a06120431dfb3dcaa92d6
Sha1:   a89223f9714c8c4fa169430a327963ca6a1c9a6e
Sha256: 2a7caed82cd1f4a551ed9880aecbb0a7a4a79091808114e4a6d12c9d1ff547ed
                                        
                                            GET /v.gif?pid=307&type=3071&sign=&desturl=&linkid=jca6j7mm1a9&apitype=1 HTTP/1.1 
Host: nsclick.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         115.239.211.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Cache-Control: max-age=0
Content-Length: 0
Date: Thu, 11 Jan 2018 07:35:42 GMT
Etag: "4280832337"
Expires: Thu, 11 Jan 2018 07:35:42 GMT
Last-Modified: Fri, 23 Oct 2009 08:06:04 GMT
Pragma: no-cache
Server: BWS/1.0


--- Additional Info ---
                                        
                                            GET /v.gif?l=http%3A%2F%2F1mdg4.npxvb.cn%2Finter HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/inter
Cookie: BAIDUID=5F1427C27DA7183B38CFA8D330548754:FG=1

                                         
                                         61.135.162.115
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 0
Date: Thu, 11 Jan 2018 07:35:42 GMT
Server: apache


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.3.28, ASP.NET
Date: Thu, 11 Jan 2018 07:36:26 GMT
Content-Length: 142880


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   142880
Md5:    2f78a585bbc980b958155797af6d159f
Sha1:   e6af7b61b8c14988a37557ce7c378375309b6946
Sha256: 38e2e0f0b9e3989c0b544c85ce27eca8c61942b4576aaf1050dfc7be7aeaa15c

Alerts:
  IDS:
    - ET TROJAN RAMNIT.A M1
    - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
    - ET TROJAN RAMNIT.A M2
    - ET TROJAN PE EXE or DLL Windows file download Text
                                        
                                            GET /image/default/22.png HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/css/nr.css

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.3.28, ASP.NET
Date: Thu, 11 Jan 2018 07:36:16 GMT
Content-Length: 142966


--- Additional Info ---
                                        
                                            GET /image/default/z3.png HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/css/nr.css

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.3.28, ASP.NET
Date: Thu, 11 Jan 2018 07:36:14 GMT
Content-Length: 142961


--- Additional Info ---
                                        
                                            GET /image/default/z2.png HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/css/nr.css

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.3.28, ASP.NET
Date: Thu, 11 Jan 2018 07:36:14 GMT
Content-Length: 142983


--- Additional Info ---
                                        
                                            GET /image/default/bg_1.png HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://1mdg4.npxvb.cn/css/nr.css

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.3.28, ASP.NET
Date: Thu, 11 Jan 2018 07:36:15 GMT
Content-Length: 143028


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 1mdg4.npxvb.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         107.164.192.149
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.3.28, ASP.NET
Date: Thu, 11 Jan 2018 07:36:21 GMT
Content-Length: 142870


--- Additional Info ---

Alerts:
  IDS:
    - ET TROJAN RAMNIT.A M1
    - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
    - ET TROJAN RAMNIT.A M2
    - ET TROJAN PE EXE or DLL Windows file download Text