Overview

URL www.ok-shanghai.com/wz/tools/tax.html
IP45.32.56.24
ASN
Location Netherlands
Report completed2017-11-14 19:16:30 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-11-14 2 js.users.51.la/311213.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 45.32.56.24


Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2017-11-23 15:57:12 +0100
1 - 0 - 0 tube8vidshsd.dnset.com/2013/zoo-sex-episode-5 (...) 103.31.186.29
2017-11-23 15:56:24 +0100
1 - 0 - 1 tube8vidsquv.ddns.name/2013/dog_sex_first_tim (...) 103.31.186.29
2017-11-23 15:55:19 +0100
0 - 0 - 1 ndl.mgccw.com 13.33.244.37
2017-11-23 15:53:21 +0100
0 - 0 - 5 www.loveaimee.com/?p=18 162.241.217.204
2017-11-23 15:51:21 +0100
0 - 0 - 1 samcro.mx/ 108.179.194.93
2017-11-23 15:49:56 +0100
0 - 0 - 0 www.kera.io 198.54.117.216
2017-11-23 15:49:31 +0100
0 - 0 - 10 client-mobile-free-recouvrement.com/recouv_au (...) 108.179.194.63
2017-11-23 15:49:27 +0100
0 - 0 - 1 www.migradocs.com/dbfile/dbfile/best 108.167.172.138
2017-11-23 15:46:22 +0100
4 - 0 - 0 https://jfsecuritychile.cl/secure/Outlook/off (...) 138.255.100.218
2017-11-23 15:44:12 +0100
0 - 0 - 1 popcash.net/world/go/157332/387194 34.238.228.131

No other reports on domain: ok-shanghai.com



JavaScript

Executed Scripts (14)


Executed Evals (0)


Executed Writes (10)

#1 JavaScript::Write (size: 9, repeated: 1) - SHA256: 6c9656210a0202719c1cc3f33bba512135c26bb8d970d2350552e75d257631ca

                                        < /script>
                                    

#2 JavaScript::Write (size: 167, repeated: 1) - SHA256: a428bb3d13abc2ac3a548d75b7b3ac44e79783846452328581536888be6576a9

                                        < a href = "http://www.51.la/?311213"
target = "_blank"
title = "51.La &#x7F51;&#x7AD9;&#x6D41;&#x91CF;&#x7EDF;&#x8BA1;&#x7CFB;&#x7EDF;" > & # x7F51; & # x7AD9; & # x7EDF; & # x8BA1; < /a>
                                    

#3 JavaScript::Write (size: 151, repeated: 1) - SHA256: b54c8bd71e7379000c1eb39a1807b74221b5f0c2eafc120c3baf5dc9feb8034f

                                        < a href = 'http://www.cnzz.com/stat/website.php?web_id=43878'
target = _blank title = '&#31449;&#38271;&#32479;&#35745;' > & #31449;&# 38271; & #32479;&# 35745; < /a>
                                    

#4 JavaScript::Write (size: 206, repeated: 1) - SHA256: 71d814e1ec8bf8f8d132a315795758f8eb4a1f2cd5e31755ff1c98c1bebf9908

                                        < noscript > < a href = "http://www.51.la/?311213"
target = "_blank" > < img alt = "&#x6211;&#x8981;&#x5566;&#x514D;&#x8D39;&#x7EDF;&#x8BA1;"
src = "http://img.users.51.la/311213.asp"
style = "border:none" / > < /a></noscript >
                                    

#5 JavaScript::Write (size: 213, repeated: 1) - SHA256: f0de7ebe3d2d188b89cd8084ce701aef4d392826aa3d2297f05fed19b4fbb60b

                                        < script src = "http://s6.cnzz.com/stat.php?id=43878&web_id=43878"
language = "JavaScript"
charset = "gb2312" > < /script> <script language="javascript" type="text/javascript
" src="
http: //js.users.51.la/311213.js"></script>
                                    

#6 JavaScript::Write (size: 105, repeated: 1) - SHA256: 8c6da72ea3264b20120e83fefe934828e95d7d6e68ad8207e5d1bc4fc236adc2

                                        < script src = ' http://hm.baidu.com/h.js?1df9d3cc9daa7cb4a8d89feabca30e56'
type = 'text/javascript' > < /script>
                                    

#7 JavaScript::Write (size: 106, repeated: 1) - SHA256: 81af15603a308af218cd29abb13a0835d763d3a6221a01db7917a7e1dc7c050a

                                        < script src = 'http://c.cnzz.com/core.php?web_id=43878&t=z'
charset = 'utf-8'
type = 'text/javascript' > < /script>
                                    

#8 JavaScript::Write (size: 31, repeated: 1) - SHA256: e7b15ceca5cb0996e9059273b143e36089da34e0c7a8eed2cf7bb8a8ec23d072

                                        < script type = "text/javascript" >
                                    

#9 JavaScript::Write (size: 157, repeated: 1) - SHA256: 9db2131ee306596ddecb65ac3065aed85f7f536e047f8386c0babfbb478c5f60

                                        document.write(unescape("%3Cscript src='" + _bdhmProtocol + "hm.baidu.com/h.js%3F1df9d3cc9daa7cb4a8d89feabca30e56' type='text/javascript'%3E%3C/script%3E"));
                                    

#10 JavaScript::Write (size: 90, repeated: 1) - SHA256: cb0b9f48e8d6bc63883ed9152e1f2e1adc49d4bc0f21aa5575cc7e259780f0a3

                                        var _bdhmProtocol = (("https:" == document.location.protocol) ? " https://" : " http://");
                                    


HTTP Transactions (27)


Request Response
                                        
                                            GET /wz/tools/tax.html HTTP/1.1 
Host: www.ok-shanghai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         45.32.56.24
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 14 Nov 2017 18:22:34 GMT
Last-Modified: Sat, 04 Nov 2017 03:17:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Etag: W/"59fd314c-da2"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1779
Md5:    7417ea8f208aaa03a2f4ad4a27eb6358
Sha1:   6d9bb81e266131403ce26187f5541c6826c2eebb
Sha256: 1cffc402a8cca5b618a127eefc96e71bf97be15d8f219b8c46889ed94068b11b
                                        
                                            GET /logo.gif HTTP/1.1 
Host: www.ok-shanghai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         45.32.56.24
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 14 Nov 2017 18:22:34 GMT
Content-Length: 15067
Last-Modified: Sat, 04 Nov 2017 03:17:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Etag: "59fd314e-3adb"
Expires: Thu, 14 Dec 2017 18:22:34 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   15067
Md5:    bf9f57f5081d2efd2c97369f9ae625f1
Sha1:   23525b4a07f1d748d151499a5c5b49f57208a25d
Sha256: aa7232d2572370f6d8145ff777d3e006b2b499b5eb15d293529add26c934b68e
                                        
                                            GET /urchin.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 10 Nov 2017 20:01:49 GMT
Expires: Fri, 24 Nov 2017 20:01:49 GMT
Last-Modified: Fri, 20 Oct 2017 23:46:20 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 6847
Cache-Control: public, max-age=1209600
Age: 339645


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6847
Md5:    b2a53ddd32fa730ace44acf796ced69d
Sha1:   248293a9e5a5a062c17517d115a4f59396db6833
Sha256: d816d84a12f8cebe9ffaaca1b804894f9e46882a6719605359db2aad44afab85
                                        
                                            GET /i/tbg.gif HTTP/1.1 
Host: www.ok-shanghai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         45.32.56.24
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 14 Nov 2017 18:22:34 GMT
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=60


--- Additional Info ---
Magic:  HTML document text
Size:   162
Md5:    70461da8b94c6ca5d2fda3260c5a8c3b
Sha1:   994bc667720c21257500e29038c1a5f61e25da1e
Sha256: f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee
                                        
                                            GET /i/tl.gif HTTP/1.1 
Host: www.ok-shanghai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         45.32.56.24
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 14 Nov 2017 18:22:34 GMT
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=60


--- Additional Info ---
Magic:  HTML document text
Size:   162
Md5:    70461da8b94c6ca5d2fda3260c5a8c3b
Sha1:   994bc667720c21257500e29038c1a5f61e25da1e
Sha256: f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee
                                        
                                            GET /js/counter.js HTTP/1.1 
Host: www.ok-shanghai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         45.32.56.24
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 14 Nov 2017 18:22:34 GMT
Content-Length: 906
Last-Modified: Sat, 04 Nov 2017 03:17:32 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Etag: "59fd314c-38a"
Expires: Wed, 15 Nov 2017 06:22:34 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   906
Md5:    435234aaab3991386d7ed2c3f191ebe6
Sha1:   8d0b693fee3d507119b9ee2ef07ed46f7b80ab3e
Sha256: 7a5ddf4829863879798f23fbeb5b37b36b525a93abc628dc24944af8fb4ba875
                                        
                                            GET /static/js/shell_v2.js?t=19 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Set-Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1; max-age=31536000; expires=Wed, 14-Nov-18 18:22:38 GMT; domain=.baidu.com; path=/; version=1
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Etag: "2164869054"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:43 GMT
Expires: Wed, 14 Nov 2018 18:22:38 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 571
Date: Tue, 14 Nov 2017 18:22:38 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   571
Md5:    00557ef156b68551fac985596b5095e9
Sha1:   56287832fbec3545fbfd175ffe9e39d965341f27
Sha256: 10cf659ebdde336a7bfa71ca25af87f67d153def839e001ac9714873b5b70f39
                                        
                                            GET /stat.php?id=43878&web_id=43878 HTTP/1.1 
Host: s6.cnzz.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         222.186.49.224
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 14 Nov 2017 18:22:38 GMT
Last-Modified: Tue, 14 Nov 2017 18:22:38 GMT
Cache-Control: max-age=5400,s-maxage=5400
Via: cache5.l2et15[55,200-0,M], cache17.l2et15[56,0], kunlun6.cn74[66,200-0,M], kunlun5.cn74[78,0]
X-Cache: MISS TCP_REFRESH_MISS dirn:3:467030077 mlen:-1
X-Swift-SaveTime: Tue, 14 Nov 2017 18:22:38 GMT
X-Swift-CacheTime: 5400
Timing-Allow-Origin: *
EagleId: deba319e15106837587104893e


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   10979
Md5:    b715c2168dcf74280dd30b870211caca
Sha1:   2f575a35a98991804cbc2d00b12fa54b2e3a1464
Sha256: a44756867480c02a161e4848c50e9a550f50f239d52aff55d4c2f99a438237d2
                                        
                                            GET /static/js/bds_s_v2.js?cdnversion=419635 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "864605822"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:43 GMT
Expires: Wed, 14 Nov 2018 18:22:38 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9985
Date: Tue, 14 Nov 2017 18:22:38 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9985
Md5:    583b67064213e46c65a22c46bd16c317
Sha1:   2f23129a15c04f342b0b79727e57f3dbfbb0ad4c
Sha256: 45fee4fafe9d644a3864fff9486582aaac24174e08cd3bedfb02fad0f83ca9af
                                        
                                            GET /static/css/bdsstyle.css?cdnversion=20131219 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Etag: "3339273650"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:43 GMT
Expires: Wed, 14 Nov 2018 18:22:39 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2007
Date: Tue, 14 Nov 2017 18:22:39 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2007
Md5:    877414137f5213eb5db3762b26e974b9
Sha1:   b64683e5a6eb62423409b88647a7a3459d4b7414
Sha256: f7fb5a045ccfb40cd233ce9779735d493c806bd8e9af57d70454c1a24df9494e
                                        
                                            GET /core.php?web_id=43878&t=z HTTP/1.1 
Host: c.cnzz.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         222.186.49.224
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Tengine
Content-Length: 760
Connection: keep-alive
Date: Tue, 14 Nov 2017 18:22:39 GMT
Last-Modified: Tue, 14 Nov 2017 18:22:39 GMT
Expires: Tue, 14 Nov 2017 18:37:39 GMT
Via: cache15.l2et15[74,200-0,M], cache7.l2et15[74,0], kunlun4.cn74[83,200-0,M], kunlun8.cn74[93,0]
X-Cache: MISS TCP_REFRESH_MISS dirn:0:402973819 mlen:-1
X-Swift-SaveTime: Tue, 14 Nov 2017 18:22:39 GMT
X-Swift-CacheTime: 900
Timing-Allow-Origin: *
EagleId: deba31a115106837593567199e


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   760
Md5:    54f9d1e722cb98d87823245610d61ee4
Sha1:   a1d5b2db68ad69d194486499854035d5885d32be
Sha256: 1a9545e938a9edd0e4a6e13e35c306c88a9b4a3a5f42e7a47001e33d7ddb4b38
                                        
                                            GET /stat.htm?id=43878&r=&lg=en-us&ntime=none&cnzz_eid=1707898804-1510683758-&showp=1176x885&t=%E4%B8%8A%E6%B5%B7%E5%B8%82%E4%BA%94%E9%99%A9%E4%B8%80%E9%87%91%E5%8F%8A%E4%B8%AA%E4%BA%BA%E6%89%80%E5%BE%97%E7%A8%8E%E8%AE%A1%E7%AE%97%E5%99%A8&umuuid=15fbbc4d1cb4-0e7bf6a0ec5592-6c242d76-fe178-15fbbc4d1cc3b&h=1&rnd=1471261654 HTTP/1.1 
Host: hzs2.cnzz.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         140.205.218.67
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Tengine
Date: Tue, 14 Nov 2017 18:22:39 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    8bd3e739a9ba80a435f0214811da0c2a
Sha1:   bfc17d1e04e56542eb8037f08ed142efd252ea82
Sha256: a2dd5774b01bbfc29140279e02fea087df42a4c257dce8858226737a2e521986
                                        
                                            GET /static/images/sc.png?cdnversion=20120720 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bdimg.share.baidu.com/static/css/bdsstyle.css?cdnversion=20131219
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "3339275254"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:43 GMT
Expires: Wed, 14 Nov 2018 18:22:39 GMT
Cache-Control: max-age=31536000
Content-Length: 579
Date: Tue, 14 Nov 2017 18:22:39 GMT
Server: apache


--- Additional Info ---
Magic:  PNG image, 96 x 92, 8-bit colormap, non-interlaced
Size:   579
Md5:    8fd98fddd3cfac30ba71cdd3a970ff04
Sha1:   e5a2ca56973a3d6608e7e3a48ebd9fa5ebda9991
Sha256: e7604f6e940013c082b193cca272bfc9add968dec4ef12f4f7b22f4d7496a314
                                        
                                            GET /getnum?url=http%3A%2F%2Fwww.ok-shanghai.com%2Fwz%2Ftools%2Ftax.html&callback=bdShare.fn._getShare&type=load&t=1510683759036 HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         61.135.162.115
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Date: Tue, 14 Nov 2017 18:22:39 GMT
Server: apache


--- Additional Info ---
Magic:  ASCII text
Size:   52
Md5:    9217e83cefeb6bd2ac20a1dfaca64245
Sha1:   b970b19191bd04d83ed076968f08bf33890e0d3b
Sha256: 621c957253d14246939b213dc747f985d7cfcdfeb214e7d4a913bd0a1a6e9ee3
                                        
                                            GET /static/images/is.png?cdnversion=20131219 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bdimg.share.baidu.com/static/css/bdsstyle.css?cdnversion=20131219
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "562614136"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:43 GMT
Expires: Wed, 14 Nov 2018 18:22:39 GMT
Cache-Control: max-age=31536000
Content-Length: 12294
Date: Tue, 14 Nov 2017 18:22:39 GMT
Server: apache


--- Additional Info ---
Magic:  PNG image, 20 x 2620, 8-bit colormap, non-interlaced
Size:   12294
Md5:    fee619fb8de49c08487681bd0119fa5c
Sha1:   9c7231237e5e5f4e8408623b401dece33f6563ce
Sha256: dc274420601f10bec22ea0dc7e9a1a1425ba67d4a40153d30c864752c09901d2
                                        
                                            GET /9.gif?abc=1&rnd=164670165 HTTP/1.1 
Host: cnzz.mmstat.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         106.11.249.143
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
Date: Tue, 14 Nov 2017 18:22:40 GMT
Content-Length: 43
Connection: close
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=cCKSEp6MADECAU0ogXt530Bk; expires=Fri, 12-Nov-27 18:22:40 GMT; path=/; domain=.mmstat.com sca=520be836; path=/; domain=.cnzz.mmstat.com atpsida=311a51e3ff8189c414897036_1510683760_1; path=/; domain=.cnzz.mmstat.com
Location: http://pcookie.cnzz.com/app.gif?&cna=cCKSEp6MADECAU0ogXt530Bk
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /311213.js HTTP/1.1 
Host: js.users.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         42.236.74.246
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Cache-Control: max-age=360
Content-Length: 6163
Last-Modified: Tue, 31 Oct 2017 03:27:03 GMT
Accept-Ranges: bytes
Etag: "451f51ef851d31:3ac6"
Server: Microsoft-IIS/6.0
Date: Tue, 14 Nov 2017 18:22:53 GMT
Connection: close


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   6163
Md5:    a3a0351137d672452d2b47ceb7b6a6be
Sha1:   c66ee39b731f9e9e506d655cf53c34adcf4b1f8a
Sha256: 04a5f22133259424d3fa5b7ddb97c67d347a6af13b5cbec068425b50ab5b32cc

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /app.gif?&cna=cCKSEp6MADECAU0ogXt530Bk HTTP/1.1 
Host: pcookie.cnzz.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         106.11.94.6
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 14 Nov 2017 18:22:41 GMT
Content-Length: 43
Connection: close
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=cCKSEp6MADECAU0ogXt530Bk; expires=Fri, 12-Nov-27 18:22:41 GMT; path=/; domain=.cnzz.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /go1?id=311213&rt=1510683761306&rl=1176*885&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E8%25AE%25A1%25E7%25AE%2597%25E5%25B7%25A5%25E8%2596%25AA%25E6%2589%2580%25E5%25BE%2597%25E6%2597%25B6%252C%25E4%25BB%25A5%25E5%2590%2584%25E5%259C%25B0%25E5%25B9%25B4%25E5%25BA%25A6%25E5%25B9%25B3%25E5%259D%2587%25E5%25B7%25A5%25E8%25B5%2584%25E4%25B8%25BA%25E5%259F%25BA%25E6%2595%25B0%25E5%25B9%25B6%25E6%2594%25B6%25E9%259B%2586%25E6%2595%25B4%25E7%2590%2586%25E4%25BA%2586%25E5%2590%2584%25E5%259C%25B0%25E4%25BD%258F%25E6%2588%25BF&ing=1&ekc=&sid=1510683761308&tt=%25E4%25B8%258A%25E6%25B5%25B7%25E5%25B8%2582%25E4%25BA%2594%25E9%2599%25A9%25E4%25B8%2580%25E9%2587%2591%25E5%258F%258A%25E4%25B8%25AA%25E4%25BA%25BA%25E6%2589%2580%25E5%25BE%2597%25E7%25A8%258E%25E8%25AE%25A1%25E7%25AE%2597%25E5%2599%25A8&kw=2014%25E4%25B8%258A%25E6%25B5%25B7%25E4%25B8%25AA%25E4%25BA%25BA%25E6%2589%2580%25E5%25BE%2597%25E7%25A8%258E%25E8%25AE%25A1%25E7%25AE%2597%25E5%2599%25A8%252C%25E7%2594%259F%25E6%25B4%25BB%25E5%25AE%259E%25E7%2594%25A8%25E5%25B7%25A5%25E5%2585%25B7%252C%25E8%25AE%25A1%25E7%25AE%2597%25E5%2599%25A8&cu=http%253A%252F%252Fwww.ok-shanghai.com%252Fwz%252Ftools%252Ftax.html&pu= HTTP/1.1 
Host: ia.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         14.17.102.100
HTTP/1.1 200
                                        
Content-Length: 0
Date: Tue, 14 Nov 2017 18:22:31 GMT


--- Additional Info ---
                                        
                                            GET /go.asp?svid=1&id=311213&tpages=1&ttimes=1&tzone=1&tcolor=24&sSize=1176,885&referrer=&vpage=http%3A//www.ok-shanghai.com/wz/tools/tax.html&vvtime=1510683761302 HTTP/1.1 
Host: web.users.51.la
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         42.236.74.235
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Tue, 14 Nov 2017 18:19:11 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 0
Expires: Tue, 14 Nov 2017 01:39:11 GMT
Cache-Control: private


--- Additional Info ---
                                        
                                            GET /h.js?1df9d3cc9daa7cb4a8d89feabca30e56 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 9037
Date: Tue, 14 Nov 2017 18:22:41 GMT
Etag: 027b86c4f1b1fd3d42fc9d222a7120e2
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F36F06F6958A682E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   9037
Md5:    c87905d367956b1b53a9f1070c96d184
Sha1:   6d9bc2a939ad31e42ae6832345d394f76d1258ad
Sha256: 182f61953a3a2b6e9652b36abe2d45f951a92b0f4098a8a8d968481ff0c710ea
                                        
                                            GET /__utm.gif?utmwv=1.4&utmn=622474082&utmcs=GB2312&utmsr=1176x885&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmcn=1&utmdt=%E4%B8%8A%E6%B5%B7%E5%B8%82%E4%BA%94%E9%99%A9%E4%B8%80%E9%87%91%E5%8F%8A%E4%B8%AA%E4%BA%BA%E6%89%80%E5%BE%97%E7%A8%8E%E8%AE%A1%E7%AE%97%E5%99%A8&utmhn=www.ok-shanghai.com&utmhid=2083790484&utmr=-&utmp=/wz/tools/tax.html&utmac=UA-427866-1&utmcc=__utma%3D238119070.622474082.1510683762.1510683762.1510683762.1%3B%2B__utmz%3D238119070.1510683762.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Thu, 09 Nov 2017 11:32:48 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 456594


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /static/js/logger.js?cdnversion=419635 HTTP/1.1 
Host: bdimg.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         61.135.162.21
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "856245932"
Accept-Ranges: bytes
Last-Modified: Mon, 28 Sep 2015 08:06:43 GMT
Expires: Wed, 14 Nov 2018 18:22:42 GMT
Cache-Control: max-age=31536000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2401
Date: Tue, 14 Nov 2017 18:22:42 GMT
Server: apache


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2401
Md5:    aaa3c7e40771d7d247ab0895b14f88ca
Sha1:   59c3ce75ea54b95848bd54f212cdab82e54f4fb0
Sha256: 0525a8253f7472a7fb267934befed79eabf1c758c234e5241df8f9e4dedb06dd
                                        
                                            GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1176x885&vl=754&et=0&fl=10.0&ja=1&ln=en-us&lo=0&rnd=1706244167&si=1df9d3cc9daa7cb4a8d89feabca30e56&v=1.2.27&lv=1&ct=!!&tt=%E4%B8%8A%E6%B5%B7%E5%B8%82%E4%BA%94%E9%99%A9%E4%B8%80%E9%87%91%E5%8F%8A%E4%B8%AA%E4%BA%BA%E6%89%80%E5%BE%97%E7%A8%8E%E8%AE%A1%E7%AE%97%E5%99%A8&sn=36477 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1; HMACCOUNT=F36F06F6958A682E

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Tue, 14 Nov 2017 18:22:42 GMT
Pragma: no-cache
Server: apache
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.ok-shanghai.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: bdshare_firstime=1510683759043; UM_distinctid=15fbbc4d1cb4-0e7bf6a0ec5592-6c242d76-fe178-15fbbc4d1cc3b; CNZZDATA43878=cnzz_eid%3D1707898804-1510683758-%26ntime%3D1510683758; AJSTAT_ok_pages=1; AJSTAT_ok_times=1; __tins__311213=%7B%22sid%22%3A1510683761308%2C%22vd%22%3A1%2C%22expires%22%3A1510685561308%7D; __51cke__=; __51laig__=1; Hm_lvt_1df9d3cc9daa7cb4a8d89feabca30e56=1510683762; Hm_lpvt_1df9d3cc9daa7cb4a8d89feabca30e56=1510683762; __utma=238119070.622474082.1510683762.1510683762.1510683762.1; __utmb=238119070; __utmc=238119070; __utmz=238119070.1510683762.1.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none)

                                         
                                         45.32.56.24
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Tue, 14 Nov 2017 18:22:42 GMT
Content-Length: 766
Last-Modified: Sat, 04 Nov 2017 03:17:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Etag: "59fd314e-2fe"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   766
Md5:    0ce9a18fe0d201adf8475af53d5d30ef
Sha1:   a4f9003e84a055d442eb3f2807deae91af0b6731
Sha256: 73cb799704769ce4066dc709e08bf012f4bbcba3bb57e2c0099b9d56a18f8f62
                                        
                                            GET /v.gif?pid=307&type=3071&sc=1176,705,1176,855&desturl=&apitype=1&linkid=j9zy3smdax0&velo_load=0&velo_cssload=0&velo_jsLoad=816&cite_uid=447356&cite_type=1&cite_mini=0 HTTP/1.1 
Host: nsclick.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html
Cookie: BAIDUID=37A80CC416774D9AB5FE1B73701A9D34:FG=1

                                         
                                         115.239.211.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Cache-Control: max-age=0
Content-Length: 0
Date: Tue, 14 Nov 2017 18:22:47 GMT
Etag: "4280832337"
Expires: Tue, 14 Nov 2017 18:22:47 GMT
Last-Modified: Fri, 23 Oct 2009 08:06:04 GMT
Pragma: no-cache
Server: BWS/1.0


--- Additional Info ---
                                        
                                            GET /app/default1.aspx?interfaceID=1 HTTP/1.1 
Host: 9mi.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ok-shanghai.com/wz/tools/tax.html

                                         
                                         0.0.0.0
                                        


--- Additional Info ---