Gen.Variant.Graftor.51367_cb40394705

by malwarelabrobot on July 25th, 2015 in Malware Descriptions.

Gen:Variant.Graftor.51367 (B) (Emsisoft), Gen:Variant.Graftor.51367 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, GenericEmailWorm.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan, Worm, EmailWorm


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: cb4039470565afca078b395eca897312
SHA1: 66d082b1617b34a690a641a699a5db26a05048aa
SHA256: a3b555d8f5d0d190edf1df5d0f2f1b0ddd239d5fdd1341bd5a93b4f40adece83
SSDeep: 49152:m2yxYsMylQdylnveur62l042dkhYEqF8xa4WMvzAQU3t1NXX5:Yez0QdQF042AY8xlWrQktfXJ
Size: 4775936 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171
Company: StdLib
Created at: 2015-06-12 21:58:34
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan-PSW. Trojan program intended for stealing users passwords.

Payload

Behaviour Description
EmailWorm Worm can send e-mails.


Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:660

Mutexes

The following mutexes were created/opened:

c:!documents and settings!adm!local settings!history!history.ie5!mshist012015072420150725!
_!SHMSFTHISTORY!_
__DDrawCheckExclMode__
__DDrawExclMode__
DDrawDriverObjectListMutex
DDrawWindowListMutex
c:!documents and settings!adm!userdata!
CTF.TMD.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Layouts.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Asm.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Compart.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.LBES.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
ZonesLockedCacheCounterMutex
ZonesCounterMutex
ZonesCacheCounterMutex
WininetProxyRegistryMutex
WininetConnectionMutex
WininetStartupMutex
c:!documents and settings!adm!local settings!history!history.ie5!
c:!documents and settings!adm!cookies!
c:!documents and settings!adm!local settings!temporary internet files!content.ie5!
_!MSFTHISTORY!_
RasPbFile
ShimCacheMutex

File activity

The process %original file name%.exe:660 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\b_red_1[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220[1].jpg (4555 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB2YLuwbXXXXXcBXXXXXXXXXXXX_!!27753963-0-saturn_solar.jpg_100x100[1].jpg (1055 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100[2].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\zx110_0829[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\CAIFW52V.htm (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\bgs14[1].png (1210 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\logo_20150723[1].png (2730 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (1618 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2jXQtcFXXXXX1XpXXXXXXXXXX_!!31150008-0-saturn_solar.jpg_100x100[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\siteClicks[1].xml (250 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (1369 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2rIWhXqRaXXXXXXXX_!!57378349.jpg_220x220[1].jpg (5284 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T25WotXgtbXXXXXXXX-32492444.jpg_120x120[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (1306 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (2446 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\cert-beian_0829[1].png (134 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\__his__[1].xml (198 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\/t/acookie/[1].xml (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2T6BAXslbXXXXXXXX-32492444.jpg_120x120[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T21ZRnXEJaXXXXXXXX-32492444.jpg_120x120[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\baidu_web[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\wea_0829[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\tanxclick[2].js (3 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yxlmbbt[1].txt (201 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (3892 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\CAENI3QT.html (4670 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\lazyloading[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_220x220[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\go_top[1].png (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\b_red_1[1].gif (2 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\__indifference__[1].xml (510 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\CAQ3SL23.htm (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\mz_movie_3[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\20150715091754[1].jpg (110 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21[1].png (297 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322[1].png (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\s_blue_4[1].gif (2 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (168 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\CA4P63YP.htm (438 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\tanxclick[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21[1].png (298 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\blank[1].png (953 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\i_tmall[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\2345_1224[1].eot (9117 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\tipSet_ie6[1].png (748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2hf9kXzdaXXXXXXXX-32492444.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\CAO5E705.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664&count=45&p4p=jsonp0ichrhal2 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\w_day40[1].png (517 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\tanx_ssp_pvid[1].xml (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\cnxh_spr_150722[1].png (351 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\tanx_ssp_pvid_1[1].xml (318 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (732 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2SHVpXDFaXXXXXXXX-32492444.jpg_120x120[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120[1].jpg (974 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\ico_amazon[1].png (536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\main_spr_0829[1].png (975 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\skin0_20[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\CASXY70X.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&number=17&callback=jsonp1ichrhal2 (932 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\tip_stopXP_2[1].png (1 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (588 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\20150715111507[1].jpg (902 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB1UVf.HpXXXXaMXXXXAz6UFXXX-16-16[1].png (481 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\y2x5_150626[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\AppEn[1].htm (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\banner2_20150724[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322[1].png (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\fix_search[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21[1].png (298 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (1552 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\__siteClicksTip__[1].xml (142 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\search_140829[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\ico_taobao[1].png (958 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\b_red_1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2lO0zXE4aXXXXXXXX-32492444.jpg_120x120[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\banner1_150703[1].png (701 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\privacy[1].js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\tongji[1].htm (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\app[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\mz_suning_150529[1].png (1 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\lc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21[1].png (297 bytes)
C:\config.ini (27 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\mz_ctrip_141231[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\mystyle_wait[1].gif (381 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\main[1].js (3698 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220[1].jpg (4805 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\wc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB2fOuaaVXXXXbUXXXXXXXXXXXX_!!12268332-0-saturn_solar.jpg_100x100[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100[1].jpg (3 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (828 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\kz_tmall_20150721[1].gif (3489 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\acbeacon2[1].htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\cert-cyberpolice_0829[1].png (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\mz_ic_tmall2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\mz_pop[1].png (663 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\mz_toggle[1].png (986 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\stopXPTime[1].xml (162 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\data-userdata[1].xml (1040 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\foot_20141112[1].png (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\top_20150327[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\feature_v1[2].htm (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\s_blue_4[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\feature_v1[1].htm (97 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\tanxssp[1].js (1487 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\tanxssp_acookie_expires[1].xml (214 bytes)
C:\Proxy.dll (151 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\body0_2[1].png (183 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\acbeacon2[1].html (486 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\login_1217[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\myfav_0610[1].png (108 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (776 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2WuRlcVXXXXXQXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100[1].jpg (5 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\b_red_1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\CASXY70X.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&number=17&callback=jsonp1ichrhal2 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\AppEn[1].htm (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (0 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\s_blue_4[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\tanxclick[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\b_red_1[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\feature_v1[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\CAO5E705.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664&count=45&p4p=jsonp0ichrhal2 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\app[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220[1].jpg (0 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100[1].jpg (0 bytes)

Registry activity

The process %original file name%.exe:660 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015072420150725]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012015072420150725\"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015072420150725]
"CacheOptions" = "11"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Microsoft\Windows Script\Settings]
"JITDebug" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1434135514"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "41 70 E1 A0 8E 03 EE 20 7F 11 1A 5A C2 96 00 0F"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015072420150725]
"CachePrefix" = ":2015072420150725:"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015072420150725]
"CacheRepair" = "0"
"CacheLimit" = "8192"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014031720140318]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
a0c138f4dfe8ce9d9cbf18703c8564bf c:\Proxy.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: ????
Product Name: LOL?????????
Product Version: 4.4.0.0
Legal Copyright: ?????????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 4.4.0.0
File Description: ?????????????
Comments: ????????
Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 2868223 2871296 4.29646 a2fc2882a355d4e3ed16ef6c9869d0e6
.rdata 2875392 1154598 1155072 4.85275 a41b37cd2e146f34e829676ebbd39756
.data 4030464 876010 638976 4.70748 6a92caa3098671947dc63c5f3b6fd97a
.rsrc 4907008 105344 106496 3.02269 1067e5720998d9b04cd00aeae61785b8

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://ww.da113.badudns.cc/AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2
hxxp://www.2345.com/?k83357698 42.62.30.180
hxxp://www.2345.com/css/common_20150330.js?v=2.28.1 42.62.30.180
hxxp://www.2345.com/time.txt?t=23962506 42.62.30.180
hxxp://www.2345.com/css/index_20150722_02.css?v=5.28.1 42.62.30.180
hxxp://www.2345.com/fonts/2345_1224.eot? 42.62.30.180
hxxp://www.2345.com/images/common/top_20150327.png 42.62.30.180
hxxp://www.2345.com/images/logo/logo_20150723.png 42.62.30.180
hxxp://www.2345.com/i/blank.png 42.62.30.180
hxxp://www.2345.com/images/tipSet_ie6.png 42.62.30.180
hxxp://www.2345.com/images/body0_2.png 42.62.30.180
hxxp://www.2345.com/images/common/login_1217.png 42.62.30.180
hxxp://www.2345.com/images/lazyloading.gif 42.62.30.180
hxxp://www.2345.com/images/bgs14.png 42.62.30.180
hxxp://www.2345.com/i/search0320/baidu_web.gif 42.62.30.180
hxxp://www.2345.com/images/skin0_20.png 42.62.30.180
hxxp://www.2345.com/images/common/search_140829.png 42.62.30.180
hxxp://www.2345.com/right/homepage/zjsVersion.js?t=23962506 42.62.30.180
hxxp://www.2345.com/css/input_20150426.js?ver=1.0 42.62.30.180
hxxp://www.2345.com/css/func_20150716_01.js?ver=1.0 42.62.30.180
hxxp://p.gds.tanx.com/ex?i=mm_26632324_6858394_30122664
hxxp://www.2345.com/images/kz_tmall_20150721.gif 42.62.30.180
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxssp.js 195.27.31.240
hxxp://www.2345.com/i/banner2_20150724.jpg 42.62.30.180
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxssp/main.js 195.27.31.240
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxssp/privacy.js 195.27.31.240
hxxp://tianqi.2345.com/t/detect2009v2.php?ver=1.0 42.62.30.188
hxxp://www.2345.com/i/banner1_150703.png 42.62.30.180
hxxp://www.2345.com/right/homepage/newsChannel_20141226.js?t=1437702410&ver=6.24.18.0 42.62.30.180
hxxp://p.gds.tanx.com/ex?i=mm_26632324_6858394_30122664&cb=jsonp_callback_4578&callback=&userid=&o=&f=&n=&re=1276x846&r=1&cah=818&caw=1276&ccd=32&ctz=3&chl=0&cja=1&cpl=0&cmm=0&cf=10.0&cg=d6d9dfb475bd7883ccdccfd926a04030&pvid=a2d395b3589f66cd99d45c51f7d383d8&pvid_1=d636bc85da57fdb18c4abe5fca1fe7ce&ai=0&ac=8892&prk=65573767&cas=prk&cbh=3043&cbw=1000&dx=1&u=http://www.2345.com/?k83357698&k=&tt=2345网址导航－开创中国百年品牌（已创建9年零10个月）
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/acookie/acbeacon2.html 195.27.31.240
hxxp://www.2345.com/right/homepage/entertainChannel_20140903.js?t=1437634951&ver=1.0 42.62.30.180
hxxp://cdn.tanx.com.danuoyi.tbcache.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://www.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664 80.231.126.250
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxclick.js 195.27.31.240
hxxp://df.tanx.com/spf?e=Ju+OOHfpHhc6sENrlwpRJ+zKwVodlz/4OqpJAkCJ/iQBeGRsrGg0DBaCdzOvByNowLjZvAWQB3vvb929A8tich92IzB96PjRMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7KVA/cEBBe0f1xsYWtGN2vYcPMrCztjJSXoM5jf8K7sE=&u=&k=173&tanxssp_t=34800 110.75.8.1
hxxp://log.gds.mmstat.com/t.gif
hxxp://textlink.simba.gds.taobao.com/lk?url=&pid=mm_26632324_6858394_30122664&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://www.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&number=17&callback=jsonp1ichrhal2
hxxp://www.2345.com/i/cert-beian_0829.png 42.62.30.180
hxxp://ww.da113.badudns.cc/tongji.php?var=pcs
hxxp://www.2345.com/i/cert-cyberpolice_0829.png 42.62.30.180
hxxp://ww.da113.badudns.cc/tongji.php?var=times
hxxp://ww.da113.badudns.cc/tongji.php?return=online
hxxp://ww.da113.badudns.cc/tongji.php?return=times
hxxp://ww.da113.badudns.cc/tongji.php?look=all
hxxp://ww.da113.badudns.cc/tongji.php?return=times2
hxxp://ww.da113.badudns.cc/tongji.php?return=times3
hxxp://www.2345.com/i/zx110_0829.png 42.62.30.180
hxxp://www.2345.com/images/fix_search.png 42.62.30.180
hxxp://www.2345.com/images/ico_taobao.png 42.62.30.180
hxxp://www.2345.com/images/mz_movie_3.png 42.62.30.180
hxxp://www.2345.com/images/mz_pop.png 42.62.30.180
hxxp://www.2345.com/images/mz_ic_tmall2.png 42.62.30.180
hxxp://www.2345.com/images/mz_toggle.png 42.62.30.180
hxxp://www.2345.com/images/lvy/mz_ctrip_141231.png 42.62.30.180
hxxp://pcookie.gds.taobao.com/app.gif?&cna=kEI5DvWJoXkCAcGK9OcHCAy1
hxxp://www.2345.com/images/ico_amazon.png 42.62.30.180
hxxp://www.2345.com/images/lvy/mz_suning_150529.png 42.62.30.180
hxxp://www.2345.com/images/i_tmall.png 42.62.30.180
hxxp://www.2345.com/images/cnxh_spr_150722.png 42.62.30.180
hxxp://www.2345.com/images/icons/y2x5_150626.png 42.62.30.180
hxxp://www.2345.com/images/foot_20141112.png 42.62.30.180
hxxp://www.2345.com/images/go_top.png 42.62.30.180
hxxp://www.2345.com/day_data/20150724.js?ver=1.0 42.62.30.180
hxxp://ns.simba.gds.taobao.com/?name=itemdsp&o=j&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://www.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664&count=45&p4p=jsonp0ichrhal2
hxxp://a1742.b.akamai.net/tps/i3/TB1UVf.HpXXXXaMXXXXAz6UFXXX-16-16.png
hxxp://a1742.b.akamai.net/tps/i3/TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21.png
hxxp://cdn.tanx.com.danuoyi.tbcache.com/tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png 80.231.126.250
hxxp://a1742.b.akamai.net/tps/i1/TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21.png
hxxp://www.2345.com/css/baidu_20150722.js?ver=1.0 42.62.30.180
hxxp://www.2345.com/images/main_spr_0829.png 42.62.30.180
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/newrank/s_blue_4.gif 195.27.31.240
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/newrank/b_red_1.gif 195.27.31.240
hxxp://show.re.gds.taobao.com/feature_v1.htm?feature_names=promoPrice&cb=jsonp2ichrhit2&auction_ids=36764411103,,,,36764411103,
hxxp://www.2345.com/images/tip_stopXP_2.png 42.62.30.180
hxxp://www.2345.com/images/myfav_0610.png 42.62.30.180
hxxp://www.2345.com/right/site/like/gul_default_v3.js?2396250&ver=1.0 42.62.30.180
hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20150715091754.jpg 42.62.30.180
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/113140100518314081/TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/14748055712262275/TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/13963059380542297/TB2YLuwbXXXXXcBXXXXXXXXXXXX_!!27753963-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/18332057348715882/TB2fOuaaVXXXXbUXXXXXXXXXXXX_!!12268332-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/100080100438908890/TB2jXQtcFXXXXX1XpXXXXXXXXXX_!!31150008-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/113140100500284739/TB2WuRlcVXXXXXQXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/10219070376882870/TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://www.2345.com/images/mystyle_wait.gif 42.62.30.180
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/11023055852225699/TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/18763055963576934/TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/10219072603507803/TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/14748057473615918/TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/13600056495225268/TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i1/10000026610344219/T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i4/32492444/T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i1/10000017722554780/T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://www.2345.com/images/w_day40.png 42.62.30.180
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i4/10000018183036801/T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_220x220.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i2/57378349/T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i4/10000029325755046/T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i1/10000028885465812/T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i2/10000026291293357/T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i1/10000018366488789/T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i4/10000019906692861/T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i3/10000019649283530/T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i4/32492444/T2SHVpXDFaXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i4/57378349/T2rIWhXqRaXXXXXXXX_!!57378349.jpg_220x220.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i3/32492444/T2T6BAXslbXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i1/32492444/T21ZRnXEJaXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i1/32492444/T2hf9kXzdaXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i3/32492444/T25WotXgtbXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i1/32492444/T2lO0zXE4aXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220.jpg 212.98.178.240
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/imgextra/i4/10000018183036801/T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://www.2345.com/images/common/wea_0829.png 42.62.30.180
hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20150715111507.jpg 42.62.30.180
hxxp://yxlmbbt.com/tongji.php?var=times 210.209.75.113
hxxp://yxlmbbt.com/tongji.php?return=times3 210.209.75.113
hxxp://textlink.simba.taobao.com/lk?url=&pid=mm_26632324_6858394_30122664&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://www.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&number=17&callback=jsonp1ichrhal2 42.156.198.4
hxxp://asearch.alicdn.com/imgextra/i2/10000026291293357/T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i2/113140100518314081/TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://gtd.alicdn.com/newrank/s_blue_4.gif 195.27.31.240
hxxp://asearch.alicdn.com/imgextra/i1/32492444/T2hf9kXzdaXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://yxlmbbt.com/tongji.php?return=online 210.209.75.113
hxxp://atanx.alicdn.com/t/tanxssp/main.js 195.27.31.240
hxxp://yxlmbbt.com/AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2 210.209.75.113
hxxp://gtd.alicdn.com/newrank/b_red_1.gif 195.27.31.240
hxxp://asearch.alicdn.com/imgextra/i4/57378349/T2rIWhXqRaXXXXXXXX_!!57378349.jpg_220x220.jpg 212.98.178.240
hxxp://log.mmstat.com/t.gif 140.205.99.5
hxxp://asearch.alicdn.com/imgextra/i4/10000018183036801/T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_220x220.jpg 212.98.178.240
hxxp://atanx.alicdn.com/t/tanxssp.js 195.27.31.240
hxxp://asearch.alicdn.com/bao/uploaded/i2/10219070376882870/TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://www.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664 195.27.31.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/18763055963576934/TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i4/32492444/T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://gtms03.alicdn.com/tps/i3/TB1UVf.HpXXXXaMXXXXAz6UFXXX-16-16.png 194.146.191.107
hxxp://asearch.alicdn.com/imgextra/i1/10000018366488789/T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://gtms01.alicdn.com/tps/i1/TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21.png 194.146.191.104
hxxp://asearch.alicdn.com/imgextra/i1/32492444/T2lO0zXE4aXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://pcookie.tanx.com/app.gif?&cna=kEI5DvWJoXkCAcGK9OcHCAy1 140.205.155.34
hxxp://yxlmbbt.com/tongji.php?var=pcs 210.209.75.113
hxxp://asearch.alicdn.com/bao/uploaded/i1/13600056495225268/TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i3/10000019649283530/T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i4/10000029325755046/T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i1/14748057473615918/TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i1/32492444/T21ZRnXEJaXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i3/113140100500284739/TB2WuRlcVXXXXXQXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i2/57378349/T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120.jpg 212.98.178.240
hxxp://yxlmbbt.com/tongji.php?look=all 210.209.75.113
hxxp://show.re.taobao.com/feature_v1.htm?feature_names=promoPrice&cb=jsonp2ichrhit2&auction_ids=36764411103,,,,36764411103, 110.75.96.114
hxxp://img03.taobaocdn.com/tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png 195.27.31.250
hxxp://asearch.alicdn.com/imgextra/i4/32492444/T2SHVpXDFaXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://yxlmbbt.com/tongji.php?return=times 210.209.75.113
hxxp://cdn.tanx.com/t/tanxclick.js 80.231.126.250
hxxp://asearch.alicdn.com/imgextra/i4/10000019906692861/T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i4/13963059380542297/TB2YLuwbXXXXXcBXXXXXXXXXXXX_!!27753963-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i3/32492444/T25WotXgtbXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i1/T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i4/10000018183036801/T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i1/10000028885465812/T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://yxlmbbt.com/tongji.php?return=times2 210.209.75.113
hxxp://gtms03.alicdn.com/tps/i3/TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21.png 194.146.191.107
hxxp://tns.simba.taobao.com/?name=itemdsp&o=j&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://www.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664&count=45&p4p=jsonp0ichrhal2 110.75.8.25
hxxp://asearch.alicdn.com/bao/uploaded/i1/10219072603507803/TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i3/11023055852225699/TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120.jpg 212.98.178.240
hxxp://cdn.tanx.com/t/acookie/acbeacon2.html 80.231.126.250
hxxp://asearch.alicdn.com/imgextra/i1/10000017722554780/T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i3/14748055712262275/TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://ope.tanx.com/ex?i=mm_26632324_6858394_30122664&cb=jsonp_callback_4578&callback=&userid=&o=&f=&n=&re=1276x846&r=1&cah=818&caw=1276&ccd=32&ctz=3&chl=0&cja=1&cpl=0&cmm=0&cf=10.0&cg=d6d9dfb475bd7883ccdccfd926a04030&pvid=a2d395b3589f66cd99d45c51f7d383d8&pvid_1=d636bc85da57fdb18c4abe5fca1fe7ce&ai=0&ac=8892&prk=65573767&cas=prk&cbh=3043&cbw=1000&dx=1&u=http://www.2345.com/?k83357698&k=&tt=2345网址导航－开创中国百年品牌（已创建9年零10个月） 140.205.243.65
hxxp://p.tanx.com/ex?i=mm_26632324_6858394_30122664 140.205.243.65
hxxp://asearch.alicdn.com/bao/uploaded/i1/18332057348715882/TB2fOuaaVXXXXbUXXXXXXXXXXXX_!!12268332-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://atanx.alicdn.com/t/tanxssp/privacy.js 195.27.31.240
hxxp://asearch.alicdn.com/imgextra/i3/32492444/T2T6BAXslbXXXXXXXX-32492444.jpg_120x120.jpg 212.98.178.240
hxxp://asearch.alicdn.com/bao/uploaded/i4/100080100438908890/TB2jXQtcFXXXXX1XpXXXXXXXXXX_!!31150008-0-saturn_solar.jpg_100x100.jpg 212.98.178.240
hxxp://asearch.alicdn.com/imgextra/i1/10000026610344219/T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120.jpg 212.98.178.240


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY Unsupported/Fake Windows NT Version 5.0

Traffic

GET /?name=itemdsp&o=j&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664&count=45&p4p=jsonp0ichrhal2 HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: tns.simba.taobao.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 24 Jul 2015 15:07:05 GMT
Content-Type: text/html; charset=GBK
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Fri, 24 Jul 2015 15:07:05 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
1372..............iS...........0s..}!E...$....d...b.o..65.....6.Y.....
...c.....W.......$.....dK ..?oj......7.C.b~0...0.Cv0...q...<.c..:..
U../.....}....l%......""....y....?...w.{;..z.N).`\ C..U..jiw{g...a....
....6....b..^.r-..{p.PkXS .=7..>...`.]>.p...G^/h...I...........|
.v../.....;.@)....$58g...Z..f.,.Z..'.......1*q.w.]...{..~..........-..
...o....E........8L.O.%.......l....}?i......6.....:]i...;......n......
O/z.%..a.7..I..........s..c.....I..s8)...e....$.!..6\....[.j.2.8.L.*#.
.....`...{..R.%4.p.....[.......z...qA.2.0jF......<.I;..G...\XhcQ...
.|..e.~....../6..7. .|S...~fg....xx...[.>l._\....D..*2<Z.....au;
....R?...h...wt.5......C.... .X...b..B..o.'I.Bt....b...'...rEBa.......
v!..J.....o...l..l...0.V....v......|..V....0.;z|..Y...p.L....f~...../.
.....nz.._e...k...I..i..v.L>..~ .$A....F..9,.{Z......=..O..(ZV...x.
tKI?.....o.-.u.a.........M0..7..&^.........u..............p....)..p..y
0h8`.|..O..G....{I.-/...F.....I....w^k.`K.......v....k...a.5.^..>LN
X.....n...Q..^.~.;.....^.,...=8D).......-o.4....(L......#..W>.o...u
...;Q<l.p...4..0...........$=h....$........0iG.C..<p_k.~.k..fr..
.....w^...b.......p.>g k.G.....Q-...._~<.W...Y^u.Z g.0.N..'...3.
.k........N..bus..U.9J.o~@."...4C....o....;#......y..;[email protected]_I
c8....H.H.r.....#M."...rlC....D....A......,.g9G...x..33...bN.2Fr...6\.
.#/.=.q`....)5....t.c.../E^i.y.Y..|..)4...c.%./d...;a....M.w.......N..
.......OO....%.d..9....t........'......'Q.....Y'..u7<.s.O>...[.g
n....|...g..>.....>c%..z.W.g............8....L....)...RK....
<<< skipped >>>


GET /app.gif?&cna=kEI5DvWJoXkCAcGK9OcHCAy1 HTTP/1.1
Accept: */*
Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Connection: Keep-Alive
Host: pcookie.tanx.com


HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 24 Jul 2015 15:07:02 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=kEI5DvWJoXkCAcGK9OcHCAy1; expires=Mon, 21-Jul-25 15:07:02 GMT; path=/; domain=.tanx.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Te
ngine..Date: Fri, 24 Jul 2015 15:07:02 GMT..Content-Type: image/gif..C
ontent-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa A
DMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=kEI5DvWJoXkCA
cGK9OcHCAy1; expires=Mon, 21-Jul-25 15:07:02 GMT; path=/; domain=.tanx
.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache.
.Pragma: no-cache..GIF89a.............!.......,...........L..;..



GET /tongji.php?look=all HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: yxlmbbt.com
Connection: Keep-Alive
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Vary: Accept-Encoding
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:57 GMT
Content-Length: 181
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"V.........~.s..{.....h.En......
A..w.<....Y...v.?....1.U-.b.?............HTTP/1.1 200 OK..Content-T
ype: text/html..Content-Encoding: gzip..Vary: Accept-Encoding..Server:
 IIS..X-Powered-By: WAF/2.0..Date: Fri, 24 Jul 2015 15:06:57 GMT..Cont
ent-Length: 181...............`.I.%&/m.{.J.J..t...`[email protected]#).
*..eVe]f.@......{....{....;.N'...?\fd.l..J...!....?~|.?"V.........~.s.
.{.....h.En......A..w.<....Y...v.?....1.U-.b.?..............
..


GET /tongji.php?return=times3 HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:57 GMT
Content-Length: 5
14079HTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-
By: WAF/2.0..Date: Fri, 24 Jul 2015 15:06:57 GMT..Content-Length: 5..1
4079....


GET /tongji.php?return=online HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:07:15 GMT
Content-Length: 1
7HTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-By: 
WAF/2.0..Date: Fri, 24 Jul 2015 15:07:15 GMT..Content-Length: 1..7nt>....


GET /tongji.php?return=times2 HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:07:15 GMT
Content-Length: 1
1HTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-By: 
WAF/2.0..Date: Fri, 24 Jul 2015 15:07:15 GMT..Content-Length: 1..1nt>....


GET /tongji.php?var=times HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:07:35 GMT
Content-Length: 4
trueHTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-B
y: WAF/2.0..Date: Fri, 24 Jul 2015 15:07:35 GMT..Content-Length: 4..tr
ue....



GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache2.de1[1,0]
Age: 4957715
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>

GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache2.de1[1,0]
Age: 4957715
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>

GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache2.de1[0,0]
Age: 4957716
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>

GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache2.de1[0,0]
Age: 4957716
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>


GET /t/detect2009v2.php?ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: tianqi.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Set-Cookie: wc=54511; expires=Mon, 21-Jul-2025 15:06:53 GMT; path=/; domain=2345.com
Set-Cookie: lc=54511; expires=Mon, 21-Jul-2025 15:06:53 GMT; path=/; domain=2345.com
Set-Cookie: lc2=54511; expires=Mon, 21-Jul-2025 15:06:53 GMT; path=/; domain=2345.com
Cache-Control: max-age=0
Expires: Fri, 24 Jul 2015 15:06:53 GMT
P3P: CP=CAO PSA OUR
Vary: Accept-Encoding
Content-Type: text/html; charset=gbk
Content-Length: 1319
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:53 GMT
Age: 0
Connection: keep-alive
var wea_ = {city:"\u5317\u4eac",day1:["21\uff5e31\u2103","\u4e94","\u9
634","\u5fae\u98ce","26"],day2:["23\uff5e33\u2103","\u516d","\u591a\u4
e91","\u5fae\u98ce","28"],day3:["23\uff5e33\u2103","\u65e5","\u96f7\u9
635\u96e8","\u5fae\u98ce","37"],has15day:"yes",title:"\u63d0\u793a\uff
1a\u67e5\u770b\u6700\u65b0\u5929\u6c14\u9884\u62a5\uff0c\u8bf7\u6309Ct
rl F5\u5237\u65b0\uff01
07\u670824\u65e5,\u5468\u4e94,\u96f7\u9635
\u96e8\u8f6c\u9634,21\uff5e31\u2103,\u5fae\u98ce
07\u670825\u65e5,
\u5468\u516d,\u591a\u4e91,23\uff5e33\u2103,\u5fae\u98ce
07\u670826
\u65e5,\u5468\u65e5,\u96f7\u9635\u96e8,23\uff5e33\u2103,\u5fae\u98ce&#
10;07\u670827\u65e5,\u5468\u4e00,\u96f7\u9635\u96e8,23\uff5e31\u2103,\
u5fae\u98ce
07\u670828\u65e5,\u5468\u4e8c,\u96f7\u9635\u96e8,23\uf
f5e29\u2103,\u5fae\u98ce
07\u670829\u65e5,\u5468\u4e09,\u96f7\u963
5\u96e8,22\uff5e29\u2103,\u5fae\u98ce
07\u670830\u65e5,\u5468\u56d
b,\u96f7\u9HTTP/1.1 200 OK..Set-Cookie: wc=54511; expires=Mon, 21-Jul-
2025 15:06:53 GMT; path=/; domain=2345.com..Set-Cookie: lc=54511; expi
res=Mon, 21-Jul-2025 15:06:53 GMT; path=/; domain=2345.com..Set-Cookie
: lc2=54511; expires=Mon, 21-Jul-2025 15:06:53 GMT; path=/; domain=234
5.com..Cache-Control: max-age=0..Expires: Fri, 24 Jul 2015 15:06:53 GM
T..P3P: CP=CAO PSA OUR..Vary: Accept-Encoding..Content-Type: text/html
; charset=gbk..Content-Length: 1319..Accept-Ranges: bytes..Date: Fri, 
24 Jul 2015 15:06:53 GMT..Age: 0..Connection: keep-alive..var wea_ = {
city:"\u5317\u4eac",day1:["21\uff5e31\u2103","\u4e94","\u9634","\u
<<< skipped >>>


GET /feature_v1.htm?feature_names=promoPrice&cb=jsonp2ichrhit2&auction_ids=36764411103,,,,36764411103, HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: show.re.taobao.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 24 Jul 2015 15:07:07 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Fri, 24 Jul 2015 15:07:07 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Via: ad088030.cm3[web,200]
61...............*.. 0.L.(..,1..VJ,M....S...V*(....(.LNU.RR....g....f.
f&&.....J..:J...E@]....G..3V.....0..



GET /lk?url=&pid=mm_26632324_6858394_30122664&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&number=17&callback=jsonp1ichrhal2 HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: textlink.simba.taobao.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 24 Jul 2015 15:06:56 GMT
Content-Type: text/html; charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Fri, 24 Jul 2015 15:06:56 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
3a4..............kk.0.....$lPZ.]..a.m....-F.l....8.......^.]..!.p.....
..z.>.....|......6...q.;L.?L.!m.vSL..2.T...lN..n'OneZ.n}.<....UY
rWm..Z..........j.........z{.....5m./....g...=e.).w.m}0U~../.q_......&
gt;........uc..nJ.R........ ...._H.S*s.V.9A..N...nI.!.]m.r..o.)..QFy*Q
 .<e....=".j.?.i.2..p.....8[.K....Xf%........,...r.8....\.".$.dh.*.
......KUh 'Wo...g.).\U.8.X..2...zWH.....$].o=.E.b.o..=A...= ..[..c..&.
..^[email protected]..*{<j.Y..I.[9l.........,...~)...3..x
.......c..D.7-v......v.\D..M....3C]e(....2.n....Z\.....$.......:.[k&.%
'.......V..G...........3.k$..-P`.{.i..w)%...:^...a.|<.TG.q5..A....V
[email protected]...$B......k........l.....'.oCg.'...c`o...c..D...[..>..M$.8i
/j....>..y...2.m...hl5..>-T..f6...[...wx.nx.(...*.$.x3$.t....nz.
...V.s....n.._....0..f..40.F.."..2..{d.\.u...Oz....3.....u...p...sp.7r
8w^.y..EN.......4..x...9F.Uef]-,.gP.F... ...7.M..P.\~.7...h......H....
..F.s...S<'d.d.WE.s>_,..b..|....B.xg.R..........EPh.....0..



GET /tps/i1/TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21.png HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtms01.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 298
Last-Modified: Thu, 26 Mar 2015 05:48:56 GMT
Expires: Sat, 29 Mar 2025 12:31:36 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Timing-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 24 Jul 2015 15:07:06 GMT
Connection: keep-alive
access-control-expose-headers: FW_IP
FW_IP: 194.146.191.104
Timing-Allow-Origin: *
.PNG........IHDR.............W.Ph....pHYs...H...H.F.k>....vpAg.....
....U..f...@IDAT..]....0......RA...x....%e..."..".-.%.)..<...;..6.a
.fcj..O.6.=.y.-p7...%tEXtdate:create.2015-03-26T13:48:56 08:00xDz....%
tEXtdate:modify.2015-03-26T13:48:56 08:00...F....tEXtSoftware.Adobe Im
ageReadyq.e<....IEND.B`.HTTP/1.1 200 OK..Server: Tengine..Content-T
ype: image/png..Content-Length: 298..Last-Modified: Thu, 26 Mar 2015 0
5:48:56 GMT..Expires: Sat, 29 Mar 2025 12:31:36 GMT..Cache-Control: ma
x-age=315360000..Access-Control-Allow-Origin: *..Timing-Allow-Origin: 
*..Timing-Allow-Origin: *..Timing-Allow-Origin: *..Date: Fri, 24 Jul 2
015 15:07:06 GMT..Connection: keep-alive..access-control-expose-header
s: FW_IP..FW_IP: 194.146.191.104..Timing-Allow-Origin: *...PNG........
IHDR.............W.Ph....pHYs...H...H.F.k>....vpAg.........U..f...@
IDAT..]....0......RA...x....%e..."..".-.%.)..<...;..6.a.fcj..O.6.=.
y.-p7...%tEXtdate:create.2015-03-26T13:48:56 08:00xDz....%tEXtdate:mod
ify.2015-03-26T13:48:56 08:00...F....tEXtSoftware.Adobe ImageReadyq.e&
lt;....IEND.B`...



GET /t/acookie/acbeacon2.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cdn.tanx.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=GB2312
Content-Length: 2183
Connection: keep-alive
Date: Fri, 24 Jul 2015 12:30:52 GMT
Last-Modified: Thu, 09 Jul 2015 08:12:34 GMT
Expires: Fri, 24 Jul 2015 14:30:52 GMT
Cache-Control: max-age=7200
Vary: Accept-Encoding
Via: cache35.l2hk1[0,304-0,H], cache35.l2hk1[0,0], cache7.es1[0,200-0,H], cache8.es1[0,0]
Content-Encoding: gzip
Age: 9364
X-Cache: HIT TCP_MEM_HIT dirn:7:27972007
X-Swift-SaveTime: Fri, 24 Jul 2015 13:35:03 GMT
X-Swift-CacheTime: 7200
...........X[s...~......\a%./.aO..i..L;..I.d(................6.3..u...
.w.8.....x<1. ...w7.........D.uqz........k.j..3..F...)..b!.....5-.t
..b..,..-/.oo....C....,.V.FYP.d]q.s.7.I...M<...;.{'2.h.....C...}...
..(y=oY...y{.Ja.w..v7$..J-.... kV..J}|.....R.........C.2..ELM...!.2...
8......;.s&..].yc.i.N=6Y]..e...>ME.........L.s~\.....$.I...>.H..
..h.8.....R?b!...T]..ZB..9. ..t...t...F... .t.....0s...l\&\-U..R...WK.
.......y.7.g...Z2...MJ.G..bv.[z. .&.fu..U.....r.^.wR.V~....*..?..M....
7.....B4....D.....y.=..._...........;........o.=.N.L..O.......K..i.*&.
!O...9'...uvd.....sq......j...k&.=.3...`.3....R...%.......Z...I...ZX..
..h.&q....,[email protected]}g. ..^..c/......K.,...i. V.......J....,....D..
(.KwD.@5./%.kme..:.[MMs...A.....rg......M.\.........U...;.......*.|o.y
....i..........8|:".Vl.Nd...Ce.S.#.......]...bk)jC...hWBg..).L... ...(
....D...\[.7.e#*%PA?.XZ....!k....5]....n.&.@[email protected]>..3.,7.uG
....p.j.,.......D...`fn..ri......ny....9..7.2..{.....Lx..u.........3.f
.,nM.~V!.j.'..,.1G..j........T:$#......Lp.FfBd.....s:..=...l:....s....
..fsIi.........Sa...u_...Gv..J.....R.U...e..?.-Z..Y..9/.......O..T....
.......0...g....:.#..-.HA,{..G.^9.4QV.N...........GFu....A[W........v.
.C.d.u.....\\5w.Gl^k.....P....h...L\@WF.OW.J,..i.~...hCv..)...\..`....
..J....C..N...`...8....T...J.-........_..oTvq^......Q...;.r?R..{... ..
pj..x....K....9E...,D.^.CW..}..[.....5....T..........f...Qs..3s...`...
..._.N.....J.,. .....U...2.0t7.Ye.[....n4C....-.x./o....u.%5`.....s...
......6h...*'.q...9U...#.6...Ee..lT.Aq!@.*.t..,].y........Y.)D...w
<<< skipped >>>

GET /t/tanxclick.js HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: cdn.tanx.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/x-javascript
Content-Length: 1624
Connection: keep-alive
Date: Fri, 24 Jul 2015 11:32:02 GMT
Last-Modified: Thu, 09 Jul 2015 08:12:34 GMT
Expires: Fri, 24 Jul 2015 13:32:02 GMT
Cache-Control: max-age=7200
Vary: Accept-Encoding
Via: cache2.l2cm9-1[0,304-0,H], cache59.l2cm9-1[0,0], cache1.es1[0,200-0,H], cache8.es1[1,0]
Content-Encoding: gzip
Age: 12894
X-Cache: HIT TCP_MEM_HIT dirn:5:24204928
X-Swift-SaveTime: Fri, 24 Jul 2015 13:25:36 GMT
X-Swift-CacheTime: 7200
...........W[S.8.. ..2.Zq..tgb.C)P.n;.......[Rb.m....q...Yvb(t_..d....
.2..{......}o......:....e.u.2...l.]...ln.....>[email protected].,pu.....,
tW.....;a.H8...^wwRe.g.#7.....{r...i.?.......>sS.7~A/.GF...g.\.{...
),i..1U.z]WkP.....]RaeSa.3........\..T.<..Zb..r...q.@..."...o.o.<
;..m0q. &e9F."4!...O0'.}R.>)..>....r.....*~|(.?.(4{....Uh.q..
.....l...C....C%.P..._.x.[..".C...Y.....^1I...h\,..K..wf...l.qP.wq&.. 
oe.}.Cb*..o.c.H...l.$.1S...o....a..Z.f....D..1ML>.64.O..7.).b...T\.
...;}....T.M...BG.F..F%..C...N..?p...'2..O..Q3..d..u......T.Z}^,d~..PX
.*.c.0g.>?.|....H. ..r..A.I.aYvwJH..2.:&......0......ii..o........1
.^H5...i..cw.q=k.......1.n.....3(.X}.>..U..?j......zc... .<.....
..G..{...\~..g..n...U..:\...*K....t.4.T.......*..../M..P..[.\%.{9.....
..T.........Ia.......=..3.....Y...Y...S....a2...._.b..i..z7f~..S...1..
......!..;...)..fu...._.j  ..{...V..f.WX`3.Sa...Bw.4ioT..H...0.v.v.U.a
.G.E...)..(Bm...bJ..v.Dm.a~WL...B..[m"`.\.....9.DN....h....QX....8."..
p,'.....i....v....y..W)L...n,..*..U.\...X. ..Vp......FLH......3..T...3
..{....E9.]-..#.....\...K........d..@0......!.;h..........l..[,.B....9
m.D.U..l.e..x. ..N_...Jo...Qs.....X...3..T..\.......N.[..{...#{../...n
.N.:.V...f..PN.d...u....U..........b.....D..[D.L.}s.`xQ7.0.%B.. .....f
Km.?..2QV....q1i.......w...,5L.....uq.~&.Z.<:7.... ...BoYwH.X..Xi.g
Ab....Xt....z.;.R.......`...7......W..L.;....Fq..j..m........Q9.>..
.d.QK.r...d5H............ ..$.G.."zC.OG.Z.2U....s.p.#:...._...`.X.)..x
..S.m.~.T;.k...*[email protected]<.B.<Z..$.n.
<<< skipped >>>


GET /ex?i=mm_26632324_6858394_30122664 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: p.tanx.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 24 Jul 2015 15:06:52 GMT
Content-Type: application/x-javascript; charset=gbk
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Fri, 24 Jul 2015 15:06:51 GMT
Cache-Control: no-cache
Content-Encoding: gzip
Via: rsfl01488.et2[web,200]
1ab............]RM.. ...W.s.(.v>6J.eW..R U.. ..j..............'....
.c.......;.k.E...03...R...|.Z....~..Y/>,..d6..."......)@.Zi........
XO.F......."O. ..$.f>L.^.....G.....&h8m.......4F;.uy...>[email protected].
...Cb..nM.{.7.~Q../....!.,d*G.y|.........W..83..../.n.m......NO..UN...
.. ..*..RV.v..W...S6........u[*.7.9y.G`.Q.....Z.n...u.*..#....<g...
. .....5x..C......p.d.Q..&...6... .2.},T)p/K ..tF9.......tGA...f2....\
t7.}.Q.j......Nq.......Y.....0..



GET /tps/i3/TB1UVf.HpXXXXaMXXXXAz6UFXXX-16-16.png HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtms03.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 481
Last-Modified: Mon, 30 Mar 2015 01:54:17 GMT
Expires: Sun, 25 May 2025 05:57:38 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 24 Jul 2015 15:07:06 GMT
Connection: keep-alive
access-control-expose-headers: FW_IP
FW_IP: 194.146.191.107
Timing-Allow-Origin: *
.PNG........IHDR................a....bKGD..............pHYs...H...H.F.
k>....vpAg.........\[email protected]..;....}.>nW>
;.]...P....R..Z5uq\.8..V...l...q....g..3........:z......Y...x....=..w.
..B...:.[..!.s....`......$..=G...:...cY(..|.7.ja.f.".}.S.4..>.)\.DY
...x..;x.D..y.t.q.../........~.On.\..%..W.`.>.........".{.n.n.bl.R.
..%tEXtdate:create.2015-03-30T09:54:17 08:00..e....%tEXtdate:modify.20
15-03-30T09:54:17 08:00........tEXtSoftware.Adobe ImageReadyq.e<...
.IEND.B`.HTTP/1.1 200 OK..Server: Tengine..Content-Type: image/png..Co
ntent-Length: 481..Last-Modified: Mon, 30 Mar 2015 01:54:17 GMT..Expir
es: Sun, 25 May 2025 05:57:38 GMT..Cache-Control: max-age=315360000..A
ccess-Control-Allow-Origin: *..Timing-Allow-Origin: *..Timing-Allow-Or
igin: *..Date: Fri, 24 Jul 2015 15:07:06 GMT..Connection: keep-alive..
access-control-expose-headers: FW_IP..FW_IP: 194.146.191.107..Timing-A
llow-Origin: *...PNG........IHDR................a....bKGD.............
.pHYs...H...H.F.k>....vpAg.........\[email protected]..
;....}.>nW>.]...P....R..Z5uq\.8..V...l...q....g..3........:z....
..Y...x....=..w...B...:.[..!.s....`......$..=G...:...cY(..|.7.ja.f.".}
.S.4..>.)\.DY...x..;x.D..y.t.q.../........~.On.\..%..W.`.>......
...".{.n.n.bl.R...%tEXtdate:create.2015-03-30T09:54:17 08:00..e....%tE
Xtdate:modify.2015-03-30T09:54:17 08:00........tEXtSoftware.Adobe Imag
eReadyq.e<....IEND.B`...
<<< skipped >>>


GET /?k83357698 HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Last-Modified: Fri, 24 Jul 2015 10:40:50 GMT
ETag: "1eabd-51b9ca32c7080"
Cache-Control: max-age=3600
Expires: Fri, 24 Jul 2015 15:57:45 GMT
Vary: Accept-Encoding
Content-Type: text/html; charset=gb2312
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:42 GMT
Age: 537
Connection: keep-alive
x-hits: 19387
008000..<!doctype html>..<html><head>..<meta http
-equiv="Content-Type" content="text/html; charset=gb2312" />..<m
eta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />..<me
ta http-equiv="mobile-agent" content="format=xhtml;url=hXXp://m.2345.c
om">..<meta name="Description" content="2345.com................
..............................NBA.....................................
......................................................................
..............................." />..<meta itemprop="name" conte
nt="2345..................................9....10......">..<meta
 itemprop="description" content="2345.com.............................
.................NBA..................................................
......................................................................
..................">..<meta itemprop="image" content="hXXp://www
.2345.com/images/logo/logo_QQ.png">..<meta name="coninfo" conten
t="U2FsdGVkX1" />..<meta http-equiv="Cache-Control" content="no-
transform" />..<link rel="apple-touch-icon" sizes="72x72" href="
touch-icon-ipad.png" />..<title>2345.........................
.........9....10......</title>..<!--[if IE]>..<meta nam
e="application-name" content="2345.com........" />..<meta name="
msapplication-window" content="width=1024;height=768" />..<meta 
name="msapplication-task" content="name=......;action-uri=hXXp://tv.23
45.com/?ie9;icon-uri=hXXp://image.2345.com/images/ie9dsj.ico" />
<<< skipped >>>

GET /css/index_20150722_02.css?v=5.28.1 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 23 Jul 2015 02:11:22 GMT
ETag: "153a6-51b8167566680"
Cache-Control: max-age=1296000
Expires: Fri, 07 Aug 2015 02:18:12 GMT
Vary: Accept-Encoding
Content-Type: text/css
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:46 GMT
Age: 132514
Connection: keep-alive
x-hits: 724531
008000..@charset "gb2312";html{overflow-y:scroll}body,div,span,ul,ol,l
i,h1,h2,h3,h4,h5,h6,p,img,dl,dt,dd,table,td,th,hr,sub,sup,form,select,
fieldset,input,button,textarea{margin:0;padding:0}body{background:#f7f
aff}body,button,input,select,textarea{font:12px/1.5 Arial,Tahoma,Helve
tica}table{border-collapse:collapse;border-spacing:0}h1,h2,h3,h4,h5,h6
,font{font-size:1em}iframe,img{border:0 none}img{vertical-align:top}em
,i,ins{font-style:normal;text-decoration:none}ul,li,ol{list-style:none
 outside none}input{outline:none}input::-ms-clear{display:none}.clearf
ix:after{content:".";display:block;height:0;clear:both;visibility:hidd
en}.clearfix{*zoom:1}a{text-decoration:none;color:#333}a:hover{text-de
coration:underline;color:#f30 !important}.fred{color:#f30 !important}.
fgreen{color:#178517 !important}.fblue{color:#2371c8 !important}.fgray
{color:#888 !important}.block{display:block !important}.none{display:n
one !important}.fleft{float:left}.fright{float:right}.mt4{margin-top:4
px}.mt10{margin-top:10px}.mt8{margin-top:8px}.category .category_in .p
anel ins,.category .category_in .panel ins a,.bottom_mod .module_t .t_
h2 ins,.video_c2 li a p .ico_video{display:inline-block;width:16px;hei
ght:16px;overflow:hidden}.life_c1 li ins{display:inline-block;width:14
px;height:14px;overflow:hidden}.top_w,.w_wp,.bottom_outer,.top_outer,#
footer,.bg,.tip_stopXP{min-width:1000px}.inner,.top,.wrap,.bottom,.mys
tylediv,.bottom_bd,.top_bd{width:1000px;margin-left:auto;margin-right:
auto}#left{width:755px;float:left}#right{width:235px;float:right}.
<<< skipped >>>

GET /images/common/top_20150327.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Tue, 31 Mar 2015 11:03:43 GMT
ETag: "b06-512938d42a1c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 2822
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:47 GMT
Age: 4256892
Connection: keep-alive
x-hits: 19232655
.PNG........IHDR.......L.............tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:D67AFA8D23D4E4118D07D33F5F81F7A2" xmpMM:DocumentID="xmp.did:1394
166CD42511E4A87DD32FD29E0BAB" xmpMM:InstanceID="xmp.iid:1394166BD42511
E4A87DD32FD29E0BAB" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D97AFA8D23D4E4118D07
D33F5F81F7A2" stRef:documentID="xmp.did:D67AFA8D23D4E4118D07D33F5F81F7
A2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.......1PLTE.....[8...............9#.....%..R
..... y................-q........<....................~..B..a......
..E..h.%..,..".....'..$.yaD..A....&.N#..-.xa.yaS......./...........)..
...... ...V..\.......&......pvl.. .................5........(.....W..3
..0..!..................o....6........-.......{[........'..$..........
.....z..R....*..!v.i.....$k.....e...................!..'........0~....
......#.....[s..../..4..... ......../....yW..-.........h.........{[.. 
....{Y9....0...g.....d..............:..........8..!........0..$...
<<< skipped >>>

GET /images/logo/logo_20150723.png HTTP/1.1


Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 23 Jul 2015 12:01:04 GMT
ETag: "4427-51b89a444e000"
Cache-Control: max-age=31536000
Expires: Fri, 22 Jul 2016 16:57:42 GMT
Content-Type: image/png
Content-Length: 17447
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:47 GMT
Age: 79746
Connection: keep-alive
x-hits: 621988
.PNG........IHDR.......9......'8.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...&iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Windows)" xmpMM:InstanceID="xmp.iid:F7ED4FEE312811E5AEC9
ACA9DE17A694" xmpMM:DocumentID="xmp.did:F7ED4FEF312811E5AEC9ACA9DE17A6
94"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7ED4FEC312811
E5AEC9ACA9DE17A694" stRef:documentID="xmp.did:F7ED4FED312811E5AEC9ACA9
DE17A694"/> </rdf:Description> </rdf:RDF> </x:xmpmet
a> <?xpacket end="r"?>[email protected] ..ZE...A 
@`..&.......Mp6....k.N\....d0`c2&.....6..<....U=..;Z.....Z_if;TwW.:
.....lc.h..l..)...MJ^...]...@.....&......nOp........{.o..../?6.3..}..N
.w.y.]c..?.t.m..D.r.............r.P0.....'...w.u......y. eo>Q.Yy...
..`....}.....)...w...&Lf.6..W...A...L.......n&.N.*.^=.........x3....g.
.d....yR.X.w....\..]..fA.q.......\@r......W.v..X.pH.0E>...0.=A%[...
..Q...8.....l....R6%.....P....M....0.V..*S(.....}@.p........n1.....yS.
_8.F j.G&x_.*=W.v..p.X.....2mfP2m0.....`......*Y....l}..8...u.........
.#..Jn_....L:..........P&..y...P.}[email protected] `.ek. .b.......3.ng.
<<< skipped >>>

GET /i/blank.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 18 May 2012 05:59:19 GMT
ETag: "3b9-4c04940ca7bc0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 953
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:48 GMT
Age: 4256893
Connection: keep-alive
x-hits: 19169188
.PNG........IHDR...............?.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:BE04A97D9F3C11E1BC65ED9A
1562F288" xmpMM:DocumentID="xmp.did:BE04A97E9F3C11E1BC65ED9A1562F288"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BE04A97B9F3C11E1BC
65ED9A1562F288" stRef:documentID="xmp.did:BE04A97C9F3C11E1BC65ED9A1562
F288"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.H"[email protected]
x.b`.'..0..n..........IEND.B`.....


GET /images/tipSet_ie6.png HTTP/1.1


Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 04 Sep 2013 09:49:02 GMT
ETag: "a6f-4e58bb71a1f80"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:39 GMT
Content-Type: image/png
Content-Length: 2671
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:48 GMT
Age: 4256889
Connection: keep-alive
x-hits: 643329
.PNG........IHDR...............V....6IDATh..[}l.W.o....d.....8.Cc...D.
S..M..(..c..V'c.%|F>.1...........>.'[email protected]......=9
..^..}.~...._......>......{.8".{[email protected]....'... .._2.d..
.........-....eLg.g`.c..N...$X.p(~...5F=...b|...p......y..4CxS..Ex.c..
.b?..:.g.U.=..............R...j..hG._..Z.... .6...u. ie...d.c4.....?..
.x...._.1y8.4.rLd..(.q.0N2~....`&0...}....HL...YB....W....M..m8..V.$..
....is ...,.v...l........ ...fi...m.\F2#8/.!J..=m>.,...uJ=.o..?N.-!
j.n.....V.i=O.6|@....N..G..X.B (.!...Q&..b ..c.c7.s2.T2....v..?.H]tx..
xr......U...A..t^.....Tq...d...N.w v......M.5..|.`..oXX..!.f.r.......p
.Q.E.....r..O.N.:w...J.r.%....X..{....U..............5.A.c..2G.M.e..SR
.F....),.....ic.::..O.m51.fwO7]......PeS.}.P.......~8Q...;.\Eum....B. 
.j.U.sm>....?.d.=.....F..81~x....A./yM!O.r.:..j..L.et....G.... H...
M..B..=\..;..J_..B..M...a...o...$.h$. .$1.hd.)1.W.....q.[...Ce..7.$..$
.VcI.*y..F....'1..O..:..o%.<.z...J.....l... ........W.......=nm*0.-
y5...lg_..n..CQ..|.:.9-.....7<..~....'....c..... .......d.p#.bY.O.j
[;X.ejwO..@....#l}.WN$ ..`...A.f.>....$..3.c*C.M...b,v.P8H.. ......
........Ir.e...}......{{.W6=. *...]... ..lM. ...1..[=vOA.."M_q.0.w...;
."........:.V.G=.....C;...MO...E.H^...Q...^/K.u[...p#.9>...az.h....
[email protected]$D .=.b.W....5..".d.w*g.8....y.e...S..1-...h(.m
.PK...L!.~X....AL.....=e)9.i..]"!.....)..PVV..B!*//...L*--.."..1....B.
..Ge...9[.fL/.Z.%1...... ....c......2.......,......;.i...Qo.K......8.)
..6.kf.f{..m.Th....m......455QNN.C........A... G....Y......]v.1}.b
<<< skipped >>>

GET /images/body0_2.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 08 May 2013 03:53:33 GMT
ETag: "b7-4dc2ce0adc940"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 183
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:48 GMT
Age: 4256894
Connection: keep-alive
x-hits: 18600086
.PNG........IHDR.............*<V....0PLTE..........................
......................cL.....BIDATHK..G.....@.w...D..m.eN..u......PO..
p..zW.e.cP~'.....vU.....Z ....<.......IEND.B`.....


GET /images/common/login_1217.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 17 Dec 2014 02:05:51 GMT
ETag: "575-50a5fea33fdc0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1397
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:49 GMT
Age: 4256894
Connection: keep-alive
x-hits: 18707191
[email protected] ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:3E13F04E9F31E4118E06FC0B05C7E7DF" xmpMM:DocumentID="xmp.did:72AE
E638859011E484A69228404F635C" xmpMM:InstanceID="xmp.iid:72AEE637859011
E484A69228404F635C" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D17513E18B85E411ACC5
B2DF4C75ECA7" stRef:documentID="xmp.did:3E13F04E9F31E4118E06FC0B05C7E7
DF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>!ud....QPLTE.....................MMM.3.......
................................................33......tRNS..........
.................'4.5...!IDATx......0...q....H..A..Y.....C....}..9T...
..&c.0..3&.Ub.[GLpk....\........V.P.5.Z..0.....a2.....b.[{Lp...4.....4
...X.Q..bn.&...c.....\)M......0....X......&..s=/.:..5..v)M....~Y..e.d.
..aV.....7_%.?DZ.y).DKo..hU.-....%Zz..DK.em...fcZ.-...[9.u...h..{.E.o,
v%.*...[.....E..v...S....An6....0.P|[email protected]`.....
<<< skipped >>>

GET /images/lazyloading.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Tue, 07 Jan 2014 05:58:06 GMT
ETag: "6fb-4ef5b0f623780"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/gif
Content-Length: 1787
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:49 GMT
Age: 4256894
Connection: keep-alive
x-hits: 18871860
GIF89a . ............................444...............TTT...!..NETSCA
PE2.0.....!.......,.... . ......I)K....JJ5....U.RK....(..&...05 /.mbp.
z...1...;$.1C....I*..HCh`A.o..."3qT5.\.8a....B....d..wxG=Y..g...wHb..v
.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H...........b..Z.b.O
Eg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*....f.7D..!.......,......
....r..I..5........bRH.h.W...*lkL&-)..1-..v.m...).....M..t.\.....Rd..A
..H..... .......o............................Gz{..!.......,..........r
[email protected]!(.(.(..8.........J..Kb..r....3.h..K!..6..3u`.&.D.A..z.
fL.Z*..^`n.F.....O..ssyJ}T....N.aqXshC..XJ...!.......,..........i....Y
4.......Cv....A.M.A."....J..j..A'.0T....*.b..JI.I..ZF..P.MM...s.bg.qV$
........v.!...5....?}..........!.......,..........ep....80....#^.q..X.
...[..(\.-......S..@ P....0". ....L......z...xL....*Z....._..H......D.
.eU..ywZt.n..!.......,.....................A.2.W..E.&j.....B.&..w~.6..
b8....p`4r|.F...M.>.......,bLv|?.4B.v......P..u.9.. .&..2..x&...k..
&...U]..vo...o..p..raT&..!.......,..........{.........'..e.7......\l.-
).S7@.&..4. `.yT.SL.\:=.....J..k...:......;.e....8.c.A.8O.j@b/. :.{..t
y....t#....|.....-...mN..qK..!.......,..........l..I .8.b....y ..h..*.
...Zp=.....3...`.....C....`B.".p..X..9bP...B.`Z=.....8.>.u,.S..t"..
O..T\um.|.;....8.~*..!.......,..........x..I.......A.]G...e..AP.b.)...
"!s...... .B..I..........V...5q(.(.X2=.,.I.........n#&..A....Vq5t..sn.
y\)_.....g......|r.5..!.......,..........g..D .8.[{.`&y_h..I.).(L.". g
N.8..l5.."....L..A ...%@%[email protected] ............p.us/.j...j.Vj..
<<< skipped >>>

GET /i/search0320/baidu_web.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 20 Mar 2013 08:34:57 GMT
ETag: "78a-4d85718d1ce40"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:34 GMT
Content-Type: image/gif
Content-Length: 1930
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:49 GMT
Age: 4256895
Connection: keep-alive
x-hits: 18786143
GIF89aU. .................cZ.............9/......ZU..........!..XMP Da
taXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x
:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.
134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="http:/
/VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:abo
ut="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpM
M="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/x
ap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xm
pRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:91695398A26DE
111951AE4839BBBE675" xmpMM:DocumentID="xmp.did:6E0F9B15912F11E29525B1A
BCBF93F2A" xmpMM:InstanceID="xmp.iid:6E0F9B14912F11E29525B1ABCBF93F2A"
 xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:C68C50D22D91E2119448AF4ED6042198" stRef:d
ocumentID="adobe:docid:photoshop:f6eab62f-7678-11e1-82f0-c1042319e464"
/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <
;?xpacket end="r"?>................................................
......................................................................
............~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFE
DCBA@?>=<;:9876543210/.-, *)('&%$#"! ...........................
......!.......,....U. ......I..x6.j.`(.....'5...p,S......|..6@ ...|.d.
.....(..d<.(.t.3...k..-S.P*...0l..\Rc>........}s\jO!..q.JX.;.C.o
6V.Jup..(..`vr.......#.....c.E..c........................d.....o..
<<< skipped >>>

GET /images/skin0_20.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Mon, 16 Jun 2014 01:45:37 GMT
ETag: "5e6-4fbea2f0ad240"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1510
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:50 GMT
Age: 4256896
Connection: keep-alive
x-hits: 18615520
.PNG........IHDR...F...C......J......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:91A143FBF06511E39C2ED910
0F3FF0F9" xmpMM:DocumentID="xmp.did:91A143FCF06511E39C2ED9100F3FF0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:91A143F9F06511E39C
2ED9100F3FF0F9" stRef:documentID="xmp.did:91A143FAF06511E39C2ED9100F3F
F0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected].........
......................................x...............................
..m....."tRNS.....................................q....IDATx....r.0..a
(....cj.G..%[.T.H6d..../...%$...b..(.....%.V&....cbc..:S]5'f...s.dW.{j
4..D.......rT....#b....:B..H..#f..9...`...g:.^.L.s.&'.....y.0...51....
....#.S....3...I..0L...4..L.........a.. f..1.N S9....f~.pf....A0?..o..
..S..;E;.):......MM.x1I..v.....H..bW...., .]c...aVo..{{....0V..Vt.A..Q
..0[StP..-N.2d..!C...2d..!.g2Y.&....2d..Q..&..K..I.]..}j.V.F1..@"Cf.3.
D....y..b. ..\C"3>..)..D..Y@"..\A"3>s.)N.....0...d. .!CF's.)
<<< skipped >>>

GET /images/common/search_140829.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 10 Sep 2014 06:11:48 GMT
ETag: "904-502afed573100"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 2308
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:51 GMT
Age: 4256896
Connection: keep-alive
x-hits: 18880430
.PNG........IHDR.......m.............tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:D23E308D3C2FE411AD20F759CC993D01" xmpMM:DocumentID="xmp.did:97EE
EE3A2F4911E4909BD568623D741A" xmpMM:InstanceID="xmp.iid:97EEEE392F4911
E4909BD568623D741A" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D93E308D3C2FE411AD20
F759CC993D01" stRef:documentID="xmp.did:D23E308D3C2FE411AD20F759CC993D
01"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>*..E....PLTE.................................
......................................................................
......................................................................
......................................................................
............................<.....ZtRNS............................
.................................................................o....
IDATx....R.0.E.$..........]RH.......l..-.20.\...3..cA|t.dKv.......~2.k
p..'....N.....:=...\.x...N~...,..HLY.&b*...0>$qe.}..|...,....~.
<<< skipped >>>

GET /right/homepage/zjsVersion.js?t=23962506 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 24 Jul 2015 15:00:05 GMT
ETag: "e9-51ba04252e740"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:11:15 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:51 GMT
Age: 336
Connection: keep-alive
x-hits: 398
00e9..;(function(){$CONFIG["jsVersion"] = {"life":1437727248,"entertai
n":1437634951,"game":1437703200,"shopping":1437708564,"auto":143769240
0,"novel":1436846031,"news":1437702410,"spic":1427879216,"vpic":143738
2998,"live":1437728049};})();..HTTP/1.1 200 OK..Last-Modified: Fri, 24
 Jul 2015 15:00:05 GMT..ETag: "e9-51ba04252e740"..Cache-Control: max-a
ge=600..Expires: Fri, 24 Jul 2015 15:11:15 GMT..Vary: Accept-Encoding.
.Content-Type: application/javascript..Transfer-Encoding: chunked..Dat
e: Fri, 24 Jul 2015 15:06:51 GMT..Age: 336..Connection: keep-alive..x-
hits: 398..00e9..;(function(){$CONFIG["jsVersion"] = {"life":143772724
8,"entertain":1437634951,"game":1437703200,"shopping":1437708564,"auto
":1437692400,"novel":1436846031,"news":1437702410,"spic":1427879216,"v
pic":1437382998,"live":1437728049};})();..0......


GET /css/func_20150716_01.js?ver=1.0 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 16 Jul 2015 10:19:02 GMT
ETag: "bfa5-51afb667af180"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:14:32 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:52 GMT
Age: 140
Connection: keep-alive
x-hits: 1404
008000..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(pa
rseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))
};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function
(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=
p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('z lc;$1J[\
'7O\']=(6d(7P)!==\'6e\'&&!ew(7P))?7P:( 1o 1w);if(!6f){T.3H=u(a){T.2V(1
c,\'7Q\',a)}};(u(){z a=6g.6h.3I(),6i=$(\'ex\');if(/ey/i.1O(a)){X.1j=\'
N\\2J\\6j\\2l\\6k\';if(!$(\'ar\')){C}z b=$(\'ar\');b.1e=\'N\\7R\\7S\\e
z\';b.1F=u(){C 1a};b.O=\'3i://eA.eB.B/eC/eD/eE-eF-eG/eH?mt=8\';C}if(/(
eI|eJ|eK|eL|eM|eN eO)/i.1O(a)){6i.1b=\'5y\';6i.1e=\'<6l 2W="/as/eP.
at" F="eQ-eR:eS;au-eT:eU;">\\eV\\eW\\eX\\eY\\eZ\';6i.1F=u(){2A.O=\'
E://m.N.B/\'}}}());u av(){z a=1A(\'5z\'),1t=\'E://3J.N.B/t/f0.4A\';if(
 (\'\' a)>0){1t=\'t/f1/\' a \'.js\'}T.3K(1t)}av();u f2(b){z b=b,6m=
7T,aw=6m[1],ax=6m[2],3j=1o 1w().f3(),5A=1o 1w().f4();if(6m.1g>1){1T
("5z",aw);1T("lc",ax)}1T({3L:"2K"},"5z",b.id);1T({3L:"2K"},"f5",7U(b.6
n));z c=$1J[\'46\']?\'<dd><a O="E://3J.N.B/#4B#/#id#.1q" 1j="
#ay#" ><1h L="w#i3#6o"></1h>\\f6\\1U<1r>#d3#</
1r><br>#az#</a></dd></dd>\':\'\';z d=\'<
1h L="ct f7" id="7V"><b id="f8"><a 1F="q.7W();1u(\\\'f9\\\
');" K="aA" fa="1a" O="E://3J.N.B/#4B#/#id#.1q" 1j="\\1y\\1G\\1P\\2b#3
M#">#6n#</a></b><1h 1F="aB(\\\'7X\\\',\\\'fb\\\');1u
(\\\'aC\\\');1u(\\\'aC\\\', \\\'6p\\\');" 1j="\\aD\\7Y" id="5B" F=
<<< skipped >>>

GET /images/kz_tmall_20150721.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Tue, 21 Jul 2015 07:56:30 GMT
ETag: "8e2d-51b5dfdf2a780"
Cache-Control: max-age=31536000
Expires: Wed, 20 Jul 2016 08:13:15 GMT
Content-Type: image/gif
Content-Length: 36397
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:53 GMT
Age: 284017
Connection: keep-alive
x-hits: 1230352
GIF87a}....i.......#. ....pp.00...ZWW.........0  ......@...``.PP.``.  
....@@......@@@000...............gee...ppp....@@.00......P........   ,
..P00......`PP.ppp``.``.ppq.....P@@.00......@  ....PP`@@.ss.pp`00...p 
 .00.00.pp...`  ...@00z......@@.``P  p...PP..........  6...OP.@@}??p@@
.@@.@@.  .``.PP.PP.##.........y/0g..p__.)).op.mm......................
...............................................!.....i.,....}.....f.i.
......................................................................
...........!.....))....0.)!...!.....i.,F...#.....?.i.............. )).
.....)......).i:.................!....:.....!.....i.,E...$.......i....
...!.:.....)........)......).....!....)..0....!...i....:..):..........
....!................. ..........:.i..:.........)......!.....i.,E...$.
......i.........0......).......)..................i........!i......!..
... i...:.....0.......!..........)...).i0............i..:.):......K!..
...&...b..U:t.b$N`...8h...C<|.^.Bp-E...X..Xn..w.ju..AG.I.4.K...%...
..X!M .!.....i.,D...$.......i.............:))......)......)........) .
 .........i.....i.!..)i...:...!..........).....!.......0.:....!..0....
.0.. [email protected].=|.BD.W-..........'..>..p*.;....Ka.]$u..}....
....fl....Y%S....X......y.....vV.......^..9..,L ...F....Y...........r.
..W...........k..De.R .!.....i.,D...$.......i.............:))......)..
....)........) . .........i.....i.!..)i...:...!..........).....!......
.0.:....!..0.....0.. [email protected].=|.BD.W-..........'..>..p*.;.
...Ka.]$u...8......36.D....)QU..lA......y.....P......W.jN. .....`,
<<< skipped >>>

GET /i/banner2_20150724.jpg HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 24 Jul 2015 10:32:20 GMT
ETag: "256d-51b9c84c67500"
Cache-Control: max-age=31536000
Expires: Sat, 23 Jul 2016 10:47:53 GMT
Content-Type: image/jpeg
Content-Length: 9581
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:53 GMT
Age: 15540
Connection: keep-alive
x-hits: 169125
......Exif..II*.................Ducky.......<.....mhXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-
c060 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:707BF4B93EC2E4
118D81C713D92362B5" xmpMM:DocumentID="xmp.did:C9F506E510D111E5893DD668
4A2D682F" xmpMM:InstanceID="xmp.iid:C9F506E410D111E5893DD6684A2D682F" 
xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFro
m stRef:instanceID="xmp.iid:2E55CDD32304E51184EFD37DE43A9DFC" stRef:do
cumentID="xmp.did:707BF4B93EC2E4118D81C713D92362B5"/> </rdf:Desc
ription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&
gt;....Adobe.d........................................................
......................................................................
...................2..................................................
.........................................!1.A2.Q"..aq.B34..b#5..R..s$D
..C..6.....S.......................!.1A.Qaq"....2....b...BRr4...#3.C..
..S$............?.P.)u..........h.o...N.l..?...k.....\7.n"...{^.....$.
cq....(..}....9.t?..\....m@.\...T...X.....cA....x.).....3.. ..F....A..
....Ae..1..l".I..]y$.s%G...?.B.EQr..".f..P.Z..iY......D.'..xT.....
<<< skipped >>>

GET /right/homepage/newsChannel_20141226.js?t=1437702410&ver=6.24.18.0 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 24 Jul 2015 10:40:15 GMT
ETag: "365a-51b9ca11661c0"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:07:49 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:54 GMT
Age: 544
Connection: keep-alive
x-hits: 11
00365a..T.newsChannel.init([{"hd":"<a href=\"http:\/\/VVV.2345.com\
/newsweek.htm\" name=\"2\" tj=\"yxw_1\">\u65b0\u95fb<span class=
\"line\"><\/span><\/a>","bd":"<ul><li><a
 tj=\"yxw_1_1\" class=\"fred\" href=\"http:\/\/finance.ifeng.com\/a\/2
0150724\/13862286_0.shtml#_zbs_2345_bd\" title=\"\u6cb3\u5317\u7701\u5
9d4\u4e66\u8bb0\u5468\u672c\u987a\u88ab\u8c03\u67e5\" name=\"2\">\u
6cb3\u5317\u7701\u59d4\u4e66\u8bb0\u5468\u672c\u987a\u88ab\u8c03\u67e5
<\/a><\/li><li><a tj=\"yxw_1_2\"  href=\"http:\/\
/finance.ifeng.com\/a\/20150724\/13862049_0.shtml#_zbs_2345_bd\" title
=\"\u5927\u8fde\u67aa\u67401\u75371\u5973\u5acc\u72af\u88ab\u6293\u83b
7\" name=\"2\">\u5927\u8fde\u67aa\u67401\u75371\u5973\u5acc\u72af\u
88ab\u6293\u83b7<\/a><\/li><li><a tj=\"yxw_1_3\" 
 href=\"http:\/\/finance.ifeng.com\/a\/20150724\/13860479_0.shtml#_zbs
_2345_bd\" title=\"NASA\u5ba3\u5e03\u53d1\u73b0\u53e61\u4e2a\u5730\u74
03(\u56fe)\" name=\"2\">NASA\u5ba3\u5e03\u53d1\u73b0\u53e61\u4e2a\u
5730\u7403(\u56fe)<\/a><\/li><li><a tj=\"yxw_1_4\
"  href=\"http:\/\/finance.ifeng.com\/a\/20150724\/13861554_0.shtml#_z
bs_2345_bd\" title=\"\u7537\u5b50\u4e3e\u62a5\u59bb\u5b50\u906d\u6751\
u5b98\u591a\u6b21\u5f3a\u5978\" name=\"2\">\u7537\u5b50\u4e3e\u62a5
\u59bb\u5b50\u906d\u6751\u5b98\u591a\u6b21\u5f3a\u5978<\/a><\
/li><li><a tj=\"yxw_1_5\"  href=\"http:\/\/finance.ifeng.c
om\/a\/20150724\/13861579_0.shtml#_zbs_2345_bd\" title=\"\u5927\u9
<<< skipped >>>

GET /right/homepage/entertainChannel_20140903.js?t=1437634951&ver=1.0 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 24 Jul 2015 15:00:02 GMT
ETag: "1c60-51ba042252080"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:13:34 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:56 GMT
Age: 202
Connection: keep-alive
x-hits: 2025
001c60..T.entertainChannel.init([{"hd":"<a tj=\"yys_1\" name=\"2\" 
href=\"http:\/\/tv.2345.com\/\">\u7535\u89c6\u5267<span class=\"
line\"><\/span><\/a>","bd":"<dl><dt><a t
j=\"yys_1_1\" href=\"http:\/\/tv.2345.com\/detail\/45286.html\" name=\
"2\" title=\"\u51b0\u4e0e\u706b\u7684\u9752\u6625\"><img src=\"r
ight\/homepage\/img\/block1409031001\/tab1\/20150715091754.jpg\" width
=\"124\" height=\"78\"><p class=\"t_bg\"><\/p><p>
\u51b0\u4e0e\u706b\u7684\u9752\u6625<\/p><span class=\"mask\"
><\/span><\/a><\/dt><dd><a tj=\"yys_1_3\
" href=\"http:\/\/tv.2345.com\/detail\/27154.html\" name=\"2\">\u53
4e\u80e5\u5f15<\/a><\/dd><dd><a tj=\"yys_1_5\" hr
ef=\"http:\/\/tv.2345.com\/detail\/45805.html\" name=\"2\">\u52a0\u
6cb9\u5427\u5b9e\u4e60\u751f<\/a><\/dd><dd><a tj=
\"yys_1_7\" href=\"http:\/\/tv.2345.com\/detail\/46582.html\" name=\"2
\">\u798f\u6839\u8fdb\u57ce<\/a><\/dd><dd><a t
j=\"yys_1_9\" href=\"http:\/\/tv.2345.com\/detail\/46026.html\" name=\
"2\">\u514b\u62c9\u604b\u4eba<\/a><\/dd><\/dl><
;dl><dt><a tj=\"yys_1_2\" href=\"http:\/\/tv.2345.com\/det
ail\/36303.html\" name=\"2\" title=\"\u82b1\u5343\u9aa8\"><img s
rc=\"right\/homepage\/img\/block1409031001\/tab1\/20150715111507.jpg\"
 width=\"124\" height=\"78\"><p class=\"t_bg\"><\/p><
;p>\u82b1\u5343\u9aa8<\/p><span class=\"mask\"><
<<< skipped >>>

GET /i/cert-beian_0829.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 10 Sep 2014 06:11:23 GMT
ETag: "888-502afebd9b8c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 2184
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:57 GMT
Age: 4256902
Connection: keep-alive
x-hits: 18342325
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:E434EB51324E11E4A4029D98
459EA8DB" xmpMM:DocumentID="xmp.did:E434EB52324E11E4A4029D98459EA8DB"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E434EB4F324E11E4A4
029D98459EA8DB" stRef:documentID="xmp.did:E434EB50324E11E4A4029D98459E
A8DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>F.......PLTE...gggrrr.....................h
hh........................................D..F.....`..-...........M..\
......<.............^.........J.....5....~........7......r........l
.....-.................^.q.........l........].g.....s........Q..y.....
x..HTTP/1.1 200 OK..Last-Modified: Wed, 10 Sep 2014 06:11:23 GMT..ETag
: "888-502afebd9b8c0"..Cache-Control: max-age=31536000..Expires: Sat, 
04 Jun 2016 08:38:35 GMT..Content-Type: image/png..Content-Length: 218
4..Accept-Ranges: bytes..Date: Fri, 24 Jul 2015 15:06:57 GMT..Age: 425
6902..Connection: keep-alive..x-hits: 18342325...PNG........IHDR..
<<< skipped >>>

GET /images/ico_taobao.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 27 Sep 2013 10:25:50 GMT
ETag: "3be-4e75ae90f2780"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 958
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:01 GMT
Age: 4256906
Connection: keep-alive
x-hits: 18231328
.PNG........IHDR.............(-.S....PLTE....i/.m4.J...V..............
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..........................................Y....tRNS.........SOx....dID
AT..U.A..1..$.,..q.I..n.X.......n.X....d.4..m....yN!.........F|.G.n...
.`...-....I..YLej.j..1.e..<......K.e....IEND.B`.....


GET /images/mz_pop.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Mon, 14 Apr 2014 01:40:15 GMT
ETag: "297-4f6f6c3d8ddc0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 663
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:01 GMT
Age: 4256906
Connection: keep-alive
x-hits: 18214511
.PNG........IHDR...$.........#..)....PLTE..ml.!......|.9......k.......
.p.&......g..n.$i...........................p..................b....}&
.....v........p............r.)................................s..{..]e
...m..h....e...f..............@tRNS...................................
..............................{.D...FIDATX....n.@..` ......%....j.53..
.U..:......?..l....S'..X.t.Y.......PZ...w..... ......iM.......Mg..S..p
&i.,?c.o...&..2..WE....E!.)>.Bk.fA..G...&..H.H.H.H..*a=a..-....).My
tA(...d.>......E....P.s....9........P.?....(...4Hkj.7h%.'l:.....5g.
...........`..*..:..y.v..0.m......S....B{.."d.hDHhb..............6...N
.-oBBO<zo.b.}5..o~...{.QM......IEND.B`.....


GET /images/mz_toggle.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 22 Nov 2013 06:18:20 GMT
ETag: "3da-4ebbdfb0b2300"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 986
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:01 GMT
Age: 4256906
Connection: keep-alive
x-hits: 18181291
.PNG........IHDR...2..........M}.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C9B44CDB531F11E38858E484
3E3FEE07" xmpMM:DocumentID="xmp.did:C9B44CDC531F11E38858E4843E3FEE07"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C9B44CD9531F11E388
58E4843E3FEE07" stRef:documentID="xmp.did:C9B44CDA531F11E38858E4843E3F
EE07"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>$b......PLTE......c.p.....tRNS....0J....IDA
Tx.b`[email protected]!\:..2...n..^'`u.hT.N-.....L.eR)......IEND.B`.
....


GET /images/ico_amazon.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 16 Aug 2013 07:32:51 GMT
ETag: "218-4e40b99166ec0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 536
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:02 GMT
Age: 4256907
Connection: keep-alive
x-hits: 18194545
.PNG........IHDR.............(-.S....PLTE......................I......
.....G..a.....G..H....ZZZ....! ...WWW........g.o............i.........
.. ....{....kkk........x..I.......n... ..........i.........#...ppp....
...................^|||..5.....f.c....NNN........9..........,A....LtRN
S.....................................................................
...............IDAT.WM.U..0.................|X..F2af..b....>...@...
Br E!3..[Q.......%.Z@|}...,.....z...;.l....4.nC.$..vb..L8...yJ.!.|.qM2
.Y}g..Y...p@..:......{...Y.....<[email protected]`.....


GET /images/go_top.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Mon, 16 Jun 2014 01:45:37 GMT
ETag: "648-4fbea2f0ad240"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1608
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:05 GMT
Age: 4256910
Connection: keep-alive
x-hits: 18213349
.PNG........IHDR...K...4.......5.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:1CC08B86AAEFE31182A0F648E10459DB" xmpMM:DocumentID="xmp.did:F32C
D68EEFBD11E389E7BC54CF5D80EE" xmpMM:InstanceID="xmp.iid:F32CD68DEFBD11
E389E7BC54CF5D80EE" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0C76CC85BCEFE31182A0
F648E10459DB" stRef:documentID="xmp.did:1CC08B86AAEFE31182A0F648E10459
DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>...h....PLTE8....................K..L........
..................M........Z.................t........b..g..X.........
........_.....j.....o.......................w.....S...................
HTTP/1.1 200 OK..Last-Modified: Mon, 16 Jun 2014 01:45:37 GMT..ETag: "
648-4fbea2f0ad240"..Cache-Control: max-age=31536000..Expires: Sat, 04 
Jun 2016 08:38:35 GMT..Content-Type: image/png..Content-Length: 1608..
Accept-Ranges: bytes..Date: Fri, 24 Jul 2015 15:07:05 GMT..Age: 425691
0..Connection: keep-alive..x-hits: 18213349...PNG........IHDR...K.
<<< skipped >>>

GET /images/main_spr_0829.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 10 Sep 2014 06:11:40 GMT
ETag: "3cf-502afecdd1f00"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:34 GMT
Content-Type: image/png
Content-Length: 975
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:07 GMT
Age: 4256912
Connection: keep-alive
x-hits: 22996025
.PNG........IHDR...(...(...... H_....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:7D868CCB324311E4B53F954A
3C1DF708" xmpMM:DocumentID="xmp.did:7D868CCC324311E4B53F954A3C1DF708"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D868CC9324311E4B5
3F954A3C1DF708" stRef:documentID="xmp.did:7D868CCA324311E4B53F954A3C1D
F708"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.."b....PLTE........."....tRNS....0J...#IDA
Tx.b`$.0...)[email protected]&......IEND.B`.....


GET /images/tip_stopXP_2.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 10 Apr 2014 08:46:27 GMT
ETag: "661-4f6ac40b11ec0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1633
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:07 GMT
Age: 4256913
Connection: keep-alive
x-hits: 15379507
.PNG........IHDR...H...C.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:819736BFC08A11E39E8CF5CE
7DFF4371" xmpMM:DocumentID="xmp.did:819736C0C08A11E39E8CF5CE7DFF4371"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:819736BDC08A11E39E
8CF5CE7DFF4371" stRef:documentID="xmp.did:819736BEC08A11E39E8CF5CE7DFF
4371"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..8.....PLTE..&.....Sh.....y....Ey....8...j
....j......z..s..r..q..t.....|..x..x.....w.......p\..l...........x....
.s....n..w..wl..m..o..{..o...........n..}..~.....k..l..p.............@
w..o..U.....v..m.....b......@tRNS.....................................
............................{.D....IDATx...]W.0....*..........Q.J.....
.#.t........?g..1.............c....R..Ne.qSM.\......a1'..(*..Q.j.s.(.z
.P..Y../...i.ANeH..RO.Q...2D..(....b.Ne.....gd......P.......r.}.M.....
.>.#.\.qo..&j....<..8...b.T;.i.l..i...(.....1f..,...:..6.N?....l
..N.."[email protected]....*......
<<< skipped >>>

GET /images/myfav_0610.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Mon, 16 Jun 2014 01:45:37 GMT
ETag: "1966-4fbea2f0ad240"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 6502
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:08 GMT
Age: 4256913
Connection: keep-alive
x-hits: 14797446
.PNG........IHDR.......,......$......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:537CFADBF06311E39749C61A
BD4D856E" xmpMM:DocumentID="xmp.did:537CFADCF06311E39749C61ABD4D856E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:537CFAD9F06311E397
49C61ABD4D856E" stRef:documentID="xmp.did:537CFADAF06311E39749C61ABD4D
856E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..b.....PLTE.........8..U..v....<.......
...........j.....O.....S........*(0.k3V..\........X...........P.....E.
.......I...L=...............m.g^............... ..........y.t.........
......N.....lhn................@tRNS..................................
...............................{.D....IDATx....b....A\...I.$gS<...]
g)...='.]...........b...$.k.|H.I3#.$........I.;.qQ..o...DI^.~.x.J~.;..
..>.cA^.e..e.d...P;... .:7M<i...nz...fxh6....9'G..EG..?*";& ....
8K))D&..Y9.Eu.s.0.. OD...R.C.A.3s....A..VNxN..K.....9.u...:.#......u..
[[email protected]..%E.9.?C...(...........a.....@L..
<<< skipped >>>

GET /right/homepage/img/block1409031001/tab1/20150715091754.jpg HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 15 Jul 2015 01:18:32 GMT
ETag: "1e4e-51adfbba90a00"
Cache-Control: max-age=31536000
Expires: Thu, 14 Jul 2016 01:19:03 GMT
Content-Type: image/jpeg
Content-Length: 7758
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:08 GMT
Age: 827285
Connection: keep-alive
x-hits: 4919126
......Exif..II*...............z.......................................
(...........1...........2.......................i...........z...Canon.
Canon EOS 60D...$..'....$..'..VVV.meitu.com.2015:06:23 10:44:05.......
...................."...........'...................0230..............
..................B...........J...........R...........Z...............
....................b...........811.........0...........0.............
..........&...........o...........j...........r.......................
................................................ ...........2014:06:17
 17:32:00.2014:06:17 17:32:00.P'[email protected][email protected].......
..O.......4.S................................................C........
............................................................C.........
..............................................................N.|.....
..........................................................}........!1A
..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghij
stuvwxyz..............................................................
................................................................w.....
..!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZc
defghijstuvwxyz.......................................................
.............................?....GV..A.#.. ...8P=.AI..r....m.?... .g.
.#....A.?..~.......f ...z{]^...yOD.5.^Y..*.K0..cJ4.Z....z............/
m..e...T.:-..1D.@..*C\JA.GL..._9..e..yN.......?C.(eX.Z...W%..t..C._...
...........o.G.J....J..T?7.V2.<..G'.S..>.[Z5UH..tNM....q.*..
<<< skipped >>>

GET /images/mystyle_wait.gif HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 17 Feb 2011 07:01:58 GMT
ETag: "17d-49c74f9354580"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:34 GMT
Content-Type: image/gif
Content-Length: 381
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:09 GMT
Age: 4256914
Connection: keep-alive
x-hits: 17730724
GIF89a.............s.................!..NETSCAPE2.0.....!.......,.....
.....0h.E.0.2.\ ..^...D..e..],.._...U..........F....d..!.......,......
.....hj..&.PHa....]..!.......,...........XT.F.8...`......!.......,....
.......XTf4.).j... B.@..!.......,...........hVTJ.(..... ..J..!.......,
...........hjE.....`....]..!.......,..............."8.X!e.A.-..!......
.,.............f!.).j-.42H.E..;....


GET /images/w_day40.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC


HTTP/1.1 200 OK
Last-Modified: Wed, 04 Sep 2013 01:32:03 GMT
ETag: "163b-4e584c5c04ac0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 5691
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:09 GMT
Age: 4256914
Connection: keep-alive
x-hits: 17822008
.PNG........IHDR.....................PLTEooo)......f............O.....
U.........................................C......................."R..
........z..R...........l.......................<.....N.....N.......
.i........E..H...........D....................{..T........t...........
..................j..n.............. ...........\..[...:..........B..#
.....~..<.............................f}}}../../.....t.............
..........{................._.....?..o.....N.{......b...X..../.....Y..
 .................:.................a...........-.....q.....?.....S...
.................K.....3...........#..m...........).....O.._..E.....K.
._.................t.....O.....n...........3.....R....s...............
...............).....{..,.....B............../.....l...........J..y...
..!..H.....E...........<..............C.......u......tRNS..........
......................................................................
......................................................................
......................................................................
....................................S..%....IDATx....|.e..k..Xj.....f.
&u-....V.E];..e........u..-.... .."cC...6. .F.....t..*..............'.
..I.r..=..Yz.=.Osm.>.{.{..y.....$.0 ..m......VOQ..<..a.....l...V
l).5....`c...-...v...a....9.....C.*......u......`4..jC..E.?"..>...{
..q.=.........^[email protected]..<l"
.VV.Y\'F$......Af...6.d.t8.a..Y...N.C{a..a.M....=..FAzS.w.XyAT-...kmc.
.YH..e..).x.......7%..`.z...=R.]i..G..(......A.0....T^w..5=&@.<
<<< skipped >>>

GET /images/common/wea_0829.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC


HTTP/1.1 200 OK
Last-Modified: Wed, 10 Sep 2014 06:11:48 GMT
ETag: "88d-502afed573100"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 2189
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:10 GMT
Age: 4256915
Connection: keep-alive
x-hits: 17727962
.PNG........IHDR..............a......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:59204371319A11E4973ED11B
DE3C05F8" xmpMM:DocumentID="xmp.did:59204372319A11E4973ED11BDE3C05F8"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5920436F319A11E497
3ED11BDE3C05F8" stRef:documentID="xmp.did:59204370319A11E4973ED11BDE3C
05F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.......ePLTEr.....)..'..0.. ..1..Y........E
..-..A.....b..#..... .....(.....*.....(..(..t..O..%[email protected]....
....!..8..L.._..1........C..>.....2.....5..w...........6..{........
......-.....$.....G..v...../..1..2...........g........E...........(.. 
.....S..1.....3..u..Z.....u..!..7.....t.....6.....7........`...w.d....
..........:..,..n..4..(..6..k..*..,..,..?..V.....I.,1...wtRNS.........
......................................................................
...........................................e....IDATx....VUQ....N7'l0.
A.D..l.EB.lQJE..e_?......g.u.....T.E.[7...ME.J..?......Ra....9"..i
<<< skipped >>>

GET /right/homepage/img/block1409031001/tab1/20150715111507.jpg HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC


HTTP/1.1 200 OK
Last-Modified: Wed, 15 Jul 2015 03:15:13 GMT
ETag: "219f-51ae15cf3d240"
Cache-Control: max-age=31536000
Expires: Thu, 14 Jul 2016 03:16:05 GMT
Content-Type: image/jpeg
Content-Length: 8607
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:10 GMT
Age: 820266
Connection: keep-alive
x-hits: 4382727
......JFIF.............0Exif..MM.*.......1..............VVV.meitu.com.
...C..................................................................
..C...................................................................
....N.|...............................................................
}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUV
WXYZcdefghijstuvwxyz..................................................
......................................................................
......w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFG
HIJSTUVWXYZcdefghijstuvwxyz...........................................
.........................................?..u.a.}V.].[...`Ku....A..j.?
?...S_]E..%.8ye.b?.MZ0W.P.g8E............w.../.....?h_...^.....m#J.W..
n.;`..q..?........P..~..4cu.....K....\o..Y.ys...^..m..4..|:..lm-`'(.,H
'.}...1..U..i./..k.9.asj..........ko...?.d........I..o.x..&...&c....P.
UW.V..t....N...>...?.............f_..~...b..>..:...82......Lr...
......Q.......z........)~.Zm.....g.....r4z3.%...S..Y..d..pA....(.4..=.
U.8.H..F.s.s...*.%J..}.p(J....5..f..S....I....q.n)..k/...q...E.lW...[b
..S...}...b..K......G....k...........R9.IQ.....E."...B..m.......%`.1l.
.{~.rS...f.!.,..N.K..'_.. /$.s..*.)._r0..}NGV....".....Mr.......9.8...
..O.._r9........JG.d....n.Q.n6.r :.!NV.L.7%.:...:...'.....\..Z3.5.u=.I
X........-...u...c.p..g.].m|6....1....f*@.......W....J.v>.$.%z.y#..
..F...B..E......[.}]...j.......?h...k.7"..8...x.RG.w..\7 .A.w5..?$..7.
..<QK..o.k.kC....|vr%..3I2.`...}>".Tn.>V.../a|..?.?.|..|J
<<< skipped >>>


GET /newrank/s_blue_4.gif HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtd.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 2035
Connection: keep-alive
Date: Mon, 01 Jun 2015 11:27:02 GMT
Last-Modified: Thu, 01 Mar 2012 13:53:17 GMT
Expires: Thu, 29 May 2025 11:27:02 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache2.l2de1[0,200-0,H], cache34.l2de1[0,0], cache1.de1[0,200-0,H], cache9.de1[0,0]
Age: 4592405
X-Cache: HIT TCP_MEM_HIT dirn:6:654918820
X-Swift-SaveTime: Mon, 01 Jun 2015 11:27:03 GMT
X-Swift-CacheTime: 315359999
GIF89aC..........p.'......O..Q.G......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!..NETSCAPE2.0.....!...2...,....C..........H......*\.......
..H.".../b.xp#G.....P`$...C.,).d..$M.,.R$...... .eO..........A..(...P.
Lq....(O.E{f..U@V.<.^.z....c.n]:.......%..m]......./..p..=..k..*..&
..(...q&~<....h.P.........<[email protected].;.j..S .HZ.k..{...
Rh.......|3r...2O*.c....c....v...s.....D..?.T..}B..!..)?........!.....
..,............... p ...!.......,...............p......*\x..C...@|8q!E
..1...!.......,..........$....p.......4x..B...:$.P.....D.h.c...!......
.,..........0....8......(4.. A....8..`....:.x1c....R.(@$A.....!.......
,..........0....@......"\[email protected] .A..36.(.#......!.......,
...............p......*\..aB...6<...!.......,............... p ...!
.......,.......... ....p..@....\.. ........"...1f...!.......,.....
<<< skipped >>>

GET /newrank/b_red_1.gif HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtd.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 1003
Connection: keep-alive
Date: Mon, 01 Jun 2015 11:27:03 GMT
Last-Modified: Thu, 01 Mar 2012 13:53:16 GMT
Expires: Thu, 29 May 2025 11:27:03 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache42.l2de1[0,200-0,H], cache45.l2de1[0,0], cache4.de1[0,200-0,H], cache9.de1[0,0]
Age: 4592404
X-Cache: HIT TCP_MEM_HIT dirn:1:791144353
X-Swift-SaveTime: Mon, 01 Jun 2015 11:27:44 GMT
X-Swift-CacheTime: 315359959
GIF89a..................f..3..............f..3..............f..3....f.
.f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3....
..........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3
............f..3..............f..3..............f..3..............f..3
....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...f..f..f..f.ff
.3f..f..f..f..f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3
ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3..3.f3.33..3..3..3..
3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.........
....f..3..............f..3..............f..3....f..f..f..ff.f3.f..3..3
..3..3f.33.3............f..3.......??.>>.<<...............
................  ....  .%%.)).55.55.::.88.==.HH.GG.||.oo.............
.......................!.......,...............H..@........=...u.g.[..
....v...~.*4lg...w...;.._.q........l8....o];..f...3].......M.=lP.a....
<[email protected]#Fx#..]:m`G..7...q.....C.;}...........
...u._n.......7n...38...x...6.c......;....
<<< skipped >>>

GET /newrank/s_blue_4.gif HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtd.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 2035
Connection: keep-alive
Date: Mon, 01 Jun 2015 11:27:02 GMT
Last-Modified: Thu, 01 Mar 2012 13:53:17 GMT
Expires: Thu, 29 May 2025 11:27:02 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache2.l2de1[0,200-0,H], cache34.l2de1[0,0], cache1.de1[0,200-0,H], cache9.de1[0,0]
Age: 4592405
X-Cache: HIT TCP_MEM_HIT dirn:6:654918820
X-Swift-SaveTime: Mon, 01 Jun 2015 11:27:03 GMT
X-Swift-CacheTime: 315359999
GIF89aC..........p.'......O..Q.G......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!..NETSCAPE2.0.....!...2...,....C..........H......*\.......
..H.".../b.xp#G.....P`$...C.,).d..$M.,.R$...... .eO..........A..(...P.
Lq....(O.E{f..U@V.<.^.z....c.n]:.......%..m]......./..p..=..k..*..&
..(...q&~<....h.P.........<[email protected].;.j..S .HZ.k..{...
Rh.......|3r...2O*.c....c....v...s.....D..?.T..}B..!..)?........!.....
..,............... p ...!.......,...............p......*\x..C...@|8q!E
..1...!.......,..........$....p.......4x..B...:$.P.....D.h.c...!......
.,..........0....8......(4.. A....8..`....:.x1c....R.(@$A.....!.......
,..........0....@......"\[email protected] .A..36.(.#......!.......,
...............p......*\..aB...6<...!.......,............... p ...!
.......,.......... ....p..@....\.. ........"...1f...!.......,.....
<<< skipped >>>


GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache3.de1[1,0]
Age: 4957715
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>

GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache3.de1[0,0]
Age: 4957715
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>

GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache3.de1[0,0]
Age: 4957716
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>

GET /tps/i3/TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322.png HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img03.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 4761
Connection: keep-alive
Date: Thu, 28 May 2015 05:58:31 GMT
Last-Modified: Mon, 02 Mar 2015 06:44:38 GMT
Expires: Sun, 25 May 2025 05:58:31 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache7.l2de1[0,200-0,H], cache8.l2de1[6,0], cache6.de1[0,200-0,H], cache3.de1[0,0]
Age: 4957716
X-Cache: HIT TCP_MEM_HIT dirn:2:63522166
X-Swift-SaveTime: Wed, 01 Jul 2015 22:40:14 GMT
X-Swift-CacheTime: 312362297
.PNG........IHDR... ...*.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D2B491D9F06711E3BDADCD86
41B1AD4E" xmpMM:DocumentID="xmp.did:D2B491DAF06711E3BDADCD8641B1AD4E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2B491D7F06711E3BD
ADCD8641B1AD4E" stRef:documentID="xmp.did:D2B491D8F06711E3BDADCD8641B1
AD4E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>[email protected]...........[....[Y...e.'(......
.E.m.......IGC.........u.....g......v.1........2..'.....q...n<.V,..
........:....J...=5........... ...Y.....p....b.V#............E...2#...
........i.......rL........qk...@tRNS..................................
...............................{.D....IDATx....c.8...*.4.P.......V-]k.
.~.o.&.?.3..{..n.Q.2?'.dB..PQK.....D$ .3.["_.h.HeW"_.p|....._U........
[email protected]..'P..y....w.D........N..>Q.W..]...T}...~.P...i.$_:.....}Z
!..q..W.D.$...h;.5.z.$.k...W.......,....>f...<c...!C.......?....
 k/2.%.7.n..M&...Hq.................:.P`d.j......MG...'6S;.M.N..;.
<<< skipped >>>


GET /newrank/b_red_1.gif HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtd.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 1003
Connection: keep-alive
Date: Mon, 01 Jun 2015 11:27:03 GMT
Last-Modified: Thu, 01 Mar 2012 13:53:16 GMT
Expires: Thu, 29 May 2025 11:27:03 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache42.l2de1[0,200-0,H], cache45.l2de1[0,0], cache4.de1[0,200-0,H], cache8.de1[0,0]
Age: 4592404
X-Cache: HIT TCP_MEM_HIT dirn:1:791144353
X-Swift-SaveTime: Mon, 01 Jun 2015 11:27:44 GMT
X-Swift-CacheTime: 315359959
GIF89a..................f..3..............f..3..............f..3....f.
.f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3....
..........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3
............f..3..............f..3..............f..3..............f..3
....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...f..f..f..f.ff
.3f..f..f..f..f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3
ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3..3.f3.33..3..3..3..
3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.........
....f..3..............f..3..............f..3....f..f..f..ff.f3.f..3..3
..3..3f.33.3............f..3.......??.>>.<<...............
................  ....  .%%.)).55.55.::.88.==.HH.GG.||.oo.............
.......................!.......,...............H..@........=...u.g.[..
....v...~.*4lg...w...;.._.q........l8....o];..f...3].......M.=lP.a....
<[email protected]#Fx#..]:m`G..7...q.....C.;}...........
...u._n.......7n...38...x...6.c......;....
<<< skipped >>>

GET /newrank/b_red_1.gif HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtd.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 1003
Connection: keep-alive
Date: Mon, 01 Jun 2015 11:27:03 GMT
Last-Modified: Thu, 01 Mar 2012 13:53:16 GMT
Expires: Thu, 29 May 2025 11:27:03 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache42.l2de1[0,200-0,H], cache45.l2de1[0,0], cache4.de1[0,200-0,H], cache8.de1[0,0]
Age: 4592404
X-Cache: HIT TCP_MEM_HIT dirn:1:791144353
X-Swift-SaveTime: Mon, 01 Jun 2015 11:27:44 GMT
X-Swift-CacheTime: 315359959
GIF89a..................f..3..............f..3..............f..3....f.
.f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3....
..........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3
............f..3..............f..3..............f..3..............f..3
....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...f..f..f..f.ff
.3f..f..f..f..f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3
ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3..3.f3.33..3..3..3..
3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.........
....f..3..............f..3..............f..3....f..f..f..ff.f3.f..3..3
..3..3f.33.3............f..3.......??.>>.<<...............
................  ....  .%%.)).55.55.::.88.==.HH.GG.||.oo.............
.......................!.......,...............H..@........=...u.g.[..
....v...~.*4lg...w...;.._.q........l8....o];..f...3].......M.=lP.a....
<[email protected]#Fx#..]:m`G..7...q.....C.;}...........
...u._n.......7n...38...x...6.c......;....
<<< skipped >>>

GET /newrank/b_red_1.gif HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtd.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/gif
Content-Length: 1003
Connection: keep-alive
Date: Mon, 01 Jun 2015 11:27:03 GMT
Last-Modified: Thu, 01 Mar 2012 13:53:16 GMT
Expires: Thu, 29 May 2025 11:27:03 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Via: cache42.l2de1[0,200-0,H], cache45.l2de1[0,0], cache4.de1[0,200-0,H], cache8.de1[0,0]
Age: 4592404
X-Cache: HIT TCP_MEM_HIT dirn:1:791144353
X-Swift-SaveTime: Mon, 01 Jun 2015 11:27:44 GMT
X-Swift-CacheTime: 315359959
GIF89a..................f..3..............f..3..............f..3....f.
.f..f..ff.f3.f..3..3..3..3f.33.3............f..3..............f..3....
..........f..3..............f..3....f..f..f..ff.f3.f..3..3..3..3f.33.3
............f..3..............f..3..............f..3..............f..3
....f..f..f..ff.f3.f..3..3..3..3f.33.3............f..3...f..f..f..f.ff
.3f..f..f..f..f.ff.3f..f..f..f..f.ff.3f..ff.ff.ff.fffff3ff.f3.f3.f3.f3
ff33f3.f..f..f..f.ff.3f..3..3..3..3.f3.33..3..3..3..3.f3.33..3..3..3..
3.f3.33..3f.3f.3f.3ff3f33f.33.33.33.33f33333.3..3..3..3.f3.33.........
....f..3..............f..3..............f..3....f..f..f..ff.f3.f..3..3
..3..3f.33.3............f..3.......??.>>.<<...............
................  ....  .%%.)).55.55.::.88.==.HH.GG.||.oo.............
.......................!.......,...............H..@........=...u.g.[..
....v...~.*4lg...w...;.._.q........l8....o];..f...3].......M.=lP.a....
<[email protected]#Fx#..]:m`G..7...q.....C.;}...........
...u._n.......7n...38...x...6.c......;..
<<< skipped >>>


GET /ex?i=mm_26632324_6858394_30122664&cb=jsonp_callback_4578&callback=&userid=&o=&f=&n=&re=1276x846&r=1&cah=818&caw=1276&ccd=32&ctz=3&chl=0&cja=1&cpl=0&cmm=0&cf=10.0&cg=d6d9dfb475bd7883ccdccfd926a04030&pvid=a2d395b3589f66cd99d45c51f7d383d8&pvid_1=d636bc85da57fdb18c4abe5fca1fe7ce&ai=0&ac=8892&prk=65573767&cas=prk&cbh=3043&cbw=1000&dx=1&u=http://VVV.2345.com/?k83357698&k=&tt=2345网址导航－开创中国百年品牌（已创建9年零10个月） HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ope.tanx.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 24 Jul 2015 15:06:54 GMT
Content-Type: application/x-javascript;charset=GB2312
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Fri, 24 Jul 2015 15:06:53 GMT
Cache-Control: no-cache
Via: rsfk13457.et2[web,200]
Content-Encoding: gzip
22c.............R.o.0.._.Rm..../[email protected]]'m?lV$....E
w...vj.Y....,=?.>[email protected]_Z...F&.....0.`J#`Y".3.
.G6...3.._)Bj....k...`......ir...s.7.2.g...(3F.>u.:..R.. V..b.....c
R}..b..x......\.o...vf...a.ZhUu..C..S.J..3`....(...IS..........).a.2.C
a..._3.)....X.bJ....W....EH L1...L.i0............P...H...s.n$/v..I.D..
~......F:Z.gIw.wp<._..".......n. 6..}!...Co....M.........G..<f}.
...uV.......uL.jE1.EF...oML.....<$.kr7.UPG...U.z.e..~...d....*..q.R
....f4..#.........b...h...C.O...M...t....3.....*.......5 ...........#.
..Z?>...`..12.....0..



GET /bao/uploaded/i2/113140100518314081/TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4962
Connection: keep-alive
Date: Tue, 26 May 2015 10:24:41 GMT
Last-Modified: Fri, 15 May 2015 12:15:31 GMT
Expires: Fri, 23 May 2025 10:24:41 GMT
Cache-Control: max-age=315360000
Via: cache31.l2de1[0,200-0,H], cache27.l2de1[11,0], cache4.by1[0,200-0,H], cache5.by1[0,0]
Age: 5114547
X-Cache: HIT TCP_MEM_HIT dirn:10:823171386
X-Swift-SaveTime: Wed, 27 May 2015 12:32:55 GMT
X-Swift-CacheTime: 315265906
......JFIF.............C..............................................
......................C...............................................
........................d.d...........................................
.:.........................!..1.AQa.."q.........2B...R#$3.............
..................-.......................!1AQa.q...".....2R..........
....?..o..|m.......;......{....``t.=4..;c..4.^[email protected]........
..t...#[email protected]'..}..I$.}....`[email protected]#..o....WL
..|..@&.....}....s..._....8..h.Vs..`{.y.....gl.......q..m...v..G>]v
;t.....Y.7.A.|.....p>.{..:...........|...X......?-..:.....:|~..#..s
..h.TN.....@&U...Nw.>Z.'0..|...??...j./.../...y .g...4.....h..W.}..
...t.{...t#...>]...d..>...|(..:~{'[email protected];.
....A..=4........@[email protected]..=.4..^.m.c..s...h..r..7....
....|>?.F..y..N......t.:.Ml.y<z.{[email protected]...>Z.......}.
.....`<}................*.F..X............w])m.r....4....s..H.0.jT.
...(57.v....-_.k.:K....R.M..\...a.......3;...-..............Z....V.B.N
..zEi4.....@[email protected]#...!(.M..]{. :IiU....ej.X.Sj.c.!K...9.%..:..\.F..
.c)8............9.}J.H.=.......H....9...#u.-5.heJ-... .J|.[..Q..G.....
 ...Sk..s..G..z.M..9.0w.;....<..ps..4.......N...|...9.:..{..I.A....
U.*T.C.Q.?. m ..n.)X..J.N...U..0Z.v.r]V..6.%n........A*....~.M....?.n.
.......3.4....\.Dv:%8.I..Q.NS..-3..........Cj5...%...<E.......i... 
]d.I.....\.YR..-1z^....%./..Z[ Jr..K....y...G..?.......x).....m.tE...\
8......#....:,.eE.Ha..A...C...$..<..u........Q...Pb.= .....yV.J
<<< skipped >>>

GET /bao/uploaded/i4/13963059380542297/TB2YLuwbXXXXXcBXXXXXXXXXXXX_!!27753963-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 13890
Connection: keep-alive
Date: Tue, 26 May 2015 08:23:56 GMT
Last-Modified: Tue, 18 Nov 2014 01:54:48 GMT
Expires: Fri, 23 May 2025 08:23:56 GMT
Cache-Control: max-age=315360000
Via: cache25.l2de1[0,200-0,H], cache62.l2de1[6,0], cache7.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121792
X-Cache: HIT TCP_MEM_HIT dirn:4:869446987
X-Swift-SaveTime: Thu, 28 May 2015 12:45:16 GMT
X-Swift-CacheTime: 315171520
......JFIF.....d.d.....C..............................................
......................C...............................................
........................d.d...........................................
.G..........................!..1.."AQa..2q.#B...$ru....34R..Ebet...
...................................M.........................!..1A.Q."
aq..#2.....3BRr....C.$&Sbs...ET.c..................?.k..G.i.C.-p.M..
 q.!kRd...%.%...%......g.<.RNns.~\.T...Z..ed..q........R..1.6...Mz.
.Z.r?.4...*...4|.....IcDv`%..k...x.<..d..&.6..5F..B..w5U..@W.(a1.bu
._.V.O7.R.y..*..%.$..m.d..%E _P.^b........$t4..).....LP...8.^:.J...J".
.H..i.........9y..e....[V4.D#.... .M,..-5eKJ.,..KQ..jdv.U..]..J.....
..}.@P)=.....xN...GS.fzh..@.. 8.?........4..}..\.6....UT%,.EJ....?.@..
..-I.>..k]F..^.<i........8.........  ..)$G.H.!j..|...*y..q]nk.g4
4qz<..z......V.X...%T....jx...uh....n..#...(..,.._I./I..i<....uz
....:(.HDqAU/.;...Q.&.W...=..WV"...... EO..........=?.c.4.\.no..O.q...
..W...............(....0.q.U?X.....*..}..0.........w....?........8.?..
'?..MU.?./.g...c...>.*...V.......]O.?.?.8UO...1..'.?.*C.. d......W.
..&.)>.#...~.Gw/.`........[....x[.:... [email protected]*..;
...:pRcT.....<...'!JJ:.s.(..ik...Y.......OSSS0.....X.8.X..,N\....4e
...2...5.^_T...T**e.jzZjH.A...,5.,...V.T......:.J.k6.F..R.E.6M....n...
...d...T....t.P_BW06.]un...#..........q..9.]k..f.._.....*C.C.=<..0.
t...ze..#..h.%y.r.[.^...<..rZ..k.r....'.5.8$.6..%D....N.....i..YTC5
,.O.{.[i2.rUfU5...!/7N..n.$:O...B..P.F.....% JQ.>........&..kg.
<<< skipped >>>

GET /bao/uploaded/i3/113140100500284739/TB2WuRlcVXXXXXQXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 5024
Connection: keep-alive
Date: Thu, 28 May 2015 23:44:46 GMT
Last-Modified: Fri, 15 May 2015 03:21:21 GMT
Expires: Sun, 25 May 2025 23:44:46 GMT
Cache-Control: max-age=315360000
Via: cache32.l2de1[0,200-0,H], cache22.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 4893743
X-Cache: HIT TCP_MEM_HIT dirn:7:525667725
X-Swift-SaveTime: Fri, 10 Jul 2015 06:02:08 GMT
X-Swift-CacheTime: 311708558
......JFIF.....H.H.....C..............................................
......................C...............................................
........................d.d...........................................
.<.........................!..1.."AQa.2q.#Rb...B..$..%.............
...........................6.......................!.1..A.Qaq.."2.....
#...R...b.............?.}k..mh.".."(..".."(..".."(..".."(...y.X-......
x.*R....&.z>.Y..2....<..g...BI..K..Vu'i.A....h...e....%L...}.. .
..^... [email protected].|..>......{..L..^.i.c.-....M.9R#..`:.n.~
......C..CF..'[email protected] .. #....I.5.|g....^ij}....
...GP..z..7..!Zz.".."(..".."(...q`G\...a..2.Z..>........../{..\..84
\..._...-...g.0...V.B...:....Z....9.....j....0y@.\_........:c... p....
6m../|[....p..%9$.}..]..b...........m .eH.....*...|.....'r20.V..#.....
wze.3..F..3f......Bm.%6...'......JI..5.>.xB......r.pm..l}v=.d(g...;
'>.....#3-s.u...l.aIX.*...q..vu......./.n[.....l.U.>.r.../R(..".
."(...s.f..t.......Q...z..zeN.Y...y.y..}...Q{..\..!...7.].......tb.e.J
...8....Rv...wGg}...........wS.;..:.V.WZ..n.y.ZBB.3..7.\...$)eg...U...
.3_Tt.....X..6i~...VH.}..q..l!..iSi..%8.o.yW.J.....<.x..7Q.<.G..
...d..u..F<D...P.{\.x. J.x...(.-*..E.J...[o#.........G]..}jQI...&..
..u.......7.........m.Ov...G./.C...J.>*..%..-...B.%..tK..f..V......
.y.(Y....v...z.#q\s..e...._Jo._.o.\.?.~.[g.k}........(."(.."..>.|[.
[email protected].'..?...]Y.....y8..Z.i=.7?..y....*,DMH...7]E}E.1.\...Z 
.)y.O......dQ.Fo...z..NS..n.......H...r...e.G.BN.z.1.<..C.7....
<<< skipped >>>

GET /bao/uploaded/i3/11023055852225699/TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 3473
Connection: keep-alive
Date: Fri, 03 Jul 2015 06:19:15 GMT
Last-Modified: Tue, 28 Oct 2014 07:48:06 GMT
Expires: Mon, 30 Jun 2025 06:19:15 GMT
Cache-Control: max-age=315360000
Via: cache40.l2de1[0,200-0,H], cache48.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 1846074
X-Cache: HIT TCP_MEM_HIT dirn:5:607456404
X-Swift-SaveTime: Sat, 18 Jul 2015 05:53:25 GMT
X-Swift-CacheTime: 314065550
......JFIF.....`.`.....C..............................................
......................C...............................................
........................d.K.."........................................
.A..........................!1..."AQa..#2q...BC...$;..RTcrs.........
...........................,.........................!1AQ.q."a...b....
............?...[.....J.u<...#.Cu........y..g.........].V...6. nU..
...<.w7.8.8...0....#.......H...NJQR.G.... ...[.H..;.iX.1..O..t.i...
#%u...P.RD.E/O_....7.v...#%2.o..W.$C.j;..s8.?.[.].p...... ...[...gO..Q
.f&...T5'o.JJ.~....I....r.V.<...n..j...Hp.\....]F.. .,..O...z.}..QC
*[email protected]..<.|.8l...4...Z5E..'.q.Z.v..$.3...Iy..C..#.N....
\.2=..L.z..a..B.vgWc.qe......HR...}.I7/..c...x)........?a&|~..h.H5...m
.L.)...h.RO_L..B..u.n.k..Q...{Y...T.......,7.Dc...H..N..&a*e.W........
.s1.O..]...Z......l2)*.o,.....uR.8v.:..`.....tQD..)..{..>....h.|...
.......,.....Q.U.hd....N........4..f....i...YcI.?...>...v..s(..y...
aT..r..]P.Vx.({..H...lnS#..G?..8......fV...W..^../i!.\ap.7........C.|.
kU.}.,.O/.pv..e.i.5l.a.M.uDn..4SL.. ....N9z...F.^... ...C.}cF..K;r....
....Z.4{/...0.k.;...}..^...5=..yA..)p...u.]..'.q..T^..h(.W...d.....Ia.
...O....w.Y.Z.`.PL..-\..#.\.R.......ys...oq....EJ.B;..wj...>zj.....
.0.w.....&.....iZ....^..Yo5.;.....(..I&..Yp...y.~.[?.VB. ;^.....1SH.[.
...5G....?..$.x....OR.`...i...."[email protected]:.Z.o.QTX.1..u.c.Z....T].J...U..
@.pd.*...=4....8b..%.P.F...~./.x....z~..(U.X.\.|......8;2....8........
.I.hc..GA.|...........P.By.{.$.^j....KA...j.......Oq&.q........k.*
<<< skipped >>>

GET /bao/uploaded/i3/14748055712262275/TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4141
Connection: keep-alive
Date: Tue, 26 May 2015 08:44:58 GMT
Last-Modified: Sat, 25 Oct 2014 23:33:14 GMT
Expires: Fri, 23 May 2025 08:44:58 GMT
Cache-Control: max-age=315360000
Via: cache51.l2de1[0,200-0,H], cache61.l2de1[17,0], cache1.by1[0,200-0,H], cache5.by1[0,0]
Age: 5120531
X-Cache: HIT TCP_MEM_HIT dirn:8:856083923
X-Swift-SaveTime: Wed, 27 May 2015 12:37:10 GMT
X-Swift-CacheTime: 315259668
......JFIF.............C..............................................
......................C...............................................
........................d.d...........................................
.9...........................!1A..Qa."2Rbq.....r...$BS................
....................>.........................!.1AQ.."q....a...#2BR
.....3Cb..................?.....J...@...^.z...Z...... .......Q.BE!.M$.
..M.F.NR ..$.. ..J$.*........2;P. 0}.(N....cX..4.nk.. U.....a..!U...).
[email protected].....=...M..{Q.....{s..J.o........ .=..(...$1.......j...C... 0..(
F.....%%....(...(D.\^T!6....$.j.3.............&.N.........6[1S..P.....
.{5a.%....e!.h.{.....m.....-..T=Q..Ji..t....*.O.y...q?H..I...F...CvZ|]
....c.....P........v......L.}d..~b....1....L{\..`[..T.>.......x.D..
Z.#........j.....[.%..a.y; ...r<.jz....rXC........../..K`n.U.Z..w..
..... V.R.h...........-.....qJ..v..<..e....9.......;....y(K.2....#.
....*..!..I...]()&..jR...3D..>P4J.{..aG...%..V.IJw.9...=.OA.=k....}
..Z._...{Xo...q...x....!Y.<...^.F.?.g.S......Maq.g. .M.3.RV....!9.R
.c....W.......u.^.. .}......ge...0.8...J....V.Z]..m....d7.2...n_.]....
....;f0.M..:...1y_..........Fe!(a..t. b...0 ..... ........Q...h...aE..
Y..,.Y.qU...m...(,c..KG.."..,.ax...Mx...=..l...L.I..|.J...,.E.:..C..8.
.....R ..N......a.....O2...-SV....<..G... ...K...M..T......?.y....9
z...k....m,fol....7.8....A..7...Q....v*r.....o.\N..76EuHp.B..%.....:.b
.fF../.....s....P....a......#U....v-..$s.......k...M....&V.....C...B..
q..8..M...V..t...........l.`.q=.P.2wIcCc..=.][email protected]
<<< skipped >>>

GET /bao/uploaded/i3/11023055852225699/TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 3473
Connection: keep-alive
Date: Fri, 03 Jul 2015 06:19:15 GMT
Last-Modified: Tue, 28 Oct 2014 07:48:06 GMT
Expires: Mon, 30 Jun 2025 06:19:15 GMT
Cache-Control: max-age=315360000
Via: cache40.l2de1[0,200-0,H], cache48.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[1,0]
Age: 1846074
X-Cache: HIT TCP_MEM_HIT dirn:5:607456404
X-Swift-SaveTime: Sat, 18 Jul 2015 05:53:25 GMT
X-Swift-CacheTime: 314065550
......JFIF.....`.`.....C..............................................
......................C...............................................
........................d.K.."........................................
.A..........................!1..."AQa..#2q...BC...$;..RTcrs.........
...........................,.........................!1AQ.q."a...b....
............?...[.....J.u<...#.Cu........y..g.........].V...6. nU..
...<.w7.8.8...0....#.......H...NJQR.G.... ...[.H..;.iX.1..O..t.i...
#%u...P.RD.E/O_....7.v...#%2.o..W.$C.j;..s8.?.[.].p...... ...[...gO..Q
.f&...T5'o.JJ.~....I....r.V.<...n..j...Hp.\....]F.. .,..O...z.}..QC
*[email protected]..<.|.8l...4...Z5E..'.q.Z.v..$.3...Iy..C..#.N....
\.2=..L.z..a..B.vgWc.qe......HR...}.I7/..c...x)........?a&|~..h.H5...m
.L.)...h.RO_L..B..u.n.k..Q...{Y...T.......,7.Dc...H..N..&a*e.W........
.s1.O..]...Z......l2)*.o,.....uR.8v.:..`.....tQD..)..{..>....h.|...
.......,.....Q.U.hd....N........4..f....i...YcI.?...>...v..s(..y...
aT..r..]P.Vx.({..H...lnS#..G?..8......fV...W..^../i!.\ap.7........C.|.
kU.}.,.O/.pv..e.i.5l.a.M.uDn..4SL.. ....N9z...F.^... ...C.}cF..K;r....
....Z.4{/...0.k.;...}..^...5=..yA..)p...u.]..'.q..T^..h(.W...d.....Ia.
...O....w.Y.Z.`.PL..-\..#.\.R.......ys...oq....EJ.B;..wj...>zj.....
.0.w.....&.....iZ....^..Yo5.;.....(..I&..Yp...y.~.[?.VB. ;^.....1SH.[.
...5G....?..$.x....OR.`...i...."[email protected]:.Z.o.QTX.1..u.c.Z....T].J...U..
@.pd.*...=4....8b..%.P.F...~./.x....z~..(U.X.\.|......8;2....8........
.I.hc..GA.|...........P.By.{.$.^j....KA...j.......Oq&.q........k.*
<<< skipped >>>

GET /bao/uploaded/i2/18763055963576934/TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15950
Connection: keep-alive
Date: Tue, 26 May 2015 23:46:20 GMT
Last-Modified: Mon, 27 Oct 2014 08:40:21 GMT
Expires: Fri, 23 May 2025 23:46:20 GMT
Cache-Control: max-age=315360000
Via: cache17.l2de1[0,200-0,H], cache10.l2de1[13,0], cache8.by1[0,200-0,H], cache5.by1[0,0]
Age: 5066449
X-Cache: HIT TCP_MEM_HIT dirn:1:703417228
X-Swift-SaveTime: Fri, 24 Jul 2015 01:50:02 GMT
X-Swift-CacheTime: 310341378
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
...@.............................!..1"A.2Q.#aq...$3..CRrt4BDS.........
.............................R......................!...1.AQ."aq......
..2B..#$....%4RberCcdu.....3FV......................?.>5.....LL.]Xu
V.L7..A.h.......V.S.c....F/ .....K.TW.M:.. ..IK.d...T.,6YZ.^y.9{..3...
..@!/P...Gu... ..."@.=5..U..C.S-h..]b...d.R.m.wO...)....YC.....=:.i.tg
[.........r.....C2hR.}E..y..!....e...D*.h..}2..P....@[email protected]
y.]y.i.[......`...p.<\.......%..;k-...uJ..!...B...)[email protected]....
...._..........?....o\..n=..V...4..FF....I.8.3....%......?.-...C...*#.
sS;~......7u...5.].%]..jYJ..*.Lc.%>A....&.../R\H.;{............:W..
xb....h([email protected][O.Z...?.^..d.#9.2b...n>..|z&x;0.{.E.g..;....~C.
..5......Y...Aqg(....'...7..M..Y...1..8.D...a'.Zy.....}.fn...X.;...-.O
.:~]B.z:.v.....k.n.U...5j..z...m)-.njKe...&.?.STf/...)...R...JF.t..JQ.
.I ;'H.Z.....2..E5....[.e ..-S:...$#Yq.)%A)..W.|w.grq~.T..G$S....*)Zy.
J#.Rp3....... ..o.....vs....>.U...G..G....F...NT)...n.>$.P..h...
..q.........~~...m3..4.q.../.".q.|.....w).s....."0n.....gS.~.....}z^..
.........N.7....6..I....c.B.G....$H.."...T".6....i44..3.......HS.h%:..
....)....M...(....2.o..T!.jT. .....Qv..J..D'.0B.)...G.z.Cy..y...w.y...
]y.lU...,...qJ*Q$..O...Px...@....,.. .1...,.....LL'/[email protected]
.^....}.R.y...G@.....*.$.k.*..q......e......G.....GH.x.E..^.g...K.
<<< skipped >>>

GET /bao/uploaded/i1/13600056495225268/TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8121
Connection: keep-alive
Date: Wed, 27 May 2015 12:09:06 GMT
Last-Modified: Wed, 29 Oct 2014 13:34:54 GMT
Expires: Sat, 24 May 2025 12:09:06 GMT
Cache-Control: max-age=315360000
Via: cache6.l2de1[0,200-0,H], cache44.l2de1[0,0], cache5.by1[0,200-0,H], cache5.by1[0,0]
Age: 5021883
X-Cache: HIT TCP_HIT dirn:9:839084701
X-Swift-SaveTime: Wed, 27 May 2015 12:32:56 GMT
X-Swift-CacheTime: 315358570
......JFIF.....`.`.....C..............................................
......................C...............................................
........................x.x...........................................
.<.........................!..1.A."Qa.2Bq..#R..$%b......3..........
..........................4.........................!1.AQ."aq.2....#B.
......$............?..R......8(s.us....p.H.......h.e.F...V...=zI....c.
....b..;-L.i.S....|.w}.......[.?5...c..............-....k..ks..2...mu.
10.T...@%X........>.{.T4.G.n..;......*..-V...kh....53....6D......).
 .6...,#..?....cjY!......x.Z0..]...}..%...b.j{......LY.9.G\. .nT.*...m
..OVN.a:...z#AD.k.\O9..;)..r........E.:...4...V..FRUKI#g...<.=....S
T2._...O..Q..U3.....-. .>.9...i.....hBZ...,;.H.........rt!yX.._..04
.o..9.....Ddk.Q..Y.5b.V...y....(...g..r.!.....iX.tN......Q......].>
.........M-f?.p..K.....#V.j....b..L..K.=....ST.[n7........5).... $..`.
......G..!....o*..`G4L..N.........==.2....n.Xk%....1.C......C...w.....
.<N.....Z.W.|.vG..dy>B.)...T........${.{......E1.a<.w]...'...
k..'...0NF.H...]......Q<$..?......ST..||2....Q..E3....w..!...p..E.f
.)[email protected]'.hB.....C.A..;eW.=........n.d4q7.S.!.s!.|...W
..?.......X~**voa.t.\2..$g.....g.1...,...-.....-E.w...Z. .....=...G.y.
.F.3.g.B..U_..V.i..O..#.....@j!3)3..TE^Ji.... . ..).....(j..T.*....'. 
....;/x. ....T?.n...X...#.9....-..r....J..g.Dt........?....*.ZI[.J..6.
..j.TIV.xy.U.s....g..|.q.2.4.TI...q....:...-......H...dX.....nNZn.....
3..#..H...H..n;.....4.....U..0.G...*..d.24...VixR.UIAP&.v...).coX.
<<< skipped >>>

GET /imgextra/i4/32492444/T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4142
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:06 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache38.l2de1[0,200-0,H], cache10.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:2:872955165
X-Swift-SaveTime: Tue, 26 May 2015 16:45:50 GMT
X-Swift-CacheTime: 31505942
......JFIF.....d.d.....C..............................................
#....!!!..$'$ &. ! ...C........... ...                                
                  ......x.x...........................................
.7..........................!1..AQ."aq..2#R..B......Sbr...............
................,........................!1A.Q"2a......q#B............
.?.....P..@(./....d.9.7..........ef..h...K.....y......;w......99......
%...$....[O......=@....#E)v_.....G...A...}._.G%..)..6tt....s......4...
..3..D(......P..@(..G.Ei....-...fY.Dw. .X..C....T1.......|..;oO.z~....
.|...p..V..8..l.y.n.gM......v..]:KK...1".........h......`Im.P....t....
..).y..E..%.#......9............P..@(.....P.G...m.....G$dd2.....R..Q[i
.ck..n.e.......i"U17..C..1.. ............O..4...;...VH....D..G ....=?5
.F.2Q.l....u[.*mBY...D.e1.*........=.su.;.x%..pF*R.......P..@(....9 .:
.(..N..K.....k3.=R...2Ckgv.......H.(?..z.MO.{..~...o....S.]..Ii,.....J
G".......NO~D.........*.$d....X.x/..<V."Z.1(p..d.g...U...FM?.~?....
.{.Y...;....WW.{5..RG...=.0..P..U.....$.;)9;fY. x.....=..nn/.,#k. ..K.
..Ux....Y...p.v...|..2r.7...P..@(...*...H...._...{m_X..............P..
.z..F#n\t..m..u.j......D..eQ...j.es...W.e.WP.r..7.*.V..EG(.Gk7..%..~..
..=.c..u..Iul.......$>.....v.x.. .....w.......DpU.'.^.}3.Z...[M....
.u...6.i9...r.6N....'.p:.I;To..mx=(........e...5.)........T......P..@(
......SX...8oe.> j... >.e....`..$......^...O..MT.$...IK.3.......
..Q.....M.....o.;:................%..".4 W.u.Kh..L..!8..@.'.Ua..vw3.T.
..t..."I.M%...|.s.s.....U......rq..H.Ek.6........}NEk.r.[......fx|
<<< skipped >>>

GET /imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 22281
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Sat, 02 Nov 2013 18:18:09 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache34.l2de1[0,200-0,H], cache30.l2de1[0,0], cache7.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:1:852709248
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
.9............................!..1."A#2Qa..$Bq.%3R.....S..............
.....................?........................!...1."AQ.aq.#2B.......$
...3b.4Rr.Sc.............?...&4........w.\d._rf...sq..U7......S~..#:..
.s..s.>.$....A...L..''.cr...pq.........y...*K...vU.....H.......c|.w
......}.t#2jJ....w......v.......Xi.*..#>..|X.L..d.A..o....5.l."....
.j#.o....YUq.5T.s..""}.|t...-%5...r|....'....[\..L.EG,....`.3.c.#|..1.
g.ZRR%AN,..'.e.y"T5.| x..JA.1.....2{..x..6..d......^.7..V...E..H.l....
..#.!RDdo.....q..Q.q& 5....1.j\.X..BIF...G.s=...8-.u!.K!.../A...w.....
.".px.9C......WE..)....R.jP3..%p......R0....#.....P.....#.e.`.y...Z...
......M.e........Mm%5%s.....I7......G5.CA`.r.<.IbB......h..Kh%.. ..
...pS.T2Kx......"....Y.K".....u.........5.lW....7l..."....\(.)a...fC.?
r`! ..Q..o.~Gm..zh.....DC..-.u......|zlpm .t.S....I.&..5.,p.,t..Yr...u
.x.~X......j^A\.3n..KQ...p..M..L........-.D5P.....=.&.KUq.....L.}0...v
.z..5..R%..j.m.cJ...s..d.uj..J..R.N..Og.g..s.Wm>...].,..6.....`H.8.
=.......6._B.:.m3u...AI..(.F0Gc...~.3]/D.).CS....0x.. .!p...v.......h.
.:..$6..k.................x.&.......r.Y...#.l..r.....[5...o....O..<
I..l..I.,[email protected]..*&5......B. V.)....l.......6.js...{."#..
..^~9&.I..aI?.T]..~.{Eg..R../.G.P.|.=..c.......8.t..|.......Y.d.j=....
...(.O.OG....o...Wm....m...{......-...XaN.m....n}?^4N8E.\.........
<<< skipped >>>

GET /imgextra/i4/10000029325755046/T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 23980
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Mon, 14 Oct 2013 18:30:03 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache48.l2de1[0,200-0,H], cache29.l2de1[0,0], cache4.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:1:816889293
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
...G.............................!.1."A..Qa#23q..$Bb.....4Rr..]ETce.
.......................................P...........................!.1
.."A.Q.#2Ba.q...$3C.......GRrs.....&'5DEScu...............?.....o...
.m....;.}...u._..............|...O.............F.o.a..6.......m....NA.
..@..]*.WV..U..i..Q.%.dRYv.l.]P:..E..B...1.~.(.2.!e.....8...q...R.;.6.
I....z....E.[.b..\E......*............`...J`.......p.D.`A.......:.....
4...fy........wY.W...Y/$Xf.....V..k..Z2}.....H.&....qH.0kZ.V.5. .... x
..@$/...a....mR..m....3..bv.;.F.`v.............Bb.b....TH~.....y*...6Y
9...P..X....7pE.tb\8.N{...Na)....`..X.Wm.e.6..<.ER...G......U......
..^x..9$.dndz|fw....s.^*.U$.#.=...S.K;..Q.f.uawM....B.u........-...d.B
.`<t...f...F:'U%o,1.:f.......x.zv.m.'..!..^ ..*.u.ZI.....R^...Wd}R.
s.&.u.vS.rJ......6..(.P.8W$c.E....5....(..X...g.C..D..MlPh.S..e.(.... 
5r4s.^.b...,H......Q........]..=%Y.=.9..a..,.J..=..X.h%..}.I..........
t...:cL..;.J%zNT!..$\[email protected] 3qU...
.rx...ov;l..GB.=;...._.L.z..F,...N...2..>.....].....P... .[..C.O...
~....o.....6K..!..1...t.N.>.P.0.u.R.[...Y....G.>.=......G!....%.
.V.j/ua...).e?fRA.R...w!/.l;..v..u.O...iu.(M.@...............`w$......
.;.;.....n...=.....U..P.`[email protected]>.....WX\................l.....=[.
....^.........C.....).....u~....<G.......kP........9E.J}zTkH...
<<< skipped >>>

GET /imgextra/i2/10000026291293357/T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 12594
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Tue, 06 Aug 2013 05:28:57 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache10.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:3:784566793
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
.PNG........IHDR...x...x.............gAMA......a.... cHRM..z&.........
.....u0...`..:....p..Q<....bKGD............0IIDATx...w.^gu/..z.._.^
4j..dc.....`.M.......O.$.p.....b.=!'$!.!.........'.c...na.bi......]...
..$[$.{..f..K.33.=..].....}..;..eC.T..'.....}a...0.......{..W..#..p.9.
....Z-i..V,u..b!~f.....'/...juq.Y.y.K..cHi].....o..Z..Q_W%m$.].q..5.q.
[email protected].|... ...L...../.l....hy.......#.$...J.R.Q.\.:....4"...7
n.6;..'..:k2BTJ'i. '.Y.%.@Df^jn......j...........qyG....0...,)Uk4.,'A.
d-.v.Y....jx..,..T..K..1DK..cWC.BW.5.|..`...{_m..f.....kx.3i)[email protected]
.e.....0:v..;....R...X[...CI3y...un...\k................:b*.....9.$..R
J...JIk..o.f.X .....Z^@gY....6.?.^.K%....!.9.[)...S.......a..5..$i....
'@...!.j.......j..9......$M..w.....|!......P.(.R...Zi.%Q.H.IJ!!b d...v
..p..~........L.../......4.tT*[email protected].%..^....3.LO
[email protected]&.D*......!..f3Q....oG7..
.......tt.#.....u}.]t........Y.fI.........ZO.......k6g..$I%..(........
Zv@#"./...R....^.i...... e.Ax........................k8..D.Z...\s.Z..R
.r.-;....{..|.\r...V.t....\...#.....$.<.4gg..16....d......gA.,57..r
3.@D...:...B.P*.....ID...s..^0#3...:.....S..:}.J..C...?...cXNQ.....M..
.q...~M}...c..O.....[..s..@.. U......T..........[./......,;..m...s/}Y1
*.....~..'.\[email protected]...{....L.B.U...{D......,.\FX/G.. ..U.C..
...............3.>../=..i...#cO?.c..}}.../..^[email protected]..
..8.,.3....5/..._..t.k...Z.G...[w.}..........|.y.<...'..>C....5.
:...r..L.C.T...a.b-y......C...?.....'?.=...o......N..W...{wm..._..
<<< skipped >>>

GET /imgextra/i4/10000019906692861/T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16051
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Fri, 01 Mar 2013 08:19:11 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache40.l2de1[0,200-0,H], cache36.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[1,0]
Age: 5121736
X-Cache: HIT TCP_MEM_HIT dirn:0:46899697
X-Swift-SaveTime: Tue, 26 May 2015 17:08:27 GMT
X-Swift-CacheTime: 31504586
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...<.............................!.1.."2A...Qaq......#$B.Rbr.......
.............................A.........................!.1A.."Qaq....#
2...B..$Rb...3r...%CS..............?..Q|..O..'C.>._...0i?.....7....
&0QD.ME.9SI".E.9..M2.Ls..........h.m..`c...u...'....I:..Y.[]....]..C..
.%b&...1A.%$..~~P.UU..0....u^!...%.^.......P ....)..E..-.....]....r.n.
53T iX.%..B..n..c...#.......)........O...w9a.C.>.. ..N9t..D"".s.f.n
....<EQ..e...J.....V.j"..PQ.......-.8..GD-..u.X.."....c.`.iW.dV.>
;.o).bi.j.M.)....Y2Q8..2.5._......{.l.w..Va.e........X...K....$...q...
!..Y;...9......N.........Z..K,.......:(&'o$...O.C."*....9{..U....jz.i.
T.nX..%^.M..o.,X3.R.;.d..._......t...!..a..3..5B..Y.~.......).bY... ..
......1.S.......7..h3zj:.j.J.l.".. ..X.....9.b.|.i('..S.....X.\..:.W..
..m..X.mwY.....D.!E.Zj,...B.P...@.>fe....A..*...;...........-ECTD@$
L....l..u./s....w.kk........v...<..ek...W.;.-"..i..*c.H......1H....
..qJ....g.=..0UZ.*nB......=O...|...p401....A..G#..`....~...4...-.|....
.?.k.....u.?..'..}t|&...C.......<4.k..s$....n..C..H.ru.....d..]...J
>:d..F#...!Q.... .<........o..Yb.<..,....AF....3.B...@\..[c..
......P...Mgsm$.GH..`d..%\.n.1.u..C..;(O.....FYU6z......w..lY..;.y..O.
..J. Y....V.......!..P..".V=v....T.]....lL..S~..J..r...[.w).t...c...b$
S...........'.<'.i..."[.}I]..@}.p...4.I......AUmx...8..}&..-{..
<<< skipped >>>

GET /imgextra/i4/32492444/T2SHVpXDFaXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6433
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:07 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache55.l2de1[0,200-0,H], cache31.l2de1[1,0], cache5.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121736
X-Cache: HIT TCP_MEM_HIT dirn:6:833088084
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517509
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
F..........................!..1A."Qa.q..2..#3B....$4Rbr...%CSc........
..............................-.....................!1...AQ.q...."a.B.
................?..|K....@L._.....J[R.%.....k$...u.]..k....zyu..t.....
s...._..~.....f..~..-R'..SQP.J)..C..h2.....k.P%..A......O.Nm(._E.tp>
;....lU...?3.G.8.....YuAsP.T....t...0.C..$..{\_E..........~k.........J
.y.;T)...H....O.f.! ....*...JA ...H..lp.}/M....&.yO..G_O............ .
E.....Z../0.Y-...SdM-...r. ..ck.k.....y{.7.bU...E....$......P.R.KHu..A
 ..iR.....^Kpd.o.."4.H.......k}k.....M.. ..3v3...f...L..w.%..k..=.....
....X.....m..../;s......l..........rron.F.k.....}..X.O..]......)..d..I
.^RRG.y.;~8M5.5.#..a.W..:M%.8.[..K..(..<.)@..5...T_c..2..Z....Z..a.
.}P........,.F.V..T.rT...MF.IC,.Z..OD)GN...BE............R.....Q......
-."..a.4....)..-......7%....2...rz._..-......~S..w......=..C..N.....KS
h....... .%.. y.B../.]o2..}..E>.........Z.W..KS.B.V. @S.qA..H*Y% ..
no.'S....<...>9wEd....X....4..\.k.....-k@QI*Kd.pA..8.FHFI.......
....A....iGp.w........Sulr.U.J.i%Q...I.W..c...M..#.A..D.u......-.Pu..Q
..-...".w{"K4.22....b.] ..#%"..)J.........Ol..l-....tF.IO..([.G...iV.E
......Q.L.Y$..S.X..w......4.-.1.#:.....i.\k.G7Z.om.-a.....f...b2:..%e.
RP..iqLd.HK\...$....q..........................b5.~..}[email protected]>
..%...8..g......M.t.....,R{.K^....L...u.'....S.6..@^...[iJ.. ....!
<<< skipped >>>

GET /imgextra/i3/32492444/T2T6BAXslbXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8150
Connection: keep-alive
Date: Tue, 26 May 2015 08:27:30 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:08 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache24.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121579
X-Cache: HIT TCP_MEM_HIT dirn:4:785215758
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517666
......JFIF.............C.....................................!........
'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$$$$$$$$$......x.x...........................................
A.........................!.1."A.2Qaq.....#Rr....$3B.Ss..Lb.........
.........................6......................!..1AQ.."aq....2.....B
R....#..............?.....j.b..u...VJ....r~z(..".U.y..@A.;.y..h.!.q.KA
....]...I.B...x-........t*.....^-.4.1.$*B......p...../.qw..%..T..-.eb.
..w?\......iL....m.........qR7.4I$q..>....L.Fp.J..[t../.g.....*c..Z
1N....I ..7`..>:[S...<*5...U..V..{g..4..s.>.\...%..:.-....Xc.
[email protected].]j.....1"e...p}5...v...!,eo.v."W.........../.
5;UI........ZA.....88I.......@w .....e...,.TUuUP.......cL...2...:nz..s
 .i[[email protected]...).=.yB~..RZ2J.k.D.k.J.m.........../s.AW.p.!]cl.
:Zip.E....g..`.R....]2S..R..Q..25vr.^.\..1...x..O...}tb.n#VP/e}9E...{.
M$..M...L..3.!0O..d..|t.G..Fy].z...R..H..E........A$c...g.E.W-..M...].
KV....9...([email protected]}.........#.A\..O%mm.....3LU#BI..4.o.R.9[-..........N
G*...O1..d..H.ui..Z`..UP.*..l..;.|.5....8.p.<[Rt..E..@):r.x.;uU...S
..".e..E.K..uY4..^..`.xG.....K.5....}.. .Y|....?...5...A...r |...VTJ~n
q.9.....o...Pl....w...u.1p...M..^.wp6.b~.t....My$..:..o.9.7.......?...
w.Ha.......L...........R...A.I]}ZnV L.B2...S.....`.:}.k.5qyR.. >.:z
.;E....-....l.6.7)....CS.I*...AN.....{=.....d....B.a.I m%\.....g.g....
...D{..3u...~j{=Us..NE5Y..!.........c..Us7.)fN...uM..%..<..&......2
..$(....r8.#..X.=..K....MU...UN..!%.w'.\j...@.=.).......9.T(T.c...
<<< skipped >>>

GET /imgextra/i1/32492444/T21ZRnXEJaXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6805
Connection: keep-alive
Date: Tue, 26 May 2015 08:27:30 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:07 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache44.l2de1[0,200-0,H], cache30.l2de1[0,0], cache7.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121579
X-Cache: HIT TCP_MEM_HIT dirn:3:854160172
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517666
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
.?.........................!.1A..."Qa.q..#....2BR..$3b....r..c........
........................,.....................!..1.AQ"aq......2..B....
.........?..j................#..&.=.....:..}F....-4..7.4sn4.7..;..]...
.........b.5a...t..JN..S.\..........x.K...wi.D......G..WE.[n.........y
TT.%.,.#".....I.Z6..N._.R.Vb.Ks.t...M.(T...a...i....*....D...q..3D.6..
[email protected]..".*.]#lZDNW..(.h........-$f .0....Q..
.......`....D.C.....<..........M..x.}..;.e...........7C...n:.5.K...
..O..%gF...k.....Ug..P.....EN"C.I...H.....V9!.J...N......=N.......?...
*...)#.j..`....w........k&.d..c..Mh.../i'R.G..C.k.V..TH..1.....-.H...&
lt;.._......9.D.;.....1.......b\..b.P......%.j7.'."...Y6.........i.H.8
...e|3_I.R..}'....u..5m/.!2.[."..o..H.\c.W.y....]4..=.n.....O......gy;
R.6C&GKG1.[.g/ ......4/\uF.'........$.... d. <...*..3.m.|V...&...g.
J..)H...M..Ho.7;[..!...Z.d.u.S..Uf.....?.....9p'.r9.Q....J.N..J....5.y
.....[B&.......$.T.K...s......0*.1..Q.LW....v?......Sd..KA.CE.#xdF..TY
...y.......(....MESMv,L......A.`".bB.,.n9.....|....d.oO...7....n~.y...
.z......R.|.$..!.;.[.../c..m..q. 01 ..P....0$"B.#9>.:...."D.Dd..~d.
?..1EU<.. tYb`....`n..=.u.j../kR]....g5..i...UI_.U..OUZPA.......H..
b.7:6....5&.(..?.......x...>.9..fj..uh..x#.......aE............. l.
W%..uu|.X..2.. .V0...SI......6......'.O....y....c ..<.9eVe%..4.
<<< skipped >>>

GET /imgextra/i1/32492444/T2hf9kXzdaXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 14369
Connection: keep-alive
Date: Tue, 26 May 2015 08:27:30 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:07 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache10.l2de1[0,200-0,H], cache51.l2de1[1,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121579
X-Cache: HIT TCP_MEM_HIT dirn:11:874121507
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517666
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
.=.........................!...1..AQ."a..2q.....#$3R...&BCS...........
........................=.......................!..1A.."Qaq....2......
B..#[email protected]..*'.4f.."......=..<..2M
,v........14...;......E."c...........^.*.|V4...|:9...z....j\.].*......
..E3T..u......G..d..8....HM..s.!;........S5..!.o.Yk.......$.`....5....
2ny=...`.%.Bj.C...Ap]6Sj..4.."U...N.r..[!..Q0.....PI.v....)..H'NQ}Y...
;W.....~[......\'K..-...uT..@.........!.gyLI.m.._.c.<....7...R...n.
.:....]x....Y...Z.......d.....Z.6.f3c;p......n..^..o......e ..z..L..T.
.Xyn..W.ZZ.*...Rd..).!@m.*..T5.G.J....k;...E..>..$u.N.a..B.../....?
.e.."fK........O.@'.[...oh..._u.$.P...A..0..A.#$.y.9:.....t:...u)%I#.?
t..1.T=.::\{g>z..p.3yI.....I6h.............V)...0.}P.-.'.2p'RG!...l
-...<N0...q.IRT.3..4G.U.....a.Y;..XBPFa.J....w..F$.[]..~.>.....7
........t....}....E.Q..l9.G.....E.Q [email protected].....]
!.7.zg...........}.~.........QF.H.@p?.r...`3.E.M/...>...p}}sE.)0.;.
.w......o...,QTw....7Et....T.5...i.4.D......VfMd...Ui..6(..V!..... l=q
....&..7GD$.~dG...:..Z.]._..,.vO.......%P3;k&.K......Y.yW.[v.M....s@Q.
..."..,.q..-...7em....,..g....".v..n..;...m..8..$....U.1...#...{...../
.C%.J.v....j....7`&w..kGZi.o)T.m%[email protected]=.k].JV......IXjw...O.1."..'
(..f..C)..R..x....]v.f.2F...I..H..1....6:...,...m..S.)...(......*%
<<< skipped >>>

GET /imgextra/i1/32492444/T2lO0zXE4aXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 5603
Connection: keep-alive
Date: Tue, 26 May 2015 08:27:30 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:06 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache34.l2de1[0,200-0,H], cache28.l2de1[1,0], cache7.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121579
X-Cache: HIT TCP_MEM_HIT dirn:1:852979775
X-Swift-SaveTime: Tue, 26 May 2015 13:33:05 GMT
X-Swift-CacheTime: 31517665
......JFIF.............C..............................................
......................C...............................................
........................x.x.."........................................
.D.........................!..1A.Qa.."q.#2....$Br......s...%4RSbd.....
..............................3.........................!1A..."Qaq..2r
....B...#S............?......t.r.eUn.......a.0.{m~........_...ir....W.
.5.8...d..\W..=pv...S|S.*...i.<...jwV.....W.H...... m{.....#..UV..c
.46`.{...\....V...........t..|....>.&..I..$.H..........0.9.S<.C4
.8.cb...H..]....Xb...#.......Q...#.j.)...J...`|.ym....l.......,{....;.
.:[email protected]#.0..Q...\.n......Wml.4H.].....~.........x...d..G..r.
...k.n>..jk)..u.1D./;3-.....{....1...H.&.Z....n......o.3.....[..1.~
"..{..O.. o.k.e.\..I..Ue.R.[..........U.3*K_"%*....././m.....k......).
Q#|j..o./...O1......'U 2G...-b-./.....86...A..5.....sK'.....xm.?.o....
.k.-..f...5-$q..y.E...vi_.i.N..cwF^.GL=$.lE....F...(.%...W]..F.......F
.............zzS)J.e[?..o....5...PE.S..nb[;.1.....iU...... ..K.V..t..u
DM........z.F..a..o..<*.I.F{)K..v.<..F ..n......)..`.......J..S3
4.HE.r.P..e=....&FX.......6.........2S.S....M4@G...]T1.c.T..:./d.....9
........v.<V...3..6.9.......(%.&..*...&k.=........\.W...<.=.....
/..J....-L.N]..9a.....Z.....j....;%\O.....A..n.X/..-8...#.c1...u.".X.,
Gl?edZ.n..o4....S....}..rA........U.........r.MC..,.. ..N....A.#C#.z..
IA.YD.O....8,...>...........}.ITX....S0.DB2..<...;.X.:-....GRjd.
3M4..cU..^.VS.....!"..f...YeP.U.da{..N.....D...c....:.AC25k...UU..
<<< skipped >>>

GET /imgextra/i4/32492444/T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4142
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:06 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache38.l2de1[0,200-0,H], cache10.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:2:872955165
X-Swift-SaveTime: Tue, 26 May 2015 16:45:50 GMT
X-Swift-CacheTime: 31505942
......JFIF.....d.d.....C..............................................
#....!!!..$'$ &. ! ...C........... ...                                
                  ......x.x...........................................
.7..........................!1..AQ."aq..2#R..B......Sbr...............
................,........................!1A.Q"2a......q#B............
.?.....P..@(./....d.9.7..........ef..h...K.....y......;w......99......
%...$....[O......=@....#E)v_.....G...A...}._.G%..)..6tt....s......4...
..3..D(......P..@(..G.Ei....-...fY.Dw. .X..C....T1.......|..;oO.z~....
.|...p..V..8..l.y.n.gM......v..]:KK...1".........h......`Im.P....t....
..).y..E..%.#......9............P..@(.....P.G...m.....G$dd2.....R..Q[i
.ck..n.e.......i"U17..C..1.. ............O..4...;...VH....D..G ....=?5
.F.2Q.l....u[.*mBY...D.e1.*........=.su.;.x%..pF*R.......P..@(....9 .:
.(..N..K.....k3.=R...2Ckgv.......H.(?..z.MO.{..~...o....S.]..Ii,.....J
G".......NO~D.........*.$d....X.x/..<V."Z.1(p..d.g...U...FM?.~?....
.{.Y...;....WW.{5..RG...=.0..P..U.....$.;)9;fY. x.....=..nn/.,#k. ..K.
..Ux....Y...p.v...|..2r.7...P..@(...*...H...._...{m_X..............P..
.z..F#n\t..m..u.j......D..eQ...j.es...W.e.WP.r..7.*.V..EG(.Gk7..%..~..
..=.c..u..Iul.......$>.....v.x.. .....w.......DpU.'.^.}3.Z...[M....
.u...6.i9...r.6N....'.p:.I;To..mx=(........e...5.)........T......P..@(
......SX...8oe.> j... >.e....`..$......^...O..MT.$...IK.3.......
..Q.....M.....o.;:................%..".4 W.u.Kh..L..!8..@.'.Ua..vw3.T.
..t..."I.M%...|.s.s.....U......rq..H.Ek.6........}NEk.r.[......fx|
<<< skipped >>>

GET /imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 53763
Connection: keep-alive
Date: Tue, 26 May 2015 09:24:38 GMT
Last-Modified: Sat, 02 Nov 2013 18:18:09 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache10.l2de1[0,200-0,H], cache19.l2de1[11,0], cache6.by1[0,200-0,H], cache5.by1[1,0]
Age: 5118152
X-Cache: HIT TCP_HIT dirn:0:800938566
X-Swift-SaveTime: Thu, 28 May 2015 15:57:24 GMT
X-Swift-CacheTime: 31339634
......JFIF.....H.H.....C..............................................
......................C...............................................
......................................................................
..E.........................!..."1A..2Q.#aqB....$R..3b...Cr..Sc..ET.
...................................J.........................!.1AQ."a.
2q...B.....#...3R..$brL..S....Dcd...............?....qEMY[..G.m...7.
.D>......v...}^..~.ba..x....n..g.ER..4"...8..p0v.x.?........2h.)U..
."...?\$.....N.....>.~..w...q.S........`s...G.W...vS.L(.=q.....*...
..8.............0Dz|W.ms.........[[email protected]./..z..!...Z.*..c....
/.Z.'@.$.O,6P......I9..ZvR..,|..........1T....z.....k...c.$.Fb;.n[...[
..L.U.ib....=........._._.......3....P...uD.%^.dc#.l...i.?..z....78...
2........C.........O.....M..9....}}o.U.....g...on.....`k?...llM.......
C.<..-A....U..G...i.T.....y..rJ v.g......!.V^/..f.f.{)..zb..<..;
$.3.?.._.7". m'..n.=.c..............e..V.4...zA..S.[..Up...-.B..R.#..[
[email protected]<..E.U.E...........C-x4.....>.:.#.......\m.
..fi;k..=nzxE......J....%........B.......*.. .....h.........-...2..jH.
........K..c5....j...R..X..R.x.i.....\.E".....gD..r.......O.y.........
....J.>....v..w....fca$T......9..buA YQ.bf....o..C..ZvK.S&..r...K.,
r,..n.".........{a.,.<.A........Fs.?.."...5........:.(\HmzBz....p..
Ll...Y@.....=.0...I.f...H...q5.}09|M...}.^.AkV.Q.j.dWi........x...R1.m
.=*.`.,...Z.......v.........H...`n,I.......>..=....t}.c.K}mE...MP.Q
.M.5t..f...p...,EC.r.z.M.YVe8.(A.I.....k..=...LG$.....i ...j......
<<< skipped >>>

GET /imgextra/i4/10000029325755046/T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 23980
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Mon, 14 Oct 2013 18:30:03 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache48.l2de1[0,200-0,H], cache29.l2de1[0,0], cache4.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:1:816889293
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
...G.............................!.1."A..Qa#23q..$Bb.....4Rr..]ETce.
.......................................P...........................!.1
.."A.Q.#2Ba.q...$3C.......GRrs.....&'5DEScu...............?.....o...
.m....;.}...u._..............|...O.............F.o.a..6.......m....NA.
..@..]*.WV..U..i..Q.%.dRYv.l.]P:..E..B...1.~.(.2.!e.....8...q...R.;.6.
I....z....E.[.b..\E......*............`...J`.......p.D.`A.......:.....
4...fy........wY.W...Y/$Xf.....V..k..Z2}.....H.&....qH.0kZ.V.5. .... x
..@$/...a....mR..m....3..bv.;.F.`v.............Bb.b....TH~.....y*...6Y
9...P..X....7pE.tb\8.N{...Na)....`..X.Wm.e.6..<.ER...G......U......
..^x..9$.dndz|fw....s.^*.U$.#.=...S.K;..Q.f.uawM....B.u........-...d.B
.`<t...f...F:'U%o,1.:f.......x.zv.m.'..!..^ ..*.u.ZI.....R^...Wd}R.
s.&.u.vS.rJ......6..(.P.8W$c.E....5....(..X...g.C..D..MlPh.S..e.(.... 
5r4s.^.b...,H......Q........]..=%Y.=.9..a..,.J..=..X.h%..}.I..........
t...:cL..;.J%zNT!..$\[email protected] 3qU...
.rx...ov;l..GB.=;...._.L.z..F,...N...2..>.....].....P... .[..C.O...
~....o.....6K..!..1...t.N.>.P.0.u.R.[...Y....G.>.=......G!....%.
.V.j/ua...).e?fRA.R...w!/.l;..v..u.O...iu.(M.@...............`w$......
.;.;.....n...=.....U..P.`[email protected]>.....WX\................l.....=[.
....^.........C.....).....u~....<G.......kP........9E.J}zTkH...
<<< skipped >>>

GET /imgextra/i2/10000026291293357/T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 12594
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Tue, 06 Aug 2013 05:28:57 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache10.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:3:784566793
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
.PNG........IHDR...x...x.............gAMA......a.... cHRM..z&.........
.....u0...`..:....p..Q<....bKGD............0IIDATx...w.^gu/..z.._.^
4j..dc.....`.M.......O.$.p.....b.=!'$!.!.........'.c...na.bi......]...
..$[$.{..f..K.33.=..].....}..;..eC.T..'.....}a...0.......{..W..#..p.9.
....Z-i..V,u..b!~f.....'/...juq.Y.y.K..cHi].....o..Z..Q_W%m$.].q..5.q.
[email protected].|... ...L...../.l....hy.......#.$...J.R.Q.\.:....4"...7
n.6;..'..:k2BTJ'i. '.Y.%.@Df^jn......j...........qyG....0...,)Uk4.,'A.
d-.v.Y....jx..,..T..K..1DK..cWC.BW.5.|..`...{_m..f.....kx.3i)[email protected]
.e.....0:v..;....R...X[...CI3y...un...\k................:b*.....9.$..R
J...JIk..o.f.X .....Z^@gY....6.?.^.K%....!.9.[)...S.......a..5..$i....
'@...!.j.......j..9......$M..w.....|!......P.(.R...Zi.%Q.H.IJ!!b d...v
..p..~........L.../......4.tT*[email protected].%..^....3.LO
[email protected]&.D*......!..f3Q....oG7..
.......tt.#.....u}.]t........Y.fI.........ZO.......k6g..$I%..(........
Zv@#"./...R....^.i...... e.Ax........................k8..D.Z...\s.Z..R
.r.-;....{..|.\r...V.t....\...#.....$.<.4gg..16....d......gA.,57..r
3.@D...:...B.P*.....ID...s..^0#3...:.....S..:}.J..C...?...cXNQ.....M..
.q...~M}...c..O.....[..s..@.. U......T..........[./......,;..m...s/}Y1
*.....~..'.\[email protected]...{....L.B.U...{D......,.\FX/G.. ..U.C..
...............3.>../=..i...#cO?.c..}}.../..^[email protected]..
..8.,.3....5/..._..t.k...Z.G...[w.}..........|.y.<...'..>C....5.
:...r..L.C.T...a.b-y......C...?.....'?.=...o......N..W...{wm..._..
<<< skipped >>>

GET /imgextra/i4/10000019906692861/T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16051
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Fri, 01 Mar 2013 08:19:11 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache40.l2de1[0,200-0,H], cache36.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:0:46899697
X-Swift-SaveTime: Tue, 26 May 2015 17:08:27 GMT
X-Swift-CacheTime: 31504586
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...<.............................!.1.."2A...Qaq......#$B.Rbr.......
.............................A.........................!.1A.."Qaq....#
2...B..$Rb...3r...%CS..............?..Q|..O..'C.>._...0i?.....7....
&0QD.ME.9SI".E.9..M2.Ls..........h.m..`c...u...'....I:..Y.[]....]..C..
.%b&...1A.%$..~~P.UU..0....u^!...%.^.......P ....)..E..-.....]....r.n.
53T iX.%..B..n..c...#.......)........O...w9a.C.>.. ..N9t..D"".s.f.n
....<EQ..e...J.....V.j"..PQ.......-.8..GD-..u.X.."....c.`.iW.dV.>
;.o).bi.j.M.)....Y2Q8..2.5._......{.l.w..Va.e........X...K....$...q...
!..Y;...9......N.........Z..K,.......:(&'o$...O.C."*....9{..U....jz.i.
T.nX..%^.M..o.,X3.R.;.d..._......t...!..a..3..5B..Y.~.......).bY... ..
......1.S.......7..h3zj:.j.J.l.".. ..X.....9.b.|.i('..S.....X.\..:.W..
..m..X.mwY.....D.!E.Zj,...B.P...@.>fe....A..*...;...........-ECTD@$
L....l..u./s....w.kk........v...<..ek...W.;.-"..i..*c.H......1H....
..qJ....g.=..0UZ.*nB......=O...|...p401....A..G#..`....~...4...-.|....
.?.k.....u.?..'..}t|&...C.......<4.k..s$....n..C..H.ru.....d..]...J
>:d..F#...!Q.... .<........o..Yb.<..,....AF....3.B...@\..[c..
......P...Mgsm$.GH..`d..%\.n.1.u..C..;(O.....FYU6z......w..lY..;.y..O.
..J. Y....V.......!..P..".V=v....T.]....lL..S~..J..r...[.w).t...c...b$
S...........'.<'.i..."[.}I]..@}.p...4.I......AUmx...8..}&..-{..
<<< skipped >>>

GET /bao/uploaded/i1/T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 12624
Connection: keep-alive
Date: Tue, 26 May 2015 19:12:46 GMT
Last-Modified: Thu, 26 Dec 2013 05:37:29 GMT
Expires: Fri, 23 May 2025 19:12:46 GMT
Cache-Control: max-age=315360000
Via: cache36.l2de1[0,200-0,H], cache55.l2de1[5,0], cache2.by1[0,200-0,H], cache5.by1[0,0]
Age: 5082864
X-Cache: HIT TCP_MEM_HIT dirn:3:33525537
X-Swift-SaveTime: Sun, 07 Jun 2015 12:51:14 GMT
X-Swift-CacheTime: 314346092
......JFIF.....`.`.....C..............................................
......................C...............................................
............................."........................................
.F........................!..1..AQa.."q.#....2Bbr..$3R.....C.Ís.....
................................4........................!1.A.Qaq...."
#2......3Bbr.............?......VX.........hY.......fU9......x&..J.2O.
..^\..yj...}Ik.L....u........iX.xB.}h..j...s-$$.y...l.h...T....l.S..M.
...8."..;.....n..YLV....Z8..C..v....>.D.... .S.Y$?.T(..:.X~.F...:..
2.vC...k. .c.D......Y..lP..c.r2...=z.i....8..k.U..(.c....c...%\......w
..k...{[email protected].. .|.W...z.'.v9{~...z...L..A...2...g...C...
...}.......i.r...l...^......l..I.7.7.7..,...=^...}.p"CIo.w.......fj...
.... .@{K.%.....Y.R.....G.Cs.?...o...pq..I_.F._..jS...Wp...u....,.q...
.9..c.5fue ..^[email protected]....*.[[email protected]..
N.&..I....R.i.%.rW.`.~..3U...q....c.'a......J.~..i..5.%ue...gU;..#.0b.
:\....?.5........Q.`...h...-=Hg..l.D'.?Q..u-IWKX..P...H.y.!......>Z
..i......?..l...TC.....F.D5..L...['.#...j.....f....~...X\..K..j...;..}
H.....#.=2Wc.zg.M...._x{|.....m..p....SHP....0*G\......j[...#{...a....
.o..... n.:*...Mlfj......E.9...y...86..!.T.)a.61...,vQ.q......[x5*.bs.
..?..z.8..,T.)4..w....%n.....x....O..X.]VoU...Q.-:.......z...v...$..."
....M.<.'.H8.9.NN.e.7..,=..g...U...!..S.r.n.v#....u..S..O.......KQ-
.....;rs........?q.... .x....>..........uX.-...!.....j..3.....].t..
Dc....[?.T.;[email protected].%]3K.:.=2.z..F....K..ee..?]J...On...V.Ch..5.
<<< skipped >>>

GET /bao/uploaded/i1/10219072603507803/TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6713
Connection: keep-alive
Date: Wed, 17 Jun 2015 21:46:38 GMT
Last-Modified: Mon, 16 Mar 2015 06:30:37 GMT
Expires: Sat, 14 Jun 2025 21:46:38 GMT
Cache-Control: max-age=315360000
Via: cache38.l2de1[0,200-0,H], cache41.l2de1[0,0], cache5.by1[0,200-0,H], cache5.by1[0,0]
Age: 3172832
X-Cache: HIT TCP_MEM_HIT dirn:6:89560289
X-Swift-SaveTime: Thu, 18 Jun 2015 03:31:18 GMT
X-Swift-CacheTime: 315339320
......JFIF.....`.`.....C..............................................
......................C...............................................
........................x.x.."........................................
.R...........................!1..A.."Qa...#2..46BUbcqt......$&3CEu..%5
RSf...........................................;.......................
..!.1A.."2QBaq...R......4r..#$b..3............?..;.........AM....%d..W
.u-\.vq....4.....u!hSV.U...d.w}.....^..xU.,{............7....~.[...~K.
Le..5....C./...#)s.,.....t.3.L.M.n..X..m...alu.....&.).l.T....a2:.....
x...%........y>.U....)......kj.....d}..L......s...7..6.c...n\..OyHx
..8].xu.........$<...()hC.:.ue.KKXBB.B.B..7.......\n......=..rxv.?.
.).9...h...-.J..s$z:...MP..6r.=....o..z` ...].T..H...'....4k3(N '....b
....lh....N...^?.....-T.]...oI..O..6..#...K..f.. wJeXX^H.H.=u7.wan...|
.w7.8.g..w&....i....M;.C.([.#!/%I[K...P'.t..5H..P.....JX......q......p
v.....e*.I.V........x..}.........;...,..CF...$.......%..v..5~.~.....^M
.H.........I.[VA.#..u.....v..k... ....\u.3>....6V...yu....p6..#..E'
q...k7.....xjT....C...3.....!..b...8.....v..k.......v..k....d?.u.Q....
.<I.....q....4.!...k..wk?...Z_.k..wk?...Z.zSM. o>...9.Km.^N.mCm.
.......lC#.U.'.*.......*..l...'..'Q.mn.....ig.P...,.$....?.7c...}.l..Z
w.b...j4Y5..LS..9...J(Y.IsseJ.(Zv..Fu........ K...R"....[.,!-....O..}.
W.a...^.7..U^..~.\.S....C.HP..,.v.Br.......%IY.4.o..T.n.x..BH..Q.#..e.
..Xp...m.......*/..nC..|.s....?dQ...^v...U..I.G.g;..?}..?.....Giz$..].
.[F.=.%....).....[.J.l...d.D...k^OZj)..,.^..V..S.#.....AT.....[...
<<< skipped >>>

GET /bao/uploaded/i1/13600056495225268/TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8121
Connection: keep-alive
Date: Wed, 27 May 2015 12:09:06 GMT
Last-Modified: Wed, 29 Oct 2014 13:34:54 GMT
Expires: Sat, 24 May 2025 12:09:06 GMT
Cache-Control: max-age=315360000
Via: cache6.l2de1[0,200-0,H], cache44.l2de1[0,0], cache5.by1[0,200-0,H], cache5.by1[0,0]
Age: 5021884
X-Cache: HIT TCP_MEM_HIT dirn:9:839084701
X-Swift-SaveTime: Wed, 27 May 2015 12:32:56 GMT
X-Swift-CacheTime: 315358570
......JFIF.....`.`.....C..............................................
......................C...............................................
........................x.x...........................................
.<.........................!..1.A."Qa.2Bq..#R..$%b......3..........
..........................4.........................!1.AQ."aq.2....#B.
......$............?..R......8(s.us....p.H.......h.e.F...V...=zI....c.
....b..;-L.i.S....|.w}.......[.?5...c..............-....k..ks..2...mu.
10.T...@%X........>.{.T4.G.n..;......*..-V...kh....53....6D......).
 .6...,#..?....cjY!......x.Z0..]...}..%...b.j{......LY.9.G\. .nT.*...m
..OVN.a:...z#AD.k.\O9..;)..r........E.:...4...V..FRUKI#g...<.=....S
T2._...O..Q..U3.....-. .>.9...i.....hBZ...,;.H.........rt!yX.._..04
.o..9.....Ddk.Q..Y.5b.V...y....(...g..r.!.....iX.tN......Q......].>
.........M-f?.p..K.....#V.j....b..L..K.=....ST.[n7........5).... $..`.
......G..!....o*..`G4L..N.........==.2....n.Xk%....1.C......C...w.....
.<N.....Z.W.|.vG..dy>B.)...T........${.{......E1.a<.w]...'...
k..'...0NF.H...]......Q<$..?......ST..||2....Q..E3....w..!...p..E.f
.)[email protected]'.hB.....C.A..;eW.=........n.d4q7.S.!.s!.|...W
..?.......X~**voa.t.\2..$g.....g.1...,...-.....-E.w...Z. .....=...G.y.
.F.3.g.B..U_..V.i..O..#.....@j!3)3..TE^Ji.... . ..).....(j..T.*....'. 
....;/x. ....T?.n...X...#.9....-..r....J..g.Dt........?....*.ZI[.J..6.
..j.TIV.xy.U.s....g..|.q.2.4.TI...q....:...-......H...dX.....nNZn.....
3..#..H...H..n;.....4.....U..0.G...*..d.24...VixR.UIAP&.v...).coX.
<<< skipped >>>

GET /imgextra/i4/32492444/T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4142
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:06 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache38.l2de1[0,200-0,H], cache10.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:2:872955165
X-Swift-SaveTime: Tue, 26 May 2015 16:45:50 GMT
X-Swift-CacheTime: 31505942
......JFIF.....d.d.....C..............................................
#....!!!..$'$ &. ! ...C........... ...                                
                  ......x.x...........................................
.7..........................!1..AQ."aq..2#R..B......Sbr...............
................,........................!1A.Q"2a......q#B............
.?.....P..@(./....d.9.7..........ef..h...K.....y......;w......99......
%...$....[O......=@....#E)v_.....G...A...}._.G%..)..6tt....s......4...
..3..D(......P..@(..G.Ei....-...fY.Dw. .X..C....T1.......|..;oO.z~....
.|...p..V..8..l.y.n.gM......v..]:KK...1".........h......`Im.P....t....
..).y..E..%.#......9............P..@(.....P.G...m.....G$dd2.....R..Q[i
.ck..n.e.......i"U17..C..1.. ............O..4...;...VH....D..G ....=?5
.F.2Q.l....u[.*mBY...D.e1.*........=.su.;.x%..pF*R.......P..@(....9 .:
.(..N..K.....k3.=R...2Ckgv.......H.(?..z.MO.{..~...o....S.]..Ii,.....J
G".......NO~D.........*.$d....X.x/..<V."Z.1(p..d.g...U...FM?.~?....
.{.Y...;....WW.{5..RG...=.0..P..U.....$.;)9;fY. x.....=..nn/.,#k. ..K.
..Ux....Y...p.v...|..2r.7...P..@(...*...H...._...{m_X..............P..
.z..F#n\t..m..u.j......D..eQ...j.es...W.e.WP.r..7.*.V..EG(.Gk7..%..~..
..=.c..u..Iul.......$>.....v.x.. .....w.......DpU.'.^.}3.Z...[M....
.u...6.i9...r.6N....'.p:.I;To..mx=(........e...5.)........T......P..@(
......SX...8oe.> j... >.e....`..$......^...O..MT.$...IK.3.......
..Q.....M.....o.;:................%..".4 W.u.Kh..L..!8..@.'.Ua..vw3.T.
..t..."I.M%...|.s.s.....U......rq..H.Ek.6........}NEk.r.[......fx|
<<< skipped >>>

GET /imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 22281
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Sat, 02 Nov 2013 18:18:09 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache34.l2de1[0,200-0,H], cache30.l2de1[0,0], cache7.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:1:852709248
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
.9............................!..1."A#2Qa..$Bq.%3R.....S..............
.....................?........................!...1."AQ.aq.#2B.......$
...3b.4Rr.Sc.............?...&4........w.\d._rf...sq..U7......S~..#:..
.s..s.>.$....A...L..''.cr...pq.........y...*K...vU.....H.......c|.w
......}.t#2jJ....w......v.......Xi.*..#>..|X.L..d.A..o....5.l."....
.j#.o....YUq.5T.s..""}.|t...-%5...r|....'....[\..L.EG,....`.3.c.#|..1.
g.ZRR%AN,..'.e.y"T5.| x..JA.1.....2{..x..6..d......^.7..V...E..H.l....
..#.!RDdo.....q..Q.q& 5....1.j\.X..BIF...G.s=...8-.u!.K!.../A...w.....
.".px.9C......WE..)....R.jP3..%p......R0....#.....P.....#.e.`.y...Z...
......M.e........Mm%5%s.....I7......G5.CA`.r.<.IbB......h..Kh%.. ..
...pS.T2Kx......"....Y.K".....u.........5.lW....7l..."....\(.)a...fC.?
r`! ..Q..o.~Gm..zh.....DC..-.u......|zlpm .t.S....I.&..5.,p.,t..Yr...u
.x.~X......j^A\.3n..KQ...p..M..L........-.D5P.....=.&.KUq.....L.}0...v
.z..5..R%..j.m.cJ...s..d.uj..J..R.N..Og.g..s.Wm>...].,..6.....`H.8.
=.......6._B.:.m3u...AI..(.F0Gc...~.3]/D.).CS....0x.. .!p...v.......h.
.:..$6..k.................x.&.......r.Y...#.l..r.....[5...o....O..<
I..l..I.,[email protected]..*&5......B. V.)....l.......6.js...{."#..
..^~9&.I..aI?.T]..~.{Eg..R../.G.P.|.=..c.......8.t..|.......Y.d.j=....
...(.O.OG....o...Wm....m...{......-...XaN.m....n}?^4N8E.\.........
<<< skipped >>>

GET /imgextra/i4/10000018183036801/T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6579
Connection: keep-alive
Date: Tue, 26 May 2015 08:25:37 GMT
Last-Modified: Mon, 22 Oct 2012 10:20:06 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache39.l2de1[0,200-0,H], cache38.l2de1[0,0], cache6.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121693
X-Cache: HIT TCP_MEM_HIT dirn:4:784900054
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517553
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
..<...........................!1..AQa..."2.q...#BRbr.C.............
.........................5......................!1..A.Q.aq"2....B.....
#Rbr...............?....H...."...!-.^................y.*F.2.....I'....
.G}...{\.-.1..nm...[.j.]^<sR..(......e..ple,...........w3\3.V5.....
.'/..Q.P.{.H.&..R.z.V..k..^.c...x.Y@..|A....G....HVuj...m.. uTU..q$..0
8x...*.....A..../B....!.hR.7."d...F.t..!-.KB.v....'...G.jIE....... 2R.
|<3.........@(*k(..3/.......9'N,...9'...!kQm....9<p..?.B!Xo..."{
t..-.Td..=V..V9..iiN|..........!X..R..%..[B.....$<.B5..E..hB.......
....j..QKR..O.......p4a..R...x.;s.n..$..TU.EED.9..y.P.;.r1......Tu!...
.......<J....c[r.zbc&....Z..MSIv..T....<K........I.A..?2<.H .
uZ......p....-..#......N..Y3t:..tV..{.2...X..{.!..D:...Q1R.o.m..&.....
.......M}.].7j{}3......CN....c.s.d....(<C....j.....~...F.&.7....Lf$
.>Y[;^....v..AWv.......K.....B.B]..*2.I...j.....~..P.6...$_<w..=
..to}K...m..Q....R..5..E%......>..V.7......P..!m.B...L.....N...!.D.
..."...p..I:..G./_.,......M6...S.H.vixA.2.<..).........i!Hv..L.O$.o
..i....AK4.$.x.............py*.,......E.i..3..6...z...N.#..;v..\qx.h..
.u.)..........*...J....Q...a..SS..4......X.......!.q..-.A..3s....u....
C.ZO.......O...M........*...Y.....T..........|3.....$..[I.....T.?hpup.
F7{Q..S..zE.z{.E-......'...S..Q....$.....K..{d.5EZb.......r.y.0E..
<<< skipped >>>

GET /imgextra/i4/10000029325755046/T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 23980
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Mon, 14 Oct 2013 18:30:03 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache48.l2de1[0,200-0,H], cache29.l2de1[0,0], cache4.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:1:816889293
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
...G.............................!.1."A..Qa#23q..$Bb.....4Rr..]ETce.
.......................................P...........................!.1
.."A.Q.#2Ba.q...$3C.......GRrs.....&'5DEScu...............?.....o...
.m....;.}...u._..............|...O.............F.o.a..6.......m....NA.
..@..]*.WV..U..i..Q.%.dRYv.l.]P:..E..B...1.~.(.2.!e.....8...q...R.;.6.
I....z....E.[.b..\E......*............`...J`.......p.D.`A.......:.....
4...fy........wY.W...Y/$Xf.....V..k..Z2}.....H.&....qH.0kZ.V.5. .... x
..@$/...a....mR..m....3..bv.;.F.`v.............Bb.b....TH~.....y*...6Y
9...P..X....7pE.tb\8.N{...Na)....`..X.Wm.e.6..<.ER...G......U......
..^x..9$.dndz|fw....s.^*.U$.#.=...S.K;..Q.f.uawM....B.u........-...d.B
.`<t...f...F:'U%o,1.:f.......x.zv.m.'..!..^ ..*.u.ZI.....R^...Wd}R.
s.&.u.vS.rJ......6..(.P.8W$c.E....5....(..X...g.C..D..MlPh.S..e.(.... 
5r4s.^.b...,H......Q........]..=%Y.=.9..a..,.J..=..X.h%..}.I..........
t...:cL..;.J%zNT!..$\[email protected] 3qU...
.rx...ov;l..GB.=;...._.L.z..F,...N...2..>.....].....P... .[..C.O...
~....o.....6K..!..1...t.N.>.P.0.u.R.[...Y....G.>.=......G!....%.
.V.j/ua...).e?fRA.R...w!/.l;..v..u.O...iu.(M.@...............`w$......
.;.;.....n...=.....U..P.`[email protected]>.....WX\................l.....=[.
....^.........C.....).....u~....<G.......kP........9E.J}zTkH...
<<< skipped >>>

GET /imgextra/i2/10000026291293357/T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 12594
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Tue, 06 Aug 2013 05:28:57 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache10.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:3:784566793
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
.PNG........IHDR...x...x.............gAMA......a.... cHRM..z&.........
.....u0...`..:....p..Q<....bKGD............0IIDATx...w.^gu/..z.._.^
4j..dc.....`.M.......O.$.p.....b.=!'$!.!.........'.c...na.bi......]...
..$[$.{..f..K.33.=..].....}..;..eC.T..'.....}a...0.......{..W..#..p.9.
....Z-i..V,u..b!~f.....'/...juq.Y.y.K..cHi].....o..Z..Q_W%m$.].q..5.q.
[email protected].|... ...L...../.l....hy.......#.$...J.R.Q.\.:....4"...7
n.6;..'..:k2BTJ'i. '.Y.%.@Df^jn......j...........qyG....0...,)Uk4.,'A.
d-.v.Y....jx..,..T..K..1DK..cWC.BW.5.|..`...{_m..f.....kx.3i)[email protected]
.e.....0:v..;....R...X[...CI3y...un...\k................:b*.....9.$..R
J...JIk..o.f.X .....Z^@gY....6.?.^.K%....!.9.[)...S.......a..5..$i....
'@...!.j.......j..9......$M..w.....|!......P.(.R...Zi.%Q.H.IJ!!b d...v
..p..~........L.../......4.tT*[email protected].%..^....3.LO
[email protected]&.D*......!..f3Q....oG7..
.......tt.#.....u}.]t........Y.fI.........ZO.......k6g..$I%..(........
Zv@#"./...R....^.i...... e.Ax........................k8..D.Z...\s.Z..R
.r.-;....{..|.\r...V.t....\...#.....$.<.4gg..16....d......gA.,57..r
3.@D...:...B.P*.....ID...s..^0#3...:.....S..:}.J..C...?...cXNQ.....M..
.q...~M}...c..O.....[..s..@.. U......T..........[./......,;..m...s/}Y1
*.....~..'.\[email protected]...{....L.B.U...{D......,.\FX/G.. ..U.C..
...............3.>../=..i...#cO?.c..}}.../..^[email protected]..
..8.,.3....5/..._..t.k...Z.G...[w.}..........|.y.<...'..>C....5.
:...r..L.C.T...a.b-y......C...?.....'?.=...o......N..W...{wm..._..
<<< skipped >>>

GET /imgextra/i4/10000019906692861/T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16051
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Fri, 01 Mar 2013 08:19:11 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache40.l2de1[0,200-0,H], cache36.l2de1[0,0], cache3.by1[0,200-0,H], cache5.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:0:46899697
X-Swift-SaveTime: Tue, 26 May 2015 17:08:27 GMT
X-Swift-CacheTime: 31504586
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...<.............................!.1.."2A...Qaq......#$B.Rbr.......
.............................A.........................!.1A.."Qaq....#
2...B..$Rb...3r...%CS..............?..Q|..O..'C.>._...0i?.....7....
&0QD.ME.9SI".E.9..M2.Ls..........h.m..`c...u...'....I:..Y.[]....]..C..
.%b&...1A.%$..~~P.UU..0....u^!...%.^.......P ....)..E..-.....]....r.n.
53T iX.%..B..n..c...#.......)........O...w9a.C.>.. ..N9t..D"".s.f.n
....<EQ..e...J.....V.j"..PQ.......-.8..GD-..u.X.."....c.`.iW.dV.>
;.o).bi.j.M.)....Y2Q8..2.5._......{.l.w..Va.e........X...K....$...q...
!..Y;...9......N.........Z..K,.......:(&'o$...O.C."*....9{..U....jz.i.
T.nX..%^.M..o.,X3.R.;.d..._......t...!..a..3..5B..Y.~.......).bY... ..
......1.S.......7..h3zj:.j.J.l.".. ..X.....9.b.|.i('..S.....X.\..:.W..
..m..X.mwY.....D.!E.Zj,...B.P...@.>fe....A..*...;...........-ECTD@$
L....l..u./s....w.kk........v...<..ek...W.;.-"..i..*c.H......1H....
..qJ....g.=..0UZ.*nB......=O...|...p401....A..G#..`....~...4...-.|....
.?.k.....u.?..'..}t|&...C.......<4.k..s$....n..C..H.ru.....d..]...J
>:d..F#...!Q.... .<........o..Yb.<..,....AF....3.B...@\..[c..
......P...Mgsm$.GH..`d..%\.n.1.u..C..;(O.....FYU6z......w..lY..;.y..O.
..J. Y....V.......!..P..".V=v....T.]....lL..S~..J..r...[.w).t...c...b$
S...........'.<'.i..."[.}I]..@}.p...4.I......AUmx...8..}&..-{..
<<< skipped >>>


GET /tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: strip.taobaocdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=gb2312
Content-Length: 24365
Connection: keep-alive
Date: Sun, 19 Jul 2015 11:59:17 GMT
Last-Modified: Wed, 01 Apr 2015 09:13:43 GMT
Vary: Accept-Encoding
Expires: Wed, 16 Jul 2025 11:59:17 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
Via: cache28.l2hk1[83,200-0,M], cache29.l2hk1[84,0], cache4.de1[0,200-0,H], cache1.de1[0,0]
Age: 443259
X-Cache: HIT TCP_MEM_HIT dirn:6:452960978
X-Swift-SaveTime: Sun, 19 Jul 2015 11:59:17 GMT
X-Swift-CacheTime: 315360000
...........Xms....._.!-... .8I..Q..t....XJ..Mk@`I.E...Q. .....@B~.N...
...>..Rg'.._^.......rtV..$....&^.'.$ ......7.B[..n..=..H..z.....)&l
t;.i....&.d.......4..7.e.."...KKZ..&.....0...2..ZU|yh.L..f.W.,mb7eo..^
i._..^e6.....a.BxJ ..e.L.%..h .U..V.U[.).J..3 ...w.......Y.q...g..[.=K
..W..R/.>mJ;.N......9.U..;..X..fE...w.b.9....."o4y.g...Ub.J....?.W.
..sWz.1:....2.7..q.2........F...VP...<...........J. .'......../..F.
.... ...P.Ew...).q.g..a{.....kG..-.%.#XX.^..w*4....EF.6..9...RJ}n.r3 .
Qz......>.>>.?P.y...H...........n...J..v...3...u.,UR6v....hb.
.9......J ..D...A..y0.,...C%mL..<H_..7..L...F..u..ga...M.kRe...{]..
...y.zu.Q..p........m..@.:....u:..."u ....EZ,.*...bY..T..p.T..\><
;..J.j..O.9...(O.....6...&..hA. .|.|."<jH[..\"W...}d. ...-...).I1..
....J<..Gm..9.]t.G.......6.e..5.5.=:UTJ.d.....5<......O...J>.
.Z.Q....3..|<.n...~_.d.C.C...X...c..u"..;..&...i...1v.d.#.....7<
`.}..$......t..eq.,enh...N.S..........z...!........R\..E./.m..}..L.|*5
..G..Ln..;[email protected]..{..F.byG...e^.4./]..)......{yaL..T....>.
7|....5.a}!..-..&iN.. 9.../......../.}....O...?.....o...X..{..........
.?....$...]......U{....A..Y.$G......Y.>...T...$...........L.o......
.@<.....}z.T......,..j.C...m.p|pl.....*r..67..........g..%...l..!.H
?.%b.A..pA...i.Q<b.M....5..uZ...\...M.&c..?OR[..........9..# *...FF
..............*#B.Cd...2.)...!)A. ....u\..N[....(.....P.w....xw...1o.#
#........1.Fi.A..d...........mT.J5^.!...(.i0V..8..h.L....cZ.0....x..:.
D....t..l/.!;..\a.;8...O.4#1.8.)........W.2.^....J.h....9n&..k.,..
<<< skipped >>>


GET /t.gif HTTP/1.1
Accept: */*
Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: log.mmstat.com
Connection: Keep-Alive


HTTP/1.1 302 Found
Server: Tengine
Date: Fri, 24 Jul 2015 15:06:56 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
Set-Cookie: cna=kEI5DvWJoXkCAcGK9OcHCAy1; expires=Mon, 21-Jul-25 15:06:56 GMT; path=/; domain=.mmstat.com
Location: hXXp://pcookie.tanx.com/app.gif?&cna=kEI5DvWJoXkCAcGK9OcHCAy1
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server:
 Tengine..Date: Fri, 24 Jul 2015 15:06:56 GMT..Content-Type: image/gif
..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CUR
a ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=kEI5DvWJoX
kCAcGK9OcHCAy1; expires=Mon, 21-Jul-25 15:06:56 GMT; path=/; domain=.m
mstat.com..Location: hXXp://pcookie.tanx.com/app.gif?&cna=kEI5DvWJoXkC
AcGK9OcHCAy1..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: n
o-cache..Pragma: no-cache..GIF89a.............!.......,...........L..;
..



GET /t/tanxssp.js HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: atanx.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/x-javascript
Content-Length: 3389
Connection: keep-alive
Date: Fri, 24 Jul 2015 13:07:58 GMT
Last-Modified: Thu, 09 Jul 2015 08:12:34 GMT
Expires: Fri, 24 Jul 2015 15:07:58 GMT
Cache-Control: max-age=7200
Vary: Accept-Encoding
Via: cache7.l2de1[0,304-0,H], cache10.l2de1[1,0], cache5.de1[0,200-0,H], cache3.de1[0,0]
Content-Encoding: gzip
Age: 7135
X-Cache: HIT TCP_MEM_HIT dirn:2:970143732
X-Swift-SaveTime: Fri, 24 Jul 2015 15:04:38 GMT
X-Swift-CacheTime: 7200
...........Yko.... .Q(.zL[iwQP...m..M.i...dU...)..)...C....3.H9v......
.<..{.....0|{>.......o.....?.~8.....<.T".Z..E...]........\..D
yL.r..Y...z.j.....r..y*N..3.q<.;.~,.J......S......T<.Y....A.....
'..w.g...1..O.....v.>&...}.. a ..,.......v.7..,.M5.KQ......N....Br.
.L.*.H..2_......`...H2.U:...ozGoNC.BB/....._...".H.vgF.X..Vp.....z..j.
....m.M.^...|.......\..,px....Q. ...6..k....9Os)..$E..<.:....'....$
r..s....BW.".<......Vl4J.|..Hk,........f.B.J7Xq.;.....N..../".U....
...f.....Y.)_4..-.".....E....B../..(._.I..Z..i.8....b=m..<B..7...4.
j..........l...l...m....V..j.<LR.....H..i$=..;R.".K..G.a. T=l....2.
..r......$.U^.[X.2&........|.......[[email protected]''
.......39gN.U.....MN!|`O=.T.`...4...k.[.]Z-6wq...,./..a....Ej....3....
S...Y8.r.......!~..(..f7..]'_]..d/......w....'....#...........$.4.._.k
..,...J...E...~..TE..l..,..2f....P.........U..V ..%.^....4.D.G....d...
D.U..,..x.d..c.j42....,.......i..4...^...S.../_...H...A..!...Z..,..`9?
..eY...v...w...V}..z............$..9Y.'/...n..#.N\..G B....D.M. .p.A./
.I.f..tA?..i.V..........P.....cRV:.........v...."/...d..l.....(0P~`.$K
.n..YH.k.x...4 .\.O...... }B.xn.T...|..-=....oZ......nL.`...Eu.:0.e..L
..........i.$.I...e..v..W.v....}g..x..O(...8s<..H........$C..P~.LB.
}..w.\..j.e... ....jz.(t.h|(.....Z...% .S:....X(J...*Y.|[..sf..h.N..N.
....2......0......$...IB.9.9.......WDzk.......j.$3G.....S..M..."<..
W.R.&....]>_....#q.X]......9.<.~....|....\..#..-......m...(.wx..
...j<..~r.....'...$o.T..I7..s........f. ,=..d|. j6...D.........
<<< skipped >>>

GET /t/tanxssp/main.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: atanx.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/x-javascript
Content-Length: 21629
Connection: keep-alive
Date: Fri, 24 Jul 2015 12:41:09 GMT
Last-Modified: Thu, 09 Jul 2015 08:12:34 GMT
Expires: Fri, 24 Jul 2015 14:41:09 GMT
Cache-Control: max-age=7200
Vary: Accept-Encoding
Via: cache56.l2de1[0,304-0,H], cache27.l2de1[1,0], cache9.de1[0,200-0,H], cache3.de1[0,0]
Content-Encoding: gzip
Age: 8744
X-Cache: HIT TCP_MEM_HIT dirn:6:399114526
X-Swift-SaveTime: Fri, 24 Jul 2015 14:39:23 GMT
X-Swift-CacheTime: 7200
.............w.....W.......w....R.-...%.=C.y.....&...&9..}..Y......9..
{.xZDU......[.^...7....[..Bc.Y..^.....w...v.x...b......tk...A.,}.^....
.>..qw..^L.Y8.K..O..|..W...x1...a%*...g...f]..K....6W..I..d....A..}
..E...?...&..';.R .....l....:.ll....0h..........sWL.....b...HX.....iR.
%.....y2..,.....N..\..a.....2.........K-.]...l......U:.R....."..".....
c.),Uz..&.y....5M.....#..?I.ECz...:..e.............8..4..0....n3..N...
....WAe...7..u......f._..A.....J.......}..\..C2...EBq*..`]b.S.t=\.w...
%.....q..4...j<......pg.^...NB.......g...T.2.x2.M...0.b.....?...qb.
0O.Y..e....D.o!.....p....=....k..v.a.....N.......I|=.F....O.d&.d...C..
E8x.....p....D...T......0{...{..w......O...C.S...9....CB?..(....9.2...
<n..6....W7s.v.aLS....W...d&o.n.G....2o.-3y.....N5..~...V..Ek._gr.C
...Z.d..a...G..<]....u/...-...R lk.......}..76.[.Nb...S.?K.....M..#
E.>...1k..U..IG`H${....DHq.\.,.A5(..c....%...qo.?ih?.....3.rk..L%.M
..R.BI.r2...R.......P...F..E....X.&W...?4..........P.C.*.s..?.y.....i.
.Q.Lp.\.][email protected])40...qrS...T.%...Q. cC.o......f"..g.6d..^.^....
$.M..s...7..........u.........\.A.....\.3...Q..(U....!..].m.........r.
..n7dh....l.P...l.x8...%...U....pR.........%`...2$.;...Y..i._...j.\.p.
..vX.u...Ytn......`...i....(&.T8..j.>4.6O.....3.1...^.2hy.C..O...Q.
T]L./fP.bc.T._Gs..]:.=..|.H"....\.h....o....p.vJ?.....I'..|>l....yS
`.B.6...../7I4.e.E...w....">.&.r..CXt.~np|r..e..j..T.$..W..X...@2K.
do.aG.O.../iG.7.x..t`%.Lt.....;']Ug..f...!&....? ..6m ..S^t.r.r.....2&
lt;.NN..........?v. ...p.......x.Tn...-...v.`g{.p.q.S.....x.9<8
<<< skipped >>>

GET /t/tanxssp/privacy.js HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: atanx.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/x-javascript
Content-Length: 1822
Connection: keep-alive
Date: Fri, 24 Jul 2015 14:22:41 GMT
Last-Modified: Thu, 09 Jul 2015 08:12:34 GMT
Expires: Fri, 24 Jul 2015 16:22:41 GMT
Cache-Control: max-age=7200
Vary: Accept-Encoding
Via: cache40.l2de1[0,304-0,H], cache49.l2de1[1,0], cache6.de1[0,200-0,H], cache3.de1[0,0]
Content-Encoding: gzip
Age: 2652
X-Cache: HIT TCP_MEM_HIT dirn:7:839795536
X-Swift-SaveTime: Fri, 24 Jul 2015 14:24:17 GMT
X-Swift-CacheTime: 7200
...........Yks.F.. d.:.#....(..v.I.|..d.t2...$.0..#..{..HF..w&........
..w.}p1.<[email protected].. O..o^.qrdD.d..*...WU.)..........<.*.../..
i.T........><>L.....F....I.\.i.Z!......Y....-.g?..$.u...T..)8
..l.....S,?.1..CLf.2_..S..8.?wR..s.kY>R..a^F.....9.').....%.."e.e).
...h|h....).6.w.sz.;8K'....(..._xa..._/....z.....X.K.....a.J......(...
s_i. ..m ..[.s.;U..z....[jZ...\..{....wJZP..Rh].s.........a...g{G.."P.
g.`.[....Z...Z..6..v..K.....Y.y.M4...Eq....?..='...}v.M.(.b%)i..= B.a.
.u..r.q<...s..F ....pK.,/.=....:.k.t..m.[........,...[8....4...$..g
44...e.H.<C..&R.|.3.f.j...G..c....K.}P..:p.).........9..6.2..>kE
......$W9......h4.y.K........c.j&...l.kQh{.}.V..&...H.4...9.......%...
..{g.dM.....<.F..0.g.{p......\]J,qu...G)\.#h.....o...F...W.E....Q..
....(...eq..d.8[....H1....i.n..f....[.{..........u....V.*....R.....P.=
p...s..#..l...H....8............'.h.....{.H....v........1.\.ts.....M4.
...DM0_.:....._.....;.............A.......D.j.0q.....H.ba...c....6i...
.$...%..).nH..`..A"$....:....Zg6...T.#...8W iM#HL!L5.d.......n...<.
Is.MR.Z..I......?z..b....L..\.........8.)...ls.x .[.W&.....~_....uR...
.t.W.u..=...h{` ..n....[.Lp.........................u....."...J...C..x
........"1......_.......F.`.em..,....5../J......e...e..L.rcS.#Y^..y.X.
. @u...?.w*6....B..H....Z..db. ......sU.|Q...Z(..0...&6....CM.4'|^Y...
b.1Y..E......y..=.'.=/...9.p=...%.w..(~..M......?tN......oo.?..o...}U.
..#g..U=2|#[email protected].]/S.<>..az...q}G....
v.u..k.v$q..=.h4p...... [email protected]..!.'..~j.X.3x.5.g...LG. ..
<<< skipped >>>


GET /tps/i3/TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21.png HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtms03.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 297
Last-Modified: Thu, 26 Mar 2015 05:48:56 GMT
Expires: Sat, 29 Mar 2025 12:31:43 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 24 Jul 2015 15:07:06 GMT
Connection: keep-alive
access-control-expose-headers: FW_IP
FW_IP: 194.146.191.107
Timing-Allow-Origin: *
.PNG........IHDR.............W.Ph....pHYs...H...H.F.k>....vpAg.....
....U..f...?IDAT..u....0..P....L...I..{[email protected] ..}:<....'
.lO..S.....y...S...%tEXtdate:create.2015-03-26T13:48:56 08:00xDz....%t
EXtdate:modify.2015-03-26T13:48:56 08:00...F....tEXtSoftware.Adobe Ima
geReadyq.e<....IEND.B`.....


GET /tps/i3/TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21.png HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtms03.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 297
Last-Modified: Thu, 26 Mar 2015 05:48:56 GMT
Expires: Sat, 29 Mar 2025 12:31:43 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 24 Jul 2015 15:07:06 GMT
Connection: keep-alive
access-control-expose-headers: FW_IP
FW_IP: 194.146.191.107
Timing-Allow-Origin: *
.PNG........IHDR.............W.Ph....pHYs...H...H.F.k>....vpAg.....
....U..f...?IDAT..u....0..P....L...I..{[email protected] ..}:<....'
.lO..S.....y...S...%tEXtdate:create.2015-03-26T13:48:56 08:00xDz....%t
EXtdate:modify.2015-03-26T13:48:56 08:00...F....tEXtSoftware.Adobe Ima
geReadyq.e<....IEND.B`.HTTP/1.1 200 OK..Server: Tengine..Content-Ty
pe: image/png..Content-Length: 297..Last-Modified: Thu, 26 Mar 2015 05
:48:56 GMT..Expires: Sat, 29 Mar 2025 12:31:43 GMT..Cache-Control: max
-age=315360000..Access-Control-Allow-Origin: *..Timing-Allow-Origin: *
..Date: Fri, 24 Jul 2015 15:07:06 GMT..Connection: keep-alive..access-
control-expose-headers: FW_IP..FW_IP: 194.146.191.107..Timing-Allow-Or
igin: *...PNG........IHDR.............W.Ph....pHYs...H...H.F.k>....
vpAg.........U..f...?IDAT..u....0..P....L...I..{[email protected] ..}:
<....'.lO..S.....y...S...%tEXtdate:create.2015-03-26T13:48:56 08:00
xDz....%tEXtdate:modify.2015-03-26T13:48:56 08:00...F....tEXtSoftware.
Adobe ImageReadyq.e<....IEND.B`...



GET /tps/i1/TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21.png HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: gtms01.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 298
Last-Modified: Thu, 26 Mar 2015 05:48:56 GMT
Expires: Sat, 29 Mar 2025 12:31:36 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Timing-Allow-Origin: *
Timing-Allow-Origin: *
Date: Fri, 24 Jul 2015 15:07:06 GMT
Connection: keep-alive
access-control-expose-headers: FW_IP
FW_IP: 194.146.191.104
Timing-Allow-Origin: *
.PNG........IHDR.............W.Ph....pHYs...H...H.F.k>....vpAg.....
....U..f...@IDAT..]....0......RA...x....%e..."..".-.%.)..<...;..6.a
.fcj..O.6.=.y.-p7...%tEXtdate:create.2015-03-26T13:48:56 08:00xDz....%
tEXtdate:modify.2015-03-26T13:48:56 08:00...F....tEXtSoftware.Adobe Im
ageReadyq.e<....IEND.B`.HTTP/1.1 200 OK..Server: Tengine..Content-T
ype: image/png..Content-Length: 298..Last-Modified: Thu, 26 Mar 2015 0
5:48:56 GMT..Expires: Sat, 29 Mar 2025 12:31:36 GMT..Cache-Control: ma
x-age=315360000..Access-Control-Allow-Origin: *..Timing-Allow-Origin: 
*..Timing-Allow-Origin: *..Timing-Allow-Origin: *..Date: Fri, 24 Jul 2
015 15:07:06 GMT..Connection: keep-alive..access-control-expose-header
s: FW_IP..FW_IP: 194.146.191.104..Timing-Allow-Origin: *...PNG........
IHDR.............W.Ph....pHYs...H...H.F.k>....vpAg.........U..f...@
IDAT..]....0......RA...x....%e..."..".-.%.)..<...;..6.a.fcj..O.6.=.
y.-p7...%tEXtdate:create.2015-03-26T13:48:56 08:00xDz....%tEXtdate:mod
ify.2015-03-26T13:48:56 08:00...F....tEXtSoftware.Adobe ImageReadyq.e&
lt;....IEND.B`...



GET /css/common_20150330.js?v=2.28.1 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Last-Modified: Wed, 15 Apr 2015 01:55:36 GMT
ETag: "3f0a-513b9a4a97600"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:11:35 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:44 GMT
Age: 308
Connection: keep-alive
x-hits: 3547
003f0a..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(pa
rseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))
};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function
(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=
p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('m 2B=1Q(),
3j=/*@6e!@*/!1,6f=3j&&/26 6/.1m(4t.4u.2C());m 1A=I;U{B.1Q=2B.J("3k.","
").J("3l.","");l(4v.3m==1n.3m){1A=Q}}V(e){};(9(a){m b=L.4w?N 4w():N 6g
(\'6h.6i\');b.1B=9(){l(b.1o==4){l(b.3n>=4x&&b.3n<3o||b.3n==6j){a
.6k=N 1p(b.6l(\'1p\')).4y()}}};b.6m(\'6n\',\'6o.27?t=\' 28.3p(N 1p().4
y()/6p),I);b.6q(z)}(7));9 $(a){p B.3q(a)}9 $c(a){p B.1e(a)}9 $t(a){m b
=1q[1]||B;p b.1C(a)}9 $1D(a){m b=1q[1]||B,3r=[],o=b.1C("*");M(m i=0,t,
G=o.C;i<G;i  ){t=o[i];l((\' \' t.W \' \').3s(\' \' a \' \')!==-1){3
r.12(t)}}p 3r}9 1Q(){U{m a=3m.6r,3t=a.3s(":");p(3t==-1)?a:a.6s(0,3t)}V
(e){p\'6t.6u\'}}9 4z(a){m b=29.1E(a);l(b||b==""){p b}O{p 3u.1E(a,1q[1]
)}}9 6v(a,b){m c=0,2a="",3v="";M(m d=0;d<a.C;d  ){(a.3w(d)>6w)?c
 =2:c  ;3v=2a;2a =a.6x(d);l(c==b)p 2a;l(c>b)p 3v}p 2a}9 6y(){m a=[]
,18={};M(m b=0,4A=1q.C;b<4A;b  ){a[b]=1q[b]}l(1r.13.2C.3x(D(a[0]))!
="1R"){3y(a[0].H){19"2b":18.H=2D.X();2E;19"4B":18.H=2F.X();2E;19"2G":2
c:18.H=29.X()}a.6z(0,1)}18.1s=D(a[2])!="14"?28.6A(a[2]/(6B*24)):14;18.
1t=a[0];18.2d=a[1];18.3z=a[3];18.1Q=a[4];18.2H=a[5];3u.1u(18);p I};1r.
13.3A=9(){p 7.J(/(^\\s*)|(\\s*$)/g,"")};m 3u={Y:I,X:9(){m a=1q[0],1v;l
(!a){l(3j){1v=2D}O l(L.2I){1v=2F}O{1v=29}}O{3y(a){19"2b":1v=2D;2E;
<<< skipped >>>

GET /time.txt?t=23962506 HTTP/1.1


Accept: */*
Accept-Language: en-us
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Last-Modified: Thu, 07 Nov 2013 02:56:19 GMT
ETag: "0-4ea8d68f4bac0"
Cache-Control: max-age=1296000
Expires: Fri, 07 Aug 2015 13:06:32 GMT
Vary: Accept-Encoding
Content-Type: text/plain; charset=gb2312
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:45 GMT
Age: 93613
Connection: keep-alive
x-hits: 426
HTTP/1.1 200 OK..Last-Modified: Thu, 07 Nov 2013 02:56:19 GMT..ETag: "
0-4ea8d68f4bac0"..Cache-Control: max-age=1296000..Expires: Fri, 07 Aug
 2015 13:06:32 GMT..Vary: Accept-Encoding..Content-Type: text/plain; c
harset=gb2312..Transfer-Encoding: chunked..Date: Fri, 24 Jul 2015 15:0
6:45 GMT..Age: 93613..Connection: keep-alive..x-hits: 426..0..0..t>....


GET /fonts/2345_1224.eot? HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 31 Dec 2014 12:08:14 GMT
ETag: "3828-50b81f645a780"
Cache-Control: max-age=1296000
Expires: Tue, 04 Aug 2015 08:38:35 GMT
Content-Type: application/vnd.ms-fontobject
Content-Length: 14376
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:47 GMT
Age: 368892
Connection: keep-alive
x-hits: 1210367
(8..L7............................LP....J..P........... ...At.)G......
..............2.3.4.5.....R.e.g.u.l.a.r...Z.V.e.r.s.i.o.n. .1...0.0. .
J.a.n.u.a.r.y. .2.,. .2.0.1.4.,. .i.n.i.t.i.a.l. .r.e.l.e.a.s.e.....2.
3.4.5................0OS/2?......8...Vcmap............gasp......7D....
glyf.mK.......,.head...........6hhea.q.j.......$hmtx............locaW.
L....<....maxp.R......... name.0ME..1.....post.".(..6.............G
).t_.<............5......w..........................>.N.C.......
..................8.....@.......................................3.....
..3.....f..................P..J........HL  .@.!.....Q.3.>.. ...A...
.........................................1.......)...'................
...(...........................................4...W...-...........)..
.K.................................................../................
.......................<...3...3...................................
$. .......!.:.B.L.P.x.......P.Y.i.y............. .#.A.D.N.x.......K.Q.
`.p.......................`.`.........................................
................`... .................................................
.............................. .!.".#.$.%.&...'.(.)...................
......................................................................
......................................................................
......................................................................
......................$. .....!.:.B.L.P.x.......P.Y.i.y............. .
#.A.D.N.x.......K.Q.`.p.......................`.`.................
<<< skipped >>>

GET /images/bgs14.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 06 Dec 2013 07:08:26 GMT
ETag: "197f-4ecd84ffe4e80"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 6527
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:49 GMT
Age: 4256895
Connection: keep-alive
x-hits: 18640319
[email protected]...............
........................................fff...........................
............................................j.........................
................>..........[.N.W..A..............S.................
....f....*............................................................
...........................|||........................................
.....qqq..Niii......ggg..................Z.c..9...q......g$.._........
..............p............n......{{{...................p......yp.....
.....................hhh.....8.f#........^uuuZ.b.................z...}
}}......kkk..o....q..u..................................zzz...~~~.....
.nnn......sssooo................................................yyy...
......lllvvv...ppp..........................4.....tRNS................
......................................................................
......................................................................
......................................................................
..............................S..%....IDATx....x..y.`T,....P..j.6Gs .A
...P.,..eK.d.. .L[..IY.M.....%Y....-;...Gl...'q.&i..Ms.g.....n.h......
.....;...@. .x93{...B...........I..........IC......,?.*...t9.S.....D..
..K1.......... .....!..-.U..-............ ...7.|.C..c..j.k..j....d...,
.#...[U..2...j..../^...)..6.....-.....l..!E.%bi#X.XJ./9 D..../.......Z
[email protected]..[[email protected]_". ....D0..!1....V...j.H.}..... ....\
ya%.b.`V......\. ..T.H........n|..p.ii(..ii.C.2v^..F........)h.d..
<<< skipped >>>

GET /css/input_20150426.js?ver=1.0 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 24 Apr 2015 03:40:58 GMT
ETag: "2752-514702a0de680"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:14:21 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:06:52 GMT
Age: 151
Connection: keep-alive
x-hits: 1551
002752..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(pa
rseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))
};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function
(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=
p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('T.o={\'16\
':$t(\'39\',$(\'1B\'))[0],\'18\':\'3a\',\'L\':L.2a(\'o\')?L.2a(\'o\'):
\'0@0@0@0@0@0@0@0@0\',\'3b\':B,\'1C\':B,\'2b\':-1,\'G\':0,\'1o\':3c,\'
F\':[[{\'f\':\'k://J.x.j/s\',\'w\':\'V\',\'i\':\'i/r/3d.u\',\'a\':\'k:
//J.x.j/M.1e?U=19\',\'c\':\'\\10\\3e\\2c\\3f\',\'h\':{\'U\':\'3g\',\'1
p\':\'-1\'}}],[{\'f\':\'k://W.x.j/3h\',\'w\':\'V\',\'i\':\'i/r/3i.u\',
\'a\':\'k://W.x.j\',\'c\':\'\\11\\12\\1D\\1E\'},{\'f\':\'k://W.N.j/W\'
,\'w\':\'1f\',\'i\':\'i/r/3j.u\',\'a\':\'k://W.N.j/\',\'c\':\'\\10\\1a
\\1D\\1E\'},{\'f\':\'k://W.O.j/n.q\',\'w\':\'w\',\'i\':\'i/r/3k.u\',\'
a\':\'k://W.O.j\',\'c\':\'1g\\1D\\1E\'}],[{\'f\':\'k://13.x.j/Q\',\'w\
':\'1q\',\'i\':\'i/r/3l.u\',\'a\':\'k://13.x.j\',\'c\':\'\\11\\12\\1F\
\1G\'},{\'f\':\'k://2d.N.j/13.2e\',\'w\':\'1f\',\'i\':\'i/r/3m.u\',\'a
\':\'k://2d.N.j/\',\'c\':\'\\10\\1a\\1F\\1G\'},{\'f\':\'k://2f.13.O.j/
3n-3o/m.q\',\'w\':\'w\',\'i\':\'i/r/3p.u\',\'a\':\'k://13.O.j\',\'c\':
\'1g\\1F\\1G\'}],[{\'f\':\'k://v.x.j/v\',\'w\':\'V\',\'i\':\'i/r/3q.u\
',\'a\':\'k://v.x.j\',\'c\':\'\\11\\12\\1r\\1H\'},{\'f\':\'\',\'w\':\'
2g\',\'i\':\'i/r/3r.u\',\'a\':\'k://3s.14.j/\',\'c\':\'14\\3t\\1r\',\'
h\':{\'3u\':\'0\'}},\'\',{\'f\':\'k://v.N.j/v\',\'w\':\'1f\',\'i\'
<<< skipped >>>

GET /i/banner1_150703.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 03 Jul 2015 07:04:49 GMT
ETag: "1418-519f32bf86640"
Cache-Control: max-age=31536000
Expires: Sat, 02 Jul 2016 07:18:15 GMT
Content-Type: image/png
Content-Length: 5144
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:54 GMT
Age: 1842519
Connection: keep-alive
x-hits: 8757151
.PNG........IHDR.......2......U-.....tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE<EF..kv....f......(35TUV...w....ZwSQ......Wu......0..Q.k
R.a..x..c..............G<...v.../#C......f_C...l.........z...Egxv..
e...-""w.....TJw..C......r.[)&..........e\D..e..f..3...[Q....k.)....p.
..4........3...}u.vn.TK.......rjU...........9Xg............... q.D....
.......D...z....".........;2.:-...3..'.....#..*..U..3......ld..|C.....
.u.. ..0#.(!.]R....1%...w....sf...................M...T..".....4f....V
..D..g....}....MA.KA....of.......@5.......}....5......|......q.b......
.%.."........e.."BO....6)T...x.....4(.- .v.....:/".....3..T..e........
..... [email protected].......\........................@.~.f....`.
.."....b......"v.....z............p.....P................~..$....S....
.jA?7!.................v....5..X..$Wv.kd"......E<....@;......{z{ ..
...............C....&.....IDATx....\......TpW\g.F6..#..D6......D.U.Z.e
Ek.-.....T........S.$.6i...D.q....e...EMB[i/..-...sw.K.....}...C....I&
gt;.3.........<3...../......)./T..W7l..."...q.KB........D..>X4&l
t;..........!..../*.b..}..p|.>.....>".."......'..H.....>.....
....F.......QR.C......./._.~ ...?]W7Z|?.B.......]X.b....2.#./^.....]..
. ..`...a.w..>X..}v$.!.....-3.;36v&s..R....2.dV>...........h....
B.....e..c3.h.U.7c?......m...>~P...5{~....#h.t...,...e...k3..Un..-.
....!..T...wrt.'h.4r.....I...1/y..~...k>}...6.......s..x..".})..2.x
..B..bM'.....n.. ......5.W..GQY.....:....F*3...<.OK......bUU8/ .l.W
..*..!.WTD./.[....3Q...z..;..}..?.q....'2....3.S.__....K.{.L....;V
<<< skipped >>>

GET /i/cert-cyberpolice_0829.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 10 Sep 2014 06:11:23 GMT
ETag: "939-502afebd9b8c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 2361
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:06:58 GMT
Age: 4256903
Connection: keep-alive
x-hits: 18332746
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:F0A3CEA7324E11E4AD06B19B
7D68C118" xmpMM:DocumentID="xmp.did:F0A3CEA8324E11E4AD06B19B7D68C118"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F0A3CEA5324E11E4AD
06B19B7D68C118" stRef:documentID="xmp.did:F0A3CEA6324E11E4AD06B19B7D68
C118"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>........PLTEgggrrr............hhh..........
.............t..v...qp......{....!.......CBI.....fC@IFMS...........}k.
...............nf....a....."...C>.JE<.........OML...............
...O.......}......oh......}./C9;Asq....%&6w..^..TTf......o..m..pj.^\e.
.{|..wHTTP/1.1 200 OK..Last-Modified: Wed, 10 Sep 2014 06:11:23 GMT..E
Tag: "939-502afebd9b8c0"..Cache-Control: max-age=31536000..Expires: Sa
t, 04 Jun 2016 08:38:35 GMT..Content-Type: image/png..Content-Length: 
2361..Accept-Ranges: bytes..Date: Fri, 24 Jul 2015 15:06:58 GMT..Age: 
4256903..Connection: keep-alive..x-hits: 18332746...PNG........IHD
<<< skipped >>>

GET /i/zx110_0829.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 10 Sep 2014 06:11:23 GMT
ETag: "964-502afebd9b8c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 2404
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:00 GMT
Age: 4256905
Connection: keep-alive
x-hits: 18323938
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:EB0FAE11324E11E4AF348FBF
63CE8F4C" xmpMM:DocumentID="xmp.did:EB0FAE12324E11E4AF348FBF63CE8F4C"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EB0FAE0F324E11E4AF
348FBF63CE8F4C" stRef:documentID="xmp.did:EB0FAE10324E11E4AF348FBF63CE
8F4C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.".s....PLTE..U.C.....c..)~.P...Z..b..%..v.
.s.:...=..[..T..:...gggrrr......hhh.................>...=..N....qL.
..Z...6.g.._.Q.......<X.l q....X..r..R..j..m...J.......F.....L.....
f...Q...W.....d.O.'}.H|......8.%{T..?z....=..s../......T.Lt....L.....7
..$U.....?.z.......{.U..'.3....88..4].7w.i..#......L})R.J..h..h..T...O
..!u.H..\[email protected]. ..>..M..Z..?..0..0.b...X.%Z...P
/^..<...X.!y(..\...J.....^.-gt.T.....0y...H..Up.!.....z.........6.A
{.,O.{..7M.2......}....E....:X.....c...B.....K......^..........F.....[
....k...!..(.H..)...>.1..7].:T...V1{.f..O..M...$s..^...>...@
<<< skipped >>>

GET /images/fix_search.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 29 Jan 2015 08:50:23 GMT
ETag: "482-50dc6941a71c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1154
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:00 GMT
Age: 4256905
Connection: keep-alive
x-hits: 18718245
.PNG........IHDR...=...=.....).......tEXtSoftware.Adobe ImageReadyq.e&
lt;....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:f59c2116-b539-d54d-b8dd-6287aacb2108" xmpMM:DocumentID="xmp.did:
E06A43E1A75611E4B4F6CE1DBD2B386D" xmpMM:InstanceID="xmp.iid:E06A43E0A7
5611E4B4F6CE1DBD2B386D" xmp:CreatorTool="Adobe Photoshop CC 2014 (Wind
ows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:79b05bd6-bcd
e-b14a-9472-be314cd79942" stRef:documentID="adobe:docid:photoshop:727f
1b80-7381-11e4-ba95-e38f96ad190c"/> </rdf:Description> </r
df:RDF> </x:xmpmeta> <?xpacket end="r"?>j$.....6PLTE...
[email protected]......
0..0......!..A.....u... .....H.7Qu...".>..]..E........iw/..I.......
..`.1.].]H.>....IEND.B`.....
<<< skipped >>>

GET /images/mz_movie_3.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Mon, 22 Sep 2014 09:46:53 GMT
ETag: "c5f-503a454a25d40"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 3167
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:01 GMT
Age: 4256906
Connection: keep-alive
x-hits: 18291440
.PNG........IHDR...............h6....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /images/mz_ic_tmall2.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 10 Jul 2014 10:04:51 GMT
ETag: "4fc-4fdd3f4a196c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1276
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:01 GMT
Age: 4256906
Connection: keep-alive
x-hits: 18355219
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e&
lt;...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:0480117407206811822AB97ADF869A58" xmpMM:DocumentID="xmp.did:CDF9
C3FAFF3E11E3A69CE6CFEC5F358C" xmpMM:InstanceID="xmp.iid:CDF9C3F9FF3E11
E3A69CE6CFEC5F358C" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:058011740720681182
2AB97ADF869A58" stRef:documentID="xmp.did:0480117407206811822AB97ADF86
9A58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.='Z...*IDATx...Oj.@.._B.e.Rs...7.M....&7p.
....7..........&H.........&....0......(..f.'....).X... ._...o?<D...
.F.X.k!.#...h.l.;.......bMx.J.....k....`p..~}@...k:EK..M&.:..6....2. .
.%....=.z...h....w.E...\.J.}]....#.....o.L,....K4.....e...........u]&.
.Z.k.f.$I>!...Y..=...!Vu.g..qD..A.4M..|.l}....yH..&._...>.....IN
....IEND.B`.....
<<< skipped >>>

GET /images/lvy/mz_ctrip_141231.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 31 Dec 2014 12:09:03 GMT
ETag: "623-50b81f93155c0"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1571
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:02 GMT
Age: 4256907
Connection: keep-alive
x-hits: 18462751
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:06F1BBB690E311E484FDFE8D
36F9A174" xmpMM:DocumentID="xmp.did:06F1BBB790E311E484FDFE8D36F9A174"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06F1BBB490E311E484
FDFE8D36F9A174" stRef:documentID="xmp.did:06F1BBB590E311E484FDFE8D36F9
A174"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.......DPLTE%w....K........9...v....c......
../}.(y.*z....L..c..&x.W.....3y....o....,{..W........-~.R..C..O....(..
....7..F..]................}X........(}....[..=..............,{.g..R..
Q....................V..m..O....#;...........T~....D..2...............
...|....p.....B..y..........................2........4........v.......
...-/y.......8......ltRNS.............................................
................................................................SYT...
.IDATx.b...vN&V.5 .....d`.a.....&3.300.Fx1...........A.(.l........i.1.
.Sm.!.r.x.....P.K ..%.!.*.... ..........0Qa`..P.JZe.I...30H.y.....
<<< skipped >>>

GET /images/lvy/mz_suning_150529.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 29 May 2015 05:14:37 GMT
ETag: "64d-517318d6b2940"
Cache-Control: max-age=31536000
Expires: Sat, 18 Jun 2016 12:17:19 GMT
Content-Type: image/png
Content-Length: 1613
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:02 GMT
Age: 3034183
Connection: keep-alive
x-hits: 10451525
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:5776642C77EAE411B27BBD8E623B44CB" xmpMM:DocumentID="xmp.did:7FEA
65F005AD11E59F02A99B72EC2948" xmpMM:InstanceID="xmp.iid:7FEA65EF05AD11
E59F02A99B72EC2948" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B75C3D03A405E511AD09
C340FF0EF36A" stRef:documentID="xmp.did:17389ED168EAE411B27BBD8E623B44
CB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>..]....}IDATx.tSKhSQ.=....F[jmU0U.k.VT..m.U..
..DAA.J..q..v#.\(.. [email protected]....*.M.D.M..x..4....2....s..U.m.r!
....T.45(.&01-.,...SLQ...yK.\....o.|...=.$..>....u.Ij...k.B.5..p.8.
..~.^[email protected]...^hXV.....K.....J.
Y...o[u..y.P1B.0..,.fF....Y5......a.B.I.c...x:...1.Q'....F.0....8{. ..
D.a.B.:.'a.7t...........$..e.1;.x.\.Y.(H...[..a..EAy.;b=..Fe[...&..XW.
.K..4..2}..Z...b:..L$.........Wy....h.(.[.J.?). #..nq.A.O .;.f...^..&g
t;....?H(...e ...q....H.Vn...d..f.f!h......z..={.@fF=.C_.c.w"..`m.
<<< skipped >>>

GET /images/i_tmall.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Tue, 25 Feb 2014 10:06:56 GMT
ETag: "3e8-4f3383f815000"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 1000
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:02 GMT
Age: 4256907
Connection: keep-alive
x-hits: 18137890
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:69815D71833111E38AF6B230
08E312F1" xmpMM:DocumentID="xmp.did:69815D72833111E38AF6B23008E312F1"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:69815D6F833111E38A
F6B23008E312F1" stRef:documentID="xmp.did:69815D70833111E38AF6B23008E3
12F1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...J....PLTE...............W.......tRNS....
....S...0IDATx.b`aB.,.L..H..ebF.`.F8.%.. .\... 9..s....0.H_.ye);.....I
END.B`.....


GET /images/cnxh_spr_150722.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 23 Jul 2015 01:23:53 GMT
ETag: "15f-51b80bd861c40"
Cache-Control: max-age=31536000
Expires: Fri, 22 Jul 2016 02:18:13 GMT
Content-Type: image/png
Content-Length: 351
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:03 GMT
Age: 132530
Connection: keep-alive
x-hits: 979457
.PNG........IHDR...F...Z.......=W...!PLTE....._....a.^^^....Dj-.....a.
[email protected]^..-..`.D..S...........GU.j..X...$.d..|.
!.3..lvw6.,....`.......... ..B.B.`C....O...?..)....6X7...2D5D........!
...8'...*.O..e../..V.>T....0\1\...2......}.]....r.T..`^......... ..
B.B.`C....O...?9Sv.....n..Ue.j......!.!C.!.qN.'.U..1...db.X.I\....IEND
.B`.....


GET /images/icons/y2x5_150626.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 26 Jun 2015 10:04:24 GMT
ETag: "8b8-51968dd523a00"
Cache-Control: max-age=31536000
Expires: Sat, 25 Jun 2016 10:23:50 GMT
Content-Type: image/png
Content-Length: 2232
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:03 GMT
Age: 2436193
Connection: keep-alive
x-hits: 11126250
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:2C320153E7ED11E4BA39BE293C
13D554" xmpMM:DocumentID="xmp.did:2C320154E7ED11E4BA39BE293C13D554">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2C320151E7ED11E4BA39
BE293C13D554" stRef:documentID="xmp.did:2C320152E7ED11E4BA39BE293C13D5
54"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>...C....PLTEMB;..%..$4,)*# )#!.....2..p%!%.tJ
..2 ......."...C6%.. MD;=..l`a0*$,&.......n15,%.........s...YOI..nVU..
.;.sz...../......2 ".".@53...:)..uSGGJGCLp]SXKE.hF1 2[JB.vUbQI...hYSq.
.eMG- ,p.. --.)(..*D:6..wH;=YKJ*2B.fGM:;....eC6*.@0"..iKB<)',l...rn
..Z ..mg_....~{.A;d[OH8Dplf...)'%.{j."!u'.J35 #-hg.xl[-$ jaagb.B5'." .
kJH;,...KFD...UN\.z^.)%..F{rvn_VK.2QRpzp_.|i%..K==....*&rcLnS7cR<y.
.......q........5,).....r$"&.& o27..(C:6.....[..R.$...P..=..J..Te^V31C
WK=..9bTLWH;.2,i\J.jD]TOq_P...b]XB..-..]WUm....?@9<}vsSF;vsrmbZ1&.e
TW.....=fUETHD`^^H@D^^.oec1'(LA@IC@kS;hTTLJ....`[.>51XBL64<.
<<< skipped >>>

GET /images/foot_20141112.png HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 12 Nov 2014 05:28:10 GMT
ETag: "adb-507a2a94c4e80"
Cache-Control: max-age=31536000
Expires: Sat, 04 Jun 2016 08:38:35 GMT
Content-Type: image/png
Content-Length: 2779
Accept-Ranges: bytes
Date: Fri, 24 Jul 2015 15:07:04 GMT
Age: 4256909
Connection: keep-alive
x-hits: 18032622
.PNG........IHDR.......4.............tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:1CC08B86AAEFE31182A0F648E10459DB" xmpMM:DocumentID="xmp.did:0E7C
A6966A1F11E4B235E79F409DED89" xmpMM:InstanceID="xmp.iid:0E7CA6956A1F11
E4B235E79F409DED89" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7B1B1F981D6AE41180D3
AF2125B7B26B" stRef:documentID="xmp.did:1CC08B86AAEFE31182A0F648E10459
DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>..l.....PLTE......fff..................zzz...
.................................ppp..................ggg.............
....................iii...............................................
HTTP/1.1 200 OK..Last-Modified: Wed, 12 Nov 2014 05:28:10 GMT..ETag: "
adb-507a2a94c4e80"..Cache-Control: max-age=31536000..Expires: Sat, 04 
Jun 2016 08:38:35 GMT..Content-Type: image/png..Content-Length: 2779..
Accept-Ranges: bytes..Date: Fri, 24 Jul 2015 15:07:04 GMT..Age: 425690
9..Connection: keep-alive..x-hits: 18032622...PNG........IHDR.....
<<< skipped >>>

GET /day_data/20150724.js?ver=1.0 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Thu, 23 Jul 2015 05:08:59 GMT
ETag: "89-51b83e28b50c0"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:12:07 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:07:05 GMT
Age: 298
Connection: keep-alive
x-hits: 3125
0089..mystyle.everyday.data = {title: "\u7b11\u8bdd\uff1a\u5927\u5988\
u81ea\u62cd\u7761\u7167", url: "hXXp://day.2345.com/20150723146389.htm
l"}..HTTP/1.1 200 OK..Last-Modified: Thu, 23 Jul 2015 05:08:59 GMT..ET
ag: "89-51b83e28b50c0"..Cache-Control: max-age=600..Expires: Fri, 24 J
ul 2015 15:12:07 GMT..Vary: Accept-Encoding..Content-Type: application
/javascript..Transfer-Encoding: chunked..Date: Fri, 24 Jul 2015 15:07:
05 GMT..Age: 298..Connection: keep-alive..x-hits: 3125..0089..mystyle.
everyday.data = {title: "\u7b11\u8bdd\uff1a\u5927\u5988\u81ea\u62cd\u7
761\u7167", url: "hXXp://day.2345.com/20150723146389.html"}..0..0..ont>....


GET /css/baidu_20150722.js?ver=1.0 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Wed, 22 Jul 2015 05:58:52 GMT
ETag: "320a-51b7077197f00"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:10:17 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:07:06 GMT
Age: 409
Connection: keep-alive
x-hits: 4008
00320a..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(pa
rseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))
};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function
(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=
p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('(v(){7 A=1
1.1k||{3r:"1-1-0"};A.2G=11.T.1z.1H;A.1X=A.1X||{};A.1X.1I=v(B,D){1i(7 C
 4C D){4(D.4D(C)){B[C]=D[C]}}};A.1I=A.1X.1I;A.16=A.16||{};A.16.g=v(B){
4("1q"==1r B||B 3s 1Y){z 12.4E(B)}14{4(B&&(B.4F&&(B.2H==1||B.2H==9))){
z B}}z 1j};A.g=A.G=A.16.g;A.16.3t=v(B){B=A.16.g(B);z B.2H==9?B:B.4G||B
.12};A.16.2I=A.16.2I||{};A.16.1Z=A.16.1Z||[];A.16.1Z.3u=v(C,G,E){1i(7 
B=0,D=A.16.1Z,F;F=D[B];B  ){4(F=F[E]){G=F(C,G)}}z G};A.1q=A.1q||{};A.1
q.3v=v(B){z 1Y(B).1J(/[-3w]\\D/g,v(C){z C.3x(1).4H()})};A.1q.3y=v(a){7
 c=0;1i(7 i=0,l=a.17;i<l;i  ){(a.4I(i)>4J)?c =2:c  }z c};A.16.1l
=v(F,G){7 D=A.16;F=D.g(F);G=A.1q.3v(G);7 B=F.15[G];4(B){z B}7 C=D.2I[G
],E=F.2J||(A.1o.1s?F.15:2K(F,1j));B="1X"==1r C&&C.2L?C.2L(F,E):E[C||G]
;4(C=D.1Z){B=C.3u(G,B,"2L")}z B};A.1l=A.16.1l;A.1o=A.1o||{};4(/4K (\\d
 \\.\\d)/i.20(21.22)){A.1s=A.1o.1s=1K(2h.$1)}4(/2i\\/(\\d \\.\\d)/i.20
(21.22)){A.1o.2i=1K(2h.$1)}A.1o.2M=/4L/i.20(21.22);A.1o.3z=/3A/i.20(21
.22)&&!/4M 3A/i.20(21.22);A.1o.2N=12.2O=="4N";A.16.3B=v(D){7 B=A.16.3t
(D),E=A.1o;D=A.16.g(D);7 I=E.3z>0&&(B.2j&&(A.16.1l(D,"1R")=="2k"&&(
D.15.1c===""||D.15.1g===""))),J={1g:0,1c:0},H=E.1s&&!E.2N?B.18:B.1p;4(
D==H){z J}7 C=1j,F;4(D.2l){F=D.2l();J.1g=1A.2P(F.1g) 1A.2m(B.1p.1S
<<< skipped >>>

GET /right/site/like/gul_default_v3.js?2396250&ver=1.0 HTTP/1.1


Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.2345.com
Connection: Keep-Alive
Cookie: sts=0


HTTP/1.1 200 OK
Last-Modified: Fri, 24 Jul 2015 15:00:01 GMT
ETag: "10b7d-51ba04215de40"
Cache-Control: max-age=600
Expires: Fri, 24 Jul 2015 15:16:08 GMT
Vary: Accept-Encoding
Content-Type: application/javascript
Transfer-Encoding: chunked
Date: Fri, 24 Jul 2015 15:07:08 GMT
Age: 60
Connection: keep-alive
x-hits: 21
008000..T.gul && T.gul.init([{"category":{"name":"\u6e38\u620f","url":
"http:\/\/wan.2345.com\/?frm=wzdh-cnxhyx&referer=wzdh","flid":"f2"},"s
ites":[{"name":"\u76d7\u5893\u4f20\u5947","url":"http:\/\/g.wan.2345.c
om\/s\/1\/1254\/410.html?frm=wzdh-cnxh2","type":"2","ggid":28203,"sex"
:0,"jingzhun":"\u9875\u6e38","desc":"\u73a9\u8fc7\u624d\u77e5\u9053\uf
f0c\u539f\u6765\u771f\u7684\u9001\u5143\u5b9d\uff01"},{"name":"\u4e00\
u5200999\u7ea7","url":"http:\/\/g.wan.2345.com\/s\/1\/1254\/118.html?f
rm=wzdh-cnxh-cqby","type":"2","ggid":27380,"sex":0,"jingzhun":"\u9875\
u6e38","desc":"\u65a5\u8d44\u8fc7\u4ebf\uff0c\u6253\u9020\u9996\u6b3e\
u6b63\u7248\u4f20\u5947"},{"name":"\u5bfb\u627e\u5973\u795e","url":"ht
tp:\/\/g.wan.2345.com\/s\/1\/1254\/482.html?frm=wzdh-cnxh3","type":"2"
,"ggid":28190,"sex":0,"jingzhun":"\u9875\u6e38"},{"name":"\u88c5\u5907
\u5168\u9760\u6253","url":"http:\/\/cdn.9377.com\/welcome.html?id=5036
","type":"2","ggid":28404,"sex":0,"jingzhun":""},{"name":"\u4e0a\u7ebf
999\u7ea7","url":"http:\/\/tw360.oq78.com\/htmlcode\/1172.html","type"
:"2","ggid":28572,"sex":0,"jingzhun":""},{"name":"\u5200\u5200\u9ebb\u
75f9","url":"http:\/\/tw360.oq78.com\/htmlcode\/1459.html","type":"2",
"ggid":27894,"sex":0,"jingzhun":"\u9875\u6e38"},{"name":"\u4eba\u7687\
u5251","url":"http:\/\/p.ledu.com\/p\/sgs.php?p=4455&token=","type
":"2","ggid":28466,"sex":0,"jingzhun":"\u9875\u6e38"},{"name":"\u9886\
u53d8\u6001\u795e\u517d","url":"http:\/\/x.joypush.cn\/p\/sgs.php?p=45
00&token=","type":"2","ggid":28376,"sex":0,"jingzhun":"\u9875\
<<< skipped >>>


GET /spf?e=Ju+OOHfpHhc6sENrlwpRJ+zKwVodlz/4OqpJAkCJ/iQBeGRsrGg0DBaCdzOvByNowLjZvAWQB3vvb929A8tich92IzB96PjRMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7KVA/cEBBe0f1xsYWtGN2vYcPMrCztjJSXoM5jf8K7sE=&u=&k=173&tanxssp_t=34800 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.2345.com/?k83357698
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: df.tanx.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 24 Jul 2015 15:06:56 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 24 Jul 2015 15:06:55 GMT
Cache-Control: no-cache
31..GIF89a...................!.......,...........T..;..0..



POST /AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2 HTTP/1.1
ACCEPT-APPEN: OK
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
MAXOROR: 0FEBFBFF000306C3
Referer: hXXp://yxlmbbt.com/AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2
Accept-Language: zh-cn
Accept-yunbs: utf8
Content-Type: application/x-www-form-urlencoded
Content-Length: 206
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Host: yxlmbbt.com
Cache-Control: no-cache

parameter=4iiPRop43onryzd4pMExqDASBIffpmrYhLgvKNj9Zoq9Fmn50/zapGjJfLpTQbi+YwJRDQ8O0ysEzJUOeaW90xM9a7cas1PFr2ZJ/lB2FnHpMNMdYRGiHrsuQHZq0wODKChbq0QTn2EbvAR0cEgLSlI9LG9FFDlpZsBaB+1CMJFg6XwTLqS9BA==
HTTP/1.1 200 OK
Content-Type: text/html
AppEn: 200
Server: IIS
X-Powered-By: WAF/2.0
Set-Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; expires=Mon, 30-Aug-2151 18:17:55 GMT; domain=yxlmbbt.com; path=/
Date: Fri, 24 Jul 2015 15:06:39 GMT
Content-Length: 27
... Hj98JHYiO3SCPkkZzhCQQ==....


POST /AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2 HTTP/1.1


ACCEPT-APPEN: OK
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
MAXOROR: 0FEBFBFF000306C3
Referer: hXXp://yxlmbbt.com/AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2
Accept-Language: zh-cn
Accept-yunbs: utf8
Content-Type: application/x-www-form-urlencoded
Content-Length: 212
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01

parameter=4iiPRop43onryzd4pMExqDASBIffpmrYhLgvKNj9Zoq9Fmn50/zapGjJfLpTQbi+YwJRDQ8O0ysEzJUOeaW90xM9a7cas1PFr2ZJ/lB2FnHpMNMdYRGiHrsuQHZq0wODKChbq0QTn2EbvAR0cEgLSiV583J6MGnGpPdkvFrFhyojef+JWMTCPM+C8TA1AuPC
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
AppEn: 200
Set-Cookie: PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810; path=/
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:41 GMT
Content-Length: 111
... mbm5x5qATdkQJ4Q81eX2ctuTARDUZH jO7q9JNCYzX3CPIb5gI4YkdKoRiTrz14RyA
MY082YUQubpq8KGbPsy5umrwoZs zt/zO48nGlTI=HTTP/1.1 200 OK..Cache-Contro
l: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Pra
gma: no-cache..Content-Type: text/html..Expires: Thu, 19 Nov 1981 08:5
2:00 GMT..AppEn: 200..Set-Cookie: PHPSESSID=sslid82aa92376bd421b95481e
9c8fb02a22c143775040138623810; path=/..Server: IIS..X-Powered-By: WAF/
2.0..Date: Fri, 24 Jul 2015 15:06:41 GMT..Content-Length: 111..... mbm
5x5qATdkQJ4Q81eX2ctuTARDUZH jO7q9JNCYzX3CPIb5gI4YkdKoRiTrz14RyAMY082YU
Qubpq8KGbPsy5umrwoZs zt/zO48nGlTI=....


POST /AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2 HTTP/1.1


ACCEPT-APPEN: OK
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
MAXOROR: 0FEBFBFF000306C3
Referer: hXXp://yxlmbbt.com/AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2
Accept-Language: zh-cn
Accept-yunbs: utf8
Content-Type: application/x-www-form-urlencoded
Content-Length: 276
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810

parameter=4iiPRop43onbEZfXgxLz3i1+6UKD+gdwgAu/BzGxLbA61TuP16Mghk4J5oFSXWZFumv6ey2mK/8WHGCih6AKoRwcKPyRzKr7kW28LvuqL6IwCf4UDVvgWjh8lh1TgruC6OTcTfgIevCU0zcYngx7/IvzngxacthclwIJobx59iXR+eOYAO1bS9nFzsj4FxN04EXXni9KibNz10QJhrCaqRoAuXv2Kjlmj2/RAsS6G3P6oYBV6GbvMA==
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
AppEn: 200
Set-Cookie: PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810; path=/
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:43 GMT
Content-Length: 207
...MSIDoRUzG8fKiES ivaSXvMhp2eqfZDuipFXlrRK2pYBOg5Tkj5tDzxq2Jr7KxnUB6B
TrcVz2qKIEryQK T8MoS8cL dJzSIDjVvOb6 5syuVOLZpWTkow3dJ7DzzpIIyEag TJ9V
v 5AG8eRMX9Hp05UPkVc 7vTeX4ou9zG Uubpq8KGbPsy5umrwoZs z1H25Qhr0d0s=HTT
P/1.1 200 OK..Cache-Control: no-store, no-cache, must-revalidate, post
-check=0, pre-check=0..Pragma: no-cache..Content-Type: text/html..Expi
res: Thu, 19 Nov 1981 08:52:00 GMT..AppEn: 200..Set-Cookie: PHPSESSID=
sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810; path=/..Serve
r: IIS..X-Powered-By: WAF/2.0..Date: Fri, 24 Jul 2015 15:06:43 GMT..Co
ntent-Length: 207.....MSIDoRUzG8fKiES ivaSXvMhp2eqfZDuipFXlrRK2pYBOg5T
kj5tDzxq2Jr7KxnUB6BTrcVz2qKIEryQK T8MoS8cL dJzSIDjVvOb6 5syuVOLZpWTkow
3dJ7DzzpIIyEag TJ9Vv 5AG8eRMX9Hp05UPkVc 7vTeX4ou9zG Uubpq8KGbPsy5umrwo
Zs z1H25Qhr0d0s=....


GET /tongji.php?var=pcs HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:55 GMT
Content-Length: 4
true....


GET /tongji.php?var=times HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:55 GMT
Content-Length: 4
true....


GET /tongji.php?return=online HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:55 GMT
Content-Length: 1
7....


GET /tongji.php?return=times HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:55 GMT
Content-Length: 1
1....


GET /tongji.php?return=times2 HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:06:57 GMT
Content-Length: 1
1HTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-By: 
WAF/2.0..Date: Fri, 24 Jul 2015 15:06:57 GMT..Content-Length: 1..1nt>....


GET /tongji.php?var=times HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:07:15 GMT
Content-Length: 4
trueHTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-B
y: WAF/2.0..Date: Fri, 24 Jul 2015 15:07:15 GMT..Content-Length: 4..tr
ue....


GET /tongji.php?return=times HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:07:15 GMT
Content-Length: 1
2HTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-By: 
WAF/2.0..Date: Fri, 24 Jul 2015 15:07:15 GMT..Content-Length: 1..2nt>....


GET /tongji.php?return=times3 HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:07:17 GMT
Content-Length: 5
14080HTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-
By: WAF/2.0..Date: Fri, 24 Jul 2015 15:07:17 GMT..Content-Length: 5..1
4080....


GET /tongji.php?return=online HTTP/1.1


User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Accept: */*
Host: yxlmbbt.com
Cache-Control: no-cache
Cookie: safedog-flow-item=3ECC87E4A6ADF262C695DA2ACED7AC01; PHPSESSID=sslid82aa92376bd421b95481e9c8fb02a22c143775040138623810


HTTP/1.1 200 OK
Content-Type: text/html
Server: IIS
X-Powered-By: WAF/2.0
Date: Fri, 24 Jul 2015 15:07:35 GMT
Content-Length: 1
7HTTP/1.1 200 OK..Content-Type: text/html..Server: IIS..X-Powered-By: 
WAF/2.0..Date: Fri, 24 J..



GET /bao/uploaded/i3/14748055712262275/TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100.jpg HTTP/1.1
Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4141
Connection: keep-alive
Date: Tue, 26 May 2015 08:44:58 GMT
Last-Modified: Sat, 25 Oct 2014 23:33:14 GMT
Expires: Fri, 23 May 2025 08:44:58 GMT
Cache-Control: max-age=315360000
Via: cache51.l2de1[0,200-0,H], cache61.l2de1[17,0], cache1.by1[0,200-0,H], cache4.by1[1,0]
Age: 5120530
X-Cache: HIT TCP_MEM_HIT dirn:8:856083923
X-Swift-SaveTime: Wed, 27 May 2015 12:37:10 GMT
X-Swift-CacheTime: 315259668
......JFIF.............C..............................................
......................C...............................................
........................d.d...........................................
.9...........................!1A..Qa."2Rbq.....r...$BS................
....................>.........................!.1AQ.."q....a...#2BR
.....3Cb..................?.....J...@...^.z...Z...... .......Q.BE!.M$.
..M.F.NR ..$.. ..J$.*........2;P. 0}.(N....cX..4.nk.. U.....a..!U...).
[email protected].....=...M..{Q.....{s..J.o........ .=..(...$1.......j...C... 0..(
F.....%%....(...(D.\^T!6....$.j.3.............&.N.........6[1S..P.....
.{5a.%....e!.h.{.....m.....-..T=Q..Ji..t....*.O.y...q?H..I...F...CvZ|]
....c.....P........v......L.}d..~b....1....L{\..`[..T.>.......x.D..
Z.#........j.....[.%..a.y; ...r<.jz....rXC........../..K`n.U.Z..w..
..... V.R.h...........-.....qJ..v..<..e....9.......;....y(K.2....#.
....*..!..I...]()&..jR...3D..>P4J.{..aG...%..V.IJw.9...=.OA.=k....}
..Z._...{Xo...q...x....!Y.<...^.F.?.g.S......Maq.g. .M.3.RV....!9.R
.c....W.......u.^.. .}......ge...0.8...J....V.Z]..m....d7.2...n_.]....
....;f0.M..:...1y_..........Fe!(a..t. b...0 ..... ........Q...h...aE..
Y..,.Y.qU...m...(,c..KG.."..,.ax...Mx...=..l...L.I..|.J...,.E.:..C..8.
.....R ..N......a.....O2...-SV....<..G... ...K...M..T......?.y....9
z...k....m,fol....7.8....A..7...Q....v*r.....o.\N..76EuHp.B..%.....:.b
.fF../.....s....P....a......#U....v-..$s.......k...M....&V.....C...B..
q..8..M...V..t...........l.`.q=.P.2wIcCc..=.][email protected]
<<< skipped >>>

GET /bao/uploaded/i1/18332057348715882/TB2fOuaaVXXXXbUXXXXXXXXXXXX_!!12268332-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 9661
Connection: keep-alive
Date: Tue, 26 May 2015 10:24:40 GMT
Last-Modified: Sat, 25 Oct 2014 02:51:28 GMT
Expires: Fri, 23 May 2025 10:24:40 GMT
Cache-Control: max-age=315360000
Via: cache52.l2de1[0,200-0,H], cache59.l2de1[7,0], cache3.by1[0,200-0,H], cache4.by1[0,0]
Age: 5114548
X-Cache: HIT TCP_MEM_HIT dirn:3:52951679
X-Swift-SaveTime: Sat, 06 Jun 2015 18:50:06 GMT
X-Swift-CacheTime: 314379274
......JFIF.....H.H.....C..............................................
......................C...............................................
........................d.d...........................................
...H............................!...1A."2Q.aq...Br...3.....#$'CRUcd...
.......................................@..........................!1A.
.Qaq.."2......#CR....B.$S..b................?...> ..... ./O....R...
_.T..4UZ.e....<.J.w(.{...ZL........%..Vw.m.*.1.V....../)QV..l......
.. .d.^S.@_q..*.O.G!%.=..'..4p..."..yT...Clr......E28...-....tR...D..!
.J}d.iq......E/.}vR..?..].eT.j.i.....b.H.T..7xu&.w(.$!..Ue.1me..0.J..v
..#. .r..^>".....K.....a.E.({Q.F.R.R".IHuI...B.H>.. p...........
*k...N.].l.cII.T.u.e_.)B.r...J4(.....o. .n,E!.=&.C.G..De...L..2m.Y..p.
J.f....~pJ&!..4.hSu"..A...Q2..gt.Z..!R...S^Q....).B...H..%).......'B..
Z...N..:f...1...:...Rd........%.]_..U .F.P....d3.....q.w....2L....#.U.
.[..e.p..%.s..#.D.nC.h..;u6.!....R.Sw'n..GY.K.u.#.mK*[......X B.R|....
?....l7.e..Z.[...MCc........5..f=....Y..8Z.Li.\)y...\_..%..#4b..z...'.
5.../.,.L.z.2...#yh.t^3\.c.s...QV.........UY _mk*[email protected]\i`...X)V...
...O..M..k..:O......cPiI.R.oh.........A%q.F[o.T....n..!.........l..TN.
c.U..HE.O.w..~...#..fP..`.L.".a..t..Q...`n.....f.Jb..g*.d...R...x..'1.
........""..H.LG.DJSVH<..P..~..o.Xb....G.DZ...e.c._:.|...DK.Y...;..
..X.$....nb.. S.y..te.9'..0.{....D.....\....c.Y!..Y...qhD..n..>u...
u.3...LqD...V.8{...q/....!.2....)..P....9A.L...y.(..b*..).b..u.EHd<
..~C......._1....._......._.tU..>&V...!.Q..H.E....d.....3K.\;8 
<<< skipped >>>

GET /bao/uploaded/i4/100080100438908890/TB2jXQtcFXXXXX1XpXXXXXXXXXX_!!31150008-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6052
Connection: keep-alive
Date: Mon, 01 Jun 2015 01:26:35 GMT
Last-Modified: Wed, 13 May 2015 04:38:55 GMT
Expires: Thu, 29 May 2025 01:26:35 GMT
Cache-Control: max-age=315360000
Via: cache62.l2de1[0,200-0,H], cache40.l2de1[12,0], cache1.by1[0,200-0,H], cache4.by1[0,0]
Age: 4628433
X-Cache: HIT TCP_MEM_HIT dirn:6:24959231
X-Swift-SaveTime: Sat, 06 Jun 2015 14:51:58 GMT
X-Swift-CacheTime: 314879677
......JFIF.....`.`.....C..............................................
......................C...............................................
........................d.b...........................................
.O...........................!..1AQ."aq...2.#$BRbr.....3CSu......&'DUs
t........................................<........................!
.1Q..Aa."2Bq....#...3..CS...bc...............?..=....\x...Ytd4...9.Bd 
v..U...@$))BH.IU..s.H....O........q!..wv[!4$.hU........tv....v./$e.U..
j...A.$8...-.c...%...bl.z.P'....{.L......X Y...fvQ.......n.}..FZ:....)
.b:......R..SE.d!*F..]..%.JE../.6......gz..@....<HLm....wZ[..O??.'.
.B.w.}...1>W......g.f....p4.p...m.....{l-..H....W4>.:R.H..kM....
..".Q.. e.2]KM6.r.(....:.4.....r....^.S.9i.[[email protected]..=R..,.....q,.
........&Mmx....6.....,,$.1[tB.^..QIkVu.\..C..hR..z..A\...[l.d.".pYW;.
.....,....FYf..|.~..s3.`?.<..u...:.3.w.Um..&*.h..@.@..@pK]].y.../..
.Zy........... r!~tLh&=..n..........|l..Da.....sEU.....'e1.M]..nb..E..
.F.....-.<.8..*JE.}E*......L.d=...<P...,......5..... .H$........
....7......^.r....)....N..~x....y.B........v.......r.`.../'....2.~.r.d
f.....DR...3.fZU....A...pH}C....5|0.#.x......}....M...?$y..'.Z|D.)..I.
,...RI. .1...Y.6...!....6........fpS.V... .../..O......n..7l...-...-$g
.....g....,./M.}.>.X[R...8...T.T.k..>..a......\<.m.K..[..,..{
qQbQt.....I23Aq..m.A....y.A.ce.0f.....%w.y3U...U2...S...kf9.......v...
T.R..._\(..S.!.V.K.. .....d.X..z..... ....... ........1.V;...K........
}..<..O.&.i......^.Q.k..[.71..S*&..R.T.IR.$......;r.m.<h..|I
<<< skipped >>>

GET /bao/uploaded/i2/10219070376882870/TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4011
Connection: keep-alive
Date: Tue, 26 May 2015 08:20:45 GMT
Last-Modified: Mon, 16 Mar 2015 08:00:27 GMT
Expires: Fri, 23 May 2025 08:20:45 GMT
Cache-Control: max-age=315360000
Via: cache58.l2de1[0,200-0,H], cache11.l2de1[0,0], cache8.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121984
X-Cache: HIT TCP_MEM_HIT dirn:5:893842158
X-Swift-SaveTime: Tue, 26 May 2015 18:16:14 GMT
X-Swift-CacheTime: 315324271
......JFIF.....`.`.....C..............................................
......................C...............................................
........................d.d.."........................................
.M...........................!1A."Q.aq....#235BRs...CTb.......%cr...'6
DStu....................................5.......................!..1A.
Qa.."q#2......Bb..................?...;.....Eq..fJ,.....J* d..=&.\6'|.
../........I....6n...d....\........Uy1k..m9..?L[..E.'.<ZZ.7.9OuA).G
,..Ur.A. YI....c{.[.(SM........)O...kZ.....x..E.Xt.oV..q..F..-LV.5;H..
V...j.....k}.l.M e.M'...o.YQ..Eq.:YQR.*.e..T7...}... .q.....L..4.w.5..
.....q...p.!8...3....i.......U..(..%..s.........!)Q..'.,H....4....b[..
W&[Hy..z^m. ;..J.z..*.R.....*....HH..d..<A..Z...?..#&2..f...I...s..
.P.:.,.........x..........c..H.C[.j.-..s.9...I....^.O..O.U....S..XK...
.N...j...G.t..]'........t.....V....sL!.e.n;#.}....Nz..Y.....S.3..H... 
%:.........p...u..................v.[...&.....[.m.T0Fw..J..>.@..`j.
.Z....{........X.8.....*-..l...E.LL....f...i...iy...qI..|..3N1.:e..3*.
.>.M...N..lt4.T..Z..).!..l...}y.>1.B.g.C.. ......|......d.%..2.B
s.....\.V....sh.6/..{~..<....4....pEz.....lcQ_....e.....W.u}..d...K
n-A..TR....F.k..A.J..O^..=.n.ynD.........$.p:.Mz.......w.G.6.v...qv.m.
...j.........9.=1."...l...f....{Z.8.\LN6...[E....T.`B,H.a..R....".&...
..bl.\..}.d.:.Y.7..S#..88...H.t.m.m.c.I...{....rq.K..pm.Ckd.../n%A)...
..sQ-..a.67{.N.~L.p...\..g..[....R.O.x....h..}...h.C.y..s.^....2.J....
.$....RN:BB[[email protected]>...{..Q..d.."..@$*.6. ....l.mJ,;5.....
<<< skipped >>>

GET /bao/uploaded/i2/113140100518314081/TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4962
Connection: keep-alive
Date: Tue, 26 May 2015 10:24:41 GMT
Last-Modified: Fri, 15 May 2015 12:15:31 GMT
Expires: Fri, 23 May 2025 10:24:41 GMT
Cache-Control: max-age=315360000
Via: cache31.l2de1[0,200-0,H], cache27.l2de1[11,0], cache4.by1[0,200-0,H], cache4.by1[0,0]
Age: 5114548
X-Cache: HIT TCP_MEM_HIT dirn:10:823171386
X-Swift-SaveTime: Wed, 27 May 2015 12:32:55 GMT
X-Swift-CacheTime: 315265906
......JFIF.............C..............................................
......................C...............................................
........................d.d...........................................
.:.........................!..1.AQa.."q.........2B...R#$3.............
..................-.......................!1AQa.q...".....2R..........
....?..o..|m.......;......{....``t.=4..;c..4.^[email protected]........
..t...#[email protected]'..}..I$.}....`[email protected]#..o....WL
..|..@&.....}....s..._....8..h.Vs..`{.y.....gl.......q..m...v..G>]v
;t.....Y.7.A.|.....p>.{..:...........|...X......?-..:.....:|~..#..s
..h.TN.....@&U...Nw.>Z.'0..|...??...j./.../...y .g...4.....h..W.}..
...t.{...t#...>]...d..>...|(..:~{'[email protected];.
....A..=4........@[email protected]..=.4..^.m.c..s...h..r..7....
....|>?.F..y..N......t.:.Ml.y<z.{[email protected]...>Z.......}.
.....`<}................*.F..X............w])m.r....4....s..H.0.jT.
...(57.v....-_.k.:K....R.M..\...a.......3;...-..............Z....V.B.N
..zEi4.....@[email protected]#...!(.M..]{. :IiU....ej.X.Sj.c.!K...9.%..:..\.F..
.c)8............9.}J.H.=.......H....9...#u.-5.heJ-... .J|.[..Q..G.....
 ...Sk..s..G..z.M..9.0w.;....<..ps..4.......N...|...9.:..{..I.A....
U.*T.C.Q.?. m ..n.)X..J.N...U..0Z.v.r]V..6.%n........A*....~.M....?.n.
.......3.4....\.Dv:%8.I..Q.NS..-3..........Cj5...%...<E.......i... 
]d.I.....\.YR..-1z^....%./..Z[ Jr..K....y...G..?.......x).....m.tE...\
8......#....:,.eE.Ha..A...C...$..<..u........Q...Pb.= .....yV.J
<<< skipped >>>

GET /bao/uploaded/i2/10219070376882870/TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 4011
Connection: keep-alive
Date: Tue, 26 May 2015 08:20:45 GMT
Last-Modified: Mon, 16 Mar 2015 08:00:27 GMT
Expires: Fri, 23 May 2025 08:20:45 GMT
Cache-Control: max-age=315360000
Via: cache58.l2de1[0,200-0,H], cache11.l2de1[0,0], cache8.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121984
X-Cache: HIT TCP_MEM_HIT dirn:5:893842158
X-Swift-SaveTime: Tue, 26 May 2015 18:16:14 GMT
X-Swift-CacheTime: 315324271
......JFIF.....`.`.....C..............................................
......................C...............................................
........................d.d.."........................................
.M...........................!1A."Q.aq....#235BRs...CTb.......%cr...'6
DStu....................................5.......................!..1A.
Qa.."q#2......Bb..................?...;.....Eq..fJ,.....J* d..=&.\6'|.
../........I....6n...d....\........Uy1k..m9..?L[..E.'.<ZZ.7.9OuA).G
,..Ur.A. YI....c{.[.(SM........)O...kZ.....x..E.Xt.oV..q..F..-LV.5;H..
V...j.....k}.l.M e.M'...o.YQ..Eq.:YQR.*.e..T7...}... .q.....L..4.w.5..
.....q...p.!8...3....i.......U..(..%..s.........!)Q..'.,H....4....b[..
W&[Hy..z^m. ;..J.z..*.R.....*....HH..d..<A..Z...?..#&2..f...I...s..
.P.:.,.........x..........c..H.C[.j.-..s.9...I....^.O..O.U....S..XK...
.N...j...G.t..]'........t.....V....sL!.e.n;#.}....Nz..Y.....S.3..H... 
%:.........p...u..................v.[...&.....[.m.T0Fw..J..>.@..`j.
.Z....{........X.8.....*-..l...E.LL....f...i...iy...qI..|..3N1.:e..3*.
.>.M...N..lt4.T..Z..).!..l...}y.>1.B.g.C.. ......|......d.%..2.B
s.....\.V....sh.6/..{~..<....4....pEz.....lcQ_....e.....W.u}..d...K
n-A..TR....F.k..A.J..O^..=.n.ynD.........$.p:.Mz.......w.G.6.v...qv.m.
...j.........9.=1."...l...f....{Z.8.\LN6...[E....T.`B,H.a..R....".&...
..bl.\..}.d.:.Y.7..S#..88...H.t.m.m.c.I...{....rq.K..pm.Ckd.../n%A)...
..sQ-..a.67{.N.~L.p...\..g..[....R.O.x....h..}...h.C.y..s.^....2.J....
.$....RN:BB[[email protected]>...{..Q..d.."..@$*.6. ....l.mJ,;5.....
<<< skipped >>>

GET /bao/uploaded/i1/T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 12624
Connection: keep-alive
Date: Tue, 26 May 2015 19:12:46 GMT
Last-Modified: Thu, 26 Dec 2013 05:37:29 GMT
Expires: Fri, 23 May 2025 19:12:46 GMT
Cache-Control: max-age=315360000
Via: cache36.l2de1[0,200-0,H], cache55.l2de1[5,0], cache2.by1[0,200-0,H], cache4.by1[0,0]
Age: 5082863
X-Cache: HIT TCP_HIT dirn:3:33525537
X-Swift-SaveTime: Sun, 07 Jun 2015 12:51:14 GMT
X-Swift-CacheTime: 314346092
......JFIF.....`.`.....C..............................................
......................C...............................................
............................."........................................
.F........................!..1..AQa.."q.#....2Bbr..$3R.....C.Ís.....
................................4........................!1.A.Qaq...."
#2......3Bbr.............?......VX.........hY.......fU9......x&..J.2O.
..^\..yj...}Ik.L....u........iX.xB.}h..j...s-$$.y...l.h...T....l.S..M.
...8."..;.....n..YLV....Z8..C..v....>.D.... .S.Y$?.T(..:.X~.F...:..
2.vC...k. .c.D......Y..lP..c.r2...=z.i....8..k.U..(.c....c...%\......w
..k...{[email protected].. .|.W...z.'.v9{~...z...L..A...2...g...C...
...}.......i.r...l...^......l..I.7.7.7..,...=^...}.p"CIo.w.......fj...
.... .@{K.%.....Y.R.....G.Cs.?...o...pq..I_.F._..jS...Wp...u....,.q...
.9..c.5fue ..^[email protected]....*.[[email protected]..
N.&..I....R.i.%.rW.`.~..3U...q....c.'a......J.~..i..5.%ue...gU;..#.0b.
:\....?.5........Q.`...h...-=Hg..l.D'.?Q..u-IWKX..P...H.y.!......>Z
..i......?..l...TC.....F.D5..L...['.#...j.....f....~...X\..K..j...;..}
H.....#.=2Wc.zg.M...._x{|.....m..p....SHP....0*G\......j[...#{...a....
.o..... n.:*...Mlfj......E.9...y...86..!.T.)a.61...,vQ.q......[x5*.bs.
..?..z.8..,T.)4..w....%n.....x....O..X.]VoU...Q.-:.......z...v...$..."
....M.<.'.H8.9.NN.e.7..,=..g...U...!..S.r.n.v#....u..S..O.......KQ-
.....;rs........?q.... .x....>..........uX.-...!.....j..3.....].t..
Dc....[?.T.;[email protected].%]3K.:.=2.z..F....K..ee..?]J...On...V.Ch..5.
<<< skipped >>>

GET /bao/uploaded/i1/10219072603507803/TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6713
Connection: keep-alive
Date: Wed, 17 Jun 2015 21:46:38 GMT
Last-Modified: Mon, 16 Mar 2015 06:30:37 GMT
Expires: Sat, 14 Jun 2025 21:46:38 GMT
Cache-Control: max-age=315360000
Via: cache38.l2de1[0,200-0,H], cache41.l2de1[0,0], cache5.by1[0,200-0,H], cache4.by1[1,0]
Age: 3172831
X-Cache: HIT TCP_HIT dirn:6:89560289
X-Swift-SaveTime: Thu, 18 Jun 2015 03:31:18 GMT
X-Swift-CacheTime: 315339320
......JFIF.....`.`.....C..............................................
......................C...............................................
........................x.x.."........................................
.R...........................!1..A.."Qa...#2..46BUbcqt......$&3CEu..%5
RSf...........................................;.......................
..!.1A.."2QBaq...R......4r..#$b..3............?..;.........AM....%d..W
.u-\.vq....4.....u!hSV.U...d.w}.....^..xU.,{............7....~.[...~K.
Le..5....C./...#)s.,.....t.3.L.M.n..X..m...alu.....&.).l.T....a2:.....
x...%........y>.U....)......kj.....d}..L......s...7..6.c...n\..OyHx
..8].xu.........$<...()hC.:.ue.KKXBB.B.B..7.......\n......=..rxv.?.
.).9...h...-.J..s$z:...MP..6r.=....o..z` ...].T..H...'....4k3(N '....b
....lh....N...^?.....-T.]...oI..O..6..#...K..f.. wJeXX^H.H.=u7.wan...|
.w7.8.g..w&....i....M;.C.([.#!/%I[K...P'.t..5H..P.....JX......q......p
v.....e*.I.V........x..}.........;...,..CF...$.......%..v..5~.~.....^M
.H.........I.[VA.#..u.....v..k... ....\u.3>....6V...yu....p6..#..E'
q...k7.....xjT....C...3.....!..b...8.....v..k.......v..k....d?.u.Q....
.<I.....q....4.!...k..wk?...Z_.k..wk?...Z.zSM. o>...9.Km.^N.mCm.
.......lC#.U.'.*.......*..l...'..'Q.mn.....ig.P...,.$....?.7c...}.l..Z
w.b...j4Y5..LS..9...J(Y.IsseJ.(Zv..Fu........ K...R"....[.,!-....O..}.
W.a...^.7..U^..~.\.S....C.HP..,.v.Br.......%IY.4.o..T.n.x..BH..Q.#..e.
..Xp...m.......*/..nC..|.s....?dQ...^v...U..I.G.g;..?}..?.....Giz$..].
.[F.=.%....).....[.J.l...d.D...k^OZj)..,.^..V..S.#.....AT.....[...
<<< skipped >>>

GET /bao/uploaded/i1/14748057473615918/TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8630
Connection: keep-alive
Date: Tue, 26 May 2015 08:43:07 GMT
Last-Modified: Sat, 25 Oct 2014 23:36:25 GMT
Expires: Fri, 23 May 2025 08:43:07 GMT
Cache-Control: max-age=315360000
Via: cache32.l2de1[0,200-0,H], cache31.l2de1[11,0], cache5.by1[0,200-0,H], cache4.by1[0,0]
Age: 5120642
X-Cache: HIT TCP_HIT dirn:3:858998258
X-Swift-SaveTime: Fri, 29 May 2015 17:16:08 GMT
X-Swift-CacheTime: 315070019
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
.=............................!."1A..Qa.#2.BRq.3b...$r..&.............
.........................<.........................!1AQa..q..."2...
....R..#3Br...b..............?..PB.w..../..]dC.C..._%...dC....B'.m.,..
}.=t%K.@:.Yg.q..?-.._|..m._x {i./...B.hi..P.m%.....m99d1..hB..4$ >.
}.Y.s..B.C:........]k~K..^}.G.....:pc..J.%~....Jfn.Z_S.?.KG.J..O......
..u;p....3}.E......Jc9..c..Z..........V...?t.n.[....WTn...Cki?.@......
.vw.w....?..Q.z]../SjPg....^J....}F.dn.*58uU9...2.$..q.C...RISX>...
D$....].N..=9($..B....BE......DV....m.*Q..J..l....pc..P........l0..)..
..ABs.`..F@..}\....ut..c.j.k......r.....muy.EF.........GS.....R8....'.
.W..Zq...?...A.o......9...p....J..b..]ndd ....*.*.....s...F>PO.....
.....=\..p.'.u#{H....W..vEb..pf..Yv......\q.2..N...........=.d.m.....5
.M..B......;e q.TBG....*.%\.Zr&......2lV.q.3.2H.pKc?M<..5.\G......&
lt;.................m*d.j.Rn*,..6.MC..RX-....SKt....- ......`.q....E.$
E.-'P.....A..-...C...Vl..I... n...<z?..I. ......)..k*.3......U.*;.X
......>..5PtO... .._.vk..u.X....[[:.f.....!...).....|.#.{.....w.*..
Z..RZ.`l.u.XO...6Y.<.9..H.D...1...B...v5.....s&SE..).Si.,! .g....J.
.JI...9C...E. [email protected]!u..r$....R..<x...8.;{..].F........
ge..G....U:...7i.~\..Si*Z..(..N0.......r..f......P=n...}..=..L.Yr=....
nT.aE.qy.!.......$...q...I.Cc....OE..*.....cb.........\./.S25I..."
<<< skipped >>>

GET /imgextra/i1/10000026610344219/T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 11396
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Thu, 08 Nov 2012 03:03:43 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache42.l2de1[0,200-0,H], cache34.l2de1[0,0], cache2.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:3:851643770
X-Swift-SaveTime: Tue, 26 May 2015 13:33:03 GMT
X-Swift-CacheTime: 31517509
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...<............................1...!."2AQ...aq....#$..BR..br......
............................;..........................!1A."...Qaq..2.
.#...B..r.3Rb...............?....~..4...=j~...J...}.........gh.b....`.
.(V&..~m..l7..q.5<.f....DE.<2.rUi...Sm..gm[.v.21e]c.r{1\w..3.pGN
..r.5....jA...[....._.l.....&...F..u..c...W.F".....1.%......p....m.$.'
.p.........<.m.Eq.9..........co.....$hwz...n.N...'.7......\[email protected].).
 ........j..#~.............jc.......Q...f.....YFv...y9.D\Y.2..........
}Z.Et.ERE....8. ..J.tKk..$.....8..a..F.t8...a.hn..$.....D.U...........
.r.X...]........x.UG..l.m.8...l.-p.bZ.akYe...J.^..).>a54..Ndd..;f.`
.S.;{7.K...4;.B.7@FYI....../.Iyr.f)|=.8"B.P..'..p.......0..#..A...j.N[
9I7..7P. ...U.Y..0.T...b.. `0.....J.....Q..4QP....tR...........5......
....... .v?A.Gq...I.}>.}F.jf.e.(.E....Av~Kb.....E6.1.~......t...c).
U......\.3..H....)..........6[..Fl....$....m....8.jiRX...d........@P9.
...d...Mjf....&.m......vo.y...v.j.?>.V.2q.4t.E...M.@.'".......{....
.s4WX>.;3..e..........`...N<tg..H1...|..J.L....*.Q8.........'.c.
O.EdsL...Q..4QP....tR...........5............. .v?A.Gq...I.}>.}F.jf
.e.(.E.`}.|......!8b.y..w...Kc)....4^O..b/.#JI.`...3..q.t.....B2e..l.q
l..m....}k....-...5...$....`..9XK.q.,.8b..K,4.jK.9.gr.t...7Q%Q.H..{%..
.X....j kw:.......U.<...0q H.Q.P_.:.qe.....ib...pRq.T..8...a...
<<< skipped >>>

GET /imgextra/i1/10000017722554780/T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16791
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Wed, 05 Sep 2012 08:40:07 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache25.l2de1[0,200-0,H], cache53.l2de1[1,0], cache1.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:0:21634766
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...@............................!..1A"Qa..#q..2B.....$.%.3CRr.........
.............................=......................!...1.AQ."aq....2.
.....#B...R.$%3Sb..............?..yT}.B.....;..o....A......:I.xEt.....
.;.w..B. .q..o..6.p"Q.O.....zh.~a.....b6..?...../@.]zo.......)......d.
.._.G..5......G.......=.t!.?....H.N.I.. ..../Y....@W.'l8NE..6.....q$..
...:l...~.j..........l...p6..9!.(.....9R.........m.......JrL..J.....4.
[email protected],....%[email protected][email protected]"*.....Q:
.B...........*...RT...BQ..I.t.w.zC2...\.......#Gn...h.....G.:....\..g.
B....q,.g..u.Y{-MN../"#.....h....QS....HfH.....9.s..........E ...ZgZH.
.WR. .j.B9.~Dc^.e..mFw^..L..h"..m.ud.Gp%$..v........|.d.Y...*f.z.?.T.C
.EY...........Q.X...v......9.8...=..Cjp2.ti.R l6..Xm....M..&.....).\R.
}F.*$.$..2q..S*.S(.J[.i?wL.R).. R...5*.5qwh$.|..x....@S^.=.@...|...AN-
`@Q$..I..p.)w...........'[email protected]=...0...~..m................]..~!.{|..
.q...6`.m....@;.......|....T........E.w................p.X.X..0..c..nR
.......q....=xy1..l_m.L'......}..a..!..J...P.&.....Q...t..o...%D..x.L4
.w.,e...=;...`>..~..6....L&2.0.......w.z..w.......x....W.^o)|......
..!YM..Q.3"O.G..p.....u.B...x..(*..@@....)...sjl..O8B.t)-"n...G.H$....
.._.fm.0.).([.rm..)&z......c..V.Q.7.w.,..*9B.g..I.GG97aY5.6\....a..th.
..n<....-JK....x.w2.<{...4-..p... ..o-../~.....^....]Y..B. .
<<< skipped >>>

GET /imgextra/i4/10000018183036801/T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_220x220.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16935
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Mon, 22 Oct 2012 10:20:06 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache64.l2de1[0,200-0,H], cache29.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:9:785956058
X-Swift-SaveTime: Tue, 26 May 2015 17:09:32 GMT
X-Swift-CacheTime: 31504520
......JFIF.............C..............................................
......................C...............................................
......................................................................
..J..........................!.1..A.."Qa.2q..#BR..Cb..$3r.......Sc&46T
.....................................:.......................!1..AQ.aq
."2....B...#b.Rr...$3C..............?..h.,$....Oz.B..@....*.T...P.....
i^.i.y....U..._..K...=~..=H..C'?:..#....gJ.....!...L.>jR....5.*Dj..
y......{..k...gq.:...R...L0o.6......S.XK..9.K.......$...x...I...h...."
.u.Di.....hst.V{...Y=.e?...0<......J......*... @....*[email protected]...
[email protected].'.4&.{....*[email protected]\...i.U._A..M,.8...
._z..fj-I!O.w.f3y.Eg.Zlz$|..x.{.........'c...R.U.....v.....B..;m'.....
v.m.... !9..N)....^i;...2.{c....>.|f;o.......-..f.r...;..V.....{...
..Hh..Nk2...@....*.T.Ev...........(......=......*.T...P..r......C,2...
.... d..@.'...:x..C'.]Dy...4....jg.].........q.5.XD..3dn$...*..b..i9R.
...#"V.B.?..n0>.g.S..*sM..~.b[d(..`.)`@.......H. ..0.9o..ajK.ZHPZ8)
 ..Gb.cH.....6:..3m...Y....~.7Jh........x....).t...Z.T...P... ....&P&.
[email protected]...@.=..Boi.].i. ...y.7t...._B.X....}......|.H.3...
...>.H..= Q.\f#da. ...@.{..V.A...,..&... rw.`...Y...*X..9...F((....
XC.`z._.....v.#."k.W.Nq.i.k.......%..6...F._.q...%._. .{.P...1R.Aw;S.5
..Y`..mR...=.H..;-..A.J=J.T...P... [email protected]...@....
Z.I.)...;jy.Vp...T...M.p...W..a....2.......V..(.e ...........E{...'4..
..<{.L...<7-....C............r..54.I.ujaAh....2..jk3.e.=....
<<< skipped >>>

GET /imgextra/i2/57378349/T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16256
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Sat, 02 Nov 2013 19:11:31 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache44.l2de1[0,200-0,H], cache47.l2de1[1,0], cache4.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:2:817091035
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
..6..............................!1.."#AQ.23Baq..$%(R.................
..................A......................!1..A.Qaq.."......2..#B...Rbr
..$3...4Sc..............?.Q...._.&z..b..sDq.r?Q..*oU..8.%....k...EG.f.
k....h....b{.....W....|.*6..x....K..Dh..5 .Q...v.;f...L...,.).@.../v..
.....5....o..1?xwJ:..q..3.c.i..;~?.o.c.............=.....J...d./...8..
...7...W..BQ.>.K..G........${.......Z?.=.(..>% M..(.....3....Y_.
c.....?....i].Ve..k..N.H.v?.N......L...b..7D...Z...|.I"..yR.zS../.....
......>.=b...gT1x.#....u.......B....UW.x.,..C1.e..wS...D.....l...0N
.......^.|[email protected]....}.2...T.uuHV`C.. hI....Nc.=.
N.....r:Z..x..W..|@i.&N..J..Z..........@.?..K..T..1SA....7?........\..
&.HU.....4..lw9j)%.k|b{....}.f|~..........T.. .wk.Z.Ta..2N.../...n...;
K..a.a.....T...Pe.1.....?.......`zE....?..."......K.. ...T.1....3..w_.
W....3.z..~.q>A.r.W#OU..;.d....O.\H...a.g.=..$..:..ImG^............
.S.IV,......".ze.......L....7Q...*..zOP......Y..x.G3..L......C.I.M.N .
[..{.....e...2[.[.%@w.(.....L.....X...(.....A.3"'1...0........F.N.5K) 
B\].....\....3.|#[email protected].........=. "&......18.Y.ge.|..3....`.|x e.i
x.......B.....9..b""|.?y........$Q.n;.....'...x......"J;L.xw9.(.....Ox
..D}]!'.Ig.....Im}..Z....h.O.B....Q..e.....2?...y..... ].....ZR.(.....
7.Y...=Xz...SR.......V....s`6..{w........~.=.J'.i...j.p..?.Vt.j..I
<<< skipped >>>

GET /imgextra/i1/10000028885465812/T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16435
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Mon, 14 Oct 2013 19:03:05 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache38.l2de1[0,200-0,H], cache1.l2de1[1,0], cache8.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:2:891995876
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
...A.............................!..".1.#A.$2BQ..3C&7RWa..Sbqw........
...............................D.........................!..1A"Q..2aq.
..#B...RU.$35b....r....Cst..............?.......z1.....`..#Z... s.l..?
=.....H.h.-.....P#.>s..e......dKf.....E8.#.....Z.0'=..t.{.(.(./F.(.
.......:......d!....0..K.50.qL./.'..#h.F.}F....e.|C..."[email protected] v.Ju...
.#...y.....jj.^f.|....|d........@ 3....>.~..M..f.)........~9.....{.
....4.......0.....y\O.D;....x....%i.....Y.d.. .....gC.B.j.x...&.<@~
..#..%.C.3.k&95..4.C.AP..fD#G..X.#.`J#../d.........R.r......H.'w$-.dh?
..........>..f....`.?...1.\....}.i..%.  .Y1.[z.6.....`]$_m.1.XO*|..
..QR.O........./...q..h..........>...x...o..7....K..............~f.
..6..:...)....c......-..oE3.....L...j<..... .......W..0[.J).[..&...
..CO].T..!.........fPBE..@f$.....T.D.N..{...]..R.`.|..u.....f3......vo
[J./-......6s_W.*............9.3PCR..[.2....g.....N.... .rO..7xj.X.<
;. N.od.h_`T#:.DiEb.....)...rN....\E....ip|.M..}.&..bT.=S.zm.ZmME.(.W.
i.k.......M.2l..Y..<L.rN..:...j..o.nH..Y4.&.V^[(.F.*.}B..55.......6
..:0a.l^..G...L.(......i.r.1....d.&.....|A.....l....0....H.V..e.....!.
...x"....yy...7..z0aJ_.4..1.nIu.8.? c......L.RK....@.{'..".~.....9B).D
[email protected]"..J.~>{.).;0.....:.^N3.....8D.
$.=....F.e....#..y.0..T.$B.....S.QU.*....%... ....z0c.|...c.j2..9.
<<< skipped >>>

GET /imgextra/i1/10000018366488789/T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15602
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Thu, 08 Nov 2012 02:49:56 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache11.l2de1[0,200-0,H], cache38.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[1,0]
Age: 5121736
X-Cache: HIT TCP_MEM_HIT dirn:2:785097593
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517509
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
..=...........................!..1."A.#.2Qa..$Bq...%4Rr...............
.........................A.........................!1.AQ."aq.......2B.
..#..Rbr...$.34CS..............?.....r.}.........n&.J...y.>.'......
R.._.(..>... ...{....>.{..........?...:..BZ6f..3]...fd."G.s{....
.C.'..$...!.u..w(b...D...<-(.R..<...k.#Y.(.N....{[...^.*.S....!.
....iM5..kY=C..E..T.UI...w&X..*7.d.....s~T..\....1..V.....~....dp:^.s=
A.q"xl[.V..M>.!x....5~W.........b. ............[f..........(t....q.
.}..- ...Q...-..hM?.4\s4.....h.C...M& 7..0C....0.....i!].}.S..........
..=k6...T.t..n...I.38....zg7.cNeqv.W......"I\....AF?..9....~U9...)....
W..G5.e.5..gA)b.....v....&.I..EI*....).#z.=5.)`qMZ.....!.'o.h.V.Y.....
ySfo .......Em.............._.L.5..*...."D.X. ......Q.r..w...R..o#N..#
.LL.....^..!........&U..~.eH.....uR..j..O).....u..Bx....n......m....$.
..p....jF..s..X....S......\|5..X....kE..j.2V.I..2..f..*ae:[email protected]
....-Y.#......q`...X.....7.w$.zt....!<.$...S..Zj.Y.J?./....9M._..nH
.l[.....0.>4d...sL..!..8.._r>.,..I'..($l.v?.....Q..z.<.....o.
t.. HR2..P..q..v.v>.>@....h9T..D...G..%.].<....<@m.'...P..
[email protected].<.....n.k...zv.......:b..-.1Tx.b..u..
...B.......p.v..v..*.....qC...F..%.~.n*..7....b=./.N,.x.....m.?.t....I
..I....'M'...G.u\C.7C...aw.T8!..c....'.@C.*.">..9..m%.\k.....'.
<<< skipped >>>

GET /imgextra/i3/10000019649283530/T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8018
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Thu, 15 Nov 2012 06:49:14 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache5.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[1,0]
Age: 5121736
X-Cache: HIT TCP_MEM_HIT dirn:5:784326026
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517509
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
.;..........................!.1.AQ.."2aq..#BR.$3r.....Cb..............
......................2.......................!1..A."Qaq..2...#......B
.............?...'......[u...8..\[email protected]...#h.nJ...U
u..y-......D.1..m..;.....9kE}.3b.0..=.k..Oj...%K.[.V..#.2.JH....I.>
.I..h.5..Y}A......K..F....s.....;.ZV~.3....4.5.4...t.Mq..w.qO [email protected]|..
...0.......K...MQ......k......n;[email protected].$...9.-O8.rth
*7.."..^LT..d."0.(d$..3.<zj$......ik.'[email protected]\....!.lDC..~..!.
d..........V.]S.i.^............7%b.5...1&..f>[email protected]...
...{.EV.>.e...BaA..b..).^3 .W...j ...K....]6M[.h.Q..h.....)$...c.9.
...;.Ug3...!.-....I...#....k...F.......h$.M.....-.....I.}..D......4D..
...?oJ....$.!.!i....s..'UY...B7V.0...Q.=.p.m.$.T......V...u....8......
.[..].......P..%....`}.V.\.U.oOW]~.K..a.1D:LwP..g...<.x..VI..-1 Am5
*2.%....7.U..}.V..A...^.....68A..G...0t...Gf<.G.JA.V.Rju..Uhq...W*.
~.........d#q.H....n.'<.w.....@7{....\;.>b2...m#....~........9W.
.,......29.~q..~*.q!.........E....Q........R.u.n7...kK..HuL.....y z.M.
8....rH..P.:.uY....8[Y>7.t"..K.E;~...*.....g....%GA.$.%@d.A%y....t.
N...:%.F.G.G...e..ixu..O...HqUO...!...8..........PI.....W..0..R.VOX ..
W.z.......5:,.........`.3.p{..W@&o&....?#....euO..........j..[K.T.....
<.... zj!..........".A.hs.........t.t..T.....<@..3.O..x.n.&l
<<< skipped >>>

GET /imgextra/i4/57378349/T2rIWhXqRaXXXXXXXX_!!57378349.jpg_220x220.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 60433
Connection: keep-alive
Date: Tue, 26 May 2015 08:47:55 GMT
Last-Modified: Sat, 02 Nov 2013 19:05:12 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache13.l2de1[0,200-0,H], cache17.l2de1[0,0], cache3.by1[0,200-0,H], cache4.by1[0,0]
Age: 5120354
X-Cache: HIT TCP_MEM_HIT dirn:7:873734686
X-Swift-SaveTime: Tue, 26 May 2015 17:09:32 GMT
X-Swift-CacheTime: 31505903
......JFIF.....H.H.....C..............................................
......................C...............................................
......................................................................
...C.............................!."1.A.#2Q.aqBR.....$34.Ë...r...5..
..................................F........................!1.AQ.."aq.
.2........#BR...3b$Cr...S..M...............?..A..^PQ..../J..l..).x.!
t]tn....9.;/....,/Fh.m.O(?...&.....p....:}..KhI.......,.T].M..<....
... )..l..-.....l.1...M.........'.p.......[{s...... .......k..!...o...
...S*.E.>.a............mn.......ETTO.U?~.p,M..m}.....|(............
*x_..... o.........6........._?.x].........~........DibJ..N{....?"0...
...*........T...Dq.gU..._....H.I.G....u.DE^.M.Ko.........F...}........
.......... .I..!(...o......$E_..KE..q.7..Y.....~.V.QU .b}7...G>....
.vB.....l./..B.@T... .<....U.j.z.@* 8..g....6EO...|.......a..<..
RqN >..|.'...W..%...*.a.[m.........]);.-......7.,A.Xh5E'.a.........
_;.bI.vE.><......Esf`.._.8...^f....?.....x.4_l.A..........n.....
.....6;g........?...../P...k......{.C....LZ..$....(XEr......d...v.....
.`T...G..[.lX.1...a...ts...H7.......<b.q,....W.e..ZL.~X.....$Sl....
[email protected]).v.6.....7..y!.(.4J.r...&.]1..!0.U..K.6.....(
.........i$P........Q.........N....*-.2U...Q......</...8 ..[.X.....
.0.../.....}...`.....7.q..l..ITW...x..I...#.......=RT.......6b..>}.
e...<...~.7....u......I.....A].;...../..J......P.~"B.r.............
.M.~.*?t/.yO."y...%f........ULs.h.i...=.C...7..H..$.|.v_y......?*0
<<< skipped >>>

GET /imgextra/i3/32492444/T25WotXgtbXXXXXXXX-32492444.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6400
Connection: keep-alive
Date: Tue, 26 May 2015 08:27:31 GMT
Last-Modified: Wed, 08 Jan 2014 08:18:07 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache53.l2de1[0,200-0,H], cache30.l2de1[0,0], cache7.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121578
X-Cache: HIT TCP_MEM_HIT dirn:2:852237558
X-Swift-SaveTime: Tue, 26 May 2015 13:33:05 GMT
X-Swift-CacheTime: 31517666
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
.G........................!....1"AQq..a.....#2B3Rr...&Sbc.....$4CDs...
..................................;.........................!1.A."Qq..
..2a....Br...#.$b..3..............?..FPO}<.).3.....$]..m.d.....#:..
...Ht...?`..}(/..{|P.[.Y.C96......3.....S..K.ZyT#z..3....mb.Lk.sT..r.C
..........:.t.....G.R..%AJ.p)4J.........4......:.P..n.j.#f6cl.m..e....
EBl....N)...a........T.vFU]...x.,..a..*...KrD.......@-....{m.l.......~
.v.]..QU.Kf...Q..*E..l8...^%1........!j.Pl!.T..*[email protected]
".....N.`$../b.nI..;; .v......J.n.....&.w...r.....[*fC...%m..$.. .....
.YM["...68.13?.*7N.r......;...u7dx ...xA.6....).7.dR/@B.]f/,...8.l(..=
3...x.J...X.kM. )../<..e'..E?.^jm..9........w<.17..j.vu...rK .. 
<.l&...4m(.N.A.......G.v....p:.......W......., P.. .WD4..,.3..).. .
#.....!.%X.W./...)T%[email protected].
.(.......\6...e..........\....CS._.K{.......S,W.sU=..kq..p9.H..e.2FBC.
....[......~..F..nh..iU...SM.Lv>N..........i.~v..P.y ..m../.-.%.6.6
...hBm....e&B.1.6..m!M.\n... .............T.c].....F.:.i..{...A.....#B
.N....l.i.;t..[..o.d....bsmm.K....-o.D.q....'.........K..~J..p4...... 
.'..B..F...Tc...?8Y..vOq.7.d.....8.6..._.p..k....%..=;H.k..e..2.. ....
.@{cQ.......%..G..|t.*{....^.K.Fe...ZK.88V...)cD.V....... ..u[....A..z
LfAICC.Io$sU..CaJR..t.f..Wu.x5...u..H......./W...wyo...z!.,......~
<<< skipped >>>

GET /imgextra/i1/10000026610344219/T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 11396
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Thu, 08 Nov 2012 03:03:43 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache42.l2de1[0,200-0,H], cache34.l2de1[0,0], cache2.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:3:851643770
X-Swift-SaveTime: Tue, 26 May 2015 13:33:03 GMT
X-Swift-CacheTime: 31517509
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...<............................1...!."2AQ...aq....#$..BR..br......
............................;..........................!1A."...Qaq..2.
.#...B..r.3Rb...............?....~..4...=j~...J...}.........gh.b....`.
.(V&..~m..l7..q.5<.f....DE.<2.rUi...Sm..gm[.v.21e]c.r{1\w..3.pGN
..r.5....jA...[....._.l.....&...F..u..c...W.F".....1.%......p....m.$.'
.p.........<.m.Eq.9..........co.....$hwz...n.N...'.7......\[email protected].).
 ........j..#~.............jc.......Q...f.....YFv...y9.D\Y.2..........
}Z.Et.ERE....8. ..J.tKk..$.....8..a..F.t8...a.hn..$.....D.U...........
.r.X...]........x.UG..l.m.8...l.-p.bZ.akYe...J.^..).>a54..Ndd..;f.`
.S.;{7.K...4;.B.7@FYI....../.Iyr.f)|=.8"B.P..'..p.......0..#..A...j.N[
9I7..7P. ...U.Y..0.T...b.. `0.....J.....Q..4QP....tR...........5......
....... .v?A.Gq...I.}>.}F.jf.e.(.E....Av~Kb.....E6.1.~......t...c).
U......\.3..H....)..........6[..Fl....$....m....8.jiRX...d........@P9.
...d...Mjf....&.m......vo.y...v.j.?>.V.2q.4t.E...M.@.'".......{....
.s4WX>.;3..e..........`...N<tg..H1...|..J.L....*.Q8.........'.c.
O.EdsL...Q..4QP....tR...........5............. .v?A.Gq...I.}>.}F.jf
.e.(.E.`}.|......!8b.y..w...Kc)....4^O..b/.#JI.`...3..q.t.....B2e..l.q
l..m....}k....-...5...$....`..9XK.q.,.8b..K,4.jK.9.gr.t...7Q%Q.H..{%..
.X....j kw:.......U.<...0q H.Q.P_.:.qe.....ib...pRq.T..8...a...
<<< skipped >>>

GET /imgextra/i1/10000017722554780/T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16791
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Wed, 05 Sep 2012 08:40:07 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache25.l2de1[0,200-0,H], cache53.l2de1[1,0], cache1.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:0:21634766
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...@............................!..1A"Qa..#q..2B.....$.%.3CRr.........
.............................=......................!...1.AQ."aq....2.
.....#B...R.$%3Sb..............?..yT}.B.....;..o....A......:I.xEt.....
.;.w..B. .q..o..6.p"Q.O.....zh.~a.....b6..?...../@.]zo.......)......d.
.._.G..5......G.......=.t!.?....H.N.I.. ..../Y....@W.'l8NE..6.....q$..
...:l...~.j..........l...p6..9!.(.....9R.........m.......JrL..J.....4.
[email protected],....%[email protected][email protected]"*.....Q:
.B...........*...RT...BQ..I.t.w.zC2...\.......#Gn...h.....G.:....\..g.
B....q,.g..u.Y{-MN../"#.....h....QS....HfH.....9.s..........E ...ZgZH.
.WR. .j.B9.~Dc^.e..mFw^..L..h"..m.ud.Gp%$..v........|.d.Y...*f.z.?.T.C
.EY...........Q.X...v......9.8...=..Cjp2.ti.R l6..Xm....M..&.....).\R.
}F.*$.$..2q..S*.S(.J[.i?wL.R).. R...5*.5qwh$.|..x....@S^.=.@...|...AN-
`@Q$..I..p.)w...........'[email protected]=...0...~..m................]..~!.{|..
.q...6`.m....@;.......|....T........E.w................p.X.X..0..c..nR
.......q....=xy1..l_m.L'......}..a..!..J...P.&.....Q...t..o...%D..x.L4
.w.,e...=;...`>..~..6....L&2.0.......w.z..w.......x....W.^o)|......
..!YM..Q.3"O.G..p.....u.B...x..(*..@@....)...sjl..O8B.t)-"n...G.H$....
.._.fm.0.).([.rm..)&z......c..V.Q.7.w.,..*9B.g..I.GG97aY5.6\....a..th.
..n<....-JK....x.w2.<{...4-..p... ..o-../~.....^....]Y..B. .
<<< skipped >>>

GET /imgextra/i4/10000018183036801/T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 6579
Connection: keep-alive
Date: Tue, 26 May 2015 08:25:37 GMT
Last-Modified: Mon, 22 Oct 2012 10:20:06 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache39.l2de1[0,200-0,H], cache38.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121693
X-Cache: HIT TCP_MEM_HIT dirn:4:784900054
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517553
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
..<...........................!1..AQa..."2.q...#BRbr.C.............
.........................5......................!1..A.Q.aq"2....B.....
#Rbr...............?....H...."...!-.^................y.*F.2.....I'....
.G}...{\.-.1..nm...[.j.]^<sR..(......e..ple,...........w3\3.V5.....
.'/..Q.P.{.H.&..R.z.V..k..^.c...x.Y@..|A....G....HVuj...m.. uTU..q$..0
8x...*.....A..../B....!.hR.7."d...F.t..!-.KB.v....'...G.jIE....... 2R.
|<3.........@(*k(..3/.......9'N,...9'...!kQm....9<p..?.B!Xo..."{
t..-.Td..=V..V9..iiN|..........!X..R..%..[B.....$<.B5..E..hB.......
....j..QKR..O.......p4a..R...x.;s.n..$..TU.EED.9..y.P.;.r1......Tu!...
.......<J....c[r.zbc&....Z..MSIv..T....<K........I.A..?2<.H .
uZ......p....-..#......N..Y3t:..tV..{.2...X..{.!..D:...Q1R.o.m..&.....
.......M}.].7j{}3......CN....c.s.d....(<C....j.....~...F.&.7....Lf$
.>Y[;^....v..AWv.......K.....B.B]..*2.I...j.....~..P.6...$_<w..=
..to}K...m..Q....R..5..E%......>..V.7......P..!m.B...L.....N...!.D.
..."...p..I:..G./_.,......M6...S.H.vixA.2.<..).........i!Hv..L.O$.o
..i....AK4.$.x.............py*.,......E.i..3..6...z...N.#..;v..\qx.h..
.u.)..........*...J....Q...a..SS..4......X.......!.q..-.A..3s....u....
C.ZO.......O...M........*...Y.....T..........|3.....$..[I.....T.?hpup.
F7{Q..S..zE.z{.E-......'...S..Q....$.....K..{d.5EZb.......r.y.0E..
<<< skipped >>>

GET /imgextra/i2/57378349/T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16256
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Sat, 02 Nov 2013 19:11:31 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache44.l2de1[0,200-0,H], cache47.l2de1[1,0], cache4.by1[0,200-0,H], cache4.by1[1,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:2:817091035
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
..6..............................!1.."#AQ.23Baq..$%(R.................
..................A......................!1..A.Qaq.."......2..#B...Rbr
..$3...4Sc..............?.Q...._.&z..b..sDq.r?Q..*oU..8.%....k...EG.f.
k....h....b{.....W....|.*6..x....K..Dh..5 .Q...v.;f...L...,.).@.../v..
.....5....o..1?xwJ:..q..3.c.i..;~?.o.c.............=.....J...d./...8..
...7...W..BQ.>.K..G........${.......Z?.=.(..>% M..(.....3....Y_.
c.....?....i].Ve..k..N.H.v?.N......L...b..7D...Z...|.I"..yR.zS../.....
......>.=b...gT1x.#....u.......B....UW.x.,..C1.e..wS...D.....l...0N
.......^.|[email protected]....}.2...T.uuHV`C.. hI....Nc.=.
N.....r:Z..x..W..|@i.&N..J..Z..........@.?..K..T..1SA....7?........\..
&.HU.....4..lw9j)%.k|b{....}.f|~..........T.. .wk.Z.Ta..2N.../...n...;
K..a.a.....T...Pe.1.....?.......`zE....?..."......K.. ...T.1....3..w_.
W....3.z..~.q>A.r.W#OU..;.d....O.\H...a.g.=..$..:..ImG^............
.S.IV,......".ze.......L....7Q...*..zOP......Y..x.G3..L......C.I.M.N .
[..{.....e...2[.[.%@w.(.....L.....X...(.....A.3"'1...0........F.N.5K) 
B\].....\....3.|#[email protected].........=. "&......18.Y.ge.|..3....`.|x e.i
x.......B.....9..b""|.?y........$Q.n;.....'...x......"J;L.xw9.(.....Ox
..D}]!'.Ig.....Im}..Z....h.O.B....Q..e.....2?...y..... ].....ZR.(.....
7.Y...=Xz...SR.......V....s`6..{w........~.=.J'.i...j.p..?.Vt.j..I
<<< skipped >>>

GET /imgextra/i1/10000028885465812/T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16435
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Mon, 14 Oct 2013 19:03:05 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache38.l2de1[0,200-0,H], cache1.l2de1[1,0], cache8.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:2:891995876
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
...A.............................!..".1.#A.$2BQ..3C&7RWa..Sbqw........
...............................D.........................!..1A"Q..2aq.
..#B...RU.$35b....r....Cst..............?.......z1.....`..#Z... s.l..?
=.....H.h.-.....P#.>s..e......dKf.....E8.#.....Z.0'=..t.{.(.(./F.(.
.......:......d!....0..K.50.qL./.'..#h.F.}F....e.|C..."[email protected] v.Ju...
.#...y.....jj.^f.|....|d........@ 3....>.~..M..f.)........~9.....{.
....4.......0.....y\O.D;....x....%i.....Y.d.. .....gC.B.j.x...&.<@~
..#..%.C.3.k&95..4.C.AP..fD#G..X.#.`J#../d.........R.r......H.'w$-.dh?
..........>..f....`.?...1.\....}.i..%.  .Y1.[z.6.....`]$_m.1.XO*|..
..QR.O........./...q..h..........>...x...o..7....K..............~f.
..6..:...)....c......-..oE3.....L...j<..... .......W..0[.J).[..&...
..CO].T..!.........fPBE..@f$.....T.D.N..{...]..R.`.|..u.....f3......vo
[J./-......6s_W.*............9.3PCR..[.2....g.....N.... .rO..7xj.X.<
;. N.od.h_`T#:.DiEb.....)...rN....\E....ip|.M..}.&..bT.=S.zm.ZmME.(.W.
i.k.......M.2l..Y..<L.rN..:...j..o.nH..Y4.&.V^[(.F.*.}B..55.......6
..:0a.l^..G...L.(......i.r.1....d.&.....|A.....l....0....H.V..e.....!.
...x"....yy...7..z0aJ_.4..1.nIu.8.? c......L.RK....@.{'..".~.....9B).D
[email protected]"..J.~>{.).;0.....:.^N3.....8D.
$.=....F.e....#..y.0..T.$B.....S.QU.*....%... ....z0c.|...c.j2..9.
<<< skipped >>>

GET /imgextra/i1/10000018366488789/T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15602
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Thu, 08 Nov 2012 02:49:56 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache11.l2de1[0,200-0,H], cache38.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:2:785097593
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517509
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
..=...........................!..1."A.#.2Qa..$Bq...%4Rr...............
.........................A.........................!1.AQ."aq.......2B.
..#..Rbr...$.34CS..............?.....r.}.........n&.J...y.>.'......
R.._.(..>... ...{....>.{..........?...:..BZ6f..3]...fd."G.s{....
.C.'..$...!.u..w(b...D...<-(.R..<...k.#Y.(.N....{[...^.*.S....!.
....iM5..kY=C..E..T.UI...w&X..*7.d.....s~T..\....1..V.....~....dp:^.s=
A.q"xl[.V..M>.!x....5~W.........b. ............[f..........(t....q.
.}..- ...Q...-..hM?.4\s4.....h.C...M& 7..0C....0.....i!].}.S..........
..=k6...T.t..n...I.38....zg7.cNeqv.W......"I\....AF?..9....~U9...)....
W..G5.e.5..gA)b.....v....&.I..EI*....).#z.=5.)`qMZ.....!.'o.h.V.Y.....
ySfo .......Em.............._.L.5..*...."D.X. ......Q.r..w...R..o#N..#
.LL.....^..!........&U..~.eH.....uR..j..O).....u..Bx....n......m....$.
..p....jF..s..X....S......\|5..X....kE..j.2V.I..2..f..*ae:[email protected]
....-Y.#......q`...X.....7.w$.zt....!<.$...S..Zj.Y.J?./....9M._..nH
.l[.....0.>4d...sL..!..8.._r>.,..I'..($l.v?.....Q..z.<.....o.
t.. HR2..P..q..v.v>.>@....h9T..D...G..%.].<....<@m.'...P..
[email protected].<.....n.k...zv.......:b..-.1Tx.b..u..
...B.......p.v..v..*.....qC...F..%.~.n*..7....b=./.N,.x.....m.?.t....I
..I....'M'...G.u\C.7C...aw.T8!..c....'.@C.*.">..9..m%.\k.....'.
<<< skipped >>>

GET /imgextra/i3/10000019649283530/T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8018
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Thu, 15 Nov 2012 06:49:14 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache5.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:5:784326026
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517509
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
.;..........................!.1.AQ.."2aq..#BR.$3r.....Cb..............
......................2.......................!1..A."Qaq..2...#......B
.............?...'......[u...8..\[email protected]...#h.nJ...U
u..y-......D.1..m..;.....9kE}.3b.0..=.k..Oj...%K.[.V..#.2.JH....I.>
.I..h.5..Y}A......K..F....s.....;.ZV~.3....4.5.4...t.Mq..w.qO [email protected]|..
...0.......K...MQ......k......n;[email protected].$...9.-O8.rth
*7.."..^LT..d."0.(d$..3.<zj$......ik.'[email protected]\....!.lDC..~..!.
d..........V.]S.i.^............7%b.5...1&..f>[email protected]...
...{.EV.>.e...BaA..b..).^3 .W...j ...K....]6M[.h.Q..h.....)$...c.9.
...;.Ug3...!.-....I...#....k...F.......h$.M.....-.....I.}..D......4D..
...?oJ....$.!.!i....s..'UY...B7V.0...Q.=.p.m.$.T......V...u....8......
.[..].......P..%....`}.V.\.U.oOW]~.K..a.1D:LwP..g...<.x..VI..-1 Am5
*2.%....7.U..}.V..A...^.....68A..G...0t...Gf<.G.JA.V.Rju..Uhq...W*.
~.........d#q.H....n.'<.w.....@7{....\;.>b2...m#....~........9W.
.,......29.~q..~*.q!.........E....Q........R.u.n7...kK..HuL.....y z.M.
8....rH..P.:.uY....8[Y>7.t"..K.E;~...*.....g....%GA.$.%@d.A%y....t.
N...:%.F.G.G...e..ixu..O...HqUO...!...8..........PI.....W..0..R.VOX ..
W.z.......5:,.........`.3.p{..W@&o&....?#....euO..........j..[K.T.....
<.... zj!..........".A.hs.........t.t..T.....<@..3.O..x.n.&l
<<< skipped >>>

GET /bao/uploaded/i2/18763055963576934/TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15950
Connection: keep-alive
Date: Tue, 26 May 2015 23:46:20 GMT
Last-Modified: Mon, 27 Oct 2014 08:40:21 GMT
Expires: Fri, 23 May 2025 23:46:20 GMT
Cache-Control: max-age=315360000
Via: cache17.l2de1[0,200-0,H], cache10.l2de1[13,0], cache8.by1[0,200-0,H], cache4.by1[0,0]
Age: 5066450
X-Cache: HIT TCP_MEM_HIT dirn:1:703417228
X-Swift-SaveTime: Fri, 24 Jul 2015 01:50:02 GMT
X-Swift-CacheTime: 310341378
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
...@.............................!..1"A.2Q.#aq...$3..CRrt4BDS.........
.............................R......................!...1.AQ."aq......
..2B..#$....%4RberCcdu.....3FV......................?.>5.....LL.]Xu
V.L7..A.h.......V.S.c....F/ .....K.TW.M:.. ..IK.d...T.,6YZ.^y.9{..3...
..@!/P...Gu... ..."@.=5..U..C.S-h..]b...d.R.m.wO...)....YC.....=:.i.tg
[.........r.....C2hR.}E..y..!....e...D*.h..}2..P....@[email protected]
y.]y.i.[......`...p.<\.......%..;k-...uJ..!...B...)[email protected]....
...._..........?....o\..n=..V...4..FF....I.8.3....%......?.-...C...*#.
sS;~......7u...5.].%]..jYJ..*.Lc.%>A....&.../R\H.;{............:W..
xb....h([email protected][O.Z...?.^..d.#9.2b...n>..|z&x;0.{.E.g..;....~C.
..5......Y...Aqg(....'...7..M..Y...1..8.D...a'.Zy.....}.fn...X.;...-.O
.:~]B.z:.v.....k.n.U...5j..z...m)-.njKe...&.?.STf/...)...R...JF.t..JQ.
.I ;'H.Z.....2..E5....[.e ..-S:...$#Yq.)%A)..W.|w.grq~.T..G$S....*)Zy.
J#.Rp3....... ..o.....vs....>.U...G..G....F...NT)...n.>$.P..h...
..q.........~~...m3..4.q.../.".q.|.....w).s....."0n.....gS.~.....}z^..
.........N.7....6..I....c.B.G....$H.."...T".6....i44..3.......HS.h%:..
....)....M...(....2.o..T!.jT. .....Qv..J..D'.0B.)...G.z.Cy..y...w.y...
]y.lU...,...qJ*Q$..O...Px...@....,.. .1...,.....LL'/[email protected]
.^....}.R.y...G@.....*.$.k.*..q......e......G.....GH.x.E..^.g...K.
<<< skipped >>>

GET /bao/uploaded/i1/14748057473615918/TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8630
Connection: keep-alive
Date: Tue, 26 May 2015 08:43:07 GMT
Last-Modified: Sat, 25 Oct 2014 23:36:25 GMT
Expires: Fri, 23 May 2025 08:43:07 GMT
Cache-Control: max-age=315360000
Via: cache32.l2de1[0,200-0,H], cache31.l2de1[11,0], cache5.by1[0,200-0,H], cache4.by1[0,0]
Age: 5120643
X-Cache: HIT TCP_MEM_HIT dirn:3:858998258
X-Swift-SaveTime: Fri, 29 May 2015 17:16:08 GMT
X-Swift-CacheTime: 315070019
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
.=............................!."1A..Qa.#2.BRq.3b...$r..&.............
.........................<.........................!1AQa..q..."2...
....R..#3Br...b..............?..PB.w..../..]dC.C..._%...dC....B'.m.,..
}.=t%K.@:.Yg.q..?-.._|..m._x {i./...B.hi..P.m%.....m99d1..hB..4$ >.
}.Y.s..B.C:........]k~K..^}.G.....:pc..J.%~....Jfn.Z_S.?.KG.J..O......
..u;p....3}.E......Jc9..c..Z..........V...?t.n.[....WTn...Cki?.@......
.vw.w....?..Q.z]../SjPg....^J....}F.dn.*58uU9...2.$..q.C...RISX>...
D$....].N..=9($..B....BE......DV....m.*Q..J..l....pc..P........l0..)..
..ABs.`..F@..}\....ut..c.j.k......r.....muy.EF.........GS.....R8....'.
.W..Zq...?...A.o......9...p....J..b..]ndd ....*.*.....s...F>PO.....
.....=\..p.'.u#{H....W..vEb..pf..Yv......\q.2..N...........=.d.m.....5
.M..B......;e q.TBG....*.%\.Zr&......2lV.q.3.2H.pKc?M<..5.\G......&
lt;.................m*d.j.Rn*,..6.MC..RX-....SKt....- ......`.q....E.$
E.-'P.....A..-...C...Vl..I... n...<z?..I. ......)..k*.3......U.*;.X
......>..5PtO... .._.vk..u.X....[[:.f.....!...).....|.#.{.....w.*..
Z..RZ.`l.u.XO...6Y.<.9..H.D...1...B...v5.....s&SE..).Si.,! .g....J.
.JI...9C...E. [email protected]!u..r$....R..<x...8.;{..].F........
ge..G....U:...7i.~\..Si*Z..(..N0.......r..f......P=n...}..=..L.Yr=....
nT.aE.qy.!.......$...q...I.Cc....OE..*.....cb.........\./.S25I..."
<<< skipped >>>

GET /imgextra/i1/10000026610344219/T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 11396
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Thu, 08 Nov 2012 03:03:43 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache42.l2de1[0,200-0,H], cache34.l2de1[0,0], cache2.by1[0,200-0,H], cache4.by1[1,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:3:851643770
X-Swift-SaveTime: Tue, 26 May 2015 13:33:03 GMT
X-Swift-CacheTime: 31517509
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...<............................1...!."2AQ...aq....#$..BR..br......
............................;..........................!1A."...Qaq..2.
.#...B..r.3Rb...............?....~..4...=j~...J...}.........gh.b....`.
.(V&..~m..l7..q.5<.f....DE.<2.rUi...Sm..gm[.v.21e]c.r{1\w..3.pGN
..r.5....jA...[....._.l.....&...F..u..c...W.F".....1.%......p....m.$.'
.p.........<.m.Eq.9..........co.....$hwz...n.N...'.7......\[email protected].).
 ........j..#~.............jc.......Q...f.....YFv...y9.D\Y.2..........
}Z.Et.ERE....8. ..J.tKk..$.....8..a..F.t8...a.hn..$.....D.U...........
.r.X...]........x.UG..l.m.8...l.-p.bZ.akYe...J.^..).>a54..Ndd..;f.`
.S.;{7.K...4;.B.7@FYI....../.Iyr.f)|=.8"B.P..'..p.......0..#..A...j.N[
9I7..7P. ...U.Y..0.T...b.. `0.....J.....Q..4QP....tR...........5......
....... .v?A.Gq...I.}>.}F.jf.e.(.E....Av~Kb.....E6.1.~......t...c).
U......\.3..H....)..........6[..Fl....$....m....8.jiRX...d........@P9.
...d...Mjf....&.m......vo.y...v.j.?>.V.2q.4t.E...M.@.'".......{....
.s4WX>.;3..e..........`...N<tg..H1...|..J.L....*.Q8.........'.c.
O.EdsL...Q..4QP....tR...........5............. .v?A.Gq...I.}>.}F.jf
.e.(.E.`}.|......!8b.y..w...Kc)....4^O..b/.#JI.`...3..q.t.....B2e..l.q
l..m....}k....-...5...$....`..9XK.q.,.8b..K,4.jK.9.gr.t...7Q%Q.H..{%..
.X....j kw:.......U.<...0q H.Q.P_.:.qe.....ib...pRq.T..8...a...
<<< skipped >>>

GET /imgextra/i1/10000017722554780/T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16791
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Wed, 05 Sep 2012 08:40:07 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache25.l2de1[0,200-0,H], cache53.l2de1[1,0], cache1.by1[0,200-0,H], cache4.by1[1,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:0:21634766
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
...@............................!..1A"Qa..#q..2B.....$.%.3CRr.........
.............................=......................!...1.AQ."aq....2.
.....#B...R.$%3Sb..............?..yT}.B.....;..o....A......:I.xEt.....
.;.w..B. .q..o..6.p"Q.O.....zh.~a.....b6..?...../@.]zo.......)......d.
.._.G..5......G.......=.t!.?....H.N.I.. ..../Y....@W.'l8NE..6.....q$..
...:l...~.j..........l...p6..9!.(.....9R.........m.......JrL..J.....4.
[email protected],....%[email protected][email protected]"*.....Q:
.B...........*...RT...BQ..I.t.w.zC2...\.......#Gn...h.....G.:....\..g.
B....q,.g..u.Y{-MN../"#.....h....QS....HfH.....9.s..........E ...ZgZH.
.WR. .j.B9.~Dc^.e..mFw^..L..h"..m.ud.Gp%$..v........|.d.Y...*f.z.?.T.C
.EY...........Q.X...v......9.8...=..Cjp2.ti.R l6..Xm....M..&.....).\R.
}F.*$.$..2q..S*.S(.J[.i?wL.R).. R...5*.5qwh$.|..x....@S^.=.@...|...AN-
`@Q$..I..p.)w...........'[email protected]=...0...~..m................]..~!.{|..
.q...6`.m....@;.......|....T........E.w................p.X.X..0..c..nR
.......q....=xy1..l_m.L'......}..a..!..J...P.&.....Q...t..o...%D..x.L4
.w.,e...=;...`>..~..6....L&2.0.......w.z..w.......x....W.^o)|......
..!YM..Q.3"O.G..p.....u.B...x..(*..@@....)...sjl..O8B.t)-"n...G.H$....
.._.fm.0.).([.rm..)&z......c..V.Q.7.w.,..*9B.g..I.GG97aY5.6\....a..th.
..n<....-JK....x.w2.<{...4-..p... ..o-../~.....^....]Y..B. .
<<< skipped >>>

GET /imgextra/i3/57378349/T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 53763
Connection: keep-alive
Date: Tue, 26 May 2015 09:24:38 GMT
Last-Modified: Sat, 02 Nov 2013 18:18:09 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache10.l2de1[0,200-0,H], cache19.l2de1[11,0], cache6.by1[0,200-0,H], cache4.by1[0,0]
Age: 5118152
X-Cache: HIT TCP_MEM_HIT dirn:0:800938566
X-Swift-SaveTime: Thu, 28 May 2015 15:57:24 GMT
X-Swift-CacheTime: 31339634
......JFIF.....H.H.....C..............................................
......................C...............................................
......................................................................
..E.........................!..."1A..2Q.#aqB....$R..3b...Cr..Sc..ET.
...................................J.........................!.1AQ."a.
2q...B.....#...3R..$brL..S....Dcd...............?....qEMY[..G.m...7.
.D>......v...}^..~.ba..x....n..g.ER..4"...8..p0v.x.?........2h.)U..
."...?\$.....N.....>.~..w...q.S........`s...G.W...vS.L(.=q.....*...
..8.............0Dz|W.ms.........[[email protected]./..z..!...Z.*..c....
/.Z.'@.$.O,6P......I9..ZvR..,|..........1T....z.....k...c.$.Fb;.n[...[
..L.U.ib....=........._._.......3....P...uD.%^.dc#.l...i.?..z....78...
2........C.........O.....M..9....}}o.U.....g...on.....`k?...llM.......
C.<..-A....U..G...i.T.....y..rJ v.g......!.V^/..f.f.{)..zb..<..;
$.3.?.._.7". m'..n.=.c..............e..V.4...zA..S.[..Up...-.B..R.#..[
[email protected]<..E.U.E...........C-x4.....>.:.#.......\m.
..fi;k..=nzxE......J....%........B.......*.. .....h.........-...2..jH.
........K..c5....j...R..X..R.x.i.....\.E".....gD..r.......O.y.........
....J.>....v..w....fca$T......9..buA YQ.bf....o..C..ZvK.S&..r...K.,
r,..n.".........{a.,.<.A........Fs.?.."...5........:.(\HmzBz....p..
Ll...Y@.....=.0...I.f...H...q5.}09|M...}.^.AkV.Q.j.dWi........x...R1.m
.=*.`.,...Z.......v.........H...`n,I.......>..=....t}.c.K}mE...MP.Q
.M.5t..f...p...,EC.r.z.M.YVe8.(A.I.....k..=...LG$.....i ...j......
<<< skipped >>>

GET /imgextra/i2/57378349/T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16256
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Sat, 02 Nov 2013 19:11:31 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache44.l2de1[0,200-0,H], cache47.l2de1[1,0], cache4.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:2:817091035
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
..6..............................!1.."#AQ.23Baq..$%(R.................
..................A......................!1..A.Qaq.."......2..#B...Rbr
..$3...4Sc..............?.Q...._.&z..b..sDq.r?Q..*oU..8.%....k...EG.f.
k....h....b{.....W....|.*6..x....K..Dh..5 .Q...v.;f...L...,.).@.../v..
.....5....o..1?xwJ:..q..3.c.i..;~?.o.c.............=.....J...d./...8..
...7...W..BQ.>.K..G........${.......Z?.=.(..>% M..(.....3....Y_.
c.....?....i].Ve..k..N.H.v?.N......L...b..7D...Z...|.I"..yR.zS../.....
......>.=b...gT1x.#....u.......B....UW.x.,..C1.e..wS...D.....l...0N
.......^.|[email protected]....}.2...T.uuHV`C.. hI....Nc.=.
N.....r:Z..x..W..|@i.&N..J..Z..........@.?..K..T..1SA....7?........\..
&.HU.....4..lw9j)%.k|b{....}.f|~..........T.. .wk.Z.Ta..2N.../...n...;
K..a.a.....T...Pe.1.....?.......`zE....?..."......K.. ...T.1....3..w_.
W....3.z..~.q>A.r.W#OU..;.d....O.\H...a.g.=..$..:..ImG^............
.S.IV,......".ze.......L....7Q...*..zOP......Y..x.G3..L......C.I.M.N .
[..{.....e...2[.[.%@w.(.....L.....X...(.....A.3"'1...0........F.N.5K) 
B\].....\....3.|#[email protected].........=. "&......18.Y.ge.|..3....`.|x e.i
x.......B.....9..b""|.?y........$Q.n;.....'...x......"J;L.xw9.(.....Ox
..D}]!'.Ig.....Im}..Z....h.O.B....Q..e.....2?...y..... ].....ZR.(.....
7.Y...=Xz...SR.......V....s`6..{w........~.=.J'.i...j.p..?.Vt.j..I
<<< skipped >>>

GET /imgextra/i1/10000028885465812/T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 16435
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:52 GMT
Last-Modified: Mon, 14 Oct 2013 19:03:05 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache38.l2de1[0,200-0,H], cache1.l2de1[1,0], cache8.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121738
X-Cache: HIT TCP_MEM_HIT dirn:2:891995876
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517508
......JFIF.....H.H.....C..............................................
......................C...............................................
........................x.x...........................................
...A.............................!..".1.#A.$2BQ..3C&7RWa..Sbqw........
...............................D.........................!..1A"Q..2aq.
..#B...RU.$35b....r....Cst..............?.......z1.....`..#Z... s.l..?
=.....H.h.-.....P#.>s..e......dKf.....E8.#.....Z.0'=..t.{.(.(./F.(.
.......:......d!....0..K.50.qL./.'..#h.F.}F....e.|C..."[email protected] v.Ju...
.#...y.....jj.^f.|....|d........@ 3....>.~..M..f.)........~9.....{.
....4.......0.....y\O.D;....x....%i.....Y.d.. .....gC.B.j.x...&.<@~
..#..%.C.3.k&95..4.C.AP..fD#G..X.#.`J#../d.........R.r......H.'w$-.dh?
..........>..f....`.?...1.\....}.i..%.  .Y1.[z.6.....`]$_m.1.XO*|..
..QR.O........./...q..h..........>...x...o..7....K..............~f.
..6..:...)....c......-..oE3.....L...j<..... .......W..0[.J).[..&...
..CO].T..!.........fPBE..@f$.....T.D.N..{...]..R.`.|..u.....f3......vo
[J./-......6s_W.*............9.3PCR..[.2....g.....N.... .rO..7xj.X.<
;. N.od.h_`T#:.DiEb.....)...rN....\E....ip|.M..}.&..bT.=S.zm.ZmME.(.W.
i.k.......M.2l..Y..<L.rN..:...j..o.nH..Y4.&.V^[(.F.*.}B..55.......6
..:0a.l^..G...L.(......i.r.1....d.&.....|A.....l....0....H.V..e.....!.
...x"....yy...7..z0aJ_.4..1.nIu.8.? c......L.RK....@.{'..".~.....9B).D
[email protected]"..J.~>{.).;0.....:.^N3.....8D.
$.=....F.e....#..y.0..T.$B.....S.QU.*....%... ....z0c.|...c.j2..9.
<<< skipped >>>

GET /imgextra/i1/10000018366488789/T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 15602
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Thu, 08 Nov 2012 02:49:56 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache11.l2de1[0,200-0,H], cache38.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:2:785097593
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517509
......JFIF.....d.d.....C..............................................
......................C...............................................
........................x.x...........................................
..=...........................!..1."A.#.2Qa..$Bq...%4Rr...............
.........................A.........................!1.AQ."aq.......2B.
..#..Rbr...$.34CS..............?.....r.}.........n&.J...y.>.'......
R.._.(..>... ...{....>.{..........?...:..BZ6f..3]...fd."G.s{....
.C.'..$...!.u..w(b...D...<-(.R..<...k.#Y.(.N....{[...^.*.S....!.
....iM5..kY=C..E..T.UI...w&X..*7.d.....s~T..\....1..V.....~....dp:^.s=
A.q"xl[.V..M>.!x....5~W.........b. ............[f..........(t....q.
.}..- ...Q...-..hM?.4\s4.....h.C...M& 7..0C....0.....i!].}.S..........
..=k6...T.t..n...I.38....zg7.cNeqv.W......"I\....AF?..9....~U9...)....
W..G5.e.5..gA)b.....v....&.I..EI*....).#z.=5.)`qMZ.....!.'o.h.V.Y.....
ySfo .......Em.............._.L.5..*...."D.X. ......Q.r..w...R..o#N..#
.LL.....^..!........&U..~.eH.....uR..j..O).....u..Bx....n......m....$.
..p....jF..s..X....S......\|5..X....kE..j.2V.I..2..f..*ae:[email protected]
....-Y.#......q`...X.....7.w$.zt....!<.$...S..Zj.Y.J?./....9M._..nH
.l[.....0.>4d...sL..!..8.._r>.,..I'..($l.v?.....Q..z.<.....o.
t.. HR2..P..q..v.v>.>@....h9T..D...G..%.].<....<@m.'...P..
[email protected].<.....n.k...zv.......:b..-.1Tx.b..u..
...B.......p.v..v..*.....qC...F..%.~.n*..7....b=./.N,.x.....m.?.t....I
..I....'M'...G.u\C.7C...aw.T8!..c....'.@C.*.">..9..m%.\k.....'.
<<< skipped >>>

GET /imgextra/i3/10000019649283530/T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120.jpg HTTP/1.1


Accept: */*
Referer: hXXp://strip.taobaocdn.com/tfscom/TB1.YwhHpXXXXcLXpXXXXXXXXXX.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_30122664&pvid=0a67299e000055b2548e100d02923830&s=998x280&d=59420271&t=1437750414&u=http://VVV.2345.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: asearch.alicdn.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 8018
Connection: keep-alive
Date: Tue, 26 May 2015 08:24:53 GMT
Last-Modified: Thu, 15 Nov 2012 06:49:14 GMT
Cache-Control: max-age=3600, s-maxage=31536000
Via: cache5.l2de1[0,200-0,H], cache18.l2de1[0,0], cache6.by1[0,200-0,H], cache4.by1[0,0]
Age: 5121737
X-Cache: HIT TCP_MEM_HIT dirn:5:784326026
X-Swift-SaveTime: Tue, 26 May 2015 13:33:04 GMT
X-Swift-CacheTime: 31517509
......JFIF.............C..............................................
......................C...............................................
........................x.x...........................................
.;..........................!.1.AQ.."2aq..#BR.$3r.....Cb..............
......................2.......................!1..A."Qaq..2...#......B
.............?...'......[u...8..\[email protected]...#h.nJ...U
u..y-......D.1..m..;.....9kE}.3b.0..=.k..Oj...%K.[.V..#.2.JH....I.>
.I..h.5..Y}A......K..F....s.....;.ZV~.3....4.5.4...t.Mq..w.qO [email protected]|..
...0.......K...MQ......k......n;[email protected].$...9.-O8.rth
*7.."..^LT..d."0.(d$..3.<zj$......ik.'[email protected]\....!.lDC..~..!.
d..........V.]S.i.^............7%b.5...1&..f>[email protected]...
...{.EV.>.e...BaA..b..).^3 .W...j ...K....]6M[.h.Q..h.....)$...c.9.
...;.Ug3...!.-....I...#....k...F.......h$.M.....-.....I.}..D......4D..
...?oJ....$.!.!i....s..'UY...B7V.0...Q.=.p.m.$.T......V...u....8......
.[..].......P..%....`}.V.\.U.oOW]~.K..a.1D:LwP..g...<.x..VI..-1 Am5
*2.%....7.U..}.V..A...^.....68A..G...0t...Gf<.G.JA.V.Rju..Uhq...W*.
~.........d#q.H....n.'<.w.....@7{....\;.>b2...m#....~........9W.
.,......29.~q..~*.q!.........E....Q........R.u.n7...kK..HuL.....y z.M.
8....rH..P.:.uY....8[Y>7.t"..K.E;~...*.....g....%GA.$.%@d.A%y....t.
N...:%.F.G.G...e..ixu..O...HqUO...!...8..........PI.....W..0..R.VOX ..
W.z.......5:,.........`.3.p{..W@&o&....?#....euO..........j..[K.T.....
<.... zj!..........".A.hs.........t.t..T.....<@..3.O..x.n.&l
<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_660:

.text
`.rdata
@.data
.rsrc
%'%1$=%C%K%O%s%
.%.-.3.7.9.?.W.[.o.y.
C%C'C3C7C9COCWCiC
t%SVh
t$(SSh
~%UVW
u$SShe
ws2_32.dll
kernel32.dll
ole32.dll
wininet.dll
WinINet.dll
Proxy.dll
ntdll.dll
user32.dll
Ws2_32.dll
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
GetAsyncKeyState
CreateIoCompletionPort
{84A90340-1CE7-4C96-8FFC-FB0124DE9AD7}
/config.ini
&api=internet.in
&mutualkey=
Adodb.Stream
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
http=
HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Content-Type: application/x-www-form-urlencoded
hXXp://
Function Getcpuid()
Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")
getcpuid=cpu.ProcessorId
Getcpuid
hXXp://yxlmbbt.com/AppEn.php?appid=540520&md5=c607e3acbcba725b6213f87e9df0b6d2
hXXp://yxlmbbt.com/tongji.php
\Proxy.dll
@.reloc
f9z.vk
__MSVCRT_HEAP_SELECT
GetProcessHeap
KERNEL32.dll
MsgWaitForMultipleObjects
USER32.dll
HttpAddRequestHeadersA
WININET.dll
ADVAPI32.dll
OLEAUT32.dll
SHLWAPI.dll
GDI32.dll
WINMM.dll
GetCPInfo
WS2_32.dll
Proxy_1.271.dll
HNetCfg.FwMgr
/gengxin.asp?_r=
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET4.0E)
_.tmp
https
@hXXps://
@/dlldy.asp?cz=hqfwq&bs=QINGQIU
/dlldy.asp?cz=hqzjip
http:
Client:VVV.xie6.cn
[email protected]
urlmon
URLDownloadToFileA
program internal error number is %d.
%s%x.tmp
:"%s"
:"%s".
<Msg%s>%ld</Msg%s>
0000%d
</Msg0000>
<Msg0000>
EMSG
Recv Sub Packet(%s)..
Recv Packet (%s)...
zcÁ
1/2U2c2t2
3<3I3Z3q3{3
6l6Q6^6n6
hXXp://VVV.2345.com/?k83357698
258790819
&api=BSphpSeSsL.in
&api=gg.in
&api=v.in
&api=url.in
QQPCTray.exe
258790819
\qqpcmgr_k83357698_120311980.exe
League of Legends.exe
&quickforward=yes&handlekey=ls
&cookietime=2592000&password=
hXXp://VVV.52xlen.com/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&inajax=1
&password=
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
HTTP/1.1
hXXps://
TenRpcs.dll
221.235.191.58
hXXp://VVV.xixihz.com/ban
VVV.xixihz.com
12323112321290100149
\BaiduSd3.0\BaiduSd\3.0.0.4605\BaiduSd.exe
\BaiduAn4.0\BaiduAn\4.0.0.5166\BaiduAn.exe
\Baidu\BaiduPinyin\2.14.2.46\baidupinyin.exe
\KZip\KZip.exe
QQPCRTP.exe
[email protected]
.exe|.rar|.zip|.gif|.jpg|.mp3|.rm
127.0.0.0
F@ws2_32.dll
258790819
`R.dZ
F .AZ
@qq.com
keye
4yS%F
.BJ|]y
'z .Bpf
f.sd8
C~4%u
bQc.FdUV
E$PL%C"[
87w)%S
.SRZXn%g
Cu \%S
> %CY
8×C,
Rdò
2.WmM
r.Hth
u.VRvB
.chAk
.OWSU
.uqdd
%5Z(w].vu
%u]8:dT
b5.DU
G4KT%X
I.zqhU1
o#%SE
DB.bh
SQln0
}.PHu6\
,W.UV
%CyNn(
.ANF":xm2
n.awQ
.iS%!}
.oJrn
.kSrr
.sm*/v
<.IqN
Ÿ$"
pz?F%F
VVV.xixihz.com/fzll/xixiwz.html
%d&&'
123456789
00003333
deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly
inflate 1.1.3 Copyright 1995-1998 Mark Adler
CCmdTarget
CNotSupportedException
commctrl_DragListMsg
COMCTL32.DLL
EnumChildWindows
EnumWindows
gdiplus.dll
IMM32.dll
ShellExecuteA
SHELL32.dll
comdlg32.dll
WINSPOOL.DRV
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
COMCTL32.dll
SetWindowsHookExA
GetKeyState
UnhookWindowsHookEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
exui.dll
exui_yuansukeyouziji_kuozhanjiekou
%*.*f
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
Broken pipe
Inappropriate I/O control operation
Operation not permitted
gdi32.dll
imm32.dll
shell32.dll
winspool.drv
advapi32.dll
comctl32.dll
shlwapi.dll
winmm.dll
iphlpapi.dll
MPR.dll
VERSION.dll
RASAPI32.dll
WinExec
GetViewportOrgEx
oledlg.dll
InternetCrackUrlA
InternetCanonicalizeUrlA
CreateDialogIndirectParamA
GetViewportExtEx
.PAVCException@@
Shell32.dll
Mpr.dll
Advapi32.dll
User32.dll
Gdi32.dll
Kernel32.dll
(&07-034/)7 '
?? / %d]
%d / %d]
.PAVCFileException@@
: %d]
(*.*)|*.*||
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|PNG
(*.PNG)|*.PNG|BMP
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
%s:%d
windows
.PAVCNotSupportedException@@
out.prn
(*.prn)|*.prn|
%d.%d
%d/%d
1.6.9
unsupported zlib version
png_read_image: unsupported transformation
%d / %d
Bogus message code %d
libpng error: %s
libpng warning: %s
1.1.3
bad keyword
libpng does not support gamma background rgb_to_gray
Palette is NULL in indexed image
(%d-%d):
%ld%c
eapi.fne
(link.ini)
extra_args=/NODEFAULTLIB:"LIBC.LIB"
extra_args=/NODEFAULTLIB:"EAPI_STATIC.LIB"
extra_args=/NODEFAULTLIB:"mysql_static.lib"
2:33544711
VVV.exui.cc
bbs.exui.cc =====
[email protected]
2014. 08.30.1
\lib\ex_ui\AttributeEditorexui.dll
.pi]\L}L
/.rE*L)k
ex_ui keye
msimg32.dll
.pK>NG`
P>f%S9e
.qn{\
.mkBT
.qc]b
diTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:DDD122E7A584E2118FF1FE0FC3DAB2B7" xmpMM:DocumentID="xmp.did:A0B65855870011E2AFB69C04A7201614" xmpMM:InstanceID="xmp.iid:A0B65854870011E2AFB69C04A7201614" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22F24EC22D86E211815A8FDDD6268239" stRef:documentID="xmp.did:DDD122E7A584E2118FF1FE0FC3DAB2B7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
11/15/11
VVV.meitu.com
[m.tT
4@{B96B3CAF-0728-11D3-9D7B-0000F81EF32E}
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8D7CB70293206811822AD538802860B2" xmpMM:DocumentID="xmp.did:C81E1B0B7A6711E28A59F49ABC758CF6" xmpMM:InstanceID="xmp.iid:C81E1B0A7A6711E28A59F49ABC758CF6" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EA5B885657AE211B696CBD6FE121BFB" stRef:documentID="xmp.did:8D7CB70293206811822AD538802860B2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>w
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8D7CB70293206811822AD538802860B2" xmpMM:DocumentID="xmp.did:C81E1B0F7A6711E28A59F49ABC758CF6" xmpMM:InstanceID="xmp.iid:C81E1B0E7A6711E28A59F49ABC758CF6" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EA5B885657AE211B696CBD6FE121BFB" stRef:documentID="xmp.did:8D7CB70293206811822AD538802860B2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8D7CB70293206811822AD538802860B2" xmpMM:DocumentID="xmp.did:C86695B87A6711E28A59F49ABC758CF6" xmpMM:InstanceID="xmp.iid:C86695B77A6711E28A59F49ABC758CF6" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EA5B885657AE211B696CBD6FE121BFB" stRef:documentID="xmp.did:8D7CB70293206811822AD538802860B2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>p
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8D7CB70293206811822AD538802860B2" xmpMM:DocumentID="xmp.did:C86695BC7A6711E28A59F49ABC758CF6" xmpMM:InstanceID="xmp.iid:C86695BB7A6711E28A59F49ABC758CF6" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EA5B885657AE211B696CBD6FE121BFB" stRef:documentID="xmp.did:8D7CB70293206811822AD538802860B2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8D7CB70293206811822AD538802860B2" xmpMM:DocumentID="xmp.did:C86695C07A6711E28A59F49ABC758CF6" xmpMM:InstanceID="xmp.iid:C86695BF7A6711E28A59F49ABC758CF6" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EA5B885657AE211B696CBD6FE121BFB" stRef:documentID="xmp.did:8D7CB70293206811822AD538802860B2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>G
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8D7CB70293206811822AD538802860B2" xmpMM:DocumentID="xmp.did:C8A76F497A6711E28A59F49ABC758CF6" xmpMM:InstanceID="xmp.iid:C8A76F487A6711E28A59F49ABC758CF6" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9EA5B885657AE211B696CBD6FE121BFB" stRef:documentID="xmp.did:8D7CB70293206811822AD538802860B2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>]
{6AEDBD6D-3FB5-418A-83A6-7F45229DC872}
N.trB&#
.cqn$
lib\ex_ui\AttributeEditorexui.dll
Ole32.dll
GdiPlus.dll
.?AVCCmdTarget@@
.?AVCCmdUI@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCTestCmdUI@@
c:\%original file name%.exe
VVV.dywt.com.cn
(*.htm;*.html)|*.htm;*.html
HTTP/1.0
%s <%s>
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
SMTP
;3 #>6.&
'2, / 0&7!4-)1#
[%s:%d]
Range: bytes=%s-
[%s:%d]
PASS %s
PASS ******
USER %s
E:\e5\dev\e\static_link\static_libs\source\downlib\mystrlib.cpp
SIZE %s
PORT
User-Agent: %s
Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
Referer: %s
Host: %s
GET %s HTTP/1.1
Cookie: %s
%d, %s
\\192.168.0.129\TCP\1037
NSPlayer/9.0.0.2980; {%s}; Host: %s
rmff_fix_header: assuming data.size=%i
rmff_fix_header: assuming data.num_packets=%i
rmff_fix_header: assuming prop.num_packets=%i
rmff_fix_header: setting prop.data_offset from %i to %i
rmff_fix_header: correcting prop.num_streams from %i to %i
rmff_fix_header: correcting prop.size from %i to %i
%s %s %s
Session: %s
Cseq: %u
%*s %s
%*s %u
CSeq: %u
rtsp://%s:%i
rtsp://%s:%i/%s
ClientID: Linux_2.4_6.0.9.1235_play32_RN01_EN_586
GUID: 00000000-0000-0000-0000-000000000000
[%s:%d]
User-Agent: RealMedia Player Version 6.0.9.1235 (linux-2.0-libc6-i386-gcc2.95)
Range: npt=%s-
%s/streamid=1
%s/streamid=0
Transport: x-pn-tng/tcp;mode=play,rtp/avp/tcp;unicast;mode=play
If-Match: %s
RealChallenge2: %s, sd=%s
Title: %s
Copyright: %s
Author: %s
real: Content-length for description too big (> %uMB)!
Require: com.real.retain-entity-for-setup
SupportsMaximumASMBandwidth: 1
Bandwidth: %u
Challenge1: %s
hash output: %x %x %x %x
hash input: %x %x %x %x
stream=%u;rule=%u,
Illegal character '%c' in input.
.PAVCOleException@@
.PAVCResourceException@@
.PAVCUserException@@
.PAVCOleDispatchException@@
.PAVCArchiveException@@
#include "l.chs\afxres.rc" // Standard components
C.CUC|C
1.2.7.0
(*.*)
4.4.0.0


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\b_red_1[2].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220[1].jpg (4555 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB2YLuwbXXXXXcBXXXXXXXXXXXX_!!27753963-0-saturn_solar.jpg_100x100[1].jpg (1055 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100[2].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\zx110_0829[1].png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\CAIFW52V.htm (40 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\bgs14[1].png (1210 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\logo_20150723[1].png (2730 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (1618 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2jXQtcFXXXXX1XpXXXXXXXXXX_!!31150008-0-saturn_solar.jpg_100x100[1].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\UserData\YJM90VAL\siteClicks[1].xml (250 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (1369 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2rIWhXqRaXXXXXXXX_!!57378349.jpg_220x220[1].jpg (5284 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T25WotXgtbXXXXXXXX-32492444.jpg_120x120[1].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (1306 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (2446 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\cert-beian_0829[1].png (134 bytes)
    %Documents and Settings%\%current user%\UserData\KTOR0Z81\__his__[1].xml (198 bytes)
    %Documents and Settings%\%current user%\UserData\YJM90VAL\/t/acookie/[1].xml (222 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2T6BAXslbXXXXXXXX-32492444.jpg_120x120[1].jpg (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T21ZRnXEJaXXXXXXXX-32492444.jpg_120x120[1].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120[1].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\baidu_web[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\wea_0829[1].png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\tanxclick[2].js (3 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@yxlmbbt[1].txt (201 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
    %Documents and Settings%\%current user%\Cookies\index.dat (3892 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\CAENI3QT.html (4670 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\lazyloading[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_220x220[1].jpg (776 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\go_top[1].png (134 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\b_red_1[1].gif (2 bytes)
    %Documents and Settings%\%current user%\UserData\2Z89WTQV\__indifference__[1].xml (510 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\CAQ3SL23.htm (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\mz_movie_3[1].png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120[1].jpg (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB2ng1UaVXXXXXUXpXXXXXXXXXX_!!33353600-0-saturn_solar.jpg_120x120[1].jpg (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2vGinaVXXXXaHXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2J8B2cXXXXXbGXXXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_120x120[2].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB20lFxcVXXXXXvXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\20150715091754[1].jpg (110 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21[1].png (297 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322[1].png (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\s_blue_4[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (168 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100[1].jpg (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\CA4P63YP.htm (438 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\tanxclick[1].js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21[1].png (298 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\blank[1].png (953 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\i_tmall[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\2345_1224[1].eot (9117 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\tipSet_ie6[1].png (748 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2hf9kXzdaXXXXXXXX-32492444.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\CAO5E705.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&pid=mm_26632324_6858394_30122664&count=45&p4p=jsonp0ichrhal2 (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\w_day40[1].png (517 bytes)
    %Documents and Settings%\%current user%\UserData\KTOR0Z81\tanx_ssp_pvid[1].xml (310 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2x_nxXilbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\cnxh_spr_150722[1].png (351 bytes)
    %Documents and Settings%\%current user%\UserData\YJM90VAL\tanx_ssp_pvid_1[1].xml (318 bytes)
    %Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (732 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2SHVpXDFaXXXXXXXX-32492444.jpg_120x120[1].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2BD1EaVXXXXXwXXXXXXXXXXXX_!!16908763-0-saturn_solar.jpg_120x120[1].jpg (974 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\ico_amazon[1].png (536 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\main_spr_0829[1].png (975 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\skin0_20[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\CASXY70X.com/?k83357698&r=&tp=3&tsid=0a67299e000055b2548e100d02923830&number=17&callback=jsonp1ichrhal2 (932 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\tip_stopXP_2[1].png (1 bytes)
    %Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (588 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\20150715111507[1].jpg (902 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2JIyWXchbXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB1UVf.HpXXXXaMXXXXAz6UFXXX-16-16[1].png (481 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\y2x5_150626[1].png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB2PnxYcXXXXXaNXpXXXXXXXXXX_!!17220219-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\AppEn[1].htm (27 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\banner2_20150724[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB1U94NHpXXXXcnXXXX4GcnYpXX-32-1322[1].png (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2fJ2LXeJbXXXXXXXX_!!0-2-newland.png_120x120[1].png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\fix_search[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB19CrFHpXXXXc9XFXXS1yp.VXX-12-21[1].png (298 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2MlyLXatXXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (1552 bytes)
    %Documents and Settings%\%current user%\UserData\4XCFALMJ\__siteClicksTip__[1].xml (142 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\search_140829[1].png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\ico_taobao[1].png (958 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\b_red_1[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2lO0zXE4aXXXXXXXX-32492444.jpg_120x120[1].jpg (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\banner1_150703[1].png (701 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\T1eydxFB8cXXXXXXXX_!!0-item_pic.jpg_220x220[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\privacy[1].js (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\tongji[1].htm (130 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\app[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\mz_suning_150529[1].png (1 bytes)
    %Documents and Settings%\%current user%\UserData\4XCFALMJ\lc[1].xml (126 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB19yTCHpXXXXcpXVXXS1yp.VXX-12-21[1].png (297 bytes)
    C:\config.ini (27 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\mz_ctrip_141231[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\mystyle_wait[1].gif (381 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\main[1].js (3698 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_220x220[1].jpg (4805 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
    %Documents and Settings%\%current user%\UserData\2Z89WTQV\wc[1].xml (126 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\TB2fOuaaVXXXXbUXXXXXXXXXXXX_!!12268332-0-saturn_solar.jpg_100x100[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\TB22_GoaVXXXXXDXXXXXXXXXXXX_!!32914748-0-saturn_solar.jpg_100x100[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2O0dzXCFaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\TB2AGmOaVXXXXXpXXXXXXXXXXXX_!!15731023-0-saturn_solar.jpg_100x100[1].jpg (3 bytes)
    %Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (828 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\kz_tmall_20150721[1].gif (3489 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\acbeacon2[1].htm (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\cert-cyberpolice_0829[1].png (134 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\mz_ic_tmall2[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2_4fjXl8bXXXXXXXX-32492444.jpg_120x120[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\mz_pop[1].png (663 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\mz_toggle[1].png (986 bytes)
    %Documents and Settings%\%current user%\UserData\2Z89WTQV\stopXPTime[1].xml (162 bytes)
    %Documents and Settings%\%current user%\UserData\KTOR0Z81\data-userdata[1].xml (1040 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\foot_20141112[1].png (134 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2oKx2Xh0dXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2gr4xXr0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (776 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\top_20150327[1].png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\feature_v1[2].htm (86 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2WbyYXilXXXXXXXXX_!!0-0-newland.jpg_120x120[2].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\s_blue_4[1].gif (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\feature_v1[1].htm (97 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (163 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\tanxssp[1].js (1487 bytes)
    %Documents and Settings%\%current user%\UserData\4XCFALMJ\tanxssp_acookie_expires[1].xml (214 bytes)
    C:\Proxy.dll (151 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\body0_2[1].png (183 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\acbeacon2[1].html (486 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\login_1217[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PKHNZ4FT\T2Iea4Xc0bXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\JLFKPZ9T\myfav_0610[1].png (108 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\T2GpbEXfdbXXXXXXXX_!!57378349.jpg_120x120[1].jpg (776 bytes)
    %Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (134 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\LJ0YYHI5\T2U5aLXXhaXXXXXXXX_!!0-0-newland.jpg_120x120[1].jpg (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\P0DCL5G0\TB2WuRlcVXXXXXQXXXXXXXXXXXX_!!22151314-0-saturn_solar.jpg_100x100[1].jpg (5 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet


Lavasoft is the maker of Ad-Aware, the world's most popular anti-malware software with over 450 million downloads.
© 2026 Lavasoft. All rights reserved.
Terms Of Use |   Privacy Policy


x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now