Gen.Variant.Zusy.104845_315fe78803

by malwarelabrobot on November 28th, 2014 in Malware Descriptions.

Gen:Variant.Zusy.104845 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, GenericInjector.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 315fe78803ae7a49dfbeb98958818752
SHA1: 9c9cd9eab2848ccef4069a41548a3b9a61356a1e
SHA256: 95ffacfe294fe6130396a1c9bc0b6bbbf5801f2e29c5cf9fa8426c9c3a517140
SSDeep: 24576:FQs7/tU1/YbE7u Zak9RMVY6d83fElEjVrEeE9XsDr ClG82Zkw3BOT4N:FQsFVVQslAgeaXqlG6VT4N
Size: 2387968 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171, UPolyXv05_v6
Company: no certificate found
Created at: 2014-11-05 16:47:14
Analyzed on: WindowsXPESX SP3 32-bit

Summary:

Trojan-PSW. Trojan program intended for stealing users passwords.

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:3628

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:3628 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\html5[1].js (810 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\stat[1].php (3015 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\feejs[1].htm (5187 bytes)
%Documents and Settings%\%current user%\Cookies\CCOXLI5P.txt (133 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\xzb[1].js (6627 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\background_gradient[1] (453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\webstat_manage_hdga[1].js (821 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\showpo[1].js (2713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\base[1].css (329 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\baike.hots-20130201[1].js (973 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\ErrorPageTemplate[1] (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\httpErrorPagesScripts[1] (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\pp[1].htm (338 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\header130220[1].png (4 bytes)
%Documents and Settings%\%current user%\Cookies\AWM8IRO3.txt (94 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\Mjs[1].htm (2691 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\Mjs[1].htm (2658 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\XBKClickMonitor[1].js (350 bytes)
%Documents and Settings%\%current user%\Cookies\HASTLBQ5.txt (439 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\bullet[1] (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\core[1].php (748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\indexbo[1].js (1473 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\headandfoot[1].js (280 bytes)
%Documents and Settings%\%current user%\Cookies\2VHZGYYE.txt (109 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\C6D6MG1D\eoa.intra.baike[1].xml (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\h[1].js (9844 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\jquery-1.4.2.min[1].js (36265 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\jquery.autocomplete.search-ext-bing-20130201[1].js (22085 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\adjz[1].htm (2213 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\jquery-1.7.1.min[1].js (52778 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\footsimp[1].htm (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\21[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\navcancl[1] (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\baikelogo-header2013[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\AShow[1].aspx (6725 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\desktop.ini (67 bytes)
%WinDir%\empty.exe (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\aawgg_com[1].htm (5723 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\adv[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\newloadLogin[1].js (8653 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\info_48[1] (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\jquery-1.3.2[1].js (32748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\index[1].css (26126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\errorPageStrings[1] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\webstat_manage[1].js (600 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\AShow[1].aspx (0 bytes)
%Documents and Settings%\%current user%\Cookies\JBMW98CK.txt (0 bytes)

Registry activity

The process %original file name%.exe:3628 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B8 96 39 FE E0 FF 52 DF 4D 12 CD C4 BA 63 F1 D6"

[HKCU\Software\Microsoft\Internet Explorer\International\CpMRU]
"Size" = "10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\baike.com]
"(Default)" = "63"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Internet Explorer\International]
"W2KLpk" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Internet Explorer\International\CpMRU]
"InitHits" = "100"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 41 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\International\CpMRU]
"Factor" = "20"
"Enable" = "1"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\Total]
"(Default)" = "102"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5	File path
523d5c39f9d8d2375c3df68251fa2249	c:\WINDOWS\empty.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: ????
Product Name: ????
Product Version: 1.0.0.0
Legal Copyright: ????:www.aawgg.com
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ????
Comments: www.aawgg.com
Language: English (United States)

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	1168307	1171456	4.39574	da0f4ce2daf66f266c8be532b39eea0a
.rdata	1175552	1118024	1118208	4.508	cf365856dcd84d60a1695671160d664b
.data	2293760	279242	69632	3.58556	41837d7cf61a8094bb72040f251576a4
.rsrc	2576384	23808	24576	3.49009	b86d6120bb4d17962922677810e0e401

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://fzw.a.sohu.com/306430357.html
hxxp://www.aawgg.com/pp.html	61.160.224.226
hxxp://www.aawgg.com/?pp	61.160.224.226
hxxp://www.it1686.com/pp.php	211.151.13.46
hxxp://www.aawgg.com/templets/style/base.css	61.160.224.226
hxxp://www.aawgg.com/templets/style/index.css	61.160.224.226
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=5885029&web_id=5885029
hxxp://www.aawgg.com/templets/js/html5.js	61.160.224.226
hxxp://www.aawgg.com/templets/js/jquery-1.7.1.min.js	61.160.224.226
hxxp://www.aawgg.com/templets/js/indexbo.js	61.160.224.226
hxxp://p.sharele.cn/feejs.php?s=81189\|979\|2\|1\|0\|2\|6\|&ql=1	182.236.163.129
hxxp://js.union001.com/AShow.aspx?AID=18736
hxxp://www.aawgg.com/templets/js/xzb.js	61.160.224.226
hxxp://new.egooad.com/show/?placeId=14328	42.121.130.42
hxxp://z6.cnzz.com/stat.htm?id=5885029&r=&lg=en-us&ntime=none&cnzz_eid=1863303197-1417113670-&showp=1176x885&t=&h=1&rnd=902142171	42.156.140.19
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=5885029&t=z
hxxp://new.egooad.com/request/image/showpo.js	42.121.130.42
hxxp://dispatch.kahuna.glbdns2.microsoft.com/favicon.ico
hxxp://js.union001.com/AP5Min.aspx?AID=18736&Auth=D0C1133F0D148EF2ADDE19EB9A7244AC7E64002F2FAD9973905C900ADD455B38&referer=http://www.aawgg.com/pp.html&utz=1417095221557
hxxp://p.sharele.cn/sys/Mjs.php?ld_uid=81189&ld_zoneid=979&ld_h_url=www.aawgg.com&ld_app_info=ie:7.0&ld_la_info=1&ld_uc_ks=57&ld_sh=885&ld_sw=1176&ld_scd=32&ld_c_url=http://www.aawgg.com/pp.html&ld_os=WinXP&p=NGhaMytMdnZod01kYjBLY0dCVUFucVhoamo3ZG1HT2c4cXlaZ0dJb1djUT0&ql=1&r=0.6410648620464382&r=0.7935445881368643	182.236.163.129
hxxp://eoa.intra.baike.com/site/tupian/channel/adjz	119.254.117.172
hxxp://new.egooad.com/request/?m=ZGMxYjRiZjVhNWNiYWI3NmQwYTc1ZDJlNjIxNTQxZGYsMTA1NjYsMTQzMjgsMSwwLDAsNjM1NTI3MzkyODEwNzQ1&s=2,0,1176,885,6.0,http%3A%2F%2Fwww.aawgg.com%2Fpp.html,&ms=	42.121.130.42
hxxp://p35.tcdn.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463
hxxp://int.dpool.sina.com.cn/iplookup/iplookup.php?format=js	123.125.29.252
hxxp://p.sharele.cn/sys/Mview.php?rnd=f4a9K6tcA0rApBBRi91w7oJCDtIQpx/UMhJRzJEJoGJhfnNnZKBLXm8CFdInNFpM0RI61rnAD/8Ow8ALuUChaioZtlIwa1R7MRY/2lzw5E50xxM5CgZXBDZ2pNRSEqEy7PjzbC1BakG3AkW+tQ&p=QXNldzNIdFNtRGdKTGo1ZjJWdEx0dU91TnR2OHBwMFBOaEtEaGZyS05DVT0	182.236.163.129
hxxp://new.egooad.com/?aion=access&m=b505290b707d744e6d1f47af14171c84&p=14328&i=10566&n=63552739281074&u=0	42.121.130.42
hxxp://p35.tcdn.qq.com/webgame_login/website/styles/config.js
hxxp://p35.tcdn.qq.com/comm-htdocs/js/fajax-min.js
hxxp://x2.tcdn.qq.com/images/js/foot.js
hxxp://x2.tcdn.qq.com/images/js/title.js
hxxp://x2.tcdn.qq.com/images/js/login/loginmanagerv2.js?onlyCookie=1
hxxp://x2.tcdn.qq.com/images/js/basic/templatemanager.js
hxxp://ssd.tcdn.qq.com/ping_tcss_ied.js
hxxp://p35.tcdn.qq.com/server/website/CommWebGameSelect_ad.js?sGameKind=hyol
hxxp://c01.i05.arnic.hadns.net/public/images/header130220.png
hxxp://c01.i05.arnic.hadns.net/public/images/baikelogo-header2013.gif
hxxp://x2.tcdn.qq.com/images/js/basic.js
hxxp://13.gxejgs.com/m/sharele.html	115.236.4.13
hxxp://apps.game.qq.com/webgame_login/data/js2/hyol_status.js?sGameKind=hyol&r=
hxxp://apps.game.qq.com/webgame_login/data/js/hyol_select.js?sGameKind=hyol
hxxp://x2.tcdn.qq.com/images/js/jquery/jquery-1.5.1.min.js
hxxp://c01.i05.arnic.hadns.net/lib/jquery-1.4.2.min.js
hxxp://p.sharele.cn/sys/Mjs.php?ld_uid=81189&ld_zoneid=979&ld_h_url=www.aawgg.com&ld_app_info=ie:7.0&ld_la_info=1&ld_uc_ks=57&ld_sh=885&ld_sw=1176&ld_scd=32&ld_c_url=http://www.aawgg.com/pp.html&ld_os=WinXP&p=NGhaMytMdnZod01kYjBLY0dCVUFucVhoamo3ZG1HT2c4cXlaZ0dJb1djUT0&ql=1&r=0.6410648620464382&r=0.09181136118827226	182.236.163.129
hxxp://13.gxejgs.com/iclk/?zoneid=46494&uid=15759	115.236.4.13
hxxp://p.sharele.cn/sys/Mview.php?rnd=11dfQgHKk6x2Dexk/Gawz7cV47paKs8A9XZ+zMkAUZJ/srm/WP5VEWGe/lm69CPTkhxNAPHIV2yrZezsxKP2yBPlhqyZPLkosyZ67czJ+jZf4KuT3Of8ukC7hL3Ul7G9QPa5caYvcExVHUIHpw&p=QXNldzNIdFNtRGdKTGo1ZjJWdEx0dU91TnR2OHBwMFBOaEtEaGZyS05DVT0	182.236.163.129
hxxp://c01.i05.arnic.hadns.net/public/js/headandfoot.js?20110603
hxxp://www.waiwaishu.com/IosHome.html	222.89.188.245
hxxp://i.baike.com/js/commonlogin/newloadLogin.js	119.254.117.80
hxxp://c01.i05.arnic.hadns.net/lib/jquery.autocomplete.search-ext-bing-20130201.js
hxxp://www.waiwaishu.com/css/common1.css	222.89.188.245
hxxp://www.waiwaishu.com/css/common.css	222.89.188.245
hxxp://www.waiwaishu.com/js/jquery-1.10.2.min.js	222.89.188.245
hxxp://www.waiwaishu.com/js/script.js	222.89.188.245
hxxp://www.waiwaishu.com/js/common.js	222.89.188.245
hxxp://c01.i05.arnic.hadns.net/public/js/baike.hots-20130201.js
hxxp://www.waiwaishu.com/js/jquery.js	222.89.188.245
hxxp://www.waiwaishu.com/js/default.js	222.89.188.245
hxxp://www.waiwaishu.com/js/pagecommon.js	222.89.188.245
hxxp://eoa.intra.baike.com/js/adv.js?cp=10	119.254.117.172
hxxp://www.waiwaishu.com/css/public.css	222.89.188.245
hxxp://www.waiwaishu.com/js/jcarousellite_1.0.1.min.js	222.89.188.245
hxxp://www.waiwaishu.com/js/common1.js	222.89.188.245
hxxp://www.waiwaishu.com/js/Article.js	222.89.188.245
hxxp://www.waiwaishu.com/js/utility.js	222.89.188.245
hxxp://www.waiwaishu.com/css/typecss.css	222.89.188.245
hxxp://stat.baike.com/js/webstat_manage.js	119.254.117.48
hxxp://c01.i05.arnic.hadns.net/stat/js/XBKClickMonitor.js
hxxp://stat.baike.com/js/webstat_manage_hdga.js	119.254.117.48
hxxp://www.waiwaishu.com/images/logo.png	222.89.188.245
hxxp://hm.e.shifen.com/h.js?86df868dfedf737b34b188c8542623d3
hxxp://www.waiwaishu.com/fonts/icomoon.eot?	222.89.188.245
hxxp://www.waiwaishu.com/Images/bj.png	222.89.188.245
hxxp://www.waiwaishu.com/Images/background_4.png	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/ios/20141024091715.jpg	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/ios/20141024091546.jpg	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/ios/20141024091440.jpg	222.89.188.245
hxxp://hm.e.shifen.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&et=0&fl=6.0&ja=1&ln=en-us&lo=0&nv=1&rnd=1868957173&si=86df868dfedf737b34b188c8542623d3&st=3&su=http://www.aawgg.com/pp.html&v=1.0.70&lv=1&tt=äº’åŠ¨ç™¾ç§‘
hxxp://www.waiwaishu.com/pic/images/ios/20141024114229.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112614349492.png	222.89.188.245
hxxp://www.waiwaishu.com/images/main_bg.jpg	222.89.188.245
hxxp://static.n.shifen.com/hmt/icon/21.gif
hxxp://www.hudong.com/all/footsimp.html	119.254.117.88
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112510581368.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112510557472.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112413315494.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112413276096.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112113228954.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112113188786.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014111911209360.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014111911185225.png	222.89.188.245
hxxp://c01.i05.arnic.hadns.net/lib/jquery-1.3.2.js
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014112511053395.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014112413372470.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014112113301451.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014111911258525.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014111813317678.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014082515454274.jpg	222.89.188.245
hxxp://hm.e.shifen.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&ep=2234,2234&et=3&fl=6.0&ja=1&ln=en-us&lo=0&nv=0&rnd=1103922994&si=86df868dfedf737b34b188c8542623d3&st=4&su=http://www.aawgg.com/pp.html&v=1.0.70&lv=1&tt=äº’åŠ¨ç™¾ç§‘
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014082514588250.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070722012637.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070721561304.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070514205801.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070514062749.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070313164280.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221461361.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221386220.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221356494.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221281364.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221245671.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221192310.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221167360.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070220536890.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014090914592922.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014082817114718.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081917112527.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081817192000.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081211363835.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081123202185.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081123132964.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081123001713.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081122528777.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081122446392.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081122358413.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081122295202.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014073009514101.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014073009449611.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014073009396133.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014073009293147.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014073009173304.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070814298095.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070814266186.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070814229713.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070814159123.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070814113166.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014091016079056.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082321016002.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082320568784.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082320491734.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082321069032.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082320271314.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082320355948.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073115059839.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073111044017.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073017493297.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073015239498.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073015062422.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073022042276.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073014189465.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073014071810.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082815472365.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073014034653.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081916263719.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081916486563.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081300413586.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081314444984.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081123068326.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073115135228.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073111001449.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073109371599.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073014227204.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073014148024.jpg	222.89.188.245
hxxp://www.waiwaishu.com/images/common.png	222.89.188.245
hxxp://www.waiwaishu.com/images/title-bj6.jpg	222.89.188.245
hxxp://www.waiwaishu.com/images/star_five.jpg	222.89.188.245
hxxp://www.waiwaishu.com/images/right.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112713267103.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112713248958.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014112614377137.png	222.89.188.245
hxxp://www.waiwaishu.com/images/az.png	222.89.188.245
hxxp://www.waiwaishu.com/images/title-bj2.jpg	222.89.188.245
hxxp://www.waiwaishu.com/images/xm.png	222.89.188.245
hxxp://www.waiwaishu.com/images/s-index-icon-3.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/TopicPic/20140923/å¸®ä½ å…‹æœå¼€å¦ææƒ§ç—‡.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/TopicPic/20140923/å…±èµä¸€è½®æ˜Žæœˆ.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/TopicPic/20140919/ç¤¾äº¤æ²Ÿé€šä¸å‘æ„iOS.jpg	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/picpage/20140820175609.jpg	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/picpage/20140820175555.jpg	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/picpage/20140820155859.jpg	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/picpage/20140820155754.jpg	222.89.188.245
hxxp://www.waiwaishu.com/pic/images/picpage/20140820155932.jpg	222.89.188.245
hxxp://www.waiwaishu.com/js/jquery.KinSlideshow-1.2.1.min.js	222.89.188.245
hxxp://www.waiwaishu.com/images/img/20100409124819709.gif	222.89.188.245
hxxp://www.waiwaishu.com/images/img/20100409124819581.gif	222.89.188.245
hxxp://www.waiwaishu.com/images/img/20100409124819246.gif	222.89.188.245
hxxp://www.waiwaishu.com/js/jquery.lazyload.min.js	222.89.188.245
hxxp://www.waiwaishu.com/js/WQHeader.js	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014112614424422.png	222.89.188.245
hxxp://www.waiwaishu.com/images/title-bj3.jpg	222.89.188.245
hxxp://www.waiwaishu.com/images/img/bj1.jpg	222.89.188.245
hxxp://www.waiwaishu.com/images/img/bj2.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014111213233024.png	222.89.188.245
hxxp://www.waiwaishu.com/Images/background_3.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014111014345845.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014110711382853.png	222.89.188.245
hxxp://www.waiwaishu.com/images/1406-app.jpg	222.89.188.245
hxxp://www.waiwaishu.com/Images/background_5.png	222.89.188.245
hxxp://www.waiwaishu.com/images/table.png	222.89.188.245
hxxp://www.waiwaishu.com/images/free_down2.png	222.89.188.245
hxxp://www.waiwaishu.com/images/remind_part_bg.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221427171.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221328615.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221139799.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221093141.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221035808.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221008407.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070220574916.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014081917196037.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070814186734.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082814314066.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081220445235.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081213544415.gif	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073114295520.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073114126741.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073017402503.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081817331125.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014073113513202.jpg	222.89.188.245
hxxp://www.waiwaishu.com/js/tabnav.js	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014112713341657.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014111713416920.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014111114057281.png	222.89.188.245
hxxp://www.waiwaishu.com/images/star.png	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070514243194.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Game/s_img/2014070221063380.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014082320404740.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081220091795.jpg	222.89.188.245
hxxp://www.waiwaishu.com/UploadFiles/Soft/s_img/2014081916215850.jpg	222.89.188.245
hxxp://hm.e.shifen.com/h.js?c1b609924995c1b67281e8a7bc7bdf39
hxxp://www.waiwaishu.com/images/xinlang.png	222.89.188.245
hxxp://www.waiwaishu.com/images/wenxin.png	222.89.188.245
hxxp://www.waiwaishu.com/images/tieba.png	222.89.188.245
hxxp://hm.e.shifen.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&et=0&fl=6.0&ja=1&ln=en-us&lo=0&nv=1&rnd=1537996913&si=c1b609924995c1b67281e8a7bc7bdf39&st=1&v=1.0.70&lv=1&tt=æªæªé¼ å¸‚åœº-åº”ç”¨ä¸‹è½½/æ‰‹æœºæ¸¸æˆ/iosè‹¹æžœåº”ç”¨ä¸‹è½½/å®‰å“åº”ç”¨ä¸‹è½½/é™æ—¶å…è´¹/çŽ©æœºæ•™ç¨‹/æ¸¸æˆæ”»ç•¥
hxxp://www.waiwaishu.com/images/rocket_button_up.png	222.89.188.245
hxxp://www.waiwaishu.com/images/wws.png	222.89.188.245
hxxp://trust.e.shifen.com/vcard/v.js?siteid=5643578&url=http://www.waiwaishu.com/IosHome.html&source=&rnd=2066878795
hxxp://www.waiwaishu.com/favicon.ico	222.89.188.245
hxxp://myconf6room.dtwscache.glb0.lxdns.com/event/promimg/?src=pming393
hxxp://myconf6room.dtwscache.glb0.lxdns.com/css/index_MIN_12.30.css
hxxp://myconf6room.dtwscache.glb0.lxdns.com/css/base_MIN_11.36.css
hxxp://myconf6room.dtwscache.glb0.lxdns.com/js/LAB_0.1.js
hxxp://myconf6room.dtwscache.glb0.lxdns.com/csjs/_/girlfall_5.js
hxxp://save.xdwscache.glb0.lxdns.com/imges/live2014/idx-bg.png
hxxp://save.xdwscache.glb0.lxdns.com/imges/live2014/logo-v5.png
hxxp://save.xdwscache.glb0.lxdns.com/live/2014/06/24/01/1003v1403543368529193922.jpg
hxxp://save.xdwscache.glb0.lxdns.com/live/86/68/5b5751ac8e.jpg
hxxp://save.xdwscache.glb0.lxdns.com/imges/live2014/head-nav-v2.png
hxxp://save.xdwscache.glb0.lxdns.com/live/2014/10/13/00/1003v1413132824620793763.jpg
hxxp://save.xdwscache.glb0.lxdns.com/live/2014/08/11/21/1003v1407764860236043382.jpg
hxxp://save.xdwscache.glb0.lxdns.com/3a/fb/u327191383286771.png
hxxp://save.xdwscache.glb0.lxdns.com/live/2014/05/01/02/1003v1398881124771492481.jpg
hxxp://save.xdwscache.glb0.lxdns.com/imges/live2014/showwall-bg-v3.jpg
hxxp://save.xdwscache.glb0.lxdns.com/imges/live/events/changzhan2014/cz_revive_banner.jpg
hxxp://save.xdwscache.glb0.lxdns.com/imges/live2014/header-bg-v3.jpg
hxxp://save.xdwscache.glb0.lxdns.com/imges/live2014/wall-panel.png
hxxp://save.xdwscache.glb0.lxdns.com/imges/live/IMGSRC/logo_foot_32_v3.png
hxxp://save.xdwscache.glb0.lxdns.com/f2/9a/v627061383118550.png
hxxp://myconf6room.dtwscache.glb0.lxdns.com/js/jquery_MIN_5.js
hxxp://save.xdwscache.glb0.lxdns.com/imges/live/events/changzhan2014/cz_banner_close.png
hxxp://myconf6room.dtwscache.glb0.lxdns.com/js/s/iwt-min.js
hxxp://save.xdwscache.glb0.lxdns.com/imges/favicon.ico
hxxp://myconf6room.dtwscache.glb0.lxdns.com/js/s/e6u5-min.js?101016
hxxp://myconf6room.dtwscache.glb0.lxdns.com/js/mootools_MIN_1.4.5.js
hxxp://myconf6room.dtwscache.glb0.lxdns.com/js/z_MIN_15.85.js
hxxp://myconf6room.dtwscache.glb0.lxdns.com/js/s/login_7.js
hxxp://irs01.com/irt?_iwt_UA=UA-6cn-000001&p=value1,value2&jsonp=_5LWVX	180.169.19.132
hxxp://myconf6room.dtwscache.glb0.lxdns.com/event/promimg/proLiveInfo.php
hxxp://save.xdwscache.glb0.lxdns.com/imges/live2014/userpanel-line-v5.png
hxxp://myconf6room.dtwscache.glb0.lxdns.com/api/liveInfoCk.php
hxxp://save.xdwscache.glb0.lxdns.com/live/64/43/ef85fa658f01e170967b7c1ee82b048b.jpg
hxxp://save.xdwscache.glb0.lxdns.com/live/88/97/05d6ab0c93d5cdaaf0ba9005159a2236.jpg
hxxp://save.xdwscache.glb0.lxdns.com/live/28/34/6f6e592a4c6d24f16078e1c1fe62e833.gif
hxxp://save.xdwscache.glb0.lxdns.com/live/55/44/96995c4b3159eeb35b4a5d0029f75b3a.jpg
hxxp://enop007.tlgslb.com/live.6.cn/e6u2/r.php?location=v.6.cn/event/promimg/?src=pming393&referer=&browser=mozilla/4.0 (compatible; msie 8.0; windows nt 5.1; trident/4.0; .net clr 2.0.50727; .net clr 3.0.04506.648; .net clr 3.5.21022; .net4.0c; .net4.0e)&flash=6.0&msr=1176,885&uid=0&pro=4&stamp=1417095275151
hxxp://save.xdwscache.glb0.lxdns.com/live/99/53/58171db4245d5a23f80e63307e1ef36a.jpg
hxxp://save.xdwscache.glb0.lxdns.com/live/90/07/5a59fbed63bf08508ab58c408613340c.jpg
hxxp://save.xdwscache.glb0.lxdns.com/live/76/09/f1c48eab1359b3d54e18c7e6e58b83cf.jpg
hxxp://save.xdwscache.glb0.lxdns.com/b7/aa/h199941397100951.jpg
hxxp://www.huimg.cn/stat/js/XBKClickMonitor.js	183.61.10.159
hxxp://www.huimg.cn/public/js/baike.hots-20130201.js	183.61.10.159
hxxp://vi3.6rooms.com/live/64/43/ef85fa658f01e170967b7c1ee82b048b.jpg	8.37.231.20
hxxp://www.live.com/favicon.ico	207.46.11.220
hxxp://pt.rbc.cn/AShow.aspx?AID=18736	115.238.73.171
hxxp://hyol.qq.com/server/website/CommWebGameSelect_ad.js?sGameKind=hyol	203.205.143.146
hxxp://p.qdunion.com/AP5Min.aspx?AID=18736&Auth=D0C1133F0D148EF2ADDE19EB9A7244AC7E64002F2FAD9973905C900ADD455B38&referer=http://www.aawgg.com/pp.html&utz=1417095221557	115.238.73.171
hxxp://aiaiwg2014.blog.sohu.com/306430357.html	220.181.94.198
hxxp://vr1.6rooms.com/imges/live2014/logo-v5.png	8.37.231.19
hxxp://hm.baidu.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&et=0&fl=6.0&ja=1&ln=en-us&lo=0&nv=1&rnd=1868957173&si=86df868dfedf737b34b188c8542623d3&st=3&su=http://www.aawgg.com/pp.html&v=1.0.70&lv=1&tt=äº’åŠ¨ç™¾ç§‘	61.135.185.140
hxxp://www.huimg.cn/lib/jquery.autocomplete.search-ext-bing-20130201.js	183.61.10.159
hxxp://vj0.6rooms.com/js/s/iwt-min.js	61.146.152.57
hxxp://www.huimg.cn/lib/jquery-1.4.2.min.js	183.61.10.159
hxxp://www.huimg.cn/public/js/headandfoot.js?20110603	183.61.10.159
hxxp://hyol.qq.com/webgame_login/website/styles/config.js	203.205.143.146
hxxp://eiv.baidu.com/hmt/icon/21.gif	115.239.211.92
hxxp://ossweb-img.qq.com/images/js/basic.js	103.7.29.209
hxxp://hm.baidu.com/h.js?c1b609924995c1b67281e8a7bc7bdf39	61.135.185.140
hxxp://v1.cnzz.com/stat.php?id=5885029&web_id=5885029	1.99.192.15
hxxp://vr1.6rooms.com/imges/live/IMGSRC/logo_foot_32_v3.png	8.37.231.19
hxxp://commwebgame.game.qq.com/webgame_login/data/js/hyol_select.js?sGameKind=hyol	101.226.62.87
hxxp://www.huimg.cn/public/images/header130220.png	183.61.10.159
hxxp://vi1.6rooms.com/live/2014/10/13/00/1003v1413132824620793763.jpg	8.37.231.19
hxxp://eoa.intra.hudong.com/js/adv.js?cp=10	119.254.117.172
hxxp://www.baike.com/all/footsimp.html	119.254.117.88
hxxp://hm.baidu.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&et=0&fl=6.0&ja=1&ln=en-us&lo=0&nv=1&rnd=1537996913&si=c1b609924995c1b67281e8a7bc7bdf39&st=1&v=1.0.70&lv=1&tt=æªæªé¼ å¸‚åœº-åº”ç”¨ä¸‹è½½/æ‰‹æœºæ¸¸æˆ/iosè‹¹æžœåº”ç”¨ä¸‹è½½/å®‰å“åº”ç”¨ä¸‹è½½/é™æ—¶å…è´¹/çŽ©æœºæ•™ç¨‹/æ¸¸æˆæ”»ç•¥	61.135.185.140
hxxp://vj0.6rooms.com/js/jquery_MIN_5.js	61.146.152.57
hxxp://v.6.cn/api/liveInfoCk.php	106.38.199.96
hxxp://vi0.6rooms.com/f2/9a/v627061383118550.png	8.37.231.19
hxxp://huoying.qq.com/webgame_login/website/styles/config.js	203.205.143.146
hxxp://vi4.6rooms.com/live/76/09/f1c48eab1359b3d54e18c7e6e58b83cf.jpg	8.37.231.22
hxxp://vr4.6rooms.com/imges/live2014/header-bg-v3.jpg	8.37.231.22
hxxp://huoying.qq.com/comm-htdocs/js/fajax-min.js	203.205.143.146
hxxp://vi2.6rooms.com/3a/fb/u327191383286771.png	8.37.231.21
hxxp://ossweb-img.qq.com/images/js/jquery/jquery-1.5.1.min.js	103.7.29.209
hxxp://www.huimg.cn/public/images/baikelogo-header2013.gif	183.61.10.159
hxxp://ossweb-img.qq.com/images/js/basic/templatemanager.js	103.7.29.209
hxxp://vr1.6rooms.com/imges/live/events/changzhan2014/cz_revive_banner.jpg	8.37.231.19
hxxp://v.6.cn/event/promimg/?src=pming393	106.38.199.96
hxxp://vj0.6rooms.com/js/s/login_7.js	61.146.152.57
hxxp://ossweb-img.qq.com/images/js/login/loginmanagerv2.js?onlyCookie=1	103.7.29.209
hxxp://hyol.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463	203.205.143.146
hxxp://vj0.6rooms.com/js/mootools_MIN_1.4.5.js	61.146.152.57
hxxp://ossweb-img.qq.com/images/js/title.js	103.7.29.209
hxxp://vj1.6rooms.com/css/base_MIN_11.36.css	61.146.152.57
hxxp://vi5.6rooms.com/live/2014/08/11/21/1003v1407764860236043382.jpg	8.37.231.20
hxxp://vj0.6rooms.com/js/s/e6u5-min.js?101016	61.146.152.57
hxxp://vi7.6rooms.com/live/86/68/5b5751ac8e.jpg	8.37.231.20
hxxp://vj0.6rooms.com/js/LAB_0.1.js	61.146.152.57
hxxp://vi2.6rooms.com/live/2014/06/24/01/1003v1403543368529193922.jpg	8.37.231.21
hxxp://i2.6.cn/b7/aa/h199941397100951.jpg	8.37.231.22
hxxp://vr1.6rooms.com/imges/favicon.ico	8.37.231.19
hxxp://pingjs.qq.com/ping_tcss_ied.js	103.7.30.59
hxxp://www.huimg.cn/lib/jquery-1.3.2.js	183.61.10.159
hxxp://vi6.6rooms.com/live/99/53/58171db4245d5a23f80e63307e1ef36a.jpg	8.37.231.20
hxxp://huoying.qq.com/server/website/CommWebGameSelect_ad.js?sGameKind=hyol	203.205.143.146
hxxp://vr1.6rooms.com/imges/live2014/idx-bg.png	8.37.231.19
hxxp://v.6.cn/event/promimg/proLiveInfo.php	106.38.199.96
hxxp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463	203.205.143.146
hxxp://trust.baidu.com/vcard/v.js?siteid=5643578&url=http://www.waiwaishu.com/IosHome.html&source=&rnd=2066878795	61.135.185.105
hxxp://ossweb-img.qq.com/images/js/foot.js	103.7.29.209
hxxp://hm.baidu.com/h.js?86df868dfedf737b34b188c8542623d3	61.135.185.140
hxxp://vr1.6rooms.com/imges/live2014/showwall-bg-v3.jpg	8.37.231.19
hxxp://vi3.6rooms.com/live/2014/05/01/02/1003v1398881124771492481.jpg	8.37.231.20
hxxp://vj1.6rooms.com/css/index_MIN_12.30.css	61.146.152.57
hxxp://shrek.6.cn/live.6.cn/e6u2/r.php?location=v.6.cn/event/promimg/?src=pming393&referer=&browser=mozilla/4.0 (compatible; msie 8.0; windows nt 5.1; trident/4.0; .net clr 2.0.50727; .net clr 3.0.04506.648; .net clr 3.5.21022; .net4.0c; .net4.0e)&flash=6.0&msr=1176,885&uid=0&pro=4&stamp=1417095275151	58.222.24.245
hxxp://vr0.6rooms.com/imges/live2014/wall-panel.png	8.37.231.22
hxxp://vj0.6rooms.com/csjs/_/girlfall_5.js	61.146.152.57
hxxp://vi3.6rooms.com/live/88/97/05d6ab0c93d5cdaaf0ba9005159a2236.jpg	8.37.231.20
hxxp://vi4.6rooms.com/live/90/07/5a59fbed63bf08508ab58c408613340c.jpg	8.37.231.22
hxxp://vj0.6rooms.com/js/z_MIN_15.85.js	61.146.152.57
hxxp://c.cnzz.com/core.php?web_id=5885029&t=z	66.102.255.55
hxxp://vi1.6rooms.com/live/55/44/96995c4b3159eeb35b4a5d0029f75b3a.jpg	8.37.231.19
hxxp://vr2.6rooms.com/imges/live/events/changzhan2014/cz_banner_close.png	8.37.231.19
hxxp://vr2.6rooms.com/imges/live2014/userpanel-line-v5.png	8.37.231.19
hxxp://commwebgame.game.qq.com/webgame_login/data/js2/hyol_status.js?sGameKind=hyol&r=	101.226.62.87
hxxp://vi3.6rooms.com/live/28/34/6f6e592a4c6d24f16078e1c1fe62e833.gif	8.37.231.20
hxxp://vr1.6rooms.com/imges/live2014/head-nav-v2.png	8.37.231.19
hxxp://hm.baidu.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&ep=2234,2234&et=3&fl=6.0&ja=1&ln=en-us&lo=0&nv=0&rnd=1103922994&si=86df868dfedf737b34b188c8542623d3&st=4&su=http://www.aawgg.com/pp.html&v=1.0.70&lv=1&tt=äº’åŠ¨ç™¾ç§‘	61.135.185.140
vip.qcyp360.com	124.248.229.2
vip.hlhg369.com	124.248.229.2
time.windows.com	65.55.56.206
api.hudong.com	119.254.117.37

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY Unsupported/Fake Windows NT Version 5.0
ET POLICY HTTP Request on Unusual Port Possibly Hostile
ET DNS DNS Query for Suspicious .com.cn Domain

Traffic

GET /event/promimg/?src=pming393 HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

Host: v.6.cn


HTTP/1.1 200 OK

Expires: Thu, 27 Nov 2014 18:43:05 GMT

Date: Thu, 27 Nov 2014 18:34:45 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 6194

Last-Modified: Thu, 27 Nov 2014 18:34:45 GMT

Cache-Control: max-age=500

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 435

X-Via: 1.1 zw13:8080 (Cdn Cache Server V2.0), 1.1 yungu89:0 (Cdn Cache Server V2.0)

Connection: keep-alive
...........\{s.G...T..f....Z.=lY.-......d......Tcid..4..H.x..l....dI..
.Y.$.....`....(.z.W....~.C.lL..6..........Ok.W.^........S.Mn.4A...r.bg
BE...Uu~~>2.........S.R....kyz-....N5.._3....Yq....^..!%.?eB...Q.z\
..5...L.).S!..R...n9......./.... .KDGb...L$GC..W..z&4...Z.6.=\.-.`.4.0
 >.o...3...m..V_..{k5.Y..-.k").b....c...V.w.M.0.....f.z.....w.....~
7....}s5~K..uK..._...=..X..NI.l.......#....zp.............u.f.........
5.~.~\.{.q...*G.M@..~....Y..?3%..vn...Y.t.v..0oZy.8.......!?Y..'j5..n.
,..!'...3.V..6..o.?..x......_....r.....|.>h......?...u.@..].#0..{..
..5..l~z}e.004..7?..8..u............z.}.F.._..{.I`...n5.^i..[[email protected].}
....I.}.;.....!'1...`W..2gL..Y.T..JFe.b..L......9....)EK/.6Z.b..e.e;.3
..Q..m....k..B..S....6..{....1.>.p|.P..H.....7...e....R^x...%.Q.k..
.Q...../.W...Q.......-b... F...}.0..3.j..P.T.1...T.f.V.w....C..qpP!...
....z......V...\.?..=g.Y..YNE..kv....K.f............j......_p..p...o..
.p...5K0 .H.X.$#..........OX.BI....H.3...1fPrs....:..z......X$.q.F....
.3.p..H".......cw..5....y......$V....JFY....Jsv.A..Z..........tk..2B..
...[.....kF8..E#..\.v.r.....?...dF8q. (2..`d^3..A..&..X.f...-Ay....L..
 a...r%..j.....*......h..i.....L.H.f......2KF]W.:..V..Vf..O<..V....
x,...Ug........9J.0..@.....$.T.S......PE........4..V.L.q...#g....F...Z
E...L. ..|......... [email protected]]....K...F.."y.....L.....L.0.....xU.
...I<.,........-......p............c.T...V..._..o.... ..p....a.OUA.
<[email protected]~....I....H.2.r..f.e....(.z.R...Z....486...
......[oh.......1...._.]..&~.....w.Y8,..G..h...Pp.{9^j......;..u..<<< skipped >>>

GET /event/promimg/proLiveInfo.php HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept: application/json, text/javascript, */*; q=0.01

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: v.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 27 Nov 2014 18:47:20 GMT

Date: Thu, 27 Nov 2014 18:39:00 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 45852

Last-Modified: Thu, 27 Nov 2014 18:34:57 GMT

Cache-Control: max-age=500

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 7

Age: 185

X-Via: 1.1 zw12:80 (Cdn Cache Server V2.0), 1.1 yungu89:4 (Cdn Cache Server V2.0)

Connection: keep-alive
............k.%....[.?..f9..D. ..H...B.lm..la.....t..6(.W...xDfFD..<
;y".#.8h....:...........}....?dY..W.....8........|.....E.5|...c.3.../E
V..7_.n*...,...f..|.....T....?~............}...W.W..o.....q...?.......
...........~.j...7o...e.....y.J.i.&..U.j...\.l..2k.|^.......-?[.......
_.......u......w.........?......N...:.=...wo.< J......?.O...../....
.?....|.n&>........3........x?.......}...W....u`.....?}^>~.....4
...~.........b..<..v.S......U....ni...q~......?}......[....j..*.2Y.
n..R......W......C...r.O(/..)f..3..P...V..).a^.j...].|........yn.!S...
!.J..9..!4U.Uv.~..P.......~y7.. .$.F.g.1."h..J7..b.!.M.&a.....?.9&..M.
k..V...5..T]a. sM..r,}Y.....T}'f....R.<2.......8......rLN.e...]..;.
....|.7o..?......o....;......UQ.....\......=[..Y;...?wssf...b../.C.\..
...s..3........u...T..u1.e..............~pj]...YKVK-.Q.-..'..)*.z....%
W.nS..4......f........n..A...gU{..../..3Q..w.y...[..^k...f.lv..g.T.C6v
.T.S./..wYV....(...W.VXO.8rs..\`.......z.....9...j.Y<.Pa......Z..~.
.t..Ku6;.i.y..p7...HL...B...u&..p.3.j......_.w..`{j..T.....e.3K>.v.
.....c..i.f...C[....PTm.T..U:...\<q...._.*s'J....f>..Y.>.....
...z...ZCh...T.T....fJ.jqJ..En......wX^.Y.:..}....$...8..E......'.- .X
@U........Q.%g.....T_MYVtKS.eB0[TEV7.{.M..o....b{.!./..p.....o.-@>R
[email protected]......]j>.v.?(.'..=(..!..ex......e...........vTY[
.e...u.@"T..8.yMf.....U.z..[...C..J...*..M.....T....{?W]S..M.PW.~.)...
BrW.6~...W......=/..M...8.<'.....eVu[..6M.Ms.v.<d.P&8~......sc..
(....l... W.{/.m.d.Ml.q.U.<.7"...v...N....E].N...-Y1. .8..$..c.<<< skipped >>>

GET /AP5Min.aspx?AID=18736&Auth=D0C1133F0D148EF2ADDE19EB9A7244AC7E64002F2FAD9973905C900ADD455B38&referer=http://VVV.aawgg.com/pp.html&utz=1417095221557 HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: p.qdunion.com

Connection: Keep-Alive

Cookie: UnionADShowTG=2065


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://v.6.cn/event/promimg/?src=pming393

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=2065|2296; expires=Thu, 27-Nov-2014 21:41:52 GMT; path=/

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT

Content-Length: 158
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://v.6.c
n/event/promimg/?src=pming393">here</a>.</h2>..</bod
y></html>....

GET /hmt/icon/21.gif HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: eiv.baidu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

ETag: "762990053"

Accept-Ranges: bytes

Last-Modified: Tue, 13 Apr 2010 09:38:40 GMT

Expires: Sat, 05 Oct 2024 18:41:42 GMT

Cache-Control: max-age=311040000

Content-Length: 1119

Date: Thu, 27 Nov 2014 18:41:42 GMT

Server: BWS/1.0

Connection: Keep-Alive
GIF89a........s..E.....M...................ZS.2-.YS.......2,.c[..D....
...0'..:..0.&..]Z..8..>..D.TM.................C................._..
^.....u..w........~........k.4......X..d.......=1.....a.c[.PH.h_.....b
..........PH........A..9....h`..J..1.......g`..W........2........z.#..
.p..m....jd........*.............[Q...........6..G..............6..t..
........... ..TL.....!....$....."..;0.....h.7-..............Z.........
....%..:.....H@....^W.QJ..'. !..........70.._. %.'...T.0'..Q.G?.ws....
-$........h.}w.....>...........L.....#.......:0.............\S.....
........*".....Q..............<..T.!...p.$...}........N..........d_
...........j.......VN.....o.....e........[............................
......................................................................
....................!.......,............u...,..>6.T.T..&T.".H. ...
.3^.PQ.G..:^..H.-.T....2#!........K..iP.&..03%X..x.P/^.$...`...G>Xd
....!..d.T...j.,..fQ..8l<..U%..G|.h.......$p..f......R..b.....*R@W"
2y..8..V3.LV`t.e..7.>.........\D..O.H.....$...^.]..).. ...9..E...d\
...V.U1..i......B]......c.P<0.i...v.]D..G .?p-.CD.Fi;>..v....r`.
.&........./.dp....`.....;HTTP/1.1 200 OK..Content-Type: image/gif..ET
ag: "762990053"..Accept-Ranges: bytes..Last-Modified: Tue, 13 Apr 2010
 09:38:40 GMT..Expires: Sat, 05 Oct 2024 18:41:42 GMT..Cache-Control: 
max-age=311040000..Content-Length: 1119..Date: Thu, 27 Nov 2014 18:41:
42 GMT..Server: BWS/1.0..Connection: Keep-Alive..<<< skipped >>>

GET /f2/9a/v627061383118550.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:15:24 GMT

Date: Thu, 09 Oct 2014 09:15:24 GMT

Server: ngx_openresty

Content-Type: image/png

Content-Length: 2248

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 30 Oct 2013 07:35:57 GMT

ETag: "2499283039"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zhenjiang73:8111 (Cdn Cache Server V2.0), 1.1 lasi18:2 (Cdn Cache Server V2.0)

Connection: keep-alive
......pR..uVy8....*...>.-....2.....Z:....PkTi.(ji.v....`p....... W,
.$1u;.VJ-..0hD.!!.2_.....y............9..`gk.[YMYNNn7p..u99.....v%.m..
..6.0?...A.....8..r......O.#.C.[...C.]C..Q....H..>.^H......`t.F....
....yG%p..cD....kNxl...f...L....}..cJ.....G.z.#..v...%.&..Z.....tL....
..]._.....2P.x..~..5..e;....c{...[y.uM.,a..t.b..ow.b.8.#y.'...^v......
v...s #?G..>f>.w......4..&._..y.m.H8..V..H..*I...q...`...%x..@..
.....{....~..0.....G.....7...?...2...&yc...Xv..7..Yyy.....0.5.h.d}.
..c......u..>.zx.Tk....?...Sb/G.... ._..0-.....7Qg...5.J........dJU
ZrMz.w.3gu||i|..j`.7Jl...:;.f.Q#...'.._.C.l..h..2..Q8%..x..Ps...N. .`.
.n.9.....sQ...1.b(...m.,..&.V.n....8G.m..Sk.(Ly.3.D...Q.....)GL..~..oH
.].v...Y/..r..r.OHc,.8.\.buwN..2......vH..!..zu....n.,.p1k.....9*Z.../
..5V........0..{W...x0"2.vZ...VLc~..n.-..4..P)T.>..U.V.s....G.*ym..
i9.......OVZ..z@..$7D1S..N...dA...24.....$....f6.5.1...*C|E....M ..&#.
......Mi..:.:...".........vt.Uj.a....!.h.....f-K.}...mU#.`.7>......
.o.0...[........Y7.o.......Ps.......#. ..a....{.eP...GG.b.%.`.M....|..
..# ......'3.W......q:...xw.D.wrh....*.U.Wu.9.....%W.0..........2.MQ..
...............8.aW....y;s..!Z....Y.m.i.&.-.-....uU..g_..../...WD.q...
..i.g..P.M;.B..h....xv......K....?......[...5..C....t:.=%... ...RC....
.O..vk.|%n.4.VZ.....H.\R...=V....(.p.....?........(9..RH....r. ....>
;.......3a/.b..[.. ...g.......s.q......]..t..............q*.;c.y..-...
..p.O..,.ZQ.J...{C"........NL......5N.}..F._1......Ua..z......B...*$".
P'1?...8}..^.N"a]d...gk.e.....P.D..=.....a...d~%7.d..E.....&....x.<<< skipped >>>

GET /show/?placeId=14328 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: new.egooad.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Length: 456

Content-Type: text/javascript; charset=utf-8

Expires: -1

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

X-Powered-By: UrlRewriter.NET 2.0.0

P3P: CP=CAO PSA OUR

Set-Cookie: ASP.NET_SessionId=gtwikprua0dtvf55x1ofshep; path=/; HttpOnly

Date: Thu, 27 Nov 2014 18:41:20 GMT
/* [Response Time : 31ms] */var em_op_subfun={cs:"hXXp://new.egooad.co
m/request/?m=",a:"ZGMxYjRiZjVhNWNiYWI3NmQwYTc1ZDJlNjIxNTQxZGYsMTA1NjYs
MTQzMjgsMSwwLDAsNjM1NTI3MzkyODEwNzQ1",rn:"hXXp://new.egooad.com/?aion=
access&m=b505290b707d744e6d1f47af14171c84&p=14328&i=10566&n=6355273928
1074&u=0",st:50,ct:0,ht:0,cot:1,rc:false,zeo:false};document.write("&l
t;scr" "ipt type=\"text/javascript\" src=\"hXXp://new.egooad.com/reque
st/ima" "ge/showpo.js\"><\/script>");......


GET /request/image/showpo.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: new.egooad.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=gtwikprua0dtvf55x1ofshep


HTTP/1.1 200 OK

Content-Length: 2494

Content-Type: application/x-javascript

Content-Encoding: gzip

Content-Location: hXXp://new.egooad.com/request/image/showpo.js

Last-Modified: Sun, 05 Jan 2014 13:49:06 GMT

Accept-Ranges: bytes

ETag: "0f586e61cacf1:186a"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:25 GMT
...........X.s....WR.....8..\m.N(..0..{.w......Mb..|%%i....J...I.7.[Z.
.>..J '..'. .T,>EE...R8.....0...t.G2)r.h...G2.......].._..k.p.(.
.$r...$.-...V=..l.A..S.%............et..Y....m..fa....A......v.... ..$
.,.|.dZp...h..L........y2..S6...B.%1VG...-I.u....,.W(.......?...-....}
.q`.VY...)$..'%..K.4,iJQjhz.\...nI..N2.......E....yV,.d...F5D.t...[.Q.
.@4.)......MQ.8`..l.....=......$J.|.M6.....g .OA5_l^..~3S..k...&....6.
...........n..o.*..h.DnL.f....4....F.Q,....g.;.K.5..7.oqY.........;...
./.u......*.!..3:.A.LS..8.._....M...$.$.\l..s..K....Z..p.1..o.^.>..
..c.$p..hY....6....^.. ...J/.JGn[L.4V(......8....CJox.y...s...x ......
....../.Z....$r'..7..."..LL....2..P/...?...f..Hv.[....$j..9/...%pT..R.
.W...(f)..U7..1..3oh:...{....S...=PY....o.......a..#........}.)<@t`
.~...._\............y.~.H.0[-..(.z.$...r.....\.f.2!.....W/............
...h.........uo._o.].N&..........o|t....r.B`-.....c.(...?...F.._.....t
. ....(..7~.96vG......-.....U.&.......w..v...d..v.....H.....|4..<.1
}.......#.....Y......I.g.<~.S..A.I.X.../.X.Y"....b...*...<c...1.
5..0.._J.(..])......i.G...|.....8K........at.5R..).*..b...Z.....9bi.d4
....".....7:.....l.A.].Jt.s.H..$...N.%..c0.*.......[w."..f ..b....>
z.4...d..cI..=...K..=..}.A...w....z2$......R.[.Z...R......r..o.&. ....
..1.....B.P......OX..m=Y........!.x....O.T.d..F......e}...:.........M.
...=.],..Yp.4.....P..l.0....:.0...I>....^'...R...."Pq..l .I/.{....$
..'...........F..y|3O........0.../.k.7.m..j.^2t.....k.....g......,R...
!...R.5R..F...u..o..`.q..l..EZDL...j..0... .~..a.s&.T..U..."q....n<<< skipped >>>

GET /?aion=access&m=b505290b707d744e6d1f47af14171c84&p=14328&i=10566&n=63552739281074&u=0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: new.egooad.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=gtwikprua0dtvf55x1ofshep; ans1o=fd4b829bf50d338c7c1e15dd43be88ab; c.s.o=MXwxMDU2NnwxMDc3NA2


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Length: 29

Content-Type: text/html; charset=utf-8

Expires: -1

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

X-Powered-By: UrlRewriter.NET 2.0.0

P3P: CP=CAO PSA OUR

Set-Cookie: spaces=28463; expires=Fri, 28-Nov-2014 18:00:00 GMT; path=/

Date: Thu, 27 Nov 2014 18:41:41 GMT
/* [Response Time : 0ms] */....

GET /js/webstat_manage.js HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: stat.baike.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Resin/3.1.7a

Content-Encoding: gzip

ETag: "94TjVW/Kf F"

Last-Modified: Fri, 31 Oct 2014 08:47:19 GMT

Accept-Ranges: bytes

Content-Type: application/x-javascript

Content-Length: 2698

Connection: close

Date: Thu, 27 Nov 2014 18:41:39 GMT
...........Z{S.H...|.A..R,$C.$.iS.n...d ....B.il..%..0l.w..y.e.G....:.
6....{.5..Y...A........w6..>.V..a}bNY.&S'K&N?...;.....x.Q...E...Z-E
.4;bc...YU..._Y.....*...6..v....  ..RW..W~J.......#a..c.gN.R?...(.2.&l
t;H.$k.....n&.D........ .*..o....4.=.......v%...~.....?Q..h.3Lx......7
...g.....a... /......Y6y.......l<p......q._o.!....eI..8....G.zK.,r.
Q.<L..w[.n.j.fw......'.U....a^...f*.....?...U...{.j.3.S`......i....
$..^.M.%..,.I.....ue...0.N....!y.a...>..d6#.I..DJ.<........j.%.f
x.n..gW,.r?:c..Ba#. .,..A...<.2.y..*......A{/X.R..g.".....Xy0$&U...
m..X.\.[..%.....3.,4,.-..\3...&......~..l.l....,V.Ii.bZI)1....L"?..k..
......K.r!.y.!.R......g.0.... .4..K....'........C...<KY<0....YE.
...i..5..i........p@?M....asUX..1..q.z.t...K...y...q.&$....-.........)
..........7,.*.,...W.R......o-......q........ D...- ~ii...o....d.B.U..
.......*C..B^u....0h..'q..[.......t...I.2.=^;u...v........cV..,sT..&r0
 v{[email protected]...(:.s......q?..".B.V.jD\v..b..h
[email protected].....<...{...h.........-..l......f..\.....b.......&g
t;..J.......r.lHl%6,.h.l4P.!.,D.8..d......{..$....&.s.Fw....#.p..u...c
. .r.gCG....!.Z.=.Y. ...._>..K..$.EV..&.._&R.)...._~}...o..}P.I....
....hwCxcH}@w....2.q.7dQh.....{..^..l....$.oDVcB.j...D..'P..>o.!Z .
..&...........,YLjw}|.. -0 ....n..............{pt...d.@(=....Y.U..t'..
...m,.....h;..p.t8..#3..!J.Ed.!.......-......z..j...o...t.......A.....
@.4xK.....8K$h......`.W.........&.8PKcp<..K....Jk..B........a......
......l2.[....f.'.....F0w..@\.&....p........2?."..k...%(..I.T.....<<< skipped >>>

GET /live/99/53/58171db4245d5a23f80e63307e1ef36a.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi6.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:54:29 GMT

Date: Thu, 09 Oct 2014 09:54:29 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 15002

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 31 Oct 2013 10:35:14 GMT

ETag: "1496937996"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lasi18:5 (Cdn Cache Server V2.0)

Connection: keep-alive
....b2rR...wUT.L.mpw)..%...w.$..)Nq.. .....V.H).-n..]........=.m...f..
.}^.^...0y.<......o.^_..2.rRZ...tV.....Vt..8...=.l....0.:.....'?7.;
................e.........P..4L44TT4l..tL\l\\.l..<|bB<|"|..BrB".
R222\.7......d...AB.o.*.....).....7^...0...fP....DH(DH.}. ......^./.PP
.1...X..%..H((...(h.h(h.MCBFA.....c..."aP7.t.$..N,.".....5.\..l..3..%i
..@[email protected]..............}O.@FFBE... ...EB.......@#a.B.V'.......$..._...(
......$...........x?.[^........X2.......ZyK.....5...p..%X.K...j.......
J.t.b.v..#.j..{.F..d.u.TR.B<x.(..BX,..|..B..$9..w..3.vX_...F&......
....`.g.. {p.~U.l.*.]p......c...s...6.....n.y.. s@:`{MH...E...N5.....r
..j.^...6.-*|..9.d^Q..}....0.#o...........I.....p...K..s!3..%...sQ....
@.V.........q..F{Z...3.T.....I-...K....>6]h..m.?...W.zR..>...V..
>..D..]^i...M.....$y.y..3.O......e.`.?e{..a".usM...y. ..1..P;..b...
p......Dcz........(....].2k.T..[.t....}1.....:0.!.....J..<.\..fY...
.-.'%.Y.y/sA....e#.2j)......s=...<W;I6$..E..X. b.....2....`....*..{
.%].*g..T.0 g.C_X.I}pS....(..HI..(..qm.'.....G......!.m.n._......X....
.$.\}.J.....e..c?.aD_].(@).....=.<=g..ez......ZR...0(.& .o.wS.!..U.
. .7......h....k....}.........NG....,...*..R.0...D.s]..b,..l...c6...QP
7./.._..0..N..jf4B....?e.......`f.S.....TBRg....6. ....L.b./......m...
..`" ...Q1.%.6^.S.7|... ....LN...H.,O1Y.....?.$T.~.6.h...o..,x=f"=.W.[
q.~u)..?*.vA6~B.ok9_..r.s.sc..iD...LTd4.7../.Eg...9!c.T.....N.$...7.. 
7miH.Z.=..Y..$...i.^..#s-..3n..3_j~.cn......I.%a..?P....G.r. .Mu......
.g......F\.4K...:q...<8R$..>.iV.......8.....W.J....i.=4}q/.&<<< skipped >>>

GET /js/commonlogin/newloadLogin.js HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: i.baike.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:36 GMT

Server: Apache/2.2.15 (Unix) Resin/3.1.9

ETag: "4dk2qYkKfdU"

Last-Modified: Thu, 07 Aug 2014 06:20:04 GMT

Accept-Ranges: bytes

Content-Type: application/x-javascript

Vary: Accept-Encoding

Content-Encoding: gzip

X-UA-Compatible: IE=EmulateIE7

Content-Length: 4236

Connection: close

Set-Cookie: SERVERID=C; path=/
.............s.V.s:..A...M\;.w7s1..G{.....37.).....,.$9.S2ch..MH.RJ -.
....H....'..`..'....'.O........Ll?.....o.......bM....p%d./.U.Q.%......
/...kL.8Q...WP...R.t..KWD#_N(h.;.Jo].&.....$..r...............W.|2.%8.
"..8_.qJM.......p5..y....3..]p.)....._z.%.U^.TT....$..s...j.0.....RdhD
..Q}\.v...d.........eQ/...y...MO...X.=p.8....Z}..8...K?..:.....2..A.@.
.('.%..B.....(,:<.3....'.....3".......E....8r...;...........w.{....
.p.....y.........AF2>...........I[.=...\j.~...X....JQ.j....j...xkL.
..J"a..H-r...;...c..y...;'.\...5......B2...R.L.Y..:.N.d.%....e5/b,....
.........Q.......I3..WYC....~.?.#....hAP.u>..ti.t..T.).........9.H.
a..'..d6.J.....F$..%..C.6....c.(.dc.t......il..X...l..}......g..g$.%@w
..6(xp..g.<.o..>........p...........5s....>v...<...?m.}...
.......We1.....c8.E.'B...dx..s.N..f$..u.FL$.....>x%.fF..cu.|).....5
MN.o>a....5.j..`...zKF.[.'.<M...u-..Y..[......'D...D....c.V?...t
.....D.{.RU..B]7..|YTJx.......j..X7...KdZ.....e.........t.i.-...5....=
.n;0.QUF.....96.&....l)u..b6......l........`...{..z....x...3.\........
..n$.....FP.A!L....g...G....I85.|[email protected]_2-V.H).-Kr.1.d .........y.^
.....w.....97..0..km=k.\...(.1.Msv............e2....*jb........^.EU.3.
b.X.......:k...-.....g.......oM..c.....F..K.....1c6<P.V.....v..7ob.
...:.n.w."....7..Y..ub/...\...y.......ZS.../e. T8.|C..!U8!.:.......e..
38..&..}Ad.<y..G.....Jp......a...3D...G9...}.....W..Q..=..^...clm..
.....oH.N.$x.....'....E.O.0'. .. W.....r.....>v..T1..L..v2.P..y[.N.
c..zH...........eyD...\.............._;.. ..3.....'.#Q.7..;#.Q.H..<<< skipped >>>

GET /imges/live2014/idx-bg.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 16 Nov 2015 23:54:26 GMT

Date: Fri, 21 Nov 2014 23:54:26 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "894879869"

Last-Modified: Wed, 16 Jul 2014 08:13:36 GMT

Content-Length: 2406

Server: tux/3.3

Age: 1

X-Via: 1.1 zjjhdx31:88 (Cdn Cache Server V2.0), 1.1 lasi18:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR................%....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:1117AB0D0CC111E48A768B99
61C28E0D" xmpMM:DocumentID="xmp.did:1117AB0E0CC111E48A768B9961C28E0D"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1117AB0B0CC111E48A
768B9961C28E0D" stRef:documentID="xmp.did:1117AB0C0CC111E48A768B9961C2
8E0D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...G....PLTE............Y.a.....IDATx...[r.
A.CQ...=.#...f...I......#....*>8..G.....9>eD..,>iT..,.id..,.i
t..,.i...-.i..(-.i..H-.i..h-.i...-{i...-[i...-;i...-.i.0h.......2.....
.l...z,.i.0h.......2....6.L.>..,.i.1h............VKo.^.z-.i.1h.....
.......vKO.~..-.i.0....L`0aQ...`..M3...E.f..!.....S.U.1..,.4s..Y.i.1..
<O3....i.Q.F-...b0ky.f..a..4..L[....`.r/.<...;i.0X.\O.....j...V,
...`.c..f..%...la.e.j.5..,_K..... i.1X.|.f..M.giV1X..?.......Y.`.R...`
.R.Y.`..q.}..-..1....>.......X``a.;.....?..``b........46..X~.......
1.8.9ooNe.7S...L.=.....).3..L...k..7..M......|..&..*L..W..;.0y.Ta.<<< skipped >>>

GET /imges/live/events/changzhan2014/cz_revive_banner.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 20 Nov 2015 02:40:07 GMT

Date: Tue, 25 Nov 2014 02:40:07 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 13 Nov 2014 03:32:33 GMT

ETag: "1890290288"

Content-Type: image/jpeg

Content-Length: 50852

Server: tux/3.3

Age: 1

X-Via: 1.1 zjjhdx32:80 (Cdn Cache Server V2.0), 1.1 dls22:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....Q&dT....wT.M.8.......t."Uz..W.J..LB.".tDD.UJ.PU..JG.A)......TA.G..
.;.w.9k...Z....,..=...=m.....g3.z5..C.@[email protected].....>
WoowiAA.......Y......w.......*...;.9{.:8..!r.?.[.Y.Nr..bzBz.*..@.@Og.@
}S.@7G)'v.yVY.i..;.........%./...\.<...dg...v.cW.|`..g....tf.....($
,.*.. ,*&..|.UDHXDP...8............~....CicU....!9..N........z...KIIa.
...?/.........xq.U.....'......b`{.....;._]...]..;V......^.............
.i.............8...]Z......i..>.k..]..P/W.;...8 ...............xy.C
...T...s..@'..""*..*J.J.*..j.R.J**....w.....E..U.:...!...:..W....,....
'...I...f.vY..?.".?...u..i...q........ .|.`../[email protected]..
..;......0.._.K.........I.]".t......!!#..y...._.B.yh.~....H.I(..(i)((h
._?g..j...q(..5.........0p....................g....'.B<|.'...y7....
.BDr..._.@M.@@[email protected].*;......q..]Z.<e.k.T..x..$>.z......].......
_.Cs..\b>....d......_"$"..D.!...M..P..*.=..GX.....wm...3..8<...{
m....3.}.K......8...9..............5[.RoH}R}.....1hJ4....F#N.(...5....
[email protected]$....P\>=I...Q..........z.c..p.}"....n.>/N...CW.
........d.]..c.....p-...v*.[#. .*...{.]s.sd-........V)j'.=.({R.#...n2.
.....M...y#....I.%.;;.....v...k....4R2.........B.p..u.lq..!K.........(
....T.yam.S.%.AW.............G.`.4.w:q.6Q."3...54..O..:..C...)_]...W..
..m0A8Z..I..[..iu^.z<.z.GEK.h.*..l_.......\|...M.$.}...\X.....EG..p
T..;...1..q.E....D.%p=.&..%.1L<R..".....j......*..f....<.E..N.F 
.w..s.......!......... MO.........-...D.k,J%.]......3..ib..s....k....s
F,....k.6T....r-..B..k...2:..4..X7.........5w.0.~.......S. ||V9%w.<<< skipped >>>

GET /AShow.aspx?AID=18736 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: pt.rbc.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=gb2312

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=2296; expires=Thu, 27-Nov-2014 21:41:03 GMT; path=/

Set-Cookie: UnionIfrmADShowTG=2109; expires=Thu, 27-Nov-2014 21:41:03 GMT; path=/

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:03 GMT

Content-Length: 4387
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y...W..z......._....o....
..W..[,.........z9m.j...?......j....|.wm..y....}t...g...*.i.u.{..z.tgg
..]?|v|..w...G.>.s(.Sj.K.=........._.4.......gW.rV]..j5.U.."_....fx
k<..._B.O.[..j<....%t....f.|..../..&.o?.....`._-wv..*...A.J...l.
......_H.a..}..?....e~.>[email protected]..!.S..?m~..;}..O..m.o-.E
~'.........|._..[m}....Lz..O....>....w..o..:.....Q..O.Xd..r.`...;wR
.}.T.P...}..!Hc.\....G....]f.:..B...*.,...6......./~....w.O.6.V.......
.s...*.e...}DT..L..?....*k...=$.E..D...;..._.y.....0 ..T...o..EU..2..u
...1U.1.:A..hW....! ,<[email protected]..'?......eq..U=^7y}|Acd..>.....
....=h.cE......N....i.fwF....~W.<}...w..........j......O.zU.L.!..g~
&...^..A...m..}./.4.7uv..ym........xRWWD..!.U..t..]..ug.W..mA ..O~....
...j..=xtW~.}.n}og.!...;6-...WWy}.5.rL.E5).|.A.{.[4.M~.l..p.w.....v..'
=J.>...z............N;.....(....A.Q.......'..4./.s..uv..E.E../.\.u.
~.\.._.m....1S....M.w..Z.o...#E[w9Zf..f.Y].3.mg..2?....Y...K.......*..
m.H..........^\<..cR..e.....)3.m~...G.?.&?.O...}....Z..'g.w..~Jvyg.
.......h..t........Y......gO.}.....?.x....................]|uo{g.~...?
....N..............Fl.>"[~]..}......Q6i.rM.....G..w.d..'...........
.....:...vv....g..w..lw..)P....s..!......q..{....d...,....yV4..\?Z....
...^...mR.."'...ih.Gl.h..?...og..f5.1.pRf....X..m.^..e..,.z/.W...... .
[email protected]?..Fp.1..-..9......g...L...WuA.V. F.li...Y......Xs>..
..B.d...3v..............o.....H.......9.....R.e.>.?..bY......`.<<< skipped >>>

GET /imges/live2014/head-nav-v2.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 03 Nov 2015 22:18:37 GMT

Date: Sat, 08 Nov 2014 22:18:37 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "3812845013"

Last-Modified: Mon, 28 Jul 2014 08:08:06 GMT

Content-Length: 1899

Server: tux/3.3

Age: 1

X-Via: 1.1 zjjhdx35:88 (Cdn Cache Server V2.0), 1.1 dls20:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...n...l......Mw.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4BE36B1C162E11E4A886B811
092D70F1" xmpMM:DocumentID="xmp.did:4BE36B1D162E11E4A886B811092D70F1"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4BE36B1A162E11E4A8
86B811092D70F1" stRef:documentID="xmp.did:4BE36B1B162E11E4A886B811092D
70F1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>h.y.....PLTE...............................
......................................................................
......................................................................
....................................]......EtRNS......................
..................................................8....IDATx...is.0..9
m.7.G|...\M.4.}w...M.....c....j. ..ci.=^MK,....a=w.[[email protected]..
[email protected].....)..)..)..)..)...#[email protected]
qc..C......p....)....V...E.\0l".Gl...7.....3c......M....s.kA.....~....
.C. .....t..~....u...Y..2.\....;..q6..>z...jO.#........yA:...l.<<< skipped >>>

GET /imges/favicon.ico HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 20 Sep 2015 20:26:48 GMT

Date: Thu, 25 Sep 2014 20:26:48 GMT

Cache-Control: max-age=31104000

Content-Type: application/octet-stream

Content-Length: 4286

Server: tux/3.3

Age: 1

X-Via: 1.1 zjjhdx37:8105 (Cdn Cache Server V2.0), 1.1 lasi18:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......  .... .........(... ...@..... .................................
...................$...$wt..wt..@;..@;..<8..<8..<9..<9..&l
t;8..<8..=9..=9..WS..WS.....Z...Z..................................
.........................$...$wt..wt..@;..@;..<8..<8..<9..<
;9..<8..<8..=9..=9..WS..WS.....Z...Z............................
.......................8...8B=..B=../)../)../)../)../)../)../)../)../)
../)...)...)../)../)../)../)..........................................
...........8...8B=..B=../)../)../)../)../)../)../)../)../)../)...)...)
../)../)../)../)..................................................IC..
IC../)../)../)../)..UP..UP..........NI..NI../)../)../)../)../)../)../)
../)../)../).....\...\................................IC..IC../)../)..
/)../)..UP..UP..........NI..NI../)../)../)../)../)../)../)../)../)../)
.....\...\...........................j...j.(...(...(...(...(...(..fb..
fb..........................50..50...(...(...(...(...(...(..SN..SN....
.........................j...j.(...(...(...(...(...(..fb..fb..........
................50..50...(...(...(...(...(...(..SN..SN................
..........pl..pl..-&..-&..-'..-'...)...)..fb..fb......................
...............D...DA=..A=..:7..:7..:7..:7..40..40..xu..xu............
.........................?...?........................................
...................?...?...................................?...?......
....................................kg..kg../)../)..-'..-'...(...(....
......................pl..pl..-&..-&..-'..-'...)...)..fb..fb......<<< skipped >>>

GET /imges/live2014/wall-panel.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 11:37:34 GMT

Date: Sat, 20 Sep 2014 11:37:34 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "3465242254"

Last-Modified: Wed, 30 Jul 2014 06:34:00 GMT

Content-Length: 28323

Server: tux/3.3

Age: 1

X-Via: 1.1 dls21:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......h.....^.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:7AD241FB17B311E4B767A754
F15B8A9A" xmpMM:DocumentID="xmp.did:7AD241FC17B311E4B767A754F15B8A9A"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7AD241F917B311E4B7
67A754F15B8A9A" stRef:documentID="xmp.did:7AD241FA17B311E4B767A754F15B
8A9A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>jb....k.IDATx..].|TU...'..N...{.*.R........
.......k...um.(. H'@ ...{&=....=O_..!!.EV.......{..w3.......1u.T.333sh
h.C......@QQ................. .fffV......333 ....J........`.....J..`.R
`fff..`0X)033.R`0......Y)0..V......... .fffV......333 .V.......G.k.&u.
.....X..ry...z.n..u.......*.pE....S9.....IF....T.@?h.&.m.6i.u.U.s.>
..?..4s......z.>|.s.T.T.h...@..."..AAP..TJ.....b.X~....j..........k
~.^.Ru~G...K.w..4i.'..p.M7.Z. V...{...K..A....o2...w.Q.#.0D....W2.....
.T^...lv.4.....Y.w.}w..@{h<'.L.}.7...DCu.....f..2[.e]-.........[..&
R4(....s.w.ZT:.`S.Y...R ..,...x....h....z.....~...*K.........._./.<<< skipped >>>

GET /live.6.cn/e6u2/r.php?location=v.6.cn/event/promimg/?src=pming393&referer=&browser=mozilla/4.0 (compatible; msie 8.0; windows nt 5.1; trident/4.0; .net clr 2.0.50727; .net clr 3.0.04506.648; .net clr 3.5.21022; .net4.0c; .net4.0e)&flash=6.0&msr=1176,885&uid=0&pro=4&stamp=1417095275151 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: shrek.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DNION-2.1

Date: Thu, 27 Nov 2014 18:42:06 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Thu, 27 Nov 2014 17:42:08 GMT

Last-Modified: Thu, 27 Nov 2014 18:42:08 GMT

Cache-Control: max-age=0

P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Set-Cookie: __uu=B4141711372857066; expires=Sun, 24-Nov-2024 18:42:08 GMT; path=/; domain=shrek.6.cn

Set-Cookie: __ut=141711372845878; path=/; domain=shrek.6.cn

Set-Cookie: eid=deleted; expires=Wed, 27-Nov-2013 18:42:07 GMT
1..1..0..

GET /images/js/login/loginmanagerv2.js?onlyCookie=1 HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: ossweb-img.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:31 GMT

Last-Modified: Wed, 20 Nov 2013 03:09:42 GMT

Content-Type: application/x-javascript

Content-Length: 8411

Content-Encoding: gzip

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From MemCache Gz

X-Cache-Lookup: Hit From Inner Cluster 
...........=iS.H... .6.#...M....b.d."!......k$...Yrd......=3.u..!....T
...==}MO.!?tH..A.,..F.xf........h.*_...p.h.....lL....c..V.g>.......
*...EZ......... P$..,..)....|..?^..Pkn*3ht...U, ...pX?.G^...dD#@!.j].5
3........."............O.....W..z..D.....zN..[.....c.......Rl)".P. .s.
.._...5.C...yaU{.......3T.|A.......0l...h.>,.v......X...U.....@F ..
.d.3...4._M....:a0......e.D..........pv9.HXi...).v.T.....yF....\_..-..
.r.!...#..3..i0.......t.{..4. .e..3W.2.f.s.2*&%-...eQQ..m<...i.....
.u.X..;[email protected]...}Ekv4M.T(m....5...!.....
o.....QAV......-.8q.rE85m..4/.(s.1f..y.%/.-..f\_ .ll...l..OI.O...d6=S.
&..):...8|[email protected]_.x....fy .$p..&..U"W\....,.;.d.u....f.KV.S...r..{X
.qty.R_. i..J..9.~;.....4..`.....c.wL`..'...w.n......[.4&.6(KG.aG._=l.
..........R.TMw....B..u.../...].....^b.rU(. ... [email protected]..<....6.3#..
0..9..."..0a.L`p.B.iU[R..T.B.d.....%d..=...,..ls.....6...............%
-..x7.?{4....;:.G\9.V@.._......mv,......."id.`...n.1l..W^0..T.....h...
...I...&..kY........N/&^D..3.I~..}"..G(.`....P..I.....Iy......ET..3u..
...(8..F.*!..m.....=o.h.b.*.o.u.T.:...f.>.T....j..3|..j=._.7.. x..A
)_(...7....fO.zgo.d5O7....ZQ...a.6c..8.;.....b...u........../#2...T7:.
c._...7.I..$..H..l../`,G"....a..m.[.uB...).N.....u..Mx..H....f....7...
&8..),... b.@....*9O^........!..q....|&...;I.BR....>M..y,(..cWF.4..
68.F.:t...q.*.dS.%u:....i.z_..m.A .u.1.....s6...^.F..y...V8.....aX....
..tT.......f......@.:..>.........)..SWJ.....u.B.......S....p.kB....
.f_;i}.r....x....L,A..,.%.S....i1....0.J.].%`P..63.i..F,.... l..d.<<< skipped >>>

GET /js/common.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 317

Content-Type: application/x-javascript

Last-Modified: Sat, 04 Sep 2010 08:40:16 GMT

Accept-Ranges: bytes

ETag: "0183cccc4ccb1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:40 GMT
String.prototype.trim = function() {..    return this.replace(/^\s |\s
 $/g, '');..}..function elem(id)..{..    return document.getElementByI
d(id);..}..//Verification..function checkIP(ip)..{..    return /^((25[
0-5]|2[0-4][0-9]|1[0-9]{2}|[0-9]{1,2})\.){3}(25[0-5]|2[0-4][0-9]|1[0-9
]{2}|[0-9]{1,2})$/.test(ip);..}......


GET /js/default.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 4094

Content-Type: application/x-javascript

Last-Modified: Tue, 10 Jun 2014 10:15:42 GMT

Accept-Ranges: bytes

ETag: "09b30ef9484cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:40 GMT
// JavaScript Document..$(function () {..    $("#Search_SoftName").wid
th(370);..    $(".sprite_codebox").hide();..    //........    TopAdIni
t();..    //..............    BuildLoginTips();....    //.............
.    $(".recommend ul li").each(function () {..        var item = $(th
is);..        item.hover(function () {..            item.find(".firstd
l").hide();..            item.find(".dlbox").show();..        },..    
            function () {..                    item.find(".firstdl").s
how();..                    item.find(".dlbox").hide();..             
   });..    });..    //...............................................
.........    rank_listhover("#list_game dl,#list_apply dl");..    //..
..................................................................... 
   $("#newapk li").add("#gamelist li").add("#toplist li").each(functio
n () {..        var item = $(this);..        item.hover(function () {.
.            item.find(".sizefont").hide();..            item.find(".i
cog_butn").show();..        },..                function () {..       
             item.find(".sizefont").show();..                    item.
find(".icog_butn").hide();..                })..    });..    //.......
..................................    $("#rank_apply").add("#rank_game
").bind("mouseover", function () {..        var item = $(this);..     
   if (!item.is(".rank_on")) {..            $(".rank_on").removeClass(
"rank_on");..            item.addClass("rank_on");..            $(".ic
og_boxtip_r").hide();..            item.find(".icog_boxtip_r").sho<<< skipped >>>

GET /js/pagecommon.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14721

Content-Type: application/x-javascript

Last-Modified: Tue, 10 Jun 2014 11:42:44 GMT

Accept-Ranges: bytes

ETag: "092be17a184cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:41 GMT
// JavaScript Document..//APK.................function SearchSoftList(
type) {..    var Search_SoftName = $.trim($("#Search_SoftName").val())
;..    var softName =(webServerDomain   "search?keyword="   escape(Sea
rch_SoftName)   "&type="   (type == undefined ? 0 : type));..    top.l
ocation = softName;..}..var _accountTips;..//..............function Sh
owBanAccountTips() {..    var tipPos = $(".m_side").position();..    v
ar left = (tipPos == null || tipPos == undefined) ? 0 : tipPos.left;..
    _accountTips = _window.Open("<div class='window_warn'>......
......................................................................
............................................<div>5..............
.......................</div></div>", "............", "isM
odal=true,class=VISTA,width=650,height=200,isShowClose=no,move=no,resi
ze=no,left="   (left   250)   "", null);..    setTimeout(RedirectPage,
 3000);..}..//..............function RedirectPage() {..    if (typeof 
(webServerDomain) == "undefined" || webServerDomain == undefined || we
bServerDomain == "") {..        SetWebServerDomain();..    }..    top.
location = webServerDomain;..}..//....................function Redirec
tLoginPage() {..    top.location = "/login";..}..//.................fu
nction ShowUnAuthorizeTips() {..    var tipPos = $(".m_side").position
();..    var left = (tipPos == null || tipPos == undefined) ? 0 : tipP
os.left;..    var url = scHiapkResourceDomain   "/web2/agreement/Devel
operContract.htm";..    _accountTips = _window.Open("[url]"   url,<<< skipped >>>

GET /js/jcarousellite_1.0.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 2515

Content-Type: application/x-javascript

Last-Modified: Fri, 11 Jul 2014 02:35:33 GMT

Accept-Ranges: bytes

ETag: "e92329cab09ccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:42 GMT
(function($) {..$.fn.jCarouselLite = function(o) {..o = $.extend({..bt
nPrev: null,..btnNext: null,..btnGo: null,..mouseWheel: false,..auto: 
null,..speed: 200,..easing: null,..vertical: false,..circular: false,.
.visible: 3,..start: 0,..scroll: 1,..beforeStart: null,..afterEnd: nul
l..},.. o || {}..);..//-------..return this.each(function() {..var b =
 false,..  animCss = o.vertical ? "top" : "left",..  sizeCss = o.verti
cal ? "height" : "width";..var c = $(this), ul = $("ul", c),..  tLi = 
$("li", ul), tl = tLi.size(),..  v = o.visible;..if (o.circular) {..  
ul.prepend(tLi.slice(tl-v-1 1).clone()).append(tLi.slice(0,v).clone())
;o.start =v}var f=$("li",ul),itemLength=f.size(),curr=o.start;c.css("v
isibility","visible");f.css({overflow:"hidden",float:o.vertical?"none"
:"left"});ul.css({margin:"0",padding:"0",position:"relative","list-sty
le-type":"none","z-index":"1"});c.css({overflow:"hidden",position:"rel
ative","z-index":"2",left:"0px"});var g=o.vertical?height(f):width(f);
var h=g*itemLength;var j=g*v;f.css({width:f.width(),height:f.height()}
);ul.css(sizeCss,h "px").css(animCss,-(curr*g));c.css(sizeCss,j "px");
if(o.btnPrev)$(o.btnPrev).click(function(){return go(curr-o.scroll)});
if(o.btnNext)$(o.btnNext).click(function(){return go(curr o.scroll)});
if(o.btnGo)$.each(o.btnGo,function(i,a){$(a).click(function(){return g
o(o.circular?o.visible i:i)})});if(o.mouseWheel&&c.mousewheel)c.mousew
heel(function(e,d){return d>0?go(curr-o.scroll):go(curr o.scroll)})
;if(o.auto)setInterval(function(){go(curr o.scroll)},o.auto o.spee<<< skipped >>>

GET /js/Article.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 1089

Content-Type: application/x-javascript

Last-Modified: Mon, 07 Jul 2014 02:42:19 GMT

Accept-Ranges: bytes

ETag: "fa755d128d99cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:42 GMT
// JavaScript Document..$(document).ready(function() {..    $('#Top1 .
Toolbar1 .CentreBox .Menu .List1 li').mouseenter(function() {..       
 var index = $(this).parent().children().index(this);..        $(this)
.parent().children().each(function() {..            if ($(this).hasCla
ss('Select')) {..                $(this).removeClass('Select');..     
       }..        });..        $(this).addClass('Select');..        $(
'#Top1 .Toolbar2 .CentreBox .Menu').each(function() {..            if 
(!$(this).hasClass('Hide')) {..                $(this).addClass('Hide'
);..            }..        });..        $('#Top1 .Toolbar2 .CentreBox 
.Menu').eq(index).removeClass('Hide');..    });..    $('#Top1 .Toolbar
2 .CentreBox .Menu ul li a').mouseenter(function() {..        var inde
x = $('#Top .Toolbar2 .CentreBox .Menu ul li a').index(this);..       
 $('#Top1 .Toolbar2 .CentreBox .Menu ul li').each(function() {..      
      if ($(this).hasClass('Select')) {..                $(this).remov
eClass('Select');..            }..        });..        $(this).parent(
).addClass('Select');..    });..});....


GET /css/typecss.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 7345

Content-Type: text/css

Last-Modified: Thu, 18 Sep 2014 09:46:08 GMT

Accept-Ranges: bytes

ETag: "384c395f25d3cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:42 GMT
...../* my_left_category */..body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5
,h6,pre,form,fieldset,input,textarea,p,blockquote,th,td,a{margin:0px;p
adding:0px;}..ul li{ list-style:none}..#fl_menu{position:absolute;top:
226px;left:0px;z-index:9999;width:150px;height:50px;}...my_left_catego
ry{width:150px;font-size:12px;box-shadow: 0px 0px 5px rgba(0, 0, 0, 0.
05);}...my_left_category .bj{height:40px;background:#f5f5f5; border-ra
dius: 5px 5px 0 0; border-top:1px solid #eee;border-right:1px solid #e
ee;}...my_left_category .my_left_cat_list{width:148px;border-color:#ee
e;border-style:solid;border-width:0px 1px 1px 1px;line-height:13.5pt; 
color:#999;box-shadow: 0px 0px 5px rgba(0, 0, 0, 0.05);}...my_left_cat
egory .h2_cat{width:148px;height:27px; background-image:url(../images/
img/20100409124819709.gif);background-repeat:no-repeat; line-height:27
px;font-weight:normal;color:#02b4fe;position:relative ; text-align:cen
ter;  padding-top:3px;}...my_left_category .h2_cat_1{width:148px;heigh
t:30px; background-image:url(../images/img/20100409124819113.gif);back
ground-repeat:no-repeat; line-height:30px;font-weight:normal;color:#02
b4fe;position:relative;}...my_left_category a{font:12px;text-decoratio
n:none;color:#999;}...my_left_category a:hover{text-decoration:none;co
lor:#02b4fe;}...my_left_category h3{margin:0px;padding:0px;height:30px
;font-size:12px;font-weight:normal;display:block;padding-right:8px;}..
.my_left_category h3 span{color:#999999;width:145px;float:right;}...my
_left_category h3 {line-height:30px;color:#999;}...my_left_categor<<< skipped >>>

GET /fonts/icomoon.eot? HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13000

Content-Type: application/octet-stream

Last-Modified: Wed, 10 Sep 2014 08:34:55 GMT

Accept-Ranges: bytes

ETag: "8228fd18d2cccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT
.2..$2............................LP.........................u^A......
..............i.c.o.m.o.o.n.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...
0.....i.c.o.m.o.o.n................0OS/2.#.........`cmap...,.......|ga
sp............glyf7.........-.head.{A.../x...6hhea....../....$hmtx:..X
../.....loca......0X...Dmaxp.0....0.... nameW.....0....Epost......2...
. ...........L.f...G.L.f.........................................@....
......... ............... .........................h............. .&.,
................... .%.,..............................................
..................................79..................79..............
....79...............<.M.......>......67>.7>.'..'&67>.'
*.#.............&.......0....7>.76&7..........2?.>./.%&.........
&'..5&67>.76&............7>.7>...67>.7>.74&'......6?.'.
P..........$........#..*..;.....................!..............%......
...............................;....."" ..................I......}&..6
.......... ........&.........................%..............!.........
..g.................................$((...........................{,~.
.....$.......O.Z..7...........3267>.7>.7>.7.'%'..#"..........
..326?.'..#"&'..5467>.32......7>.54&'...76&1.0..U...............
......................................................'....A.#...$....
.....................EV~w....w......x....M#.................4.........
..bE.;[.....3.......I.q..7........7>.7>.7>.'&.....72.32..>
.7>.7..'..#".............7267>.'4&5467>.3................<<< skipped >>>

GET /images/main_bg.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 42811

Content-Type: image/jpeg

Last-Modified: Fri, 13 Jun 2014 07:51:10 GMT

Accept-Ranges: bytes

ETag: "0ab833ddc86cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT

.....<Exif..MM.*.............................b...........j.(.......
....1.........r.2...........i....................'.......'.Adobe Photo
shop CS6 (Windows).2014:06:13 15:51:08................................
..................................................&.(.................
........................H.......H.........XICC_PROFILE......HLino....m
ntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP 
 ................................................cprt...P...3desc.....
..lwtpt........bkpt........rXYZ........gXYZ...,[email protected]...
T...pdmdd........vued...L....view.......$lumi........meas.......$tech.
..0....rTRC...<....gTRC...<....bTRC...<....text....Copyright 
(c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1.......
.....sRGB IEC61966-2.1................................................
..XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ....
..b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.ch.....
.......IEC hXXp://VVV.iec.ch..........................................
....desc........IEC 61966-2.1 Default RGB colour space - sRGB.........
...IEC 61966-2.1 Default RGB colour space - sRGB......................
desc.......,Reference Viewing Condition in IEC61966-2.1...........,Ref
erence Viewing Condition in IEC61966-2.1..........................view
.........._...............\.....XYZ .....L.V.P...W..meas..............
..................sig ....CRT curv.......................#.(.-.2.7.;.@
.E.J.O.T.Y.^.c.h.m.r.w.|..........................................

<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112413315494.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 2248

Content-Type: image/png

Last-Modified: Mon, 24 Nov 2014 05:31:11 GMT

Accept-Ranges: bytes

ETag: "cc7255dba77d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.....................gAMA......a.... cHRM..z&.........
.....u0...`..:....p..Q<...[PLTE\.\sL..SO\.\\.\\.\\.\\.\\.\sL.sL.sL.
sL.sL.sL.\.\\.\\.\\.\sL.sL.sL.sL.\.\\.\\.\sL.sL.sL.\.\\.\\.\sL.sL.sL.\
.\sL.\.\sL.\.\\.\sL.sL.\.\sL.\.\\.\sL.sL.\.\sL.\.\\.\sL.\.\sL.\.\sL.sL
.sL.\.\sL.\.\.SO\.\.SO.SO.SO.SO\.\.SO\.\.SO.SO\.\.SO.SO.SO.SO.SO.SO.SO
.SO.SO.SO.SO.SO\.\.SO.SO.SO\.\.SO.SO.SO\.\\.\.SO.SO.SO\.\\.\\.\b.b....
........................a.rK.sL.[.[a.a....`.rJ.|.|........L.....2.....
....wQ.xR....................................................}..F..G..
l.........gc.gd... ..,..4......PL.RN...5......gd.SO-...QM...W.........
...XT.YU...........................................a..........o.oqI.Y.
Y[.[...e......ftRNS....K........K..Z....Z..{..x..c..c.$$NNf..f66......
x....rr..........Z]...r...x..6.f.N$....{..`..`......~......bKGD...W...
.OIDATx....WMQ....M....4..âEB<c.H.2.N.. Ee(c)2....2.P......{k..^.
{,.6.......{..g.....99.\..........k/#S..:.-....}.....Y.<<G....&l
t;KI?..{.....6`..27v..~X~.....K.&N.....1fO.$.M......Y.~.5 8...%M.f..d.
.K..z.B]..\..b..`XX..Y=,....K.....g.X.8.5W....SX...K./.<Dl,........
.f......<.>..P.oghY^......1..!.#k1..Yz`.Y...E,b..X."...E...u,Ge.
..Vn.. ....'.#...34Wx..<s.lQ1G....d...2.w..2s...#HF....V.O.....r.]U
g.U\..R9.QpSQ.2Vj.Xu[Q.1Us.i<.. .Qf.w_{5..L..A.G.........P{.....Gu.
9.2V5..E,b..X."...E,b..X."...E,b..X...XF.....ez......;?....\........f.
 3......A{......V.h.J.Ac.l...S...ei..:...'.. ..?)...G5..........l..6..
G.u|..\^Q.<.....#...>nn...T\...x.>..X."...E,b..X.. YK....<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014111911209360.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 38195

Content-Type: image/png

Last-Modified: Wed, 19 Nov 2014 03:20:26 GMT

Accept-Ranges: bytes

ETag: "e9e54c3a73d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....iCCPicc..8..U.o.T.?.o\..?.....
..US[......I...B....*..un.S.6..mU...o........xB........ISA..$.=t.@h...
.p..S.].....9.w>[email protected].`..]5......;V!..A'.@..{N.\.....G.._!..7.
...suV...$.BlW=}..i...;.. .F..).A..<...&.Xax..,.3...8S.(b.....*.%..
31.l.....#O-....zQv..a.X.OP..5o6Z.z....&.....^w.....k.I./#....&.....\%
.x/@...{....7..S. ...j...P.h..&.mry.>...k.7.=......B..#@.fs._.{....
.0.-L.Z~...%.Gp.....{.......YX.f^... ._.s..-.T.>[email protected]..!r[2
]3..B..c......nC.......s?.>.*......e..D|..%4.`...:X..2......pQS..L.
P.R....a.e.y...q......5Fi.......t..... ).Cd...L.$o..$...rp.....b....&g
t;4. ......F_...{.......k...i .x............. ..B..{....L<.........
......=...UHcnf..<>F.... ^.e||.p..yv..%b.:..iX'....%8..I...?....
..rw[..vI.T.V.Q.N.^..d..pY.I."|#\.....c...z[.2M.^S0...[zI.J/H.H....-.I
c.....<.x.x-........8..Z.N..xA.-8.m.Ck.K.Ha....Yn1..... .{..qH.g...
..u#...L....h...s .:6..z!.y@}z.g.....q.../.S...4~..\...~Y3M9Py.K=.... 
.. ......-..z$...8...Y7".t..k....H..w....\8.7....O$~..j....]...n5.....
..`..f...fs.K...p...Y.qx...*... cHRM..z&..............u0...`..:....p..
Q<....bKGD.......C......pHYs.................IDATx..}..e..51...(...
...@BH..>..0...k..........w....{{...HB.^....s...;..Y....vU].....]L.
 ...@ .....?.5.}V..l......&..?...<-.6s....y.h....g......C.......K..
~.3....s.7h......5.}...g..../....~.j..O..#.4....4.#.(....^h.....V...D.
z.B.]x......X..B........X.H.....B.]x}.W..3..X.N._h........*.........&g
t;.k......i....0.q...e...rm....&P\[email protected]....>..&}...8<<< skipped >>>

GET /UploadFiles/Game/s_img/2014111911258525.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d



..^.J.0J..$...1...K..@6^........E.....G.l1....b'..n..#!O..DrL..E.q....
. .V sD}.u) )...\.].-......~.c........@%.O..F.....m ..V.6....7..f@....
<.0....X.)p....d.....v...$[...F}.@'.Qc.o................".I........
[...V..0.-.P.X.?.U....(13.A;.>;]..t..Y........w..o.v3Zy....x..a.H.d
...T.q7z.....\C.V...~...a..,.r.Un0....[..kt*.9.J.].r]I.T..u..S".......
..(...57..... ...9........dd0G<.1Y.........l7.F..l4j`R&.0...Z......
.c.(...V...Eg/K-{i...ES 4k.S.......4..q.r.?.&.Y.S.....N....yf.....m.@.
l..?.:......G.c..k.U......q.]c(w....$.8.v.q.:nu..Sc0..ap....ts.....F 4
...t..R}l.....5.0....c)......;F.QR.$s2>...>..{..\V2....._..]....
.t...I.9..I.$....(W.....t.T...1.....M.(nP.K\.#.T......t.^y.M.3........
..k3..0...E..I7....u^.....p.0..1...Ud.......g.#.(%,..u....&.r......Hf.
(.....ZX.Z7eW.E]....S..(A\.....Y.8...H...r......f..$.|.c).?u..nM...` a
....C@.@`..(1...#B&SL.k.K{1/.CR.n...k...GR^.E..%...r;N...l.p..D<{`&
.8D.SC....%.Jt.`.....$...L.,.U.....k..1..*`.A.T.E...i....#..?...PV..( 
..d..0....&.{.".. k.&...X[...][email protected]*.
0wAgf.....A5w.B]=.UA...=@e4.)...B.6...t..&.2n.L.....ir4n}.. 1.....k.|o
........ ....a..$...d.P..kj......<..W.-t][email protected]....
.B...7;.Pc...z....DgJ....g4......5..0.J..R..0;..MP...v.|.%.E....|..<
;Q..I.|`.....M.Gu.Y...G....._&.......p...ZJ.[DP..-'....@....".>%...
M.....Z.2k.&.5.B;....i,...L..K........*....PIM.A.1.?....$.s.X.F.:..Q..
...C.!......._...../GVp.w$..(..~...J.5...j'0Z.....V.46..d}.T...g.J.6..
..7;..K... .!.#..f' 9bd..C}.....#...I 9.!b....."..CY.....Q`..tFF..<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082320568784.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d



OAe.d.....u'[email protected].$&*%[.......2..|x.W.D7fF.qt..Ge;\...
P.3.UZE..P..{x.{K...b..{..`...!*.N.`..g...a..]......f*.S..a.m........g
...V._.G....[.... ....]...j...d..jJ.3X...i..yw).JC....Z.I..{.vD....U..
!.N]{....l..{.24/. s;.|..}...U.ms.f..P....3A%... Uu$.!.....P..K..R....
.$.n...8.....CG.....o..6..s.X.FW.V.}.....>..~..}0..O...J..X....mi.^
...M ..v..g4.":(...r.....M.....P9.] E.P)s....}...A.._..X....P...7=....
.itRq8.......(.>.~8.....~^.N.N.3..a~....CQ..]J...R..j..q..~...y...o
..1.....f'e.!..R..|. T........]P..=J...C.....-M7d<.!.s.v.....mw..'.
_.Q.>$@.....`.y^u9.|M..J..A.......g.......%tEXtdate:create.2014-01-
10T12:34:24-08:00.A.....%tEXtdate:modify.2014-01-10T12:34:24-08:00..E.
...FtEXtsoftware.ImageMagick 6.8.5-6 2013-05-17 Q16 hXXp://VVV.imagema
gick.orgu.......tEXtThumb::Document::Pages.1.../....tEXtThumb::Image::
height.1024a.Wj....tEXtThumb::Image::Width.1024.o......tEXtThumb::Mime
type.image/png?.VN....tEXtThumb::MTime.1389386064.]af....tEXtThumb::Si
ze.0BB..>.....tEXtThumb::URI.file:///var/folders/0v/wbl6b0n9099cg2d
h5z1h247000006b/T/V4HttpAssetRepositoryClient-mzl.edhwanui.png-7449149
474316913760.png...>....IEND.B`.HTTP/1.1 200 OK..Content-Length: 67
99..Content-Type: image/jpeg..Last-Modified: Sat, 23 Aug 2014 12:56:05
 GMT..Accept-Ranges: bytes..ETag: "125f8f99d1becf1:d29"..Server: Micro
soft-IIS/6.0..zm: jsp..X-Powered-By: ASP.NET..Date: Thu, 27 Nov 2014 1
8:41:50 GMT..........JFIF.............C...............................
.....................................C............................<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073015062422.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 15673

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 07:06:51 GMT

Accept-Ranges: bytes

ETag: "4a5246d6c4abcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.K............................!1a.AQq.."2..BRb...#$r.4.....CDc.&ESsu
.......................................B.........................!A.1Q
q.a....."BR....#23r%[email protected].. ..x.I$..
I.M..(.n..EtI.4WEu... .wzQ]....B.]-...........G...$x....)LU)...b..?Px.
-:..b....'.D.K....t.......C.n.....4..;.?.b...n.6.).l...hA....K.E..!..!
...6.?..Z.......T..M).-...Kw...W..[.3.D....e.R.P.y...............`. .9
9....3..cw.!......{y.\F.......y.Q.i.w-.h5I....iQ.>]....L..U........
<......n....-...Kw...d.}8_...."Q...% ...h..JxN.....$...I. .Bh..t..D
.z.B...........]...(.....pr....l.H...,.r..S....o.~..<Zu...Y...O....
.....!.'.#....7.-.;..i.4.....b*.*n.6.).l...hA.....SC.Hb9.u*lM.o..V.h..
....Ww..S..a. s.W..{<E..IV.m'...J?e q$..... [email protected]'@..
........v.o{.b.F.f;...x..h..ZO3..* [email protected]...!B&..p.<
\{..f..k./.....].\..T.b; .6.}..O....'S.5...$....?V.....h.......I.x...7
.../....uM..ov.-M%....R.8.F...9.A.......,Wi...J.M(..........n.........
`...r.;..))...:.IIY.=... ..lW .A...U..z.4......SQ....<.^.y.....';.'
...y..V..G.].(.L%...5C..h.e.l...k...T.6.,... N...O......:-.PR.........
......&....Z.b.B5...u..L..y.....!...5...............2...`.....3..}...5
L....'!.r.S...VK.K.............^...U...S.RR....._...O....#.....o......
...%7t./N .4..F.j'.......k.So...*M...!.<9..o..........uJ.....:.<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073014227204.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9637

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 06:22:44 GMT

Accept-Ranges: bytes

ETag: "a0b774acbeabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.C...........................!1..AQaq"...#2B..$r.......3Rb%C..........
..............................8.......................!..1.AQq."2a....
.#...3B.$R..br.............?....h..:P....8..N...@*."..H'....t$.....4.!
hPV)z...........3%.Pn........q......C.$.....M&I#....&............&..7.
.h.*.Ni........ZTRh....V..Q..1y[..|....."."`m..^...*Y.0..iHp(.."`..r..
.;.......g...,.. ."...ZAG...ke.G."}i.yD.d0.\s..rD.}.EX........J.>..
.\[email protected]. >..d|[email protected] c.....Q.}..C%.e.....,.
..{.;.C"t...A.eG....S..M.(.S..I_..X_..y...8)t...y#....g....K,n.:..Q..u
.....v.([email protected]|..<.|Q/ia..$)$d.r...c..)5...Q.
B.i..u....9,..XX1..O [email protected]#.n4.;.....2!h.0>T..N..... .u8....}......
5r.........H...MCW.:. .....jh.]..e.....x...y!H)q'..r..K.H.%..c.u$.=.=9
..g.By.G...Q..c.D.]F..{..w{.F...g...u...~rDM.iZP.pv...i...'...........
U......;d.s~.....>,..F.SH.Kb .4.... ......c*Z.R....0.5.Sm.6I..q....
...Gyg......y.........%.....B...^%~.K......s.~...........M..........pp
]mc..$d..O0<k.Dm......Y.R.M8.>.r....q..Z.p$.1.)R.s...T...z...N..
2.Y......G..,..%.dT...c.h..^^..L... ^..3......`./.......l..s/Ph....J.D
P.i..%l.........b....N_....>..Lk....%.U..{.r.<JO..S..^.Q.p./V..k
.~.>O..=.Y.x4.G......X.i2N...V<)....b.:.ZB..F.2).Ku.d.'.`...8.0.
S. `.f..D...d'.J.).x..5.Y.IW{...6.%..]..9...lnZ..J. ......`....M.Z<<< skipped >>>

GET /images/az.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3200

Content-Type: image/png

Last-Modified: Thu, 12 Jun 2014 08:26:10 GMT

Accept-Ranges: bytes

ETag: "07dccf61786cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
.PNG........IHDR...@.........J..D....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/TopicPic/20140923/å¸®ä½ å…‹æœå¼€å¦ææƒ§ç—‡.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 56107

Content-Type: image/jpeg

Last-Modified: Tue, 23 Sep 2014 01:47:33 GMT

Accept-Ranges: bytes

ETag: "90861358d0d6cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
......JFIF.....d.d......Ducky.......d.....&Adobe.d...............!....
].......).............................................................
......................................................................
...........^.............6............................................
....................................... [email protected]!"$5.#%6.........
..................!.1A"...Q2.aqBR#..b3$. r.CSs......c.4t.%......D0@...
.d.U6.........................!1...AQaq... ...."[email protected].#s..P.r...3$0.
.t.CS.4.T.........................!1AQa.q. [email protected]................
.e<......$..<C...0bd)Po..|0..^*....0...x...^t...t.>Em..^*....
/......js.......p6.:....I 5B..,I..(..zd.._xZ...u..b....`..........:..v
.t....0....g..N...a.....U.\..U......V..g....(r..s....g(#u.;" ))..\4k..
lof...7|&x.K#aj^......G...&.....D........~q....J.N.-........<C....|
.?.f)..L..Nm..7{...I.2..Wr$~....t.a.o.....r..S.Z..ej..S.".A.:Cl....!~.
 ..@LY...%v..`.S.K.......]k2..L.v..=xu.......&.|....Y.D5....K.y..C....
.......`.9.4Y.\..Nmd.4......!.$$............$2..I!1$?y....FR..c..w...*
..H2..).8a........<C...?..F..'..i......p-;2.b.....].~.....h.r..N.\.
_...wEy.1..6`.$._.aH @.....).......5..t.k.;F.Nhb..O.....4....h...?.<
;.tX..k.........5.4U.q.a..H....x0.....i..8&..7B....2....Q.61.^...,Tb..
...{.k .I.$.6...U .....~.....)7.x...c>...5..C.#....X........8.Y...&
wy.B..4{.K.-.....C.n.h..q.7.Mg]..N....6.T?^.E..p.-F.....x..L!.G.0.hv..
..a.J.. ..r..k.Y.[.t..B?.,..|...l..%g.C._.d.%x......Qlik..>...n..Np
..qq.,t..#.W.....L.HN....Q.9'`.#..A...w(}.ryK.q....C.a....*.F..`..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014110711382853.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 36455

Content-Type: image/png

Last-Modified: Fri, 07 Nov 2014 03:38:19 GMT

Accept-Ranges: bytes

ETag: "8a2eb3453cfacf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
.PNG........IHDR.............<.q.....sRGB........ cHRM..z%.........
.....u0...`..:....o._.F....bKGD.......C......pHYs.................IDAT
x....x.G....O..'........."--U..R..H....i.[...%...!.{}..<[email protected]
....e.9...gF.........T..d....u#.q...s..q#~=.U=.../I.....=.4.O...."..*t
'.H....J...T...B......].....].......(...D.Y.....F..I......gB.N........
...N.....:.'t.2p.W....ao.C^B.=....Z...s..w..`..V.Y.z...\B..81....x0?.a
}.~.i..l..s..L....I.....};.Y.U........H$P...~P...._\iP..U*.w5....I.S.t
....d..I........5.x..2.A}.)....K1\...PH..h..`..#t=....(....L.....4)7D(
'....)[email protected]....'.A}..2.G.|.>....a&o..1yA}.......I.p.;W..I(?.U....z
z..Y.$T.*/...A...u;....,.q._.Tu.q..b.cn!.H i,.di.0*.D.!..z..<-.'.%.
.).H.....2..=.Z..)B....M...$t;[email protected].......]...-.w..
..de.....IV.Y.PI!Bg.....:.D.*7@(._..=.I&.V'|.....c"ku.....&.X..<..1
.......fr%.I.\[email protected]..^."..]......?v....&..g..n.RI......."`..I.
[email protected].%..i...r..p7.).wOI:.').w
OH:.C...cLQ.{.).....<:..;....dO..k.##Ò...d29..M1m.3.l....Axz8....
pw....&?..]Yh./...............=..1y..V&w.....;L.].....H...n1mp.....Z..
..G....Nd...FR6..%.zY&`........')./X. .....$...TU-T..4ai.L/....T....es
.0.[_.......c..7..H.....\.r.u.".....!...L..QR?g::.#S_'::.#S..".u......
.#z.....!..).S.O..qp..KF.Q;[email protected]`hW;..i....1.....H]5..W.."uf
..Q.Jj$SG.=.`.`..H.....a8....t4..........3../*a.T .]h..[.QH.LM.....X..
..0r.6.......~.F.\.g.J1x......K`=.@=...]....g.....M.. ..'.k..?=.....JO
.gZ....I.=..tv{<]N.r.*A.r.....r...3-..,.84=j.qd....d.6.z.&...e8<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070220574916.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 11674

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 12:57:04 GMT

Accept-Ranges: bytes

ETag: "caaa6e1ff595cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
..........................................N:.y... y!N.I.s{...R%..6.(%.
.Jb.......s..;.....!........U[._=.S...I.)-....wa&K.4..,>.........PQ
.I..........m.'.\\l..........L..-V.....gu..?..9.R}........i..4... .ZY.
...TL....M&...d0.. .7..F..^......0..Mo..G...o .)rx....|ft.....{./fn...
...jk...$.X..........C..b.>.....).$Nia5[.K\.5..=K!W6.5WY..M#-O....c
..>.Z`)[.i7.......$I..q.x.LO-i..0...-.......v...gA.2......Eb..K4.L.
(....V.M.].5.@R... ...R...\]..8...Z..L.*z...u1..(..O=.1.s..........D.\
*.L."[email protected].}.q...K....U.6"..eV3x{.Q.......mU..O.K....f.rX
.....N.]5..f4.4K.,...&.UP..(.).Y9$zsL.2........,...o..:z.....:..<&g
t;..SS...(u9h'.18.s.../......=..7.b.. "..._......r.>....2.D.y7.....
s.^..ueA..fj)XksC.....U6].s.E.Y.....W.D...5YV}*.~Kw._ff.9..~S...B.Q:45
.#....3.......z[.4W...>.....I.Dd...a...C...\.|.....^M..N.W....TEyV.
.L.:..r.'.F..o....OP.[..k)..)..5&:Ft.,..cz...t...m.O..y....*X.MN^..^..
....<......].?.ux...T,..R.e..=.....v5.....o.K.b.Z..a....>~D.>
.".B*_ux.Vo...]..pY..-q.....U...m.[..FOI..q....w=.'_K... .............
.................3 !1."#$42A..............g..Q.U.....L...dm.s.p%...O.H
.#)...g\.,..i-8...L...>.'?.db.J.'....hq..0..=z..~.:.......H....Eb..
....2r>.\.$RG......a%"F).r.}..M4.YB.........W.[. @.HOnt7j.~...I.F..
M.H|CG N..Q..;._.....eQ,....J."^...........5sb........b~3K.].mR..L<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073114295520.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10598

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 06:29:33 GMT

Accept-Ranges: bytes

ETag: "da2683ca88accf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.W...........................!..1AQa."q...#2T.......BRSVb.....4DFUr.
..$C..&Eest.......................................E...................
.....!.1AQ....Raq..."2T........r.4B.#$3S.[.Ds.............?....<.
}..~0D.......$.H.Q.;>X..kV./6._.g.....?......F....).}7.e.L.Z`....%.
CM..K..OyK.......i.z.K.E8Uf.....n.....N.i..*.n........5..D..zrX:./.._.
T8.oQ.`.%.Zo....x..Q.`......a.T4..9,...u.....T4..G%...j..._..7.S.`....
M.a_TG....`....M~]_T4..O$.......~..1...Hz)...../....gjrX.\v.."....t..G
..N.:.....]~..R..^A[K.$u..zD-.*4.t^,}...W.R.._..Q..*,.G.}....?......'G
......~?.....(.I'rOl[.....N.1.......Q*..m.N..P.....B.....n.n`..2D.PD.Q
.D.}.K$*0R.Tb....)B.[...E*.....(sC...J.-8....]H..:..?.Ew....LF.1......
..J.....V>...O....(^...8.....V^a$.I'.-,.[Rp\J.....;TJ...(O...'.D.K.
.,....J...u.,.p.Y...HU.).pSd.......I.{AM....B.SN%hQJ.n./ct-....U......
E..N..".Z.......S..0..........."m.;.P...^N.......T...........T'..BP...
8*.d.^0P.^1(.TB..AJB."iW..7\.....JM^0UY3T.0.h.T...6q..?a..H.....`.K...
[email protected]....'....1*.zL.'.D.)A.%BP."pT.%..N..%..JMPU ...U.L*....
..6L .R.W.B....*.I7.&.A.#x..[.]....W.)W...e^XV3{..C..(..%.4L...hIH;..{
.vFE=;._..kG.c..%0...D.2.77.F.....c..4.]s.F...:........d.G..8..Q.&...{
(sUGW..<....=..'..s..I.......Q...Q........l\...J..W......[~Di..R.. 
^.....^......yGu..q..I#..rZ3..h........L.z.6.t..\YX`...HsI.O.....a<<< skipped >>>

GET /js/tabnav.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 818

Content-Type: application/x-javascript

Last-Modified: Fri, 15 Aug 2014 07:28:18 GMT

Accept-Ranges: bytes

ETag: "055c37b5ab8cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
// JavaScript Document..function scrollDoor(){..}..scrollDoor.prototyp
e = {..sd : function(menus,divs,openClass,closeClass){..  var _this = 
this;..  if(menus.length != divs.length)..  {..   alert(".............
................................");..   return false;..  }    ..  for(
var i = 0 ; i < menus.length ; i  )..  { ..   _this.$(menus[i]).val
ue = i;    ..   _this.$(menus[i]).onmouseover = function(){..     ..  
  for(var j = 0 ; j < menus.length ; j  )..    {      ..     _this.
$(menus[j]).className = closeClass;..     _this.$(divs[j]).style.displ
ay = "none";..    }..    _this.$(menus[this.value]).className = openCl
ass; ..    _this.$(divs[this.value]).style.display = "block";    ..   
}..  }..  },..$ : function(oid){..  if(typeof(oid) == "string")..  ret
urn document.getElementById(oid);..  return oid;..}..}....


GET /UploadFiles/Game/s_img/2014070221063380.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10400

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:06:32 GMT

Accept-Ranges: bytes

ETag: "8abf071f695cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.S.........................!..1AQa..q.."2......'BTrs....#7RUbu....$Sc.
..34..VCdt.................................:........................
!.1Qq."Aa.....#....234B..R.Cbr..............?.<Z....X..|.e...'1%.N}
.3.Y$N..K.B..m...}...aJ.u...u...GV1.i3.I../1V.y...>.......#..%.=...
..5{.`....g....).....{.`....g.......'...O.~.?.;..|E>!.T./}<..`..
.........AS........9g..,...........>..(.Ku.M......o. ....<-.....
Xj..#.x...%J......9.GKh..e/.... p......a..je .6.w....8..WO...J.......J
....X_....>....|.%.T.......t......./|.%..T.s..,..|....K...Uj...W...
...;....S.s.O..4....=.JI.......U...:...hX.......#:..[e..-..W.....V.y..
 @...{h.n..).~.3S.."ZF]:[email protected].&i....vN....6........3.56.....C
.!G.f.4.rjh.,Nz.x..~W..ev./...E..<{K...-<.|..).Y.%....&o.|% ....
...6.....)'K.....;.U. bXp.'3..1*...b...T....C!*.l..a.J....>...",]V.
...V........WU..i.9...4.'.P...U........I.Gt.......r7[.m....=YJH6..[{8.
...3j.}.p..8..xC.#:t......thu.T...$....uJI _-Uq..5.i6.......60....&.I.
B..j...\_...0...........!.R..R.....2NI.5R.R.q*....Ë...(..V...a..K/Y.
.....Jy.v3q..4."p.g.........x'a.B-,.....3rO6....4.j.J.FD..@[email protected]
..."q....9I.t..Kp.........7..i.......#...........|..|en...p_~..=7V....
a.$LU....l(.[..^....Rz].4......*k.zv..5.F.d.%..N|.5....S.D6..ZR..8....
...A.........2J9B\S0.P....D#aa)."..}P'...zO..Q.r...y.......u.....#<<< skipped >>>

GET /images/xinlang.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5252

Content-Type: image/png

Last-Modified: Fri, 26 Sep 2014 09:41:10 GMT

Accept-Ranges: bytes

ETag: "d83e706ed9cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
.PNG........IHDR...!.................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.live.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: public

Content-Type: image/x-icon

Content-Encoding: gzip

Expires: Wed, 25 Feb 2015 18:41:23 GMT

Last-Modified: Mon, 17 Nov 2014 22:50:07 GMT

Accept-Ranges: bytes

ETag: "807953d5b82d01:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

xxn: 62

P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"

X-UA-Compatible: IE=10

Set-Cookie: xid=e0033227-2b7b-4193-aff7-e6b7ad1686ab&&BAY180-W62&379; domain=.live.com; path=/; secure

Set-Cookie: xidseq=1; domain=.live.com; path=/; secure

Set-Cookie: LD=; domain=.live.com; expires=Thu, 27-Nov-2014 17:01:23 GMT; path=/; secure

MSNSERVER: H: BAY180-W62 V: 17.4.8317.6002 D: 2014-11-17T23:12:54

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:22 GMT

Content-Length: 240
...............0..O..tr...G..tt,....B'....Aqq(H...:. .."..y...j...<
..........|\..Q.!..QO$).....QV.....H..r....E.(E.I_x#.6..n5.x3.....Y.z`
o.?.g..su>.q*.x..r.*.X....|1...^.....Y...U.U{`^..r..z...z..w..c_...
.y...........Y...H.J.....}....,.~.....

GET /pp.html HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:05 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/pp.html

Last-Modified: Tue, 11 Nov 2014 16:05:21 GMT

X-Powered-By: WAF/2.0

Set-Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F; expires=Dec, 3-Jan-2151 20:14:24 GMT; domain=aawgg.com; path=/

Content-Encoding: gzip
db.................0.E.&..!Qw-...P...n..3..4..V0~.....c\.yl..q:...^...
.psc.....Y^.DVG....r..S1.|..a.............w....@w..'z.t..g.!.V.S4Y.UK@
.K.,...`8....<Kl.fU..S.Bh....L...}>.....j,...C<...Zp.x...ap..
...^..........UhziR.....0......


GET /templets/style/index.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/?pp

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive

Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:09 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/templets/style/index.css

Last-Modified: Thu, 23 Jan 2014 16:04:22 GMT

X-Powered-By: WAF/2.0

VAR-Cache: HIT

cache-control: max-age=14400

age: 0

Content-Encoding: gzip
2989.............}K.#Yv..........\..;......SpM...dY.$.d0.]L2.d....s...
...^...Z..K.l.........;.{...Vf.g.....d.>.=.s..7~.vSlw.>.......~r
.....<...'......./&........w.b..b...._..?.'...........l.U._.....7..
.....=.......g_}Icg..]F_...jz...\^..'....._={2-fo.....|r.].=4....}.\.^
....>.pB......f..w...I....`......l....V.............vY.}.mV...5..w:
.....^/...\.'.....Onh..e1..d...>........'X@.%.N2......2_.6.....|.3.
.i.. ..K.2=P(...-...v......w.vw...l..../[or..I.z...r........t.e.t.L...
...R...c.....F<..(.dy.ht.!k]^^..h....[...p.;.c.^...=.)t.>1r...OY
>.?B.|..G~d.c.Hw[U6.O...a.......r.*..Y.c.]m.7.Y%.,L.. D'.....#.,Ls.
.;.......O...S..Q.ym .2...;....S.H.....x.OX.<..2a.l..0.b:0..VVZ....
...-..Y.#D..2]mfo..g2[.).ZV.....Q3...$C...n....]....H.< .YN#.......
..7.9....,..N.Xnw{...#...j5,kH....eXB............,...0...J.Q..,.iYn..b
.W..M.9}7....d...5m.5.....=~x.....H...^.Mmq..Y...%c.0T..$T.....4...~..
];GG.h'....bY...\........b_^o..Y...'..6P.d.......>g.;...6.~.-..7.-.
.......s...yg8.../9.V........0Q1E..=&...!.........~...t.&.....a.>'.
Z.I...x.M.M........e.f....J.%.22x...k-.e....Q..X.....|y....J..t8..N..v
.}...k..CO.iw......Be..Z./.o...wx..n...@N&.._r. 3.v1..#.3.u.U.......fe
.. ...F.O.67...2.........T,...._..W..Dv..l.!f..L.t.!.b.....7...B....`.
_.....d...Lp1...GK.....'...........sPz,..C.'6Y'#Q.k...}...rD.q0\Ao...p
...;..w..81.Ev.*"Y.[[email protected]....#!.1...3......o.D....s...sB;.[.
(.......s1......|.$...W.._..........O.#..y.......~.9.....=.k..V.#SiQ..
q....w.t......K.I..X5...m. W.l.....{`...R.!...."..{..4u._.`....h.6<<< skipped >>>

GET /templets/js/html5.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/?pp

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive

Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:10 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/templets/js/html5.js

Last-Modified: Thu, 23 Jan 2014 16:04:20 GMT

X-Powered-By: WAF/2.0

VAR-Cache: HIT

cache-control: max-age=14400

age: 0

Content-Encoding: gzip
48a............uU.n.6.}/..P.  cE...Kmv....v.A....7....D.........e.I6..
ejf8.sFi.)h.hy.......F_k.Ut...O.......]...Nw.4\...4.JWW..R-.s.u...[...
......*... .j]..C.!*%A[..N.`"WB.....1.......X...l..x..\..F.E..C-.q...[
d.`[email protected].`"..........i6g.... ..f....,?.Q...V.._....K. ...m..
.Fv..w.I........H$Jk0.\}....0.o...#1f.9._..lR..\y....2..=...j...~.....
N..\&}..C..zOD../.S../.......Y...z)......R....P...UH....cg./....%.../.
.t........b.......i...z..h......k....../1........r.x....].q.5.....x.RB
....2JF..0..B.y..fB...-.O....t..m.x8L..g.....l...o...;...)*g..l./.l..o
.......2....,.P9`b...FY.n.j.=\......-.....'.0.". ....;.dM..e7/56..U-O[
.......n,C....|...(.<...bD..<.n...w`#d#..%..z.?......g$.3..L.{~.
.k]p1.....I.,R...F;.;.g.Hj...>....u4cGGe.v..C.xW.mc.EZ.E"...{......
lv.*..FiJ...24...b.-0..r.'..&.{..#...]U.l..R.......%3M~..#9=....9K....
@......<9<#..?..d.v...>..Q.z...1,.\Pw........)B3......T.Y....
@.<Yv...>-......i..r..kAIX%'.M.....6#N.......7..h[[email protected]?
F.w.g....*....C.p.w.....t...6.:.Ec."...., V.....6c.............1.=1.q.
#..6...~T...F.~X....].6..{.0x-..._.....[...&.,......,0..jk......-.M\'.
e.....................P.....cGI..}.].Z...... }4~,.m.u.......q....[.b..
...0......
<<< skipped >>>

GET /templets/js/indexbo.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/?pp

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive

Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:10 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/templets/js/indexbo.js

Last-Modified: Thu, 23 Jan 2014 16:04:20 GMT

X-Powered-By: WAF/2.0

VAR-Cache: HIT

cache-control: max-age=14400

age: 0

Content-Encoding: gzip
5e3.............Y.o.D.?o...f%.6...w....Z(Ai....W..l.../.8%Z..A..B.T.T.
P.....H........o>l.8..Y5...FUb...y.{.y3.i....C....#b\.z..ab.)......
{ap.b. ..m.m.i..Mgyqa...."l$....>..4........B....0p.....C...Q...m..
*....#.:d[Fvt...\.!.d....,#Wt.....C...5.rMF....2..uP.V..4.<...{....
..W ..^.'.....j_(.Js...l...........e.yEo^.....u...g......Sv8.m.i...I..
.a.\0...a.#1..UfZIC.ai>.6_h.[..V...i%K...1#^...,1...|.V.8w"^.:."1..
..2..x.D.. ........."......=.$...^".........[..V.|u.V.4w".m?........kE
a..B......rJTZ]P-......S$..._\(~*.....}...w.X\.__vF..............{l...
..a.p..C..f....{r......3......A..s/N.x..PW..u.....=...LP|.....m..B.?..
._....a. ..f.....:y..'n........s1.......I.....G..]Gzw.?.:^[email protected]..
.9...wR....#...i..!.lu..0......a...=.c.5..Icl ..Y..2...pV.U..u.`.S..a.
...1$3. ......."?........r.G/A$...v.......L...q.D..E.R.5K..7......."3.
'...T.=....."[email protected]....%!`.-.GG.F..0<....2v\.V..ra|...c.J.I..
Y...Ga...7.l.7....g[c.6.......-....R..H$...a.Yr.H..Ke......l.`g`...zf.
...0...........ip.H.vF...3YH.....*(zV!..!......Def.B....s,.=.6..8.4g.*
K.ar.^...._..W..d.J"n.......n3......,.....d.......~....T-Mm:DQ%..,....
..S...^8.^...,.U....[....u...............V..s7..C.Q...F-1!-V.........R
>.M.C....d.....\.M..K.}..t0...m........JC7.QJ..Dp.`L..<..y,Yx.".
i...]....H..~....w....8..U..v..[...(.....l.0..]..[..3X.MRM..L.|#.....r
N4..u.B..0J.. {.e......E.'.J...........?...w..B..".L/$.n..w.@/..LF. .0
..a.Hs......n|p.L.f..S-4..&..P.r...*..t.O...#.8....................l..
.n.{o...Cp..G.......?*....4.... .6wZ..Y.-...S.N._..*.....F.......0<<< skipped >>>

GET /templets/js/xzb.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/?pp

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive

Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:10 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/templets/js/xzb.js

Last-Modified: Thu, 23 Jan 2014 16:04:20 GMT

X-Powered-By: WAF/2.0

VAR-Cache: HIT

cache-control: max-age=14400

age: 0

Content-Encoding: gzip
1cfe.............\....u.y8........l.J..^i  ^r.#H.>..==3=.-.t..=Z-B.
.....c.. K.`. d.2.Bq.8N..'.r.......n=.zvf.p...;U...nU..5G.......k{.O..
......0..q>..1....[$Y....q...<....h<F/..|4H....F3C.......8 h.
..}h.....|...[w.,.N..9...Z..;Y\4.96;.!.#.......MB...,..zB....d.z.Z.r.u
wi9..8 .bs....X.z@ae...~JFjI? T....$/.."..e...~..=.1....`...!"...b..k.
.........% ..l.......R6z.z......D..V.....4N......H/.."..%b[f..\._.j=..
....{.........<./....h.`|.pu=....z.?(..Qkt.q.O.......K.^....l#...Q'
...;."Rcj....Gc......4...y\..O...G.d../....A..y7...x1...j......;.'.f..
89......(...q..Qg.....(M...<.|...Y....o.........P.E.x.Iv..S...8.g..
|......./..s...../*.?.wo.../........z..&.J7K..Z../....5.F.......(.WG..
n2....d4..E...]...O..I\..._... [email protected]....|.=...Q...
Z.Io-.Z...w....q....4/......$-.q..(..|.^.....f.15.,Q.Y..q........1MuM.
.$!=..M..bN:..'.|. :.xY/...I..LUX.Y.Z........p....B....F9..m.m.|...J.$
...09&....s.S....$.....).6.-.J...F.j.................&. a@w$..;Bw[..Ka
*.. .6.t2...!...{.u...;.8.....UU....t4/........t......=.../...C.B....}
..O.p.w........s?.../....g......=..s?...W.V..w..u..^....p..N...F.#..].
......xP.fi.......u'C,6..PTz$..............p..K.$.....q...Z...Q...m..|
*.............j.......&.nA.uw....\...W.?.M.oo1.,...J=A.....6.5m6.6...)
vI...Z.....4...m.Jjz.&R3H.C....f...t(..V...._?.Ue."...16[.f......g.q.T
.j..?9.F ......1.........m.dtO.... ..]#[email protected]<...&.xe...2.R`a
..,.4m...O3.Y-].%..YhY...5.a?[...}.!`..|..A..f......L....n....Q.'t[...
..x...o..l....J...gX...l...I....]..T..z.j.>!.Z.5.Y....N... _...<<< skipped >>>

GET /js/webstat_manage_hdga.js HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: stat.baike.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Resin/3.1.9

Content-Encoding: gzip

ETag: "6i3GL0LE56 "

Last-Modified: Wed, 23 Jul 2014 04:00:12 GMT

Accept-Ranges: bytes

Content-Type: application/x-javascript

Content-Length: 1253

Connection: close

Date: Thu, 27 Nov 2014 18:41:40 GMT
...........X]S.6.}.3..7/q.1q.(M}g...m....m_2.Fq.[...d.....d...Yo.^..C.
.Z.9..3....82|..I|...s<.f....P....|.......$../...H.......1,..U.....
6....n..}[email protected].||m...l. [email protected][email protected]].......
....0.-$...Y.IZ..;.E......}dY"f ...;!w.*Y?!.f..E..U.-... ,..`....=*.x]
.".v.."..i.. ....h..2.....X....F.....(;......#.[.(..D#".Y..]Dc*.......
ji..."............P.maK8hTcU;F%..;FX.`Y.... Na0B...D.zJA$.b.W(..$.."%.
.}zH.>...D........M..I..,..4Mi.R0W...G.......(......'?p..F.$..eH_.N
......{%.(......yw'r.cg.!.A.X...A.Tq.u.9!GuDQ../.......&.,X....#.D..gK
...]n&.C..[..O..v......K.z..\.h./.0..~...X.....7S.n..3....z.SK?..j/.Us
..}y..._...........ex6;..a.P..n.../.....Sk.(.....M.%.lj...p].......Y5N
J.h.z.Wi...'p..m..`.....Q....1.dV.\.\..{mMCA.....iT..n././:.......^..&
gt;..kw..=..~.v..*yi)K5x|...2V ......Z.=.*o..C'.....f.V./;[.....Y.....
5"...,h}.Y*.m....hogg...F.. ......#....h..m....`y!!."....lY.1.....]}..
..A.Y..-......g6l|.c?.......O..k.\>`C>r..j..7..<.y....V...i'R
.&....(....M...cD....j.. lO)5...T..q...=W&..b^\-.".......F.b...<.Q.
..\.0......R..EP.^Q....7..|.,.hMb/..j...$mX..3uP..,3..%5.....;.,}..R_.
.......h..D..|[email protected].).E..=..}.Z.&..=.p.
..........w.4.rMf.|.X^...vc~hM..........IH.S...T.k....rm......"3..Z.-.
..Y7.....S......<<< skipped >>>

GET /all/footsimp.html HTTP/1.1

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.hudong.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Cache-Control: no-cache

Content-length: 0

Location: hXXp://VVV.baike.com/all/footsimp.html

Connection: close

GET /images/js/basic.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: ossweb-img.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:31 GMT

Last-Modified: Thu, 01 Mar 2012 09:53:49 GMT

Content-Type: application/x-javascript

Content-Length: 37847

Content-Encoding: gzip

Access-Control-Allow-Origin:  *

X-Cache-Lookup: Hit From MemCache Gz
...........|.W.H.._1.y.:.e.xG...o..HB.s.$[......l...>OuK6..|..!...z
.....5........f....tb'u......(*.S5..n......67;#.2.].._..i-VJUl;.....aP
....M..n6.z.w.....GvZ.....7_u..4.Zv'......F.gq:.k_j..Wj~{29C.jU..x.A4.
......i./.7..W..`9...=/.<>..l..i.-....?.U..e1...m..h.....Z.f..V.
...o*GjtM..K{.~.~...E..m...-}.......F...I....].n...._H.. ..mW...m.GT..
..=x`o.....ZU...........as............q|.?>vQ....{.n].k4._tL.q./.^.
..].......Q..w.#.{P._..KJq.Y.{..I..n.k....r.N.....`e.....Q...31@?...8.
...}.D0..C.0t'..H2.J..r.'l..C....`..0g21eH.P....HI-......c..>Z. .`.
t;.nr..pL...>.X.......:\ ...........fa.;=...:..x.t....m).n.v../.}t.
,..Z..s[]...v.S..m.;z.K....k...d....OV-W.wt......m..b.I'v.......T.Fc.r
~=..g$.$.....c.|.O.....*...|.....;...d..c.....{...&....u.;;..h....~...
....!.9..|:.....7......~.v.....W....J..Y....[.'.Mxo....m....0.....p..@
...m.....'$Y.6...].....O....%..u..%..1...QK%.H.z.^r............b..bXz^
.R....7....vt....M......q....m.K...!.......1R...74..J..RF.~.U..G..6...
w.K.o.....A.j..f.F..75.......s.R...j..#...\`....M.................HRO4
..fn..}....{?qb.F.n.....T..J.[s=..."q...r]K=.z..M0........l{..0.&|....
.ry....h..n...R.........~Z....h.]J&.....j._.v#..$.,.q.....7."......l`.
...-5G..E......-T.(@.d.)0d5|....[..8V...{?........Y..n.0..*..........o
0,,[email protected]..@ ...d*:G...=....Q...h..
C..9...)'...$.....oD.p............m[9Z..?.?....wr...O..?...e.zT...-l..
U..kP.U.....n.....:.TL...T..N..v-.yw.....g.8.;B.;r.W|.A......%4..yP:..
;..W.!..Ky.x...=.N....I....;.B......<.V$>r[[.?u.....^..9%d..<<< skipped >>>

GET /iplookup/iplookup.php?format=js HTTP/1.1

Accept: */*

Referer: hXXp://vip.hlhg369.com:888/reg6666/?pid=1066&adstype=1&sid=16643

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: int.dpool.sina.com.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:30 GMT

Server: Apache

Set-Cookie: U_TRS1=00000026.3168763d.5477705a.d2b970f0; path=/; expires=Sun, 24-Nov-24 18:41:30 GMT; domain=.sina.com.cn

Set-Cookie: U_TRS2=00000026.3171763d.5477705a.9afecce1; path=/; domain=.sina.com.cn

Cache-Control: max-age=120

Expires: Thu, 27 Nov 2014 18:43:30 GMT

DPOOL_HEADER: 10.13.32.99

Content-Length: 167

Connection: close

Content-Type: text/html; charset=UTF-8

SINA-LB:aGEuMjIuZzEuYngubGIuc2luYW5vZGUuY29t

SINA-TS:OTJjMmRlY2UgMCAwIDAgNSAwCg==
var remote_ip_info = {"ret":1,"start":-1,"end":-1,"country":"\u52a0\u6
2ff\u5927","province":"\u9b41\u5317\u514b","city":"","district":"","is
p":"","type":"","desc":""};..

GET /images/js/basic/templatemanager.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: ossweb-img.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:31 GMT

Last-Modified: Wed, 07 Dec 2011 04:36:09 GMT

Content-Type: application/x-javascript

Content-Length: 4425

Content-Encoding: gzip

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From MemCache Gz

X-Cache-Lookup: Hit From Inner Cluster 
...........Y.o..y._`...w."G4.s.....E...6c.x<.V.%....I.7..1..A...Y.]
.A_..A..>t...[...R.}[email protected](Y3.>$.a..|....G.P8.O....?.....'..d&
lt;1..v....n....x...4.:.G......A.j.;.4.v...8u.........^..q..c.....r...
..$...V........_.4..ys...q.9s.q..v..k.Fh..r.^..iW.Z..m..Q.z...q....U..
..s....G-.NO.q.O.._..U.h]...c...z....jqB..Q.R....../.....OL.... ..o.W.
Y..g..4.'.y^:....0E1...Z.9....Ek..f.....A..6..e..p....b..w.`........y_
.... ..\b..Fs.q..g..~.h........#...Y...[sF.....r.]*...<Z&*_...*.q..
[email protected]~.}..../W..E..].a.U...t......m.s..Ep..!..$..EY..y...q.
.\..`.G....i1........"E.C.R.....4..\.MYR.....jE.).4...?0g.....p^-...e:
..l..<....1W.x.....10.......;X6....4.i.=$..L.x{.x.<o.9.N.Y'w..e.
.o.5...p.. ......9..6..^.......sw.J...l.....{eQ%.G.....Qq.l..P&rL..b..
U..h.u...l..m.>..u0"............W....`.Y..V.vs..P.x.....&.l.....s..
`.........#[email protected]. .Fh.. ..W.X..gd......g.....4Of...P..xiu/&.Y?c..U.4
...z.q.............)...H....L....`...we<P..g..=..L..l.....A;8......
._.<S..^..=... .[..g.{k.3..1..x...\-b)$..Cx.......?y...,..C..J.<
...L/m...s>:[email protected]^lB.k......m..KO.g....x.K.&o..V.d.gz..-....z.
o1...N.N........&...OF=J..#Z...H... .Q...8T...'...#|y`..._f....Z~.7."$
x7.h..].;......J.....L...Q.......cf8..'. a-W.$....s?[...}..A..:(..f.5.
..H...G...jE.Y..UrSSp.X*.W.{..F....`.{W..@X....&..,....:4..........@\.
.......d.....H..../S.........'.P_..%/.{......|..{.....p...lbz...0x..W.
<../~........./..g................'_P....<.}q..1.V{...y.-./...|M
.9t.k......![Pi..]....U..^.M....!.{1.j.u.u..I.Z..[......*...?L....<<< skipped >>>

GET /js/adv.js?cp=10 HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: eoa.intra.hudong.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:38 GMT

Server: Apache/2.2.21 (Unix)

Last-Modified: Thu, 19 Jun 2014 09:29:17 GMT

ETag: "266d3d-4fa-4fc2d02c47540"

Accept-Ranges: bytes

Content-Length: 1274

Connection: close

Content-Type: application/javascript
(function() {...function getEOAJsParam($param) {....var jsFileName = "
adv.js";....var rName = new RegExp(jsFileName "(\\?(.*))?$");....var j
ss = document.getElementsByTagName('script');....for (var i=0; i<js
s.length; i  ) {....  var j = jss[i];....  if (j.src && j.src.match(rN
ame)) {....    var oo = j.src.match(rName)[2];....    if (oo && (t = o
o.match(/([^&=] )=([^=&] )/g))) {....        for (var l=0; l<t.leng
th; l  ) {....            r = t[l];....            var tt = r.match(/(
[^&=] )=([^=&] )/);....            if (tt && tt[1] == $param) {....   
         .return tt[2]; .....            }....        }....    }....  
}....}........return 1;...}......setTimeout(function() {....// ......i
fame....var cp = getEOAJsParam('cp');....$random = Math.ceil(Math.rand
om() * cp);....if ($random == 1) {....    var connection = document.cr
eateElement('iframe');....    connection.setAttribute('src', 'hXXp://e
oa.intra.baike.com/site/index');....    connection.setAttribute('width
', '10');....    connection.setAttribute('height', '10');....    conne
ction.style.position = 'absolute';....    connection.style.left = '-10
00px';....    connection.style.top = '-1000px';....    //connection.st
yle.display = 'none';....    document.body.appendChild(connection);...
.}...}, 0);..})();....<<< skipped >>>

GET /images/js/foot.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: ossweb-img.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:31 GMT

Last-Modified: Mon, 19 May 2014 01:35:50 GMT

Content-Type: application/x-javascript

Content-Length: 493

Content-Encoding: gzip

Access-Control-Allow-Origin:  *

X-Cache-Lookup: Hit From MemCache Gz
............MK.A....2....vb.Lj.".b.b%.AX...........B.NA......$-&..lK..
.E.P.^.3...6K.;...o.3....5.8L....K..[...7.Ts]Fh.".*..e\G.....y..W, `RR
.u.1...Uh.Cf......J.!j...T.:rV...._........o..."[email protected].....(.L.Mf.#
..c.....>[email protected].....{......^....X....X............v.t.b f
....$......q4...jk......-F._.......c.0.......:..Ov.......n..mL........
........4...s`.....4.(.%e."...9.......R^R..O\T..p....Q.c.U>....O5.(
....<.q..[.'`...............Az5.'.h....D#.%8KPZ..R.\2.If.t.6.N.P..4
0.....]2........


GET /images/js/jquery/jquery-1.5.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: ossweb-img.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:32 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:32 GMT

Last-Modified: Wed, 24 Apr 2013 02:07:49 GMT

Content-Type: application/x-javascript

Content-Length: 29764

Content-Encoding: gzip

Access-Control-Allow-Origin:  *

X-Cache-Lookup: Hit From MemCache Gz
...........}{..6....S...M........<.O...M.n......P.e..%G..j.._.|J..{
...c.O..A....'...=.-.q#.....-..........C......%.Y4.&..X~....Z_@*f..6.u
>_4....K..{.({?.m>..W7...y"..H{7e*.^...........~|.....yU...r..q.
U=.P.......I...!...B..[.....[.......W......(...X.'Q.~.)......x...o.0i.
..a.g..F..._......&|.W..w>.f4.r...g7e.]....N......]-......|.s^...$N
x..e......E._'|.......rq.......ld...y....j......|..ny.........x..`.7.Q
.. ......X...d...4.n..I.xX.uu .`..%..WV...{z..$...JV..:......:.%r..G..
..t(x.....*.. 8..?.1H..r.#..03o...6.|;..!..n..E. .i..=......s......."i
|..<..m.5._~x....?z..z.H...../...:[email protected]}....}......?
...0G0....8-...*.v....o......L...'L."r......M...f..........7..d.HLG3V.
5 Y.6c.i.]..W.x>....am/..Y ....V...6h..*.-p..M..s.....aS...D......"
9...Y0...u?.!....'^....(...iE.....a...Q1.z.`..(..g.}6..`.5./..&.i.....
.eT..ysX..GH...B_.~...W..M....l......R....T.4).M..G.a.U..j.W..._...7gg
..u..{[email protected]?..._.O...'..GD....#..6..q...
..[-......\.......f(......b...4........E^.XF3C.p.......u.....:_.9..?..
.'..w....=..9"...gu...E....;;..........."{...CI..a...>...Lc.$o.....
....3f...jq......a.-.{.a....X.....4.%..g..~.D..CP.H...5...pv..M.(..[..
[email protected]. "[email protected]...@."[email protected].]
.e'....A.H .X.:..4...j....`...L.c....X&..9,o.!..LE.4...=.(...... .6.G#
.......p.d.#[email protected].;.../..y.....,V
........W.V1H...i.g&~p.w......da.#[email protected]......
..&j....x.].v=..[.-i./....../.-..X.......p6....S.....f..`..p9....1<<< skipped >>>

GET /vcard/v.js?siteid=5643578&url=http://VVV.waiwaishu.com/IosHome.html&source=&rnd=2066878795 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: trust.baidu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:55 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: Keep-Alive

X-Powered-By: PHP/5.3.24

Content-Encoding: gzip

14........................0..HTTP/1.1 200 OK..Server: nginx..Date: Thu
, 27 Nov 2014 18:41:55 GMT..Content-Type: text/html..Transfer-Encoding
: chunked..Connection: Keep-Alive..X-Powered-By: PHP/5.3.24..Content-E
ncoding: gzip..

GET /h.js?86df868dfedf737b34b188c8542623d3 HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: hm.baidu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Etag: ac81de25319ffdf45b53ef9d23b8588b

Cache-Control: max-age=0, must-revalidate

Content-Encoding: gzip

Content-Type: application/javascript

Set-Cookie: HMACCOUNT=6FADA445C99D5747; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT

P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Connection: Keep-Alive

Content-Length: 7381

Date: Thu, 27 Nov 2014 18:41:41 GMT

Server: apache
...........(...(function(){var h={},mt={},c={id:"86df868dfedf737b34b18
8c8542623d3",dm:["eoa.intra.baike.com/site/tupian/channel"],js:"tongji
.baidu.com/hm-web/js/",etrk:[],icon:'/hmt/icon/21|gif|20|20',ctrk:true
,align:1,nv:-1,vdur:1800000,age:31536000000,rec:0,rp:[],trust:0,vcard:
0,qiao:0,lxb:0,conv:0,apps:''};.:.v.6....4. ..LI.....}...m.6I.....H..#
.2IIv%....WIt....X....f.....(3v...,...M....3.c...........z.t.u...|=.i.
F|.{<..}.....Q....8...e..@8......~...?..U.....9.DcT.Z.k...K......&g
t;.D..3..AH..=g....x..v"D./}'...}.K.Hw.s"|o.ao.. N^.Y6a......cs. .../=
..s....q.rjQW[-@\....:...%.........~(TG.....a.f:.=.A2.".K..Z]...8.~4$.
...^..B4.2........F.. \...D....Y........<U ...qX*.y"..7.......U".y.
-.^x/.f*Q?...t.fu....k..~..M.w.Vw..iC>:...r..P.D..[VQ..@..@`...k.F.
...i.{.t.D..."&......{.;B.t.. ..?.........{oy(...b]n.. .@. ..XI[.M... 
9..R[..6..KBX.z....y....=..v5gd.Um..PX."K.W.f.F.c..`'q..$.n...yfOTG[.*
..3.....z.Dm...%.a.1.j....r.._}0.H$C...jX".x!.F....7..(CX......D3q9.^ 
..=.3.....;.g...a.5........-.b....$.......p....(,.m4Sm,..pQ..........A
*... ...{.xr.L..;....0B92n...w.Y4....,...Z....)...zV.:7../....B.Bm...*
v:N.c..kj.vJ%.K.....G....@6....;A..H`a...;{~.773..[..H.)`..ns0.N.P...1
....... ....t....B.|.l{>..9....n..O<.......Fc.D.h.D.L..xUB..n.D.
*i<Ol....i....XO................~...n..{y<...J...Y.m......C.....
D=-..c:.../y...*.t.p..}.}.G...1.B.7....)N...s..va..DqD..0..M.Y....S8.`
.n.........5...:.....lF.te..f".....qt}M..x-.....f..K.M#.3#v....,..#G.~
.Fo...!f>$...H.~.O_...A.....;p.c\W..E[..0....8.<..*....k..B.<<< skipped >>>

GET /hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&et=0&fl=6.0&ja=1&ln=en-us&lo=0&nv=1&rnd=1868957173&si=86df868dfedf737b34b188c8542623d3&st=3&su=http://VVV.aawgg.com/pp.html&v=1.0.70&lv=1&tt=äº’åŠ¨ç™¾ç§‘ HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: hm.baidu.com

Connection: Keep-Alive

Cookie: HMACCOUNT=6FADA445C99D5747


HTTP/1.1 200 OK

Cache-Control: private, max-age=0, no-cache

Pragma: no-cache

Content-Type: image/gif

X-Content-Type-Options: nosniff

Connection: Keep-Alive

Content-Length: 43

Date: Thu, 27 Nov 2014 18:41:41 GMT

Server: apache
GIF89a.............!.......,...........L..;....


GET /hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&ep=2234,2234&et=3&fl=6.0&ja=1&ln=en-us&lo=0&nv=0&rnd=1103922994&si=86df868dfedf737b34b188c8542623d3&st=4&su=http://VVV.aawgg.com/pp.html&v=1.0.70&lv=1&tt=äº’åŠ¨ç™¾ç§‘ HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: hm.baidu.com

Connection: Keep-Alive

Cookie: HMACCOUNT=6FADA445C99D5747


HTTP/1.1 200 OK

Cache-Control: private, max-age=0, no-cache

Pragma: no-cache

Content-Type: image/gif

X-Content-Type-Options: nosniff

Connection: Keep-Alive

Content-Length: 43

Date: Thu, 27 Nov 2014 18:41:43 GMT

Server: apache

GIF89a.............!.......,...........L..;..

GET /js/LAB_0.1.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Dec 2014 20:07:12 GMT

Date: Wed, 26 Nov 2014 20:07:12 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 2787

Last-Modified: Tue, 01 Jul 2014 23:47:18 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx173:88 (Cdn Cache Server V2.0), 1.1 yfdx33:0 (Cdn Cache Server V2.0)

Connection: keep-alive
...........Yis.8.......;..b.rfw...xu..-...$....EA.c..y........$.8....*
".F..........v{...A..~:..Pz. .it.I..J.._..{....EJ_.h.....].......2...`
.Hd..O.]6../.D4^.x.~."...C.M...$CoL..7..!.,..@F..].{qc.....Q.;.>%b(
}/.::........L>."...8.'"......a.-...R.X.3...?..,I-v......^:..9o.u..
.c.........l.C..Y,...... t..s..n..=..u{.S.. . >.~6.Qj..7.l.......G.
....y....P..Lp.....{......S{..T....Sy.....{.....r..m....E7.b..Uw..^.E.
..A.(-0...v...(.T.....*...(..y......'[email protected]},e(..b...V.d...."...V..d.(
..4..`%p..o^...,#.s...`.....ZM...4.$..X.Y.5~.MP...`...K]..........'..i
f.uR...6.D..m..R")]K..:)..2.......`..d.%m.......&....%w..eQ...H...d...
...m.}...4.v......`8.H.Iqmi....!..#..%@D.wn0...)...t.aG*(.....8.V...o.
.y....n...... ...W..w[..a...~s#b.A......?..Q....~.8.,@.I[F...... w...F
p...L........|9_."...........lb...q...F..;B...[$n.u...B41....%./.V..
. IE$...Ry..^..r....T..;r.... .<..;.U2.1..e0.2K......%.......g)F...
b......y.ivK....l...'.........8.../...ugc...L..%.....7....G...P.......
- ....=..I.....hd>....~...F..]C..D....X.e.(.VkiC...gS....n.......G.
.qu:<J.....0.P'........U...;1......d!.._...u....n$2.}..|.......f,DD
...K.-..DD......O,[email protected](.`.....Y.NH....Qp........H{..C..
 `}..J..5.7B?.2..Y...1....U..?..9.......L...s...h& .....C.Hp|.#..Q....
..?W..#nYUUMH...J/[email protected].. .?...'.
........W....Lh.q.....{.g fU..QT...k......J.......~.[....$...9.W..`...
..O.........5.]K.19....@{e..Y.^.V..d....U=..5o..........s@sg..........
..7c<..>..C..h..........QCt.j}.:..7hG....B.lC.9.sB_..5....-.<<< skipped >>>

GET /csjs/_/girlfall_5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Dec 2014 20:07:15 GMT

Date: Wed, 26 Nov 2014 20:07:15 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 12124

Last-Modified: Tue, 01 Jul 2014 23:47:36 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 lydx175:88 (Cdn Cache Server V2.0), 1.1 yfdx33:0 (Cdn Cache Server V2.0)

Connection: keep-alive
............iw.F....WPH^..!J...4)X......m........H."...6...>...(P..
{f..I.P....[%.|.L..X.y8..n.u'....D>b....:z..EV\W...o..........|>
......0.....<..'Y.f.-.eU...=.../2. .u...`......3.....rRM.N/.~.^E.4}
YU.|t].$....._....l6...X0...$..'Ygq......qy.L.":......Y.I.2........._.
....?....iU....U.[f....-.oV4...\.]............(.O......~.....s_N.I<
...`..Noa.<.../`.E'...`8;...^/H....2.....2..q..-...p<..~......t&
lt;..id.......c..:.....e...q.....u.....?..^...=C./..V}....f.2..~.....N
........V.V#..Dzz4...`d....tdU.';...qF2.....m.......r1..l.~...P......m
x..-pO"....."9O......v..C...>.....-x.4....g7...........h...I....I4.
[email protected]~0......i>.(..>.2..M..fT........l...,..O.......7.Ny
...G..,.....W.nW.B[^......<t&B..aJ...{?q...y.....-.e........A.PU...
.........l..J/.....0.l|..=L...eX.N..i==...Y.<_^yA8.O..8......WV....
fY..).Y..~..../K..U..e......f.2z......U.<...?.......~...M.2Af....~.
/.....Dy....5...P...|....u..gYQ...q....0./ .X2...,:pz....i^.rj..Z@r...
.j.U...y?...,}..^..f.....M..0.'.,^.E.J..........a......D<...jJf....
2..tEg......^[email protected].|...&..$.1..l...(....k.C.......)... ..C...
........pd....e...=..Y....}...Y.\J..Nu..x.D.\X.$x.).._.i...\\*63.N....
...9..g...$....N....[A..fs'\.........N....O....^..j.u..u:.:...K.a..a.E
7...=(`[email protected].... Q.....YQu..zy..6\9....B......%[ .:.E...6L....H..0.....
....9...?.....<0.t....l.H.g"...$...q.a:<D.\v....N.!....?W..t....
...j...%.Y.7..o..".'w................~.*...4j.tv1K..qi.....^T.L..S.[9.
.......d.3yQK`..4....^$.<E..8...J....).&.j...0../.E....j.._.G-.<<< skipped >>>

GET /js/s/iwt-min.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 21 Dec 2014 14:40:49 GMT

Date: Fri, 21 Nov 2014 14:40:49 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 1531

Last-Modified: Tue, 01 Jul 2014 23:47:13 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx175:8080 (Cdn Cache Server V2.0), 1.1 yfdx34:3 (Cdn Cache Server V2.0)

Connection: keep-alive
...........V.o.6..W4np....v...l.......I....P.%....m........i;..8"y<
.>~...h.....s..m?rb..v.....D.....U."...0.....mnZ.P.1..vSB..!...6.}9
_...B.e..U^M.mR.....s..*A.....p....C0......e%.*..w;.......f..w.z"..C..
.V<.{..VRW...Zp#...m.`x.f.p.O8..d...g..|......F..W\..........,u^.,M
(......<.....2....J.;..bi...ryY......I.`.1..... ....nP.....Tr.....c
B.}D..\...x'W.S..2.M..Fj:........_.Q8..l.....A..$*r)x.".....NZX|...j:s
.T..Z[...>#..,_...h..~.Vj]h..\.......R.{.....'H}...j.....p...Si...P
......\..U.4...lR.(.Ve.7^..w.........H...*N.7...."k>t(...^>".}@7
R.2W.T.E7..!..]F.....C........<l.B~R...K....[v..h..Q!Cg..&.3...p;..
........I.)%C.{.2.B.=.W}>.GM>:k..9.d..D........G.....k.99....X).
....FOn4:.]gEx.5......B...>.{...OL.|...Q.K!dU./..5............*u...
.........Z._......h..u.............&q!...0.y"'.......<...%m..1}a...
...........?..5......L..Q..I..T.h8..n...,.......|.....J (.?$..9.;/T...
T....1.nsG~.;.P..#X......}s.........k5...0...Od...p..{.....@ .2_.J.zT7
>...T.-..|4.9Hww%X..`..`^.y......R.Ve.RP...P.......T..G.l...<...
i.%..K.y..I|.Y..&.......7..^_...;....t.B4E.".@.....:...._.1..M-.K...eX
.{...$a}% d.......i2c....'..24.8.:.........m.M...2.Q........QX...GZ..a
..:y(1..F#............t...<.:...CU.&.a^[email protected]......
...5W...d'... `..~/.R....?. l..X...Mao8O......BQ...h.!....BA...x0x..B.
.f:../.mK;.w8.i.lM>..]mv....9X.kj......oP8t">L.V-.......6..Vo...
..i..'..3DK...)*..\..2 ..."\......'.O-..........J.Pg........l{}.E.....
."....D.Z...H............ .;........].l.>[email protected];YC.`y......<<< skipped >>>

GET /js/s/e6u5-min.js?101016 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 23 Dec 2014 22:52:28 GMT

Date: Sun, 23 Nov 2014 22:52:28 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 969

Last-Modified: Tue, 01 Jul 2014 23:47:21 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 2

Age: 1

X-Via: 1.1 lydx175:80 (Cdn Cache Server V2.0), 1.1 yfdx32:6 (Cdn Cache Server V2.0)

Connection: keep-alive
...........U.n.6.}/..p..K....C..j.l.]l...iR..E.....L.$e'.......q......
y...9sT.J8.U'M...Ts[Q6.q.).rHB.(>.%w....*j....v.....U..M.m...2..R..
{.mA.&.an.....B$U....J...x...t...v...a.d.n....F6...6.t/<;........0.
....s.1..Gg......}...j?...H.....M.yZ.Q'0.5%...-o.n]...h./..q....y...w.
MQ.........`.3..5.S.....F...Z}.wmj.........x...H..0..n..A.....A"......
.%.$Y@.)..... .l-..~..o./..k. ./. [$.I.E;.."1?{.bL.l.,O..{yuA.U.9.....
.s=l...t7.m3..T%.....^.l8..........z:.......'A.......=#....P.N....Ul.q
......oW._..).MV..SBXd..9.....vz...g}.L7... C.:....(.4.%. ..N.D.t=.J..
.....;.g.l..#..MX.w.'...`b..f...p.g.U.4..&c....B......]~...k..@^q....o
FY....-}..Z....................P/h......f....$...`...YSk~./.....:..af.
.!..x.-k..<.g......c0.........Bl.0....<...*...U...,./....r,D6...
......N.....o.0......FS..W........~|.......T..95.<rO.$....}.#......
$....Ff ...I$T.FU^<.I{.3QS5$.,.P].M..P...a...Xw^.:....|Z.......o...
.*.3..~..m~...a3........'s%.0lA=.. ..^.m.6..z.5...H=|..m...oQ.5..?....
.=._.....

GET /js/mootools_MIN_1.4.5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 24 Dec 2014 21:54:15 GMT

Date: Mon, 24 Nov 2014 21:54:15 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 35358

Last-Modified: Tue, 01 Jul 2014 23:47:18 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 jq50:80 (Cdn Cache Server V2.0), 1.1 yfdx34:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.............{.F...W$...F.%9......-....gcg..b..I..E../.X....}....r<
..<gwb.@_.......q.1...r.....bV.W...r4K........a.......(F.F.....}..?
...c.?~....n........;8...?.dyv...?.~.1Z6...V.J...I.......}...4./F...4.
/........O..e1.....r..........2...|......5....|<7...........Z}.....
.....y.8...s>G..fX..$...r..f9....>.....|....e'.F..n6...../....e&
.Dh.2.*.[@.).-QA...,....E..I.Z.g.l.. u.(Z.U.n.3...l..y.I.D...;/....z..
.(Gy<..gi.:..P!_..Y}.M1.b.{^.f..7....$....0L..|.Qa%.t.}...!>..I.
>..r....b.~^~.O...q...O.........}.D....}.*f.j^*..yb`|3;.....3..z^.-
1K.."/...1Q{....m.^bm....!.....j ...2......E2...V......a6....i.)..AI.!
.D..-.IV1k%...u.......7..Pd.fo....I...D...)..k.[..)...q..(..... ..5.(.
..9.....t.V.[Bf.....S....L..E..@..`n.=.5.u..4o....vwQ.u.....z..f.1.|Yx
D.`.,#..<M..`.d..v:[..N\.....(..P...c-......4.....Q.......e..].q..5
p.K.Q..h..H.C....-.....0.V..I...`.........?.@d.] . ....F.l.$|ue.n..'..
3..9x.]w.......S...e......gr.n.....i...E/..!.......2,... ...0....C.[..
.....'~..r.w<CW.,]...n...l..z.....t.......j.f..7.v..mYbV..."1.6.]K.
....V'. r..V.. v^W...TkV.L...g...I.v..*...}......".Y.%.#7.q.C.4.&.wvrK
X..V).m..9....b....?...n.f.b.x...].f.........T.x(...p......! .c#...}.M
-...G3...dS..&...q....k.K....C.I......}.[..ZI..Ik..].`zx...?q.k...pz .
@.6ok...2......J....|m....dt...Y...'.....'X.....s..#X4.....C...fk."...
.P.e.......1.DI.q..%.....ya.f2DL........d...b:-.A;..%..d1.....".....7[
Y..gDI.. .=..6.G .,..v.,.Z."..$LLA..M.5T.--.....M.$...M.......u.N.....
..s........si..X.....gt.`.e...Q.....<}./.P..Z|.:h...u.v.u......<<< skipped >>>

GET /server/website/CommWebGameSelect_ad.js?sGameKind=hyol HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: hyol.qq.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: nginx

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Last-Modified: Thu, 27 Nov 2014 18:41:31 GMT

Content-Type: text/html

Content-Length: 178

Location: hXXp://huoying.qq.com/server/website/CommWebGameSelect_ad.js?sGameKind=hyol

X-Cache-Lookup: Hit From Upstream

X-Cache-Lookup: Hit From Upstream
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>....

GET /act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463 HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: huoying.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: P35_DK

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:29 GMT

Cache-Control: max-age=60

Expires: Thu, 27 Nov 2014 18:42:29 GMT

Last-Modified: Thu, 27 Nov 2014 19:11:31 GMT

Content-Type: text/html

Content-Length: 3503

Content-Encoding: gzip

X-Cache-Lookup: Hit From MemCache Gz
.............o....T...8..A....N....X).B5M.....}..w......ch.5k.. [email protected]
...4..c.7m.ZUC......}.}?.....5.l.w.....}..M........H4.r.....;..R.r..X.
~.m.,.{....".tbd.R.(..*.L....TC...*.Q(... .....y`.....b}...}j..I%.h...
.":.I.CR....?W..~t....,)$j/........YY.9.6...>..........{..o.{. .x..
....\.........S_\...cd>[email protected]..=DL&.{q$....
.>v..wn2.|...|i..P]eU..u?..o.].e.0..W.G..W....YL.....{.cF/...../..q
....{....z.q...WoDW.......................Wo..n...bt...w..._..n....Fo.
~8.|:zi........d.$w..._^\..`...r.......[.c.gz.&.E.....3.........|....k
Wn?....3.#.:....T*..b1....#PP.ZT....hU..RTR*U#*..bgTLG..Q..d.5...E..^.
ZIR2.....I)e..&.z.FA&.Y.J..]...Z...#]...#[.].....=..M*..1C.d.R......4.
.....d..,).AI0.L..).eS..H.t#...(.B`...2d.......1..d-C.*..u..1DI.......
Y.(.U-....V....r.fDu.hu..K.#...T......P....meA.C\.b.2...=H$...dh@...$K
F-#J.@..$HzE..LAV..>..-.U..I.M.N..!.!....1]:N.ab (.K..gT..L4J.>.
._....u..u./).......UY...d..@%..R-...%A...p.B...W..j..d.&.mT.7........
I$T].$...;~.X.W....KDO.U.F.(.y#.!.S.TZ#%.%DK..J..J..z6.......K4D....T.
eI.e.#]{v.>.}O..#;....... .1...V.Il...'.j..J4^....Z.....(... .Y.XR.
....L...m.../.T7]...h.......f*..(..... ....0....Oj...e.$..l.:;..jv.IA.
AI..JuY....?Sy(..qL..S.}..o  ..E........].e..d...A...dpW.G_V..IW.f....
.P.d6l..K.bpn.=.....[.l..*$......\.%"4f,.Q.S.......R7......p..1..L..O8
'...(i..=&.. qb.3[.X4y...........%......-.X...Ta.....).....hU;...O ..,
.O."....~Z\.E.....6/.{.....!&P...n@@.....,WU...;q..#.%....5R.r.x..me..
R.8D......E.0p).nF.)..4....a*"b.F.[.<.....4..?.&p......#L,F....<<< skipped >>>

GET /comm-htdocs/js/fajax-min.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: huoying.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: P35_DK

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:30 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:30 GMT

Last-Modified: Fri, 14 Oct 2011 09:01:43 GMT

Content-Type: application/x-javascript

Content-Length: 3118

Content-Encoding: gzip

X-Cache-Lookup: Hit From MemCache Gz
............ks.6.....HF.-..i .......p&N..Q4...d:.....#...>...$....!
1.X,...R.|.EU.g.M.yY.....b9O2..........F.Tf<.a.... ..2.......d!&..&
lt;/. ..q...... H.M2.#'.m.$....9y...Z..N..n...,.H..[.j]dc.BY.....M....
../d.9Y..x.............b.!0DH.....@.!.*...I.A....D....R..Y%.....8....G
.........\.0...g/.........}..........B..k..2I..1..p..Y....,.X....$....
........*.......,......,.....DyV.5.......9ei.4.ZlS/X.`{.."..._..x.../8
.(.gW2..U.Wyu...........}=...Ey,.......|..3".KZ.?..?..DU....s1...FoE.@
.f..KY,d..eYye..........l.=........^..p..&.....hll...5..[-...X...g>
?q7.<....%8.....?NN.`0p....x.........!_LJ./sC..*.o....71/....."..U.
M"GGG............v........c..d.....''...l.......F..%U...j..?..mR.3.BF.
...o..........;..\#)?.a...6...._......4...iOr.......%e.....h"...}d.C.y
/..zYm..N........].m.....lgB:..!.......}.JB...0..a....Z...;.j......d..
..F2.....u.T.M..Kp.^M.1;..p.<..-:.8G...w....=............&6CM .Sz.:
.dYz.0I.i..2...2).... .Vm..,.<Hg..nh..($.Y.........xd.v.........K.,
.A.*Ghb.D...%...J.0.Ap. ....D..SYI....d;V.'9Y.."....L .../d%.....D(,..
....g...f...dI.C*N...xu|u.......,Jt`..$.._.E)..2!.A^{....UXbe.....9^..
.9...?......c6.'.tc...13.j..m.5%.J.."...nZ:.VP..I%'....m..f.)-.:....ZP
O...^[email protected]...<_q1P..l].w.Ny[./...$.Z....h.GFM.q.N.
9.h....F!...Am..........*R.3..X...1..^@.. [email protected]_f.
....:^. .x.O............:z..^[email protected]..{b...]..'..
..8.B..A.........*!.4..aY..).S^.g...>..o.]J.AK)...J..,H......@ jG..
..P.$.{.....P.Z...xP....Y..xf..).<.a"2.U4i...*.U-.#.aLF.L0 Xz..<<< skipped >>>

GET /webgame_login/website/styles/config.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

Host: huoying.qq.com


HTTP/1.1 200 OK

Server: P35_DK

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: max-age=60

Expires: Thu, 27 Nov 2014 18:42:31 GMT

Last-Modified: Wed, 26 Nov 2014 02:51:57 GMT

Content-Type: application/x-javascript

Content-Length: 776

Content-Encoding: gzip

X-Cache-Lookup: Hit From MemCache Gz
...........U.K.a..?...p S.=n..d...X...D.<.=.......f .c.Da..6..Zh...
Y.\...(.`(5.......Q`.......~..s.*...?....]. `vr.#...`&.......)...1k.W~
n....L.....^...`..l~gq.t..Im.............8...8.#I.& ..;}......MEk.}XB.
.....6.m.n.........../..z&....B.Vp.H4...j.BV.D...O.{.....>.,/vL.2..
.....j.#..UU/.......(sA!.H.^..nI..V...E1<.I..!....-....~.I..u......
z..I},}.....l......./.u...&..S../...!..e..|....z @..{[[email protected]...
..~.P0.QZ8.Q..ju....WJ.....l......a.n.oW..|....Fe..5.F.......d]..8&...
...tf...Q......$.Xr6....d....... ..?.m.....gdDu\.....p...j...t;.5U1>
;..W.......QH....q2..::..........x.~..C..t.!t.'r..Y\I....Y.A.....eR..:
9Nx~_......CU...J......R...Qo...J\...m.p..M..5..A.......n....v...l.n@.
0.... ..D..4..=.8...O...x..K.....zt|U.a.C.....O..........6..6s........
"..6.hk.............

GET /css/index_MIN_12.30.css HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Dec 2014 06:58:01 GMT

Date: Thu, 27 Nov 2014 06:58:01 GMT

Server: ngx_openresty

Content-Type: text/css

Content-Length: 19012

Last-Modified: Thu, 27 Nov 2014 06:56:37 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: keep-alive
...........}.rc....`..ak....;c~Hm...4..4...G0....n\h.d...'.......6....
..*.r@.,.....&..Te.=...n7.....r..:.L&......v...]=n..............v.Y...
..x..kw...S;..N......w......m..6...7..4.o.Y.}^-.......j4>.>.t..:
....v...m.....l.{X6....u{.....k......!..x....y.l.h....J....7...,.7....
u....\?lv..b.....fOs.YsF...w.x.i2..C...]..-# .j.m.\.....AG._.J...]?4..
b}w5..o.w.{.c..n.......l............f..Y_.........R^X....i|~F...f...6.
x....e......}..[L..._...i/...b..j.z.e...Y.o..^..:[<...f.S..G4#E..E.
..bp......<.y......n..6..D.F.... Y..rA..(#Rs5........q4......a.j...
.o...K3Q..M_u........2.2...R..b<........u.....K.v4.....J..q....%...
....%....^15.........)vp.i.g.......:..Aop{..6....q.^C......^......v...
'.F.I|...&F.g.....76...."3L.4.....Y.......`....!...L....>...A}...Ow
.............vKVM.....F....~.....k.2....1....4.......f.....1..}...?k..
-Yt2./"..{h..,A..y..|z.9.b.....WK2.Gup..p.i48../....f.p..Z...g./..o...
....nV.3...d.... ....s.....?...w..s.b.7........(..0..p.oH8....E....m..
..1.....eT`..o...}z...W<..8...k...[`...u]{.k"D{\...]...E.|G:..EN...
..j...o....5...D7...bE.z.2......E;.[...&9./.../..%.<.Z...J1...Y...'
xG..4J.....u=z.=-=.N@.?.r...&....W%H..B...........}.>....O<....5
pk. n....ctB.BX..].o..).]...=:.$}...0..fTb......q1.A.{.Z._...^_#Yg.;.;
..K..w.^l...V.{......e..<...?j\...7ww....".{M;..K.(..............4.
v....<<..........V=7.Q.|y.b..`.qy<s.D.....?#3....h|1.1.T....=
......U3'..v...T0E5.}....mf.uK>.j..g...Y.......>~........g......
.m......^.o........|.Y.f....`~K9..w....F...)...,.r...I...|........<<< skipped >>>

GET /css/base_MIN_11.36.css HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Dec 2014 20:07:11 GMT

Date: Wed, 26 Nov 2014 20:07:11 GMT

Server: ngx_openresty

Content-Type: text/css

Content-Length: 15951

Last-Modified: Tue, 11 Nov 2014 06:18:53 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:0 (Cdn Cache Server V2.0)

Connection: keep-alive
...........}..#I...p 1..... /&.0U..i......BOD..&c.....#..z...G.......h
.._.Nw.#HfW...].......m....j..lf......m/z.E.......d.......P....=..V.y]
-g....,.....n.....=;...dY....aQ...a....]..h.f..r.P.G..m9....Q.._~.o..Q
...x..\.~...e..r.Y..7..w%4..~*......i.....o.._.....f.............m....
a./n.].>.......P...~..,p.r}.!.r_.^:...........I1/W........n......R.
..M{.=..jW._....d..U;.....Y??U.C=-.........lY.O.w{.s....j.R....66.....
....B.......^/`..=.E@T$.F^\3....>-..~..g...C=;,F..G} X.V.q 3.~l...(
........[...p.../.v...n.Y.;.....U./..Su...........oq.o.:...W....U..<
;........)*.7.m..|(>......1...}1]V..yV.....h.YW/@.........L.)..,N..
[..}5.//.s..h..2.n.k.v`%.....aq..t..8.bVM7..Po.<z..y<,.u..-=..w.
...85.1...n...^..,..i.*./u..^......^co.1....a.F....__..=1/..j=..m.....
..`..{@&.l..../.]5....tx.....8.X....p..Q9..i_l..J.w.....m......@j.....
).L..........z_O.e}.4Z.WV.{[email protected]!..3.........}.A..o..A........
.4.g..n.7/....C....L........v.;..B.m..xR...u.t.t....n.5.h9...<T.;..
..y.lG.7..G..C.]yOQD.#/.........T..L.d0..f.4.......H<.Y...1.7..w...
Y.......A.i7hh..dL.....f..........'!.&)...$.i...I.^.8.Dt......O..KW..w
..........g...../.....I.......9...ck...].pw..iW-A^>U.-.....zo....X9
hF.....w.......1.t.Ck....*x.. $(...S.}.I..1A...K......u.l-....Z.......
.....l.....:~8....E..F..`........P.@L....>...f..)HZ<]E.%%....YQ.
P....\.uu].(.1y.....m...o....V.?..g.u...~. ..{..._p.2....`..=.:....:..
d......j...V..h...0....G..^N..|Bj?l........Q.Nux../ir_HJ.....kT@..%...
.P..=..Y.F$..E.&T$,..".l,M....[..{..XeD.....W$..O......tx7...!....<<< skipped >>>

GET /imges/live2014/logo-v5.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr1.6rooms.com

Connection: Keep-Alive



.0..-..o..4...1,Uh#^;_....n.<@..[a....f..a-I.w..."4-...r..I.XvF....
...a....k.9.l..U%......j......o.|..CG.L]........R.c....C..n.l.........
......Zr......i.f....]..A.XL.:.......4..._7..MG4=Xw...jy.........yQB.;
!..1y.i...X.G...\wQ<6.S..6Y..{.g.S..5a......3.Z.#...d.a...x...N.wI_
..Fy.`}....-.K.Qee.C.e.{.)......c....!Q..x;.E........|J.&a............
z..IS9ER.)M..d.y.^..m......7..L...... ..a.9M.R...A...^....0Y.........[
.[......M0V...../.M;n...!Z.o.9. ...!.....:l.c!.4.B.....#l1....-X.a'..b
...O..r...&.%.o.....!c.-&..j9N.....n.H... ..p...`.S.o....=...[%.......
JY.LN...;.... #=...b.t....nJ...v....k....?...p8....>G....IEND.B`.HT
TP/1.1 200 OK..Expires: Tue, 27 Oct 2015 21:25:45 GMT..Date: Sat, 01 N
ov 2014 21:25:45 GMT..Cache-Control: max-age=31104000..Content-Type: i
mage/png..ETag: "239180955"..Last-Modified: Fri, 25 Jul 2014 08:52:48 
GMT..Content-Length: 3162..Server: tux/3.3..Age: 1..X-Via: 1.1 zjjhdx3
8:8106 (Cdn Cache Server V2.0), 1.1 dls21:5 (Cdn Cache Server V2.0)..C
onnection: keep-alive.....PNG........IHDR...M...#.............tEXtSoft
ware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket
 begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x=
"adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/0
6-14:56:27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/
02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM
="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xa
p/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/"<<< skipped >>>

GET /imges/live/IMGSRC/logo_foot_32_v3.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 14 Oct 2015 22:16:28 GMT

Date: Sun, 19 Oct 2014 22:16:28 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "4015026177"

Last-Modified: Thu, 29 Nov 2012 09:21:03 GMT

Content-Length: 5529

Server: tux/3.3

Age: 1

X-Via: 1.1 zjjhdx33:80 (Cdn Cache Server V2.0), 1.1 lasi18:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...c.........<..'....pHYs................MiCCPPhoto
shop ICC profile..x..SwX...>..e.VB....l.."#[email protected]
U....H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH.....
.H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d..
...ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G...
..v.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f
.."...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.
k.[..V.h..][email protected].<......%b..0..>[email protected].@
......qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O
.N....l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A...
...........a.D@.$.<.B........A.T.:.............18....\..p..`.......
.A...a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q.
[email protected].]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7
v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'
.._.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$
R...J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/..w..L.]z.x
..............e.m..`.`..Y.............G.G.#F#..........d.........~V.y.
s......K.X.........y..r....:.#....y=......}.........([email protected].>
.|../....%..3... cHRM..z%..............u0...`..:....o._.F....IDATx...M
p[W...W2$..yt.(.).!M....E....~.N.[.h.3%.......,..a.d...l(mJ$....q$....
..0.0m.R.i...Vu.w..].OO.K.m:L....=.{[email protected]....,.
...6.d:......B.....z..0.6`.ti.k.V.g(.k...............9.nP...8.M@..<<< skipped >>>

GET /js/jquery-1.10.2.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 93107

Content-Type: application/x-javascript

Last-Modified: Fri, 20 Dec 2013 00:51:54 GMT

Accept-Ranges: bytes

ETag: "07114ad1dfdce1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:40 GMT
/*! jQuery v1.10.2 | (c) 2005, 2013 jQuery Foundation, Inc. | jquery.o
rg/license.//@ sourceMappingURL=jquery-1.10.2.min.map.*/.(function(e,t
){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e
.jQuery,u=e.$,c={},p=[],f="1.10.2",d=p.concat,h=p.push,g=p.slice,m=p.i
ndexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return
 new x.fn.init(e,t,r)},w=/[ -]?(?:\d*\.|)\d (?:[eE][ -]?\d |)/.source,
T=/\S /g,C=/^[\s\uFEFF\xA0] |[\s\uFEFF\xA0] $/g,N=/^(?:\s*(<[\w\W] 
>)[^>]*|#([\w-]*))$/,k=/^<(\w )\s*\/?>(?:<\/\1>|)$/,
E=/^[\],:{}\s]*$/,S=/(?:^|:|,)(?:\s*\[) /g,A=/\\(?:["\\\/bfnrt]|u[\da-
fA-F]{4})/g,j=/"[^"\\\r\n]*"|true|false|null|-?(?:\d \.|)\d (?:[eE][ -
]?\d |)/g,D=/^-ms-/,L=/-([\da-z])/gi,H=function(e,t){return t.toUpperC
ase()},q=function(e){(a.addEventListener||"load"===e.type||"complete"=
==a.readyState)&&(_(),x.ready())},_=function(){a.addEventListener?(a.r
emoveEventListener("DOMContentLoaded",q,!1),e.removeEventListener("loa
d",q,!1)):(a.detachEvent("onreadystatechange",q),e.detachEvent("onload
",q))};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,n,r){v
ar i,o;if(!e)return this;if("string"==typeof e){if(i="<"===e.charAt
(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:N.exe
c(e),!i||!i[1]&&n)return!n||n.jquery?(n||r).find(e):this.constructor(n
).find(e);if(i[1]){if(n=n instanceof x?n[0]:n,x.merge(this,x.parseHTML
(i[1],n&&n.nodeType?n.ownerDocument||n:a,!0)),k.test(i[1])&&x.isPlainO
bject(n))for(i in n)x.isFunction(this[i])?this[i](n[i]):this.attr(<<< skipped >>>

GET /images/logo.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13309

Content-Type: image/png

Last-Modified: Wed, 27 Aug 2014 01:17:51 GMT

Accept-Ranges: bytes

ETag: "9317e3b894c1cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:43 GMT
.PNG........IHDR.......i......Uu.....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /pic/images/ios/20141024091440.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 225229

Content-Type: image/jpeg

Last-Modified: Fri, 24 Oct 2014 01:14:40 GMT

Accept-Ranges: bytes

ETag: "56128e327efcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT

...."%Exif..II*.......................................................
................................................(...........1.........
..2...........i........... ..............'.......'..Adobe Photoshop CS
6 (Windows).2014:10:23 16:30:03.............0221......................
..........................................n...........v...(...........
........~............ ......H.......H............XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /UploadFiles/Game/s_img/2014112511053395.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 62135

Content-Type: image/png

Last-Modified: Tue, 25 Nov 2014 03:05:28 GMT

Accept-Ranges: bytes

ETag: "6eb69aa5c8d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z%......
........u0...`..:....o._.F....bKGD.......C......pHYs.................I
DATx...u..U...<<.V..w..{6..l.......T.....Ph.P..h....P.....[i..].
L.-|>........d2........3..............k.........[...._...z....=..M.
..k..:..^.i.[.n...EwxE....&..K..X.h..F..5.1...Y..L.u`J...j20.&.cjs1.2.
..^t.{.V.............%..(.FYQ1...Q._...r...!....%...U..S...N.........y
o%l.rXEdW..eV..J.=.0e..0g....le..ScF)t.B.....T.(.......=..zW1..e......
.Xfp....:b^.^..".2Jd...2..G.....u4..).B..=e...W.Vo5.O........1.\~.....
!....sj~M/l<...?..m......j..........`.V..=...F..U.......gA}@FiK@^MO
@FIs@fi .........A...........].....\......._.........zM.[z.........6t.
..].5.:.n.cU..W5.!.j.bA...........NL.M....L......FVecx...Uy..*DkY...sQ
'.*.BY~>...QRT...R..T........).BV~.2. ..X....-'T..,._.x.......[N.e.
...I.X[N.\&N.A.pW..B.8.~.....e..Fn.....V..W.i..X|.x. ..T.$?...}...D~..
.X_..>CF..H..0...U.5O....[.G^..`.}...{*.o.......>..U.$?k.o.S....
.g...@.......}$P....f9u.7.x...2....|.\.} Xm....i..I......{4.7.j.n.GO..
....t.7../.q.i.............#6w...].u...i....V6.qU........E.v*...e..:.E
......u..[...u..QW...B.......M.%.  A..*-(@.....E..(..G~q.. .....*d..".
....5.Z..y..be.K....Y.4.B.t..H...eW*.9..I.........b...|.........G(..`:
...`I.r .e...W>..P%.te...bY..&...>.R....o.,.B.J).)...1....T....L
....e........K...V..m.P..L-2.P"........P8....M.....7........u.>....
..#..0\.k..o.(....4b..#n.n..a.......[...:lhK#`Z....ZMX.f..6'........`.
.F.f4f1%f`R}6..fct..#.s....Q.Eky>...Q[./.aeI..a.JK..Ze()..jU!..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014082515454274.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 22615

Content-Type: image/jpeg

Last-Modified: Mon, 25 Aug 2014 07:45:26 GMT

Accept-Ranges: bytes

ETag: "5419cc8838c0cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.M...........................!1..AQa."2q.BR....#b....3Sr...$C.MEU.5s
.........................................I........................!1..
AQaq.".......2R...B..#br.$3S...CT....&46s..............?.`.....s.Ds..y
..^C_{......:X....I!!N($d..yj..ZV..~m.....FI.gU"."ofjvlF......'>...
.<...?^..Xi..tR.y)e:>k..y..s...C.T.T.... ...9......<j$...":..
....N..##.:....S.(Ym.A..Gn...zD..Y7P..9..#..u..e..!G..}..........#.Oq.
.E>...(Z.a...W....-.......H.Jn1....)..#..U.I..... .wZmk.F....h.c.u.
_.P.t.7.w...=l@K(y. [email protected].....:.k......*.4...e...u.....
j.J....?....]z...6.....p....)f.J^.3..}!).{.......*.He^_..A..X..G...E..
..H....qAD1......\......V~T.I..4h...4...-..6........y.............)>
;7.Q.....mm..;...4../${4.qd......6......iz.?.X......$c.?....E..7...?R/
..}......DP.._{...^%m....3}....P........x..D..3(.wUo3.%KK=6.F...8k.{8.
..]..vB..7;...BGRTy...A.:R.?.H..'..`...`].......#.g,..%.KW....k~$...x.
.|q....."..VY.....J.u7o....w'g%4..../.3....?%._..=]J.@'Vi6.="[email protected]..
XU..eS.;.Te.!....N....M....W....6......HZV..........`...T1.!....N..E..
.B.hJ.}...........}"..m..3O.N.H.Gw.....J..\.......I...n..\.-3.R..u...Y
h.u....y....z.5.5..CJ.g.YQO.. oH.7....-....Kj-.n.o?.....R./R...n;LeA..
...Q.O6.'.J<...x...\2...=C.'g....f.%.........n<.x.............&.
%.'"...Q....&.1.......gGbQ.%I.. .6_x.yE..=....up.(...\.7.......A..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014082514588250.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10203

Content-Type: image/jpeg

Last-Modified: Mon, 25 Aug 2014 06:58:35 GMT

Accept-Ranges: bytes

ETag: "d4894ffd31c0cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.F...........................!1..AQ.."aq.2B...#3CRb...$r..%4Ss....Td..
.................................9.........................!.1A.Q"q.2a
.....B...3CR....#[email protected]#`..9...HZSH!]).9.3L.......
id|...#..a.p....q.)...`....H..#4..AN)...@.!I.0.@."..U ....B....4..B>
;..H,...F.2...5:3...8....z".^.0.1.8...!...*". >...x...Ht....v..kG'.
..B.v.]...A..Q.-F...>m .9{..v.......qY.n. ...K.y{..T?.#..k.....J...
..l....G?..........Eh........we/...H.c../..."...* >.... \$......%.T
..W4....~J..i.:E........Ry.V.P.....E...F)...f.0Mdb....t.f..R..8&......
.-2.J.......I..U.KY.TT...ig.F...u{......::*b..k.....?Z...]F0...i.=..p?
.Z..FU.,....W.MS.E.2..)..O...vv.!.....<T........mG....?p.).........
..w...........S..(.....%.}cQi.....-...aH.0A......5...K...0.......o]5m.
.S.C.<.r.|..'.p>5......Kt.^...%...._j.u.2.k..;..K.}.H.NX>9...
2.......6.J../.....cEy..v?...I..[.vc....B.x...[.)*q.Ma}......../.a..S.
N....I.~b.-.pA.......,..L.!.....).U..o..c..S}.%..&Wb..b..sqN....f.....
{<...x..Z.].../gm.%....4 ...qiB.;k.I}.gMH .v..hY..7oM8.}....e*.%...
.g.k....mu..=......Y..bZ.o..jH...p,(B.g2bb...........Cj4..M..?........
.i.*...V7......)_F......S.6.|~cl..4'.6....y.3.E.....Yh...?.....I..v...
@-......G.....o....?_...1...hK..M..T....d...........e'.h.Bk..n..]..C:.
.._PCe.".Q.... .,.:.D...J....g.F....H.%..H....Rt......l.. ~....U.C<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070514062749.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 11560

Content-Type: image/jpeg

Last-Modified: Sat, 05 Jul 2014 06:06:09 GMT

Accept-Ranges: bytes

ETag: "4414e371798cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
........................................!......H1..m.1.I.1.[CG...<.
.4r0..N...-.u.m..........:.X...2....x2..K.sG....W.J.......|.....p.@S!!
..p....nD?.C.:f.P|...K.m.-.rX..Q39.mm0X;z....sG[...#..L...z.;..R.., ..
.C.,.L]O.;.7*K....6.G..........n.R.....H......4.[.K..........7 .J.#..Q
...........A ........F.U\.}%......".T.S......#..a.....AH..e&."..9p$uSt
.O.%.%...e*.....KN1.k-."z#..n....wUr.R..U...Z!...y..T.......ZE..... .F
|..J. .Xe.....L.K.J..fMz.@|8.S...G...}-....V..K....*.....sw....m.e..sU
.@.`N. ...D/.q.J.Gf..!R^.w.DgV......]_K'lj..;d.[-r..Z]A..-.`..q.=..k.'
.n...*gq.h8..]_.(1....uKu..U.O6.Y.S.@W..>.N.)s.......E.z. ....=....
)..>.hs..;.`.i.y..Z.}.'.k.]$"...U..T.j.W.*:..D....h> ^kc... .N..
.~..qo..3..q.du3...N....bo..6.fK<[...].B.j..~B...r.'...9.W1..wYM...
:.Z.v.-2.Q...H~[.<.K~.(z....u.......~.....x[.V5..5...I.m...........
..P..<.y.x..^..............x2M....,.U@...,....k1.k.......?U.....:..
.K...}.W3..j8....`..>^..B..%..N.xl._\|{.U>oEW....vLu.L...:.7...8
|..E.....m|Q.s..........}UU....*..........................!...."124 #3
A$...........7.d..U.E...>aO..va....V...w.J#'.#......5...Q..Q.......
.F...h.O...gp.[U*.-.....,.......;!..e.fv....{x...g...q{T.z.....T..r.(.
{ U..G.wf...0...9...\..........g.<F....9........Yz|'zV..B.GOJ.y.%8J
&c.M... Y....'......w`...`O..d8......9.G ...^.....pN.1<...1.3.q<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221386220.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 12873

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:38:54 GMT

Accept-Ranges: bytes

ETag: "6a6ba8f7fa95cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
............................................. @....X.;.....H...... @..
 ......d...~^..y.k.).Vh...i.%..t|.....v..;g. ..p&u....._=.x..4..Y. @..
.v....H frXt.~@."...&.AP...j.....pK.B..... ...#.j..t"[email protected].
.rD9L.....P.=.7..c..o.....T..0.J.=......$Z..%.H.Z..(.E...2....x.......
.)\.9........y.7...H.%.C..O......"X\d]?5..J.....]u.S.9......"......k.$
m.d..f.Y..KH.Jc.G8.........[.9%........^.....G6=...;..- -H.*.M .2>.
.fHzj..zlr.nD.4..G0.h...D.h....QP..^t|,......H2........W9.F.B..(..@...
}MU[.#.....E...#%.L...3Gi8=...J.~.|:..O.(..D..&.hme......8...7E.H.[.w.
'K%.....AZb.S..K.iZ,....(.$.E..&..,Z.V.q.I...C.Q..T._d.Z.t.......g...l
f.{$Q....~.9{.U.B....9sAT)."[email protected]^[email protected].. V......9qY..|.e
..<...w....h.-[f.'......p&A.s._/......(RKM..(.C...}).x"...u~...Z.{.
q.%.......`6..:..}Qu..f.z.%[email protected]..#..R.A.....j.6.....&
lt;[email protected]`e..KC..u..X.....t..<&.J.i.....
D....c..;.Y.s...;.;c......9..u....t<...{.ck.^....w\.....*...I..e.9E
...V.L.c/b..%j^>).d..edh...vu.)Zm$..?.c.~Ac!..,ce.>.t...@'....Sk
...m... ....c.A.4MD...#'i.4).a....-Z~U."....HAd..@..... @..... @..... 
... ............................!".3. #[email protected][email protected]
...T%......-c,..ee..wC`.:x.48.b.B...dQ..........X....d........N....jFg
.c.6...Y...2..PD.T..Y.^*...V;.Zy.o..<BW..#.V6..F.o...d.C.....#.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221192310.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13918

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:19:17 GMT

Accept-Ranges: bytes

ETag: "98c5493af895cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
..........................................y.....]O...@..... @.w.:A{.3t
M(....9..Y. @..... @......q..s4..I.w.... @.....Wb.......i....z'..P....
./e.[...O. @....P.....-...........E.gG=.;@;jk..6..[.l..8"}N?.F...!.q3.
z....".dOVqO.......foU....../.}7q.(M4.........Ui-.:..]...L...YtI.Cq...
;.wiM~kS.6.]xQ.....%..T.]..K7.....y...[.../.....R.".....Ig.l.....Z.wV.
.U.6..Mvp.d...........Ob...;g^`....=r_{.......!}..m...=.]...cY...].z..
{.`}.U.....O.c.].h.!.e...V.....ne}.S,.@......(..l.....2<5T.$.......
..t,....h....tr..P'...5j.._.....!.....s.3T..../..>e...`.......2.oJ.
F.s..;6..fA.x...^.5.....^...,..9.........c....'.%...rN.... ......y7...
./......rVV.Z.-nsC8.<s.A.:].Ab....B.?V..d.....].:..7/....6...yq}K2.
}k.i.8.Q..........d.3.jtoXh.Y]ft.ci..XB.q;.66`..........8.......sJ....
.....PWK..;j.&q,[email protected]...,.U.LY....F...e..74.....M.....&.U..Z..!]....~
.;..0ie...1.._.....k....y...U.iho.......D&N.F....[..N........c?I...u.8
......N.....v....Z..Y..JP.f..]...9^.m.Z.M..(..x..9.y..Q..u....5....@..
..e........a...Y..*........vr.....J..I........A..9....w.....\..-U.p...
0.I..yH;..J.......EJ.GB.Q....w..wT).;=.5vp)...n:N..lh.{..../..........
....................!245.#13%0"[email protected].&o.sq....~n?7.....
...q....~n?..L....K..|l.)...\....6...Uh.....;.... I!..Y#..fM......\T..
...g.0..$ldH.z8....xUns....(.r#G...d.#..B.TT......{...o.......d..1<<< skipped >>>

GET /UploadFiles/Game/s_img/2014090914592922.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10017

Content-Type: image/jpeg

Last-Modified: Tue, 09 Sep 2014 06:59:18 GMT

Accept-Ranges: bytes

ETag: "48217493fbcbcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......Exif..II*.................Ducky.......2.....,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c01
4 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:8F4CBC79300811E4AA9DEF99CCD1491B" xmpMM:Docume
ntID="xmp.did:8F4CBC7A300811E4AA9DEF99CCD1491B"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:8F4CBC77300811E4AA9DEF99CCD1491B" stRef:
documentID="xmp.did:8F4CBC78300811E4AA9DEF99CCD1491B"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d......................................................
.....#"""#''''''''''..................................................
!! !!''''''''''..........."...........................................
...........................................!1A..Qa".q..2....BR#..br.3S
$.....C.4DT...cs.%........................!1..AQa.q....."BR...2..rb...
#S..............?..>a|....U..U..\.5..{.......5.8......,...S!4....1H
..cM.{ :.3?Pu.G) ...a.;.$<[email protected](P0.2.s.l...\...U.............
#...0.Y.b...5'.J...................^n..4j..{0..D.qs....A.. ......}u.}.
[email protected]....}'.....r......N/.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081211363835.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14087

Content-Type: image/jpeg

Last-Modified: Tue, 12 Aug 2014 03:36:00 GMT

Accept-Ranges: bytes

ETag: "da6f2d89deb5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
..L...........................!1A.Qaq.."...#2R...Bbr......3SV....$%C..
4cdu.....................................D........................!..1
AQa.2q...".......#3BRTb...r.$C.4D..%5s............?.....$j.F.V( ...5.3
S....wX1pp{i(F>&.._G.......z{..\.e....}.5{L.-...........bq.%.j....O
F..;e3.S.X...jy..O..~4...#.L..P`.......U..........G.C.....z......_.._.
.......#.......=`...-.W..[.Z....G..~4>....g...?.~U..Y#.KHJy...mo:..
...)D..ih..6w...c.v..I.IK.bP0.-;......z.cZ.. .....V.h.0.|.#>.Sj.KL.
G..rl..X.'}..p.;..IK  a.Cf..-.2O .!w..oC_.....Y......_..O....7.w....R.
.0h..e..b?................U...B.j.7.....?..Q...g...........,..OF:....!
'...?.R......g...L.8.E.,....b....JD .9...^B.....US..R5...b..........{B
..N.5X.D...TG.".*... .A)6......m...t.'..U.1...._.=.Vk.zgO..ML.......O!
.B.p........E...8.g...5>.5N.qJ.^.-.p.vW.2.v.p..&..."..'.Q9..l<..
.(pL7..S./..|M...{......W....*..:P.G..[..=e..B....W..WV...%)*Q8.s'....
...J....6.........(.........H...k.4gG..).p......G.7.;w.d.] ...-i.->
.....wp.7....f..[Xl%jO..S.~5sT.4@P .......Cf....nM......>.IN.......
...M.t.m.<..Uh..h......-..]3....j....E`N...y.A.k...MO..6.[.../.p...
Q...S.....C.nO.3.]..`...P.4y..yO]%..d...o...(.i.)......H....h.,-..:...
|O.b...0.......M...y.....LFd4.......B.d.V......7...P~-.....}.....=.c.6
..M.<'....,-'.n....s..|...O.....ISi. N~..pw.<..A7i.E...(X..u<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081122446392.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 15510

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 14:44:38 GMT

Accept-Ranges: bytes

ETag: "409ae7c672b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:07EB1BF6198A11E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:07EB1BF7198A11E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:07EB1BF4198A11E4A838B028F7746D81" stRef:
documentID="xmp.did:07EB1BF5198A11E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
..........................................!1A.Qaq"....2BR....r.#3.....
b.CS$4...s.5....DT.%&6.........................!1AQa"2.q....B..Rbr.C..
..........?......y.i....i....<..&.Oy.h.%D...Vv%..........Xk.=....W.
,.K /..p....h.....r.'%....../..V.....e.......f..$Y.Cn....W.MZ..C..r}k.
..u........4....u..F......%..6]........8.....;.y.q.u..}x.|G.S...>..
Q...'.}e<I>#. ..}x.|G.S...>..Q...'.}e<I>#. ..}x.|G.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014073009449611.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 23059

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 01:44:42 GMT

Accept-Ranges: bytes

ETag: "fae837d597abcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......JFIF............).ICC_PROFILE.....).appl....mntrRGB XYZ ........
....acspAPPL...................................-appl..................
..............................rXYZ...P....gXYZ...d....bXYZ...x....wtpt
........chad.......,rTRC........gTRC........bTRC........aarg....... aa
gg....... aabg...0... vcgt...P....ndin.. d...>desc..&....ddscm..'..
..Bmmod..)L...(cprt..)t...$XYZ ......a...6....MXYZ ......m.........XYZ
 ......'........RXYZ .......R........sf32.......B.......&.............
..........lcurv.......................#.(.-.2.7.;[email protected].^.c.h.m.
r.w.|...............................................................%.
 .1.8.>.E.K.R.Y.`.f.m.u.|.........................................%
[email protected].\.f.p.y............................... . .7.B.M.Y.e.p.|....
.......................,.9.F.T.a.o.|.......................(.7.G.V.e.t
.....................$.5.E.V.g.x...................'.9.L.^.p..........
........./.B.V.j.~...............!.6.K.`.u...............".9.O.e.|....
...........4.K.c.{.............$.=.V.n............. .:.T.n............
.'.B.].x.............:.V.r.............;.X.v...........(.F.d..........
...<.[.z...........9.Y.z...........>._...........).K.m..........
.=.`...........5.Y.}.........4.Y.}.........8.^...........C.j.........-
.T.|.........C.l.........7.`.........0.Z.........-.X...... . 0 [ . . .
!.!7!c!.!.!."."B"p".".".#%#S#.#.#.$.$:$i$.$.$.%$%T%.%.%.&.&B&r&.&.'.'4
'e'.'.'.(*([(.(.(.)")U).).).*.*R*.*.*. . R . . .,",V,.,.,.-)-^-.-.-..3
.i...././A/w/./.0.0R0.0.0.101g1.1.2.2H2.2.2.3*3c3.3.4.4H4.4.4.505j<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070814298095.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13130

Content-Type: image/jpeg

Last-Modified: Tue, 08 Jul 2014 06:29:24 GMT

Accept-Ranges: bytes

ETag: "e61aaf5759acf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
......................................p..Z#q.I.l..}...:.]FW.?.Gl....!.
..!.m."Eh...........`2l.."ge..9J.......g..d.1..H?..Wc.V:u.." ..3.I]WZ.
...,..}....q9.N.).c9.....uH3M.,..c.dV....KiQ........: 6Q.s. v.X.hdN..1
.%oKK%.1.W.Q.....p.......X8.o.-...qQ3.uX...YI....-~....~....B..9....s.
5....Xx......|!..i.]...G?4V$Vw.QW.(0.3{[email protected]"7.=....`X9....k...
.....`..k.!.a..I.......K.D.~.E....k.tcb....."..\.._7<TlHcn# K.&....
^........X.s:........G........i...szt..\dM;.z.....h........e.L.fAviD..
...Y.U......l.G;.g..WU.....gaqP.._vb.M.-.-i.3.&....J).:X.....5[^{.xjwB
....ü....$[......6MrX.HX2.X..t.%.....Y[..~.ZR............^..{.=....}
. .AU...J..`E..6*#e..|..1.WZw.5E.N.].8.X...<..k......)yi..^........
.f.B\C;../SKX......U...~..q:Q....9.....&..z.h.....u...D...c....Nu. ..t
....n-Y.-.s..(S....R...o.5..F>..b].s6..q....n...5G......5E..n...../
....O....;...P./YV.UU.S..p..).9.A.]..Q^v.!g3^.d5"i....3..8.$..^.,..^.@
c^s...Q..<.t...m.G.I..X..AN.ZBP....D..,2. .IU..K.l.f.........n...F.
.&...'E..$-R.c..*E^U...J7q~Chb~..;9.KL..d...)v.SU^z.R..b.%S.I....%.\X8
.xtU.%.5%S5..NbM...<..V.PU..z"........9.*.us.u.....)...............
...........!"1....#2A %3............)...._9y....;G....l....*c$'$g.OQ.8
.......8s.}...V.........i3V...e..k".s.P................}s...........#r
.8.X...~,...s..&.sX$..0.2B..K...r.....$.F..]...j.$.r.W........^...<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014091016079056.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9865

Content-Type: image/jpeg

Last-Modified: Wed, 10 Sep 2014 08:07:01 GMT

Accept-Ranges: bytes

ETag: "b81c3b33cecccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.M............................!1A."Qaq.2R....¼V...#SUbru........3Es.
....Fc..................................E..........................!1A
Qaq....."2R.....3Br...#4STb...$5s.................?..*.....J.,...D..Y.
K(F...@[email protected]$".Q.H..B0... )!...r. ..F..P.-G(F...#.K(F.j.P...P...RY
.z....D.,..ZHD.....K(Y.I....H..P.-,....M.... ......#.QB ...aj9B0......
.Aj9B0...4.... (...QB..!f..".I....H..P.-,....M.... ......".K(F...#.Q..
..."...".QB....#T...]......YRD..,...@..._..RS.?..'...3P.t..q..T..`..L.
.....;...o.Y^K3.....2i....)&.U.%. .#~.......w.tyo..o-..v/we"&...#...;.
{= B.R..k.f...p'.9Z...i..w........ ...ai$.V.....V.v.^]Jzc..3#..}..I;..
He..|.....#.Z7.p.iC4.k1.th&S..U(....Q;..C..NGF..J.h.Tr....4...#6..qwl.
crv..}.nB....O......jk..T.V.P..y..(.G.56..M..\Z[....I....%A..Ql..e.(..
...ZiC.-.....J.V.}.RB0.TIB *[email protected].#r
:.)?P$.U&7]......m.4.O...w...b..a......mk.A...".U.p.o...xvi]<....I=
gj..k".e..lT..S_ H9......[........."....v...0.V(.....6...W..hpkF......
..j..qa!...6m$.q.w........Q.....)#..1q.B0=?.c.xa.5.J.^..V....`.C.]@..,
&..0f1.9HXlR..%.....c^0...*z..7kS....G.E.....j.$h...\.$I......u.....( 
x..u ..._i\............-....v.....n.ux..Z8.S...*...Q.f..:S.zJ.pu...E..
...=.'.Z..g..p.__..?.d..#]......3........q.s..=g......W8..\.~Iq.....|.
...j...1.....1M....oZ....w....Jhg........T..g....5^...c.y..U]....C<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082320271314.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 7824

Content-Type: image/jpeg

Last-Modified: Sat, 23 Aug 2014 12:27:53 GMT

Accept-Ranges: bytes

ETag: "669337a9cdbecf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.L............................!.1Qaq."A....27Bu.....#RUst..56Cbr......
$%'4S..................................B.........................!1..A
Qaq......5r.."23....6BRSbs...#4.C.............?..M.@....@....@....@...
.@....@....@....@....@....@....@......%..@2P...%..@2P...%..@2P...%..@2
P...%..@2P...%...@[email protected]......%L....W.Z..G.VJ ..c\]P....j...
.......ln{>.7......I..`7.........xO.7..&.=`6..;.....wx.ef.Zf.!Mc.O.
......V.y..}.R}..s5}......}...i.j...J........_.._.}...~..k.....^.v.}M&
lt;....?r..rF.......j..)...d...`...k...m.]..}v..\*m.?6...{[....l..}...
....m}.`W;'Q...4_...M.V.uD=-..Gqf3..-3^G..#..k{.{....]OS...l..........
Yf. .... .... ...........-.U|.2..f:v..K...g...j..;\6.;...._R48.9a.R.o*
i......U..oy..:Zm5N....EC.............7U....G.{.D..{G..n...*..l...Y../
.-CV...}E...&J.K..p.. \..ZnO..E77...unj9.....X. @.....Q..[.l...M3N[$/,
p=./HNt..........%:Rqk.=.0h=.u..|p..n...l.8....?nWea./...g.G........@.
p..p...6..z.Z-.m.Lm:6.o..[.2.}V.(.......L3.........u...=.....7.\......
l}........... 8. .H.....q !....K....c...........].......\{2......U.._O
Gy.f..K....IW..._;...)....q..9..Z...e9|.;$....9(Z....GV....YZ.../.:.3s
..gAc.a.@[email protected]...'..L.7........9BJPz4zS.:RS..ks[.K....W-=.YN
. .....A...{.....V.sW..\A.....y>.<........F.)z...p?... ..)H...$.
...@|@.....o....{3mV...5.<....>.!.=C.}.......\M...,..?..g\..<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073017493297.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8216

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 09:49:44 GMT

Accept-Ranges: bytes

ETag: "46ef5797dbabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
G...........................!1Aa"Qq...2.....#Rr..3Bb....$CESc..Ds.....
..................................E.........................!1AQaq.."2
....R....3r...Bb.....#D..Cc$45..............?....Q....................
.............................a..V..o.G...4................$.9..]......
.'@.../.c.s....."...=B..5..a.:..<..........k.""""""""""""""""""""""
""""""-......4u7....b`.......x.....[..)1.aa.wva..-.....[.....DtgD.....
....C.G3............O.......n..v\|F......9......wA.....{M....;....E.&!
. ........c/....ZE..........................._Xl.........2...#...3.VJ.
^^.M..Mw!4....n6...Sd"..!I..<..y..>..-6.,..Z.V.S........ ...Fb.;
.~m.....<I..h8.7..!HKC..,......xr<W.....:f}[..$..}. ....0.nZ....
.........._.2.M.$.\2;.3...\.42S.$R..,n,{.......S.E.1.......A...>#5.
.Ct'.o.p$........u.""""""""""""""""""""""""".>O.S3W.'g}56....}.....
.....tH..m.q...teE...Q..........>[...8...}.....i...!.n........?....
.(.....*z.L3...m.. ..G..T.d1.......G..p.".H..........................m
..r...n......Rx....[*u.zD.j...8M.w 4.N....JR,..9X..y.s?A.....f.......(
)....\I.Ng...... .(.9............).M..L..'......NeH "."".v....xB......
.....h.}.1.[G.lM....L.u....N&........ ...o.T.../.....<E............
....................py?aOH.......:zl....p....Q;.lO.%...wv.Z$O..a..;...
z.}..}.x.h.&v[.........j.H.....ok._./....4Q...Y.!....G.....'......<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073014071810.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 11860

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 06:07:54 GMT

Accept-Ranges: bytes

ETag: "948e4a9abcabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.B...........................!1A..Qa."2Bq...Rb..#Cr...$%3....4S.c.....
.............................=........................!1..AQ"aq.......
2..#3..BR.br.$4................?...B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B
.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B.B...B3B..h.a.l.
(jr.&..w..>..~.......R...~.-C.....!...F..][....>.Y..%*W..~...<
;qSo........... .V.a..i...X..O.........*.M.E).V..E$.&^..>.........H
8[,.. . p..#N...A...%..... .;Q........K...[...U.~U..K.........uR.4P.P.
P.P.P.P.P.P.P.P.P..hB.>t!r..vH.)....t..9). .....a.9..E...T.s......W
...B.6..|......x...~b....F.....u)...O.Z#.-.......r.).n...Y.>.Z.....
$8..t....~..........i..Ooo..Kh[.....%..j.qJ.z...3..9.<G....6..f.iu.
b...A,C.!V....*....i..9..SV..'M.s.6.e>..(-...|...7....B......h9v.p.
z.g....5...i..M.....#.}..F..".@T.|>.tVn.*-......................8.m
$.T..U ......IZj.-qm.....X/....=... .w..tn.lZ....up...{.:...z......?..
5....[u(...2...,8N....?*u.s..CUl....k.6.7....$....IV\B....<|jz..:=E
..\7......>]...\.$.1pl.V2.........Y.....%-.m.........{..UK1..T8<
[email protected] ........b. 8Y2......a.[ .B..H..-X.G..1......0........^r....
YU}3....>....x%)..E].Hd...%.i..........%{.|.**. ..SyYp..i...i.N..Z.
...SKj|..x.4......`....Q.0...tR....VLD...5.....)..k!J..$)...9....n....
Qb......{UI..5.[.:[}A.oqx5.y%........Rq<.J>.y..)..*.%Ai.I.. <<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073014034653.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 6522

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 06:03:44 GMT

Accept-Ranges: bytes

ETag: "3284155bcabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.K............................!1AQaq.."...2RVbr......#367Btu.......c..
.CSTs.................................=.........................!1AQa.
q......"R...34Sr..#2Tb..B...............?..4..@....@....@....@....@...
.@....@....@....@....@....@....@[email protected]!..L%H*owz.=9:.k.Y.I...j.h[W..
F...$..oZ...zU......I~.K),R.!...Fs..I.i=.....[-....,..G....f.WIp.O/i..
...b5>P....En.s.t.(.?.PVN:..=...~.>Z_.....^.zO(FZN.%..T...Q.....
IhN$.J....X.~.-...^.g.v..\G3!f,..3...*yi.......U._...N.k.O.<...#. &
lt;.\.4...m.. ..J&.Zn4.:G{Y..l.?9.....V...b..5....Z.h..IIqO3.^..@....@
....@....@`...8K'-.....O$..z(....#.#.O.:4u!e..&......|^....o#....a...K
..{._.!.k........H..mN..Vi-l......s...)s...;T.t..........!.wW9...q..~.
..7......-u....[).}Md..G..8...T....J*)nK%.i.*N...I...g..z.A.@......|#q
e}..Yg.o).gt/.KH...z..na...Ipk3..z........D..].q....,qF1..h._H..X..2..
..OyQ.%.v..........x..........\V.........sN......s..$...B.s#....G...._
a.8u_es......I.w.......K..n2../... .... ......N.eo..$..|...J.Ln...i...
..y.?..4.x.....5^..Ew.....r...~.....z...7....]X..].....|.Ot...zZ..o9..
t.th...NV...)*4".../...k..sQ......yj...... .....p.`_...A{..)m....3.%oV
H.Oi.?&.......(..1.E.sOs/m/ ..U.K&.y>(.}....g...J..X..=..a~....a'..
.1...z..c..l..I{...|....p&..........j..^^&.Z.....@[email protected]..... .{k..
.]..P... h..............s.x..J..Co?.]{...V.........l...w2......uEm<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081314444984.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 4754

Content-Type: image/jpeg

Last-Modified: Wed, 13 Aug 2014 06:44:25 GMT

Accept-Ranges: bytes

ETag: "5c69e05c2b6cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.L............................!1...V....8ASq......."27QUatu....6BCrs.%
&34Rb..................................D............................!1
..AQSTaq....4R......."356CDrs....2B#............?.....................
......................................................................
......................................................................
.................c...x.....,.c.GFkR^3!.|.1W=m........I,[...8.......!.F
x;kE[....A..G.]K...5yq.Z.Bw...V...(m..u....e.qk..k&y[{....~e..l.......
....m..r....R....\g..Pf.g......G.]K....q.Z.A...V.......:..W...fv..<
..'I..5|U.....d.......mQ......U.i...q.U`R.a....^.d...u.g(m..u.........
j...L...\9Ch...t.]C.3.].3Y3...p.......au...-v..d. oe..6....M..2.8...5.
<....P.?2.]6.P....j..L...\g.^.T....;...9 ..k..U..s..7?z.L..f...,...
..H.C.#S.R..GEX...l..M..^.m......au.Yq.Z.BO...V...(m..u....e.qk..k&y[{
....~e..l...........m........ R-.Td5_|.MAr.}..?..J.7..P...&.>l.o.\J
.y.v.b4.))Z..U(...'V...{..Z..._....l.T...*:....MW.k4.,X.......D.T....L
..........#........Ek......r....g..0"[email protected].}........._W.... .......
..8..0..... ...1..P....?...*.#.OH.w....M.j..........i.(.....Iy.U.. .u.
R..B...?7..z].]....]..7r.R.]A../.t...w.N.`.%...=.st...S.D.T...........
.....O..lce5.4...i...8...._......).....5o....-..g...d\..k..u^..L......
P..n..$J...$......7...[a5..7...m........V..|eW....r.....T....ka..O<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073109371599.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 7616

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 01:37:57 GMT

Accept-Ranges: bytes

ETag: "b22c58e60accf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
......Exif..II*.................Ducky.......<.....,hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"
 xmpMM:InstanceID="xmp.iid:1193A979107711E4B3E89F0D63287040" xmpMM:Doc
umentID="xmp.did:1193A97A107711E4B3E89F0D63287040"> <xmpMM:Deriv
edFrom stRef:instanceID="xmp.iid:1193A977107711E4B3E89F0D63287040" stR
ef:documentID="xmp.did:1193A978107711E4B3E89F0D63287040"/> </rdf
:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=
"r"?>....Adobe.d...................................................
......................................................................
......................................................................
.............................................!.1A..Qa"..q.....2r.....B
Rb.S4Tt..6....#3cs.....$%5&dUF.......................1AQ.2..!aq."...#.
.R..B............?.....7~.vkI-....d.6D.D...W..V..|.=.....xuD2....I-.1.
.T......K...y..;.........P....yNu.{.....1...\Q..{.#.[.;z.x....2.f[.g".
.9.W..a7..2 ....`i.#.........0...Lf[....$f..1....qD.W.Fa\.:..n'... . .
..9.......%.N...-.=.x.....=..TG....... 1..8._..Q....f...6.ZxJT..1?<<< skipped >>>

GET /images/star_five.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 31562

Content-Type: image/jpeg

Last-Modified: Mon, 09 Jun 2014 09:19:56 GMT

Accept-Ranges: bytes

ETag: "0c667fac383cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT

......Exif..II*...............S.......................................
................................................(...........1.........
..2...........i........... ..............'.......'..Adobe Photoshop CS
6 (Windows).2014:06:09 17:19:55.............0221....................S.
..........................................n...........v...(...........
........~...................H.......H............XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112614377137.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5118

Content-Type: image/png

Last-Modified: Wed, 26 Nov 2014 06:37:03 GMT

Accept-Ranges: bytes

ETag: "66f8a64439d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C.....XIDATx...yl\...-!!U.
_.*[email protected][email protected]..........,ol...y...xw.}.{N
.....e23..=.x.../^.yg..~.{.}w.yD...Ne.2..-....lc}....m..n.S3..H....0..
ni.q.u.mZ`.....=f.sT.`.oh..v..0.Nana..z.t[....dZ....X..{.l.2"V...d....
.T....\K......a.U .O6.. ].&..C........u.. .L6...v&.X..,.k%[.[Q.TD.X...
.6.my2.~(....p.....Z'.F..n.... .J..U-..:/..0K......bbYrA..ai.&...2.. V
.\.!...E.....B.Y......2...U%.B.0U..[...a...".'..K....K...".". b.". .X.
.%.X. b.c_.A.G.2..%.X..%.Xr...K..F...AW2.s,...u......1.L....3j.O...9..
.....#be.JE..........tw.........%..B...%[email protected]`7j
]].....t....=.....G\C...`..c.AR.}.....}D.>.`.|w.}7.^.......s..eY...
O.....]J.7n...-Y.\!/..jjj........j...[...oN..#.....5..._~..,[email protected].|..
.n. ...... ul$.......o..^....w....\H.>.....*U........V.v..w....]A.U
W]..s..........%K...~..J.....z{{c.j....}......5....9x<..d..F.b=....
..A.-Z........K...._.5.\.$0..sB......:.~..L...v.m...{.=. [b=..S.;Bc.T.
.!..%.k...1.L......>...UP..#b....\.........X.^{....D....9H.......oT
...s.q.O6..X.]w.q>.Yq..L,.C.i>.6.!. ..c..F$N,..C.S,=..NP....:.X.
.........b...Xk....4.....!..%......&.4N.. .@,S...b../"V..2..q....m...H
G,.z...&...L....s...E..{..a......y,T.;..3-.0.t....S...............".h.
E..i....1..q.q...q.F..v....C...|x^..n.......[......qug.X.|.u1....K..V.
....U.V)YL.."...q..b9s~....T.1..0u..%%%.I.e...T.rT!.s.x...y.....FY....
..y.zp...g..f...3.....o......N.F.QXH/........9...7.....%.....|rM.|<<< skipped >>>

GET /images/s-index-icon-3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 17262

Content-Type: image/png

Last-Modified: Mon, 09 Jun 2014 09:22:32 GMT

Accept-Ranges: bytes

ETag: "07c6357c483cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
.PNG........IHDR.......X......k.$....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /pic/images/picpage/20140820175609.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 28338

Content-Type: image/jpeg

Last-Modified: Wed, 20 Aug 2014 09:56:09 GMT

Accept-Ranges: bytes

ETag: "f437a6f75cbccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
.....4Exif..II*.......................desktopsky.com........Ducky.....
..<......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="
W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" 
x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15       
 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-
ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe
.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/Resou
rceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://pur
l.org/dc/elements/1.1/" xmpMM:DocumentID="xmp.did:1ECB4DF9207111E4B15F
9C69477B385A" xmpMM:InstanceID="xmp.iid:1ECB4DF8207111E4B15F9C69477B38
5A" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:Derive
dFrom stRef:instanceID="E0E32A53766EBC3D04C41CB3EC7E7C16" stRef:docume
ntID="E0E32A53766EBC3D04C41CB3EC7E7C16"/> <dc:rights> <rdf
:Alt> <rdf:li xml:lang="x-default">desktopsky.com</rdf:li&
gt; </rdf:Alt> </dc:rights> <dc:title> <rdf:Alt&g
t; <rdf:li xml:lang="x-default">.....................</rdf:li
> </rdf:Alt> </dc:title> </rdf:Description> </
rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...ZPhotoshop 
3.0.8BIM......."..Z...%G.........t..desktopsky.com8BIM.%......#....3..
|..K.. /....Adobe.d...................................................
......................................................................
........................7.........................................<<< skipped >>>

GET /pic/images/picpage/20140820155754.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 25241

Content-Type: image/jpeg

Last-Modified: Wed, 20 Aug 2014 07:57:54 GMT

Accept-Ranges: bytes

ETag: "b46dff724cbccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
......Exif..II*.................Ducky.......<.....)hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xm
pMM:InstanceID="xmp.iid:A23DE8CC205E11E4B15F9C69477B385A" xmpMM:Docume
ntID="xmp.did:A23DE8CD205E11E4B15F9C69477B385A"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:A23DE8CA205E11E4B15F9C69477B385A" stRef:
documentID="xmp.did:A23DE8CB205E11E4B15F9C69477B385A"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d......................................................
......................................................................
.....................7................................................
............................................!.1.A"..Qa2.q....BRb#.r...
.3CS$.....c..4%.D.......................!1A..Qaq"........2.B...Rbr.#..
.3.............?..T....B...e5.e5.f..x.%."n.vP>$....<.....zS...)z
zo{n...=....k.:E,3D.A"M...4L... )*tI....d2.......5.f.........S..:.9..M
Q..P..=B.SP.SP.j...C.Y.5.{.C...g....v.dM.#...wB..f.K{Z.7R...}5..V.....
R.w.....wL....[.....-.|.......?=R.......t`..o...n..i...-....,'_V.Z<<< skipped >>>

GET /images/img/20100409124819581.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 404 Not Found

Content-Length: 70

Content-Type: text/html

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
<script   language=javascript>..window.location.href="/";..</
script>....


GET /UploadFiles/Game/s_img/2014112614424422.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 251704

Content-Type: image/png

Last-Modified: Wed, 26 Nov 2014 06:42:33 GMT

Accept-Ranges: bytes

ETag: "2c264828449d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;..m6iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="http
://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1
.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
 xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:Crea
torTool="Adobe Photoshop CC 2014 (Macintosh)" xmp:CreateDate="2010-10-
08T15:26:36 02:00" xmp:ModifyDate="2014-11-18T23:51:53-08:00" xmp:Meta
dataDate="2014-11-18T23:51:53-08:00" dc:format="image/png" xmpMM:Insta
nceID="xmp.iid:DB63DD1463FB11E4899FBCDF20DB1D40" xmpMM:DocumentID="xmp
.did:DB63DD1563FB11E4899FBCDF20DB1D40" xmpMM:OriginalDocumentID="xmp.d
id:E6C74BF40B206811BEDCEC12B17E052F"> <photoshop:TextLayers> 
<rdf:Bag> <rdf:li photoshop:LayerName="This template was crea
ted by Michael Flarup (@flarup) Pixelreso" photoshop:LayerText="This t
emplate was created by Michael Flarup (@flarup) Pixelresort.com & 
Appicontemplate.com"/> <rdf:li photoshop:LayerName="iOS App Icon
 Template 4.0" photoshop:LayerText="iOS App Icon Template 4.0"/> &l
t;rdf:li photoshop:LayerName="1024 Retina App Icon for App Store" <<< skipped >>>

GET /images/free_down2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3154

Content-Type: image/png

Last-Modified: Tue, 17 Jun 2014 03:17:24 GMT

Accept-Ranges: bytes

ETag: "0fa81a8da89cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
.PNG........IHDR...A...2......#!}....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221139799.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8626

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:13:06 GMT

Accept-Ranges: bytes

ETag: "8c23e05cf795cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
?..........................!1AQa.q."2B...#3R.....b...$Cr.4c...........
.........................4.........................!1.AQ"aq.....2..#..
..B..r............?..._A>x.).X.P.([email protected].,Qp.(.b..
...`.`*.....s=........p.(....X....,R.b..(..OP.([email protected]
.w....c.....p.(....6i....,,P..(.......X.,.P..;.1E.DP."...3...l .g.X...
.~g......}m..n.O.O....... ..1b....w.....P..Oj.s..S@[email protected].`.
p.(.......\..N.,.....".... ...eR..D....~.I....PH.=?Q?{s.ye...J........
-!Mz".[.6{W.6VO.G.5..^..{.S.....p...Z..R..P...iG.?#..@|/..x.2*.#S...w/
.......d.MX./[email protected]\.SN."...4....,,S.X.4\,,P l...e.
T..K..IHZ...A$.".$.Wd.....3.m}.....s...z..=$ R..[......./.gq\m!.P}\...
y.......}.....O1..T..s...L..HqG..#..........3.2....9.x7.;..v.v....~...
_............}.......5.#aK.7^...$Q.4.!WN.r.........v.q....v.!<;....
..V....n..v3.....>^....?.h..".......V..,..c.....|?.......m.Wt...~..
>..6X)..C.......).HeM.2..5..1)......i.......:..*.V.SE..D.D\W.k.9...
/..`.)R..9*sE......%.K.....^K..rS\.. .,Qp.....:.).......4..)..a...X.4.
.S@.,S..f.._k.x...@.)......,....|*...H.....(0...%..>.Sl.....:#..<
;..w.N..d.'5F.....u.hd.9#.9;6..mx.u.Zb..2....l%..dd.7.$p=y....).H...K]
5_OR...c..z._.....|.....a...8Km..k,.F%.t4...\..v....Ex}...N...S.AJ.FR.
#x.O...-J.l....J......A......V.."H..qG...gh....2.....Y)\....e..v..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070814186734.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 71073

Content-Type: image/png

Last-Modified: Tue, 08 Jul 2014 06:18:18 GMT

Accept-Ranges: bytes

ETag: "2a26c168749acf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
.PNG........IHDR.............<.q.... cHRM..z%..............u0...`..
:....o._.F....bKGD..............pHYs...3...3.........vpAg...........e.
....IDATx...gXS.....i......."......bA.{..w..{W.PP.. .JWQT......Kr.'q..
...........s%...1.. ###...<...|.......DEj./EaQ.".O."59E.../E||.\&*.
D.TD.z.(  T...K.V..WV..('.W.5....0....d....)ee....._...?.V.....N.*R..e
.._I...3..3.*YyJYj.N.. ....<s..R....,%..Jui....L...<...r.pS.....
...(.O..e..)....C?e.........e..........\w.P....,9..,...,..U...)....eo&
gt;)..c.D|U..F.|P...(..S.#B..\\..;.*./Y..?k.r..,...3.Gg/R>.uX....2.
}....J......,{.IY...R..C....,...,KLV.R..dd ..r...|%..JTj%j.R.\..R%....
h...XYT.[Y\.KYZ..TV..RM..Ru......_......j.Ve(23.).K.........Eii."/'VQ.
......e....hER..Ej....Q....R.K.)...]d.B..........T..ss.IL....aDD...}..
..||..........5..m..o.........Ch.?.s2y.9......l18...;..........".2.T.r
.....^<d.....9./...;..MO8q......W.g......'O(}..2..G.(......*.G...C.
....8C.....>.z.MJ.?...-..X.....w..>CZ.lc..w.$.... .\n.~.<.V.g
..D6.....m|p..,. .....HY.{._........S.'.%....B..AQz*...d..B..#.....E..
{4?.....#...p.|.....t.4.W.q....=]...O...dg~F.J}..{...Aee...........X..
._.q.?Gdgg....LYh..Bx..>.n.q....^<.....x.<......S.<u\.$'N.
.......s....>..i..8y.3gNq......NqA..a..o..L..0c... ..o4.....P3H%...
...Q..F..#.......r....{< ....<.F.......u..y... ,.._.~.>'.m(.w
o.w...KJ...d..J..P.s9...P.wE.....q....n.Q..O^l,yI?..%@.......dF....{..
....-.5f..{....)...8.(.....7...Q....d.4C.._......w..............?.n:.s
.VV-X...KX.d-..m.. .^;[..c.........O.h^.&....'.7..8.bI.........(..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014111713416920.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 61615

Content-Type: image/png

Last-Modified: Mon, 17 Nov 2014 05:41:35 GMT

Accept-Ranges: bytes

ETag: "b68f2b26292d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C......IDATx....t\....{...
...d..........Y...%[&.......Q...v..I:.....1n2..U%YGR=5.|.^.5f...c....H
..V.&.q.G..V..k.......z.......um....k}$.'m"u..H...c....6......o5..OZIz
..........z.....?i.....1...zGZ.o.&...}.6...h..B.O..................wm.
..[p`.V......m#m...L;..............h.......}................].f.....-.
...j........zM.%.B.........R...#... d........E.8...O...3.q..i\.|.7.^..
.Wp..5..}........p..........CwG....Q..6.[...0.f../u..n...t..&........u
.7.]....p..E.wx..E\.r.W......p..A.?.....t.....G......`...&I:..... 1.b.
.~.s.........Q8...t.......!=....z.7n..5....p...\.....=....p..#.8....&g
t;....q..}.;q.......w...-l>p......=7.z.U..q. .]....0.......[/`...X.
....;..kOb...XH.\u..V....G0..0.Is........x?z..E..N..lC[.V.............
.Q...u3...c......y.%..QX3.....]....n...DZ~.R........V$e. 1......Ko@lj.
.Sj..T...J...#$...Q%..,F@x!.B.......l.....J..u.m.|............]"..^&..
....8u......n....$Ic......I..].. .'G.p.............UN.\.......<....
.z.......gx..9.<y...^.....~....~..7^....8y.5.^x.C.^b....u....}....c
...X..>....E..`.........]..U....<..^... .^v..C....8...C....Z...i
.A4..G..}.....Y.P....3...}3r..".n..j.#.v.2k.!.j.)...T....../........Fp
J |c...Q...R8..../..>......g..=2a.....T.9...1.F..0....U4.-".a..5.`(
[email protected].. ,k..i[.KZc.........;..........X.v...;.k.rW/..i...n
........L..i...}...V4.....}.... ..0/~......z.....;.8x.={.W......x..#&g
t;~..O.>.../.Hz.. .|...o....ox....<..........t......S7>..<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082320404740.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8155

Content-Type: image/jpeg

Last-Modified: Sat, 23 Aug 2014 12:40:44 GMT

Accept-Ranges: bytes

ETag: "6436575cfbecf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.<...........................!Aa..1Q..."Rbq...#Br...2..3S..........
[email protected].!AQaq......."2..#
3R...Bbr.......$CS.............?..ywPb...."e..2...wDL..&]......tD.."e.
.2...wDL..&]......tD.."e..2...wDL.. Y*..."d.."&H.."d.."&H.."d.."&H.."d
.."&H.."d.."&H.."..u..&].R...)..t....JBe.%!2....wIHL...&].R...)..t....
JBe.%!2....wIHL...&].R...)..t....JBe.%!Y.|.3DL..4D..3DU.. .4UWI.4T.VJ}
.O..w..Ulc..`$....h..wb.K....Y........4.TL>..-.....e.`........l..).
..e...(o..e...Z...TU[(O.|....kv...=..p.......P.y.T.Q.gR}..d.>. ...5
,1..)......4Y...:..fh.5.~...M'.....E..-KVO\i.?Ur4Z.... .......h.....h.
._.$..!.*..z?.O._Q...m....T...I.SP\.{........O.^.f..._.....=.g..5S]..V
..pT..f.../.....v..Z>.b......7.m.....DK..........WL.I..G.....gx..]m
Q.8ki....>...m Zi....}GF......8w..b..kgv 4...kQ.....S...X.#>G#.u
..u`..&h.."f......f...J&i(..k.....I#.kX.............U5..5.I[.B.a......
... ...|.....g...m.Z9q\..........(...}z.V...N.....'...w.....9......{qy
..y7...|...l.......... ...iw.{..j.K`.[.m..i)...r...cG.,.)[email protected])Pob
.CF...W..}.Q..........]~...Qm...E.u$..L.....=.5o^....:..w....lB..t....
....(...5\?..Z.%u....9iI...o..u.1./.>......9.....J4B..7V.......q..u
.kV...i(...f...k.(...f....%E...JH_QU;.qC...q;..lk.81.I.}h..^.iRoi.0...
.7...C..8.....QH..1.6..VG............*T.P...}WMh....i...us.......%<<< skipped >>>

GET /images/tieba.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3846

Content-Type: image/png

Last-Modified: Fri, 26 Sep 2014 09:41:10 GMT

Accept-Ranges: bytes

ETag: "3687e506ed9cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
.PNG........IHDR................U....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /ping_tcss_ied.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: pingjs.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:31 GMT

Last-Modified: Thu, 16 Jan 2014 09:31:32 GMT

Content-Type: application/x-javascript

Content-Length: 4686

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz
...........Z.s.8.. 6.O!#.....,.Z.8.I.rL...L.^.-A......l...._..!.N...JY
 .n..u....#.....mqO...e....EP.,>..U9..D.z........W......._.........
o..$...E..X}...L.W.Ml;..=.I...Z0.;).?.......W..,....<.....$.l.xj.T;
.h..\.2...=m2....lh........U<.G......7MA!..n.".tnS>.o.c..=)....b
`..G...\......j.d9j.,.B...x._I...}Q...m.......].n..$.y............R...
..0.yY`I.B_..w|..^.O..Y:..3.r....S>....N.y.]G....C..f.5.a..E...,.i"
s..=...:c.a{..3_...K.J.&.U.u.....:.~.....?.....>.Z$...... ../....tr
'..?...,...B.Ya....7J&.........r. ....C....y..4.W.`\.%Y(y1.."..<.pt
L0..l....cwoP..4...N.F.!.7.....a..-....d.(.3.w]........Y....l....J....
..p......"..pu.....=....`R.4..~Z.]/J;.....(....(..).%n.?|...}..u4..<
;...9U.........4.8._.V]a..U..O(....%.&...coI...r.l._.\v:..SA"e2..,P...
t....t......Z./Z.....{a=z<VC............Ac.0. ..|.%K...ZX})[email protected]..
t. S;.L...iea. ...79..A:.\.`..|..f%&..... ............Juc...G.._>..
"..T;.Mv.K.z..j...j.E*d.d.~...p....u.@...[&..B.k...Vn.....'.vK.6...^D,
.z.....uB.D...C.6..u.^.!Is.U..-...vm.........|....@m..:.1..W...l9KeY. 
.5..0...6....e..g.A".UR..,..A.S..>......I6z..K.D..Z.....[........Tp
,... ...-.....).F1.x.mY.'|N...I.o.2...~..~.'1kK.p.;..I....6?...p....V.
..B...u.....7.*yk .......iu.Z.[_..(...P.;.. ..9.Q..b.\.. .`t..JpGm....
[email protected]...>.L.."t..$...(.......d...e....k...ro.zo.U..!V
........-..e...4.=.'..7.h......(b.........V...y....d.4...........ZX..s
e.l_..._.i..b....J...."r.....]/.8.8p..}.......{.^..yC7xvq.....b...h..O
.j....A.....B.s/....../....O.....Ko..........Ck.h..".[$...zS..b2Ip<<< skipped >>>

GET /live/86/68/5b5751ac8e.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi7.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:14:58 GMT

Date: Thu, 09 Oct 2014 09:14:58 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 15085

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 26 Feb 2013 16:41:26 GMT

ETag: "2432381822"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 zhenjiang73:8080 (Cdn Cache Server V2.0), 1.1 lasi18:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......,Q....g4....G."..].....D....aL...FDo.. ..(3zoAtF....3Z....9g....
p.y...Y..k..............Zj.j............T.U....e.\....9.......=......i
j..i.....I....y......g.g...zx..P.W....)....s... .|.|..a..R..Q....X.Q..
......\<|...D..I.%@..pq..p.............S.<y*.........J$<...C.
...p..).....!.-.=..3..</..%$..eT^...khj......[X::9.qq..y...........
...........%;.{QqIiYyEeCc........?084.sdtfvn...{.........g..}zv~q..su.
........_.(.q............?....O..<Q2 ...d..'.RN)..%..5DQ;xM?.....B.
.......}.."./.....<....<<.."...\<..5@..!......O...^....u.)
..h...._..I.~.%#..G..`..w.g\i..... [email protected].>...o..:Q.L..
...(.M.#......4s...NKG2......m.......,.'.i.Z.go..r..?... .;$Dl..\.B_..
.qJx..E:*..Sr.'..Y^.i.J...py;. .*.2.t..X.~........\.X.V.W..=.....X...w
.4....F.h......!....o..<L........_...a..._.{b..~....d.}..!..M`.8...
_.7..j.Xp......[...H>.Y.R.;../0n.1..T.{&c..#..| .Vh.........d....V.
.0V.....#.b3.p&...Z.......i{l.<...9...6..xIB...(ctS.......E#_...r..
....4.z...!6.!9.u..mu.j{b.....B.i..];m...\..F.c..F.,...:..........7.H.
..q.|=....Eg.T.)....'1...-.D\...9. ...k%a......>..Q$...W.g/V.......
...,.:;....?..../.:.!.....s#.0......z1.x[#.....F......1..J.}........;.
......].&X.6..FF...ak:_.\.:w......>...f....Mu.l.0...I...7Ch...W..r.
#}...xvPG,.Q'}(.Gn.... f#.9q........y.. 9.......I.<.R.{jd..J...8...
.RHu.......Go...eR..29...~.'[email protected]...'.....yE.~yWlHV.!rz.*. P0#.w7..
....~....k.=...,Q.f6..>.X..o."U... T(......Tjq......U.....1.PY.....
.......g.......:............v,.....2%X...syR.I........x.}...f.....<<< skipped >>>

GET /live/90/07/5a59fbed63bf08508ab58c408613340c.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi4.6rooms.com

Connection: Keep-Alive



V.e.jZ.,m...............Fk4..?.R~..u.Jak....#..OJ9..d.6*.>EzL0....F
.e...."O Q.O~..=Z..Ke..Rj...wC..qBSv.YH...NY/.I[t.....qA" 1N..,.......
..7q.vd.RI..(.pI.%...`.1H...W..WYJ.2...2....u.W...W'........I.,[email protected].
M.'..Y.(.Z.Ex..8....... ..}P.mii.x;:.9..q..6.<;p..%.C....$.l.H..'..
.b..t.L.p.&...8..a........9....V-I4....l.......7m..v..'...6.....w^C...
$X.Ai]...x^m.NK.8D1..~$...Tj../GJ.s./..yxo......u...b....#|^>......
Kh)s.sV...q$(...`\......L....j... 5..l!T.u|~...b..|.....\.t5..Z......a
"..U.k].l..U....F.....h.>[email protected].:.....-..%4.. ~...S7.c..)...f2..x
..Z..%.Y...I....h.?...j..,.I.........h......b2k...,.c.....GM..q...FNY.
44uE.MkZ....._.%8../..hw.....X|..x.T. tc.....Fg.d......3..o.........lX
..K. P.=.D.....)../....'.z .."@....}.7..E\..Y..A0.(M...(. ...A.......}
-$........m.Y.E....e.......l......S.......7Z.-'.f.w.<..D..4g......i
..Ck.CE..C.7.....hZv.7....n.L..j..?.yZ.f....# ..$..3.I.../.......w. !.
 .Y....}.i.,..G.t.....D.:....Ov..`..D.....Z...]....'...F.zj".!....&W.A
f.....(j..'....|...._...w....ki.vk...D.........}.~.\..k Y}........w.w.
.CX.B...."N...t./d..I...5..P...l#..^H..R .iI.H....!..:.:qT..A.........
?...p..i.b0#[email protected]_.....1#..3 j.Fh..t.....S.D........x.....uI..?
XS.....K....ts...l..&.EHTTP/1.1 200 OK..Expires: Sun, 04 Oct 2015 09:5
4:47 GMT..Date: Thu, 09 Oct 2014 09:54:47 GMT..Server: ngx_openresty..
Content-Type: image/jpeg..Content-Length: 11456..Cache-Control: public
, max-age=31104000..Content-Encoding: gzip..Last-Modified: Fri, 20 Dec
 2013 06:27:34 GMT..ETag: "259831151"..Accept-Ranges: bytes..X-HIT<<< skipped >>>

GET /css/common1.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 24967

Content-Type: text/css

Last-Modified: Tue, 12 Aug 2014 10:35:03 GMT

Accept-Ranges: bytes

ETag: "5268c51319b6cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:40 GMT
@charset "utf-8";../* CSS Document */..html {overflow-x: hidden; overf
low-y: scroll;}..body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,code
,form,textarea,select,optgroup,option,fieldset,legend,p,blockquote,th,
td{margin:0;padding:0;}..fieldset,img {border: 0;}..address,caption,ci
te,code,dfn,em,th,var,optgroup {font-style: normal;font-weight: normal
;}..ins {text-decoration: none;}..li {list-style: none;}..table {font-
size:inherit;font:100%;}..caption,th {text-align: left;}..h1,h2,h3,h4,
h5,h6 {font-size: 100%;}..q:before,q:after {content:'';}..abbr,acronym
 {border: 0;font-variant: normal;}..legend {color: #000;}..input,butto
n,textarea,select,optgroup,option {font-family: inherit;font-size: inh
erit;font-style: inherit;font-weight: inherit;}..input,button,textarea
,select {margin:0;*font-size: 100%;line-height:1.2;}..a img,img {-ms-i
nterpolation-mode:bicubic;}...cls:after{content:".";display:block;heig
ht:0;clear:both;visibility:hidden;}...cls{zoom:1;}..article,aside,canv
as,details,figcaption,figure,footer,header,hgroup,menu,nav,section,sum
mary { display:block;}../*reset.................. */...clear{clear:bot
h;line-height:0px;height:0px;overflow:hidden;}..a{text-decoration:none
;color:#999;outline: none;}..a:hover{text-decoration:underline;}../*ap
p-js*/...gray{color:#999}...red{color:#cc0000}...bold{font-weight:bold
;}...middleline{text-decoration:line-through;}...star,.star_gray,.star
_half{display:block;height:18px;width:15px;padding:0px 1px;background:
url("");}...star{background-position:-182px -245px;}...star_gray{b<<< skipped >>>

GET /css/public.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 744

Content-Type: text/css

Last-Modified: Tue, 01 Apr 2014 06:53:56 GMT

Accept-Ranges: bytes

ETag: "01a8926774dcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:41 GMT
@charset "utf-8";../* CSS Document */../* CSS Document */../*public-st
yle*/..@charset "utf-8";..html{background-color:white;}..body,div,dl,d
t,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,form,fieldset,input,textarea,p,blo
ckquote,th,td,a{margin:0px;padding:0px;}..body{ font-family:".........
",Arial,"Microsoft YaHei";font-size:12px;}..a{outline:none; text-decor
ation:none;}..img{border:0;}..body input{outline:none;}..ul li{ list-s
tyle:none}..em,i{ font-style: normal;}...clear{clear:both;*display:inl
ine;font-size:1px;overflow:hidden;}...clearfix:after {content: ".";dis
play: block;clear: both;visibility: hidden;line-height: 0;height:0;}..
*html .clearfix{ zoom: 1; } ...fl{ float:left;}...fr{ float:right;}...
relatv{ position: relative; z-index: 3;}......


GET /js/common1.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8332

Content-Type: application/x-javascript

Last-Modified: Mon, 25 Aug 2014 04:07:46 GMT

Accept-Ranges: bytes

ETag: "3cf855201ac0cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:42 GMT
// JavaScript Document..$(function() {....    //nav hover style..    $
("#nav .relatv").hover(function() {..        $(this).find("div").show(
);..    }, function() {..        $(this).find("div").hide();..    });.
.    //app_con hover style..    $(".public_con li").hover(function() {
..        $(this).find(".change_box1").hide();..        $(this).find("
.change_box2").show();..        $(this).find(".change_box3").show();..
..$(this).find(".change_box4").show();..        $(this).find(".remind_
part").show();..        $(this).find(".change_box2 .change_box1").show
();..        $(this).find(".change_box3 .change_box1").show();....$(th
is).find(".change_box4 .change_box1").show();..        $(this).find(".
change1_box2 .change_box1").show();..    }, function() {..        $(th
is).find(".change_box1").show();..        $(this).find(".change_box2 "
).hide();..        $(this).find(".change_box3 ").hide();....$(this).fi
nd(".change_box4 ").hide();..        $(this).find(".remind_part").hide
();..        $(this).find(".change_box2 .change_box1").hide();..      
  $(this).find(".change_box3 .change_box1").hide();....$(this).find(".
change_box4 .change_box1").hide();..        $(this).find("remind_part"
).hide();..    });..    $(".public_con1 li").hover(function() {..    $
(this).find(".public_change1_box .change1_box2").show();..    $(this).
find(".public_change1_box .change1_box1").hide();..    }, function() {
..    $(this).find(".public_change1_box .change1_box2").hide();..    $
(this).find(".public_change1_box .change1_box1").show();..    });.<<< skipped >>>

GET /js/utility.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 21591

Content-Type: application/x-javascript

Last-Modified: Tue, 10 Jun 2014 11:43:46 GMT

Accept-Ranges: bytes

ETag: "05b33ca184cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:42 GMT
// JavaScript Document..try {..    //if (typeof (webServerDomain) == "
undefined" || webServerDomain == undefined || webServerDomain == "" ||
 top.location.href.indexOf(webServerDomain) >= 0) {..        docume
nt.domain = "hiapk.com";..    //}..}..catch (err) {..}..var Utility = 
{../// <summary>JS.........</summary>..};..Utility.StringB
uffer = function () {..    /// <summary>..    /// StringBuffer..
...    /// </summary>..    /// <returns>StringBuffer......
</returns>..    this._string = new Array();..    if (arguments.l
ength > 0) {..        Array.prototype.push.apply(this._string, argu
ments);..    }..}..Utility.StringBuffer.prototype.Append = function ()
 {..    /// <summary>..    /// StringBuffer...Append............
.................    /// </summary>..    if (arguments.length &g
t; 0) {..        Array.prototype.push.apply(this._string, arguments);.
.    }..}..Utility.StringBuffer.prototype.AppendFormat = function () {
..    /// <summary>..    /// StringBuffer...AppendFormat........
    /// </summary>..    var str = arguments[0];..    var reg = /
\{\d \}/g;..    var strReg = str.match(reg);..    var index;..    for 
(var i = 0; i < strReg.length; i  ) {..        index = parseInt(str
Reg[i].substring(1, strReg[i].length - 1));..        str = str.replace
(strReg[i], arguments[index   1]);..    }..    this._string.push(str);
..}..Utility.StringBuffer.prototype.ToString = function () {..    ///&
lt;summary>StringBuffer...ToString......</summary>..    r<<< skipped >>>

GET /pic/images/ios/20141024091546.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 138616

Content-Type: image/jpeg

Last-Modified: Fri, 24 Oct 2014 01:15:46 GMT

Accept-Ranges: bytes

ETag: "def7f5928efcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT

.....=Exif..II*.......................................................
................................................(...........1.........
..2...........i........... ..............'.......'..Adobe Photoshop CS
6 (Windows).2014:10:23 18:02:56.............0221......................
..........................................n...........v...(...........
........~...................H.......H............XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070722012637.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13169

Content-Type: image/jpeg

Last-Modified: Mon, 07 Jul 2014 14:01:28 GMT

Accept-Ranges: bytes

ETag: "72dbf4f2eb99cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
........................................{....si.y....z........."0k..r.
...y..wd.5i..#c..Y.Q...YS.f.5.kd-j..d.3..`....O3).u...X...]..K...:*..j
.....54qV.J...-dI..BQ.P.f.4L0....#.>..*....Y...~..E_<.f..U.....8
.B9.z.Z.>.....S..^....=a.s..z..t..rc..e.%.|...4........5.Z....D....
./J..0$  .u......>19.N..'..'......]W....3w5}...j..U..R..... .r:.CWR
..-6.........Y...J..V.U_p......0..1.fi..u.u......M..:.....\@XC"Jp.h..]
....Vw3.......1...jw#7..$|.!...L....._`.....#.......X...1.L..]...kM...
..Y.$O2)...7....73..$....B...'5..[y.n.-.=9....$2....d82..D..."...w<
..,..Is.....4.....n.gT..p...>ff..g.B~.<.{.X.I..I.'.@#F.....2.YL.
..HM......4).yT.\..=. @~w.g.Y....g.-.Uh.$4-.#.8...a..]K...=X...{N...&g
t;........hA....i..J..U....9.jK..'..... j...9..o] ...A..........K...0r
.R.......g3^....O...[..t......f..z`..z..x{$..[&&5P...O].v=.OVI..../.4.
...l.f.o..;KJ=.k.5..>.DR-......$.. e...L\;.x."....g.e..R....C..w-t.
u...tBr%...9......z...#..........7rv........c)Y...."..G...E; .T.by....
.?lt4.3..\=.I.T.....$vd:...>.M.......#.......S...g*.W..ys...eV\J..s
.-...z..n/.c.../......c.....AT...(...,.L..}...I.0j.....i..k...Q.....EN
? ,.U..D..................-...^..Z(......Z...j..$."....zd.....f~..%...
.w..xuW.2Y..O...).............................!45"3.#1 %..........X|..
.LE*..D5.WMh...Y9.....k.! 8..K?K....".....Ms.B.r.c..t.!.....o"B...<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070313164280.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14484

Content-Type: image/jpeg

Last-Modified: Thu, 03 Jul 2014 05:16:11 GMT

Accept-Ranges: bytes

ETag: "52298fe77d96cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.......................................p"K..G...y...{...z.q..2.gN1c...
=>....[..w...9. .m{.2....u?.{-..`..D.".....z...........T=-z0$.gA;mS
XZ.%p..?O.....B.$7...F/E5..../....c.6.....O-a.a.*....g..9.3.t..e.9.._H
.\p.7.-.....[5~{...IOw .R... Q...).U .GZe33X..-=]"qT8..y...\.I}.m.....
o}.....i$k*.R...z].0.w..4........h,&.$...5.....c...u7[u....3.I.iK.....
8o0@...#s....,............G...2...#}]......S<.._........|.-.9<z;
-f.G8 idY..;....&....*.M..&.s.._,.....7.....D....m...Tq7.....:..~...8]
.6.zG....p..[.....<.3.y.Y..Y....?O-Q..M..5..........,..y..&...N3..o
3._.X... [email protected] >Gq.....=.5....yzl..M:.<7............s
.... n.J"..tU.PAf.]fV.B. ..xa.Pd.......la....yMl.XN..R..C.&.t......$=.
...&Hz9-.u9...yO..z.<....l.........p....s.....{.b.m......w.....,}..
._....T..#....Q=..IU....G?r.R..u...\.MI..{/>.E2.c0..?).`...Cc....gZ
....ai.B.5....k.P.UdY..=)2..i .lX....o.3\A3...d....`B.Z,SFAGh6?....tw.
.]..Q...3\V..d..s.$Z.....]......M.C#.Z...ac......(.i...!W.2..T...{J,.=
.._.......#h....".R...2oJI>Z`...*...=..dA...?aX.Ocm.WU..uakp}...o].
.>.[VI....*..L.s%Z..<.O-bZ]9...V...\..a.t.:.'...E........".S[0.f
.....i..K\.....-...5.[.LM}...............oI..wO...#....... ...........
.................!"3.#1245 $%.............)]<9.........t.=CM.f.K&..
<.....,.b..aeb..J3...n..Vl2........P.]`..0......:I...."qIi`.p.c<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221281364.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 21903

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:28:58 GMT

Accept-Ranges: bytes

ETag: "d8a4b94f995cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT

......JFIF.....&.&.....XICC_PROFILE......HLino....mntrRGB XYZ ........
.1..acspMSFT....IEC sRGB.......................-HP  ..................
..............................cprt...P...3desc.......lwtpt........bkpt
........rXYZ........gXYZ...,[email protected]
ed...L....view.......$lumi........meas.......$tech...0....rTRC...<.
...gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Pa
ckard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-
2.1..................................................XYZ .......Q.....
...XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ...
...$.........desc........IEC hXXp://VVV.iec.ch............IEC hXXp://w
ww.iec.ch..............................................desc........IEC
 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 De
fault RGB colour space - sRGB......................desc.......,Referen
ce Viewing Condition in IEC61966-2.1...........,Reference Viewing Cond
ition in IEC61966-2.1..........................view.........._........
.......\.....XYZ .....L.V.P...W..meas................................s
ig ....CRT curv.......................#.(.-.2.7.;[email protected].^.c.h.m.
r.w.|...............................................................%.
 .2.8.>.E.L.R.Y.`.g.n.u.|.........................................&
./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~....
..................... .-.;.H.U.c.q.~....................... .:.I.X.g.w
.....................'.7.H.Y.j.{................... .=.O.a.t......

<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081917112527.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 12702

Content-Type: image/jpeg

Last-Modified: Tue, 19 Aug 2014 09:11:33 GMT

Accept-Ranges: bytes

ETag: "84dfe918dbbcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
..P..........................!..1AQ."a..2q....#BRb....V....3r....CF...
..$456st....................................;.........................
!1.AQ..aq."......2...#4r$BCRSb..............?.....]g.........M.G..5..M
Z.)&.....s.)......r..|..:...........v.s.....@>. ..FaU.m..d..d....2A
..%)*.,7<..\..~................{c.~.......~.Y..........dH..M.......
_V...../...{....V.......*...?d}.?...{....V.......:...?d;.~?.z...#..7..
?...:...?d;.~?.z...#..9..?...J...?d;.~ ..\.....h....Uuo..!.#.X=.$...9.
.?...Z...?d;.~ ..l...Ug.{G......}O..x..c...... N...............C.....@
?.*-.....`BN.V9._..<]~..K._...B_v.N*.f%...)'.._.U.x...,I...F.....PU
F.JTm......&...... ..v................Dw.0IH.Z.'C.???0.iF...Vt..'.....
.*..M..q3........s..a...z..k......p.V..._...yT...ZrA.....E..V...Z....'
...:x.nH...4T..s.g...K....4......`.#...h...dF'Y.!.0..8&X./,.YBW..y...'
(K.....0YB_..y.....P.c.....%.Z.".Ad...y.....g SD?f. C9Z./..Ad...k.O...
#.!e$f$&Q1,.........$....&..v..........N.4..P...~*R.e4Jj)O...p=1......
...-7....._......9_..~...>......u.....n.$...1.eae......C|`......,{.
VUM.p....Ot...E(...#.(.......(.....yYlb.'.f.?.....I.....2..H....eB..O(
...*.45 .I..I..bT t....XA.'D..2..A.....tHV..q...:$B........0...>.]a
...U.=F.`..K..F.~....'........s2.....d..SE.f..(9jh...s!u.2}........`f.
.,....V.dY.<..`fC2.v3...(.......L......GU..=c..P.$...e.......U.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081123001713.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 19152

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 15:00:11 GMT

Accept-Ranges: bytes

ETag: "ea8f19f374b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:07EB1BFE198A11E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:5684A9B8198C11E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:07EB1BFC198A11E4A838B028F7746D81" stRef:
documentID="xmp.did:07EB1BFD198A11E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
........................................!1.AQ..aq.."2..R..Br#34.5..b..
......CS$%.....DT.E6......................!1..AQaq.".2Rr.3....BbS...#.
.c.C$4.s.............?....I.I$.e.B..%.(Xd....78...P-O.`..l..M...M...fn
..od..dt..qyG.h.,..X..3...<..i.n.....:"[n.r......n......I......^).;
|#.A1.T...Y]....h....".....u.fl.}#F..#.Z.UG.{'.P.?.....MV....../}..U.J
~w).1vZ..c4..t..........F7....C.......>=.oxR....^.=..B..H....:.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081122295202.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 18838

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 14:29:03 GMT

Accept-Ranges: bytes

ETag: "428d599970b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:7F80A8F9198611E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:7F80A8FA198611E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:7F80A8F7198611E4A838B028F7746D81" stRef:
documentID="xmp.did:7F80A8F8198611E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
........................................!1..AQ.aq"2..B3...R.#....br..S
4..C$.%.......D......................!1..AQqa.."2....BR.4...#s...b3...
.Ccd............?..........D'/[email protected].<...4j....>.BH.....g1..T. 
.;MM}.u..co.k..A./Up..jj...J{..}....y.c.2.B..kE?-W....~...?...`/?..>
;.L...C. ....xM9..R.}.?"..g.}.~....'...w.=......C...,so...x.;.;...x.;.
;......W....}.#s.......Z..l..l..-.d.......e....sRiN..0.Z..c......j<<< skipped >>>

GET /UploadFiles/Game/s_img/2014073009293147.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14392

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 01:29:50 GMT

Accept-Ranges: bytes

ETag: "24f8a0c195abcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.U...........................!1..AQ."a.2q.......#BCbcs....$%3RSr....TV
..&4DEFt....u...................................;.....................
....!1A..."23QRaq...4S.#Br...5C.$...............?..T....$.@..$....:..S
...q..\*@..x.#.......]..%.....n....:....d.d....<..*.k..t`].'.....]s
.......m..T$.k...f..Lw...a.......{;Y$.h,.<.:|.w.44CdAH....>....N
.;....... .f..X.....Y..M.)....k.F..&...~.>g..y-(...}...8m.?......f.
y?%.?.o.....|3.~8.~.6w...%/.o..{......?o......EI.....{.....[......G...
0.C.......A S..._.....R.u..B.........t}.\l.......A........ ?K.t.l....C
..)....X0..........._H#..M.=i.~7....'y/.Q}..gd6..4.....K......{....l..
..-.L%.r.....8.N....2,a..{...(....m.\.=Di>..|......j.j..YE.9O..V7.m
..m.a..8ND}'._.X.J.....p.Z.....A..%ARJTA........s..*E.X..;a.....B..O.#
.hr<F....R>.f....~..So.)....J.XD..z....|............=!sF..{Jo.w~
.........|8o.#........!e.ZRO.)W.I.I8...........f....... 5....~.w....l.
.W...y.Zt..S...Z....xS.A.RGC..#v..b......R....J.zU>..-. ..L........
.....II....u....I.u.:.y....tS...u.n....!.3N..[54-.. Gxp.H./.XN........
uf.N......R.kWD ......E:.RDCN...Je..-.....)(B.Cx...N.1.(...5C........Z
W.b.F].<.b...B.... ZB..0.......x..@.#."C#6..Ve.jg..`?u..t.3..KU.sPf
....E>..R.[.......T..%.H$... .....*...1.2RT....%.P....e....j..k...(
.t.2Gm!*/;....a..i..|O.j.}.V...c..U.......%o%Ng..*Q....w9b.b.Bmp.a<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070814159123.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 492448

Content-Type: image/png

Last-Modified: Tue, 08 Jul 2014 06:15:01 GMT

Accept-Ranges: bytes

ETag: "3c5474f3739acf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
.PNG........IHDR..............x..... cHRM..z%..............u0...`..:..
..o._.F....bKGD..............pHYs.................vpAg...........xN...
.IDATx....x.Y.=..;;.3;...$!.w..%....!....upww.....].w.N.|.{oUwu'....vw
.}S.s.[U][email protected]@XJXC.D.B
. ...,.4.$...&...k.;..r..(.PX........%.-....8....Q......]/..]..d......
....nDA.....G.n.....&........c.o .zhg......_.\p....K./.\.t...._...z...
...7o.*.s.n......<xX......O....< x..E.....^.z]......o....-,(.**(
..............;'...w....d..3.......;.........T.7`...0@...).f.J.!......
..|/..|*.......}.P,...(B.....T(.o ...!.$.~...W.3.7![.B.#.".#l......9.5
.......[...a.K.?..."4;Z.l...$.:....A..W.:G...&.F...d_....o. ..........
../....O.=p............... ..8........8}.,...........p..M..u.w.....<
;y.......s.|..$.@B.$.PXX..."B1..D.F..?.....y .~k.K.=..[.s.....oU&.h`..
K..(......z0...AE....'.v...^H...[..Om......d.%..... v.....7.3....8..o.
....l....."`-....].....aT....r%6m......e.v....{.....Gq..I.9}../\...Wq.
...u.6.........#&...9.....xc....E\.........w...#..........m!...\~.r.P.
..K.'.w..B.3W.S.L=.).}(...n.....o./$....5.........$.}...x..s/.E q?.8..
?...I._-A....|I.8.......331g...\.. .Va..|l\.........pp.a.;z.{.........
..NB..^.<~.......x...^..@!.H.0.....(.....Z.-.H.D.........\....,{GB.
....Q\..o...t..O(*...?G..A....f.......;._>...k....#.M.N"..B.......W
.?^ D.f....p.....i.............h9V....u.I....]$.....#'p....?w.W.....Dh
....xD"....x......x..%^.&! ....(**..P........D.V.H...m-......#|/...%..
..w....&.?....|v.. $.{.&.......~'.Fq.......o.[......W....[..z!P...<<< skipped >>>

GET /images/remind_part_bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3661

Content-Type: image/png

Last-Modified: Wed, 11 Jun 2014 06:25:28 GMT

Accept-Ranges: bytes

ETag: "03cd1ef3d85cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
.PNG........IHDR..............g......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221093141.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3721

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:09:57 GMT

Accept-Ranges: bytes

ETag: "50934ecf695cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((...................................................C
........................S....!Q..5....13Tars...."24AUqt...Rb..#6......
...........................6........................Q..Rq..123a..!A...
.#.S."$Bb.............?....(.......................................2..
3!...i..fU..d.*..I.*..2..hc...xi....1.l..4...Z..6e^.fA...t.2..3 .V.:M.
W...`.C.&...L.0U...fU..d.*..K$6=l.G.q5_#..NRoUTK....1.UkE......=..I..?
.3.C.J.[..S.?....y...g.f.u...>..;.i7....|Fm'[..S.?....y...g.f.u...&
gt;..;.i7....|Fm'[..S.?.U..V..P. `dr9..D...z.....Q...V.6.-..vs|G..KfU.
.d7.V...l..4...Z..6e^.fA...t.2..3 .V.:M.W...`.C. .:..............1....
...(....S.w.9/.....[.FfGo...}2......Y..c.t=Q.....N7.Fr.}...{]x........
........ct...#.....<....U.~...%.@...........*.}..../E.>....X...~
%[email protected].~..gCe&2...~.l.l..\.#.........dy.......r..?c6t6Rc.Q
...f...Le.2<.....I..FG...:.)1.(...3gCe&2...~.l.....e.F.uW.3.....Gkc
u.|~Hm....R..p.<..I-e...P.RUt..J...E_..O...U4.r..a.......|.........
....q..|.......utq.W.^.y.D....$.D.&.............6..g.kh.'....#.....?:2
C..8...9...).5..>M...#......{.}....O......]....Sc6..b..y.s/....N.,T
...Y..t.W|..|l..\...~..gCe&2...~.l..,!............K.[..v...#.....:j.i.
.*..:...7.....'....,..(4..g.....~...{..{kQg.;.g.8az.H.."V.UQgU..4.....
...I.../..Ps......m.V.kwL.L.z ).:yC....t...;w.~.N............;.)}k}.#.
.U..Gm....t.<...U;.t,?.oc....O'G.|Y..Q.....D...R.7n..WEK...C..&<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082814314066.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9105

Content-Type: image/jpeg

Last-Modified: Thu, 28 Aug 2014 06:31:58 GMT

Accept-Ranges: bytes

ETag: "a8d7d4c489c2cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.F............................!1A.Qaq.."b.#2BRr.....3C.....$%&Scs.....
.................................@.........................!1AQ..."aq.
...2...#BRb..r....$3..................?........@... ......@... ......@
... [email protected].&U.;g...2A......5Nk??bU...5.% [i8..sW..
D[\.....4.}f...2.a........v..S~......b...!.....^.2....'.VT....i..b..z.
..4f..=..y...Tr.... ..\.>..j..!......).I.?.....Y.P......~V.H_^.T<
;.....".....$......a.Q.FP..%..../rV.5......w=:u.2%.n...k..H.R...... ..
.b.Z.].J .Y.5..3L...9....@... [email protected]!KZ.R...p...T..H......e..:.m7
MY.Iu.7d.W....##.....)Q.4.....m....C.J. ..os]w......Z.....ku.j.../#...
....8)I....1....................'5..........$a ..."...{Nw.....@oC 7..8
8V2..,...Q...o.7[M........../..:$....G.d....}Q.k..B1}.....V.....U....x
..H......).b-.....6.2. ..x...*...J.1j7.F}Yv..4..r}.a.U......Y....k.D..
3..9....@... ...>..{.t......Q# ...qR.y!..T.....Z..u*<...p..^.6.p
.N^..{[email protected]_~.&.h..p....&.x)...p{....K.J..q..p...:.F4&....W*.....
.-......-.sc... [email protected].....~.k.......ye.~.G.'....lqZ..B
[email protected]. .$..........._Kr..].YJ..u..:i...2..C..r .....:...8<.9
f..... k.8N:...'..>.z.b.@... ....k......z.2%i...Z..g.P..J8.w...Z. .
Ty$d..6......y........kWZ5....B.5.*Z..Rd).^Q,.......A.#^^]...:Z....;'G
4r.G-:.:..)o..En^/Y.f,I`......d.b.f)[email protected]......@...^.. q..'m<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073017402503.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8779

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 09:40:57 GMT

Accept-Ranges: bytes

ETag: "b27e5b5ddaabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.A............................!1a.AQ."q..Rb..#Br...23....$CSs..4D.....
............................9.........................1.!Qq"Aa........
.2BR#3..r.CSb.............?..t.......4.&.D...Q.J"iDM(...4.&.D...Q.J"iD
M(...4.&.D...Q........................................................
..............o..uD...D...D...D...D...D...EQAk..UGKEM5]L.&C......j..dM
/....W.1.;e...m........K%.;% .....p...n...:...R.....E..].6^...-......a
...:...>q.R.S.....>.....|..YG..t...d....|m....1.i...V.......<
~Vsr.(.Gy|..>.p......'.m?.B7=V...O..;)...#....o..fnn......})o.0..m 
.........X.......|-K.<(q...IM..^...k\...]......4.uv.Sd.v.=<.=S.W
.o......Z...j)..D2A3.N.V......uM{^6.n.<...8X.-........D...D...D...D
...D...ES....m....D.K.m..w..J.....4.85....8.....9...../@....I...,.....
.9..P.'..._i.~#.?.3.Q.-.b.&*....t........L..gdp..z.k.xi.xuB)p......t.n
r...?..**........].9...KCOD.........g""....7.....N.......D..9....[h.oV
MT..{........'.......#g.....8..k....m.9. .d|..\v.\.....xn%F....!d..0..
$.VM........Z.....[....i..1......LW.<.R..j.4N..x...mhqj.5.....Q...x
u-p......D.0x8.`.Os..I.-,......5.....z.}.....z."..M..i...Q.%......6...
*;...9.ik.r ..*@.....7...]Q6...itM..&.].N..tM..&.].i....p...^.m..G....
Lq0}I>@y..cT.EI....hW..Z..Q........n..E_Z......J.76A.....]On.......
.q.b....){..!......xr.Y.0.M..\),...\G\r...........K..kII.KT.N..m..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014111114057281.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 40354

Content-Type: image/png

Last-Modified: Tue, 11 Nov 2014 06:05:33 GMT

Accept-Ranges: bytes

ETag: "f8f8f88075fdcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z%......
........u0...`..:....o._.F....bKGD.......C......pHYs.................I
DATx....X.i....;A........N......s.....B.l.nQ...1....9...3............N
.y..Y{.}........V.5...{F..c......S.......u.aC_.vX..o...&.pb..''.pz...g
.pa...f.py..W..pu....6.9...!.F..Y. .):...;6Q;.....{.....au/.....k....:
4....j:....#{.9[.?.)u.._f....F...E..:.3.afK.VY..s..F/..<X....:.m.!p
..o...qR.H -....u.9.8....sZ.2>.#..p|8.5.8...c.qJ;....c:........n...
...R~h.k.m...6...,.C.Rq.A..O......T...F.....[...T.5........:<.....I
.n.../.....nddd.nfedcdg..Nd..7....Xd.G.-...]7c.X^../.L..jZ|.N./WR...d.
$.tI.O....Bx...........}[email protected]&.x......d... ........zf..
.....IE...o................j.}M-...~......T`..l.0.x........s.(..4D...Q
.(.3..w.2x.o.c..n.Ci#.f |..jJ|.N.O....-..E..7T7.=:.XF[2V...u..@..]:4..
.. ..O...*...q.lyW.&*...Ls...}oZ.\..z@@....Z.....-..9.T.p....]i.D8....
.........B5..._ne.Gf..m..".....x.$.f.b.[f.......#k.....MBv..v.jf.tJ...
.;.....{ku8@....}.........."?.....jpE=X4.G&&..]&...O.#... ...x..x..@5.
...&..}~....t....).P:|.....S!...(................E...Z\.............x.
...8.1.......y,S .Z..[..M.F.4.*-....m.....l..2.v....H*Y.U...]_N...9M..
E.o<X......'[email protected]....<i.......n.Q....:1...!L..w....T..
..QW....$xw)...i.....M.?e........&...L..%Iprq..Z..;...ci2.............
wN/K<.....I.y,...qb.N.I.B..8.D..v......i.P....S9........I..N..s2...
.#%#.......^.&S.5.0..k...v.....|./.Z.(.........e.0..d..3*...4C.......s
..1.p.Z=.C.......M./|..6I.I.....[.Y.V/.....&..q.0.kJ.n.....G.*.P..<<< skipped >>>

GET /images/rocket_button_up.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d; Hm_lvt_c1b609924995c1b67281e8a7bc7bdf39=1417095263; Hm_lpvt_c1b609924995c1b67281e8a7bc7bdf39=1417095263


HTTP/1.1 200 OK

Content-Length: 45201

Content-Type: image/png

Last-Modified: Mon, 21 Jul 2014 09:51:15 GMT

Accept-Ranges: bytes

ETag: "2363cb4fc9a4cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:58 GMT
.PNG........IHDR...|.........|.7.....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /site/tupian/channel/adjz HTTP/1.1

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: eoa.intra.baike.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:27 GMT

Server: Apache/2.2.21 (Unix)

Connection: close

Transfer-Encoding: chunked

Content-Type: text/html
462b..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN
" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> ..<
html xmlns="hXXp://VVV.w3.org/1999/xhtml"> ..<head> ..<met
a content="text/html; charset=utf-8" http-equiv="Content-Type" /> .
.<title>............</title>..<meta name="description" 
content="........." />..<meta name="keywords" content=".........
" />..<link rel="shortcut icon" href="hXXp://cms.huimg.cn/shouye
/images/favicon.ico" type="image/x-icon" />..<style type="text/c
ss">..html,body,div,dl,dt,dd,ul,li,h1,h2,h3,p,form,input,button{mar
gin:0;padding:0;}..li{list-style:none;}..img{border:0;}..input{outline
-style:none;}..body{text-align:left;font:12px/1.2 ......, Arial, Helve
tica, sans-serif;position:relative;}..:focus{outline:none;}..input{fon
t-size:12px;color:#333;font-family:'lucida grande',taho,verdana,'trebu
chet ms',sans-serif;}...zoom{zoom:1;overflow:hidden;}...conbox{margin-
top:10px;border:1px #e1e1e1 solid;}...conbox1{margin-top:10px;border:1
px #e1e1e1 solid;}...l{float:left;}...r{float:right;}...bold{font-weig
ht:bold;}...clear{clear:both;height:0;font:0/0 Arial;visibility:hidden
;}...w-950,.foot{width:950px;margin:0 auto;clear:both;}...w-630{width:
630px;}...w-310{width:310px;}...pad10{padding:10px;}...mar-t10{margin-
top:10px;}...mar-r10{margin-right:10px;}...bor-no{border:0 !important;
}...bor-b-d{border-bottom:1px dotted #d8d8d8;}...gray6{color:#666;}...
red{color:#DE0000 !important;}a{color:#0268cd;text-decoration:none<<< skipped >>>

GET /AP5Min.aspx?AID=18736&Auth=D0C1133F0D148EF2ADDE19EB9A7244AC7E64002F2FAD9973905C900ADD455B38&referer=http://VVV.aawgg.com/pp.html&utz=1417095221557 HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: p.qdunion.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://vip.qcyp360.com:88/go.php?&style=sexchat&pid=1066&sid=16643

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=2065; expires=Thu, 27-Nov-2014 21:41:19 GMT; path=/

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:19 GMT

Content-Length: 195
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://vip.q
cyp360.com:88/go.php?&style=sexchat&pid=1066&sid=16643">
;here</a>.</h2>..</body></html>....

GET /live/2014/08/11/21/1003v1407764860236043382.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:14:48 GMT

Date: Thu, 09 Oct 2014 09:14:48 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 4593

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 11 Aug 2014 13:47:40 GMT

ETag: "57269915"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 dls22:10 (Cdn Cache Server V2.0)

Connection: keep-alive
....|..S...Vy<T.....KE.0.c2....X..u.4I.].!...}.....-K.!....}..(..H.
....|~.......y..>..y...u.'.....X....@.>..._..t.]..........`...`.
...`[email protected]=......P....1A.......f.m.........X...z...gp..#...S.
/..{@@.....e?){/..`.....D....5.1...#.*#''[email protected]@`[email protected].....
.}[email protected];.de..rh.9@NFF
.- ..F...N..e.. oi...;...._c.?%..xe..u...W.....i.@/.._..4.....o....?.A
.j...........`....l......$.....C..w.....3.6......0.......t..........an
.#G.9..x...x..p......q.Q1Q.c.2.(.$J.......................f......! V..
.......8M#....o....2.r..... ....B`._e..y.(@...d........."8.i..[.8.|.&g
t;.#...Oo.........?K....M!h.~6...A`V..'...d&gG........Y..`x.M|.T.z....
..g3.`=.M.Sp..o.W'.%.BR...p|...G.P....d... .0..-2.X.Y.bw2U.t..E>1&g
t;A........()B..R8<02.AB..qL.n%`F?..f...(..".2'2......~....:.}..."&
gt;l.u'...-..%g.....1.}.Ie.....L.....'.^.XxOgF....g..sb...X.x....u.Tx.
...j.....ez..m..h..O.s....k.....#..:..O...9...{l....w. ..|.7;.m]..9...
..>%....;}. .".....]J....V.O..E.Y...q...."...{'O..........Dg.....!.
7......Y...&1....i....j...-..........|.'. !.......U....x............g.
. w6..\:Hun..K%.............u.Sq.8Q....M.=..o}IdkV.z..t.[g.~.gc..*....
..[Qu.c"..X'.k..........N.9....R....P.&.5(<.W.fN<.j.5." u...l..|
C..|...jC,...63f}..............QO.....aRb......x.....{..f.. ..........
.......om)G8.O)..x.T.q..X.........Y..g...G...y.os..B.9.,RJl.L....).q=.
f.dE.\......3. K[).$.$D......:{.a...C..x.=.c....E(..#q...^A.h.$.}8...i
tA.6.......h.;[email protected].\...k.i.}yP }>#.Yx.....K..<<< skipped >>>

GET /iclk/?zoneid=46494&uid=15759 HTTP/1.1

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: 13.gxejgs.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Connection: close

Date: Thu, 27 Nov 2014 18:41:33 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: PHP/5.2.1

Set-Cookie: 15759_518=zy; expires=Fri, 28-Nov-2014 18:41:33 GMT; path=/

Set-Cookie: clicks=1; expires=Thu, 04-Dec-2014 18:41:33 GMT; path=/

Set-Cookie: do2click=1067|15759|46494|518; expires=Thu, 27-Nov-2014 21:41:33 GMT; path=/

P3P: CP="Powered by Www.Zyiis.Com 2005-2010"

Set-Cookie: doEffect=1067|15759|46494|518; expires=Thu, 04-Dec-2014 18:41:33 GMT; path=/

Content-type: text/html
<script>location.replace('hXXp://VVV.932d2.com/')</script>
..

GET /act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463 HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: hyol.qq.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: nginx

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:29 GMT

Last-Modified: Thu, 27 Nov 2014 18:41:29 GMT

Content-Type: text/html

Content-Length: 178

Location: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

X-Cache-Lookup: Hit From Upstream

X-Cache-Lookup: Hit From Upstream
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>......


GET /webgame_login/website/styles/config.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: hyol.qq.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: nginx

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Last-Modified: Thu, 27 Nov 2014 18:41:30 GMT

Content-Type: text/html

Content-Length: 178

Location: hXXp://huoying.qq.com/webgame_login/website/styles/config.js

X-Cache-Lookup: Hit From Upstream

X-Cache-Lookup: Hit From Upstream
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>....

GET /images/js/title.js HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: ossweb-img.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: max-age=600

Expires: Thu, 27 Nov 2014 18:51:31 GMT

Last-Modified: Wed, 19 Nov 2014 06:20:29 GMT

Content-Type: application/x-javascript

Content-Length: 3935

Content-Encoding: gzip

Access-Control-Allow-Origin:  *

X-Cache-Lookup: Hit From MemCache Gz
...........:[email protected].<<.?.wB.
l.............l.<......,..,.."2...=.`..0.U......../...i.K..........
.<.K.EL.....K$5..r..y.......E....<.-...."'.G.>..T'.Q.Td.z..E.
.|.|bYQ>>}....oK...<.....\P%^xF4.....x...]....Y.\...O. .0....
.{.c..Fn'^....X.!<..Q...e#.|....V5.v4:.3 YD.....?.M....Z|.n....R..=
xr.5......$...if.vL..:.K./.g....dj.....)Q...yb..<.Zn...l.8..d<}j
.i<$z.. iQ.Sg ....[[email protected]<)...<....<....B...m ...2KscQ..
..*0@L.....<.....v........~.......D..h......~)..XQ..f.s...H..a..vU.
E.Z..0.eF-......g...@A.=...Y0..7.s.!:....xB.%.......9..F.......r...nQ.
e.....Ol.. W.......v...{5.#O-4S:E....^]}.].V.....[|Iq.\#[email protected][email protected]
..h. .-.........4...B...w.D\U[..#..H..\....ECa9...E....i.c.p&.,.{}}.4Q
.(.*r....8.J....,.$...USj[."...{i...a......G(g..!...I..w.._J0...4..W..
..s.r.Y...[.E\_...D.u ..,...M....H..*u.].O...!...LT....gT.3.....0.#e..
<.....0....)..!s4.....#...t..."...I.B`.L.....!"........C.....c...pS
.di..Z..S......k.kw4..LI....O..a).....8./...d.(lB..O90....yT.6=.{<.
.a..o..=P...(9.....{."............~.7..o>.g2m......0.9O..|..j{..H=.
..Rf...h,Q.z..v..y ..jaV.w0..W.i.......k..K.hK..y0V.`....%.k....r....'
..[..p4.....bL.i#..8 .....*X.......Y..,...S........{..!.K.iV..RZ...:r.
...E..-T..#. d..[..*...... ..C7....~p..S....'X7...Z.../.z\......R;..,.
.bf)AIG.q.7B(.6.. ...r...k..FB.0,D..^.Y)....>[email protected]$.Z#3<
...p0.....,..gw.0.....|...).[Ptm}... ."...8J.5."Q..'L.5.f."^......*V(K
....>DD^...5.'0L.....w.?............?>}...0.RBs...*.b.V..D.Z<<< skipped >>>

GET /live/2014/05/01/02/1003v1398881124771492481.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 10:02:20 GMT

Date: Thu, 09 Oct 2014 10:02:20 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 4906

Cache-Control: max-age=31104000

ETag: "4179511006"

Last-Modified: Wed, 30 Apr 2014 18:05:24 GMT

Accept-Ranges: bytes

X-HITS: 7

Age: 1

X-Via: 1.1 dls19:10 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
.A..........................!1.."AQaq.#2Bb......3..$R......CSr........
.........................&........................!1."AQBa.23.........
....?.....F...8.....9....H.#..}.......k.b..l....Rb.T1.....N|....].....
..>:;)...M^. ...*....DaP|...1...Aa.K.b.......t....."......nT5N~Z...
/...Xr..qd...eo...d(i...Y.F=...j.......m........]....2..9...V.4.|.....
.....=....<.w...G.p0~..[]D.^H.(9..M^..x.j1.9..t.....[Z.M.J.%..9.I..
|..R.0#.U.p..IO.:....~.s..C..V...,q.^.........f..h.....H5p.}g..}.W...9
8...(.....SP..3._....3g.<C.S.r.)..1..[QM.>.vW.a.N|..Q.7..8.....=
J.s.e.|9.F.....<..#..Zx...T.N?......fc.....r..*......S...C5.I.`...F
5.......|.jq.......4e..F....' .`...h.%F.....x'..8'.x..*.jJ...s...?..~.
.....I.bA...Z........X....#........S.Lj...J|.O..]I..1.!I3..2G.."..).]s
.#O[..1.....!kc.&.......0........eVS...h......%.....4..WX.vD...'...-..
.../..[%.._MmIUf.D.#'....NY..q...0.......w{.K..SI.9.U.....F.O.i*j....c
G%Izv..T...Cyu..Q...f.Z.M...z.GvuJ.;.E...g.D.P,.z`8z....p...d..`.....f
/$..(r>.I....\.:..tj...YnPT.......Ri.....jDh8.m\.=Hr......r.....8.(
i.....A...4O.}....6.]<..<U.H..b^g....]....L..e.*.......-9.!...O.
4qS.$..P...0....8..v.k]..za...B6...K.D7/5eo..Gu.p......N......^'......
.....O#dz.S...X^..].M1.3....).........,0e...u..y....%.....\.cY..*t.r..
.2.F9c..Y..E.$..^../..L...v8.G3.ii$..<s.W....7....m...~.....T..<<< skipped >>>

GET /live/64/43/ef85fa658f01e170967b7c1ee82b048b.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi3.6rooms.com

Connection: Keep-Alive



..Gt.[../}.I..Md..............=.'.....fo.........)!...5..oj.8_TcM..I..
..T.5.{.0.HvS.3..}G..v>4.....5J..#.N$lQ...Ht..........r...Fd..v...K
..#.......)...&......K......k.p..>..........`.CG.j...&smOf.yJY.....
....R.q#mV./..Z.s..*.U...$.J..o...f.8.7..s....:6..A.....:.#.IV....ki.O
d..Uh......-.6..s..l......r....,f.qs>Y{.. ...D...t........S.J__.PYj
...Ckn..1y#[email protected]...`a.X...{. .rGZW.Y....._...B....]o....r....q1y..
h.Y.WY.\.Rq.. .[.....5..(...I.X...(1......QvL...Z......w.F.c1.t....H..
X..'jO..4q.#w.iAdq. ....VWS...x83 ...q......R....z...i.W.......e.U&K..
=...^`[email protected]...?.9Wp.H.....0F:].'$...1M..n.t..BHE_r.jG..J(39l...
..... ycx..OQ... [email protected]..~.$.Kre.wf....]p5..Jbn......v...V..].K..q..
...WN..9.8Z...J..hP....%.....E....l.NK .H..].*.....8....8k....fm.:.v. 
.. .. `...lt.P.....A.Dl......]%9-.....0..;..>L.u..z6.-.l. ..3....m.
..r.B.#3.-#.|... hj.<..\......|..M'p6....4....D.c...Z.?.v.<.....
".f.....;f1H......~.ZUwe~......rz.AR.q...J>.]......R%e$uT.d._.^ h%V
...../..E.Y....?z...E.# ..3."..2O.\}.f...091..jI..i...\{.......I.[....
../...vC....K..2.8....L..2.2Y.$...G%-].....M........WS.`.....:...y....
....M3p) .<..5B.5.&..{.?....."..|....a.........?......PF....W`....~
..lvN J.g.... t............Xos..HTTP/1.1 200 OK..Expires: Sun, 04 Oct 
2015 09:58:36 GMT..Date: Thu, 09 Oct 2014 09:58:36 GMT..Server: ngx_op
enresty..Content-Type: image/jpeg..Content-Length: 13410..Cache-Contro
l: public, max-age=31104000..Content-Encoding: gzip..Last-Modified: Fr
i, 20 Dec 2013 07:32:46 GMT..ETag: "588212102"..Accept-Ranges: byt<<< skipped >>>

GET /live/88/97/05d6ab0c93d5cdaaf0ba9005159a2236.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi3.6rooms.com

Connection: Keep-Alive



S.I..[..H....w..*.V.}.?.N......U_W M... ..i>!.dWC......u}....V..*..
.rZFu-K...(C.... )J...|..>.h..(0....*......[.....nI.Y...t.a}...`..?
..z..`o.<L..O.$.....>....=..v..D.0..ZN.........y.......3.8..Z.d.
.'..2s..........T..Z}...U.3...=R.....N....N.^;........v#...;..|..p..6*
.....K......-.....l.w.R....z..X..........e~.?......1. .8.............\
..J.o.....6{...V1...z.w'....}..........U"8.....r}.@..&......)...v..9.[
fh.sW.. [..$T...wU~B;...X......!..."[email protected].'..............N&.T.
............'1z..6....09.?T).$.X7..AIb?Z...r...z.6.K..s..(.9.....;uZ.J
[.<Vh..F..Z .....J......V#.&m.........;.W....u..lZ..ow.l.6.f.r./ic.
}'.%..7...Wp..O..... ..w.......t.z.b.'>3...=...*..D.w*..o 5.r......
....fBm.f.M.T.....3y.....g.Q..Yl]....6.....h......1..At3..............
.$..~..6.`.*M^.J&..=W..k....W......u.<..0@[.cZ...^.L..9.....C'.....
...0\..m.Tahc.ls..?.!1.*.{7.-....'..%.;7...d|5..J..o.R........2u.U....
.l..57y.d.k..ki{..X..<.....Mq'xY....q^....K0m.Q..l.."...7.99.n}....
.<.^G........(.Q.k]<.w6t.#J.....p..O..p..>....u.."......2..7.
.yi....Z..8...7,...b...3.g....U;..~_..o.z.T.Z...........-K....o....V..
Vd.I....R.*.........:p.{..$.%..L|.._.-..) ...O..&.kt...$..H..cqS.'....
.....G..%.U.......%!=..|...f...v%..N.{u..Z .T..3..)..{....T5z.d....k..
...T..FC.<.>.eznH...^.......,.........i..D.}D...g.._.u...#..:.Q.
[email protected]..|.....C......"t......m)g...B..V|.pn.{...tt......h..0..|.]$.
.._..uq.4.Sm..-....mv......H....b.aq....... ..D.BZ.3.U.F.Gv.l....<.
5...T<h".'...is...p.9.........c..?.}.~}.*L....=..E......;ol....<<< skipped >>>

GET /webgame_login/data/js2/hyol_status.js?sGameKind=hyol&r= HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: commwebgame.game.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:32 GMT

Content-Type: application/x-javascript

Connection: keep-alive

Content-Length: 674

Last-Modified: Thu, 27 Nov 2014 18:37:25 GMT

ETag: "30ffca-2a2-6f7ee340"

Accept-Ranges: bytes

/**..................,....id..............id*/..JSON_server_sPeopleSta
tus = {..1:1,6000:1,2:1,3:1,4:1,5:1,6:1,7:1,8:1,9:1,10:1,11:1,12:1,13:
1,14:1,15:1,16:1,17:1,18:1,19:1,20:1,21:1,22:1,23:1,24:1,25:1,26:1,27:
1,28:1,29:1,30:1,31:1,32:1,33:1,34:1,35:1,36:1,37:1,38:1,39:1,40:1,41:
1,42:1,43:1,44:1,45:1,46:1,47:1,48:1,49:1,50:1,51:1,52:1,53:1,54:1,55:
1,56:1,57:1,58:1,59:1,60:1,61:1,62:1,63:1,64:1,65:1,66:1,67:1,68:1,69:
1,70:1,71:1,72:1,73:1,74:1,75:1,76:1,77:1,78:1,79:1,80:1,81:1,82:1,83:
1,84:1,85:1,86:1,87:1,88:1,89:1,90:1,91:1,92:1,93:1,94:1,95:1,6030:1,9
6:1,97:1..};../**[IP....]..........*/..JSON_Crewel_iServerId = 97;/*  
|xGv00|f32de914e2c09c63877a555c367e91a5 */..

GET /sys/Mview.php?rnd=11dfQgHKk6x2Dexk/Gawz7cV47paKs8A9XZ+zMkAUZJ/srm/WP5VEWGe/lm69CPTkhxNAPHIV2yrZezsxKP2yBPlhqyZPLkosyZ67czJ+jZf4KuT3Of8ukC7hL3Ul7G9QPa5caYvcExVHUIHpw&p=QXNldzNIdFNtRGdKTGo1ZjJWdEx0dU91TnR2OHBwMFBOaEtEaGZyS05DVT0 HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: p.sharele.cn

Connection: Keep-Alive

Cookie: ld_user=a:4:{i:0;s:21:"81189-1417113691-1903";i:1;s:16:"a:1:{i:348;i:1;}";i:2;s:16:"a:1:{i:242;i:1;}";i:8;s:3:"348";}; ld_ad_bl=348


HTTP/1.1 302 Moved Temporarily

Server: Tengine/1.4.3

Date: Thu, 27 Nov 2014 18:41:36 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

P3P: CP="CAO PSA OUR"

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Thu, 27 Nov 2014 18:41:36 GMT

Cache-Control: no-cache, must-revalidate

Pramga: no-cache

Set-Cookie: ld_user=a:4:{i:0;s:21:"81189-1417113691-1903";i:1;s:25:"a:2:{i:348;i:1;i:43;i:1;}";i:2;s:25:"a:2:{i:242;i:1;i:34;i:1;}";i:8;s:2:"43";}; expires=Sun, 24-Nov-2024 18:41:36 GMT; path=/; domain=.sharele.cn

Set-Cookie: ld_ad_bl=348,43; expires=Fri, 28-Nov-2014 16:00:00 GMT; path=/; domain=.sharele.cn

Location: hXXp://VVV.waiwaishu.com/IosHome.html

6..........0..

GET /api/liveInfoCk.php HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: v.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:42:05 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 20

Expires: Thu, 27 Nov 2014 18:40:25 GMT

Last-Modified: Thu, 27 Nov 2014 18:42:05 GMT

Cache-Control: no-cache

Set-Cookie: _LiveGuestUser=1214114253|æ¸¸å®¢nba1zy; expires=Sat, 27-Dec-2014 18:42:05 GMT; path=/

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 yungu89:4 (Cdn Cache Server V2.0)

Connection: keep-alive

......................

GET /?pp HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:05 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/index.html

Last-Modified: Thu, 27 Nov 2014 18:28:48 GMT

X-Powered-By: WAF/2.0

Set-Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F; expires=Dec, 3-Jan-2151 20:14:24 GMT; domain=aawgg.com; path=/

Content-Encoding: gzip
2756.............}.s.G....*...l.B.......X...U.]...|..-J.e[A.t%.C..3..`
.]...m..._..%.e....Y Y..;...9..3....H..s]....s......t.>]...~....?..
..o........:!.6..=......o..........;..Q_(....!_..x.w. .....r8......{8.
.8./.K....r...@.........../..C.c.x\.....d........A]....?.....'...?....
...B.y:&.....,.M.............[...'.......3.k. ;.....$.....n.n....w_...
..>.G.....R...._1Q. .h.B.V.1...k..".*M.hiG)......b9J.8J.8z....T.(~.
x<.....?.93.}T............................7.d...h..#.D>_{s..!.z.
>..Bo...8K.....=.m....rJ[......BXu,...3H...t..{........_...KH....S.
.6FG....... ..u.e...g.$,.V_ .......D.5.....Z.8....[........2x0.. D..cb
,~9.....qQh........5...c.........b1Q..b ..F.%..W6.....`\8..P...:"5B,..
-...$....b...A2y.~...Pc..?l6.h.......^....v..5...b.y..z..%...:.G..s...
..../..]...Z..:`......WSIBKc."...G..7K*.....k.# ..Q{m.S.(.......-..@h.
....4..)..Fb.u......7.....&.....Db..zmj...XWG".......^.....o9.]WG..0..
.mAh..!>.U?...MQ...-"M...E.A!.......xFetL.]K.:..T..y.....E.ifP.....
...........}...........#o.)zS...{.6...R3ZC.W.....v$........&...P.I....
.......... (....l.MR..H ..G.b.:.....U.s.4G.m....".Mb....v..G........I0
..F..L.7.%..._...........!5............7w0..fxz..[_.....9. ...I..RkL.b
.F..=....d.'.....8.I...e.M"9<.....S:.$.L..!.x@...... 2.rC.....@4...
...Mm$.-.Sn....$.2f...F....#bq...U.]v.....j=...GZ........A....'.2.J(..
).M.X..z...."<."<...'.......QA...Y~\^..."*i...J..ma....]K.......
..T.......Xr.Q\..p......Z:...".FM...U..\NN..'.c%.^]I.=-....W....s.oy..
`.I!..i...Q.....q1.^O`.*..j&.....[3...DC...gT..([email protected].._<<< skipped >>>

GET /templets/style/base.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/?pp

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive

Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:09 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/templets/style/base.css

Last-Modified: Thu, 23 Jan 2014 16:04:22 GMT

X-Powered-By: WAF/2.0

VAR-Cache: HIT

cache-control: max-age=14400

age: 0

Content-Encoding: gzip
464............}VMo.8..... .,...k9q.HX`....to=.BQ.E.....85.....d{.]...
.......~....tl. .w.zQ\^\^|.eV.....Ei...5.......k...e..'..F<.3.'.Vi,
.U%l..`i.3.eml.o%u..P...`X....a..G...;n%.........T......R.......u~.Z..
?8_.....&........[.....1-..!;....vSs..T?......>.*[x.........E.Ku2m.
.5.g.rS ....<.j.......C........:/..DM..7-...q.O.S.....yD.....x.aF..
e.|...'a....s!.....t...&Xp...$..53.. ....S....9.)..0.;e:.9)... ..&cWIK
..4FJ..N..S.....Wg.hQ...4.L....`'.66.Z..9.DS....XD..s.....T4.K-gO).i..
2.6E....G.....?P....^ft...G.r-U..1m..(.0...z...|.n......Y....-.EQ.1..s
K....i[.U..'..w....Z....h$.\s=.I.....~s..5`sy.....k....&.......7$L.!..
.fdC.....K_U...=>...tZh.m..~.,E.....I.....F.Qq.|......S.3C....M....
........g.."...U....s....s'....g.G].....x([email protected]
>:SL..gH..%_........4_1o..0:m..`Yk.]N..x*...B.....^.".0..:vh`KW?.@.
Q{T9....'}...%......]!?l....Z.gE.bZ@..:4~b...1..Y....k}8....m.x..&~...
F..-7.X.0L..'.....Wk..Y.J6..,........VS\..B. ..<.3..Q.3.....9...>
;......1...G..2 .Q..L.'.~\..-.....= ........~*.....$?..7v.<2C.....=
!4y.!..4..u..QLR......_6x#.C...H.....9[I...3.V;.{..~?...jl....oh..m.#x
L.=F.....a.i..y:...4(....y.}.......0......
<<< skipped >>>

GET /templets/js/jquery-1.7.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/?pp

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.aawgg.com

Connection: Keep-Alive

Cookie: safedog-flow-item=D8B6FDD6925393D9A973E2380B4D860F


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:10 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By-360WZB: wangzhan.360.cn

Content-Location: hXXp://VVV.aawgg.com/templets/js/jquery-1.7.1.min.js

Last-Modified: Thu, 23 Jan 2014 16:04:20 GMT

X-Powered-By: WAF/2.0

VAR-Cache: HIT

cache-control: max-age=14400

age: 0

Content-Encoding: gzip
600a...............~.G....y.........s.AB8.,...mZ.v...?.... @.....g..r.
.~...UY hw.9..^D..Kdd..y.lw...o....w.....x.........u../F..I..-..g...9.
..W....g..]....l...E..].v.......`.......................a~;].eR._....|
Q.V.E{...j..Z.........u.._..:...|.1.t...ic/.k<o.....b6x3o.ZY......f
c0Y.L......`Q\.......j$..|V4.k..h....u.?.....W..iq.....p._..V........A
..p.~2X..c\LF.U.....H^.'...Y.....z..jM........U..........1....W..>x
....f.q..o....W.y....K...6Nw.b..w.....F..h.5N..T..dj.?./..AG..y......h
 .......0.v.....E....-.2Y.[.!.i.sw.2<(..... x...z.~l.]d.Z...G ] ...
d..V.......Nb7I. .....[Kn-....u1.]5.....t..f.m ....V....g........]...{
.E...v._........~...7?4Z.....I...&...7.......r...>.....;.*.r2]..'O.
.Nz....R[..:.d....Z.pw..(.g.6....V..2.......iv...yvs2./......tr2...-8.
..[z2........X0.eKx6...A..j1.....8...........p.UJ>:._.N.. .}t.My%,~
.h]u.'........{.D?.Zw...^c..w..:........L7...Y.......5..uw...@.&.....F
/..}.../..w.......o......._ds..=..:7.....g.y.......?..'Ovo.<.......
n..0ZB/w...jc..].E...L..Y..S .1..#[.Yw....7.9.Z..r.$h..6d.'...U.d..k.=
.jQ,o.../'.t...k..B.Ah..?.u~6:.\\.....=..h..V...`9...S. ........I.....
.X.9t.U.C#[email protected]...?64.^.....=y...Vl...Y.ng..$..75..<h]v....N8.Sp
^.'b ...MlM..&r...U..._u&.....z}u/..9k.W..q..%...]^.;:......a}/...#..x
.A.U..........g.{..}.j.ig.q..k...Io......f.V.......././.....'....v:}.$
4...2..*..f;.V.i.....Y.....=...P....:...}. ..e..u.Z.....i...F..r..Aga.
.........p.9.7R......o............4w.2A....'.?S..l..t..9.D...%cL#u....
.l(#. )W.....3....k.Azr!..ljc=..^[email protected]\..7...J.*.....)...........i<<< skipped >>>

GET /js/script.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 1439

Content-Type: application/x-javascript

Last-Modified: Thu, 03 Jul 2014 06:44:28 GMT

Accept-Ranges: bytes

ETag: "f91823c8a96cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:40 GMT
// JavaScript Document..$(function() {...var e = $("#rocket-to-top"),.
..t = $(document).scrollTop(),...n,...r,...i = !0;...$(window).scroll(
function() {....var t = $(document).scrollTop();....t == 0 ? e.css("ba
ckground-position") == "0px 0px" ? e.fadeOut("slow") : i && (i = !1, $
(".level-2").css("opacity", 1), e.delay(100).animate({.....marginTop: 
"-1000px"....},...."normal",....function() {.....e.css({......"margin-
top": "-125px",......display: "none".....}),.....i = !0....})) : e.fad
eIn("slow")...}),...e.hover(function() {....$(".level-2").stop(!0).ani
mate({.....opacity: 1....})...},...function() {....$(".level-2").stop(
!0).animate({.....opacity: 0....})...}),...$(".level-3").click(functio
n() {....function t() {.....var t = e.css("background-position");.....
if (e.css("display") == "none" || i == 0) {......clearInterval(n),....
..e.css("background-position", "0px 0px");......return.....}.....switc
h (t){.....case "0px 0px":......e.css("background-position", "-298px 0
px");......break;.....case "-298px 0px":......e.css("background-positi
on", "-447px 0px");......break;.....case "-447px 0px":......e.css("bac
kground-position", "-596px 0px");......break;.....case "-596px 0px":..
....e.css("background-position", "-745px 0px");......break;.....case "
-745px 0px":......e.css("background-position", "-298px 0px");.....}...
.}....if (!i) return;....n = setInterval(t, 50),....$("html,body").ani
mate({scrollTop: 0},"slow");...});..});....
<<< skipped >>>

GET /js/jquery.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 93697

Content-Type: application/x-javascript

Last-Modified: Thu, 03 Jul 2014 06:44:28 GMT

Accept-Ranges: bytes

ETag: "e8da813c8a96cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:40 GMT
// JavaScript Document../*! jQuery v1.8.3 jquery.com | jquery.org/lice
nse */..//download by VVV.sucaijiayuan.com..(function(e,t){function _(
e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}fu
nction H(e,n,r){if(r===t&&e.nodeType===1){var i="data-" n.replace(P,"-
$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r=
=="true"?!0:r==="false"?!1:r==="null"?null: r ""===r? r:D.test(r)?v.pa
rseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){v
ar t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!==
"toJSON")return!1}return!0}function et(){return!1}function tt(){return
!0}function ut(e){return!e||!e.parentNode||e.parentNode.nodeType===11}
function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function 
ft(e,t,n){t=t||0;if(v.isFunction(t))return v.grep(e,function(e,r){var 
i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,functio
n(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,functi
on(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=
v.filter(t,r)}return v.grep(e,function(e,r){return v.inArray(e,t)>=
0===n})}function lt(e){var t=ct.split("|"),n=e.createDocumentFragment(
);if(n.createElement)while(t.length)n.createElement(t.pop());return n}
function Lt(e,t){return e.getElementsByTagName(t)[0]||e.appendChild(e.
ownerDocument.createElement(t))}function At(e,t){if(t.nodeType!==1||!v
.hasData(e))return;var n,r,i,s=v._data(e),o=v._data(t,s),u=s.events;if
(u){delete o.handle,o.events={};for(n in u)for(r=0,i=u[n].length;r<<< skipped >>>

GET /pic/images/ios/20141024091715.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 131410

Content-Type: image/jpeg

Last-Modified: Fri, 24 Oct 2014 01:17:15 GMT

Accept-Ranges: bytes

ETag: "2e5d153f28efcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT

......Exif..II*.......................................................
................................................(...........1.........
..2...........i........... ..............'.......'..Adobe Photoshop CS
6 (Windows).2014:10:23 17:16:46.............0221......................
..........................................n...........v...(...........
........~...........>.......H.......H............XICC_PROFILE......
HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.................
......-HP  ................................................cprt...P...
3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@.
...dmnd...T...pdmdd........vued...L....view.......$lumi........meas...
....$tech...0....rTRC...<....gTRC...<....bTRC...<....text....
Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-
2.1............sRGB IEC61966-2.1......................................
............XYZ .......Q........XYZ ................XYZ ......o...8...
..XYZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.i
ec.ch............IEC hXXp://VVV.iec.ch................................
..............desc........IEC 61966-2.1 Default RGB colour space - sRG
B............IEC 61966-2.1 Default RGB colour space - sRGB............
..........desc.......,Reference Viewing Condition in IEC61966-2.1.....
......,Reference Viewing Condition in IEC61966-2.1....................
......view.........._...............\.....XYZ .....L.V.P...W..meas....
............................sig ....CRT curv......................

<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112510557472.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 23554

Content-Type: image/png

Last-Modified: Tue, 25 Nov 2014 02:55:45 GMT

Accept-Ranges: bytes

ETag: "daaeb4f5b8d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z%......
........u0...`..:....o._.F....bKGD.......C......pHYs...............YHI
DATx..}wx.....;.v%:..F....|.....K~_b..c;6.Tc.`.. $D....J...t..(.. .I..
.............3w......G.....vg..y..sOy...9..2.......w....o...k...w.Q.-h
\....n.(.....^..D...#h..x....]..|...]d.(y..i.W2.L...6.....d.t;...=....
/.;n.. ....p..t.k.6.Wz..s.:.....X.5.}..Y......)..{m......>..^.E..-.
....W.L..=.zr......1...?....?..,...o..._.%a..y....D6.^...#...Ml<...
...F....ta.5.^..B.....8..8...?..|n.'.C.imc...'.....y....O...<..g...
........}.....{............$..8..3.....>.....s6.}[.c..p.......4z...
.. ._K.../._.UZ...&.<........s........i5......oN.R..a....*..)......
.....(........3.......w.g:.c..uL.x..U...e.C.x.U....?_4w......~.u2..;..
..u..q.#>..o...{...{ [email protected] 5|.OZ.z..C.
..... .I..%[email protected]..'.P....c.W......D.......c8....>U.S
............pZ.%..@*.. ...&........sO......Q..m.........e.......Y..[f.
C.T..9a....}A.I,..-.[..%.5...... ..Ji....0y&..J...O~.E.8.O...J...]....
T\..]......4%..W...:...A..l...}x.u.D.............=...v........T.M...y.
..w.._.e&...V..z.Xa"...G$`...B##[email protected]..;.o....H 5.......}.....]
.N=..N7.s.......~..{P.3....w5.k...oE..}d..zf...}.....v_.>?..Au.....
....6...[..C..X...z...`uC6V.B..m`.l..)....&..6.h?..8.......).. .X.;k..
mC\...3..*.!.T..Q....8C..P.lCR]*.Me........Xq...,J.........O..M.4|5.\.
...Au..z./g...M..[R....Vo..^..H.Taw.X.lU.X.qV..D.x.2"..EUbT9I"..."....
.'..R....9.2."<..Y.o..DC..$..R........C...Pi~i...L*....lf..7...<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112113188786.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10748

Content-Type: image/png

Last-Modified: Fri, 21 Nov 2014 05:18:33 GMT

Accept-Ranges: bytes

ETag: "8877f984a5d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C....'WIDATx...wpSW..5.3;.
3..v.}......,Y..B.`SC.`L..0.$.._..).l.........%6..P.eY..aJ.}.s.d.b0.l.
.....#.9.<...s.d.9|....3i8i..4).TE. .V..W.g.9|.gO0....J.L:L*...jT..
.d.......6.l..Z....9|.h`..4...&......?y....\,L........ Z...=U.E...<
.ca2.=...6\.k.0..^.....\.....}0yC.jCR..&..R;.y!X....&K. *......Z'L. ..
.>[email protected](j...X .I!E0..9.).z.Y..w...a..ZY....
>`.S.....a.m.Y...d....0...7.b?...or<.$...6b.......E.4.zD#'H.....
.'0.....2._....,.H......a.r....ym=....`Y...<........{.9...w........
.......3.0.B...D?3.,.....3........sK`7.a.(.UU...J..U...>/.3......Y,
....v5...o...yX.~...O8.M.&.r.m.cj..M.9.....s.!.V.$.9...e.>X.].-...V
 .QQ....Ab.q...l.a. .............B.....6...8.,...<..a.;...#.D...=".
y.....Nb...>Q.a..3l.o.....v:..U..'(....i....bQ.......L.)........j..
..-..f`...t.R.s....e..v2..i...#u..k.ov. W.s...f..............S...t.Re.
.,W......5.=Xw..R......#k....`...:Q..\.:.|..b....q..0.9.$.X.....X..v..
..N....^...%.zjj /..ErBVY....3...e..?.1 ...h.5..E...M\...:.{...a..M..&
lt;..).....tF.?=.C.w.......D-*J.}"*.Ywg.).#..(K...y...`..0.8..l3Ll...E
/Q.(..X.5z.lgR.......U.`.e(..cI..a.'0...Fn.,7....h.Z.>....wy.......
.N..8..(...#.;RdY5...??.]...B.?z...*.SN....M....wRl%{.iu.b. .(XY]...U.
z..U.......]....k*.*.....c...m.....gC7f7...^...k7:.6p.\...>.y.Q,..L
&.}.).0(.............F:./. g.y.}|.Io...q....OH........k...g..;....q...
...Z....{....Q.v..]Gds.K5...EV..}....=.!...z.=R=.n.r.9k...R<L..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014112113301451.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 50924

Content-Type: image/png

Last-Modified: Fri, 21 Nov 2014 05:30:35 GMT

Accept-Ranges: bytes

ETag: "a4cae5464c5d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z%......
........u0...`..:....o._.F....bKGD.......C......pHYs.................I
DATx...w|UYv.{.H.9G.s...,...H ...... $..J..s(r.E....n...O.....=..{...y
vW......^D.......c}..A.^..=...k.....f.&..K.h..I.lWa..I.P....5......V..
....d...~O.e...a.M..Ln...P....r....}..M..Q.4.*.9T.s.....yF..uN..}^...z
.C(p.B.]........4.N.rdj.YN..v..L...u...~....0.|.b..az|...G$..F..-....h
....h?.(J....F.q.G.G.l...ls....\.....Gs....#t.#t,.1........?J.Cm7.....
..h.?.M..Q.3I.......k]. .y.r.h..k..".._.g9.!...~.N.....~...y....o;.Z..
....tV.......................j.}&..u(..5?.....4..S....C...!...^k}..D.6
M.....aFSl3.....h.Lg5kM.4. :%.M....d..I6..m.....i...'.....f.(2.A!..4.M
..c.i.....J,f).PL.b....(..C..<...Qas.........!... ....V....... ....
.Yv.*..y.z..~|.........GQ.N..qL.....<....^'.........9..(..G...y....
[Q..C..9].^[.....3r.z:F..qlZy..|l:.F..*<N....'Q.N..N.=NIl.8.b..X..C
".i..w..\...s.B..v...;e.i...v{Pc..U..Qi}..6.Pes.....;.o..u)......;...b
3..Yj.n.Y...........H\...z.......>~E..{..na.C=V....hJ..5..3..e.4...
.5..`..........].$m$.u...(.N...:.....`..$S.r....I_..1.A.E....K.'..*...
.[.Yc3.r........m..Q...J.y.u.G....i6=...G6C$ .D....f.:.....rV...cVA.uX
.{.75..Q.6...hX.A..sT...............}....Q..C.....v.l.H...h...Tq.M.w.~
...'..{..||R.&.S..C@..@..)4....M....W....#(p..|..(p.B..n..B....D...k..
.....f?.u..Q.r.......~.j....[...s...Y..>C[j....0n.2./.l...:.(j[i.$.
..1.......M.".9.n...!.....J....5.). ..`.*[email protected]{5..$q.:..f.4).=rP
....?..M....../.fE;.M..k.......h g....s.W)...6.ZU:(?J.-C6'0U9.....<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070514205801.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 12645

Content-Type: image/jpeg

Last-Modified: Sat, 05 Jul 2014 06:20:04 GMT

Accept-Ranges: bytes

ETag: "684ba6281998cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.......................................G.}...w}..Z.>RX.U=".....<
.gq/.....c.PR:..#.`.<r...@......>{M~*Ym.....t.T..Qk.j...X>\.|
.1....x......r..kL..M=r..w..S...MESl.........v.p....G..^...[=3..ov..].
}O}.\...Yh.Y.;E...&=.z]r.i..n...v.Sx...R_.-.!..6.\m.T..du9F..T.!1.....
N..|.r..?p..........>B......'yVoL^6......,..*..$... .s/@.....[.~.N.
 ...<.....Z<.'..aC...f...[O..FI....kc..P.~....N.l;F.A....q.....x
>..[ g.[&...,.U.......v....}...x.. ....).<.R....t0...kgqH...W..T
.q.@.....#.......P#..?...vy...Z.........n.......x....u..'..M.!._...7..
%[email protected]$.r.O.O.....s..s.zU.8uB...Y.].
^k.<..V.=. .... }.q..L..[Vm....u.z<...H..#.Ij....~.L->.....V.
....5T.  ....VD.>L.Gpx .....EL...=AXS..is....m.u...L.4f..).......w.
...v....d..UY..Q.td[...-.......t./.V.*r#...n..-.....(..]$; .V..</..
..S.~..hy...Xn..{....y.c..W.._9..FG...... UTD4.L...|e......m......=|..
.S%.iv...e..a.0...'Yk.WN;....&p.wnt[.I.h.M..w....8]2..G.y.=......C[.VK
..:&.^...?i.z.F...n..x[....t.~............E....%..Yy.._ ..zY.o.Sg.}.&l
t;.R>.U~.H...}..e..._...3&.j.<.ld.....z..Q...T.#;.....?...).....
.....................!.."..#1 $2A...............{^....c|vF?,>.tS.\.
.C......4.B./P.).8..[.J>..oJ.,1Z K.....8;.....u. ..B>..].j.~a_..
.V.o..k.....X..}N?-w...EZr..U!.P....Q...".a.|].......q...j ....7rZ<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221356494.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9306

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:35:00 GMT

Accept-Ranges: bytes

ETag: "781366cfa95cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
?........................!..1A.Q.."aq...#B.2Rb.....3rCS..$............
........................2.......................!1.A..Q"2aq.........B.
#3.............?...Ez.".....D.2\[email protected]...*.@.
1...N.J.1C.6.K.A2......;$..d..i...n....;......4.\..t.Yl..3.......!m...
[email protected].`...'#c.v....5.i5.!r..r.%.8...... T.Nd..........m...'x.\DMWG
..]..ZIlX."N....q......R....DRB..y.7@l..[........."..aL.:niwXu2...(...
..iV...":...J.d.:....mc.......6!.:...}..E..f.b....5.'.. q..[0.....\...
oH..Yx..HQ.V}.....oH.cj...s..H......OH..N...zu.5....s.[......D..#.1C..
.5xEHiC\.....!....x.].@;.......1.jj..M.&.jv.........9.2..G...sa~..K...
.....v.~...$...J...).X{Cc.4q....q..Wq.'j..:.2.&....q..l]....#GJ2..:. .
H&L.3.SH.lam>62.M*....<*..V.............nb...E.8S..%k.r.....F6..
.ol..\F.H.@Eg;M*..&..(]Q......L Y.*%..]:c..F&.r*A.D.,9..(h..........d.
.1W]..S.......Ll%q...y...zm.,..\.v......C.......0I5,.*..s.2..,X..."oH.
....Js.r..&...6.(4.,..wM...W..\....g.............W4'0%s,m.N.2..e].....
..!..u..Z?RC........$.C..=Q&z.t.t........*A.D.4yZ..R....R..>..Ls...
.........[.w....q......|.R...x..Z*.,Ni.a..).......8.....)....3h!n...K4
 kn....Sh1.v..E.2\F...@,v...I...Y.O.o...P...$s/C......".....o...*T..KZ
....2..m...k*...3.,#..f.ll..D1...h...z.$...G....... .D.v.c..zkI..X....
....2.D.^3.8..i7^$.2Q..c..mo.jt_...O..PzP.. >;.5.>...R..GR.;<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221245671.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 11721

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:24:57 GMT

Accept-Ranges: bytes

ETag: "d4848d4f995cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.......................................Ur.......L[[email protected]..
[email protected]#...J.g.ZHi.z..$...Y.w.I
..$...F*E.....P4..N_.Q..._.../.w.I!...q...5.y..{u...........mE.1~h...0
.w<.n%{..d.F...t.O&...5.b.hiH....;WN.r..T.a.4...y*te }.....2!1..4yl
r...v..m..K.3....H....hVL.......D.i*.Ej .t"...........P._....b.uV..(.9
...z..R.....x.......n.^L&..3..<..>..`.;...4..&...._G...\......B.
.t......l"...Nw.vX...mC.C.vX..... ...}%.cZcat..SbPm.6.n*t..G...%P....z
T...;L|..BLb.r.....h..!..$......_.|.cG_.82.......=....7%d......^K.....
z.?............m...#..g'<...n..H...W..d.N...;. ~..........'.l.... :
24...g...Fn.._aw*.8....GDn.....v..ly.2.Uv.&?^..'.b.~86.#*gYw..8T..6.8.
9b.uV....EN.S.Z._?......~.va.7Ik.vWD5.d%...:..X.UKOE..Z.......vUd.X...
...Z.......Y.)'b..;..n....o1...y*V.......^Ip=.{.X........Xd.A....j.%r.
..%N..v..r.C3.v.HrzT.fK....zjs..tV.e...O\r......%.i.J5...#a...%z..T.F.
.....i.. ..5.p....<...5...........%Exh...m....l.c.1e...(.L.4_.....]
..D,<..O$%z.<.....I=]AO.t...>.%..c...y*.MF.....>..%VR...6.
`A..$-[. . .N...l<...,aa..I..I.....(............................!.1
. "#2$0..........L.b&.E.. ........^*..8..q..c......E....A. .I......l%2
kx...mu......^A6E6A|...]..w..eVw..k9Y....=..E....r......I.S&\P..@;Z.-.
.g.]..q...HWj...#`.......,kk..d-.... ..=.S..(...._.rE4N*.....n....<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070220536890.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8525

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 12:53:28 GMT

Accept-Ranges: bytes

ETag: "6225a69ef495cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.@..........................!.1AQ."aq.....#..2BRb..$34r..%5S..........
..........................2.......................!1..AQ..a"2q.....B..
...#$............?..H..............6...K.'.Q ...j...". .@..@..@..@..@.
...H.X..d...s..M..V....Z..D.......Y|.U.6.e]S.ep$...R..u6...5JN.p.{.#..
D.EWBJY.U...R....Xp...1^..>?............k..nwj.m..S.qL..a:...|.....
....>...}.}.>b..;,%..)[email protected]..~B7..e......
..s.OS.!Tc..........OS.Z`.E.b..t.8.S9.J.i. 6..6.)B.U.....:....M').:^..
.i7.}.....b.....k.........:..{wFX.ak.....5Njr.....aif......*.[.C5?....
...1.Za.R.m 6...4..lQ.....q...v..h..Xa..f[R...x......F.g.k".H."....DS.
.smp...p"q.mjB....]a.h....{.\IP.......I..I...YI..M...?w..4.....x'..Uj.
.v.....JF..)d....#z..E.".....L...m.%.%)...<".ova.. ....`.XJ.I.H.mL.
.c...R....-...d..[}......3..k..J...K0Z>...R. .!O....`8..b..s...}..~
....{|{....J *......yq?....C...I9.v>@.5S.F [K..."G>...Q91......4
.f..lum.r.c...&i.w.P..,o.s................T.....G..JRA...Jyv..1...-...
...y...g.?4T.$........v.k-O..>$.]... ...I(.h.P.D...........5.K.....
^.k.!c...)|[email protected]%5.ff...&!ORkY,..,.2..`Y......
.4O<........q.3.#...,.:Z.B..uw..].Y..j...U8...-Z#K2....k .....rj...
...i..R....?.}[email protected]...] .bHlo.M&R... ...Q..\..s.......E...0..312
....Q.S......*:.s..J$...d..)....o>.1..D%)[email protected]....!....2W$...e.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081817192000.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9810

Content-Type: image/jpeg

Last-Modified: Mon, 18 Aug 2014 09:19:14 GMT

Accept-Ranges: bytes

ETag: "90d8a27ac5bacf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
O...........................!1..AQa."q...2Rr.b...#3C..${Sst..&'45TUu
.........................................>........................!
1.Qa.."2Aq..........34Br.#5R.$CSb..............?..k./.iDJ"Q...D.%.(.DJ
"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q..../.._VqE.(.."
Q}LQ|J/..D<.......E.1DLQ....,Q}Y.....,Q}J"......J....6.H..*...^.4..
.~.....O<..y.....<.P_f.p\......<.s....uR.. 7.m..Ii..~|f.i...%
..........`;....s).sM.k...]...KX...6..m...<.."<d.`.......EX....9
.h.%.0*....d.....'q\.f.=.....[....Q.s.....>..Rr..X..Lu.z... 8.....9
A=l.[q...df/k....Q.4-.H.$..Z^....{.P.8.R.c....q..H..".ld....(jj..j...{
."......./..-..]".f.x.(.:.s.J.O...A.p3...:6?l......W(....a..h.l{..q.[.
g.c.,......RV.k..p....t4.6sZ.6:.FV.G$.p...Cs.;i.Ed./L..._.`.e.K*.5.d.#
.'#........E.oi1.;\.*W... .2..L&..f..l........d....&\...A.p...'<..&
gt;5.IN*$....../..>...........gn.DH....{.O.w).%[email protected]
.......\...5....r.............i.Fc.[..f..c8H.....xu.5.SC.._....*G..g..
.T....>.O..\.g.f.....j.4...?........GN.x.~y.j.......j....eK.1xn.{7.
.r..mv.../F.zZC. ...h).O.`...}jXS.s.j.;..a-t..;/.Q..Yv.&._].F..^...skq
.=.*x..}3..5.V.q...o........1)..;.^....|.:~................J.H.2pN....
|..7......z.k*!.s#..hh6.v..m..!....V^mE.6..%H ....G.n.....P.......H=..
...b.........Dd.[.;......Y..........4]..uC..jo.s...U..m..^....)aY.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081122528777.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14345

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 14:52:19 GMT

Accept-Ranges: bytes

ETag: "7463b3d973b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:07EB1BFA198A11E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:07EB1BFB198A11E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:07EB1BF8198A11E4A838B028F7746D81" stRef:
documentID="xmp.did:07EB1BF9198A11E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
.......................................!1..AQ".a2q..B#....R..3..r..bC$
....4.Sc.D.....................!.1AQq..a..".2......brBR...............
?...!..B. .L.h...3..m..!.......FLv.K .....D.u...n3?.]............9.yX.
.....q....."{.p..ik*?......G-......9j%..Ag.n..Q..R...........(....e/*2
TNx..5.{.;.p@..@k~..2\..%w.*(ctCIv.'...#O./c.Y'_.O..u..y...zN.9...~...
.W...r..,.......}..R!.\...G....~.vc....H.Qp.|.>.~>.........D<<< skipped >>>

GET /UploadFiles/Game/s_img/2014073009514101.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 24793

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 01:51:40 GMT

Accept-Ranges: bytes

ETag: "9acb83ce98abcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT

......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ ........
.1..acspMSFT....IEC sRGB.......................-HP  ..................
..............................cprt...P...3desc.......lwtpt........bkpt
........rXYZ........gXYZ...,[email protected]
ed...L....view.......$lumi........meas.......$tech...0....rTRC...<.
...gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Pa
ckard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-
2.1..................................................XYZ .......Q.....
...XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ...
...$.........desc........IEC hXXp://VVV.iec.ch............IEC hXXp://w
ww.iec.ch..............................................desc........IEC
 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 De
fault RGB colour space - sRGB......................desc.......,Referen
ce Viewing Condition in IEC61966-2.1...........,Reference Viewing Cond
ition in IEC61966-2.1..........................view.........._........
.......\.....XYZ .....L.V.P...W..meas................................s
ig ....CRT curv.......................#.(.-.2.7.;[email protected].^.c.h.m.
r.w.|...............................................................%.
 .2.8.>.E.L.R.Y.`.g.n.u.|.........................................&
./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~....
..................... .-.;.H.U.c.q.~....................... .:.I.X.g.w
.....................'.7.H.Y.j.{................... .=.O.a.t......

<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070814266186.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 11245

Content-Type: image/jpeg

Last-Modified: Tue, 08 Jul 2014 06:26:06 GMT

Accept-Ranges: bytes

ETag: "efaa57f759acf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
......................................W>Y......s^...k...dbl.....s|N
.N..p.......8!.-..{.fa..z!......O...?$......>..bj;)Z.N...C4d.V.D...
'.7... I..7..el.q..4...D...uq..7.k ..(V.N..\..y...m.S..u...^..L...jYm.
.m..;.M...U..7"....a....C".e...v|...[.M.~.0..D.V..js...T.E.....`...Y@.
.)..#bj.8H..Y....*#1._........).........q..d...U..}_{;.7k0../...\uT..U
'....L5(............*.@]...{[email protected]..]......0....q....X.v\..
[email protected].*w.......g]...y.^..;U.....Y.5. ...&..=C...}..<
.H.2...OH...&.y....}MKd.j..Z..W..j.,Sq.w...I....P..U.x.J.]..3F<{bO`
Ss..v&7.EJ..y".......ue.....S%..5..j._=.j.......~,.... .{.JB...(......
b=X.._9...z...>..._r.4*..."V...|b.?...,...........................!
".1..#$25%3 AE..........)..."..(.5.F.H.......~.........Lg.j<...'...
3v..j..PL\.....v;...m.u..3......J...\tF.}S0._.?..h..^...hl.W...X.ry6l.
z..l..q.r<x..:....)y..|..x.>.3.......9...v;5'.mk~.`NLq.s.o.... .
....u....*....8..c8.".7.../....Ll....s...T.&...)....(.8#81..'..R$j...,
.....8....H..9...i(..m5H.i..4....u.W...3...FDFO........S.M?..aG.xi.._.
.H2fg4g.^f.....W..'.6..,..Z...5ld)...X.OYv..v6g.....v}q......K.. ?.2.0
..._,.d.v.......z... Z..Y.urA9..b.e.N..:_.lDOE....N&.... .|.......I..=
.V4..Z.0.m.W.Qe*.^...........^..../.....}..c....-.Y.....wW%5...5 ....I
x.E..}L..s./.yW>...R=O.9...j...Z...b....;.c. .-dEE..ok..g..X..w<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082321016002.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9168

Content-Type: image/jpeg

Last-Modified: Sat, 23 Aug 2014 13:01:46 GMT

Accept-Ranges: bytes

ETag: "86e72065d2becf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.K...........................!A..1Qa..."Vq......2BRT....#34SUbr.$56Cct
[email protected]..!AQa
.Sq......T....."2R...#35$4b.Br.............?....S...:.-./.....U*...D.%
.(.DJ"Q...D.%.(.DJ"Q...D.*...G...]......W.O...........UR.(.DJ"Q...Eqo.
J..n,(.........(..V.......z(d..8.\.....0.%.c....>.aaC_..m.....".5:G
G.........4......!.i..R.m.........|.x.;hm>.v.hd......`v..)..g4m....
.........(.L.%_[.G...i.?K{...?g.M.9...`.<.-.4M..Ja..c)q'.......@...
#...........T.......T..L.........Do.m..V.e.......=ES`].y......b......7
.i....S.-....Sn$...hA.."..p..ii.p._5..(.DJ"Q...B.%....vJ.../.cIO..W.F.
.....UR..D.%.(.D[C(2.../&[.V......;..Kc.......x.8x....<..G.V..wJ...
..y7.nK.0.Za...#.`!....K.O;.K..tW1....v...-......j,">...;.d...R....
.]qe.......'...A........l'...=u%/..k{H..3c.){#..u...G..=]Y.D...={.^...
.Y.]..{l9n............."6..v.................P...,5.q...D;..E.2B\.....
..... [email protected].. ....4.en...3....5....em...Ms..'..4.4...Ev.......5.6#1.
/.......Rqv..2>G....F...D.%.U....'...]...g .E..1.....u.r..p.h.y.z..
..7.?5....(.DJ"Q.......fD.....[Xv2.#..X...Q.../......_.?.?%..OF.1'...B
..<..'..N.6-.....G..B.i.........s........6D..b.......O<..W4Y..p.
.:...Chu...=.B.8~.Q...cx.....4...n..ZM...x..r.9......#..Z  P"[.li..|.}
...t.%. .WY.N..%..=/.1"GI...vw....8..V.....(.Mo..`P.8....|...Z$...<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082320355948.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5467

Content-Type: image/jpeg

Last-Modified: Sat, 23 Aug 2014 12:35:45 GMT

Accept-Ranges: bytes

ETag: "b481e0c2cebecf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.E............................!1a.AQq."2....#Bb.3Rr....4..%CSst.......
................................>..........................!1AQ."aq
....2...3BRb...#$C...%rS..............?.... .... .... .... .... .... .
... .... .... .... .... .... .... .... .... .... .... .... .....1.ea..
....Xh....].d...'.M..BS.Q....8L5.*..q}.y.....s...... U\...F..r....f..z
J.n8}..e..H...Na.u.b)(....M....5.......i.7u.mU.R_..kU9........!....}..
.C..= .j<.s?.~.jl......W....d?R....T4.............;...M...>.|..^
..G|..mM.'.t....*...$.{.-...(...q=..Z..]....R...BV,.Z.Y....m....N.....
.....K&6........y...:9..z....A.$m{.F....m*).....L....... .... .....,..
7.#..l..{...s$..j).<.Y3.j.....K..7VKxp.....y.....5!J.=.4..i...k..{.
..o......Wj.k .e....I<./{.RT.....&....GV......g..1.....<....}..r
..8..z..........G":.L...d.....UV..../......4..X,....]..".o..A.?...=9(.
...c..M...8...!.*..v^..X..m.. .... .......69.pkZ5.'@...6....hL....Ta..
C.....z.............hP.Z..s..i|.. ..eIlm}..|.,.8rY...... ..........%.O
-....h.{zl%....~....;...<.......qC..M..Za*.8f!-..'....?....y...@...
[email protected]....=..c:..<..............4..H../.....u.(....*xn....T
.#....@4(..!.......V..v.....s.....(....es[....&.U......U7..@.}B)E.g.,.
h..9....i...*....@4(......A . ...xU.8..u.l.....u........G...rl.}.....q
K..5..Q.ZC..............{..b.. .... ..f&..al?q..;v.....:k..A......<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073015239498.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 26929

Content-Type: image/png

Last-Modified: Wed, 30 Jul 2014 07:23:24 GMT

Accept-Ranges: bytes

ETag: "b442ef25c7abcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
.PNG........IHDR................u....pHYs.........B.4.... cHRM..z%....
..........u0...`..:....o._.F..h.IDATx...w.eey..y.*..}...>[email protected]!.
.&.D..%....&1*F...E.;[email protected]........*O......sf.....\...9....*
[email protected]..}.R8..R.8......B.uB.......t...~...A....I/.wq..p..E)%
.sNJ...=..?.7I...(..sN).......Z..R.Oo.."..g......Z-..:....5x..?Xk.^.R.
=..E....,#..{z}].eYX.a...^..-B...s.^o.f.9ov.i... ......b.H..F..CP.izS.
Ea..&..U.8x.s.H)..v..... .....z.r.._..........y>4v..[e.-v....Ge.YS.
W).R.4M.B.........].C#....p5.M..H).YHK...-.B..{.A...Y.*x..B.%.E.aq...b
'MS.(.g} ._7.........{..,..x.'...,...<[...x.....|..jy.-..x.[`yO.5..
]....8........|.}Y...7...h-.G.....Y..!to!..#\.....Y.......Z..W....8...
...^......Y.eA..../.&,.G..R"..Z..~..,o....$G....(*.8....{..u....x..Y..
...%,&.,..{...%.u.........{...0.q...F..hy...>J.j..&.......9_....[X.
....I....v..k....E...G.(3.J_..f..G.b.i.s.(.(.."....=.....6.....J./|..X
....Pe..E..........l....a...[..{?.Y...q..X...X$..c...cq,.wq,.E...E....
.....8...8.."x.."x...X...X...]...]..c...cq,.wq,.E...E.B.x.).....)..2..
.8,...dd.dd`.g0@?......8rp...r w.......`.18.9.9.9.GBF.rn.gxo.W....m...
../..K!I..y 7.<..,.../..`}F.........Z...G.I...).iq....$......<d.
...]....Xp.l...../n.yV>.S..w...18....>[email protected]>$.....H}^.^...D
oc2........@........'.;.B............w..$.)!..........In<..Tn.7@...
0."...J.J..45.SLA#.....r.s.,.:...rW\j(E.c..Hc.._.L8...rI........SC....
`.;0.H.....X...Dg.~.....[.... q.;.. ,..z(*.r..C.!Q...^...M.. ....h....
....E..$..W.%$8I"=..b..y../..r.>..>Z~..l.....-........`..)..<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082815472365.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5099

Content-Type: image/jpeg

Last-Modified: Thu, 28 Aug 2014 07:47:51 GMT

Accept-Ranges: bytes

ETag: "8a93d35e94c2cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.;............................!.1AQa."Rq...#2b..r..3B..$..............
......................9..........................!1AQaq.."......2...#R
r3B..b..............?..M.@....@....@....@....@....@....@....@....@....
@....@....@....@....@....@....@....@....@....@....@....@....@....@....
@[email protected]},5.^EAb.c.B.P.I.-.?.-...}.I.....<.^o.....e..Q2X.eb
...]q..%..'F...$n.Gn..z..vW6.]..n.]....ju..JI..2..... .... .... .... 0
x.O.WAWS.....UQ;...gF..N......u.e...O.a.QTM..............bP..z..Z.Q3).
5S.v.8......Gr.mgqv...........U*..No.<.....Y..X.......... iy.Y..w$.
.J.i.....A.....e.?.G3..I^....J..fe..n.s&.%n7...*...l.x.w.7/i..U?..T*Y.
./j..........9..O...3w.}.4...Ax..lL{.....b7.y......T.....B.g...?.2;B..
....q...gI......es.WUP.......eZ..8..........t..5.I~l......)..'.....~..
l........U{....VjZ...>.60.m*p.E..d.k^p.....Y%.....p.7....?..z..;..Q
.E.4..n......o............>|.MwE...5..=..YSKv..AAr.E,...f..m...y-..
.Z..MV..p....O.........i.>...4....@[email protected].,..w.{)9N.d.H..
...$x'}.G.....v.....b..e..c.it........I..z......u.[.`i|..2.1.x.z..F.[.
....I.Ie..J0[.xE<...*..y,zco7....6.Q.........>D.=...'..J.\k..p..
.....|......l...;..........,...u....2...an...?...........g......../...
.d.KK......^..\L....S...l......[.5..9.E.m.H......7.....jZ\.;*..o-$.~..
".Z...J.s..L..../.V?.1[5=..........=..8..Z.GT...{{..r..../.... h.R<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081916486563.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8642

Content-Type: image/jpeg

Last-Modified: Tue, 19 Aug 2014 08:48:58 GMT

Accept-Ranges: bytes

ETag: "c661656a8abbcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.G...........................!1..AQq."a.2B....#FRb...rs......$3C%&V...
..................................@.........................!1A.Qaq...
."R....2BT..#br..$3C.D.................?..U.. ....P..@(......P..@(....
..P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P.
.@(......P..@(......P..@(......P..@(.p|.s............8..!].} .s.P.....
P..@(......P..@(.7h6.....T..E........T..R...#....<....(n{.Qj.vv.Y}8
{4..'.K..]....8.......^].....HQ..`c.&.%.V|0..o.:e$./Jo..y,|..7g.....#n
V9~.*s..q5................gy......._xh?.W..V.....)p...........l.......
.....;.../.x.j.....G00... |......}5W..... O..x.l~.V~..k.Jdi *.. .... .
W..I..U4]2.....Q.]{.........~.B..D{.c......."kl..UaQ..6....;.i.I....q.
9..-....p...L5.............(..I}..nog.Y...d...m)<..IR...$.$z...I...
[r...{......%E......q_..4...(......P..@(.. l.....X.-.......$..o<...
V...... ...>E.B..k7>.n..'...k.....cYv.K!....%.?..m..2I'..y.|.U..
Y..g...}6....p^./.......Y..}'dD..p..5)!.0.pq..~B.....Q.....n.d.cK ..?.
....m..V..]Z..3....Hm..B....j...d....b.mUQ]J ..`.....IV..'.5!..".U....
.-....._..:.{.....?...\...q...._.....6....cy..2i..}.q.{U.L........(..3
......\;j/.#.;E.G.......>.....:...>..L..\$.......~&t6.X.....~...
...D7..{5...}....p...?.c.N....h.....5...%......cm7...:Uw..!.1....[J#.T
9...#..qP....xf...Kmn....%......*.im.N.\.}..F.....O?.:z'...>G..<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073115135228.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9100

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 07:13:11 GMT

Accept-Ranges: bytes

ETag: "66c63de38eaccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.V..............................!1AQq.278au....."st....#5BRWbrv.....$3
CST....%DV........................................K...................
......!1..AQq4......"356ars.....2C..$BST...#bc.....R..............?...
.^."""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
"../ .I=....5........Q|..z..... ....5.".w4....J/.v.]^.FtsKO.h...r]Qr..
....q..4...h...|cW5..Q. p9....... ..s..j...3 ........-(..i.../.D_AO)..
.A....Y..W....in.cD\..EuE.""""""")[email protected]..*..&.^s.z.Z...
...?t)....wW5.;O.6..09..u?=Ws..'....y.#.....7.j/.......!Jf<K....]..
[email protected]...%.k3......?. ...N...(o....D$..5.jz.U%...X%x.......h.%.k.
p......O,..$>.Do.....?.:.~...z,.........L..i.B*c..r~..g...z[.`9.<
;....:.u.l..{..u_..?v..c.......toi-s.4-#.......pp.........e./.hw...._.
...'....-R..".....X..kH#f...Z.....f..j..\.'.\...x...\t.....j.-...:..."
.[e...;&..1..`........a..8.....s.....bu..<(..6...Z....O..?m..?b..4I
3.....T-F..."""""""..#.....S..,......Uq.O5.87.....|._j.M..a...u?=WS../
....y.#.....7.z/.......!Jf<K.....Z..u..&..l....D..l.... otA.8...X.;
{...J.9-.........K"[email protected]...,3...EO.X. u..q.1.k...c..d
..A-)~.0H.....:.}...lX.......;..T....c80.....<3....'....*.L^S..g.T.
...~`y...9.%irH..qq.....AX.......a....pr ...%.k........o....y.x|.9.bu.
..)<.q.C..?m..?b..3.....uBTal.""""""").b?.....>.2.Y.....W.D.<<< skipped >>>

GET /images/common.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 7944

Content-Type: image/png

Last-Modified: Fri, 25 Apr 2014 12:39:12 GMT

Accept-Ranges: bytes

ETag: "0d8255c8360cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
.PNG........IHDR...q...s.............pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112713267103.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 15937

Content-Type: image/png

Last-Modified: Thu, 27 Nov 2014 05:26:44 GMT

Accept-Ranges: bytes

ETag: "247db0bb2ad01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C....;.IDATx....x.....)-.S
.........$D..W.u.S(.B.@)T(uwA.....,8.-8.x..w}.s...lB....a..<.;3..=.
...{w...{j*...=F..Y(.a..2X.....Z.5.^..u*......d..V.eZ/R..L...P.q..U..m
.4.E....x.r.o.X..F.i....L.\.Z.......N.....B....5..Z.......(.".3.V...6.
...V.Z..l.........5.....,[.....v...0sU.....:.j....."..5..$.].M..XM.m..
..6D.........G..<X..je.JR...`M.:.j.d.,....Z.2..5j..:.j.i...........
.....U.}.Q.;[.a...P. ........w....o.....e.W.$.`i....S.....Z........o. 
..;.(~b.n.~......e.5......{.K....-?f..*lw.P..t..@[email protected]..._.....w}N
..>............99..7.6.a....Of!u.j.n...].aZ...Y.A7.[.|...i7.....!.r
.C.....Aezv"R....}'.aHAFF..2...d....f/.v.[.y.~...w.X<.l{@GR.<r:2
.D ';...... .....EH./.1 ...$.....~.ah.E..j.^..Hyx.%.......-(D.........
..AVz.2....1;.I.4..>...3...d7.GU......<.A....Y........\..e. ....
..4..&].p\t..Q.,.....6~....<v...?.~.S......S..El.Wy......e.fJ.%...d
B.6.......#04.9>.T.R.T....#c.ON  ........VH.. .....\r&..4S....$^L@d
..gWnCR.>.W......Vb.f....?E....T...g..R.G..Q..8DFkqz..$......... =.
......BE.a'.......Dn.......,r\Z&R......{&.g..!..M.\!0(..:....2..MB..H.
.....)!............. .. W.)W.>..8.bNG...X._..:..U.#M..F....{...*r.p
.I}y..|.....Cvf6...a$.O.J..c.q$.."f..cc.._...sE.2.G.g..T..r........2l.
.......<..L.0PH..D.~.|t<.'>..FN?..G..t.i.....&G..a.7....).._.
Z<"E....%R.S.Oa..c..{.p..v....'..."SkD......4.T....TNN....c......).
......r...$\<........|..E...G7.,n.qo.5...".C.0..H.@E.*...../`..<<< skipped >>>

GET /images/title-bj2.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 24345

Content-Type: image/jpeg

Last-Modified: Wed, 11 Jun 2014 08:06:26 GMT

Accept-Ranges: bytes

ETag: "0adaaa4c85cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT

......Exif..MM.*......................................................
.................................................(...........1........
...2...........i............. ............'.......'.Adobe Photoshop CS
6 (Windows).2014:06:11 16:06:25.............0221......................
.............(...............................n...........v.(..........
...........~...................H.......H.........XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /UploadFiles/TopicPic/20140923/å…±èµä¸€è½®æ˜Žæœˆ.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 34708

Content-Type: image/jpeg

Last-Modified: Tue, 23 Sep 2014 01:47:52 GMT

Accept-Ranges: bytes

ETag: "32784c63d0d6cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
......JFIF.....d.d......Ducky.......d.....&Adobe.d................$..F
 ..bn.................................................................
......................................................................
...........^..........................................................
....................................... @.!.0#.51A"34.$..P............
.............!1....AQ" a2#[email protected]$u..br..ScD%....4t............
............!1.AQ".. [email protected]#...R3..b.SP.Cc$.s..................
........!1AQa.q...... @0...P................)............C.?8.....0.b.
...Y...L..6.i......m..%4.`.l....}.|................]_...g..S....!...m.
4.=....g...j.b.n....1..._.....ci)............K:...~..x.{......].J....d
.,...&..=...U...g...K[......................}..a..\..U.....u...16.1On.
.]d......oo..L.q.[....Y.....l..p}.|................/M.Nmzw.cM.8.Yl..a.
N.?......O.{.r.h....(y..E>..4M.b....".k..>.>X.J@.............
....../.....2g...&..Ko......._m._*.O\..B~...^..[)Ul.V....u.,m% .......
....'......3....&m.t{............e.z......K.C7.5..a.c...g......}.|....
.............? ...y.3...I.....?3..SsXGOd'.........I....S...iw...6J....
-np<....?.7.;9H............Z..{...'....H...x......|."}. =U....m....
...&......<..#H(..J.O......z|............Tzo.s......pE$.fNj..|?K.0o
\.{(_KF.......M....9]....T..1..u).ab..}.|..=.w`............p|m.O....P.
.b.[U'.Y?%.7t...t..&j...y....'...vnm.......e.. OjU.* .w......E..E.....
........._.>...#[email protected];..?......wc.~.=s.....|..
4.....{QZ..X..,.&.m.. ..,...............{....}...........)9...y...<<< skipped >>>

GET /pic/images/picpage/20140820155859.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13945

Content-Type: image/jpeg

Last-Modified: Wed, 20 Aug 2014 07:58:59 GMT

Accept-Ranges: bytes

ETag: "2abe35994cbccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
......Exif..II*.................Ducky.......<.....,hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"
 xmpMM:InstanceID="xmp.iid:A23DE8D0205E11E4B15F9C69477B385A" xmpMM:Doc
umentID="xmp.did:A23DE8D1205E11E4B15F9C69477B385A"> <xmpMM:Deriv
edFrom stRef:instanceID="xmp.iid:A23DE8CE205E11E4B15F9C69477B385A" stR
ef:documentID="xmp.did:A23DE8CF205E11E4B15F9C69477B385A"/> </rdf
:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=
"r"?>....Adobe.d...................................................
......................................................................
........................7.............................................
......................................!..1.AQ.aq"......2BR#..br.....3$
..CS.4%...s.c.D'..............................?...{...F.d.(.J|........
...j...;.{E2q.Cp.u.@h ...VV.7...Qq......6=..".......iS.2...{k.z.......
.........#.i6?wK.24$.C.....|9..Yc...Mh4...$%.I......c.z...;bnH.,.L....
......O......N.L...m.~.....1........$r..`.|A....(2.(2.(4....(*h.I..#0.
.z..x|[email protected]#,......I..?e.i.9YW..b.5.@k..:bb.#R5.........8........<<< skipped >>>

GET /js/jquery.KinSlideshow-1.2.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8513

Content-Type: application/x-javascript

Last-Modified: Sat, 24 Aug 2013 02:31:34 GMT

Accept-Ranges: bytes

ETag: "087b1c72a0ce1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
eval((function(a,b){return a.replace(/\w /g, function(ss){ return b[pa
rseInt(ss, 36)]; }); })("(0($) {\r$.1.2 = 0(3){\r3 = 4.5({\r6 : 7,\r8 
: 9,\ra:\"b\",\rc:\"d\",\re:f,\rg:{h:i,j:\"#k\",l:m.7},\rn:f,\ro:{p:q,
r:\"#s\",t:\"u\",v:\"w\"},\rx:f,\ry:{z:\"#10\",11:\"#12\",13:\"#14\",1
5:\"#k\",16:\"u\",17:\"#18\",19:\"#1a\",1b:1c,1d:m.1e}\r},3);\r1f 1g =
 {h:i,j:\"#k\",l:m.7}\r1f 1h = {p:q,r:\"#s\",t:\"u\",v:\"w\"}\r1f 1i =
 {z:\"#10\",11:\"#12\",13:\"#14\",15:\"#k\",16:\"u\",17:\"#18\",19:\"#
1a\",1b:1c,1d:m.1e}\r1j (1f 1k 1l 1g){\r1m(3.g[1k] == 1n){\r3.g[1k] = 
1g[1k];\r}\r}\r1j (1f 1k 1l 1h){\r1m(3.o[1k] == 1n){\r3.o[1k] = 1h[1k]
;\r}\r}\r1j (1f 1k 1l 1i){\r1m(3.y[1k] == 1n){\r3.y[1k] = 1i[1k];\r}\r
}\r1f 1o = 1p;\r1f 1q = $(1o).1r;\r1f 1s = 1t 1u();\r1f 1v = m;\r1f 1w
 =1t 1u();\r1f 1x = m;\r1f 1y = 3.6;\r1f 1z;\r1f 20 = f;\r1f 21;\r1m(2
2(1y) || 1y <= 1c){\r1y = 7;\r}\r1m(3.8 > 23){\r3.8 = 23;\r}24 1
m(3.8 < 25){\r3.8 = 25;\r}\r0 26(){\r$(1o).27({28:\"29\"});\r$(1q \
" 2a 2b\").27({2c:m});\r2d();\r2e();\r};\r0 2d(){\r1v = $(1q \" 2a\").
2f;\r1w.2g($(1q \" 2a 2b\").2h());\r1w.2g($(1q \" 2a 2b\").2i());\r$(1
q \" 2a 2b\").2j(0(2k){\r1s.2g($(1p).2l(\"2m\"));\r});\r$(1q \" 2a\").
2n(\"<2o 2p=\'2q\'><\/2o>\");\r$(1q).2r(\"#2q\").2s().2l(\
"2p\",\"2t\").2u(1o);\r2v();\r2w();\r2x();\r2y();\r2z(3.c);\r$(1o).27(
{28:\"30\"});\r};\r0 2v(){\r$(1o).27({2h:1w[m],2i:1w[1c],31:\"29\",32:
\"33\"});\r$(1o).34(\"<2o 35=\'36\'><\/2o>\");\r21 = 3.g.h
;\r1m(22(21)){\r21 = i;\r}24 1m(21 < 37){\r21 = 37;\r};\r$(1q \<<< skipped >>>

GET /js/jquery.lazyload.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3241

Content-Type: application/x-javascript

Last-Modified: Wed, 17 Sep 2014 09:19:35 GMT

Accept-Ranges: bytes

ETag: "8356c07f58d2cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
// JavaScript Document../*.. * Lazy Load - jQuery plugin for lazy load
ing images.. *.. * Copyright (c) 2007-2012 Mika Tuupola.. *.. * Licens
ed under the MIT license:.. *   hXXp://VVV.opensource.org/licenses/mit
-license.php.. *.. * Project home:.. *   hXXp://VVV.appelsiini.net/pro
jects/lazyload.. *.. * Version:  1.7.2.. *.. */..(function(a,b){$windo
w=a(b),a.fn.lazyload=function(c){function f(){var b=0;d.each(function(
){var c=a(this);if(e.skip_invisible&&!c.is(":visible"))return;if(!a.ab
ovethetop(this,e)&&!a.leftofbegin(this,e))if(!a.belowthefold(this,e)&&
!a.rightoffold(this,e))c.trigger("appear");else if(  b>e.failure_li
mit)return!1})}var d=this,e={threshold:0,failure_limit:0,event:"scroll
",effect:"show",container:b,data_attribute:"original",skip_invisible:!
0,appear:null,load:null};return c&&(undefined!==c.failurelimit&&(c.fai
lure_limit=c.failurelimit,delete c.failurelimit),undefined!==c.effects
peed&&(c.effect_speed=c.effectspeed,delete c.effectspeed),a.extend(e,c
)),$container=e.container===undefined||e.container===b?$window:a(e.con
tainer),0===e.event.indexOf("scroll")&&$container.bind(e.event,functio
n(a){return f()}),this.each(function(){var b=this,c=a(b);b.loaded=!1,c
.one("appear",function(){if(!this.loaded){if(e.appear){var f=d.length;
e.appear.call(b,f,e)}a("<img />").bind("load",function(){c.hide(
).attr("src",c.data(e.data_attribute))[e.effect](e.effect_speed),b.loa
ded=!0;var f=a.grep(d,function(a){return!a.loaded});d=a(f);if(e.load){
var g=d.length;e.load.call(b,g,e)}}).attr("src",c.data(e.data_attr<<< skipped >>>

GET /images/img/bj1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 19226

Content-Type: image/jpeg

Last-Modified: Wed, 10 Sep 2014 08:34:55 GMT

Accept-Ranges: bytes

ETag: "9a5fb18d2cccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT

......Exif..MM.*.............................b...........j.(..........
.1.........r.2...........i....................'.......'.Adobe Photosho
p CS6 (Windows).2014:09:02 15:40:40..........................C........
...............................................&.(....................
.....................H.......H.........XICC_PROFILE......HLino....mntr
RGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP  ..
..............................................cprt...P...3desc.......l
wtpt........bkpt........rXYZ........gXYZ...,[email protected]..
.pdmdd........vued...L....view.......$lumi........meas.......$tech...0
....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c)
 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1..........
..sRGB IEC61966-2.1..................................................X
YZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b
.........XYZ ......$.........desc........IEC hXXp://VVV.iec.ch........
....IEC hXXp://VVV.iec.ch.............................................
.desc........IEC 61966-2.1 Default RGB colour space - sRGB............
IEC 61966-2.1 Default RGB colour space - sRGB......................des
c.......,Reference Viewing Condition in IEC61966-2.1...........,Refere
nce Viewing Condition in IEC61966-2.1..........................view...
......._...............\.....XYZ .....L.V.P...W..meas.................
...............sig ....CRT curv.......................#.(.-.2.7.;[email protected].
J.O.T.Y.^.c.h.m.r.w.|.............................................

<<< skipped >>>

GET /UploadFiles/Game/s_img/2014111213233024.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14561

Content-Type: image/png

Last-Modified: Wed, 12 Nov 2014 05:23:34 GMT

Accept-Ranges: bytes

ETag: "b06fece38fecf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C....6;IDATx..}.xTU..(.{HH
.i"EQ.A..A@P:......;[email protected]...'...H.^..?.w.g.{.d....0<.~2L9..9
k.^g.c...?L) Y.4S2W...`%...*iZ..k.5[..a...Dr>l..Q.v%O...a........4`
eW2V.C."dx.....<...II/%7.....M}.3.4...m.u._o....".ja.PV...Z$.X}..c.
L.D..tl$.X....J<..X`U.....@?X.........f....:f.........J".?. ":.FY'.
*I.Q.....V.........E._..b..R.>.u..n....5.u.....7o....x....<~.gO.
...'O...?.y....<x.{......e.K.......X6...2.D0.H..?..gO...@DD........
.`.2.[..s.-R...y......{].......= .yp.>. .u........k.XN...7...;w.L.J
....<...[/|Z..J...O.../.WF..k..cc...5....#.w....1|.7..]...8..'. .s.
.........*mvO..k.2'K`.....v..,._.=....1..9...)..).r%..}.2..}}l...o.oq|
.p..3...M....q.c..x...C.p.k!".....yp]..V........i...b....... r..._ -.l
..&..<.P..o..........)R.....G.rX7...Vt..-}.....7.G..A..<..[F"t.X
.m...]S..g.N.......y.......G..f.&\=..a.k.s....e..._.........3....h....
[email protected]......>5.....Vu.1..8..3./.....qlm?.m.......2....C..I.
.=.'.....f)`.....8.........*\.[..A..V.v........q.",^..{......b&..g.P.I
O'....w..{.k....2..mlQ..-.85...N.Y...y..9..<.[..GW~..5."p}..o...k$.
..E...8.....i.\3p..Zk..x,.9...X p.......tt...m.....sr.N..... ......>
;..o......k...3...}...?~...7.T..P.>.&...w...s.b.....K[x-.._.jY.....
c.z#`.w......nrB...\[.(.5^4.qe.O.....?..._....4.b.?.......... A..Z.N..
..?O.#.o..lX..[\......\...`.r#..g./D..X...\.....![........S.........{~
R...N.T......i..=...h.k]?.\..*..V.....P..:BLct......,..._.,^9.....<<< skipped >>>

GET /images/1406-app.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 4496

Content-Type: image/jpeg

Last-Modified: Wed, 17 Sep 2014 09:19:00 GMT

Accept-Ranges: bytes

ETag: "f7be586a58d2cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
......Exif..II*.................Ducky.......P.....,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c01
4 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:82B3467D192C11E4A11DE1C1FC8EABD4" xmpMM:Docume
ntID="xmp.did:82B3467E192C11E4A11DE1C1FC8EABD4"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:82B3467B192C11E4A11DE1C1FC8EABD4" stRef:
documentID="xmp.did:82B3467C192C11E4A11DE1C1FC8EABD4"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d......................................................
......................................................................
.....................................}................................
...................................!1..AQaq......"2R..Bb#C.r...$D...3S
45...............................?....;.z..2.m...`..Zz.A......L......#
. .2.q/5.@.^.%.....s{C.y.....9.9...T..$.....'.|P<.>....I....2O..
.y.}g.....>(.d.Y.Ak.s.\..sA.....9.IA..I.......Q#..AA.....R4.d`..>
;!.A4.7.}.yg.n........ .z.tu."..R..b....{J.}.......:. ..e.zgj.....l.Y.
...G.S..A....w.....A...jt...............}.7....m^D.{..hh.N...7...v<<< skipped >>>

GET /images/table.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3930

Content-Type: image/png

Last-Modified: Tue, 24 Jun 2014 10:24:12 GMT

Accept-Ranges: bytes

ETag: "0eef470968fcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
.PNG........IHDR...............=.....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221328615.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14760

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:32:36 GMT

Accept-Ranges: bytes

ETag: "70aa3116fa95cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
............................................j.@.=.i<.%.z..O.c..&Tvb
s.....3..~....Y..x\..9..*.~-. .-.[.P.....Y6M5..#..,..g..8i.GL^{...)..D
.Kv..PW%....k.....<...:.~....n..tX.M....$6}.z....[.Nq.B..&\..L..F..
?.Qx..Y.z..Y.`......2.lS. ...:...e..N....Y!.8f.n|.u._^V%s...\.t3.?.^-.
W.......E...qW.K......oT.GR.RmK...}m.O.w.}..s...`[email protected].
a.i.).5...u..A..Yb.a.. k..1...SW.....Z.........RB.X..gy....S..o ...:..
.....ui.4<....9.X.....3.^.#......C.2/J...A.N.........:.Z.tcXz. .Z..
........0]O.<........A$(xt..k.s{-.?K`........U.... ...=..|._..g-.*s
L..5].....3....k>m.^..../7..F..\..d.U......2.th..!....uq.Z.>.R.F
M\...yw..M...u...6E!].....x.j.^2x.p....s8....HO...*.$...........v.A._.
o..v./...vt.yu5..$.6..-...1UX....x....W.......0..<.....C.X....A.4..
3}j.....E.n.<q.Z5.....}p..T........D.B.'v./1...".s.U29n._..y.HgKh..
yK:................z.y.y.*[email protected]
)a..Jf.jH..GY=FW;.i!........-\.....<4....i..No4.J.....$,..e..es.|..
. 7W....E.M..,..U.)w,.vdu..s%.@......!...s...bIz.sU................LeY
.1.........~f&........)....k..b]rKJm\.|.........L...6y.x../.....-.....
..9u..N...........88?...-.............................!3. "#24$15ABC..
...........R.QS!.g>..}A\........9.W../..|...._6..m4..-]....q.*#2...
Kt...bR..k%.j{..l^.X_...E...FL.&k.E.v.\.Y.H....)..bZkW.I..P.......<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081917196037.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 17718

Content-Type: image/jpeg

Last-Modified: Tue, 19 Aug 2014 09:19:58 GMT

Accept-Ranges: bytes

ETag: "a41525bf8ebbcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.Q...........................!..1AQ."aq.2B..#R....$3CFSbr......u......
FEs.Tce...................................A.........................
!1AQ..2aq...".....#.3BR...r$%4Sb....T.............?.........b....{ke.%
.2...:4..9P.3.....S..N3Z......q..;....n..J}.im....|.>......2&v.(.p.
...Jm.B..&..z.......$.h....O.v`R.e..>9...._L^............G.i ....a.
.`[email protected]>.2.....t.:..z....w.zxW.1..]M.(i....
G.2s.4. .../...A.........r.sX.E......*0.@4...>....".$..c.]D..i.....
}[email protected]/h..N.{.-l...U..S.UTQ..>..,S.umty#...[Q....O......
...)-Z..U...[.g.t..x(...o....e?.4js..=e$O.......I.&..([[email protected]...?.]
.-......h....'..&X7..l..../I7.2.^_1....=$....>.l..C..sR.3MVk.,.,Uc.
Gh*.j.v...0..1...p.|.C.=H......xcl'.x.$....L<..Wx.a..55s.a...A%....
.1..~.]KY.....\.o.#R....b...om..9o.V.W#...nw..OTRa.`}...#R...I=.......
...d.|F6h].5(e]..t..Yb...H..%f..I$>.*u.B.u.......F.!k7...]r...q:F&l
t;. [.....D...4..*:.....IQ...>zz......`[email protected]...:.{D. L..Q5.
<...p.(&...I.?..).7D?...cO.%YX......E.....wFHw.....c..........y_...
4"\...bc...>...v..S.e...G...v..-...x.s.4..Im.u.r.F.\......QH......&
gt;..~.0..>.F8.|........7\[email protected]
.s...u...G..;[email protected]...#........z/..>.....j...$k...=..o
.......B..7._....4....6..h.-.Q..@.^O.#.....f...&_....k~.:....,<<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073114126741.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8040

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 06:12:23 GMT

Accept-Ranges: bytes

ETag: "7cfc136586accf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.F...........................!..1AQa."2q....#B$CRSb.......35r....&c...
.................................?........................!1A..2Qaq...
.".....B...#3Cb.R...4.r..............?.W...y..........................
................(......P..@(......P..@(......P..B.@(......P..@(......P
..@(.....5V@.@.@.@.@.@.@.@.@[email protected]..........
.....\...*D...d~7....'.W..y\!*....hW.......".....x..H.~8.n}F...'...q..
_.u......?"c.?....s&f~...O..T.=...%.v.n`O....=..wc..c.p.f.p........$=.
....Ykq55.B..s.q.8.......NsEN....G..l...b.....Y..OX...|.V....t..l.|..4
.f0..u.2.iq..$.j..V...%.\...h.h.h.h.h.h.j.(.......u.....Xh.7......w...
N..V.>i.mk*.......m..w.o.JyI...Ixz.......5e'[email protected]
.....yY6...]..$C.X\d........`.U)4a...Z\.o68...[..Sjs...G..U.C......d..
.J.....Og.8.>*.....~.....5)..\..L.......v....[.g.....a...y7..P.$)..
$...v...%....#J.r3.kPm.....u..NT..Dw..........o.$.).!.....2..v:.J|....
...H.\[......Uf(....P..C....,*....c-6%9.)p...I.... pH.8.9........=.6gw
w.i.i.w^*.<.8.ul...\..:..~...,zJ..ckh5...ug..<..\...[....~q.kO=]
-.M....O.F....r....#e6F.3m....`]...x..\..)..6..3_V`.N.S.]..K....._....
.......EW..y...?...J?u-.........B.ra...p-bZ...."[email protected]%._.O#..{m
t.w.F....R...O..k.D....l...8W/uW.].g..f.).......shN ...s..u.6.q..<.
G.R......-...9u.Kz.....dz|..S.q...Awo..y!.w..Y......sJ...i...<.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014112713341657.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 40708

Content-Type: image/png

Last-Modified: Thu, 27 Nov 2014 05:34:30 GMT

Accept-Ranges: bytes

ETag: "d08747d13ad01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C......pHYs...........~...
..IDATx....\.k..............V...n.......nRD..E$..<.....u.}...~.;...
;.=.<...(J...T.3.....)J......xAQ...*J.K............t.*.Z.~.....\...
.J..........p...E......H]..NT.K_..P]/.E7M.}..'...P.z_U...W.5P.kQ./t=..
oDa...7.a.5T.V..Q.o...M#.|.(j...h......8....S.4M|.j.5...wL{..=.7...E..
..u...Z..l:.~.lk..d-..L.t.....}..6}.2.,...-.2...'.oO...........4..HRV.
........\...Y..LM)R..e..2.....s*T..h`.*.K.`.P.P^.j... T T..).1..y"B..7
P......P]S.......5J...Tc......&?P..JMz.....K..$.U..T...*).T...2.j.&=T.
..T...W.!.E8..4.)P....,.P.P......S%@[email protected]....
..5....S.XIC..V*Tc........PM.[........._Ae.....J....2r...PE..*c."...@.
 ...pj(.....m..t......#. ...*...rG..,...TB}n#.......J.V"[email protected]
%....#[email protected]|T#...21..T..QUb.6.e..!X?u...2..X...S...z.~%.,....{
.E.^.J...*..........}....A.-.4.....$T:.R;.Wc.~..?...W....5...{..S...A5
.@M."P...t$LV.,.....>.*.....k.a.6.P....~....U;.0.........4.u..O.2p.
s.P......U..PuO..>..[..|.u.~.0%..a.....A..g.G.T..0..a.G......0...yL
h...HM.zJp.).(....'..>....tJ..ss.Aa..^..&..r.k........b..(..%.u....
.F..k..p._8.....1.~..N.T.?...*o.^..n..s..^7.N%...<.....,.J..?.....C
Y..:.`n.a.h...E..<%@.........&4o.c...._.......j&.g......9.\M..b4..s
.:..p#.....P.m.E.....Z..[.F...!....X...m2.....9.LpU..2%j.....v.L......
.]."...6.~.X....Bd(c..z.q.z.*.P..e....J.v.K.=......*... ".N....F<"H
..a.K...... ..G......3...*....?.j^P......1XH.x....~....p9....ap:..<<< skipped >>>

GET /images/wenxin.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5226

Content-Type: image/png

Last-Modified: Fri, 26 Sep 2014 09:41:10 GMT

Accept-Ranges: bytes

ETag: "dcde706ed9cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
.PNG........IHDR... .........M..)....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /306430357.html HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Accept: */*

Host: aiaiwg2014.blog.sohu.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: text/html; charset=GBK

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Thu, 27 Nov 2014 18:39:43 GMT

Vary: Accept-Encoding

Expires: Thu, 27 Nov 2014 18:44:45 GMT

RHOST: 192.168.108.217@13976

Pragma: Public

Cache-Control: max-age=300

Content-Language: en-US

FSS-Cache: HIT from 5792679.10249137.6470891
f5d...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN
" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<ht
ml xmlns="hXXp://VVV.w3.org/1999/xhtml" >.<script type="text/jav
ascript">.var _blog_base_url = 'hXXp://aiaiwg2014.blog.sohu.com/';.
var _blog_base_path = 'hXXp://aiaiwg2014.blog.sohu.com/';.var _blog_do
main='aiaiwg2014';.var _ebi = '13484c91a2';.var _ept = 'aiaiwg2014';.v
ar _xpt = 'YWlhaXdnMjAxNEBzb2h1LmNvbQ==';.var _upt = 'YWlhaXdnMjAxNEBz
b2h1LmNvbQ==';.</script>.....<head>..<meta http-equiv="
Content-Type" content="text/html; charset=gbk" />..<title>A-.
.........-........</title>..<meta name="Keywords" content="" 
/>..<meta name="description" content="" />..<meta name="ro
bots" content="index,follow" />..<script type="text/javascript"&
gt;..var JSPATH = {},..HCP='hXXp://js2.pp.sohu.com.cn/ppp/js/common_v_
20120320/',..HMP='hXXp://js4.pp.sohu.com.cn/ppp/js/module_v_20130922/'
,..HTP='hXXp://js5.pp.sohu.com.cn/ppp/js/tool_v_090418/';..JSPATH.util
={common:HCP 'common.js',module:HMP,tool:HTP};..var BLOG_SP = 'hXXp://
js3.pp.sohu.com.cn/ppp/blog/js_ppp_v_20141009/';..JSPATH.blog={_path:B
LOG_SP};..var TP = 'hXXp://js2.pp.sohu.com.cn/ppp/group/toolbar_v_0908
27/';..</script>..<link rel="stylesheet" type="text/css" href
="hXXp://js3.pp.sohu.com.cn/ppp/blog/entry_v_20130722/css/revoArticle.
v.2013072220.css" /> ..<link href="hXXp://js2.pp.sohu.com.cn/ppp
/blog/themes_ppp_v_20140529/def/style.css" rel="stylesheet" type="<<< skipped >>>

GET /pp.php HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.it1686.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Cache-Control: no-cache

Location: hXXp://invalid

X-Cf-Requestid: fe1ca105-a2bc-4099-4333-e104a40bc8ff

Date: Thu, 27 Nov 2014 18:41:05 GMT

Content-Length: 37

Content-Type: text/html; charset=utf-8
<a href="hXXp://invalid">Found</a>.....

GET /sys/Mview.php?rnd=f4a9K6tcA0rApBBRi91w7oJCDtIQpx/UMhJRzJEJoGJhfnNnZKBLXm8CFdInNFpM0RI61rnAD/8Ow8ALuUChaioZtlIwa1R7MRY/2lzw5E50xxM5CgZXBDZ2pNRSEqEy7PjzbC1BakG3AkW+tQ&p=QXNldzNIdFNtRGdKTGo1ZjJWdEx0dU91TnR2OHBwMFBOaEtEaGZyS05DVT0 HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: p.sharele.cn

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: Tengine/1.4.3

Date: Thu, 27 Nov 2014 18:41:31 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

P3P: CP="CAO PSA OUR"

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Thu, 27 Nov 2014 18:41:31 GMT

Cache-Control: no-cache, must-revalidate

Pramga: no-cache

Set-Cookie: ld_user=a:9:{i:0;s:21:"81189-1417113691-1903";i:1;s:0:"";i:2;s:0:"";i:3;s:0:"";i:4;s:0:"";i:5;s:0:"";i:6;s:0:"";i:7;s:0:"";i:8;s:0:"";}; expires=Sun, 24-Nov-2024 18:41:31 GMT; path=/; domain=.sharele.cn

Set-Cookie: ld_user=a:4:{i:0;s:21:"81189-1417113691-1903";i:1;s:16:"a:1:{i:348;i:1;}";i:2;s:16:"a:1:{i:242;i:1;}";i:8;s:3:"348";}; expires=Sun, 24-Nov-2024 18:41:31 GMT; path=/; domain=.sharele.cn

Set-Cookie: ld_ad_bl=348; expires=Fri, 28-Nov-2014 16:00:00 GMT; path=/; domain=.sharele.cn

Location: hXXp://13.gxejgs.com/m/sharele.html

6..........0..

GET /all/footsimp.html HTTP/1.1

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Connection: Keep-Alive

Host: VVV.baike.com


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:42 GMT

Content-Type: text/html

Last-Modified: Tue, 14 Oct 2014 08:17:06 GMT

Transfer-Encoding: chunked

Connection: close

Vary: Accept-Encoding

Content-Encoding: gzip

Server: HDegine (window; Formilux/0.1.8)

X-Powered-By: ASM0.1
6bb.............W[o...~.....u..rwII&...Qb..Ic.*.>...!9.pg.; .".Du..
..;M........m..y.....E~._...%E....$...3.9.9.93.^.|.c..W..#..].]...l ..
...7,ksk.....{."'o....1....YV....:B..e.z.|...Q......X....M1.3.._.....n
.....0N.\Nw......%..."4.....i.<.$..V?$....5M.]aI....QL.Z"ZfIC...*..
...et...W/&.}V...\5.}F......c./..&...Ow.........6.\..b..A.F7r.K.7|a...
....`....V.n{...O"...a"..0..4h..3.{.u..n...G.R.X..7-....^d.G}...V.\4..
pc.D>..qQD..x."P7.h..33&.m.1Id .cbF...A.H./$.A....:..W...N....`.%./
.A.............Q..t..."...4g;..r..0,......v8xn.....x...h0.X..Z.c.*.7r.
({.h..&....j..,.._..,.....<.8P ....Q.US..".)P.....G.MW....mS.......
.r.....,iva...i.|...h. S....8...W..]8.<..G2...(.[...k.8....Tx.p....
..q.u...-...v...."..N..)..luuu>.3Y,.KX^...<t.pn..X".,.f..!...c..
....(#5}[email protected]`...h...l2.m.e..e*.ZH...g<.LZ..R.b..=
,.v.".../{. ..LL22..>GI ......o.......nG...&...\..$...^`y....&...dv
U..i.-.p3"!..N$(......6/.V..YP..y.U.J..RZ....E.8s....|3 ..'.....,...R.
.A..0..i...G...........KA*..j8..(..rA..:..PZ...y...A....ed.w.&.B"H.e.a
...*.vejo.......:.R..l..UK.>p..^DC1..].;8..P.y...L..6.k....M'_.....
H.T.V....:....A...6'.T........y._0.&f..$.A.5m...q.p.w..<a.'.]e.V...
)G.u".../u...t..=...X.!..5....M..m.v....{....;.n.ja.$q...ZO`.I.C=2.~.y
..pt....?.^.\@.....y0.............m...v.)\z..V..m......... a......|.C 
/d....mj..e.....zcE/...%.qI/..zC..a.h.....>.t|.........X......V....
W.{zF, .o.w......Q.r.w....)mNY:j....UI_o..x..1.{.....X................
i1C{..C...7/.i..'....9|.`.....>7t'..7....zy].....e..zQ..eTK%...<<< skipped >>>

GET /public/images/baikelogo-header2013.gif HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:32 GMT

Expires: Fri, 28 Nov 2014 18:41:32 GMT

Content-Length: 1346

Accept-Ranges: bytes

Content-Type: image/gif

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Server: Apache/2.2.13 (Unix)

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
GIF89a.........(.@...<.m5...M`n.z;.~)....bX....o79Q{)E.....i@..!.mN
...si[.iB.bQ..... .tE.u0 I...5..*aec....|,.E...1....fI.....).}=...vrT.
x:..0.mQ.D.mYc.`L..(.lNJKq..$.u3.f@..#.. 4Gz..7...~_\.C.....]W....x/..
".....(.q8..-..(...}pRhVf.jT.q3....}C....rA.y=UTm.y?..@$I..{B..0....sE
....m9.. .nI.....(.dI.. .kA L....I^q.i=.......|:.wH5T|%M...... ..%.. .
..xgY.W\.lQ....B..H..{A....p7.j8..6X\j..9.tL.~9........)..3....wC.iI.{
...(.. .]V.kGh]d.nG.n9<Px..=.cW.m=.hP..&.rCQ_l.q4...0K~.]R....}='I.
..... ...xnU.rI.aU.....#....{9....u5..)...#H..z1.....5..5fff..$(N..aX.
.(.....<....q9....xB.iA}e]..$.t8..-.gV.yA.tC.vH..#.I..m9:VzQam.aQ..
......................................................................
......................................................................
....................!.......,.............i.....3F.H....&...X..A...M..
..dM.%K6.......(M>.@..!.)c..u..-@.>...........D....H.^...).4F...
. .......!.i..T.Y.c....f.4=v6..:e...@..].j.......>b8..B..a,N..vZx..
..j..L.....*.qZ....s...=zBSW\....U.k?.\.v-d....]...c..B.x..N.6...ls.B.
x......N}....vk.....2..D....;..r...q&....}.(.... .....B...!.f...\.H...
B..*......'L..VH...X..*.^.!.2.(...,(.."F. ...8...t!..]p...4....tP.#.]l
[email protected]...#Gb...EJr....I..Xfy..\[email protected]$.^.i..:......r$ l.)..k....x.
..........)..?....H..(...aI..Pp$..Vj....1...*.....*...P....$.i...0...&
gt;.0..^.:@!.....G.1.....l....I.1...;....
<<< skipped >>>

GET /public/js/headandfoot.js?20110603 HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:36 GMT

Expires: Fri, 28 Nov 2014 18:41:36 GMT

Content-Length: 1765

Accept-Ranges: bytes

Content-Type: application/javascript

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Vary: Accept-Encoding

Server: Apache/2.2.13 (Unix)

Content-Encoding: gzip

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
...........X[O.F.~..............U...y.......4......;.x.$ .4.H [email protected]
..B.&4.._R..O..=..{...m.>.Y..9..|gL....U.P.......g. ..*/^..pq......
|3...RD...(s.#.. }.9Xlq../Gl..(j.2....?.-..e5.61......l...E.#...-az6.h
.R..e.H..\...y.C=...R)..X..^..n....o_LU...QMMn.X....=>....53.O..oLm
.../-o.M......4.O..Yhi!.0.}......E..HDK57z,)}"[email protected]}}<.d..FAP{
@S..C6..T..=v....;sRM..1GK..L").W......;8..iB3.j...V....c,O..n#.S.j.g.
)#O..,h.I........5i....>e2BB......rx...p... .&..|K.N.7.....ZU1gwKSW
[email protected].<...r...3ju r.d.-~..#.@......<&..I...1...V.
h...\...Ck.............E.A....X......................L-......};..~..y.
...[...X................a<..J4./..C.,r|.k:..[..!..~L"......Z.H...n.
_Quj....]........XmU....t_.....;.0..T.?..|.cC....q........iR..M.Mh...]
Hm...Nl|../4......s.,......"..W*...."u|.O&o#k.kR..?..2yeG7..._.Q{..u..
|._.(.<^.... ...W....I^.&y.........H......1...C.6....vj..H.j.<.L
.......G.S...G...)....|...E;...*..0u.... .*[email protected]:
..Ni.z..?.uw../.R:.n...1db.:tk...W...Q.-..M...........K..E.........Q.l
=<.T....p.F.U....... .>.g..I.J...Fd...UH..0I.!.w*..0U..q..*....P
:....N.O0...;t.P....f,J.h.......Kr...3...K..e.Si.....R...I.l..S../.m.W
./&[.f....5...#..U.6.....q.U........O.Zy&x~.>^..."n...VfDw....4..".
..H.sL....".d....d...Y...w!..V.6....:.p.N#G:.......#8.F.E.....9.....).
.......N.a.)J.8........"....n.# ..1.......'......M.}q.|a...'3[.'.. .O.
.7..S. s....!..O....5~.h.._....G..8L".5o..Q..X.a.,..._.7.....^>.\\.
g.....pI....l...u..4r....h...C.g...N...y.....>..|a.........f...<<< skipped >>>

GET /public/js/baike.hots-20130201.js HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:37 GMT

Expires: Fri, 28 Nov 2014 18:41:37 GMT

Content-Length: 1694

Accept-Ranges: bytes

Content-Type: application/javascript

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Vary: Accept-Encoding

Server: Apache/2.2.13 (Unix)

Content-Encoding: gzip

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
...........W.n.F.>[email protected])N.....N..4(.... .V.J.....KK..C.9......
.......z).6N.S_.......4. H$wg...of..xX.P1.....{k...b.r...W"...........
"zO....YY;!.;!..|..[?.&d...,[email protected]...)<.t..".b.dJ........;.B
).....PH..nD......=.S..D...........EV.om....[[email protected]/..#
gy`....j....k....m.~0...^G.P...;....m.SE...|..E.|..3...._\*:.>.nZ..
.j......u........(^.`..C.#[email protected]..,!...!..... .
..v%..T..c?.....\...B!...)Qa.5Y...G..#....k......G.|.}...L. uZ.......!
.(....... c......5.K...\I.G...0....t"d...*f...*M.<.....?...b...V}]E
;.....5[..d.G.J...Y..F.......`C...k{....*la..V..XL*X37.,g...._.K...!..
...z.C\p.....4....TE.....hY....U...n).-.&f..X......8.G..1......qt{.5..
.B.F......,[email protected]...~q...H3.!WFq..$..;t y.o.
.....D1..,[email protected].....%a.......p...
...fl....l..;.\Z....}...72=.lcR....Qr......I... .....X...I9...4*.l,K..
.)..x..,.i.5g_.. 0<.}.R..G.Z...W.]k.o..n_.k.R...T#.....]/....M.3...
...v..H.......]......1(......d|T#.5;.3.u.!..U.D...).0.....d8d!.; ..JIe
.....$.yAtZ`...H?....&k}.@*h3.P.z......h.Q0.<9^.N.........$fal.I...
...3.......I!.i.~0..K...2u..[......a.A?....A......=lM..^PVv...........
............".2!."...o.F......w.........`.1M..Z...j..6....b.K..9.4&f.;
W..Y\w.h....v......f.U.Io.4|..s~05...p.x...\.0.H..........*...T..n..!O
...=..$....Zo?.......')-Cn.k'..t\...p..C...*u....0=..f....~....,.....$
T......_......^.|....._<.....b..K...H....../%K.CKk....BM..$.......y
....E$.N@.]p..#R...!y....~............:..aq..7YE$%.....]X.......Um<<< skipped >>>

GET /lib/jquery-1.3.2.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.baike.com/all/footsimp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:43 GMT

Expires: Fri, 28 Nov 2014 18:41:43 GMT

Content-Length: 19740

Accept-Ranges: bytes

Content-Type: application/javascript

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Vary: Accept-Encoding

Server: Apache/2.2.13 (Unix)

Content-Encoding: gzip

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
...........}kw.......X..-......9". ...v.._...A.....p.40...GU.J.'=k.]w.
..m.R.k.~...........1...../..h>yX....y.I_..../1..r...J.....G.}.R...
...|r{...#/..\.g....r.....3......d....8.8.G.......z.p6.5>t..E.hj...
E..........O.../............A.P.{..s{w."......yX.S.e...3?......RJ...&l
t;.FKHs...p......B..o...3#...'...|.t...{.y.|..r..)..of..l../..>(}.|
~=|..v........>....i..o....0.{?.... .>....\..|.U.. .>..e.....
 ..7.nz.ZP[.a......2.qk.Y<.z..[.`..aP..Sq..n.w......2.............&
W...Y,...............y.Rc..m.....^..V..o...8.F...`.........h.....hY.F.
........R....Vq2..(EMn.z...l..o..z....z.e.z,z"..E4.F.x.....n...I......
.E]..g4.....(...R4........O......{..1........7..?..j.......J..R...#x..
.mZG,&.F...f......`@.....[.f.. .p..G.t.b%.O.U.n.....d...H*....)....Wi@
U......... E..9%..M.<\...F2....]......./_. .|..St....:.Z........)O.
53..)W.S..P......S0rkK.(...s.Lu\.o\..7.F.}.Z....\z.4^.j..._.."....s{..
....^Ivv...r.o-..j...Ac.v.Rg..TDj4..`.....a..X.K#..hy..x..s..,o...:.Q.
.X~.F..=a..9.P.h......F6Z,|..B.].T.i2^.9.5>.EH..o..!./..4...|......
Z..n@E..=....8....1}....=.>&.u...m.8...*..X~.$....Rq.4..b.4...%.I..
W..BYF=h..P..c.Es.....zM.c.h.v....t.....}....^.....A*....N..c.....p..e
HK.a...O....tj..l... ....sk.0.i<.\..*...|.1.b../.....`'..n.....4...
... r......;.......lr.H.o...ck...Y.0..a!...`...`@N.........Up.w!.q|...
&.n8...^...1.....=..$^..i...As.....g.-...j..k.......).-..@UV.<.7Ks.
...T..v:.\O..R...nB(......I.?.....x..........JO..f..T....7(...7.$.."..
'...\....}.....R.............W. l...L..ta.X...o.a.H..P..s/.....`Z.<<< skipped >>>

GET /live/28/34/6f6e592a4c6d24f16078e1c1fe62e833.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:46:54 GMT

Date: Thu, 09 Oct 2014 09:46:54 GMT

Server: ngx_openresty

Content-Type: image/gif

Content-Length: 44552

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 20 Dec 2013 07:54:31 GMT

ETag: "3926971773"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zjjhdx39:80 (Cdn Cache Server V2.0), 1.1 dls21:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.......R...WgXS.....Tj..W1T...5 `...AQ.Q......"M.PT@\."`.E...X.q7(UQ..
"...~.c..sf.9..xx.[.D<.. ?...u.b.1hK.).e....RI.^Zj...^W..\..B...w..
;a..p....*%.-Cp...ee\ee.e.}.e].e}..\..}..]UT.P.........:....Z..Z.>Z
*n..>F*.F.7].=V.....c-.]mO-.@-.=.zLC......}/...k.`[3_3.Ps...;...vY.
DZ...........m\.l.R......nz^n.....n.{.Zy1w.....Y........t..p..t..q....
..M.....L..{(4,%8....#!q.Aq'.=....M.e.....K.J9{.....#...d-.4.....,....
.1...S..Nf...:....t)-'.T~yj./........';,&?.Yy(..1fi.o^\\N....qeIIM.!MI
..d..d...|...d..S... .r...Uq.Z9.n...f.....(..{>.n..[.../......p|.(m
..........kG...Y.=...............U..E.....j .\8.RW.RW}....JY[kwU....[W
..t....-...^..9xW..9XS8|-w..........vg.tW=.}.U....W>.U.}...~.....]-
.j..zK._>x1wor...w.....F....../|..[..Z.,\.*.......osu..._.K?.6..^.8
...E..W.?.t|.m^.q..\..\..W-.onm...}......wu..u. ...k.........._.W.,...
.cs.......;.?...zo.K...w~.{......o.^.[.......{....k_..g{..z...4~......
O.......0.:........Z_...'5Z.XO.d......(.b.E*.............Q..S...*4W?.j
......e:...K&......jJ...v....;...{.Y....d ^../.....S...d"...LO.t...$Rs
...Z...v.i...r........D=.....Q..2..Y<.........H...h......O.W._.R...
.X.D....*.5. .{.F...`8xl....;. .t. ...q..7.s..|f^.r<>M{..O..).(.
.*V.("..=\.]mm.2K>r...$%...I...S1....~.ySu..W..>?._.SI.c. .^.t'D
t....vQn...~?.......5:..aF........7...V.....J=...f....N._l.......pu1).
..3]^.n..x.6......q.......QP*Ar...s..2.......\._..|.9......-. ..?...4.
..9..\oA;IY..gU.....?.C.G..b.\.c....E$.........m...||.K3%...j.....}z..
/.....=.X....|xW ..[...78.!.'q....x.1kg..({.O...)d.......q...U..r=<<< skipped >>>

GET /live/76/09/f1c48eab1359b3d54e18c7e6e58b83cf.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:24:05 GMT

Date: Thu, 09 Oct 2014 09:24:05 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5164

Cache-Control: max-age=31104000

ETag: "3382774609"

Last-Modified: Fri, 20 Dec 2013 06:08:01 GMT

Accept-Ranges: bytes

X-HITS: 4

Age: 1

X-Via: 1.1 dls20:7 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62),
 quality = 100....C.....................................%...#... , #&'
)*)..-0-(0%()(...C...........(...(((((((((((((((((((((((((((((((((((((
(((((((((((((...........".........................................8...
.....................!.1AQ.."a.#2q.....3BR4b..........................
...........%......................!..1A."Q.2Baq............?..R)......
[email protected].$....:. [email protected]*TPM.Kw.b..(Z.
...!..RK..ykZ.#Z....K%0..N....[...[.....c^.l.|..z...oNwt.%.?.N...=....
g.K.K.rz......yb2..J...6.......n?........3.j..tj....s.MFta.k./....\QR.
YY.[..w%wg.q./.....t....b...............\.)r.$..!$F.H..*.$...)7.$I..?.
<[.3....'..E.I>K...lq.]G.|M..>..l.-J.rW...(*.....R...M.:.....
q KJN...8T..4....;#.Z....EVn....v}O.F..R..T..^R.p...3..sx.....p....~..
xo.1.{..yqN1..ne*n2K...n......iG.Q..7..|....O...S....v......K.Rog...].
.....T.....I...r..8........s....y#.......}G...k .z..g^.-F.7Q8.(../....
E......(......^b.x...v....jy4.*J-9..7.~.......B.RO..O.V....g..vs...I..
.]9.qN,...b...4...............R...O=. ./\.hY...Z.4jQ....Q.......xcO..F
....B/*2..O .............^ ...n..c>S..;...e`.S..d1..i>.k'.L.f...
J...$..7...R.l.o.z).PD..?..t.w..;d.u.:..q.\...Ss..{3...Di....#....B*U.
.u.;.x.......zz.W......hU.EQ.....{m..{o.%.I...*.sD|...]... .Mb........
DU.<.....j=i......../..<......5./b1.....bu.K.......Q....i.[.....
Bbc..............(N*Q..Me2b`|...........G.u..X.......c........B.r.#.Aq
q#......{..}.&.........,.....g6......L\.\.......^..[}j..*T...tW.=.<<< skipped >>>

GET /live/2014/10/13/00/1003v1413132824620793763.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 08 Oct 2015 10:35:56 GMT

Date: Mon, 13 Oct 2014 10:35:56 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 3927

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 12 Oct 2014 16:53:44 GMT

ETag: "3202071961"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 dls19:0 (Cdn Cache Server V2.0)

Connection: keep-alive
......:T...VgP.[.~C.=T..........k..z..J1 DzS..A....N.Az....T.p . 5..D.
.o.7g............{.........p=C=..........6..n..................0 .....
..k.%.9.........9...e.9.......~...............e.gdd.g``bfceb.030.r.B.9
899.Y..pq\a....L.._........`b`...........3..'@...!..N.z.*.t..........S
].z........T..."..L.PA.ih...e5.z.q.i.).2!..KH qHX....U..MmK.........&l
t;. .......AJ*.j...d .E..P..o.E4.."H.&K..i...eB;..BrZ.[C....E"......_%
....:.o<....|...p.../..u..B_b..'..........=.x.g....'g......y..%....
..q^..;...?DK..W...x.~-...t..c.. ..../...4|...._. .j.... ,......4e".._
[email protected].....?u.6.......'..G..;SG.Q%!..'d.`.y....#
.n..@...'A..|YY58u/......z.-.....t..h...f?..i'].........I...8.s.2d...\
..f.>..X`.p>..1.,......L.o.3,].H.Kaq..2,.......7.4.5B.-w....%~b.
hF.J.h...k..'... a........,......En [..w=.O7..z.[..R....5.qXj.\...'.l.
..J~q7.1.X1....l..-."...).L......8...e.....f.N.......k.b~n._?"..t.....
*v.0..oR.?@..{..W.C..1%l...p..MG...B!.3..s`p...*..q..8.... ...W.ZB...=
E...*]]T.:...a2......Hn..F....;.^n...r6k ..%`.?I.......l...xV4^...q7:.
.M.[$Vb..-...1Ib.u..........0?.`........w. S..._.....X.r=.h..H"k....@.
...O...].B.....T|[..G.g..._.g1...:.L......=."..(.Z..'...c.B..G.Q......
.Q...S.q.....D.g...~G.8.__%.C...\...-=......G5!........'. m<...4.0x
........fkN...,...\;."J.&....qx.7w..h...._./j{~:.AD..p5i..U.!}t.MIKn..
z...,...Q...O~.....5.r4..L2.N........... ....-a...d......??....[|.._7C
u.....3.|.1@.)..01'k''V'.....o$wg^...]..$b......'..Oh.>j....A..e.KS
.![.....4L..9;.NZ.......-PQ....G..2Rk..O.....`r............T......<<< skipped >>>

GET /live/55/44/96995c4b3159eeb35b4a5d0029f75b3a.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:18:16 GMT

Date: Thu, 09 Oct 2014 09:18:16 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 9250

Cache-Control: max-age=31104000

ETag: "968784823"

Last-Modified: Thu, 31 Oct 2013 03:58:25 GMT

Accept-Ranges: bytes

X-HITS: 4

Age: 1

X-Via: 1.1 dls19:7 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 80....C.....................................%...#... , #&')*).
.-0-(0%()(...C...........(...(((((((((((((((((((((((((((((((((((((((((
(((((((((..........."........................................E........
.................!1.AQ."aq..2....#3BRb..$..%5r..4s...6CDS.............
...................*......................!.1.A"2.Q.3aq#B.............
..?..#{....F.P...2.h..*.Y-.a.r..L..D.Q.h.}..R..pZUY.H...,b8'....s.rQ.o
....$|...Cu........z...M$..oneD..T..q7.KB...W... ........BC......Q|[..
.G...t.I.l......d..&k.2...>.\B..Z....S..awv.;.8.PB...qb...1.0......
j.Pbf..y;..:.oo.~i..c...nI-MSm...i......23h...C...Gu..Ug...#...*..I
.0.4.5...A.[..Y[F.f....nm....>m.L..$....E....#...^by...<.T.U.N/.
..8....>.[.a......:1...*..`H......I....Lh.8$..wj~t.....VG>..B}..
.yj...JI.[eaY...:.V..t.I.=...$ma...c6D...guG.o.rq.7A.B#'ue=........r..
...!.V..#....5l~....%L...lB~.^-v.N-.;.........0...h..a.y.~..6..Q|W^...
w..8em..-..c.(^.8.|b...%..4_BUV.......-....IW8.......?fm..f8...ZC.._,S
4.;F..q.=. ..S.~....j>WP....%.d7...o"6).hZ.2[..,..W.....#q...Z.S..\
CZHm.rLY/eX....o.]TG.;)..].!Ul%.D...u *".,..\...c.O0.$t5..D..j._.x....
...-....#r..|...c..M.....(.9 5..%9...u.@x<.~.....l.......o... .Ad.=
..Rz...)[email protected]...@;...h1.R..gT
=..ekfL.q.....Nj.!p.I.....se.AD..9.77...7...E.i...hH....K..*...o.s.N..
..;].....C...kw).=....]..YrC!:[email protected].;.H~G......e.u.A.A6.
.N[...:..D...4...8..........oN....D6..m.P.3..Q..k ...5.-xO'..... .<<< skipped >>>

GET /imges/live2014/header-bg-v3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 11:30:08 GMT

Date: Sat, 20 Sep 2014 11:30:08 GMT

Cache-Control: max-age=31104000

Content-Type: image/jpeg

ETag: "543844006"

Last-Modified: Wed, 30 Jul 2014 07:16:57 GMT

Content-Length: 13677

Server: tux/3.3

Age: 1

X-Via: 1.1 dls21:2 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......Z.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:04EB36198705E4119
C88904029588FC3" xmpMM:DocumentID="xmp.did:7D70DF6817B911E4BC549597C1B
46877" xmpMM:InstanceID="xmp.iid:7D70DF6717B911E4BC549597C1B46877" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:D1DF01B9B317E4119456AC7A1BD277C6" stRef:doc
umentID="xmp.did:04EB36198705E4119C88904029588FC3"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
..................1.@.................................................
.....................................!1.A..Qaq."..2.....B....3.#..r.4R
b.CSs.........................!1A...Qaq.....2...."..3...............?.
.j....JR...3.W.F_..O..o.|&E/..!........x..Q8.(H4.Ld.B(.F.....T..VC..`I
..J....C;....]DM....a.G../....w..Z....Eu:.|....9F....!.%..3.vq....q..s
..Gj......YC.BR...@.(........T..Y...K.;uIH)......8.....6Rb4.I%..V.<<< skipped >>>

GET /public/images/header130220.png HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:32 GMT

Expires: Fri, 28 Nov 2014 18:41:32 GMT

Content-Length: 4132

Accept-Ranges: bytes

Content-Type: image/png

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Server: Apache/2.2.13 (Unix)

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
.PNG........IHDR.......g......K.x....sBIT.....O.....PLTE..............
......................................................................
.....................................................Hu...............
....$...i..L.......$..(J....)..,H....T.. ...G.......0...E...}3...R....
..~.C...}..|.....{..y.....w/F..?...y=.w.?...w:F...yF.v..u.=...s.<..
.s.....q.;...o..m..m.9...k..i.}}}.i&.g..f.6...e.j|.5...e*.a.3..2..0}..
z.}gU u..U.,u. s.*s.1m.)q.)o.'n.'m.$h.#c. ^. _..]. ]..Z..X..X..S..R..Q
..P..L..J..H..H..F..E..D..D.....B..@..@z.?..>..>}.=..<y.;v.:u
[email protected]...........................................
......................................................................
.........................................................o{.....pHYs..
.u...u.J%......tEXtCreation Time.01/31/13........tEXtSoftware.Adobe Fi
reworks CS6........IDATx...........d.".%F...A.6.Zkj..BI...V..Z.i.....4
.D*....XS.(.5....s.z...$&{...y.......0s..s.2...T...T.......p.;\.......
p.;\...T.......p.;\.......p.;\...T.......p.f.*t....Bw....t....Bw......
......p.;\.......p...T.......p.;\.......p.;\<...$...p.;\.../ ...}..
.NRb......>..F.c.......,..&wk .)5..&wTWz*&w./.,.. ;[...vV.}Bw.f..c!
.~..;...<}..-..M....K._.w...u.9Lw.....D...{.pf..<5.[>Mvw$.-..
.......\[email protected]'..#.3k.Fx^..(.......m...Y.a..l...
[email protected]..#.b........'b.d..V@.........
[email protected]?.Cw ......
.-......{.E.[>..E....][email protected].=....W....kxt....bpw...".q...#.<<< skipped >>>

GET /lib/jquery-1.4.2.min.js HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:32 GMT

Expires: Fri, 28 Nov 2014 18:41:32 GMT

Content-Length: 24606

Accept-Ranges: bytes

Content-Type: application/javascript

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Vary: Accept-Encoding

Server: Apache/2.2.13 (Unix)

Content-Encoding: gzip

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
............i{.F.(....B{..,.....4 ..-....q.9.Pt.@.$.....$...g.*T......
yb.(.^..V..j==.....?m..C...mt._f.u..,^F.t{...........j.o0k...Z.......2
....g.....#...?..l.__o.i}....*M..y....QZ...c=_......_..*...g*..y.`....
g...y..I.U.*..y.6. ..... ...^~.>...y.m........s:M...............F7i
..:..W...6.............;.U?k....|..;......R.y[.V.E.....I...~N........U
3...Y:[email protected].:.t.v.}?Z.Gn.mW..c6K....E.....z.....%V.z..n....D.m..
j.....8.w..........}..MW....>>,R.Y.h8{..7..<..on...7...z....|
....k6....>..~.s./...h..~.....|......r.M.7..~.......T...m..ga.....z
.....c....a...8...l.....y=..c. .E..{TO.f......$.q)........W..Z%....a;.
/. o4.....X.:I...J.{.......l..|.:5...,.]1....s.w...,y.!/.k...:_.......
..rc|.G<..6.v.8Ya.:.o...Q#.j.=.b1}p1sQ>...p*!=......c9$.\...`..1
.. ..M..w=.V...W.....,Zv....i.k.9v........j...:...F.QX.>l...y[.4...
O...6W...6....jr.Q02.%.f..;... .l......FP.............Fn.\.......o....
?9;.]...}.... ]{..4.<.v."j.7K....).CG.C..6V.._,.9..K.......{..4...C
....`..7.)....e.Q..,..R.L.tv../..nS...X...`..X..."....`...v....i.].s. 
.!.....L1..<..8L..Ai..1.&"..7]#%@.N0?.D.yqy.....g.W....k...C..Z....
.......?9.cN...4a..S..5.....4b.J..fk(...xER.Rj..c....S\.I.. 2.!n..-...
\........n...:n....M[...6..~.fX.....#..:..:.j...F....7w.... ..8`......
.N.... ._..>P.w..w....^....PO.$..X`[email protected].. .c %........
...$.H... ....8....j 2.-.Z/......:8.._..A..yuzz....{.3x..n...,..r.....
.r..a.N6f6..4.!B&0.).,.!...f.y...u..p....t(n..2....[Y...>l.4..4..SC
..;.8.w.....[....>.I....O.p....`...N..G.9..r ...$.k........c/..<<< skipped >>>

GET /lib/jquery.autocomplete.search-ext-bing-20130201.js HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:37 GMT

Expires: Fri, 28 Nov 2014 18:41:37 GMT

Content-Length: 7834

Accept-Ranges: bytes

Content-Type: application/javascript

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Vary: Accept-Encoding

Server: Apache/2.2.13 (Unix)

Content-Encoding: gzip

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
...........=.n.Iv.Z`.......jJ.g.K..4.&k.g.X...Ik.....V7......1Oy.>.
[..$.. ...H~f/..s........f.10#....SU...N./...gev.....$<............
(..F...'yx.....5........3...2...Z.{.......4...(.w.;...G..4....x..,O^.O
[email protected]......... ....m..
.KgI...c...X._.0.d...4.-^Y.n%).6.v.mm....5`...s.[U..b.g.R....[.n.F7vj 
3...'...W.........e..".4 yT....b....~...a.EX.NE.....].....\.S}..q.D...
..r..)....6.........<*`.$g...8.r..$...R..F~.....E..0.e..7....>..
......y....]........_..|..J.....ju[.X..Q<K.D...nCK9..u..:..A...YY.-
(X~.....=.y......>}.......vO........;..._..W{...B...\..............
..}.0....=...-P....E....z......=...TH..........e...LO.......$..x...E..
2..T.5...<.f..>...8.._....|.TieQ.`.U.g.!.iX|..f.R.\.........S.f.
."..I|bV..H..fW..t?J....0)"wZ......4Q=O......<JK......8.Fg.....ge-8
.....f.(...H_..$..J(..,..J...'^Gt.H3Q......K..J......s...U..H@_.g..)..
.. ...8...j.k.......~....=.u..%...`..`....N..(..bT...R..(,"....[f....2
.}...#4..=.Bp.&.q.u.....ix.....7^...A.t...I...ye.z.aIV..(<{.H8...B:
...C..(.@]..m1..@.}....G.0.... .o=.i....fm.H..J..6h.h.%...y.......I.lH
.)Q.. &6.<...,).......E.;M .:].:,U.>.s..)..`*.i4vQ.h1....T_o4...
l}[email protected];[email protected]<yK=....P.g...&..&.._z.
...q....n..-...v.9...o.$!_.$....d.. %mO.q$...U..h6J.....WG.`..*....Z.i
..A..c[.j 7]5..F.........d...5....U6....&&.g...K.I,}...}"~K....".w..k]
X..2...U.....7M'.Of.... .........d....T.....<.)c2.w.$9.at.=....T..=
HE!....0B....c.3..PT....<..P...fB.;....((...U...'whS_.Er.(.x.).<<< skipped >>>

GET /stat/js/XBKClickMonitor.js HTTP/1.1

Accept: */*

Referer: hXXp://eoa.intra.baike.com/site/tupian/channel/adjz

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.huimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:40 GMT

Expires: Fri, 28 Nov 2014 18:41:40 GMT

Content-Length: 1047

Accept-Ranges: bytes

Content-Type: application/javascript

Last-Modified: Sun, 23 Nov 2014 13:01:40 GMT

Cache-Control: max-age=86400

Connection: Keep-Alive

Vary: Accept-Encoding

Server: Apache/2.2.13 (Unix)

Content-Encoding: gzip

Fw-Via: MEM HIT from ctl-gd-010-159.fcm
...........U.n.F...)..........Y....j......`. r(...*...W............S.6
@.&._....1....A"w...f...x..`wp...*..<......_o~........z...w......7.
....7......z.......az~.ra.f.* q...}......`... 4..uX..1~U....z!....rsp=
..:X..-..ID...E*,3D.%.#[email protected]=U..Q.W...&.........'<.
j.......@|...7....<.]....Q.'..@............~.c.........V.^6u......^
..z..{jq1.. ...7F.Ei....R...}...yk....0=.?@..".U..T.$..]...f...sI.9_M&
~.X/..&............z.s....#.i"...r.o.0./....h.=Q..A....;..C....I.9....
.<...Z.8..].....S..d.g.>.2c...3...].w|wv6/..*._gh......Z...... N
.p....D..E....y..s.......l......G.......2......$.mA..`.'&..Z....Vsvr;.
M.R.Z.P.UK......U.....UnD^B...........u..N..T..q....$s8.(..\...YHe....
...sz.cV....}9....VK.[7..n..8. B-V....5.e..Wf|./ys.....M?.......Z].K.c
f....(.Z.......,..A../0.. ..-.r.&d........b........$...C..}P..t./.....
.....]p...U6N..`.j;...B......3.)..*v.MBc.P:.Qs.......sPW...>f.P...$
:..H.....A.BQ8.x.y.s...l....m....,.....LC..4h&..0....g.S..)....Q.Y.H.D
d.....6...eb.?:gf....}....S.d*\..!..4.....2.w'.....7K.q.^.....t. .....
!v....?.9.D......

GET /server/website/CommWebGameSelect_ad.js?sGameKind=hyol HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

Host: huoying.qq.com


HTTP/1.1 200 OK

Server: P35_DK

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:32 GMT

Cache-Control: max-age=60

Expires: Thu, 27 Nov 2014 18:42:32 GMT

Last-Modified: Fri, 10 Oct 2014 03:00:37 GMT

Content-Type: application/x-javascript

Content-Length: 15036

Content-Encoding: gzip

X-Cache-Lookup: Hit From MemCache Gz
...........}.w......9..../=...$.c#....Ub..p...j..fZR...0..Gl.1.6...c..
.....%..2R....f.'......g............. y.v~.f.oU.{...[.n.*...q.......W.
.-...t.<nw=..L....>?........o..U.by. t..ww.x.....^../....PrO..P.
.../-....;../..s..1..4jn|_.4..|..........%.g......G..X...G.b..p....r)Q
......b.M.....X..x>.....2.I......=^.}.. <. .F..5.?.-o.J..*ny8..N
Z...S ..a......Z.....y...n.Vr.|..&......W.J`..|.3...].L..O.C....4az..G
...1?3...|f.5\D.....c.c.N.N...2c..9R..7;..F2...a'....DTO.VM.Jo."...M.o
..C.......\>......`...4..f....Pi....wK.}E/.4i=.Hb..2E..42.3j.....Q 
..e2o..<335......"j.\...^....\.........Z..J$......GRJ`..... .....am
j[......~.e. ..Eg./....A..L....{s...jy.@#...?.8.M6~b..B..o.....Go_!..~
.b.3YT..t.....-.("..E..D...0.q..iQ6.B..-.n....z.U.z.\.bYC....#,... .z.
..T.....].....6.:?....'B./L....*....!..F..,@........wx.[ J.?.d........
.]y..?.9....{...\.....S..\...h.lu.wtn......).c0.3\....^$.. .C....>H
y#......J0npw.....G...5.z.?....p. ..........J......_...V.#[email protected]&..W.
.\\X}?|....zH........n.w..z....I.....,a|.0B.....:......J.b1..$..{". ..
6............Jd2..}..J...?{s....._].u....._^..>sy....O.,.<....k.
.]c.....a...D..H|L.a!|.8.v n.Irb.-P..c.P...{M..r]...S. .L..".{.v......
~..ni$.%`.S....AQk.if0...].[.t..1..:..x..~heA..H.0A....sVZ/0R....1.x..
..HfA...."l...l..>OY;..S..A...H.g..|......%T...&l.qex.#..*......!.a
.M'......?....?....O......wi'....H.?..O...l...`.g.J..T.j#.9v.`m.M..z,F
5,.2.FB...6..........>,[email protected]`..H*.....H......JL,.....=..#A.!
...HR.y.I..x:..d2P.D1@......_...j.=....},a.[.Mi.....".i..x.C..._'.<<< skipped >>>

GET /imges/live2014/showwall-bg-v3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 11:41:20 GMT

Date: Sat, 20 Sep 2014 11:41:20 GMT

Cache-Control: max-age=31104000

Content-Type: image/jpeg

ETag: "1627641608"

Last-Modified: Wed, 30 Jul 2014 03:26:48 GMT

Content-Length: 36625

Server: tux/3.3

Age: 1

X-Via: 1.1 dls20:1 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......U.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:D9DED8BE2916E411A
EB7BD26DC135CD2" xmpMM:DocumentID="xmp.did:4B9E84F0179911E4ACE79122D82
3DF8B" xmpMM:InstanceID="xmp.iid:4B9E84EF179911E4ACE79122D823DF8B" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:09D59B81179811E4A95CAD211A060908" stRef:doc
umentID="xmp.did:09D59B82179811E4A95CAD211A060908"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
......................................................................
.................................!.1A.Qaq........"2.....B..S.T.Rb3Cs$4
r.#..Dd.....t..c...^u.E........................!1QA.aq....R..".2....
........?....n.....#K.?q....;_..n...G.4...;_.}/G....h.&z........^... .
F..^.W..OC....../.u.w._'...G.4..t.9Rz....<....:.. ..t...hF?.h.#...j
_#....C.4~.}'...G......:?...|;U...~....?....].]/F...#.....g...O.^.<<< skipped >>>

GET /js/z_MIN_15.85.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Dec 2014 21:54:11 GMT

Date: Wed, 26 Nov 2014 21:54:11 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 53989

Last-Modified: Wed, 26 Nov 2014 08:52:35 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx175:80 (Cdn Cache Server V2.0), 1.1 yfdx34:4 (Cdn Cache Server V2.0)

Connection: keep-alive
............y{SG./....b'.HmY.........3.!I.%....m%...d.m.y ...S..C.....
...|.{.,.u...[kU.]{kK..t.=7O7....U.V..V.zv.^Z.yv86....'......\8.t,[...
s....l9....r...Y.j....S..O.q._"....s...\...o...}.X.p.\..M.;.#  ..u7.?.
...MGwF....m.t0...O..ZZ.b3....tdi.P................G.2.....T%........)
..s..b8..,[email protected]$s.o........4.\...rT|....p&.....$U......e....
..........m.Qt..h...B......?../. d....N.ss..)T2P...E_d..@s:h..b..B.P^.
.....;...kE..aP...[.....(._W....v...~;............xa......E.._K.....l.
d...m..|--....=h>G.... 4k......S|.2>.9.v.B.9p,7Wv.........2..r%{
naff.3...\.)..ft.....7..n<....P....,[email protected]`.p.\....
4.z$.kd......e..=..A..z2..L<[email protected]~&?..g..,_g.....F..}..|5!.{...
9?5. ..7..a%...j.D.....p.8.0KS........e0.L1.i6"j..G.*...c.....W....0;.
.]..6.?c$..(z.\.C_^.>b.f.V"zm.[....1..}....i. .._(Mc..yz..)....x..i
. .0.^B."..O..."b....*Z......!.)ioy...`....,...1.A......."!B..g.......
.&......--.8H.t..# ..=(kM..)&.#.(Y.6.MT.f..D.(|.?.y.GaZ....s.....iY=2.
...Y.....L...-%f..s.M?.Q.........l.Ej cgb/....#s$~4..0.......g. .}....
.............o..ffE..4._..fr....r.2y0..PUGxpM-...D~...B...Xy.X8n..C...
.......-....!.. [[email protected]._...Ea.;." .........0..H.&
gt;HX.&!*m.B.....?....Z.\F.0.B.cu...)..a ?aE......e.....t.8...........
.T.P\.....P.....1.h Q...f0......BJl.0...!..="3...PL...%./.%B.M.m8.v.f.
...Dn2?..h.(.o..R..p_.\..Y(a.#.M.u........3.Ewu...2..~.:..(O[B..5..OM.
.q.mM.!....<l[s.......f../...../...n...m....c..|YU..^.....-?1.S5.m 
;V*.,...}.5..T...V.0/[email protected]......<..K'R.."...._..~H..)...L~<<< skipped >>>

GET /stat.htm?id=5885029&r=&lg=en-us&ntime=none&cnzz_eid=1863303197-1417113670-&showp=1176x885&t=&h=1&rnd=902142171 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: z6.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.1

Date: Thu, 27 Nov 2014 18:41:11 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Tue, 28 May 2013 02:57:17 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /live/2014/06/24/01/1003v1403543368529193922.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 11:31:07 GMT

Date: Thu, 09 Oct 2014 11:31:07 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 11698

Cache-Control: max-age=31104000

ETag: "1417898205"

Last-Modified: Mon, 23 Jun 2014 17:09:28 GMT

Accept-Ranges: bytes

X-HITS: 3

Age: 1

X-Via: 1.1 dls19:4 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H......Exif..MM.*.............................V......
.....^.(.......................i.........f.......H.......H............
..0221....................0100........................................
...................................................(..................
.......................H.......H.........C............................
........................................C.............................
............................................x.."......................
......................................}........!1A..Qa."q.2....#B...R.
.$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz............
......................................................................
............................................w.......!1..AQ.aq."2...B..
...#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.....
......................................................................
.........?...................yrm...d.._...............> ..L.....MV.
..g.4...|. .....GY#M.Wda.....F1UuO... .x...9S...U.O...JM....].U&.V....
u...v.....l<s.M..6......t8y..8=3._...W.e..........~..zW#..bc.7.....
...:sQ_x..XL.EB.....1].....J:.D.Sm=.~'..x...."..\......N .....X.H&M.q.
;W.:....L....j.K. .s...j....t..FVT..Eo.........0..;(b9.-.?e...........
...@c$..............T. ......F/[email protected]$.I..<...'..A.G5...._.........|
...q.Ry.#.T..;..k...5.m..C....<de.}V.O..g.. O.M..? ....^..n....t...
.>|....{..H....d.....S..!.K..L...q....i0J!$...0....W...3.... ).x...
[email protected]..|%.k.tR...r......(O....^../....<<< skipped >>>

GET /js/jquery_MIN_5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Dec 2014 20:07:19 GMT

Date: Wed, 26 Nov 2014 20:07:19 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 41543

Last-Modified: Mon, 13 Oct 2014 06:28:21 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 2

Age: 1

X-Via: 1.1 yfdx33:3 (Cdn Cache Server V2.0)

Connection: keep-alive
............i{.G......D{d@,n^...X.....-[.%...i_....XH..b.....D.U..r...
u<.b..\"#c....z.[....".4n......q.6[.v...Nv.......z1....YoT........C
#._......vz....m#...'. .u.~.f<...4.<xp...p6..o>\..{P.g.....=\
......?t...''...j.r.._<..y....v....V.q.z........lXK..-.....Z|......
:.~.o..7k.l..?O....d................U.\.|.wx.-...^......m/[...qs.;....
osZ......~.....`...lw...L3...k{i.]..z...........y..u........\..k...{'.
....}Yo.............R#.ogt.i..l.-..^..U*n.. ..C.n....Y...........L....
.Y.....]....,4... ..?Q.n.N.z.9.`...^...M&..d.-.mC.u.x..v..KP|~....V.O.
.'.f...n .=..'4.OV...M.d..hui....uS.:qp.?=>.....b..[...|..g.N~..lm]
k.vX...".V..y.z..?_dC......g.\7.B.V.p....Q....P_.....U..F..l..7.....l.
m6...F..|......|......2.w.|.....?..F1...NXt..X...z..l..6h.._...ZZ....m
....x.5i$.4?..2..Pid..k...I..w..;.O.d._.J&..<=N....?...O.p....T..Y.
.....................W..N....-......Nks..Fo.g.H...........N..0...q....
:.j.6Hqmnd..L.A..L.{8.:/.~..K.-^7......r.X..V...O&.Y..A....z....!.}J..
&T...&.G.fm<..^.@.<x.9.....6...Av=Y=....\3.. p.]%.....:7.eW..]..
.m...RL.M.{...z Z.B..........%.:Y.........~6k..b|.f#..~e....J.|.?0[X.t
..XI.i......wI....Q..1..,..Rv<...;[email protected]..:_|pp./.O&4.y.}.9/.
...oc..l.lX..b%..W.%D..k.D...,.-..E.X"..../R t,'cD...3..}.............
.....f..X.S....'..\..f....w.[.{.Z.. .}.5.....U6...J..jE./|.qV"gi.<.
BvF......Qk...1;.....\}.....~FZ.Ovj.I?.#...{z..#...z._...;i...fx.z)^..
}...N.}&...c../..k.....~.<IeL..&..7..f.....8.....=?.....G[.........
..Yw...;.........n.%...B=K...9..8X..l5:.f...I.99?......}......{.XI<<< skipped >>>

GET /IosHome.html HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

Host: VVV.waiwaishu.com


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:41:40 GMT

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

X-AspNet-Version: 4.0.30319

Set-Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d; path=/; HttpOnly

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 198748
..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "h
ttp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html 
xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head><title>...
...............-............/............/ios................../......
............/............/............/..............</title><
;meta id="Keywords" name="Keywords" content="............/............
/ios................../................../............/............/..
.........." /><meta id="Description" name="Description" content=
"........................VVV.waiwaishu.com............................
......................................................................
..................." /><link href="css/common1.css" type="text/c
ss" rel="Stylesheet" /><link rel="stylesheet" type="text/css" hr
ef="css/public.css" /><link href="css/common.css" type="text/css
" rel="Stylesheet" />..<script src="js/jquery.js" type="text/jav
ascript"></script>..<script type="text/javascript" src="js
/jquery-1.10.2.min.js"></script> ..<script src="js/script.
js" type="text/javascript"></script>..<script type="text/j
avascript" src="js/Article.js"></script>..<script type="te
xt/javascript" src='js/common.js'></script>..<script src="
js/default.js" type="text/javascript" ></script>..<script 
src="js/utility.js" type="text/javascript" ></script>..<sc
ript src="js/pagecommon.js" type="text/javascript" ></script<<< skipped >>>

GET /Images/bj.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5834

Content-Type: image/png

Last-Modified: Fri, 30 May 2014 03:46:50 GMT

Accept-Ranges: bytes

ETag: "0b1b0c9b97bcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT
.PNG........IHDR.......3......G......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112614349492.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 20154

Content-Type: image/png

Last-Modified: Wed, 26 Nov 2014 06:34:32 GMT

Accept-Ranges: bytes

ETag: "d6d4aa9439d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C....L.IDATx..].xTG.}o-...
bEZ.H.Z(R..B..(.-........w.{...-.........3w..l..6!.......d..;s...I.$..
..V3......f....W....&'.d....c B..*C.`....l.a.Y.4@..............:J..l@.
^eP.G...|...........C<~...6_..<........?....d.7c.7..J.[.5..{..$.
K.&T#I./.....0[........).d.4I.qsF...I.@.......`..-/.d?..a.\=......e...
.....Z7-.Oj#a..-.............n.lw....Wo\..^: ...\... }..Xb.Ab.Fb.U....
, ......M.....$q....S...i..$Z,[...J..(.^..]...V..N.....?.ftGX:X..d.4;.
......o.V.ZNw.I.........._.9...o^...Wp.d*f.........[8q.8...Cy.r(i...u 
z.P.B.yl.X1."I....@..@5..?...7...-[..fx..X.H..D9Mm(.....a5....H.h...\.
P.X.\..{9Q..k.c..p.P#...^...g.... .|.2}.z.*.........r.\*.&:.ntw.....E#
.cL..K...7..U.>z$.s....jK.jk..=..P.B0..!.b......J.h."...~l.b..-w.&l
t;..:?..E..V....(I...7.VE.7en.....f.6\.9!M*.R...&!|.H.=....&..(..|..h.
k..Q.O.y..Sd.~.. l=...'/Va.X....V..y..L\4..O...e{.....D.O..>C/.}{..
*[email protected]`.K0..P..:.J....I..._.m.).}.x..D7J. xE }..#...k....
.Di..%.a.;..n(..Dm..Zr.L..bdE,.3...>x..>fR........I:........c..q
....P...c{[email protected]
.C.&.^..W....G..".w...z~?.]9. oKH#...g.5Y.......?&}O.kc...b.........6.
Z13..1N..,...hr....4.-_..$T.V..=...;..n.P..6.;Vc.:[email protected]?Z.....
?C=.zh8.... ..m.....fU.*po...M.6b..UX..........2.>.4.\...i.;m......
..v.L..9m.........b.L...q.}.........~...\<.R....f%%.HZ..9T...{.;.h.
..\..1P.K9..%.C.KYM..>#....{A.I...$.e{d#..c)..^......B....k.^.q<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112510581368.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 60031

Content-Type: image/png

Last-Modified: Tue, 25 Nov 2014 02:58:23 GMT

Accept-Ranges: bytes

ETag: "78806ad5b8d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....gAMA....|.Q....'iCCPicc..H...w
TT.....wz..0..z..0... [email protected]!(.`.H.Pb0...dF.J
|yy........g.s..{....$O../... .'..z8.W.G.....x....0Y...A..@$/7.z......
..H..e..O...O..T...._..lN:K.."N.....3"..$..F../JP.rb.[...}..Q..d.[...S
..l1..x{..#b.G...\N..o.X3I....[ql2.....$..8.x.......t..r.p../8...p...C
...f..q....K.njm..{r2.8...?.......)..L^6..g.,.qm.."[.Z[Z....~Q....7%..
"....3.......R..`..j...[.~.:.. w....!.$E}k...yh.y...Rm..333..........:
..}.=#.v......e...tq.X)I)B>==......<..8...X.....9<QD.h...8Q.y
l.....sy....0.OZ.k.(...5..H.....>.....yP............:.8......p.....
.....Lg....k.k....$.......t.!0.V..8.7....`[email protected]#
h.'@.8.....:.....`....`......a!2D..!UH.2.. .d..A>P ..ECq...B.....*.
*.Z....:.]..B..=h...~....L...2...........5p.......N..........:|.......
@...QC......!.H,.G6 .H9R.. ]H/r..A..w(......Q.(OT...JCm@..*QGQ....-.(j
...MF ...6h/.*t.:.]..G7.....w...7......Xa<1....:L1....s.3....b.Xy..
....eb....~.1.9. v...G....p....... .5....q..y..^.o........|=....?..'H.
t.v.`B.a3...B.DxHxE$......"...XA<N.B.%.#...I..H....t.t.t...L&k....d
.y'..|....V."a$.%...(Q%..1(.B./.%.$.V2G.\.....i)......Sj.T..).a.Yi....
.t.t.t..U.I.......[&_...E.1.B...PX.-.z.%.8.C..zQ..E.o....Y..e...Y.U.gd
Gh.M..EK...N..h..(/qZ.Y.cI...%sr.r.r..B.V.;r....n.....;..)......2..*\R
.V.*.*....O(.W.......).V.S.UVQ.PNU..|QyZ......R.rVeJ..j..U-S=....Kw.'.
 .=..5%5O5.Z.Z.....z.z.z..#...C#V.L.[cFSU.W3W.Y...^.....O.WkN[G;L{.v..
.....N.N..C]...n.n..m=..C/Q...M}X.B?^.J...l`i.58`0....z)oi..aC...a<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112413276096.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 25868

Content-Type: image/png

Last-Modified: Mon, 24 Nov 2014 05:27:54 GMT

Accept-Ranges: bytes

ETag: "328b3366a77d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C....bnIDATx......U.6.....
.}...n7.P....s:p8.p.'qr..D..%H...(*h.0......6..........7.ZU.jW..U.....
...F...j....s..B.u......SF"............g..Pg....>..>...1.g42v.w.
.....u.....$....................P.%...R......_~E...>=../...w.-[o.5.
7...n.Uk.../[...,_.`.u\j._..V....o....|...r.Z...W.......Y.K...9.6L...t
.....l..(r.H......Y.(g....y.mt....cO<I/..*.=z.....h.{A...'....8.s..
[email protected]\Ke.....F....n}.PwF.AC......5`0u....../*pMo..o.0............~.
...r..!.......<4P.....#.{..r}_..........:HN_.....r...?....M.K.%.4..
...S...}..4 ......3.....P..8@;.zX.4`.HI,..k.`.0|$.II......XLy...9.K..a
L.....9E.........|.)(.Dv.DJ...C......{...L./...q...G..9........y.8.^..
.....\.:>...f.....[7.i.|>.........?...O..`..7.4..c..K>~..=...
TPZ..Lh..c.Ia.L.N..,..o\G.6m.M7....f.I.._....YG7.j..5,c..M........o.kb
..g..gn..Y.&%g...g.#.X.n....f.|......q.g-.5r6.....7......J.....'.....&
lt;...J6..XKM..F...4:)Uk.a4p.(id.....:t8.\'47.......&CmB#AE.t...D%.U4.
m.-\...,]N `........~...n.R.n...K#~[..z.v....X..3 g..(2....|.G.`.|_...
.....>.........,^r}....,."g..Y..S.,\.....s...@.%.|>w.B...*.t...4
.-...h..'../.,.s......I..Aq......XV!.........5O.J3f...3g.q.$r..E..=g&g
t;_.F........;.5.u...x^49.......7?X..y.t..b.m.<.....J......=...[.(.
rf....!....... r.F....2B...] ..6{...O.qi.B,.,%3..x.a:y.dP.._."._.c....
~...))#KH.{..R..5.h.Vjj.BS.......<y.t..hhl.L....5...SgPc.r..V6.Sg..
.".g4r.c.i....8o3%.....9SXNS.r...8r..).fRSk|r.Z....^.J.........4. <<< skipped >>>

GET /UploadFiles/Soft/s_img/2014111911185225.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 11280

Content-Type: image/png

Last-Modified: Wed, 19 Nov 2014 03:18:41 GMT

Accept-Ranges: bytes

ETag: "3af99384a73d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C....)jIDATx...wtT..-.3jHH
.4..W..`..N.....{......k.Q..N.........v...W..i.`D/.q.......16...8...9g
.H:#.h..?.........~...,}..S.....g.3..".[.}5.`..{....G~2.....#./.}..a..
..%.2E.>f.3..`$..L....R).....y .......R`{.gR.B.6...... ....o.C.....
..........L!......D0Q9.RH.,)<k.T.z.t.=.]...g.[...n.]......Aq.j.Gp.l
D...3.....4..HZ..-.Q.\...I_.HS{]$..Xl. ..\f.......&Q}.....*....MT...d3
.fP...f....=.C.Q].'..k(S......>'.}l.X3..>..2E.P.*J..R.j......ii.
Q.....j.s..*.....0..'.....>.3.-..T..;..u...HR.n.....i.U.s..*.......
....Y........BT...u.M.'P..Pi*KT2.Z......g.%..);....dT...........N.{](n
. .h.j..C|P...TJS..g..%...RQe;W.s.Tl*..O.....D..&..Bj.0.....s.(g...>
;.*... .*[email protected]....?.aS...<.........k.. s...SnC.O.a)g.#..?.:.....
..3.T.....6..*s.. ........V....H.N.W.>...;.q.J.AP..c...'..t.JTF....
..s...O....}...JO3.9.....fX....[.j}BQ.~..wMD.....>.O..........3....
.o.8......1...\.........;......^..GTD......=R0#.X..kF...F...a..D.P..T.
..}'w.x{..... ..S..3..&A.;..N.....u...8o'b..?...QmW.j......a.-..*,_.:.
@[email protected]......$D=0YA5...p.K`.Q.N..o.I2.........N.MX...=....S......
.G...........U.Q.MB.H.....|.*.......'$\...s.^$...>.F..aU..ST-....uX
.}....>.Gv&"[email protected]....%0n".J......#P..U...|......'..H...3..Q]L...I
..1..rSq...|1../Q........./O...D......D"...[`..!X..:JTQ?.........jW.AF
u9..7DS. .....V..5_.V.}Km..>.c.w.....jS..5...;.,....TX7..5_......qa
..V.m... Mu..z....T.**?..;!...M.......k.M...X...27V...3.?...|.....<<< skipped >>>

GET /UploadFiles/Game/s_img/2014111813317678.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d



...V.....C.k.....8>..>hR......>.9.9...~.7~c......g>.......
?c.S.B..y.5..P4..W^...........4.!......................7...;.1.J.nW..P
[email protected]....:.\...^.......,.......j..........L.....Y...*_. Q.`
../.....E.?%...U......5../~..'....F~....f...[Q.%... ......}`..........
....~..}...Q._.._......4.."..............z..zT..T..#.s..k/.@...>?..
.........n..d>.G.k.....r..>.........v..KP..u.3..a.....:....`....
o...........Q........................S.!.h.}.B..*dsJ6r...x..V......4^.
I.@*...z.......sP%f...w......j...]y...........{......................L
...z............(p...e..S.rF...-.b.zj..:#.....T.\..u%[2.9...x1.B!f.(..
".....,..^}..h.:.......x.............S9....Pu..Au......M...........S..
.........J....[........-f1&.#..o.fo6}........).fp..n.....n..|2.g..kl..
$..(q..V...F.F.......N.{p]].F`....?2....3`.Au.]..$P....~T......g.|..R.
.{.g.......O.......?........*[email protected] `}.7}.4..`.V.k.Z...T
s..i.}.........&..(`...OF......z)..c6.....B.....P.u.kv.s...uT.;m.N....
...p.......k*.,..~...W\q...._..S..(...9..........._...oJ.&o.&.g\.."...
.W..v..)V/.R#.;i.9.K.7..3SJ.i........1..........EV...d_..:w.Z...q.b.|.
.?..'[email protected]......)...7..7.^../.....%..~.u...}...<f..&....%..O
.._.....^{&4.Q.L..Z(,.}[email protected]`.[M.%...Z....F........
.R.V..X..b..:.Id.@...?...`i..........d2....}rx..C..W.s.C...>G^...Ac
.}..S._'p..J..Y....1....;T{...........J-....*Pq...K..K....m..m....S...
9......XT.0L.3...)..,...P....Tw..].yD.y>L..2.*\...U..#.k.`kL.sP*...
...C.W..Yd....>.L...of...V5.>G..1.U.a..U. .....oR.`Q,.....".<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081123132964.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 17193

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 15:13:27 GMT

Accept-Ranges: bytes

ETag: "fe246ccd76b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:5684A9BF198C11E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:5684A9C0198C11E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:5684A9BD198C11E4A838B028F7746D81" stRef:
documentID="xmp.did:5684A9BE198C11E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
........................................!1..AQ.a"2.q..BR#....b.3....S.
rC.$45...D.sT......................!1..AQaq."2...BR....#.br..3CS...c..
............?....It..I%..LH....%...1..3..Z.k..Wk<.o.t.....`.....8UG
.3.F...5>..(0.AM$E.......}uN...8.>..u..z@..?...,.....M:.2..~/...
..?..w...t......;.K..............~g}..../...M%..:../...7B?.....$.t.A..
...zN.&.N%.fK...I "a.Gikq$.;|...Nt..D...{.......o.jn.c..:!....;.YG<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070814229713.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13133

Content-Type: image/jpeg

Last-Modified: Tue, 08 Jul 2014 06:22:54 GMT

Accept-Ranges: bytes

ETag: "a01854d759acf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
[email protected],..(..VFg..3.zE
...).?.U.. ....V........z.C.J.Vx.Z....r.I-..o....`.i..*\..p.=.... ZI.#
"..5.8../[email protected]........&...#YH.%Ul.04..I...B.F.....|..
....u....>......,....(%g.o5...^H.b...uF......BzY.w.'a#]..l....7$.].
2!.*. ....$h.>.....|.b..k...K.F1U.Q.,..C..Kj...FbM.>H.c.......W.
v.f.S......P..H....b.}j.z.R.Y..b...<m......U>q.:.^.DKG)U.z...;)"
.mW@&.nx......9P...;].1.q.nQ.1..i.....=v.l3p....0)...{......h..LZ. .a.
x...abt..$........J.^....D.Vwb.....-$..O7G.X/.0.....;[email protected]..#
k.T..k..i9/..H.y..X)Z8.M.....z.W.l...|.C...z.E4k..U..%..6:..l.)T.7...r
~.h.i c............[C..k.)......h..@`.... 5b.....=5.......hn..K...Ia.k
.G....S1YK=.;V..R.9rK.M.-[...I-...$.)..V....k.....)..*h.I....;.<".z
J.\=t ..6K).%V5..=](.s.....K|ie.W14V3.....7...K^j.LEn..>.5........F
..........[.....0...W.~...n..C.BC.....kW..Y. H.<8.)J.]..P..Kq._8.-.
8.!t....U7b.sz2.xRc.k....[..."@A.a....zm..o.Zc.).' mk..1.y..G...-.../.
f\.Q..!e]...n..B.......} ....)06Z.H4N_`5.g.....V\...)./k5d.$T..r7#r(..
..H....='....2G..?...*...........................!"... #1245$A........
...G.......v..> K> K> K'mJ2...f...f.....U.,........t.......6U
.mR.tw^.*j.....i.. .e...:s....|.d.FK.9..........:s.$2...*6..|S..f0...y
[..$.T.......$..(YOMk$...sYg.....H.O....<.8?i...j....).....hOJF<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082321069032.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 6589

Content-Type: image/jpeg

Last-Modified: Sat, 23 Aug 2014 13:06:32 GMT

Accept-Ranges: bytes

ETag: "f4b7afd3becf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.C...........................!1a..AQ.."q..2B...CRr....#$EUb.%3su......
..............................@.........................!1A..Qaq..."..
.2R..#Bb....3CT...4.r..............?...... ....@....... ....@....... .
[email protected][email protected][email protected][email protected][email protected][email protected]..............
.........Z...Vz7....CJ....F...\H..*5 .S..)>Ie..j..B..Y(.so....M..g.
u.G..k..8..@di?.p..[}....8r......e..m.......sk..../s..}.(..n.5Sy:.....
k.5........%...m.._..5.M.~2K...wn.....%C..k...,.....q/._r...\g....3..[
on.I....`.}%{\~N`..._.....^q.6^.. G.[g./.F...bl..........Eu1,......p..
....e.J........v.J....M......z..SZuE..........s6V.....iw...'..A..4....
.h]......O?#%..K..@o.....@o.....@o.....@o.*[email protected]..(.....Ki.....*J
H[.,..1.o.'.Ui..i.t......R.V. .U..W..$s&..c..I.."...e..X...8.8.....]SI
..$..O.....^...z....GK.....\._....X^..q...*...852.5.y5.U...uKK k.uv...
r../...w.7....9...\...<..f!... ..H.L...."..}.i.. .5.6..r.........*.
{z7Pt..J=.e... Z...7.v..tv.{i.m...[..'K...(..;....k.V.. ....F.ut.te._.
...<..t. m.Rj........\...s:.Mj.N...u.. .[..............;ui^...s...O
........Q...[.J/[email protected][email protected]:.[.6}../...OI...q|.&
lt;...../S.2.....*...9..K..#...6.]..n...V.......M............D..Z.~X.'
<...<...>..t m....U..s.].......7Z._.>.5.<._k.r<..[:5
.7..!\.I..$HG&H.L...b8..E$H.vk.K..o..c..c...)I0T.x=.~N.G.....k.Q.n<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073111044017.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10778

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 03:04:55 GMT

Accept-Ranges: bytes

ETag: "2ef26b346caccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......Exif..II*.................Ducky.......<.....,hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"
 xmpMM:InstanceID="xmp.iid:A21495C1107D11E4B3E89F0D63287040" xmpMM:Doc
umentID="xmp.did:A21495C2107D11E4B3E89F0D63287040"> <xmpMM:Deriv
edFrom stRef:instanceID="xmp.iid:A21495BF107D11E4B3E89F0D63287040" stR
ef:documentID="xmp.did:A21495C0107D11E4B3E89F0D63287040"/> </rdf
:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=
"r"?>....Adobe.d...................................................
......................................................................
......................................................................
..............................................!.1.AQaq...."2.....BRb#r
....3..C$...Sc.D..s...4t%........................!1AQ.aq."2.......BR..
.b......#3............?..M!...6..oo.\TX`..$..-(.."........j'......c...
.,...<./.5.y..g.^...d.xq.....]..(....w........E.7.j.......qH.~Vk...
C......;Ktc.....-.....L./.8...2..}.Uj..!y...?...U.n<..v|.........&g
t;lZuR......6-:.{q.......T...B.g...N.^.y!{....U/n<....b.....H^.<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073014189465.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 9427

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 06:18:09 GMT

Accept-Ranges: bytes

ETag: "6057d78beabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.>............................!1..A"2Qaq.Bb....Rr.#$C......c.......
.............................@........................!..1A..Qaq..."B.
..2R..#3r...b...$S.C..............?......ZQ...D.%.(.DJ"Q...D.%.(.DJ"Q.
..D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%
.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ
"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ"Q...D.%.(.DJ".8r..o...4....\*.
qz9.mF@..$..%)....J........~.....a..Z1.4h<....=.M{.....A~.....Z..}.
.....9=.q.I...-I.Y......?..........:...a...<..R.il:..B.q.)R.0RA..|A
......!.....|\...D.%[email protected]..[.....:.......-..
.u."r.{r...O.Q#.j.Oe.OzS.>kO^zK..f:.......O..U.u.bv.suN.mn:....F.{.
.m*<.8.d.....B.E..............0dh'..#Q..~.x6....[...2...........$I.
.X.......I..SR..o...C........m......h|.\.p..i..#.k.V..|.k......oR....w
[x.S([email protected]...|.{.~.u....D.%.(.D[....m.
Zn.z..U.#..m.,FZL.V..R..X....Vd4.N....*..h-......./..xhq....z.g.M.}\..
.H..............}.;....Ml...........K.....-....a.d..F...A.8 Y*#..U..F.
v.$.q...:C.Xo51.Q?z..r8....x.6o....u.&..M.TNG.# ...#..-.g..Js..$|.R...
H.e.O..E..n...........87.<O...p...... ....9vd........../M;.m..%q..,
...;.........$...I...Ty.U...v}......B..~.;.,.2..m.........@~....A.@..(
..R.3.q..&...T.....<h8z..."].K...`.......,.K=.;c...-..1#...pR.7<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081916263719.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10760

Content-Type: image/jpeg

Last-Modified: Tue, 19 Aug 2014 08:26:17 GMT

Accept-Ranges: bytes

ETag: "da78a43f87bbcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT

......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ ........
.1..acspMSFT....IEC sRGB.......................-HP  ..................
..............................cprt...P...3desc.......lwtpt........bkpt
........rXYZ........gXYZ...,[email protected]
ed...L....view.......$lumi........meas.......$tech...0....rTRC...<.
...gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Pa
ckard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-
2.1..................................................XYZ .......Q.....
...XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ...
...$.........desc........IEC hXXp://VVV.iec.ch............IEC hXXp://w
ww.iec.ch..............................................desc........IEC
 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 De
fault RGB colour space - sRGB......................desc.......,Referen
ce Viewing Condition in IEC61966-2.1...........,Reference Viewing Cond
ition in IEC61966-2.1..........................view.........._........
.......\.....XYZ .....L.V.P...W..meas................................s
ig ....CRT curv.......................#.(.-.2.7.;[email protected].^.c.h.m.
r.w.|...............................................................%.
 .2.8.>.E.L.R.Y.`.g.n.u.|.........................................&
./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~....
..................... .-.;.H.U.c.q.~....................... .:.I.X.g.w
.....................'.7.H.Y.j.{................... .=.O.a.t......

<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081123068326.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10727

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 15:06:18 GMT

Accept-Ranges: bytes

ETag: "840a7cd75b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:5684A9BB198C11E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:5684A9BC198C11E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:5684A9B9198C11E4A838B028F7746D81" stRef:
documentID="xmp.did:5684A9BA198C11E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
........................................!.1AQa..q."2....BRr..#...3...C
$..b.Sc.4%..........................!1..AQa.q.2."BRr...b3...#.........
.......?........ys........U..w..V..."M*i_Q.]e.......$W......!...8f..;;
.(...o.....c.R%Y..>.............R.U.O%......C...1.9..m.6...p.M.kS.S
...^.u..G.|.1.....uf...].K,..iW.....&.....@"..m..c.*.m....#....w..W.h.
...k....H.{o....U..#..!....;.;^..'z@.|.....v...N.......H...:#..";K<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073014148024.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13587

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 06:14:35 GMT

Accept-Ranges: bytes

ETag: "3ec26389bdabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT

......JFIF..............ICC_PROFILE.......appl. ..mntrRGB XYZ ........
....acspAPPL....appl...........................-appl..................
..............................desc.......odscm...x...lcprt.......8wtpt
........rXYZ...0....gXYZ...D....bXYZ...X....rTRC...l....chad...|...,bT
RC...l....gTRC...l....desc........Generic RGB Profile............Gener
ic RGB Profile..................................................mluc..
..........skSK...(...xhrHR...(....caES...$....ptBR...&....ukUA...*....
frFU...(...<zhTW.......ditIT...(...znbNO...&....koKR........csCZ...
"....heIL........deDE...,....huHU...(...JsvSE...&....zhCN.......rjaJP.
.......roRO...$....elGR..."....ptPO...&....nlNL...(....esES...&....thT
H...$...6trTR..."...ZfiFI...(...|plPL...,....ruRU..."....arEG...&....e
nUS...&....daDK.......>.V.a.e.o.b.e.c.n... .R.G.B. .p.r.o.f.i.l.G.e
.n.e.r.i...k.i. .R.G.B. .p.r.o.f.i.l.P.e.r.f.i.l. .R.G.B. .g.e.n...r.i
.c.P.e.r.f.i.l. .R.G.B. .G.e.n...r.i.c.o...0.3.0.;.L.=.8.9. .?.@.>.
D.0.9.;. .R.G.B.P.r.o.f.i.l. .g...n...r.i.q.u.e. .R.V.B..u(. .R.G.B. .
r_ic....P.r.o.f.i.l.o. .R.G.B. .g.e.n.e.r.i.c.o.G.e.n.e.r.i.s.k. .R.G.
B.-.p.r.o.f.i.l.|... .R.G.B. ...\...|.O.b.e.c.n... .R.G.B. .p.r.o.f.i.
l............. .R.G.B. .........A.l.l.g.e.m.e.i.n.e.s. .R.G.B.-.P.r.o.
f.i.l...l.t.a.l...n.o.s. .R.G.B. .p.r.o.f.i.lfn... .R.G.B. c...e.N.N..
,. .R.G.B. 0.0.0.0.0.0..P.r.o.f.i.l. .R.G.B. .g.e.n.e.r.i.c...........
.. ............. .R.G.B.P.e.r.f.i.l. .R.G.B. .g.e.n...r.i.c.o.A.l.g.e.
m.e.e.n. .R.G.B.-.p.r.o.f.i.e.l.B...#.D...%.L. .R.G.B. ...1.H.'.D.

<<< skipped >>>

GET /images/right.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 58496

Content-Type: image/jpeg

Last-Modified: Mon, 25 Aug 2014 07:03:31 GMT

Accept-Ranges: bytes

ETag: "addcae32c0cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT

......Exif..MM.*.............................b...........j.(..........
.1..... ...r.2...........i....................'.......'.Adobe Photosho
p CS6 (Macintosh).2014:08:25 14:42:06.................................
.......h..............................."...........*.(................
.....2...................H.......H.........XICC_PROFILE......HLino....
mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP
  ................................................cprt...P...3desc....
...lwtpt........bkpt........rXYZ........gXYZ...,[email protected]..
.T...pdmdd........vued...L....view.......$lumi........meas.......$tech
...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright
 (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1......
......sRGB IEC61966-2.1...............................................
...XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ...
...b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.ch....
........IEC hXXp://VVV.iec.ch.........................................
.....desc........IEC 61966-2.1 Default RGB colour space - sRGB........
....IEC 61966-2.1 Default RGB colour space - sRGB.....................
.desc.......,Reference Viewing Condition in IEC61966-2.1...........,Re
ference Viewing Condition in IEC61966-2.1..........................vie
w.........._...............\.....XYZ .....L.V.P...W..meas.............
...................sig ....CRT curv.......................#.(.-.2.7.;.
@.E.J.O.T.Y.^.c.h.m.r.w.|.........................................

<<< skipped >>>

GET /pic/images/picpage/20140820175555.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 16072

Content-Type: image/jpeg

Last-Modified: Wed, 20 Aug 2014 09:55:55 GMT

Accept-Ranges: bytes

ETag: "b6e859ef5cbccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3A0BAF60206411E4B15F9C
69477B385A" xmpMM:InstanceID="xmp.iid:3A0BAF5F206411E4B15F9C69477B385A
" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedF
rom stRef:instanceID="25945E9C5C6B5C44DCEF4841E03CE662" stRef:document
ID="25945E9C5C6B5C44DCEF4841E03CE662"/> </rdf:Description> &l
t;/rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d
......................................................................
......................................................................
.....7................................................................
...................!..1A.Qaq"...2B...#.Rb$...r.3..C4%....5...Sc.......
[email protected].%Q8...4.......U~........{.G.8.......
...4.~.g\..;...S..._e.........t.!.HR..X..a.......p..-)..2.....u#.y....
^Y`5..?D...."@[email protected]...~...<.5......i..W..~5.^'.....|......S..7P.J
.6Gr.....;.CRM)[email protected]..]D...kvX.....;.F8.<[nO).o..k..DZ..:]..
......{....4G.H..S@..:{..[......,.,..kU Z.....)....5..`....\...2Io<<< skipped >>>

GET /pic/images/picpage/20140820155932.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 15097

Content-Type: image/jpeg

Last-Modified: Wed, 20 Aug 2014 07:59:32 GMT

Accept-Ranges: bytes

ETag: "60203ead4cbccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3A0BAF5C206411E4B15F9C
69477B385A" xmpMM:InstanceID="xmp.iid:3A0BAF5B206411E4B15F9C69477B385A
" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedF
rom stRef:instanceID="55154524AD533AAD777F153A960DC3DD" stRef:document
ID="55154524AD533AAD777F153A960DC3DD"/> </rdf:Description> &l
t;/rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d
......................................................................
......................................................................
.....7................................................................
...................!.1A..Qa".q2...BR#......b..r..3$.C...c%............
[email protected].>#[......{.cX.....&l
t;...4........t..-..3.. 1lB...~...C.....m........b*.H..-.2...}..A.....
.....d.;r$.b......7.....kA.n..h.Q...~4p*.Zw...mB.}V:zxP&..Z=..2.....fP
.4q...ua#.E.......#..M..L.)..n...YU8....*..3G....F..X........Ew......)
.....K)<G...<.#f......i.."...Y.|h)..e...f..t .P7......H..?..<<< skipped >>>

GET /images/img/20100409124819246.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 64

Content-Type: image/gif

Last-Modified: Wed, 10 Sep 2014 08:34:55 GMT

Accept-Ranges: bytes

ETag: "5769fa18d2cccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT

GIF89a...................!.......,.............................;>....

GET /images/title-bj3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 24251

Content-Type: image/jpeg

Last-Modified: Wed, 11 Jun 2014 07:18:10 GMT

Accept-Ranges: bytes

ETag: "025844c4585cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT

......Exif..MM.*......................................................
.................................................(...........1........
...2...........i............. ............'.......'.Adobe Photoshop CS
6 (Windows).2014:06:11 15:18:08.............0221......................
.............(...............................n...........v.(..........
...........~...................H.......H.........XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /UploadFiles/Game/s_img/2014111014345845.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 64811

Content-Type: image/png

Last-Modified: Mon, 10 Nov 2014 06:34:54 GMT

Accept-Ranges: bytes

ETag: "60558370b0fccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C......IDATx.\..xTY...;s..
;...t7...k. ..!.k..n...%.....C...W..U....OA.....s.N..:.Zk.......w....#
..{.3r....`..>.h...F....Fxq{w..0...#.Fx.2..9.h..(........5..=.h....
F{......f......F.......8.q..0....a\.X....1..x{...p...........o.z|.o...
>|....;.c.../..O.....'..'.h..|...w.....q..:...G.)|....F.[oTg..&7.u.
..-.GmQ...e.C}I"t%......s..}q$..E}Q4.%....]..%1...."y../...8.x..r.~0js
.P.......|}.E...7f3..f`x.......>.S"&cr.$L.......&bb.?....7.S..19|..
.....9..#....L...I......?..#...5C..7!.....IQ..o..x>.1j&&.='DL ..>
;.4._3!.q...i_.9F.#...vR.L.)1.Q3.&.N7..6]...1.h\.T..!3........e4.l....
YF..g.....i.5h.Q...F.}.....i..w.Qw...?.........y.4..?......7..........
.....}..e....^.s..g....Cw.9..8...w..m.,@..............0..|g..s..!.g.z.
q....|...ow...n>|.<...>...w>z.vO.............7..........~.
..B....P[...*4............z..h./.8..J......"./Ac.{>....XC.x.h....4.
..9e|....h....<......9j3.".y(...`f.f..Y.N.s./x1../.g...aKa..L.7.[..
p'.e0.s.q.2.D8q8.$|%L#..m..U....&..a...../l...i...... .'t...s...8...Y.
S>.$|.....U..qk....kb...o&Q..L..h#r..E.:#..UF..k.]........Y.m02.]gd
....2n.........N32.u4..;......~...zyM4..=../...8...9......../s.Y...g..
.....l.Y..0.&...}...0...1..><g....@_..../...gi..k...=...|.>^.
........D.....m_...1.&.......o..&h.318h!n=qEe.3.<....<......]_.m
......Q_.A#.)...}.....]..5T..H.......)z...7.-M#\.._..9..|.{..U.|]:....
.44.......M.....9b#....A.`......a...V!.y......[..Bf..V..a..}V..`..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221008407.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 7935

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:00:29 GMT

Accept-Ranges: bytes

ETag: "f6447499f595cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.I.........................!1..AQ."aq....2B...#R..3Cbr...$4cs...%&ST..
...................................6.......................!1..AQ.aq..
...."#2..B..R.3Crb............?...X.....-.F&...Nf.I......J}.4.;.( x...
..#.IF.OD_R..r.....L.(O...3...|z.G.......m...9..S..B.:..9...xBW./y4..^
O..1L>.......n...?...u.....R.....2. .#x_..fDD.......)h..6.rT.*.^PS.
.._5....odeJ.......*8H:..\[9..T...]..p....#....).S[.<V#.<D.I....
... ....C:....~....I....;...p......gi.iV..,..n^..!...`V..........zZ)..
b......7.X.r.[ [email protected]'A....?.V..*.... G.......S..Z..
....S..............Y{j....\y...........A7..X.K.R...&.....G]..(...}..q.
...^'............."F........).l....o......j... ..wJ....[.CM;.f..n...O1
g...N.HH..>...Y.q.......=.<.........$fO..% .GS..')J.Y...........
.I.......{N..-..T.n'........Z.h.p..@[email protected]...{..:.]W&.w..U...= ..
.MI...A .p.<....O....9.1..Zl..n..9.;.._.8.q.....X....C%2l.b.G.. ,..
K.50...-..!(m...b.....Np..9.%..'t.....UD.$..6.d~...H'.:c......y.W..".E
..^K/.].....h..i......7..]g.GDi(.^..[..*...k........W..H.X..r.8.. 7...
.].I.[y[_.C.W3.f....D.dE....6..7.<....Q..{....o.8...........0...8..
...C...m.....CA.z.=U..|....b%%.:".....w..:..X*..$...ZE...A.H.c..]8U...
..VmeVt~G....\Nv.3...@..@...(.AI$(f..>[email protected].........'...n.
S...q...........2...A6.(...4:...Y.T...7.5i..Q..-.....M..E......IIj<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081213544415.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 22258

Content-Type: image/gif

Last-Modified: Tue, 12 Aug 2014 05:54:44 GMT

Accept-Ranges: bytes

ETag: "9cf5b6eaf1b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
GIF89a.........7..................8..o....m.].Vgy..............P...JYi
...m.....Xo....q........|..........H...HMS.#E...a.h...4.... ...z..U...
.'H........E..... .............O....Gujy............o............m.-l.
.A..T.....br./....................x..2ETv|.fkq...:Rf....2Z...[..lqw...
F.........8dk}.bel..w.....d..Q...e......s....Z`f...}.....rw{Ncv......R
..C........x.F/8A.......*Q<..z.................X...........\.......
....j..\.&...t........Wsz....3Hdu....t........z..cy.T.9...X.....EnX...
.....l.FX........3........=......8bNJ.........6T).3.(=s..J.4Hei...I..T
qgx..k.?.../..kz.".I.....%1.(`{....iu....gwmju.C..;l5t.........uM..v..
...=....1N^m.......q}.....df......[..Jz`A.....n........B^{...Mnv...y..
............X..{.........a}...l........nnua.....:..........R..f...]...
.............y!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzr
eSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adob
e XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rd
f:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <
rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/
mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmln
s:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:1117C71
421E511E488AD85852DEB7D4E" xmpMM:InstanceID="xmp.iid:1117C71321E511E48
8AD85852DEB7D4E" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <
;xmpMM:DerivedFrom stRef:instanceID="FECB6B13A500B63B2D6491B906C42D25"
 stRef:documentID="FECB6B13A500B63B2D6491B906C42D25"/> </rdf<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073113513202.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 18564

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 05:51:12 GMT

Accept-Ranges: bytes

ETag: "c2f3b6f83accf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......JFIF.....d.d.....C..............................................
......................C...............................................
......................................................................
.O..........................!.1A."Qa..2q...#BR..3b......CSr..$Ds....c.
'4t.......................................F........................!1.
AQa..q....."2..#BR..3br....C...$4S....%T.............?..S.Ae:..!......
8.B.!.q(.l./.....m...a..;b:...&.C..n...F .E..3l.....3.w...../R5*......
JY!.T..H...*.d.. b.Q.TNl..9}W.p.....X.3:....../..g6B.QqRgM.UB..g.u....
Q.$.....V.IMK...&.......4y.P.61w.......6..t.X..57.ex0_.b5.......Ip:.#.
x.5!N.Q...4..u#.E(...........rP..B..3..,.!]...F...uNv.....[ ..0.x,'..x
S.'.s.w.#....oC...)..............Q.h....h.#Mu...H7H.C.8\...cZZ..J..)B.
]j......OC..:[email protected]... @...J.Ons.D&R........u.J1.-..
R..)1..I...................<.M...v. BSk)=N8.;.<..,.z.....!.,!.&l
t;6Jy...{..<l.".J9..0).n.....]I.....>... .{.4Je).J<..G.U(...i
N...>..U...*..>..M.0.*..<-u...U../M.A....k.Q.(...s..g6..}.%g.
....1a........5.b.....0.E./..Oh:w...m .....t.....h.J.!=...#.u...E.z...
5\Ul...:.8.v.Q.....3..A.j7.|.....I.t...|.[.D......z...)'[email protected]>...
.u}ch.2.w wF:?/H..L.f..x...x._..gI...Q.f...U.n....{N .m.(H.).$mle...._
!. ...l.};)......?Z..R.......][email protected]..[...wI...#I7.u*W"<.:...$
y.55......W....h>.)m....,uR1e7Z..]..7...7.,R..'m7E...R'.c....'.....
F..........8.....p...6;.Xr.I...*....J...v..)H.?.n...kI.d...N..;US..._.
_%z........r.....D..IU.........m$........t..`-l.......Y...g..!.U..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070514243194.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 15042

Content-Type: image/jpeg

Last-Modified: Sat, 05 Jul 2014 06:24:23 GMT

Accept-Ranges: bytes

ETag: "f6b5dc31998cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......JFIF.....v.v.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.........................................;......%........T2...o=......
8.u.n.......[...z.GI-.....m.....>2.7}.'.m.........&...... .wn....^.
??...n-.}....v$.b.T.LY...@>..$yn.m.....y.T..D*....*(U.W..s....$...#
.T...nRQ;-..&...)....Og...n..KC..7M9.X....*.....#V..I..U..N...)..#..rj
...e..dJ...j.Tu0.(.,.u.B..l..m...,9.......wj.........y..>.2._R. E.:
.c.L....}.....q...S.{m\"B.'.....V...JW.<"T..J..E..B...6..R8.}E.a...
c.........x!.^.fjS..MO............u&....<.c...".....F.i4.<...E#V
p...4Z..$....4J"..1..e.......o........,..G...YH`P...i.^H'q5.]...=.=uM.
Z.\.&..m......a2........&....F..nD..?(&W....>.w...}9O(.5D.YPju...B:
8......-M1.....W*.........@Q...'>.}..F...y=q`...<e.....b.?..F...
...<.E.......nQ.~B[0..z...7N.......a.c..[[email protected].^.t..d
.6...Q#>......v="....x....Qe..M.3....G..j.V.....1..t-EU..).>....
.$...C.o...$.. ._..H.78.z/.. ._.*.......n.....:.......}Og.....|.h.XoU.
...4>....I..ZY-..E.n...u.[A....o..a.....5...`gKY...0..x.."<.oT0.
.A...?./z.58.-.U>.6...b.3I...O,b..~D..X..t }..u	 ^X..7...R...".!.
....Ir...B....{.@.@.>..3K2.....\.#...(..k3..7.....;Ri..l]...h... .;
.....u.........n....g.#..:.sn...QL.....7R.I]....G...w....H%....[....,.
...........................!.".#$14 %A3.............?.}..&.;gQY....e
.....F8...#.c.mu..W.*q.....3.J......W.;...>.Ij......V.k.$.]..Fl<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081916215850.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 12458

Content-Type: image/jpeg

Last-Modified: Tue, 19 Aug 2014 08:21:25 GMT

Accept-Ranges: bytes

ETag: "40214a9186bbcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.P..........................!.1.."AQa.2q....#B....3RSbr..CT....$5c....
..%4s.....................................3........................!1.
."AQa..2q.......R.#Bb.............?......@}..... l...}...,.F.Vwl....$!
.x....o...y.....X... {...k....\W>B.....sqT.....r......V..VI.I.....3
[email protected].......&Sp./..`.e.ii.HU..HN..0....Xs ...$...e 
...p..E-`.....1...8/.#o.?.M<..z2.....F......\Id.Tt...{.T.i.A..=.H..
6......X........q....L..H%*..v2....-...i...Rb=P.JV.b.IR.|.%.,.9....*..
.2.%5..)..z]....AB.$.b.w..................ai...y.B.J.H*%'k.o..........
.-IIZI.:.A..$..w i'V..`2..xO.s,..S......2...KN\.......y.`....,....mF.H
R.nuSz.6...6YU.Od.........8..Q.4...TY;....N..RS}JM......r.*.3...Q.m..i
#pA.....%1.JwR...G..{..kBRIWY{.. "J.'......p..l.....K9..^..........3..
.wA...`.e..............]...X......a....W"*.%.{....%.,..F.....Z.`(x.W..
~1O..D....p....&...,"..T?.A...pD........a.zDHU:l.[..$...r4..M.6..r..1.
...<..Y..l.[.. q%[email protected]./u......<.,..r..(.i..k.83=6..
..u..e..-I.. ........U_..;...-5'}2VeEQ.(.Z.......<.e.<V.Y....H..
..=S.*.MvKO..!&.l.%`...py.&.Q......s4E2B....1.h..=.;...RuX............
3.i..(gY..M .....: ..[,%(!..i...Q.........7Ux..M}..........D..@.!t....
.M..om..R..O......z..*...... l..7.........cf.)...K> |....y&........
.@[b@...(".R....|........H.`.................z0..>....&..W.!wIa<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d; Hm_lvt_c1b609924995c1b67281e8a7bc7bdf39=1417095263; Hm_lpvt_c1b609924995c1b67281e8a7bc7bdf39=1417095263


HTTP/1.1 200 OK

Content-Length: 1150

Content-Type: image/x-icon

Last-Modified: Thu, 21 Aug 2014 08:53:45 GMT

Accept-Ranges: bytes

ETag: "cbae416a1dbdcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:42:00 GMT
............ .h.......(....... ..... ..........................N.:.T..
.X...Y...Y...X...T...R...K...E...F...G...G...G...C..{>.;.^...h...k.
..k...j...t....p...........W..`%..U...V...V...T...L...l...n...n...m...
.U..........................|J..X...X...X...V...q!..p!..o....J........
..........................q9..Y...Z...[...t#..s#..t#..................
.....................u..[...]...]...w%..v%..y(........................
..................b".._...`...z(..| ...r..............................
................zB..a...}(...c........................................
..............i(...*..................................................
........w4...-...p...............................O....................
...0...2...=...........n...@...4...P...B...0...3...V...........J...1..
.5...4...6...5...1...`...................c...2...2...4...4...5...7...7
...7...5...u.......]...A...A...\.......y...5...7...7...7...:...9...8..
.M.......T...6...9...9...6...Q.......O...8...9...:...=...;...8...d....
...:...;...;...;...;...9.......h...8...;...=...C;..@...>...D...I...
>...>...>...>...>...>...H...E...>[email protected];.......
...........................................................

GET /request/?m=ZGMxYjRiZjVhNWNiYWI3NmQwYTc1ZDJlNjIxNTQxZGYsMTA1NjYsMTQzMjgsMSwwLDAsNjM1NTI3MzkyODEwNzQ1&s=2,0,1176,885,6.0,http%3A%2F%2FVVV.aawgg.com%2Fpp.html,&ms= HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: new.egooad.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Date: Thu, 27 Nov 2014 18:41:39 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

X-Powered-By: UrlRewriter.NET 2.0.0

Connection: close

P3P: CP=CAO PSA OUR

Location: hXXp://hyol.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Set-Cookie: ASP.NET_SessionId=1xfr1245gzceqlyh1guk1555; path=/; HttpOnly

Set-Cookie: ans1o=fd4b829bf50d338c7c1e15dd43be88ab; expires=Fri, 28-Nov-2014 18:00:00 GMT; path=/

Set-Cookie: c.s.o=MXwxMDU2NnwxMDc3NA2; expires=Fri, 28-Nov-2014 18:00:00 GMT; path=/

Cache-Control: no-cache

Pragma: no-cache

Expires: -1

Content-Type: text/html; charset=utf-8

Content-Length: 226
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://hyol.
qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yig
aounion.cpm_tanchuang.28463">here</a>.</h2>..</body&
gt;</html>....

GET /core.php?web_id=5885029&t=z HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: c.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 748

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:29:46 GMT

Last-Modified: Thu, 27 Nov 2014 18:29:46 GMT

Expires: Thu, 27 Nov 2014 18:44:46 GMT

Via: cache18.l2hk1[0,200-0,H], cache14.l2hk1[1,0], cache1.us1[171,200-0,M], cache2.us1[172,0]

Age: 685

X-Cache: MISS TCP_REFRESH_MISS dirn:0:666882692

X-Swift-SaveTime: Thu, 27 Nov 2014 18:41:11 GMT

X-Swift-CacheTime: 215
!function(){var p,q,r,a=encodeURIComponent,b="5885029",c="",d="",e="on
line_v3.php",f="z6.cnzz.com",g="1",h="text",i="z",j="站长&
#32479;计",k=window["_CNZZDbridge_" b].bobject,l="http:",m="1",n
=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o
.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k.call
Request([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createScript
Icon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?web_id
=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/img/" 
c ".gif",p="<a href='" q "' target=_blank title='" j "'><img 
border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a href='
" q "' target=_blank title='" j "'>" j "</a>",k.createIcon([p
])))}();)..

GET /3a/fb/u327191383286771.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:15:12 GMT

Date: Thu, 09 Oct 2014 09:15:12 GMT

Server: ngx_openresty

Content-Type: image/png

Content-Length: 2188

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 01 Nov 2013 06:19:37 GMT

ETag: "3913208154"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 dls21:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.....GsR...T.;.... V)E..q..U....EP.j....8.!.JS.6.R.5.FO.5k.iij...%b&..
.._..p..}..{....{./...>; ? ..`762..p......j..#.a.0=c.ff............
.N.....x..S....h..:.B'...........3D.$.xl.JX..m........kG.fi]..=S_.~.7/
.....f.p...qz..!....F...UN..?S.........R.vY.-..Q6..5...~... ..=i..=p..
.....Z..Xzl.IL/-.......E.lZ..<G.m..R....U..7.....;.....o.|j...hN...
....d;,...b.;3.;2.7...jT}n.[7 .3{qhP1m.^..b..:Wo.i..j......~ISnX.ASU..
...4.~h.o(a.e_.JUM..?....._VL&K....(b.t..C....h...$.bF&tG4.$.>..P..
..xQ.I.b...i...dh..W...j.7..k.{.s(l.......!!....E^....2G..........)...
P...a...$H..%.................Z..y.1.1.c........?.g....g...X....=.&?A.
K..%..... [email protected]<.>.6...~..wAt..0<..........x.|...&
.%gy...p sk.m..... .4....i.(..`....z.*..C.p.}.u...H.Po..W....._.wdph@.
......H....il.k....:.......O[...-N....I..g.=a.].....X.....T...J..`.a..
.3.r....5H..q.,c........;....B.....M...^E.if....O......f.bZ..5;v[.....
..D..yQ....7(.C...............y7.le.fuP..6.jAR...%.rIN..V,85.........v
..8W..6.6.b.S..I].b...m...p..-.3.u.2q_.=...2.0NY.!....m...!qb%..?....~
.ZR.....W.h....'y...-):]..3.\ms..(.!....4~..s.;....b....[r.*@.....p...
.&je.Ea&...!62.z.-.G...z......,..R..D).....j.>.H.yf..G&A.8;A.HP....
.........k... .....X.. .~.h.....\.3...D..u...F. .)......o..v2..[..l...
.xQO....*.j.!$...L%..D.5....l.W...Kf..5a}..!{....b.D.\.).e.}8..L..R~..
....Eo...^t.....l...z..E..M>C...h.&....h.G=.n..x.#.U.5..:vd.t.Hs...
[....v...p9}.n..........@.~*..R..9..a..S.....T....q...x ._.....p<..
._A ..deY..M.. ....A..c\..gxd.9....L. ..O.k..!lF.o*...2.....n...J.<<< skipped >>>

GET /webgame_login/data/js/hyol_select.js?sGameKind=hyol HTTP/1.1

Accept: */*

Referer: hXXp://huoying.qq.com/act/a20141113register/index.htm?via=250&ADTAG=media.buy.yigaounion.cpm_tanchuang.28463

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: commwebgame.game.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 27 Nov 2014 18:41:32 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Thu, 27 Nov 2014 13:48:03 GMT

ETag: "c47c4-1e8c-64a3cac0"

Content-Encoding: gzip
708..............YoSG...wK..Q.....sW.<T.Z..Tj..P....T@"P.....(R.)1.
x.c.;..x..DY[j..$l..D=.& .q......}=.73gf......^.jW....>.Zk...v.....
..........S'=S..G\g.f>.._}>vpLw.......{...y.].....1.?8.9..OS?..p
u.........s..0Cu.R3>.K.gJ..RH.e.R~..........w?v[#.#...F\........m.m
.^.G..xN..99qv....;.t...W....n6}.r....}.....S.g....c....A.....f.5'..E%
)*.d..P.>.f$....ne/...<7E#)..4..vr!..7E'):...5.......%).......ws
.......R{.y..}..7.")..d.d...7.&.6d$;..7A....m............m.......;..UP
n......)...v. ./.f.9...z.. ...Z..C.*....'.....z..r..A.*.3L...4;..U.n&g
t;_.E...;..U.o.Rd=|/~...R.*..v.:...WE..v.mW.0.......v...........V.[...
B.N.Y0...nUt..SIu..;..jWE...P...UQ.b1.b..N.zU.....L..n.s.^...%....|.=.
R....6.O.-v.. .o6]a.H....w.R....P4..P..7..M$. ..5..W_L.{..~%..."......
..W:...a.J.W..p/.3mr#...$5,.p=.....)T.D........M.~5...f...T..z.g#....W
S..9.Mo.S._..V..y....Ws*...r..o..WC.........v...9..J~..d.P...-..]~..Q.
........g.P.......I.T..z.5.. ..kv......:.....N..h.W.q'.h.._.*.Q....N~.
.B.....h....t...T...x:...N]...n.;-vM.S...89....uT.]]....=v.U.....a..T.
.vzf.]A.T.......;..5.oi~..5.^..&nf...o..k8~g.sW.wC.....|..4`....v....V
4.]..n?.~...r.......Y....T..r..a..T..r.../..;...zM.]N&....M...C.**.D.E
o~.?.....~K....B.]M.T....l...=...6.g.......G<s....^./.....B...*n9.*
..&Mj.tv .c.X0u...G.[...Ve..A.[(...a......oyg....k...N.Q<......`...
.#9._....o...<.|`Q...N.*.d...E.Z.7.&..Q....4`....c..P9T...W..xb.1We
.7l..F...D..A.......Ga.*..].^8....m4.|......*.....mT......v.Ul....w}.F
........w......l...^.Q:..p%.N..........#...U........c.<...'O...<<< skipped >>>

GET /stat.php?id=5885029&web_id=5885029 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: v1.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Date: Thu, 27 Nov 2014 18:41:10 GMT

Last-Modified: Thu, 27 Nov 2014 18:41:10 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache56.l2de1[618,200-0,M], cache34.l2de1[618,0], cache3.us1[902,200-0,M], cache8.us1[903,0]

X-Cache: MISS TCP_REFRESH_MISS dirn:0:239311043

X-Swift-SaveTime: Thu, 27 Nov 2014 18:41:10 GMT

X-Swift-CacheTime: 5400
b4a..(function(){function k(){this.c="5885029";this.R="z";this.N="";th
is.K="";this.M="";this.r="1417113670";this.P="z6.cnzz.com";this.L="";t
his.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV
" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.l
a()}function g(a,b){try{var c=.[];c.push("siteid=5885029");c.push("nam
e=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));
c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator.userA
gent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.ran
dom()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}c
atch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURIComp
onent,n=unescape,p=escape;k.prototype={la:function(){try{this.U(),this
.J(),this.ia(),this.H(),this.o(),.this.ga(),this.fa(),this.ja(),this.j
(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.qa
(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed"
)}},oa:function(){try{var a=this;e._czc={push:function(){return a.B.ap
ply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a
=e._czc;if("[object Array]"==={}.toString.call(a))for(var b=0;b<a.l
ength;b  ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[
object String]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case
 "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])
}}}catch(d){g(d,"cS failed")}},qa:function(){try{if("undefined"===type
of e._cz_account||e._cz_account===this.c){e._cz_account=this.c;if(<<< skipped >>>

GET /irt?_iwt_UA=UA-6cn-000001&p=value1,value2&jsonp=_5LWVX HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: irs01.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 27 Nov 2014 18:42:04 GMT

Content-Type: text/javascript

Content-Length: 33

Connection: close

Set-Cookie: _iwt_id=hBOptHxwd1QyvR2rR1UPAgA; expires=Thu, 31-Dec-37 23:55:55 GM; domain=.irs01.com; path=/

P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"

Cache-Control: no-cache

Pragma: no-cache
_5LWVX('hBOptHxwd1QyvR2rR1UPAgA')..

GET /m/sharele.html HTTP/1.1

Accept: */*

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: 13.gxejgs.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Length: 543

Content-Type: text/html

Last-Modified: Thu, 25 Sep 2014 14:49:49 GMT

Accept-Ranges: bytes

ETag: "26c7c1f4cfd8cf1:108f"

Server: Microsoft-IIS/6.0

Date: Thu, 27 Nov 2014 18:41:31 GMT

Connection: close
..<script language="javascript">..    if (self != top) { top.loc
ation = self.location; }..</script>..<noscript>..    <m
eta http-equiv='refresh' content='0;url=hXXp://13.gxejgs.com/iclk/?zon
eid=46494&uid=15759' />..</noscript>..<a href="javascript:
location.replace('hXXp://13.gxejgs.com/iclk/?zoneid=46494&uid=15759')"
..    id='gourl'></a>..<script>..    try {..        doc
ument.getElementById('gourl').click();..    }..    catch (ex) {..     
   window.location.replace('hXXp://13.gxejgs.com/iclk/?zoneid=46494&ui
d=15759');..    } ..</script>....

GET /h.js?c1b609924995c1b67281e8a7bc7bdf39 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: hm.baidu.com

Connection: Keep-Alive

Cookie: HMACCOUNT=6FADA445C99D5747


HTTP/1.1 200 OK

Etag: 6b2af38922d217b4e099ad19e8ed2ec4

Cache-Control: max-age=0, must-revalidate

Content-Encoding: gzip

Content-Type: application/javascript

Connection: Keep-Alive

Content-Length: 7200

Date: Thu, 27 Nov 2014 18:41:53 GMT

Server: apache
...............(function(){var h={},mt={},c={id:"c1b609924995c1b67281e
8a7bc7bdf39",dm:["waiwaishu.com"],js:"tongji.baidu.com/hm-web/js/",etr
k:[],icon:'/hmt/icon/21|gif|20|20',ctrk:false,align:-1,nv:-1,vdur:1800
000,age:31536000000,rec:0,rp:[],trust:1,vcard:5643578,qiao:0,lxb:0,con
v:0,apps:''};.Zkw.6..._A.Y..hJ..7..hsk..6MO..l_Y..IHbD.2I.v$..}..Jb.{i
Odp...s... .k...k...2...>.Y.......k..vg..R.o........T&....?.i...D..
&2Ly6..../_....gW.v...Ob%....z.3..d)&.6..m6....;P.[CW...r......X.....;
?..;3qc)C.....f..mv..{.S.O.)..L....\.S{w`...46c.....2....e..~...p... .
.........y....4<....K.3'y..1.s......)..mf......Es...fiY....g....H.4
...njd.......e...L._.....~8.y..WA....c....6L......L.1Z..r..~.3..F..M4.
[email protected].[[email protected].#.i.....z...c;.._..._..
l.@..[b..=.$o.z6 !.......X.f*&....m.... o..#]...V.ryS....ca..5~..E..28
v...g.2..S.....nso..t...(..H..u.........8....r.BL.H....u.Z.2....s.. jK
.H;6<{82&....{.B.7....x0......y..;#u.....Q..,....11bn.r.j.4..T..%.`
gn4_.2.....R.{x..X.rJ&.....P.Jh.;.3.X..X.o!...$.Ib.....z<.....a..y.
.....#b........1C.....xW.E..%VX.r.C.......[J...7.......m.V._o......j9.
.\/.N ..(S......e2.d.......X....Pm.;...........QN.)H..0.axP..8`|.u...H
.!s....X.})[email protected]...........%.n..S.....z.sSgZ[K.e.J4.?.`uF
..L. ..._pJ .3d777.....}o<.dq...T^[email protected].{..F..."=-..gy@..._..&
gt;KK...e...op... . .:. ....>.......-/P....*..{..h.u....../r'.f7...
[email protected].)..h....|..2....a..|......
..#.._.....O...A.y..1.w..L.....y..E..a.U"...L..$$...\P9b.j~......g<<< skipped >>>

GET /hm.gif?cc=1&ck=1&cl=32-bit&ds=1176x885&et=0&fl=6.0&ja=1&ln=en-us&lo=0&nv=1&rnd=1537996913&si=c1b609924995c1b67281e8a7bc7bdf39&st=1&v=1.0.70&lv=1&tt=æªæªé¼ å¸‚åœº-åº”ç”¨ä¸‹è½½/æ‰‹æœºæ¸¸æˆ/iosè‹¹æžœåº”ç”¨ä¸‹è½½/å®‰å“åº”ç”¨ä¸‹è½½/é™æ—¶å…è´¹/çŽ©æœºæ•™ç¨‹/æ¸¸æˆæ”»ç•¥ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: hm.baidu.com

Connection: Keep-Alive

Cookie: HMACCOUNT=6FADA445C99D5747


HTTP/1.1 200 OK

Cache-Control: private, max-age=0, no-cache

Pragma: no-cache

Content-Type: image/gif

X-Content-Type-Options: nosniff

Connection: Keep-Alive

Content-Length: 43

Date: Thu, 27 Nov 2014 18:41:54 GMT

Server: apache

GIF89a.............!.......,...........L..;..

GET /feejs.php?s=81189|979|2|1|0|2|6|&ql=1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: p.sharele.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.3

Date: Thu, 27 Nov 2014 18:41:10 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Content-Encoding: gzip
127c.............;ks..u.W3..W...V..v..E..4.D..DI6%[email protected].
2m...q........M.6........>./..s.......Nw.]..s...{..^...W....w...dzh
o.-;.b..x.|..S..]o.vS..C7.|W .K.L....#..;.(.$4......'O<9y.`.......D
...Qh.c.ii.4...f.H.v......V.....q.v..hs'O......%a.......f.E.N......2;.
..e..: .K.....o[..c.[v...s.b/.m#...P..1.|;z..B.......7/oZ.Z.Bm.^.XS...
vk.8...0.V....-.yX.}|^\X^../6.,._}X......)..T8[$.r..k].e.6S..\@.....oi
...6?Y....$....n$....G.T.c@D@&...U....F...9Q7.)3b............5.F..E...
.%..^....4.....D.5....f....v.3..[...X7...$n{q..5..A....:m.....x{.Owc{.
.. ..,{......J.de...Z.T =,....*.M.......y..~j....C$X.aA ....  .e$P....
.....b..............x|$.75].`.>.0..T..zQ...........4..a..c.D....o..
7.....(........i6Q.....R...P..O.:,..8......Y...L...9t..U.K...M..^7t...
..-.|[email protected]'l.^.J...ke...$.
B.l&^.(..I.....C....t..(.Pf8%..%...(../..5..6.U....%.4.....%....duC/q.
.7..........\U....e."$...9.h.... ........8.l.a.3.....v.......iQ$.X.F.R
.,.If^z)....F....V ...lf....r.<.......B.B..N...r.I...1.^..[.N/.....
F;v.x.a..NO.NC....h...f.1l......{.U...F.]_...g.\)..:l[...YF.........0}
(Y..4..?..ëB..y.v.. ..7.5.....A..'H..EU.g..iVd.4....D"...a....T..fM.
.kk...eM..9.LKS(..t.....0.16Iah. ...\..j.f8.s..0.......l...#l..I..5.E7
h)W4....d.kE.C..On....m..$G.>'.q.8..h.c.0.?.......<C!u....'ggR.[
......Y..7......g6.wWcllrFkJUu..$K.h..RLDSA/8.0......&4..V..Nf......W.
v.F-..../......B....\.......H:..ISG.. ......b....D\.LRQbH..!. .j%..B N
`....3. ..]..h...AR*S--.x.....4p...!n..*;..I.z_F.{...*..A4..B.9.p`<<< skipped >>>

GET /sys/Mjs.php?ld_uid=81189&ld_zoneid=979&ld_h_url=VVV.aawgg.com&ld_app_info=ie:7.0&ld_la_info=1&ld_uc_ks=57&ld_sh=885&ld_sw=1176&ld_scd=32&ld_c_url=http://VVV.aawgg.com/pp.html&ld_os=WinXP&p=NGhaMytMdnZod01kYjBLY0dCVUFucVhoamo3ZG1HT2c4cXlaZ0dJb1djUT0&ql=1&r=0.6410648620464382&r=0.7935445881368643 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: p.sharele.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.3

Date: Thu, 27 Nov 2014 18:41:26 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Content-Encoding: gzip
c5e.............Z{s.6...3...o.KW......#.vj...v.97..E..#.`H.....w.$(...
.7w3.vb......a.['1...4....cq....t.$$$..5...yv...........7..7....I7....
..l.....................}}2.....M...d....G.G..}y..J.....^.v...........
........a..>............c....._^.~=..y..a.o......../..{.<....<
;......sv..{s...n..|...l..^.:.l_........Cv.........um./~...F..hd\....N
.F......2.s......,.<:3....5.).D.m0t.M.iJ...D.ax0.Qw:..`[email protected]......
y...a#..)Mj............l.I..V.7.u.-..:..(...u@bi(Hi.1..H..@.;aJ2..\>
;.......z.E..8?n........]..B..V.....?,..O/..'.....G... ...J.Z=.X. p...
...p.T..D.}W...(...:...5.=....0..-.D".h..............s.5.....l..Er..Q.
..[X...........^....P.LrK.r...c4......#).M....v.x....O.]....g\..:...V.
[email protected] $x.V...yM".r.u..B.Nt..:...m.J..t...~.M`.?J.....}.>....;
.<&..EL.G7."...;I.......;6..~~sN......:..w.z..A*.Q.Hq.u.......b...s
...aHx..I.r.j$...Z.c.%.|!.3.o..jj.L`..h..McD.....n..)..O...:....vw....
..]o..6.{...u....G;{G.....e3[..Zi..f..i..>$.fL.. Y...4.2."$>....
....?...[&!.*... j.}....[.GGG[ ..Z.=.Q.........n...(....b.f....._...X.
.....Lb/H....D4"..O....j.o.&.z.d......&.....<.CG.~. gN2$`.......~..
Sf......`..*:I2...S.h..M....?......j.......P......... t...)........$..
.VhA..2..  ..#.R.aD%.2.?/...._...p..p.\.3......2..B.1...n..c.....G.S..
'..Y2...9.2..a.H(;.].Gm.....y..%..........FZ.9.P.#..jPIB.4..<J=F...
..#...O).(....0~p..l....."#..F.z....`.....|./..N..O.FH..`../)s.4._....
&u.."G6..4xp..c.p....pn......].w...xzl.*...B..m-~.I..E...j..T......m[.
.g....1.hL... ..a..$. ...T=.<.g.Uhi).L...$.9..|....,.>...0..<<< skipped >>>

GET /sys/Mjs.php?ld_uid=81189&ld_zoneid=979&ld_h_url=VVV.aawgg.com&ld_app_info=ie:7.0&ld_la_info=1&ld_uc_ks=57&ld_sh=885&ld_sw=1176&ld_scd=32&ld_c_url=http://VVV.aawgg.com/pp.html&ld_os=WinXP&p=NGhaMytMdnZod01kYjBLY0dCVUFucVhoamo3ZG1HT2c4cXlaZ0dJb1djUT0&ql=1&r=0.6410648620464382&r=0.09181136118827226 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.aawgg.com/pp.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Host: p.sharele.cn

Connection: Keep-Alive

Cookie: ld_user=a:4:{i:0;s:21:"81189-1417113691-1903";i:1;s:16:"a:1:{i:348;i:1;}";i:2;s:16:"a:1:{i:242;i:1;}";i:8;s:3:"348";}; ld_ad_bl=348


HTTP/1.1 200 OK

Server: Tengine/1.4.3

Date: Thu, 27 Nov 2014 18:41:32 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Content-Encoding: gzip
c60..............ks.6.{g....4..2E.o%N....c'v...N."A..E0$dIN..o.$(....7
w3.d,..........H...$.7....f3......Xn.Lgi..> . ...%...jy........}D..
_.'...a.....;.....?.~iw......~..4.....[..?..x.G.{.............,.#....u
{...._gw..C....w..X.....|=....w........p.t.....:..w.............?.....
s...{w...=.../.......~.u..k_.u'.'. ...;.w..{....m...'...,..qsq]..4....
o?.d.s......$.<:1....4.1.D.}.w.M.qJ..>.X..`...x..`[email protected].
..a...)Mj............l.A..V.7.u.-..:..(...u.bi(Hi.1..H....;aJ2...>.
......r.E......|ca..S.n...cV pK....Kf2.b.?qm....y.........zN..A.......
p.T..@.~W...H...:...5..\.xl.m.....4RB..6A;-....>.{......@..*Q.w\.4.
....*...BDwX..[.[2.B|2.=I........9?nZ...6..# .....6v>Yv.c<..a...
p..[1.'...Ev........[1...-.\.)..s.q:.q.u.p....V6i.f....... .#.[..a.$H.
O..y.6...$.n6E...w.@7=B...)..H?.9......|.......N .. B...v.]}.9~....|..
.......y..\..I...V.X{I{_.....7!..-..<6.7m....?`....4E.......v.d.}..
^...<Xo..6.....u.>.7Ov.N....W/.....J..5..M#e....1M..d....p......
.../.h.?9..-...J4.!..i..!............w.l...>........4n .^p...R....f
.j`$....k.;2.. .Cg..hD`A.&#...x..H....4...;.I.....<...H...3'..P..^.
DCX?..13.,..t.......L....1Z.|.t....0.jm1...j)?`Y.J...&.a.8$X:.L..Rbh..
.e..[a..-....%..Jj....l.Q.......S...y?$n.!...vI..9..TF.YXb.'k.....6.EG
...T........0e....aXb.i.......99u0.\.Tty)...PI..#-.9(P.GD..T%.a.$..(..
....&....>%a#..:....Mz..Z.^....9.Y....>...o7..._...d.F.FH.dA../)
s.8..`yc......#.JH.<8=.1..VQ.!qn......M.;;.j<<.M...\.....~.A.
.E..g..d(^._...m[GW.....1.hL... ..a..(. "..T=.<.f.*....L...$.y.<<< skipped >>>

GET /css/common.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 111986

Content-Type: text/css

Last-Modified: Sun, 28 Sep 2014 07:41:50 GMT

Accept-Ranges: bytes

ETag: "48ad69aaefdacf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:40 GMT
.../* CSS Document */../*public-style*/..@charset "utf-8";..html{backg
round-color:white;}..body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,
form,fieldset,input,textarea,p,blockquote,th,td,a{margin:0px;padding:0
px;}..body{ font-family:"Lantinghei SC","Microsoft Yahei","Hiragino Sa
ns GB","Helvetica Neue",Helvetica,Arial,sans-serif; font-size:12px;}..
a{outline:none;text-decoration:none;}..img{border:0;}..body input{outl
ine:none;}..ul li{ list-style:none}...clear{clear:both;display:inline;
font-size:1px;overflow:hidden;margin:-15px;}...clearfix:after {content
: ".";display: block;clear: both;visibility: hidden;line-height: 0;hei
ght:0;}..*html .clearfix{ zoom: 1; } ..em{ font-style: normal;}..stron
g{font-style:normal;}...b{ font-weight:bold;}...fl{ float:left;}...fr{
 float:right;}../*public style*/..#top{ width:100%; height:30px;  marg
in:0 auto; background:#fff; box-shadow: 0px 1px 4px #dadcdd; }..#yy a{
 width:50px; height:16px; float: left; display: inline-block; zoom:1;c
olor: #fff; background:#048fca;  -moz-border-radius: 3px;-webkit-borde
r-radius: 3px; border-radius: 3px;   text-decoration:none; margin-left
:20px; padding-top:3px; padding-top:6px\9;/*ie9*/ padding-left:18px;}.
.#yy a:hover{ width:50px; height:16px; float: left; display: inline-bl
ock; zoom:1;color: #fff; background:#048fca;  -moz-border-radius: 3px;
-webkit-border-radius: 3px; border-radius: 3px; text-decoration:underl
ine;margin-left:20px;padding-top:3px;  padding-top:6px\9;/*ie9*/}../*.
...................................*/..#header{ height: 125px; wid<<< skipped >>>

GET /Images/background_4.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 2798

Content-Type: image/png

Last-Modified: Thu, 12 Jun 2014 03:12:08 GMT

Accept-Ranges: bytes

ETag: "0741718ec85cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT
.PNG........IHDR.......'.....A.......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /pic/images/ios/20141024114229.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 115508

Content-Type: image/jpeg

Last-Modified: Fri, 24 Oct 2014 03:42:29 GMT

Accept-Ranges: bytes

ETag: "904f3a893cefcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:45 GMT

.....CExif..II*.......................................................
................................................(...........1.........
..2...........i........... ..............'.......'..Adobe Photoshop CS
6 (Windows).2014:10:24 10:14:15.............0221......................
..........................................n...........v...(...........
........~...................H.......H............XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112113228954.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 45456

Content-Type: image/png

Last-Modified: Fri, 21 Nov 2014 05:22:29 GMT

Accept-Ranges: bytes

ETag: "26b4f7244b5d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:46 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C......IDATx....xTw..Y....
.[o...hKiq...B.wH.QB...ww#F. .1..;.*u....}..?..I2.....<.yf.f2...9..
.wnF...8..Q...F=.K..q..y..X&.!.i..8.j..C5P'._.9....`P*....."*.*K..TP"T
..,IN.P5.4.0E.rA..V....i..JA...Q...*....6..3.Yxnm.........k...S'..mM..
S.=.I:@.RG..B7.C..\........ty.r.....mmn.F'u............=./n/.s[....CT.
.......r...rQ.."....?....J..j.....Q ig-..Y..u.y...*.y..e......^.%....,
..z..I..fQ/Y..d.2.Wm.Fi9t.z.......F-w......Q*.b..Y<........*....@..
x...A..%..P-....C.Z..U.0..Z>.T...1.2.$T.xq]6......5(.=.-S..?A../i.K
.U..C..o...E..:.....K.S....T.2....*.e=.L2..Y 4.f....x~ %@F....sK?L.PQC
..V.(.@.$Y4."T..U9.ZO..1..e.C.j..kvm.L.....|b..U....^./9.Hn5...(O.....
O....y(X..._.........*U../rP=-B.........a.r;[email protected]
.m..F.....VM..U%.V.e/u..~A.G_. .B....2~......."...B.l..d.2.*.....V.XU.
q.........,.,.0..}B.......Ae.2..M....T.^.o..,...Q._.0.T..k.o...|"8....
e0.,.G..d.TO.V.X.P.;..dP..5nC..7."z."[email protected]....~..&......-.,.J.
s.~%Qq"d.n.B9..........G.=w.;0.f...%....xa[.^ H.......Kr......K..N....
...AE5.EA....v.....E.$...z.....pu........:..|b.Y..7.1..G..B.zL.Z6.....
k8T.S.U.........p.....& [email protected]..*.uM...n...$.P.nUB.Q-C...r.....
..8!....A.C...R......j......Y.....`.x.zNN...M.V.P..E........."X...IJ].
.^....}@..id.VP.F..'.P.O.....>X...*~.T."P*#..<X).z....C.b.zau...
....9h....-.....Z..C..P...,..nU..VG....,..~. .TB..S.C.J..jj/...s.~.:..
*O.-........ol/..;.Y...Y...........8.[=o>b.JNe).......Z....."L.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014112413372470.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 69078

Content-Type: image/png

Last-Modified: Mon, 24 Nov 2014 05:37:27 GMT

Accept-Ranges: bytes

ETag: "9619aebba87d01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z%......
........R....X..:....o.Z......bKGD.......C......pHYs.................I
DATx...gXUW.>....1.g&3..L.J9..C..(( M..{.1.... ...P.""U..b....^fr..
.>..|..y..}......]V.*.a.Jo....6....*.a=.......M*.q......u|m..G.^e2l
P...U&.?c..2.....u.y.Wtw.\<..n..w..'...p....~.<......q...ka0n...
.^.\84...gS...l|.^.......E............W....0..`.g.h.k.th....n.wo..c3&l
t;.6.....|.b.......6.>.lx.v!.......c>.^.W....|-H.......R|M{....]
.y.3.C._.2.#..{Z...~......n....Tg....;........1..u...`4...r.o..~.B....
...t..||.q5..X./=...W..a%.^[`.......9...C9w......w..x...M...u..I......
..........h.B...Z..h..a0......o}b4m.b.n...n.i.oxOp..o...[\uo\..4,S.k..
:...:[..T~.m|s.JkX....Ti..:.5..k.....*O.j>..R......*..v..6..N....m.
..a.=.^*x....../...Eg\...'....f....F..Z..X..a.... .K....r|.^...%.R.._.
.. .\.Upwn.....K.,.lXYi:=....]..i:.F../.z3.z.......48..ac......D/.~...
.!.r.A...q.|Y..{....]...,^.\.. ...]....|............".........jw......
..?.C....v3..v..|.....z..j....4.;.E'....]... y.V........8.Bo..D...Z...
.&^c.g.......V.X .7..a.w......n...*6p...a....f6B...?.....:[email protected]....
A.~.....}...u.b.....*..e#9y...<.KTn......U*.~#AE..W..,.U...*O....e.
..@S.\Z.V.'_l2ny.K.f.4d].6l....f......y.&.z.P...X.R.. W..6...%.<..B
...2..l'.v..T^.u......l...Q# [.\X.c.<L.%.cp....H.......F.......w...
5k..e...2.d..f.d....?u....V....AV..t'H....B.....@@x..(.......a>.0T.
....2..u...m?b...c%s..}..~..d.<..ww!pz.....z....=.v......E/.>..L
..F..n.....J.\.F.......d...k.m..C.....X..|_g....w"....$....F....Y.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070721561304.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 12075

Content-Type: image/jpeg

Last-Modified: Mon, 07 Jul 2014 13:56:30 GMT

Accept-Ranges: bytes

ETag: "76ebd440eb99cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
........................................=@OJ. [email protected]. ...$E .4....ws.j. 
9&.....O?3.D.:.X...D.u&..7%(W.K...3.e..j..o8...(....],>D..B'r.E..Qz
.rjL..d....i/......P...#....K0S.F.....U.....RA.`....q..7Dv.....Ew)....
w..1.P..E.......].yz....C="V..b..A6.*..,!% .....Z.?zq5[..W....>.u.V
[email protected]`M.CU.&
^H..T....6.v0V...v.Z.3.v9.5....s^H 2..p.P...YcV....Lu......n.....I]...
....F..6X..y....*...pD.....Fj...#.sw7..uv.....u'Pd...92.....>-.}b#e
s.OR\;|...\....J.'~^..2L.$.2L.P.... .w.3..sF.Y....[.s7..25..{.$...2J.s
%.rN.Q.|.6......j.z..kV.|........mD.vF...&.2..7"j....#..].......[...,.
......^................f..WU..b.T......v".w.h[...d ....P.g.S.. wt".s..
...]...H......~Uj,M.o5.I.Tbf..Uf..'4....8..% .).!.6........=......5..z
..K...h..t...C.2MI..F..8._.|/y.....^{.9=)..x'j.z... .qrL.!....L.<..
..Q...cw.....t...._..f....].d.....Y_=...._.^.X.W.....z.J..Nx..G...;.=c
..~v.7i..`z z.r9.z....W.....!..q...8.zN..K.....r.^`..._.7n5........R..
....l%l4..e...A.h..'v..... .M....xc....}:.I..{.W.2N.F.rlN..KL.' ......
..)4...)............................!4.."13 025...........G.]..Z.0. ..
....b3.Fy..-......X.{E..g....l_.9.#<.d[D..5n.......OT....q....;Y...
v.... ..uu.8.....rV%..S.88..............6..../r."=x.1..6]-:".....(...E
.uH....Pc1...s^.............G.x.,]...W.wC..'...A....d...=}..<8.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221461361.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 13915

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:46:19 GMT

Accept-Ranges: bytes

ETag: "9eccea0fc95cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:47 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
............................................!...Y01....!..B..Q.Mn...Mt
....,......8.&D...[....`.f'.b....Y....7..>... ......d..g....|......
.....~#.Hzj.|.f.....y.]O-.Q......M..#q..~Ka..`...0...s..`.P...........
.j...D.-..].G....{wk.;2.."`.^.\..m<`..X(.....m.uC.{4Z.V...*.C.....{
_2...Br.....wI.tx.55.v.w?%.2.[.......P.6a..._2..t)..j..(....Y(..[/l.$.
=...b...I.3..V........-..&...f6.}. <..ic.....9{.?A.......gu.M......
.C...(n";..\-.(.u.....`.aLU......,..4.-.....s.)dU.......w..._.6h. .Q..
Y.u.?Mc...6..........j..Y.;......p..7..W.k..u.h'z.b....X..v.....XWY!..
.W..M..........Ga..o......GT...h4..y=.......My4.C)....}....>.p&=...
Fb.=o.//q.v7..H.tT...s..ffM....U.q,......`[email protected].?.Y|}..........E.....
..<..mXK.K.r'b.. TI^.<.......|..c...z..8X.z...]...V..$....s%...)
.h..1.......`.0.y.4.{ .......j:=;...'....$....K.{..A.3K...2..Z.....BD.
&m"s.....n....j.o...1j3t.Fj.>...-{w...\;$6#.b...........Y..n..0....
.j.n..7.....j.>[..._....U...jS..........=.7].x...4.fCj..].O..... .&
gt;&... R...jaLY.U.O..7w$t.\.w..`..y6..m...Q-J..>s......a...<)..
.#.x.A.G..m.%I[. ~...v........X....i.y:..h...s..!..B............@.../.
.....>...&...Q..h. @....)............................!2.. 3"14#A...
.........|...l.s..|..-.[8.ql...C..7..E.mK....H....c8..2...3..#).......
.4kl\L5..5....o#. ..W-.[zk............5..#...)..X..<kK..3t...x/<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221167360.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5952

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:16:14 GMT

Accept-Ranges: bytes

ETag: "78a10cdf795cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
:........................!1..A."Qa..2q....$Rr....#B.34..b.............
.................. ......................!.1.AQ."2a..3.q..............
..?....K..e...*.)..$N..tC..Zj.......D....2.L.[.L....5vi.m3..>i*X...
.Y.*.i[i...2..V.g....z4..y.V|..;x,..R...L....(9.>kQ......WS.y4.]%yy
'.....;...y9\m.=.Le.....Fn..[&oF.y..|)}E ..i......%.....#Oz .6.._=....
...cIq8.............!j.kg...c|....#6...R....kp..~..6..~".D...G...7....
6........F.....%.......Z..w.Z.Z*..IfhnN. r9..N.B#.`,...Z.6WtL.u....<
;..}P-......z.....yc'.....Y.eb....it..N..Ql.M.erFA ..8>J....9....&g
t;..M..1!..%.. !o@0^.\I$..H..4.....%..D..G.8..t......F2.....b9.4Z>.
.]G.r..O.r{..2....%....3..D.|?t.........=.8..'..Iy1.V..vk..C.(j`n..2..
..mL...x.'..*8.Ut.....D..e.3jAO.......I.l}.A...r..:.5.l..cA#....z6....
.YSo.. .MU....s4*...#k...]V.c)...to.i....e..*.....w..?t.V..n.........Q
..?@.~..{.qwkV.l......3j&G.Z..]...}..5MKZ..X..`.rAh....5..r..m_...r.5m
....&.3...l....L{z..Sn...nx.T...............i.r?....%.4B......`x..]O..
[q..1.L./..0..*$..i.s.........z.U.r.....x~.Tn:..l.C,4..<.......<
....>7Q.....~....h...1...-N#.WL.$p.8`o..]#......F9..y......p..Na..c
d.M..!...pA.h.K..w.t..b..u...}P..Vs7..j9.ekH.J.....,.f7..h.$sOB.....eh
..z4..|....,sH.|I..H....8..@.#6........nt..b.......F....o.>l...Pp..
E.7SG.....H_..._..-.g..7n..3.jzK....#......g/...u.....3.m#zsJG.~..<<< skipped >>>

GET /UploadFiles/Game/s_img/2014082817114718.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 16725

Content-Type: image/jpeg

Last-Modified: Thu, 28 Aug 2014 09:11:29 GMT

Accept-Ranges: bytes

ETag: "9014a1da0c2cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:48 GMT
......JFIF.....`.`.....C..............................................
......................C...............................................
......................................................................
..F............................!1A.Qa."2q...B...CRb#r....3S...45s...c.
...................................C.........................!1AQa..q.
."2......BR..#3br....$C.4.D................?..{p..]..j$V.._...c...#...
s.y.:...V<..~&...F7?A..Q.M.h...q..;a..g..j.];F./IJ~.X./=...4...'...
.b......0:.|.^x..q.M..3...........T 5P..J=5.CS*opP...N....$z.M.E..L...
./o....).y..N.#a..6...I...[>K.-...Sd..#..c)g.%.....4..<.........
~.......7;..m.....F....*..j1..1...};.O./#..G..!.9.$....P5..RJa.ak...o.
,.Yf..].$X;..]..6B...I......z8.......R...`..~6.G...w...Ry..5y.;-6!..bZ
.....t.....mR..c)...R....._.1.i.(.ehi....=.%9.$.ZN..t.3.......$..A6...
...{.Ys8...9..i.q..~....L....Y.t.,...I.9..Y........6..........F.gMp..B
.n4...W..V....5pVb'..6..A....:......R.....z5ssY.y..Gj......rJ.........
..`.....}!=.Q9...c...g..s..#7oqGIxCX.....Q.....zL.We.iw3.bLh..j;.....s
.. [email protected]. $. H'r7-=..(.<P.5....GP@p....^....x......|....~;.e
.:o%E'..S..Ín._.S...J...I..l...(.......q1......z..G..3Ju.....\vS.=..
i*X..V.{j.lR(..._m........Vz\..l.W....r.9.h$..)....gu..o.?x.=.B...q...
.>........-AT.;.m.b.?8.....{.......%..;.?..........n...6..jt..e....
...Y.._..I... ....<6L6\.7i...d.q.q.s#FW.G4...x*?.[......_V..!\1....
...@.?]lXu h.c....<W.....X..N.t...y,. .y..Z...K...........2.#...3..
.k..<.A...l.!.>..Tl*.'.J..x.....f..w..>...h...)......GC.M<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081123202185.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14251

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 15:20:38 GMT

Accept-Ranges: bytes

ETag: "265ba7ce77b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:2813CDF4198F11E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:2813CDF5198F11E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:5684A9C1198C11E4A838B028F7746D81" stRef:
documentID="xmp.did:5684A9C2198C11E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
........................................!1..AQ.a"2.q.BR.....b...#.r.3C
.....Sc.%..$4D.......................!1AQ..aq..."....2BR.3..b..#..rs$.
............?......!. ..9....B1..E...[..M3..P-.g#... ...nw.6.,.....G.*
.a..../w../..l.E.].VLi{........6.....&..c..3.z.....c.>.r.D.d..v.f9.
up.o....[l.|....P./...\#..O...n.."2.\_.|.>VU.....,...hz.#8.b.W.P..{
..|KM.Lw...a!._Z.......)}h......(...Rp."..|\..F..fR.,bu..Fq.&.s...<<< skipped >>>

GET /UploadFiles/Game/s_img/2014081122358413.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 17759

Content-Type: image/jpeg

Last-Modified: Mon, 11 Aug 2014 14:35:48 GMT

Accept-Ranges: bytes

ETag: "e6a2fd8a71b5cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......Exif..II*.................Ducky.............,hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xm
pMM:InstanceID="xmp.iid:7F80A8FD198611E4A838B028F7746D81" xmpMM:Docume
ntID="xmp.did:7F80A8FE198611E4A838B028F7746D81"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:7F80A8FB198611E4A838B028F7746D81" stRef:
documentID="xmp.did:7F80A8FC198611E4A838B028F7746D81"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d...............................................#%'%#./
/33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550055
@@?@@@@@@@@@@@@......^.^.."...........................................
........................................!1..A.Qaq"2....B3...Rr#.5...Sb
.C$T...4D%....c.d.......................!1.Aq.Qa.."...2.BR.....br.#T..
..........?... .. .,.(.M.40Fe.F..|Oy.h.ç.~......n.......^..=.u.....;
..e....i........[#gE.y..c...b...B1FW...P =u.....--...".R<zj..,..4..
F..qF[e.....WU....5..Z.TG....-............V.%.N....w3.dq..~f..3.k..L#.
.P;.....IC.....QE........I....._R}G<.~..e.._..YM.`..c.Y~..e..-&<<< skipped >>>

GET /UploadFiles/Game/s_img/2014073009396133.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 17874

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 01:39:06 GMT

Accept-Ranges: bytes

ETag: "21022d97abcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT

......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ ........
.1..acspMSFT....IEC sRGB.......................-HP  ..................
..............................cprt...P...3desc.......lwtpt........bkpt
........rXYZ........gXYZ...,[email protected]
ed...L....view.......$lumi........meas.......$tech...0....rTRC...<.
...gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Pa
ckard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-
2.1..................................................XYZ .......Q.....
...XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ...
...$.........desc........IEC hXXp://VVV.iec.ch............IEC hXXp://w
ww.iec.ch..............................................desc........IEC
 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 De
fault RGB colour space - sRGB......................desc.......,Referen
ce Viewing Condition in IEC61966-2.1...........,Reference Viewing Cond
ition in IEC61966-2.1..........................view.........._........
.......\.....XYZ .....L.V.P...W..meas................................s
ig ....CRT curv.......................#.(.-.2.7.;[email protected].^.c.h.m.
r.w.|...............................................................%.
 .2.8.>.E.L.R.Y.`.g.n.u.|.........................................&
./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~....
..................... .-.;.H.U.c.q.~....................... .:.I.X.g.w
.....................'.7.H.Y.j.{................... .=.O.a.t......

<<< skipped >>>

GET /UploadFiles/Game/s_img/2014073009173304.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 19016

Content-Type: image/jpeg

Last-Modified: Wed, 30 Jul 2014 01:17:02 GMT

Accept-Ranges: bytes

ETag: "569c22f893abcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:49 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.L..........................!..1."AQa.2q...#B.Rbrs....%3...$5C..DSTc..
...V....................................C.........................!1AQ
.."aq..2.......#5..6BS..4RTr$Cb.&3..............?..U.........l.-R..).-
s.b]Q..!S.....x$....P..\..%J..=..fqESSKW ....Q..9....$...q#6.......0..
.P..L...B.<..D)..V.q...cU.pO...ik]..]...{.8"..e{,....(.".%.Ir...0XS
..VP.@.`.....0....u..=.u..^..1.. @........t.s<.U.R....h.qg..N@.....
......./.r....2...9......L.........I./..."....$.{.c.rb.. ..~..].......
Y... /3.......P..Y.p..N.>.(......\..= ..b.a..n...Y...~....f]Y.S"...
...j)u=.BM..@.$.....se....k...g....I....@i..;*%...:.([...*Y..t....=o.L
i..wBO.uRa..rCN...-........o.M.R4(<..{...x.'[email protected]...:z
.Vq:`.u....1...aq..y....G..,...cq....T..b6P...../.e$.....Cr..M...$....
.!.lv....`....(j....~....to-....#.....!RV...IZA.......8.....isl4\3E..t
......).{._=.....,J.....8Gj4.!..c.5..x-.>D`..$X..-u[>7.......o"L
}#J..&.......uZ........^t. [email protected]
;..\..>...MF.hn..SZ...0K...Pf.!*.0e)Jf..O2.C..p.......-n.y.l..g).C.
..4...fPjR)..Ti.....cc.F...#b."..$.H....,B...h...%.......O{...[....:..
.5-.........%I.q....\S..9 .l........-..3.]..H.....n....Q.P ..P...{...%
EE.....%).......~F/Qtk...4.......lH........o.....(g....Z.....x....2.=w
...g...'1...8h_...?t..W1...W!..n(..x...0R.2&.;...q*....2...&..$...<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070814113166.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10924

Content-Type: image/jpeg

Last-Modified: Tue, 08 Jul 2014 06:11:11 GMT

Accept-Ranges: bytes

ETag: "ea698a6a739acf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.........................................S.....Ej.........z_"..iF...5K
`u_"............d...)..jt.vsZ.....{.uZ....h.2]2.u.........."..?..j.~|.
......@.&.f.>. ..k..o.. ...l..Q..B.....e.......z="...Sb....O..,..].
=T.([*G..vPs...h.8..8...ND.Z.....?........Y......<.E.....)4..d.Z1.o
J......HI2-......N..(kbYh1...._....Y.'.~O.YmV.]......#%..q.........tp.
...m....[%.:...n..K. ]%b..$.....m.g..".!pz*..]nv..`V.D...g.... bT...x.
...o.....s.mX. ....q..z...2.=....`.n.#...D....>[6........O=`.SP..G.
Uhs......qm5....F.YS.MA.!t...."m>......vA.....QU...YV.o...eZ2......
....Q%p.N.6FZ(..C..6..-.2.kKF...!.0...Ez15j..S.oU......Y...0..y.......
..4....;EMJ8...C..)^.........9QcV.2.A. .-{q........[s..`.......>G.V
.........t.7uM.RB..1U...6..3o.wJ......?c..2.z....snr...xt.*...A......F
....c.h.I..OM.7..K(...Wf.....U\.0..'.....ZU......Z..Abz.yj...........m
u?....X.$...L...o...N.R..vz.:/U.lX..ZZ..*.hz.7!.Ea\..2x....V..$J...F..
...../;..]...M...Xy)....^. 1K.H`[email protected].]..b.H<
;5..K5.....FUE.......|........>W.Zv.vf.%......V.4.....T..x-.\Fn....
d..fa....).........................!."#..12$3..4B...........}...*..6e.
..e.T....t....of.M....v...U....5|...Sz.7....w^.......x........y.....;.
.......f...e}...;..f....-.~....}..E..6..-.....^W..p.:.b..rl.q...bi/...
.~..vH%.....X........cY..M<rQEv.e.......[...<.5z..(<o...Q<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014082320491734.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10660

Content-Type: image/jpeg

Last-Modified: Sat, 23 Aug 2014 12:49:13 GMT

Accept-Ranges: bytes

ETag: "42f6a3d0becf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.G............................!1."AQaq...2b..#BR.r.....%CSs.3D..$c....
.................................?........................!.1AQq.."2a.
....BR...#3b4r.C..$....S.............?..\mDA..D..DA..D..DA..D..DA..D..
DA..D..DA..D..DA..D..D.....Gf..jVU...}[email protected]=.........Z.8...ku.
..#. @......_._l..&...i..UBr.....{..R. z.4.c..mMmk>..........?..c.H
..{j..u>.....7.&V..g.y.CI.I....mR.m....hM...(...Gy)..c.>Q.$[..{s
.f.:...P..../.D.kz.....x....F3tY..K...(-...-')P....Q.^...".." ..".." .
.".."eY.S..T.R.=-L.J6^...y,...5-j $x..\[email protected].<
;....QJ|."%..Z.qk...UL.'.wT.\..3.Z.,G.OU..;.|[email protected]...\C.....T..
..y..A.6.;.r...e[.d.....qu{....f_h..*Z|....\..S.....9..o!s..W.lu...[K.
Z.e....*KN..Z.....X...f.........&5)'.k...z...)....6....T;...~.Y.GK\.wU
?.}.k.LU.....=.'6t......i(..\....b2....j..D..f-.Fn....>.Tk..iUe..9:
....d......g.#... ..H....y.YC.N5.......y...^.....]~......dIT.2......|.
b..i\.....oXxk.k..{p..].o{z.."<.F.....0.5%/Q.Pd..)5D...`g'q..l..6B.
Dz.<B...t..z.#X....'G.3N.P...q..0...O.j....h.....\.......S...Q]f...
O."..h.....e.Zq...B..j.J.FB...#...H....D..DA..D..DA.1..h.3f......-![..
S......g.e.......rO.....3...Z..E...Z^a.n...jS.}..8t.(.8...\..8..#....8
....h..9...Y[OA......O..{.k,i......g...... ..O...../.<'....U..W.i..
{.3.....&%.=n K(..{.3.........4....i!.K....H.....(...(nX3:...$...!<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073115059839.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8023

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 07:05:17 GMT

Accept-Ranges: bytes

ETag: "7abc95c88daccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:50 GMT
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3AF403D4188011E4B835AA
91865EC41B" xmpMM:InstanceID="xmp.iid:3AF403D3188011E4B835AA91865EC41B
" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedF
rom stRef:instanceID="C481F18A5DF144F2FA61FEEBC6030702" stRef:document
ID="C481F18A5DF144F2FA61FEEBC6030702"/> </rdf:Description> &l
t;/rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d
......................................................................
......................................................................
......................................................................
...........................!.1..AQaq.."2R...r..Bb..#$..3c...C..4%&....
...................!1A...Qaq......"2...BR#.3.br$...4.............?..(.
.. .... .... .... .... .... .... .... .... .... .... .... .... .... ..
.. .... .... 8.....,.68.*..CZ.y'Dg.....r5..9....C...@....@....@....@..
[email protected]..%...M.Wp....F...|.5T2..v.FklZ~.,....]....K!......c..-.. .o..
....C..;n....1y..q..I&.......huCi.ld.v.....7Myg6....\.....-......U<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073022042276.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 75491

Content-Type: image/png

Last-Modified: Wed, 30 Jul 2014 14:04:02 GMT

Accept-Ranges: bytes

ETag: "4080fa1dffabcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
.PNG........IHDR...^...^...... w.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...#iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:2B4FD4DF101411E4AB11E84
2E2DBEF5B" xmpMM:DocumentID="xmp.did:2B4FD4E0101411E4AB11E842E2DBEF5B"
> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2B4FD4DD101411E4A
B11E842E2DBEF5B" stRef:documentID="xmp.did:2B4FD4DE101411E4AB11E842E2D
BEF5B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&g
t; <?xpacket end="r"?>......#VIDATx...g.$.u%x.s...J..Z.!.h.0\...
....g0.c.a...}......m?...v.vm.h$1C...I(...l..ZW...].*.*E.w.........3.T
WeeV..yed.G.....;..s.s.&.._>.....XZkg.1...J......1..s....N..Z..KJ..
.;>...m.$9..F..5p.............^...{{....E.HY.._.KwO..d....]..i.....
.V.....<0........|...`..5.g..x............T.0..)L..L..>Vm3Y&..\.
z.5^pf.j...Z.o2..Vz.V$&#....z>.&...t^y..G....u.|..G__^^.w....n.^.@?
i.Q.......e.L..[.S.......p. ...9..gff.....~e...x.....YYY.n.......Z...L
MM1.N..d.,.....{....}.........}..C.=...x7...=;;K#)[email protected]..........
.0,--......7=....o...s.1b...m..[.n.u...e.lN >{.,..........e..u.<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081300413586.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 5535

Content-Type: image/jpeg

Last-Modified: Tue, 12 Aug 2014 16:41:07 GMT

Accept-Ranges: bytes

ETag: "40410374cb6cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:51 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.>...........................!1Q..Aaq....."BRr..#2.3C....$Dbs......
.............................:........................1.!..AQaq.".....
...#r2BR...$b...............?...[..|D.......@N.."NT....B.D..$..@E.!p.d
..@"S.I.,.S...uL.3.....X .........L..9S ..'.0"r.B@"..@[email protected]
.1.hP....NP....E....m..(R$.L.P.. ....`H.\.H...!p...D\..L.g...c<....
[email protected].\...L.@P.. ....`H.\[email protected]....<...R4:
yc.s.....x.>.7....o....f.I..1.kv..x...k}........jje....4..<.x...
...2.O'~....i.2...'.Y.e....Im.h0...9..,..c.... ".....%[email protected]."r.X..
. .4.B....J"...d.*...y.C !N...M$Z:.P...5h.w]....NG.z'.(iw...)..E.3h..g
..<..Q...[.'.u|~.q.......n.:..~]..Z...j*.5.|c.#C.w.y...4...$&.\.L..
......T...........2Q.&..v_.....e..Qj.....n......}..X>....}..W5e.T^.
.......&...b.6.7.......OPZ...Xu...N...t..2..d..8.3.x.R.....l....&Y.O..
......)}.b..OK.....V...?... ...}....y.^.Z/..'M../F..5......d2...^m..t.
....\..L..|.]..U..*...S]../...._i.?_.....m;.j.v.X...'.....t.>.T....
:..g..%....ZJ.....h\$...$..Hx..U..p..E=.M.aM........a].uS4......*n8...
'x.......'._..D........2p..#..U.k...3...oV...^...0=. .q....&."'..J.`HR
...6"B....J"...d...b.S.;-.gn.WT..#....Tg=..GS.-...3.O.<..~.SCCM.<
;..(bhc#`[email protected].#J..R.K.#......ii%.iz.N.^.,[email protected].......
...&.<y.acm:..l.P.t.0..........e_..O..}s%..2....}...M...P......<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014073111001449.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8914

Content-Type: image/jpeg

Last-Modified: Thu, 31 Jul 2014 03:00:21 GMT

Accept-Ranges: bytes

ETag: "c65311916baccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.N............................!.1Aa.q"2Q....#V.&7Trtu.......BSb..$(CER
UW.......................................F........................!..1
.AQ.."2aq.3R........6Trs#[S......Ub...............?...1E...A)6.Rm...
.I...h%&.JM...A)6.Rm....I...h%&.JM...A)6.Rm....I........D...A.h"m.M...
.6.&.D...A.h"m.M....6.&.D...A.h"m.\`...RA) ..JH%$...I...RA) ..JH%$...I
...RA) ..JH%.;{.}M......6..&..D....{..ox"m..M......6..&..D....{..ox"m.
.M......6..&..D....E*..$. ..H"A...D.$. ..H"A...D.$. ..H"....T.{.)6..Rm
......I....ox%/.A)|...I....ox%&..JM....{.)6..Rm....h%/.{.)6..Rm......I
.....*. ..JH%$..d...>....^[email protected].....:........r|.[]...7'...n)Fd.
PB..h.C...`.....ox..'.\...H...p../.. ..@........\.nSn.\...yDOS...^.p..
. P..>`.. .h|......3#N.g... ..G.........}.q.2W...n.4..=(........G..
.0I..~..2..T.tX..qt.....FV.....C`mb..........$...Ki..5.r.t..2.u.#.y...
L#8.j..O`.$..Lz...<.P:....c..k.....|..{...k.o.o..v~a...D.V..W.w@X..
..b>I....W.j.kx,....u.5{.;..[.57I.&.I.......G....?M.n`....V..I9....
...f5.......?'L.f...,.-..{.=}.o.{.$x.b.W.x..O...,........{...........V
8....c....k...6.V...3zn<A...z(..`.......I....Sj.M.iK.$..I.....JV...
..jq.b.q4.F.n...<e!.W.*RR....N2U....L.F."..is.........C 25......I..
.*..T..).(...$n..G.r...z..@....!K..L..?.NT~..H.G..s.-I..Y8:p..?.O.....
...X..J..s.k.KZ..N.N"NY...m...N. ege.d.B).?*BX,.u.I.pF..>.(d.zN<<< skipped >>>

GET /images/title-bj6.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 25531

Content-Type: image/jpeg

Last-Modified: Wed, 11 Jun 2014 02:32:44 GMT

Accept-Ranges: bytes

ETag: "0ee9f6c1d85cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT

......Exif..MM.*......................................................
.................................................(...........1........
...2...........i............. ............'.......'.Adobe Photoshop CS
6 (Windows).2014:06:11 10:32:43.............0221......................
.............(...............................n...........v.(..........
...........~...................H.......H.........XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014112713248958.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 17621

Content-Type: image/png

Last-Modified: Thu, 27 Nov 2014 05:24:14 GMT

Accept-Ranges: bytes

ETag: "1c9f18622ad01:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
.PNG........IHDR.............<.q.....gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C....B7IDATx..}..T.....-,.
..c,../..ES.t...hbz.....{....([email protected]..(U..T.....[......wgV.......
.y..o;....u8..V.ns$\....F......2..... Z.&^.|".sM.sq#D_..1../R.G_..S,..
...U...l.A............I..'..g#...l.........^#-.,..RF)......k........S.
.....{c.....E'^.r$..M.u~.8.. ...B.V.|.*.7E...*.uT.<..R.J<?....x2
....0..D:B$:Bm..Bx.^.@^..7.g.<.Zy...2r...2...2...2.'e.{}..'...k..._
.qS.U-/&|..H.5@X`-..Z.%..F"..,..I...  .*....a...a.bYb.&|....IY..e>i
.J.z.#...W$^..%..*bn=.M...)...-......I.r............2...2...2.......O.
. [.e_..4.......vuj..N_...Jr....geYRZ.0..V..#L.#.TG...e..#.M.....#\...
M...DG....n).U...]e.-....!.....W.L.......}a..d@w$..F..Y..~.z...;..)..$
..W..eC..U..j.l......g=.*..LG.@.]{.6|..&...#H.#../'.i....... Z.1.7\E..
w.. ....C.i>..:.....i..v..wMa.j.zR.z..Z@, &....[W.eM.2-..g....L...,
...V.......&a...Y.8G....b.1.X.t.|..A..sI...9u.l/t..Q-.aU.hA.o...O.X...
....X!..x.1.......FD.D..N.e5.!>.g.k2[.....s..z.O..[&..Bp.. fLA.xA.#
....1.........J2k..0........?L...Y.KG.E.a...&:<......*.......q>.
#..$....$..sn..tV...D...&c..^Wh.;.....v..>..'....J.8.J...(..t#b....
.~.9.G.........8.....aM6.Qc.u%..=.......X.'..g.^...d..N|....R...3.;s..
...g.9...?'..6...cb..I.V.D.]...X!..\.5....je....^[email protected].._xP........
...x!.~...Q.. k.^.P6D..u{.}...|.oO.c....A>.x.`.1.X....Q.....ZD@-...
...B..[.d0m.;./....=..{...QV..l`..CV.ZE)..=..:.Kh>.....v[.vNj|...",
....}V.!v.C..h.)G8.Ch.sz-.r.dVxa:.'M.9....:L.xVo. .0..0NG.....!J|.<<< skipped >>>

GET /images/xm.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 4804

Content-Type: image/png

Last-Modified: Tue, 17 Jun 2014 02:31:52 GMT

Accept-Ranges: bytes

ETag: "0dc1b4cd489cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:52 GMT
.PNG........IHDR...8...8.......;.....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/TopicPic/20140919/ç¤¾äº¤æ²Ÿé€šä¸å‘æ„iOS.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 69944

Content-Type: image/jpeg

Last-Modified: Fri, 19 Sep 2014 02:50:29 GMT

Accept-Ranges: bytes

ETag: "acb42679b4d3cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
......JFIF.....d.d......Ducky.......d.....&Adobe.d...............*....
&.......6.............................................................
......................................................................
...........^.............>.........................................
...........................................!... 1"0..@2#3$45%.BC6.....
....................!..1A".Q#.a2B. [email protected]%
e....s.d.UV7w........................!1.A"...Qa.2q..B#. 0..Rbr3.......
[email protected].%5u..6.....................!1AQaq..... ....0.@.....
..........V..D.. @.....].I)..c....(X.....,."... @..... ........Sk~.. @
[email protected]).t<y~..n.H. .......Nh.K..s...... X.,.. A..)....H-{{
n.....M.ls.5.H......k..:...z(.........6..y...0Ri..l.t...~..r..(..D"wi.
...3.x.....uX.[$...A\.....|.>.-.g(. @....ti.#$......,....N.R......i
.y.a.....R.g....>.D..P.....R..oal/{kt~...?C..2.d....m.4dL.?...<.
9.....-7g ... .h,=....D.,....;l."...6 ...N..y&..is&c..l..Xn4.....$....
k...s....h..t.F.`...6x...X..r.G...j&7.4.......-Y..`...).@.:)[email protected]..
..P.?4".].....h^..C.%\,];..q..z6;..ZEn.6z.....Ur.5E.....a.u........$V.
........qf.......t2...q.f..H..j...6........\.J....A.F s..j.7I.O..,w.\D
4P.....B.;f.9c..!...O..=....Q.....T...a,.Z.y3.......t.cm.y.9L.....M...
.D.Ym...-.O. ....R.Nl...... ...'..n....3i....e.......CNF.....?.E4..c..
.......F....#|..14.X.fj.........27.8..l.4.d..F..5.. )s....|.m...t.7T.u
.4...Jg:....qo.wju.h..0.K....F.@{...V..H.ne..N.....f).[.qC.....dA..<
;...mEo..rBkl!.....-.R..C...)E4.7).......k/....D......Q...u.6:....<<< skipped >>>

GET /images/img/20100409124819709.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 231

Content-Type: image/gif

Last-Modified: Wed, 10 Sep 2014 08:34:55 GMT

Accept-Ranges: bytes

ETag: "89defa18d2cccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:53 GMT
GIF89a..<................!.......,......<......................H
...........L............."P 0*%....|J....jub..-.........N...6.........
........(8HXhx..........)9IYiy..........*:JZjz..........[g [;.`..G....
 ... <.Zl.........-=M]MX..;....


GET /js/WQHeader.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 1974

Content-Type: application/x-javascript

Last-Modified: Fri, 22 Aug 2014 09:19:21 GMT

Accept-Ranges: bytes

ETag: "d54e2428eabdcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
jQuery(function(){.    WQGlobal.setHeaderGrids();.    jQuery('.without
-secondary-menu .menu-581').click(function(){..window.location = "#ove
rlay=overlay_login";..return false;.    }).    jQuery(window).resize(W
QGlobal.setHeaderGrids);.    jQuery('#main-menu-links li').each(functi
on(){..jQuery(this).append("<div class='wqheader_menu_triangle'>
</div><div class='wqheader_menu_underline'></div>");
.    });.    WQGlobal.setRightContactToolBar();.    jQuery(window).res
ize(WQGlobal.setRightContactToolBar);.    .    var jQueryheaderMenuIte
mCurrent;.    jQuery('#main-menu-links li').hover(..function()..{..   
 jQueryheaderMenuItemCurrent=jQuery('#main-menu-links li.active');..  
  jQueryheaderMenuItemCurrent.removeClass('active');..    jQuery(this)
.addClass('active');..},..function()..{..    jQuery(this).removeClass(
'active');..    jQueryheaderMenuItemCurrent.addClass('active');..});..
..jQuery(window).scroll(function()..{..    jQuery('#wqcontact_toolbar'
).stop().animate({'top':(jQuery(window).height()-143)/2 ..        jQue
ry(window).scrollTop()}, 500);..});.});...var WQGlobal={.    setRightC
ontactToolBar: function().    {.//.jQuery('#wqbody_right_line').css('h
eight', jQuery("#page-wrapper").height());..jQuery('#wqcontact_toolbar
').stop().animate({'top':(jQuery(window).height()-143)/2 .            
jQuery(window).scrollTop()}, 500);.    },.    setHeaderGrids: function
().    {..var bodyWidth=jQuery('body').width();..var headerBarGrids=''
;..var UNIT_WIDTH=17;..for (var i=0; i<3; i  )..{..    var tmp=<<< skipped >>>

GET /images/img/bj2.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 18544

Content-Type: image/jpeg

Last-Modified: Wed, 10 Sep 2014 08:34:55 GMT

Accept-Ranges: bytes

ETag: "bb53fb18d2cccf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT

.....LExif..MM.*.............................b...........j.(..........
.1.........r.2...........i....................'.......'.Adobe Photosho
p CS6 (Windows).2014:09:02 16:20:23..........................C........
...............................................&.(....................
.....................H.......H.........XICC_PROFILE......HLino....mntr
RGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP  ..
..............................................cprt...P...3desc.......l
wtpt........bkpt........rXYZ........gXYZ...,[email protected]..
.pdmdd........vued...L....view.......$lumi........meas.......$tech...0
....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c)
 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1..........
..sRGB IEC61966-2.1..................................................X
YZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b
.........XYZ ......$.........desc........IEC hXXp://VVV.iec.ch........
....IEC hXXp://VVV.iec.ch.............................................
.desc........IEC 61966-2.1 Default RGB colour space - sRGB............
IEC 61966-2.1 Default RGB colour space - sRGB......................des
c.......,Reference Viewing Condition in IEC61966-2.1...........,Refere
nce Viewing Condition in IEC61966-2.1..........................view...
......._...............\.....XYZ .....L.V.P...W..meas.................
...............sig ....CRT curv.......................#.(.-.2.7.;[email protected].
J.O.T.Y.^.c.h.m.r.w.|.............................................

<<< skipped >>>

GET /Images/background_3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 2971

Content-Type: image/png

Last-Modified: Thu, 12 Jun 2014 01:56:24 GMT

Accept-Ranges: bytes

ETag: "014a883e185cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
.PNG........IHDR.......2.......".....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /Images/background_5.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 1208

Content-Type: image/png

Last-Modified: Fri, 20 Dec 2013 01:36:08 GMT

Accept-Ranges: bytes

ETag: "0b4fcda23fdce1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:54 GMT
.PNG........IHDR...G.................tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:18E7C01B691711E39AFEDEEE
217921BA" xmpMM:DocumentID="xmp.did:18E7C01C691711E39AFEDEEE217921BA"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:18E7C019691711E39A
FEDEEE217921BA" stRef:documentID="xmp.did:18E7C01A691711E39AFEDEEE2179
21BA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>V.t?...,IDATx...I..0.E..1n...... @L."Ji..zO
.7.......x]...:.c..eY.}_.U=Ra....EQ..".........q..^.%.</..,.x1..=EM
.<69....}..*..$.....um.....?..T..mk.,..Cq........[.`.TW.P.....:.O8C
..4M.J.%...m.cTT......BQ.JpS.!A$A.8F...y....k....].$I"..w....t.d8a.s..
.X^....(lo....UMb....7cDN.&1.....&|.E...^<"....1..4q..>nc~......
..T].....IEND.B`.....
<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221427171.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8255

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:42:34 GMT

Accept-Ranges: bytes

ETag: "ec61897afb95cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
>.........................!1.Aa."Qq..2R....B....#3r.$Cb...4........
..........................4........................!.1A.2Qaq..".......
#B...3R............?.....O.4s*....2.$..(DUw.U....O.{...q.......zBL%N..
!..YL.....)S'`.OnJw.Q....e.h"X..;.IK!...2...d.!$......BD.$..PN.%......
..`.........!e-<.....%.......'.....VP^P.,k.a..v..m..m@........${..9
..y.....)..gnR...K#.g2......A{..#hS"*.E.......5..z}......=.n..=......v
 .....z..w.$..N.=3..6S..P..E;.......N..3.....Q....6.$.X..EF..m.A9m.A..
....:z....\..%...M......5.....Y........oL....W....X...t.......yx.I\...
..1..v....[U......i=...>k:.1.<2:Wdu..dB|3*ld...r>\....J.C..y.
tTr..C..Q.4j.!..pEQ...(.O.{.>.w....z..G.p..v..BL:).C.A.N....-...u..
.S.....E)...rYNNQ..k(e.M4....fk.9X.N.]..6F9RY..`.,u....nt...#T..x....U
.=3.....^.bk..d..z..lg[K. $...'D...1)..<..JYgI........Z.g..z.#...}.
m....*.d]...cX.a....5..z(..Tw...yoH.d.q..=..t..o;.8`>.......:......
.]...u...:).Q.4b.Ee"..n.M.....:>..E..9..*. ......$.AD.;s;.b..}Se.y.
.[....i.tv.{I.....O.1hq.1,...o..?Q.y.F.Zim|.y.t..k!.>. ..d.Z...3yD\
....L..>|.6..k9.J5.....C..y.*9.F....Q.b0...8.l}...?u........y..m.z-
...."..W...?..4..........n.z.^wc.....IOJ...../..2...R..o..Q.gw'... ...
D.SAE;HtF7[.....].....r}..._....#..a..........|....o.<.L...K.A5._..
^ .i."..7l.Y...4.=SSS.........m%.....?n..e........6.Wh.].7.~^Eniz.<<< skipped >>>

GET /UploadFiles/Game/s_img/2014070221035808.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 14120

Content-Type: image/jpeg

Last-Modified: Wed, 02 Jul 2014 13:03:19 GMT

Accept-Ranges: bytes

ETag: "44a81bfff595cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
........................................rZ.q...=.}{]^..%....eEz.^.A..s
p*y.....j..T....5t%D.1.....u.k.....Z.y...k......f...V..B.0Ww=..~.....1
.0..]fW..k.....V.NOs^...r.}.......a.......1Q/n...).P...y.c...M.g2,....
.a!d...rj.9}..c.....Hz...>.......Lkp..r..OG...zy-..Y&(n2uw..%.0z.U.
.D...g....B?...zJ.6E.-\>.c.OR......'.Ux1{...@U8=%pj^.Z. ..k8i... ..
^.e..?..]....Z..G..5y..[AAk...Qpz....b.(V..Z ..Z:..;.G]!~....>J....
.h...'6 HJUk..C.Y;..p...(O.iE.T.[..........[[....9..A..=.E.....y6i.-..
.Q.......L,........e..:9..;.4s.^w..J.9....2u.@R......(6..?v.0.9...*..U
J..so...r.R.J.. ...9p.d...1z.IB.....%...o..].5~Y...bO!n.S./.8%.....[.Z
,....$.A..^........(6d..2&..TdZ.n[.]!.A...M..Y;)._...6....e....T<3U
\25L\..T.[......?N............"]..}...}w..)..68.......W.z&U.a[.'.4:.k.
..b.."....P...o...v..:<.:.uUf....}c{#..57.C.,.|%.Q.MET.....`dG..78.
b...Z.'E.~..c(.'.z.M...urVil.Ii.!V....h.e.....,Z...j.Q^c`..!s....X...f
w......A/.IK..(..w>-_7U..6..E....Sj6..r.....#k.... ..A..B..........
..=/.. ..3...p.I..U.~P...........M.......7b:./bg...%...V..3.h{D.H'<
. Yh.r.P!.J..... y..xX.....a;.n-3.~....`.|.(...".......dR....(........
....................!.." #$134..............8.x.D...@.$..n....C$s.w.z(
s.ub..!~..0:....|y.(.....~.S..oEz.(.'k....Q...x... _%.Dg...u.%*. .kP.$
..}0......g.;"..h...}Ul.j...~Dz..r.mU.....5u."[email protected]._.<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081220445235.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 10042

Content-Type: image/jpeg

Last-Modified: Tue, 12 Aug 2014 12:44:43 GMT

Accept-Ranges: bytes

ETag: "dc2f90302bb6cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:55 GMT
......JFIF.............C..............................................
......................C...............................................
......................................................................
.K............................!1A."QaBq..24RVbr.......#Ss....7Cct..$%.
3.....................................?.........................!1AQq.
.."2Ra........#3B...45STb$rC..............?..j.^OJ"Q...D.%.(.DJ"Q...D.
%.(.DJ"Q...D.%.(.DJ"Q...E...!........... ..._..bW&...Z1*C..=..H..6.a2@
=..b8..... [-..,.......5t....H..l.s.)...... ..6.....a......>...../u
$.!.\.;3F.O......R;lY)j.....?...7.j..l....j..G..#b..'.........~....k..
|vB3....G.....bH.)v...r..n........^.'..<...l..`.)Z...u.bl..8M.rn...
t..?.I....jG.V. .4......b.'.t`.!$m.!...B.TRA.I....:.(..f_(.%.(.DJ"Q...
D.%.(.D]..H..j,F..%..6.( Z....Mqs.G)...#...20I:..J..o.5......J..:([...
.>z..z...Tr...t`...B.-y.,.I^.H..?3.|.;....s...p.......O%;./.8uQ...M
S5A.Gc..Z.V.;{y4....;...V2./.E.xx."o..Q.."...a..(..`.F.her.)...B~.x.Q.
yVl...~..l....Z.......h.|G........!..u...r{...%.>......T......z'...
..HURc-!........~....mjB.R...Ë....k~.:.~A....|J"Q...D.%.(.DY6_...2..
.Y..P.O.sP.t|e......LZ...Y...V..l..M....P.O....Vd..  .q.%..N...H.W....
.G.SPZ..j.......X.m.......'v..>x....F..c..._.}..o.m1...C.).:!.....M
v...<..J..............kCmn3......A6....#.(.N.hMn..L......,.!%../;t.
u........SW{u....V.rVS.. $. l.4...TJ|.......c.b.sw0.,..{}......bP ,[)G
.Z.e=...w......nX[....:I._.b.5...W~U..Sua...x...ma...I........f:..h.=.
5.%..u..sO...?|..........).qM.n.t.......k..7..F.u...<Y...cE...8<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081817331125.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8879

Content-Type: image/jpeg

Last-Modified: Mon, 18 Aug 2014 09:33:04 GMT

Accept-Ranges: bytes

ETag: "747d4c69c7bacf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT

......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ ........
.1..acspMSFT....IEC sRGB.......................-HP  ..................
..............................cprt...P...3desc.......lwtpt........bkpt
........rXYZ........gXYZ...,[email protected]
ed...L....view.......$lumi........meas.......$tech...0....rTRC...<.
...gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Pa
ckard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-
2.1..................................................XYZ .......Q.....
...XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ...
...$.........desc........IEC hXXp://VVV.iec.ch............IEC hXXp://w
ww.iec.ch..............................................desc........IEC
 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 De
fault RGB colour space - sRGB......................desc.......,Referen
ce Viewing Condition in IEC61966-2.1...........,Reference Viewing Cond
ition in IEC61966-2.1..........................view.........._........
.......\.....XYZ .....L.V.P...W..meas................................s
ig ....CRT curv.......................#.(.-.2.7.;[email protected].^.c.h.m.
r.w.|...............................................................%.
 .2.8.>.E.L.R.Y.`.g.n.u.|.........................................&
./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~....
..................... .-.;.H.U.c.q.~....................... .:.I.X.g.w
.....................'.7.H.Y.j.{................... .=.O.a.t......

<<< skipped >>>

GET /images/star.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 3228

Content-Type: image/png

Last-Modified: Wed, 11 Jun 2014 06:28:48 GMT

Accept-Ranges: bytes

ETag: "0d06673e85cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
.PNG........IHDR.......#.......*.....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /UploadFiles/Soft/s_img/2014081220091795.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d


HTTP/1.1 200 OK

Content-Length: 8547

Content-Type: image/jpeg

Last-Modified: Tue, 12 Aug 2014 12:09:46 GMT

Accept-Ranges: bytes

ETag: "d8898f4e26b6cf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:56 GMT
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c021 79.154911, 2013/10/29-11:47:16        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:9F8B6F041A3D11E4AB58B0
99255BABD9" xmpMM:InstanceID="xmp.iid:9F8B6F031A3D11E4AB58B099255BABD9
" xmp:CreatorTool="Adobe Photoshop CC Macintosh"> <xmpMM:Derived
From stRef:instanceID="204D4AAB7514BD8FE67EC7D4E63C175E" stRef:documen
tID="204D4AAB7514BD8FE67EC7D4E63C175E"/> </rdf:Description> &
lt;/rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.
d.....................................................................
......................................................................
......................................................................
...........................!...1A.Qa.q.."...2Bbr.S....R....#..U.6s4.3c
..$T%........................1.!AQaq........"2R...B4..b#S...3$..c.....
.......?.....k.@(.Q...D..... .@(.Q...D..... .@(.Q...D.TJ.E..Q*...Q*...
Q*...Q*...Q*...Q*...Q*...Q*...Q*...Q*.........*(...*(...*(...*(...*(..
.*(...*(...*(...*(...*(...*eD..D..J.D..J.D..J.D.......T.%@.T.%@.T.%@.T
.%@.T.%@.T.%@.T.. .....J.....1..q...I&......|.i.RIU.-m.. !l..y....<<< skipped >>>

GET /images/wws.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.waiwaishu.com/IosHome.html

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: VVV.waiwaishu.com

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ygeumbwbmgiiegpmysx1zu1d; Hm_lvt_c1b609924995c1b67281e8a7bc7bdf39=1417095263; Hm_lpvt_c1b609924995c1b67281e8a7bc7bdf39=1417095263


HTTP/1.1 200 OK

Content-Length: 51064

Content-Type: image/png

Last-Modified: Fri, 22 Aug 2014 09:07:18 GMT

Accept-Ranges: bytes

ETag: "ab3dbc79e8bdcf1:d29"

Server: Microsoft-IIS/6.0

zm: jsp

X-Powered-By: ASP.NET

Date: Thu, 27 Nov 2014 18:41:58 GMT
.PNG........IHDR.............1.......pHYs...............DLiTXtXML:com.
adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&
gt;.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5
-c014 79.151481, 2013/03/13-12:09:15        ">.   <rdf:RDF xmlns
:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">.      <rdf:D
escription rdf:about="".            xmlns:xmp="hXXp://ns.adobe.com/xap
/1.0/".            xmlns:dc="hXXp://purl.org/dc/elements/1.1/".       
     xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/".            
xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/".            xmlns:stEvt=
"hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#".            xmlns:s
tRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#".            xmln
s:tiff="hXXp://ns.adobe.com/tiff/1.0/".            xmlns:exif="hXXp://
ns.adobe.com/exif/1.0/">.         <xmp:CreatorTool>Adobe Phot
oshop CC (Macintosh)</xmp:CreatorTool>.         <xmp:CreateDa
te>2014-08-21T16:05:49 08:00</xmp:CreateDate>.         <xm
p:ModifyDate>2014-08-21T16:33:15 08:00</xmp:ModifyDate>.     
    <xmp:MetadataDate>2014-08-21T16:33:15 08:00</xmp:Metadata
Date>.         <dc:format>image/png</dc:format>.       
  <photoshop:ColorMode>3</photoshop:ColorMode>.         &l
t;photoshop:DocumentAncestors>.            <rdf:Bag>.        
       <rdf:li>D12F56745D1832D5FDF31D9971D7C60B</rdf:li>. 
           </rdf:Bag>.         </photoshop:DocumentAncest<<< skipped >>>

GET /js/s/login_7.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Dec 2014 21:54:11 GMT

Date: Wed, 26 Nov 2014 21:54:11 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 2681

Last-Modified: Wed, 29 Oct 2014 06:28:17 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:4 (Cdn Cache Server V2.0)

Connection: keep-alive
...........X[....~..P....dr.q..w)!vn[xS#..a..#rD....$.]Y  .:H..M..H..E
oi."I....8.....S.B...$J.u..m.H".r..9.......&..............c.ZY&\b.....
v*D?.|....ff{6&......L.4..l/..ks....Y..1...."...K..Y..u..'b...........
......cy.......ZU~...~...._....]Z.....^.'....-?V.y4I...........6^wm..:
. yYO#....b.Y..1-....}......C...^.~dss...V...F?w.[=...|.....!..O...S..
o...1w....h.=G..%].zR.....F.. .|.Vn...;v....4..q...........q..g_...*..
.9..`$o...j.G.!.0.f=/.}.c.....".......,..g=.!.gY.?w.w8...\<..8.....
Yl5..,Oy......,.>36...f....3.Lv....gW......A.7...!..*<..=8`m...d
2...........#Z.....4.{F..*...... F.y.d..q#{..:5.../...6.i..,...A.V.|..
....*....}..F.t.A.M....>...X!...]........C..X.r.........,...s\..2..
=......2v.......;....h.../x..y. t.keI.....*..,>#....w...V[m.-..@(.H
.....pp....q.}.wr2.....~.2...xpls.....8.......wI..&03..%.$..N}...?.l..
.....z......u._..G....P....r...h.>..........."..k..H.C..Ih..=..?x.m
*.^.$cY...3..8...[,v....v..&>''...)...v0.....3..mtE..#...h....m....
DB..U.Z...i...k|.......i..N%`CsL.p. .......O.....,S=.4.c0...%.Ej......
.3|..0.....ihxy.....Va...y...A*]..=.H.vH......9..[.;A....WF{..zR....4.
mZ0=..ud...%.^...B]i........jZ.=......\-....u...."f.R.EtL#..u}?.......
....%...V..E.H."...#i"`VkF...G..V..$.....Ru....Y..<..X._.d..;g...~.
.....8....... EL.I.4.S...P...4IE.}...!.J2....k4...D..{<3.h........#
........-....7..;K..XNyD**...r.4:rb...%..PTkeH."Z.jKH...J/*.a .%^'..a!
pxNR)Dw......G.o.w........w..9..j-..{j.9.e%*....].|.w.X.)L.w!.d..Zp...
V....at....{...rz....WW...s.....*.o"N..z0....n......W...J.EH......<<< skipped >>>

GET /b7/aa/h199941397100951.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: i2.6.cn

Connection: Keep-Alive



.j0.o...e&..9.l..>........h.....1.z...c.W........z]..k...C.>....
fCD(. ...o...&;d....:s.z....m........EV.e.@.; L.J.....k...E./..n;.v...
.....C....x$..>.o....<v...U..~.7..5...Z^.......4...p.p*[.Z.K.{..
..}.u&.k.[.~.i. .>tQU...Q&...K...Uo.6.7.... .o.Op9..)......*.rV....
..s.{R...........;.O....5&.1 .Q.*....&....S.....&u. ?..V..w.@........?
.n.Z....V_..O.E.k>}C............D.S.......R.....Z#B.8.._.i.^&....".
........<0u..C.~NyA.o.E.7....;.BP.C.fIPQ.jA48.........ctoct;g......
.%J}....U U.fp...aV.\.b...t....].o.<...r..1.]..D..;N-...].m.;|.....
dL.....R..n...N|..d~...e-.M^.U]....;.nI3o..N.Hz4W.P.&.$x..Z.......*...
..o....}D..]5>T...i.P..j.}...t-L.....&.'..f%..}(.;...sm.<J..]Z..
.....-.......h..n..k...5.dGJ...>#..K.[Cc..#:...V.pM..R....j1...._'R
..H..R..'[email protected]*I.; ..-\P.&....R.......9.(`9Gk
^/A.....-@}z.H..'[email protected].......).q.......%........<.....
-.5 [email protected].=.v.Y....Ug....M..........n H-......
-.z......V.....u._fa......:...\g.FR....m.<A...[......K^...{v.>.n
p.]L..'...QH.I.tM...^.....}.........C....-...7R...lW.../L..D.S...uG.Vm
......!n......Tc3-Rz1.....n.J...U......%.n.Z..}..jpn..>..%g.[=.t...
..\%u)....hT..%8.Uf..g.{.f...X......6.F.b..?..#|.i..R..3%..qRBl..l.k..
"%..!)<..A.../....Ka...xn...U.aql&C..HTTP/1.1 200 OK..Expires: Tue,
 15 Sep 2015 12:02:16 GMT..Date: Sat, 20 Sep 2014 12:02:16 GMT..Cache-
Control: max-age=31104000..Content-Type: image/jpeg..ETag: "1214466722
"..Last-Modified: Thu, 10 Apr 2014 03:35:56 GMT..Content-Length: 2<<< skipped >>>

GET /imges/live/events/changzhan2014/cz_banner_close.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 17 Nov 2015 15:28:22 GMT

Date: Sat, 22 Nov 2014 15:28:22 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 17 Oct 2014 03:40:05 GMT

ETag: "2530585581"

Content-Type: image/png

Content-Length: 1007

Server: tux/3.3

Age: 1

X-Via: 1.1 zjjhdx36:8104 (Cdn Cache Server V2.0), 1.1 dls21:2 (Cdn Cache Server V2.0)

Connection: keep-alive
......@T..}Toh.e......)TPax..\......=.......4...M/wo.7.....&-.Z.C...q_
T...!L...t*...6Ic.).......e.....M.!{...}...{..y......'.v<.A....H0fh
.u..7.u.b......QZ/.* |.J.*".....4.L........}"z........,..C.N.....:....
x._>.......pQW...Y82......8...%....P...d..TY.(._..;~y<6..M.@....
.j":F...(...#.X..x.l....')..u3..xz.>....~jOh..*..X0....y....y.).J.R
........4|..=....*.P.Q..-.A..*,..).1.RhF..t ....V........".:].........
....H....g.......">..Q.\..*.t...*..8.E:...H..=..3P.PI...G.|D.tA.A$.
......s>n....q./...>.8.......'...q-n..32P..W...o.5Za..T.,..*....
y.>.....r......28.....2..1..m.'......*n....)....N.CX..f.$M&..b..l.j
.^...........A.... ..R.!.;..T*e.....J.DQ\__..-.Z-.H.VK...c.`>.. .a.
...TV....h4.B..NN..*..."...5j./..;,V.lJ...U*.Z]H.3yeem..l.....,.......
d2.i...J:l.Y('&.-.y.^.d2.4D.Z(.H...H3a.ee..J....>.s....?>.3.....
..............v.{k..w-=.x..w.S....j/~...5.X......fN....W............S_
>...xis.....J.K....../..w.._...._.O-.......M.............6......?_.
._.............&#..G....o.~....?:]D.....7..1~e..h...z...pI.7...HTTP/1.
1 200 OK..Expires: Tue, 17 Nov 2015 15:28:22 GMT..Date: Sat, 22 Nov 20
14 15:28:22 GMT..Cache-Control: public, max-age=31104000..Content-Enco
ding: gzip..Last-Modified: Fri, 17 Oct 2014 03:40:05 GMT..ETag: "25305
85581"..Content-Type: image/png..Content-Length: 1007..Server: tux/3.3
..Age: 1..X-Via: 1.1 zjjhdx36:8104 (Cdn Cache Server V2.0), 1.1 dls21:
2 (Cdn Cache Server V2.0)..Connection: keep-alive........@T..}Toh.e...
...)TPax..\......=.......4...M/wo.7.....&-.Z.C...q_T...!L...t*...6<<< skipped >>>

GET /imges/live2014/userpanel-line-v5.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C; .NET4.0E)

Accept-Encoding: gzip, deflate

Host: vr2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 11:23:39 GMT

Date: Sat, 20 Sep 2014 11:23:39 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "3738855342"

Last-Modified: Fri, 01 Aug 2014 02:00:09 GMT

Content-Length: 959

Server: tux/3.3

Age: 1

X-Via: 1.1 dls21:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......Y......=......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:754D532D179A11E4BD589CA0
685C8E28" xmpMM:DocumentID="xmp.did:754D532E179A11E4BD589CA0685C8E28"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:754D532B179A11E4BD
589CA0685C8E28" stRef:documentID="xmp.did:754D532C179A11E4BD589CA0685C
8E28"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...x...3IDATx.b```H...?/.301 .Q.(...f`.;...
....9...........].....zT....IEND.B`.HTTP/1.1 200 OK..Expires: Tue, 15 
Sep 2015 11:23:39 GMT..Date: Sat, 20 Sep 2014 11:23:39 GMT..Cache-Cont
rol: max-age=31104000..Content-Type: image/png..ETag: "3738855342"..La
st-Modified: Fri, 01 Aug 2014 02:00:09 GMT..Content-Length: 959..Serve
r: tux/3.3..Age: 1..X-Via: 1.1 dls21:4 (Cdn Cache Server V2.0)..Connec
tion: keep-alive...PNG........IHDR.......Y......=......tEXtSoftware.Ad
obe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin=
"..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="ad<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_3628:

.text

`.rdata

@.data

.rsrc

t$(SSh

~%UVW

u$SShe

user32.dll

gdiplus.dll

kernel32.dll

gdi32.dll

Kernel32.dll

msimg32.dll

comctl32.dll

COMCTL32.DLL

User32.dll

advapi32.dll

ole32.dll

GdiPlus.dll

Gdiplus.dll

ntdll.dll

Psapi.dll

psapi.dll

GdiplusShutdown

SetWindowsHookExA

EnumWindows

GdipSetPenLineJoin

GdipGetPenLineJoin

GdipSetStringFormatHotkeyPrefix

GdipGetStringFormatHotkeyPrefix

Adobe Photoshop CS3 Windows

2014:02:16 20:32:40

urlTEXT

MsgeTEXT

hXXp://ns.adobe.com/xap/1.0/

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.1-c036 46.276720, Mon Feb 19 2007 22:40:08 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xap="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:xapMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xap:CreateDate="2014-02-15T14:50:37 08:00" xap:ModifyDate="2014-02-16T20:32:40 08:00" xap:MetadataDate="2014-02-16T20:32:40 08:00" xap:CreatorTool="Adobe Photoshop CS3 Windows" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:History="" xapMM:InstanceID="uuid:DD1E16570697E3119FD992A2FEC2595D" tiff:Orientation="1" tiff:XResolution="720000/10000" tiff:YResolution="720000/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;C17D3360AB9406689283325D711BB1C6" exif:PixelXDimension="1100" exif:PixelYDimension="687" exif:ColorSpace="-1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;D0273E1A56BB4627744B3EF8FE9EE10A"/> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>

hXXp://VVV.aawgg.com/pp.html

hXXp://VVV.aawgg.com/?pp

hXXp://VVV.it1686.com/pp.php

system32\svchost.exe

{B96B3CAF-0728-11D3-9D7B-0000F81EF32E}

\empty.exe

`.data

could not empty working set for process #%d [%s]

could not empty working set for process #%d

USAGE: empty.exe {pid | task-name}

AdjustTokenPrivileges failed with %d

LookupPrivilegeValue failed with %d

OpenProcessToken failed with %d

empty.pdb

KERNEL32.dll

msvcrt.dll

ADVAPI32.dll

CloseWindowStation

SetProcessWindowStation

OpenWindowStationA

GetProcessWindowStation

EnumWindowStationsA

USER32.dll

OLEAUT32.dll

hXXp://aiaiwg2014.blog.sohu.com/306430357.html

hXXp://VVV.aawgg.com

@.reloc

RegisterHotKey

GetAsyncKeyState

MapVirtualKeyA

keybd_event

MsgWaitForMultipleObjects

GetKeyState

EnumChildWindows

UnregisterHotKey

sSHIPM[u

}~~}||{|{}

~~~}}}~~

~}{{||}~

~~|}{|}~

~|{{{{|}~

~}|{{||}~

~}}}|}}~~

~~}}}}~~

EhSvc.dll

3Anmconew.dll

[email protected]

C:\Windows\System32\Drivers\etc\hostshXXp://VVV.super-ec.cnhXXp://wghai.com/echXXp://qsyou.com/echXXp://VVV.wghai.comhXXp://bbs.wghai.com/forum-17-1.html/forum-12-1.html/memcp.php/ip.asp/time.asp/gonggao.txt/ec-user6.php/ec-bd.php/ec-jh.php

hXXp://VVV.super-ec.cn

<input type="text" name="field_2new" size="25" value="" disabled class="txt" />" class="txt" />Function Getcpuid()

Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")

getcpuid=cpu.ProcessorId

shlwapi.dll

@ntdll.dll

VVV.aawgg.com

%*.*f

CNotSupportedException

commctrl_DragListMsg

Afx:%x:%x:%x:%x:%x

Afx:%x:%x

CCmdTarget

__MSVCRT_HEAP_SELECT

GetProcessHeap

WinExec

GetViewportOrgEx

GDI32.dll

WINMM.dll

WINSPOOL.DRV

RegCloseKey

RegOpenKeyExA

ShellExecuteA

SHELL32.dll

COMCTL32.dll

WS2_32.dll

GetCPInfo

CreateDialogIndirectParamA

UnhookWindowsHookEx

SetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

ScaleViewportExtEx

GetViewportExtEx

comdlg32.dll

RegCreateKeyExA

ppaa.dll

.PAVCException@@

.PAVCNotSupportedException@@

.PAVCFileException@@

(*.prn)|*.prn|

(*.*)|*.*||

Shell32.dll

Mpr.dll

Advapi32.dll

Gdi32.dll

(&07-034/)7 '

?? / %d]

%d / %d]

: %d]

(*.WAV;*.MID)|*.WAV;*.MID|WAV

(*.WAV)|*.WAV|MIDI

(*.MID)|*.MID|

(*.txt)|*.txt|

(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG

(*.JPG)|*.JPG|BMP

(*.BMP)|*.BMP|GIF

(*.GIF)|*.GIF|

(*.ICO)|*.ICO|

(*.CUR)|*.CUR|

%s:%d

windows

out.prn

%d.%d

%d / %d

%d/%d

Bogus message code %d

(%d-%d):

%ld%c

.PAVCObject@@

.PAVCSimpleException@@

.PAVCMemoryException@@

.?AVCNotSupportedException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCCmdTarget@@

.?AVCCmdUI@@

.?AVCTestCmdUI@@

.PAVCArchiveException@@

zcÁ

#include "l.chs\afxres.rc" // Standard components

3 3;3@3~3

:(;,;0;4;8;<;@;{;

? ?$?(?,?0?

2,2

7 7$7(7,7074787<7

7^7@8&959

9œ9

> >$>(>,>0>4>8><>@>

9’9D9P9]9j9x9

:*;0;4;8;<;

8-8A8U8i8}8

: :$:(:,:0:4:8:

KartRider.exe

ehsvc.dll

{B96B3CAB-0728-11D3-9D7B-0000F81EF32E}

VVV.aawgg.com

F%*.*f

iphlpapi.dll

SHLWAPI.dll

MPR.dll

VERSION.dll

RASAPI32.dll

GetWindowsDirectoryA

oledlg.dll

HttpQueryInfoA

HttpSendRequestA

HttpOpenRequestA

InternetCrackUrlA

InternetCanonicalizeUrlA

WININET.dll

(*.htm;*.html)|*.htm;*.html

VVV.dywt.com.cn

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

HTTP/1.0

%s <%s>

Reply-To: %s

From: %s

To: %s

Subject: %s

Date: %s

Cc: %s

%a, %d %b %Y %H:%M:%S

SMTP

.PAVCOleException@@

.PAVCOleDispatchException@@

c:\%original file name%.exe

5.2.3790.0 built by: dnsrv_dev(v-smgum)

empty.exe

Windows

Operating System

5.2.3790.0

\WINDOWS\system32;%WinDir%;%WinDir%\System32\Wbem

[email protected]

(*.*)

14.7.0.0

1.0.0.0

iexplore.exe_1804:

.text

`.data

.rsrc

@.reloc

IEFRAME.dll

MLANG.dll

ADVAPI32.dll

KERNEL32.dll

USER32.dll

msvcrt.dll

ntdll.dll

SHLWAPI.dll

SHELL32.dll

ole32.dll

iertutil.dll

urlmon.dll

RegCloseKey

RegOpenKeyExW

GetWindowsDirectoryW

_wcmdln

_amsg_exit

UrlApplySchemeW

UrlCreateFromPathW

UrlCanonicalizeW

PathIsURLW

iexplore.pdb

KEYWD

KEYW

.uuxz

_ %S4Dd

RUBV%uJ

bZ22b%ss

%.FG[[[]]]]]Z11.('

N56.SK

9u%s:

.Ra1X

Y8t/,?.J%F^y

Go.OBR"F

Ri.tn

>.IN }

1YYYY1YY9GEAA=77YRNNNW:.VT1

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

<)<.<3<<<

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

user32.dll

yKernel32.DLL

{28fb17e0-d393-439d-9a21-9474a070473a}

iexplore.exe

Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}

"%s" %s

kernel32.dll

-extoff go.microsoft.com/fwlink/?LinkId=106320

-extoff go.microsoft.com/fwlink/?LinkId=106322

-extoff go.microsoft.com/fwlink/?LinkId=106323

\AppPatch\sysmain.sdb

explorer.exe

ieuser.exe

Kernel32.dll

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383}

.\%s.mui

.\%s\%s.mui

%s\%s.mui

%s\%s\%s.mui

%s\%s

Software\Microsoft\Internet Explorer\URLSearchHooks

shell:%s

Imaging_CreateWebPagePreview_Perftrack

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)

IEXPLORE.EXE

Windows

8.00.6001.18702

iexplore.exe_2832:

.text

`.data

.rsrc

@.reloc

IEFRAME.dll

MLANG.dll

ADVAPI32.dll

KERNEL32.dll

USER32.dll

msvcrt.dll

ntdll.dll

SHLWAPI.dll

SHELL32.dll

ole32.dll

iertutil.dll

urlmon.dll

RegCloseKey

RegOpenKeyExW

GetWindowsDirectoryW

_wcmdln

_amsg_exit

UrlApplySchemeW

UrlCreateFromPathW

UrlCanonicalizeW

PathIsURLW

iexplore.pdb

KEYWD

KEYW

.uuxz

_ %S4Dd

RUBV%uJ

bZ22b%ss

%.FG[[[]]]]]Z11.('

N56.SK

9u%s:

.Ra1X

Y8t/,?.J%F^y

Go.OBR"F

Ri.tn

>.IN }

1YYYY1YY9GEAA=77YRNNNW:.VT1

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

<)<.<3<<<

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

user32.dll

yKernel32.DLL

{28fb17e0-d393-439d-9a21-9474a070473a}

iexplore.exe

Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}

"%s" %s

kernel32.dll

-extoff go.microsoft.com/fwlink/?LinkId=106320

-extoff go.microsoft.com/fwlink/?LinkId=106322

-extoff go.microsoft.com/fwlink/?LinkId=106323

\AppPatch\sysmain.sdb

explorer.exe

ieuser.exe

Kernel32.dll

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383}

.\%s.mui

.\%s\%s.mui

%s\%s.mui

%s\%s\%s.mui

%s\%s

Software\Microsoft\Internet Explorer\URLSearchHooks

shell:%s

Imaging_CreateWebPagePreview_Perftrack

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)

IEXPLORE.EXE

Windows

8.00.6001.18702

iexplore.exe_2720:

.text

`.data

.rsrc

@.reloc

IEFRAME.dll

MLANG.dll

ADVAPI32.dll

KERNEL32.dll

USER32.dll

msvcrt.dll

ntdll.dll

SHLWAPI.dll

SHELL32.dll

ole32.dll

iertutil.dll

urlmon.dll

RegCloseKey

RegOpenKeyExW

GetWindowsDirectoryW

_wcmdln

_amsg_exit

UrlApplySchemeW

UrlCreateFromPathW

UrlCanonicalizeW

PathIsURLW

iexplore.pdb

KEYWD

KEYW

.uuxz

_ %S4Dd

RUBV%uJ

bZ22b%ss

%.FG[[[]]]]]Z11.('

N56.SK

9u%s:

.Ra1X

Y8t/,?.J%F^y

Go.OBR"F

Ri.tn

>.IN }

1YYYY1YY9GEAA=77YRNNNW:.VT1

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

<)<.<3<<<

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

user32.dll

yKernel32.DLL

{28fb17e0-d393-439d-9a21-9474a070473a}

iexplore.exe

Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}

"%s" %s

kernel32.dll

-extoff go.microsoft.com/fwlink/?LinkId=106320

-extoff go.microsoft.com/fwlink/?LinkId=106322

-extoff go.microsoft.com/fwlink/?LinkId=106323

\AppPatch\sysmain.sdb

explorer.exe

ieuser.exe

Kernel32.dll

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383}

.\%s.mui

.\%s\%s.mui

%s\%s.mui

%s\%s\%s.mui

%s\%s

Software\Microsoft\Internet Explorer\URLSearchHooks

shell:%s

Imaging_CreateWebPagePreview_Perftrack

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)

IEXPLORE.EXE

Windows

8.00.6001.18702

FP_AX_CAB_INSTALLER64.exe_3380:

.text

`.rdata

@.data

.rsrc

@.reloc

SSj%S

SSSSh0

HHt.Ht%Ht

PSSj%S

tOHt.Ht

tGHt.Ht&

&Macromedia Flash Certificate Authority1

[email protected]

E.YY&~g

HttpQueryInfoW

HttpSendRequestW

HttpOpenRequestW

CertFreeCertificateContext

CertVerifySubjectCertificateContext

CertFindCertificateInStore

CertCreateCertificateContext

CryptGetMessageCertificates

atl.dll

1.0.5, 10-Dec-2007

(VVV.memtest86.com). At the time of writing it is free (GPLd).

bzip2/libbzip2: internal error number %d.

This is a bug in bzip2/libbzip2, %s.

Please report it to me at: [email protected]. If this happened

component, you should also report this bug to the author(s)

of that program. Please make an effort to report this bug;

timely and accurate bug reports eventually lead to higher

combined CRCs: stored = 0xx, computed = 0xx

{0xx, 0xx}

codes %d

code lengths %d,

selectors %d,

bytes: mapping %d,

pass %d: size is %d, grp uses are

initial group %d, [%d .. %d], has %d syms (%4.1f%%)

Y@ %d in block, %d after MTF & 1-2 coding, %d 2 syms in use

final combined CRC = 0xx

block %d: crc = 0xx, combined CRC = 0xx, size = %d

[%d: huff mtf

m unresolved strings

depth m has

%d pointers, %d sorted, %d scanned

qsort [0x%x, 0x%x] done %d this %d

%d work, %d block, ratio %5.2f

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

Morpheme.pdb

OLEACC.dll

PSAPI.DLL

KERNEL32.dll

GetKeyState

USER32.dll

GDI32.dll

RegCloseKey

RegOpenKeyExW

RegCreateKeyExW

ADVAPI32.dll

ShellExecuteW

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

GetConsoleOutputCP

GetProcessHeap

GetCPInfo

Morpheme.exe

zcÁ

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\ICD1.tmp\FP_AX_CAB_INSTALLER64.exe

stdole2.tlbWWW(

?jp_msgFormatVersionWW

_:p_msgDataWWW

p_expectedMsgFormatW

I:p_urlWWW

.zp_dwStateWWW

p_sourceURLW

p_refURL,

urlW

Created by MIDL version 7.00.0500 at Wed Nov 19 14:08:56 2014

B.Ors

.NBQB~

3%3,33393

>">)>.>5>:>

apphelp.dll

devrtl.dll

pcacli.dll

secur32.dll

propsys.dll

kernel32.dll

advapi32.dll

psapi.dll

crypt32.dll

msasn1.dll

uxtheme.dll

dbghelp.dll

oleaccrc.dll

oleacc.dll

ieframe.dll

profapi.dll

userenv.dll

mscms.dll

d3d8thk.dll

d3d9.dll

powrprof.dll

dsound.dll

winmm.dll

ntmarta.dll

dwmapi.dll

version.dll

CodeSignRootCert

\System32\Macromed\Flash\FlashPlayerUpdateService.exe

Shell32.dll

Advapi32.dll

FlashInstall.log

mms.cfg

.json

_pepper.exe

utilExeFilenameBasePEP

_Plugin.exe

utilExeFilenameBasePL

_ActiveX.exe

utilExeFilenameBaseAX

InstallFlashPlayer.exe

{FEC7EF28-53E7-4f06-8F56-FA6D670C8D3C}

HTTP/1.0

Wininet.dll

fpb.tmp

FlashPlayerUpdateService.exe

hXXp://fpdownload.macromedia.com/get/flashplayer/update/current/install/install_all_win_

hXXp://fpdownload2.macromedia.com/pub/flashplayer/update/current/sau/15/install/

hXXp://fpdownload2.macromedia.com/pub/flashplayer/update/current/aih/aih_sgn.z

M/15.0.0.239

Msimg32.dll

window key up

mscoree.dll

KERNEL32.DLL

=This installer is not compatible with your operating system.

.Programme d

compatibile con il sistema operativo.

.Programa de instalaci

n no se admite en su sistema operativo.

.Installatieprogramma van Adobe Flash Player ^

r inte kompatibelt med operativsystemet.

.Installationsprogram f

vel com o sistema operacional.

m opera

;Ten instalator nie jest zgodny z tym systemem operacyjnym.

15,0,0,239

FlashUtil.exe

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\html5[1].js (810 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\stat[1].php (3015 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\feejs[1].htm (5187 bytes)
%Documents and Settings%\%current user%\Cookies\CCOXLI5P.txt (133 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\xzb[1].js (6627 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\background_gradient[1] (453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\webstat_manage_hdga[1].js (821 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\showpo[1].js (2713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\base[1].css (329 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\baike.hots-20130201[1].js (973 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\ErrorPageTemplate[1] (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\httpErrorPagesScripts[1] (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\pp[1].htm (338 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\header130220[1].png (4 bytes)
%Documents and Settings%\%current user%\Cookies\AWM8IRO3.txt (94 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\Mjs[1].htm (2691 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\Mjs[1].htm (2658 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\XBKClickMonitor[1].js (350 bytes)
%Documents and Settings%\%current user%\Cookies\HASTLBQ5.txt (439 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\bullet[1] (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\core[1].php (748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\indexbo[1].js (1473 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\headandfoot[1].js (280 bytes)
%Documents and Settings%\%current user%\Cookies\2VHZGYYE.txt (109 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\C6D6MG1D\eoa.intra.baike[1].xml (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\h[1].js (9844 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\jquery-1.4.2.min[1].js (36265 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\jquery.autocomplete.search-ext-bing-20130201[1].js (22085 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\adjz[1].htm (2213 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\jquery-1.7.1.min[1].js (52778 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\footsimp[1].htm (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\21[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\navcancl[1] (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\baikelogo-header2013[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\AShow[1].aspx (6725 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\desktop.ini (67 bytes)
%WinDir%\empty.exe (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\aawgg_com[1].htm (5723 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\adv[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\newloadLogin[1].js (8653 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\3F9KLW6F\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\info_48[1] (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\jquery-1.3.2[1].js (32748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\1GGYBZUQ\index[1].css (26126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SZIS9VJF\errorPageStrings[1] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OVYHJBCC\webstat_manage[1].js (600 bytes)
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Gen.Variant.Zusy.104845_315fe78803

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Gen.Variant.Zusy.104845_315fe78803

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet