MD5: d475c9143d33f4c1a081c2d95d88ab1d
SHA1: 2bc4973e4e913daae2f0c89b23bf7784a50321d9
SHA256: 14230bab3d229fea68bf6c61664914b21c5d63a53bddbfd37ec63b36c2a5cb7a
SSDeep: 98304:1iPhCHEh99zL2OM5SbWf YFCEMt4PXK2Iu3 YpAXAN:8gHwLYQaf H74PlIOWY
Size: 6492160 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MicrosoftVisualC50, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, Armadillov171, UPolyXv05_v6
Company: no certificate found
Created at: 2014-10-06 20:55:11
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:224

Mutexes

The following mutexes were created/opened:

__DDrawCheckExclMode__
__DDrawExclMode__
DDrawDriverObjectListMutex
DDrawWindowListMutex
c:!documents and settings!adm!userdata!
CTF.TMD.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Layouts.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Asm.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Compart.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.LBES.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
ZonesLockedCacheCounterMutex
ZonesCounterMutex
ZonesCacheCounterMutex
WininetProxyRegistryMutex
WininetConnectionMutex
WininetStartupMutex
c:!documents and settings!adm!local settings!history!history.ie5!
c:!documents and settings!adm!cookies!
{1B655094-FE2A-433c-A877-FF9793445069}
c:!documents and settings!adm!local settings!temporary internet files!content.ie5!
_!MSFTHISTORY!_
RasPbFile
ShimCacheMutex

File activity

The process %original file name%.exe:224 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA0TE7WD.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 (671 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1204 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\lazyloading[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\cnxh_spr_150722[1].png (351 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CAMJS9Q3.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\20160505092249[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\getDeviceInfo[2] (71 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\baidu_web[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (1630 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mz53_160307[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (1386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (295 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\CATGCB15.html (3630 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[2].txt (333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\stopXPTime[1].xml (162 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\i_tmall[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\getDeviceInfo[1] (72 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\/t/acookie/[1].xml (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_76_160419[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\acbeacon2[1].htm (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2276 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\tanxssp[1].js (3733 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mod-dot[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (4664 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\mystyle_wait[1].gif (381 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\wea_0829[1].png (2 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\__indifference__[1].xml (510 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\banner_20160510[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\blank[1].png (953 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\2345_160108[1].eot (6496 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\um[1].js (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[1].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\tanx_ssp_fp[1].xml (194 bytes)
C:\superec.ProcessMemory.sys (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\fp[1].swf (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\img[1].png (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mod-search-bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\20160505092233[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\20160505092311[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\UserData\KTOR0Z81\tanx_ssp_pvid[1].xml (310 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (395 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (576 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190[1].png (4697 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\tipSet_ie6[1].png (746 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (395 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (3308 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\w_day40[1].png (104 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\mz_suning_150529[1].png (1 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (186 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220[1].jpg (4123 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\tanxssp_acookie_expires[1].xml (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\ico_amazon[1].png (536 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CAX03MRZ.json (222 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@acookie[1].txt (534 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\kz_tmall_20160504[1].gif (3489 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\wc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (4 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\index-sprite-160224[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_movie_3[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAEJGBN0.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 (376 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA8QYO6B.htm (2416 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\mz_toggle[1].png (986 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190[1].jpg (4313 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\logo_normal[1].png (1867 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\mz42_160510[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\acbeacon2[1].html (419 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (1332 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAGDUZGZ.htm (1121 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\lc[1].xml (126 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\20160505092220[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\y2x5_150626[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2696 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (623 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\ico_taobao[1].png (958 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\mz_ic_tmall2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\w_night40[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\yun-skin-151015[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (2379 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tip_stopXP_2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\icon_mz62_160329[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190[1].jpg (392 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\G1IVWD6B\TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190[1].jpg (392 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\UserData\2Z89WTQV\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\acbeacon2[1].html (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[2].txt (0 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\data-userdata[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\YRE36FGR\tanxclick[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\PQ1WYHPT\CAEJGBN0.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WZML95J3\CA0TE7WD.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1 (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\UserData\4XCFALMJ\/t/acookie/[1].xml (0 bytes)
C:\superec.ProcessMemory.sys (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@2345[1].txt (0 bytes)

Registry activity

The process %original file name%.exe:224 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1412618111"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "AB 35 E8 20 C9 B1 28 6B CD 9F C9 32 44 81 E0 1F"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: ???
Product Name: ??1?
Product Version: 1.5.2012.8
Legal Copyright: ??? ????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.5.2012.8
File Description: QQ??????1?
Comments: QQ??????1?
Language: English (United States)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://www.2345.com/?kqq876038563	42.62.30.180
hxxp://www.2345.com/css/common_20160406.js?v=2.28.1	42.62.30.180
hxxp://www.2345.com/time.txt?t=24382097	42.62.30.180
hxxp://www.2345.com/css/index_build3_20160503_01.css?v=5.28.1	42.62.30.180
hxxp://www.2345.com/fonts/2345_160108.eot?	42.62.30.180
hxxp://www.2345.com/images/index/index-sprite-160224.png	42.62.30.180
hxxp://www.2345.com/i/blank.png	42.62.30.180
hxxp://www.2345.com/images/logo/logo_normal.png	42.62.30.180
hxxp://www.2345.com/images/index/lazyloading.gif	42.62.30.180
hxxp://www.2345.com/images/tipSet_ie6.png	42.62.30.180
hxxp://www.2345.com/i/search0320/baidu_web.gif	42.62.30.180
hxxp://www.2345.com/images/index/mod-search-bg.png	42.62.30.180
hxxp://www.2345.com/right/homepage/zjsVersion.js?t=24382097	42.62.30.180
hxxp://www.2345.com/css/func_20160510.js?ver=1.0	42.62.30.180
hxxp://www.2345.com/css/input_20160503.js?ver=1.0	42.62.30.180
hxxp://area.wagbridge.tanx.com.gds.alibabadns.com/ex?i=mm_26632324_6858394_36942102
hxxp://www.2345.com/images/kz_tmall_20160504.gif	42.62.30.180
hxxp://www.2345.com/i/banner_20160510.jpg	42.62.30.180
hxxp://www.2345.com/right/homepage/newsChannel_20150831.js?t=1462925413&ver=4.11.3.0	42.62.30.180
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxssp.js?_v=11	195.59.70.240
hxxp://www.2345.com/right/homepage/entertainChannel_20150903.js?t=1462862755&ver=1.0	42.62.30.180
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxssp/privacy.js	195.59.70.240
hxxp://tianqi.2345.com/t/detect2009v2.php?ver=1.0	42.62.30.188
hxxp://www.2345.com/images/ico_taobao.png	42.62.30.180
hxxp://www.2345.com/images/mz_movie_3.png	42.62.30.180
hxxp://www.2345.com/images/mz_ic_tmall2.png	42.62.30.180
hxxp://ope.gds.tanx.com/ex?i=mm_26632324_6858394_36942102&cb=jsonp_callback_78067&callback=&userid=&o=&f=&n=&r=&cg=a57a6325ca34a933f3776754c945dab5&pvid=ad323fe342d763752550759c4a9f2a29&u=http://www.2345.com/?kqq876038563&fp=1.FgMJdD7CxD-Yty~PpL6IrOJ8hiT2w9R3b24B9pQOmj_oMbwcF7WiW3.gb2312.EwZgLArIiv6ALqg_2oKiDCw_4AH1DYSoWjlC_aoPzdAueoIMqgMk6AQ_4E-6agX3oCMADHoG9pAHIFRygEOaCQ_0A.Q.uci4sw
hxxp://www.2345.com/images/lvy/mz42_160510.png	42.62.30.180
hxxp://www.2345.com/images/lvy/mz53_160307.png	42.62.30.180
hxxp://www.2345.com/images/mz_toggle.png	42.62.30.180
hxxp://www.2345.com/images/lvy/icon_mz62_160329.png	42.62.30.180
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/acookie/acbeacon2.html	195.59.70.240
hxxp://www.2345.com/images/lvy/mz_76_160419.jpg	42.62.30.180
hxxp://www.2345.com/images/ico_amazon.png	42.62.30.180
hxxp://ad.wagbridge.tanx.com.gds.alibabadns.com/spf?e=Ku2AXxCecLc6sENrlwpRJ+zKwVodlz/4ZK7JCwfzrFGtaHwtoZ3wckkRoQ+RnQwLPkXYN4TNsdm8cr7YtVtoSoUHbzMUW07KMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7Br/LNxx3ABX1xsYWtGN2vY2KstHhq/YaXoM5jf8K7sE=&u=&k=173&tanxssp_t=49595
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102	195.59.70.240
hxxp://www.2345.com/images/lvy/mz_suning_150529.png	42.62.30.180
hxxp://www.2345.com/images/i_tmall.png	42.62.30.180
hxxp://atanx.alicdn.com.danuoyi.tbcache.com/t/tanxclick.js	195.59.70.240
hxxp://www.2345.com/images/cnxh_spr_150722.png	42.62.30.180
hxxp://www.2345.com/images/icons/y2x5_150626.png	42.62.30.180
hxxp://www.2345.com/css/baidu_20160505.js?ver=1.0	42.62.30.180
hxxp://www.2345.com/day_data/20160511.js?ver=1.0	42.62.30.180
hxxp://ad.wagbridge.taobao.com.gds.alibabadns.com/?name=itemdsp&o=j&pid=mm_26632324_6858394_36942102&st_type=5_8&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1
hxxp://log.gds.mmstat.com/t.gif
hxxp://ad.wagbridge.taobao.com.gds.alibabadns.com/lk?url=&pid=mm_26632324_6858394_36942102&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1
hxxp://www.2345.com/images/index/mod-dot.png	42.62.30.180
hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092220.jpg	42.62.30.180
hxxp://www.2345.com/images/w_day40.png	42.62.30.180
hxxp://www.2345.com/images/w_night40.png	42.62.30.180
hxxp://pcookie.gds.taobao.com/app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/196820111924680478/TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/171640213312141087/TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220.jpg	213.244.178.250
hxxp://www.2345.com/images/common/wea_0829.png	42.62.30.180
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/163900212226022832/TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/167250205621602380/TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/103750179980305906/TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/196950176218462707/TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/19897056328747180/TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://www.2345.com/images/mystyle_wait.gif	42.62.30.180
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/165210189382602147/TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://www.2345.com/images/tip_stopXP_2.png	42.62.30.180
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i2/TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40.gif	188.254.86.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/138420213725124971/TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/173890212987521547/TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/190240185345146474/TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://www.2345.com/images/index/yun-skin-151015.png	42.62.30.180
hxxp://www.2345.com/right/site/like/gul_default_b_v3.js?2438209&ver=1.0	42.62.30.180
hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092233.jpg	42.62.30.180
hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092249.jpg	42.62.30.180
hxxp://a.tanx.com.gds.alibabadns.com/tanx/img?type=acookie_id&id=OWi5D5caaE8CAcLyYNrLinLK&_ts=3XkUk&cad=null&cap=null&cna=OWi5D5caaE8CAcLyYNrLinLK&_lastvisited=OWi5D5caaE8CAcLyYNrLinLK,,2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs,io24at7g,ini44vvg,1,66a369b90e3f4299deff187054eb46a59c0b26c5	140.205.60.44
hxxp://www.2345.com/right/homepage/img/block1409031001/tab1/20160505092311.jpg	42.62.30.180
hxxp://jsonp.aid.alibaba.com.gds.alibabadns.com/Umid/getDeviceInfo?_cbFunction=fn_UkNjDH1L&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=first	140.205.33.195
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/16562077679543870/TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/123390111690826752/TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/171640196430212344/TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/123460167207656772/TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/177580166231838167/TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/178000163688726194/TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/186670170379626011/TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/126770134198657702/TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/192730199314517441/TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/113190196075680595/TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://jsonp.aid.alibaba.com.gds.alibabadns.com/Umid/getDeviceInfo?_cbFunction=fn_UaZfvibD&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=callback	140.205.33.195
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/164130173274074824/TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/129270176894498732/TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/115490177260777840/TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/190240181080113079/TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/171550172087131367/TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/155470185780814024/TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/164190124733007341/TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/137730136379450715/TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/173890213147801832/TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/129390207462473993/TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/183970182615491456/TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/117530184305494407/TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i1/134930189550332458/TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/188210149566741470/TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/162640200136549468/TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/192730193493502434/TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/163300145892263202/TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i2/177380111609007392/TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i3/138600177706200491/TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com.danuoyi.alicdn.com/bao/uploaded/i4/182930173993735555/TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102	195.59.70.240
hxxp://asearch.alicdn.com/bao/uploaded/i3/186670170379626011/TB2aUepkFXXXXaRXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/196950176218462707/TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/171640196430212344/TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/138420213725124971/TB2ezzLopXXXXcMXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/196820111924680478/TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/173890212987521547/TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/126770134198657702/TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://log.mmstat.com/t.gif	140.205.174.1
hxxp://ope.tanx.com/ex?i=mm_26632324_6858394_36942102&cb=jsonp_callback_78067&callback=&userid=&o=&f=&n=&r=&cg=a57a6325ca34a933f3776754c945dab5&pvid=ad323fe342d763752550759c4a9f2a29&u=http://www.2345.com/?kqq876038563&fp=1.FgMJdD7CxD-Yty~PpL6IrOJ8hiT2w9R3b24B9pQOmj_oMbwcF7WiW3.gb2312.EwZgLArIiv6ALqg_2oKiDCw_4AH1DYSoWjlC_aoPzdAueoIMqgMk6AQ_4E-6agX3oCMADHoG9pAHIFRygEOaCQ_0A.Q.uci4sw	140.205.33.81
hxxp://asearch.alicdn.com/bao/uploaded/i4/164130173274074824/TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/117530184305494407/TB2uOV7bXXXXXb1XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://jsonp.aid.alibaba.com/Umid/getDeviceInfo?_cbFunction=fn_UkNjDH1L&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=first	140.205.33.195
hxxp://asearch.alicdn.com/bao/uploaded/i1/165210189382602147/TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/182930173993735555/TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i1/134930189550332458/TB2DbJfmXXXXXX3XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/171550172087131367/TB2Sx0akVXXXXX2XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://textlink.simba.taobao.com/lk?url=&pid=mm_26632324_6858394_36942102&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&number=12&callback=jsonp1io24atk1	110.75.96.105
hxxp://asearch.alicdn.com/bao/uploaded/i4/115490177260777840/TB2spqnlpXXXXalXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/183970182615491456/TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/16562077679543870/TB263C9cpXXXXXBXXXXXXXXXXXX_!!30796562-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/188210149566741470/TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/167250205621602380/TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/163900212226022832/TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/177380111609007392/TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://tns.simba.taobao.com/?name=itemdsp&o=j&pid=mm_26632324_6858394_36942102&st_type=5_8&templetId=10687&tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://www.2345.com/?kqq876038563&r=&count=41&p4p=jsonp0io24atk1	110.75.96.105
hxxp://atanx.alicdn.com/t/tanxclick.js	195.59.70.240
hxxp://asearch.alicdn.com/bao/uploaded/i1/177580166231838167/TB2VCyIkXXXXXblXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://a.tanx.com/tanx/img?type=acookie_id&id=OWi5D5caaE8CAcLyYNrLinLK&_ts=3XkUk&cad=null&cap=null&cna=OWi5D5caaE8CAcLyYNrLinLK&_lastvisited=OWi5D5caaE8CAcLyYNrLinLK,,2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs,io24at7g,ini44vvg,1,66a369b90e3f4299deff187054eb46a59c0b26c5	140.205.60.44
hxxp://asearch.alicdn.com/bao/uploaded/i1/190240181080113079/TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/113190196075680595/TB2VcJYmVXXXXaFXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/173890213147801832/TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/19897056328747180/TB2R4aCaVXXXXXmXpXXXXXXXXXX_!!28659897-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i1/190240185345146474/TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/103750179980305906/TB2UPnKlFXXXXXAXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/155470185780814024/TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i1/123460167207656772/TB2iBsPkXXXXXcTXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://df.tanx.com/spf?e=Ku2AXxCecLc6sENrlwpRJ+zKwVodlz/4ZK7JCwfzrFGtaHwtoZ3wckkRoQ+RnQwLPkXYN4TNsdm8cr7YtVtoSoUHbzMUW07KMtWeSj3TFxp6x89zN/vaAp1a4w+6Vqh7Br/LNxx3ABX1xsYWtGN2vY2KstHhq/YaXoM5jf8K7sE=&u=&k=173&tanxssp_t=49595	140.205.243.64
hxxp://asearch.alicdn.com/bao/uploaded/i1/192730199314517441/TB2L7nanXXXXXcpXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/192730193493502434/TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i1/171640213312141087/TB2bgHEopXXXXbHXXXXXXXXXXXX_!!0-saturn_solar.jpg_220x220.jpg	213.244.178.250
hxxp://pcookie.tanx.com/app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK	140.205.99.4
hxxp://asearch.alicdn.com/bao/uploaded/i2/129390207462473993/TB2iv6OnVXXXXagXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/138600177706200491/TB2UOHvlpXXXXa8XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i1/137730136379450715/TB2nd8.gVXXXXcBXpXXXXXXXXXX_!!100183773-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://atanx.alicdn.com/t/tanxssp/privacy.js	195.59.70.240
hxxp://asearch.alicdn.com/bao/uploaded/i4/162640200136549468/TB2IugjnXXXXXaFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://p.tanx.com/ex?i=mm_26632324_6858394_36942102	140.205.34.97
hxxp://atanx.alicdn.com/t/tanxssp.js?_v=11	195.59.70.240
hxxp://asearch.alicdn.com/bao/uploaded/i4/178000163688726194/TB2rvNBjVXXXXX4XpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i2/129270176894498732/TB2wKl8lpXXXXX1XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://gtms02.alicdn.com/tps/i2/TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40.gif	188.254.86.250
hxxp://jsonp.aid.alibaba.com/Umid/getDeviceInfo?_cbFunction=fn_UaZfvibD&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=callback	140.205.33.195
hxxp://asearch.alicdn.com/bao/uploaded/i3/163300145892263202/TB2X9PghVXXXXXLXXXXXXXXXXXX_!!110856330-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i4/164190124733007341/TB27kNMfFXXXXbHXXXXXXXXXXXX_!!13406419-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://asearch.alicdn.com/bao/uploaded/i3/123390111690826752/TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190.jpg	213.244.178.250
hxxp://cdn.tanx.com/t/acookie/acbeacon2.html	195.59.70.240
ynuf.alipay.com	140.205.142.13
assets.alicdn.com	2.21.163.168

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /?kqq876038563 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Last-Modified: Tue, 10 May 2016 06:25:09 GMT

ETag: "1f14e-53276fc997b40"

Cache-Control: max-age=3600

Expires: Wed, 11 May 2016 01:07:09 GMT

Vary: Accept-Encoding

Content-Type: text/html; charset=gb2312

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:47 GMT

Age: 638

Connection: keep-alive

x-hits: 15683
008000..<!doctype html>..<html><head>..<meta http
-equiv="Content-Type" content="text/html; charset=gb2312" />..<m
eta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />..<me
ta http-equiv="mobile-agent" content="format=xhtml;url=hXXp://m.2345.c
om">..<meta name="Description" content="2345.com................
..............................NBA.....................................
......................................................................
..............................." />..<meta itemprop="name" conte
nt="2345..................................10....8......">..<meta
 itemprop="description" content="2345.com.............................
.................NBA..................................................
......................................................................
..................">..<meta itemprop="image" content="hXXp://www
.2345.com/images/logo/logo_QQ.png">..<meta name="coninfo" conten
t="U2FsdGVkX1" />..<meta http-equiv="Cache-Control" content="no-
transform" />..<link rel="apple-touch-icon" sizes="72x72" href="
touch-icon-ipad.png" />..<title>2345.........................
.........10....8......</title>..<base target="_blank" />..
<script type="text/javascript" src="css/common_20160406.js?v=2.28.1
"></script>..<noscript><link href="/css/index_build3
_20160503_01.css" rel="stylesheet" type="text/css"/></noscript&g
t;..<script  type="text/javascript" > ..var $CONFIG = {};  .
<<< skipped >>>

GET /time.txt?t=24382097 HTTP/1.1

Accept: */*

Accept-Language: en-us

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Last-Modified: Thu, 07 Nov 2013 02:56:19 GMT

ETag: "0-4ea8d68f4bac0"

Cache-Control: max-age=1296000

Expires: Wed, 25 May 2016 00:14:04 GMT

Vary: Accept-Encoding

Content-Type: text/plain; charset=gb2312

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:50 GMT

Age: 86626

Connection: keep-alive

x-hits: 833
HTTP/1.1 200 OK..Last-Modified: Thu, 07 Nov 2013 02:56:19 GMT..ETag: "
0-4ea8d68f4bac0"..Cache-Control: max-age=1296000..Expires: Wed, 25 May
 2016 00:14:04 GMT..Vary: Accept-Encoding..Content-Type: text/plain; c
harset=gb2312..Transfer-Encoding: chunked..Date: Wed, 11 May 2016 00:1
7:50 GMT..Age: 86626..Connection: keep-alive..x-hits: 833..0..0..t>....


GET /fonts/2345_160108.eot? HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 08 Jan 2016 06:01:27 GMT

ETag: "33ba-528cc515c5bc0"

Cache-Control: max-age=1296000

Expires: Sun, 22 May 2016 10:56:44 GMT

Content-Type: application/vnd.ms-fontobject

Content-Length: 13242

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:52 GMT

Age: 307268

Connection: keep-alive

x-hits: 566356
.3...2............................LP....J......................[......
..............2.3.4.5.......R.e.g.u.l.a.r.....Z.V.e.r.s.i.o.n. .1...0.
0. .J.a.n.u.a.r.y. .8.,. .2.0.1.6.,. .i.n.i.t.i.a.l. .r.e.l.e.a.s.e...
..2.3.4.5.....BSGP..................r..2..2..$..........Dr.....p.2.. .
.E.LFM../..~,...R.I*y-.Jj.%..a.V^.D....Y.7dm.....'..........:.3.a.....
..^.>.5Xn....)....8X0.f..4m....q..YcR.x...D!.P/E...E9..J...f..)....
..*.........7....1..^./N..:. .g4...[F.?.p>... .Q.".8............F..
..M....@....$}{K......2..'.'^."Z.*..C.......'p..L..*.qAB.._...pb......
...RT..}0.x.%$....].4...o{...iX..C.......A.5!<[email protected]..%..
..}T..".5.F'.a...c.........g...M..P...y......bB...A..(.;...\M..W%sT.V.
....E.`..4..PO....!...t.rS%y.........e0...Q..`m..?..k.a....Yx.)@.....Z
.]O...U.P>.w."..[.Yh..........L..e..u..k.rl.f.'Y....9..w....m......
.Ny...P`.".x.......,qc..I...Z.... h.h...,(. -...\.V.........0x.xv.....
0.......Q.(..8`.......a.....!.C.P...|..8.8k.T....j"!.<.^$i.@Nh}....
....C.q.l|../..G/[email protected].,......"....3`'.r.....)....\.......
KqE.}g.."O..........w....k....)Au...*..t......&...P..iw...iJ.Tq.......
..%'v_..N........F.:Z.....}..h...1...iDjv....:......!Xc>.Y.E5..U...
G.....x...`Z:..f.KQ;%.-%&.g....g.L.Hr..-..k.a..!l..$.....o.ly.e;..}..A
..L.IA.6)s...]C\....\.........?..n.w...dcN....9..P..j..{QeYmD.....q!;8
axh.s......5t....._U.y..2.)W..W.#".s.8`...%..`...-..KP.D. .L.6...dU4.6
...$.L.;. u...ll....r..M...*Z@.\....m....`T....*.........X.dr.$4...!i.
.y.....T.{.....:.....r....TE....K..~....&'...V.._.q....3..T..9f.h.
<<< skipped >>>

GET /images/tipSet_ie6.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Wed, 04 Sep 2013 09:49:02 GMT

ETag: "a6f-4e58bb71a1f80"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:58 GMT

Content-Type: image/png

Content-Length: 2671

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:53 GMT

Age: 29432456

Connection: keep-alive

x-hits: 3294829
.PNG........IHDR...............V....6IDATh..[}l.W.o....d.....8.Cc...D.
S..M..(..c..V'c.%|F>.1...........>.'[email protected]......=9
..^..}.~...._......>......{.8".{[email protected]....'... .._2.d..
.........-....eLg.g`.c..N...$X.p(~...5F=...b|...p......y..4CxS..Ex.c..
.b?..:.g.U.=..............R...j..hG._..Z.... .6...u. ie...d.c4.....?..
.x...._.1y8.4.rLd..(.q.0N2~....`&0...}....HL...YB....W....M..m8..V.$..
....is ...,.v...l........ ...fi...m.\F2#8/.!J..=m>.,...uJ=.o..?N.-!
j.n.....V.i=O.6|@....N..G..X.B (.!...Q&..b ..c.c7.s2.T2....v..?.H]tx..
xr......U...A..t^.....Tq...d...N.w v......M.5..|.`..oXX..!.f.r.......p
.Q.E.....r..O.N.:w...J.r.%....X..{....U..............5.A.c..2G.M.e..SR
.F....),.....ic.::..O.m51.fwO7]......PeS.}.P.......~8Q...;.\Eum....B. 
.j.U.sm>....?.d.=.....F..81~x....A./yM!O.r.:..j..L.et....G.... H...
M..B..=\..;..J_..B..M...a...o...$.h$. .$1.hd.)1.W.....q.[...Ce..7.$..$
.VcI.*y..F....'1..O..:..o%.<.z...J.....l... ........W.......=nm*0.-
y5...lg_..n..CQ..|.:.9-.....7<..~....'....c..... .......d.p#.bY.O.j
[;X.ejwO..@....#l}.WN$ ..`...A.f.>....$..3.c*C.M...b,v.P8H.. ......
........Ir.e...}......{{.W6=. *...]... ..lM. ...1..[=vOA.."M_q.0.w...;
."........:.V.G=.....C;...MO...E.H^...Q...^/K.u[...p#.9>...az.h....
[email protected]$D .=.b.W....5..".d.w*g.8....y.e...S..1-...h(.m
.PK...L!.~X....AL.....=e)9.i..]"!.....)..PVV..B!*//...L*--.."..1....B.
..Ge...9[.fL/.Z.%1...... ....c......2.......,......;.i...Qo.K......8.)
..6.kf.f{..m.Th....m......455QNN.C........A... G....Y......]v.1}.b
<<< skipped >>>

GET /images/index/mod-search-bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 25 Aug 2015 06:53:41 GMT

ETag: "43e-51e1d31be6740"

Cache-Control: max-age=31536000

Expires: Fri, 26 Aug 2016 14:09:56 GMT

Content-Type: image/png

Content-Length: 1086

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:54 GMT

Age: 22241278

Connection: keep-alive

x-hits: 89954732
.PNG........IHDR...2...b.....%opt....tEXtSoftware.Adobe ImageReadyq.e&
lt;...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:65951bab-2f93-844c-af0e-f21973d795c8" xmpMM:DocumentID="xmp.did:
F09CDD544A0911E5B818ADC372A37971" xmpMM:InstanceID="xmp.iid:F09CDD534A
0911E5B818ADC372A37971" xmp:CreatorTool="Adobe Photoshop CC 2014 (Wind
ows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59ae9fcf-fe4
1-1841-91dc-748116b09902" stRef:documentID="xmp.did:65951bab-2f93-844c
-af0e-f21973d795c8"/> </rdf:Description> </rdf:RDF> <
;/x:xmpmeta> <?xpacket end="r"?>d..w....PLTE.................
....)......=IDATx......0..0..?rfp.........b.X,...b../..^.V..,o.X.r..%.
'..p.a.B.l.....IEND.B`.HTTP/1.1 200 OK..Last-Modified: Tue, 25 Aug 201
5 06:53:41 GMT..ETag: "43e-51e1d31be6740"..Cache-Control: max-age=3153
6000..Expires: Fri, 26 Aug 2016 14:09:56 GMT..Content-Type: image/png.
.Content-Length: 1086..Accept-Ranges: bytes..Date: Wed, 11 May 2016 00
:17:54 GMT..Age: 22241278..Connection: keep-alive..x-hits: 89954732...
PNG........IHDR...2...b.....%opt....tEXtSoftware.Adobe ImageReadyq
<<< skipped >>>

GET /css/func_20160510.js?ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 10 May 2016 01:20:10 GMT

ETag: "affe-53272b9e4e680"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:19:30 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:55 GMT

Age: 505

Connection: keep-alive

x-hits: 9064
008000..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(pa
rseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))
};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function
(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=
p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('B lc;$1C[\
'7t\']=(5N(7u)!==\'5O\'&&!dN(7u))?7u:( 1R 2k);if(!5P){T.34=u(a){T.2l(R
,\'7v\',a)}};(u(){B a=58.59.4b(),5Q=$(\'9N\');if(/dO/i.2m(a)){S.1d=\'N
\\3j\\9O\\2d\\5R\';if(!$(\'9P\')){C}B b=$(\'9P\');b.1b=\'N\\7w\\7x\\dP
\';b.1p=u(){C U};b.O=\'3H://dQ.dR.z/dS/dT/dU-dV-dW/dX?mt=8\';C}if(/(dY
|dZ|e0|e1|e2|e3 e4)/i.2m(a)){5Q.1a=\'5a\';5Q.1b=\'<5S 2H="/9Q/e5.9R
" F="e6-e7:e8;9S-e9:ea;">\\eb\\ec\\ed\\ee\\ef\';5Q.1p=u(){2n.O=\'E:
//m.N.z/\'}}}());u 9T(){B a=1r(\'5b\'),1y=\'E://3k.N.z/t/eg.5c\';if( (
\'\' a)>0){1y=\'t/eh/\' a \'.js\'}T.3l(1y)}9T();u ei(b){B b=b,5T=7y
,9U=5T[1],9V=5T[2],35=1R 2k().ej(),5d=1R 2k().ek();if(5T.1f>1){1S("
5b",9U);1S("lc",9V)}1S({3m:"2A"},"5b",b.id);1S({3m:"2A"},"en",eo(b.5U)
);B c=$1C[\'4c\']?\'<dd><a O="E://3k.N.z/#4d#/#id#.1i" 1d="#9
W#" ><1e L="w#i3#5V"></1e>\\ep\\1D<1n>#d3#</1n
><br>#9X#</a></dd></dd>\':\'\';B d=\'<1e
 L="ct eq" id="9Y"><b id="er"><a 1p="q.7z();1g(\\\'es\\\')
;" H="9Z" et="U" O="E://3k.N.z/#4d#/#id#.1i" 1d="\\1v\\1w\\1x\\1I#3n#\
\1D\\1z">#5U#</a></b><1e L="eu" 1p="a0(\\\'7A\\\',\\
\'ev\\\');1g(\\\'a2\\\');1g(\\\'a2\\\', \\\'5W\\\');" 1d="\\a3\\7B
<<< skipped >>>

GET /i/banner_20160510.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Mon, 09 May 2016 10:38:18 GMT

ETag: "2697-532666817da80"

Cache-Control: max-age=31536000

Expires: Wed, 10 May 2017 02:14:50 GMT

Content-Type: image/jpeg

Content-Length: 9879

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:56 GMT

Age: 79386

Connection: keep-alive

x-hits: 485855
......Exif..II*.................Ducky.......<.....mhXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-
c060 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C9C9F7E8DBFAE5
11945D970A2420C9EA" xmpMM:DocumentID="xmp.did:2E59908FFFBC11E58440F0A9
0468F202" xmpMM:InstanceID="xmp.iid:2E59908EFFBC11E58440F0A90468F202" 
xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFro
m stRef:instanceID="xmp.iid:404A132046FDE5119004AB481E4B7908" stRef:do
cumentID="xmp.did:C9C9F7E8DBFAE511945D970A2420C9EA"/> </rdf:Desc
ription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&
gt;....Adobe.d........................................................
......................................................................
...................2..................................................
........................................s.......!.1AQ..a"q..2.....B#.R
..3.b.$r..ÄS...cs.5D'...6.Tdt....&.......EF..V.U(........eu........f
v........7GWgw........8HXhx........)9IYiy........*:JZjz...............
.........m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T....
..&6E.'dtU7....()...........eu........FVfv........GWgw........8HXh
<<< skipped >>>

GET /right/homepage/entertainChannel_20150903.js?t=1462862755&ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Wed, 11 May 2016 00:00:02 GMT

ETag: "36e9-53285b9280480"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:26:31 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:57 GMT

Age: 85

Connection: keep-alive

x-hits: 1638
0036e9..T.entertainChannel.init([{"hd":"<a tj=\"yys_1\" name=\"2\" 
href=\"http:\/\/tv.2345.com\/\">\u7535\u89c6\u5267<span class=\"
line\"><\/span><\/a>","bd":"<div class=\"mod-slide\"
><div class=\"slide-con\" style=\"width:1000px;\"><div cla
ss=\"slide-item\"><ul class=\"mod-imgbox\"><li class=\"ite
m\"><a  tj=\"yys_1_1\" href=\"http:\/\/tv.2345.com\/detail\/4807
4.html\" name=\"2\" title=\"\u6b22\u4e50\u9882\"><img src=\"righ
t\/homepage\/img\/block1409031001\/tab1\/20160505092220.jpg\" width=\"
124\" height=\"78\"><span class=\"mod-imgbox-name\">\u6b22\u4
e50\u9882<\/span><span class=\"mod-maskbg\"><\/span>
<span class=\"mask\"><\/span><\/a><\/li><li
 class=\"item\"><a  tj=\"yys_1_2\" href=\"http:\/\/tv.2345.com\/
detail\/46829.html\" name=\"2\" title=\"\u5c71\u6d77\u7ecf\u4e4b\u8d64
\u5f71\u4f20\u8bf4\"><img src=\"right\/homepage\/img\/block14090
31001\/tab1\/20160505092233.jpg\" width=\"124\" height=\"78\"><s
pan class=\"mod-imgbox-name\">\u5c71\u6d77\u7ecf\u4e4b\u8d64\u5f71\
u4f20\u8bf4<\/span><span class=\"mod-maskbg\"><\/span&g
t;<span class=\"mask\"><\/span><\/a><\/li><
\/ul><\/div><div class=\"slide-item\"><ul class=\"mo
d-imgbox\"><li class=\"item\"><a  tj=\"yys_1_11\" href=\"h
ttp:\/\/tv.2345.com\/detail\/46170.html\" name=\"2\" title=\"\u6b66\u7
95e\u8d75\u5b50\u9f99\"><img data-src=\"right\/homepage\/img
<<< skipped >>>

GET /images/mz_movie_3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Mon, 22 Sep 2014 09:46:53 GMT

ETag: "c5f-503a454a25d40"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 3167

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:57 GMT

Age: 29432463

Connection: keep-alive

x-hits: 117481500
.PNG........IHDR...............h6....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /images/lvy/mz42_160510.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 10 May 2016 03:49:22 GMT

ETag: "719-53274cf799480"

Cache-Control: max-age=31536000

Expires: Wed, 10 May 2017 04:02:42 GMT

Content-Type: image/png

Content-Length: 1817

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:58 GMT

Age: 72916

Connection: keep-alive

x-hits: 435505
.PNG........IHDR...z............R....tEXtSoftware.Adobe ImageReadyq.e&
lt;....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com
/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:
stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http
://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocum
entID="xmp.did:91695398A26DE111951AE4839BBBE675" xmpMM:DocumentID="xmp
.did:008F9B6D166211E6B714A51EB2CA2A6B" xmpMM:InstanceID="xmp.iid:008F9
B6C166211E6B714A51EB2CA2A6B" xmp:CreatorTool="Adobe Photoshop CC 2014 
(Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f873e59
a-f2fd-1845-a762-ddc29c296cfe" stRef:documentID="adobe:docid:photoshop
:d236446f-15ce-11e6-8d78-bff444c8349c"/> </rdf:Description> &
lt;/rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.a.....BPL
TE.2..e@.......@.....[3.vU.....p.L .............Y0.?......`.rP........
.E....tRNS.............................pIDATx...... ....6`......Ts....
.(."-.......a...B?............}Q.u..........VR..RJ"T.A..)...."Z..c..[h
....M....a...R:..Y@...\.W...s........>8...G...f........**u]d7...`.u
c.q2..s.....{...B....R.Gd...^...x.P..>hg.y.....f.........:J..o..h)=
..4.0U$.,G.._.bk....sL[7.TMuA.K..J......]wkd.....}.]....nz.1..q...
<<< skipped >>>

GET /images/mz_toggle.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 22 Nov 2013 06:18:20 GMT

ETag: "3da-4ebbdfb0b2300"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 986

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:58 GMT

Age: 29432464

Connection: keep-alive

x-hits: 116988473
.PNG........IHDR...2..........M}.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C9B44CDB531F11E38858E484
3E3FEE07" xmpMM:DocumentID="xmp.did:C9B44CDC531F11E38858E4843E3FEE07"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C9B44CD9531F11E388
58E4843E3FEE07" stRef:documentID="xmp.did:C9B44CDA531F11E38858E4843E3F
EE07"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>$b......PLTE......c.p.....tRNS....0J....IDA
Tx.b`[email protected]!\:..2...n..^'`u.hT.N-.....L.eR)......IEND.B`.HTTP/1.
1 200 OK..Last-Modified: Fri, 22 Nov 2013 06:18:20 GMT..ETag: "3da-4eb
bdfb0b2300"..Cache-Control: max-age=31536000..Expires: Sat, 04 Jun 201
6 08:36:54 GMT..Content-Type: image/png..Content-Length: 986..Accept-R
anges: bytes..Date: Wed, 11 May 2016 00:17:58 GMT..Age: 29432464..Conn
ection: keep-alive..x-hits: 116988473...PNG........IHDR...2..........M
}.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp...
..<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <
<<< skipped >>>

GET /images/lvy/mz_76_160419.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 19 Apr 2016 01:47:08 GMT

ETag: "7a2-530cca7aabf00"

Cache-Control: max-age=31536000

Expires: Wed, 19 Apr 2017 01:55:51 GMT

Content-Type: image/jpeg

Content-Length: 1954

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:00 GMT

Age: 1894929

Connection: keep-alive

x-hits: 8616129
......Exif..II*.................Ducky.......d......hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.155772, 2014/01/13-19:44:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:78cc6c5e-fff5-5c4
b-8271-df98b450f7d2" xmpMM:DocumentID="xmp.did:6E23EF1905CE11E6A744DA3
E280BE77A" xmpMM:InstanceID="xmp.iid:6E23EF1805CE11E6A744DA3E280BE77A"
 xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:Der
ivedFrom stRef:instanceID="xmp.iid:78cc6c5e-fff5-5c4b-8271-df98b450f7d
2" stRef:documentID="xmp.did:78cc6c5e-fff5-5c4b-8271-df98b450f7d2"/>
; </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xp
acket end="r"?>...&Adobe.d....................i....................
......................................................................
......................................................................
......................................................................
.........................!."1A2.%..................!...1....A...."3...
................!.1AQa...............|./.....7..?................q...=
.I.yY.H.d...........$...........p.............$.....o.....0...........
?.......6%.{.5:.Z..............=..A..<e.z........?.......6%.{..
<<< skipped >>>

GET /images/lvy/mz_suning_150529.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 29 May 2015 05:14:37 GMT

ETag: "64d-517318d6b2940"

Cache-Control: max-age=31536000

Expires: Sat, 18 Jun 2016 00:31:01 GMT

Content-Type: image/png

Content-Length: 1613

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:00 GMT

Age: 28252018

Connection: keep-alive

x-hits: 104814281
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:5776642C77EAE411B27BBD8E623B44CB" xmpMM:DocumentID="xmp.did:7FEA
65F005AD11E59F02A99B72EC2948" xmpMM:InstanceID="xmp.iid:7FEA65EF05AD11
E59F02A99B72EC2948" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B75C3D03A405E511AD09
C340FF0EF36A" stRef:documentID="xmp.did:17389ED168EAE411B27BBD8E623B44
CB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>..]....}IDATx.tSKhSQ.=....F[jmU0U.k.VT..m.U..
..DAA.J..q..v#.\(.. [email protected]....*.M.D.M..x..4....2....s..U.m.r!
....T.45(.&01-.,...SLQ...yK.\....o.|...=.$..>....u.Ij...k.B.5..p.8.
..~.^[email protected]...^hXV.....K.....J.
Y...o[u..y.P1B.0..,.fF....Y5......a.B.I.c...x:...1.Q'....F.0....8{. ..
D.a.B.:.'a.7t...........$..e.1;.x.\.Y.(H...[..a..EAy.;b=..Fe[...&..XW.
.K..4..2}..Z...b:..L$.........Wy....h.(.[.J.?). #..nq.A.O .;.f...^..&g
t;....?H(...e ...q....H.Vn...d..f.f!h......z..={.@fF=.C_.c.w"..`m.
<<< skipped >>>

GET /images/cnxh_spr_150722.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Thu, 23 Jul 2015 01:23:53 GMT

ETag: "15f-51b80bd861c40"

Cache-Control: max-age=31536000

Expires: Fri, 22 Jul 2016 02:26:30 GMT

Content-Type: image/png

Content-Length: 351

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:01 GMT

Age: 25307490

Connection: keep-alive

x-hits: 100462407
.PNG........IHDR...F...Z.......=W...!PLTE....._....a.^^^....Dj-.....a.
[email protected]^..-..`.D..S...........GU.j..X...$.d..|.
!.3..lvw6.,....`.......... ..B.B.`C....O...?..)....6X7...2D5D........!
...8'...*.O..e../..V.>T....0\1\...2......}.]....r.T..`^......... ..
B.B.`C....O...?9Sv.....n..Ue.j......!.!C.!.qN.'.U..1...db.X.I\....IEND
.B`.....


GET /css/baidu_20160505.js?ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Thu, 05 May 2016 10:05:16 GMT

ETag: "3478-532157a976f00"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:22:50 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:18:01 GMT

Age: 311

Connection: keep-alive

x-hits: 5681
003478..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(pa
rseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))
};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function
(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=
p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('(v(){7 A=1
2.1j||{4K:"1-1-0"};A.35=12.T.1G.1J;A.2a=A.2a||{};A.2a.1K=v(B,D){1k(7 C
 6u D){4(D.6o(C)){B[C]=D[C]}}};A.1K=A.2a.1K;A.16=A.16||{};A.16.g=v(B){
4("1s"==1y B||B 4u 2d){z 11.6j(B)}14{4(B&&(B.6i&&(B.3g==1||B.3g==9))){
z B}}z 1l};A.g=A.G=A.16.g;A.16.4t=v(B){B=A.16.g(B);z B.3g==9?B:B.6f||B
.11};A.16.3e=A.16.3e||{};A.16.24=A.16.24||[];A.16.24.4q=v(C,G,E){1k(7 
B=0,D=A.16.24,F;F=D[B];B  ){4(F=F[E]){G=F(C,G)}}z G};A.1s=A.1s||{};A.1
s.4j=v(B){z 2d(B).1P(/[-4f]\\D/g,v(C){z C.4e(1).5B()})};A.1s.3d=v(a){7
 c=0;1k(7 i=0,l=a.17;i<l;i  ){(a.5A(i)>5z)?c =2:c  }z c};A.16.1n
=v(F,G){7 D=A.16;F=D.g(F);G=A.1s.4j(G);7 B=F.15[G];4(B){z B}7 C=D.3e[G
],E=F.2T||(A.1p.1z?F.15:37(F,1l));B="2a"==1y C&&C.39?C.39(F,E):E[C||G]
;4(C=D.24){B=C.4q(G,B,"39")}z B};A.1n=A.16.1n;A.1p=A.1p||{};4(/5y (\\d
 \\.\\d)/i.21(22.23)){A.1z=A.1p.1z=1O(2C.$1)}4(/2B\\/(\\d \\.\\d)/i.21
(22.23)){A.1p.2B=1O(2C.$1)}A.1p.3s=/5x/i.21(22.23);A.1p.4c=/4b/i.21(22
.23)&&!/5q 4b/i.21(22.23);A.1p.2R=11.2S=="5o";A.16.3w=v(D){7 B=A.16.4t
(D),E=A.1p;D=A.16.g(D);7 I=E.4c>0&&(B.2j&&(A.16.1n(D,"1V")=="2x"&&(
D.15.1f===""||D.15.1g===""))),J={1g:0,1f:0},H=E.1z&&!E.2R?B.19:B.1t;4(
D==H){z J}7 C=1l,F;4(D.2w){F=D.2w();J.1g=1D.3u(F.1g) 1D.2v(B.1t.1W
<<< skipped >>>

GET /right/homepage/img/block1409031001/tab1/20160505092220.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Thu, 05 May 2016 01:27:36 GMT

ETag: "161d-5320e3f457200"

Cache-Control: max-age=31536000

Expires: Fri, 05 May 2017 01:28:04 GMT

Content-Type: image/jpeg

Content-Length: 5661

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:02 GMT

Age: 514197

Connection: keep-alive

x-hits: 2793190
......JFIF.....,.,.....)Exif..II*...............n...........t.........
..................(...........1...........2...........i...............
Canon.Canon EOS 5D Mark II.,.......,.......VVV.meitu.com.2016:03:01 18
:32:36..........................."...........'....... ...........0230.
.......!...........5...........I...........Q...........Y...........a..
.................................i...........20.......................
...........E...........q...........y..................................
.............................1...........2...........4................
...d...........2015:11:06 12:36:43.2015:11:06 12:36:43..`e.@B.........
.................\.........U......!9.....2531501901.........i.........
..............EF24-105mm f/4L IS USM..................................
.....(...................B............&......,.......,..........C.....
...............................................................C......
.................................................................N.|..
.............................................................}........
!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefg
hijstuvwxyz...........................................................
...................................................................w..
.....!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWX
YZcdefghijstuvwxyz....................................................
................................?.g....Q....:N.....8........N.........
.| ..&.kw...?.NP...i..M..k..&..i....w.G.kW....|S.].,[email protected]
<<< skipped >>>

GET /images/w_night40.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Wed, 04 Sep 2013 01:32:02 GMT

ETag: "1489-4e584c5b10880"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:37:02 GMT

Content-Type: image/png

Content-Length: 5257

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:02 GMT

Age: 29432460

Connection: keep-alive

x-hits: 52615115
.PNG........IHDR.....................PLTEooo.......f....).......4.....
.........N..C.......................iX..........3..{..................
....."........l..3R..........Q..............W.....q..D................
.p............................._........J.....:........R.. .....%.....
.........{..S......:..........f..n..4.....}..{.....,.. ..f...........\
..z.....D..L..L}}}...........i.............................n........J.
.......v..............X.....5..t..A..............}.....@..............
......Y.._..9...........]..'........R..n..0..W........v.....9..S.. ...
.....).................Y...........)...........z......................
.............R..J........:..H.....s..............:..............B..z..
.........Y.....!..7.....0..Y...........)..l........"..K..U..y..Y.....{
..H..A.............r......L../.........P&......tRNS...................
......................................................................
......................................................................
......................................................................
...........................S..%...8IDATx....t.E...1.5.p.P.....H...K.h-
zy...z.i<k#m..........iPQ.@.....$R-.....Z-..)X..IA).J.Z.g}..K..?...
.........{.......gg...{..5o.$.<...O|`..[>E-..0.Gc.A.E.... v...8.
......nWy....rb....jNx...Yh.....2...x.R5....#[m...h..e...!Uc..h<...
[email protected]..../..`.........N.#.....#{m...x..... ..M....M
...A....64`.............e..C..!.P$...r.y..$...}AT....[-cb.^..M.....xd.
......%a.`......G...M...~.y.q..P7...(!.I.q7X..#.....q.,-p.\u.|....
<<< skipped >>>

GET /images/common/wea_0829.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Wed, 10 Sep 2014 06:11:48 GMT

ETag: "88d-502afed573100"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 2189

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:02 GMT

Age: 29432468

Connection: keep-alive

x-hits: 113967994
.PNG........IHDR..............a......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:59204371319A11E4973ED11B
DE3C05F8" xmpMM:DocumentID="xmp.did:59204372319A11E4973ED11BDE3C05F8"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5920436F319A11E497
3ED11BDE3C05F8" stRef:documentID="xmp.did:59204370319A11E4973ED11BDE3C
05F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.......ePLTEr.....)..'..0.. ..1..Y........E
..-..A.....b..#..... .....(.....*.....(..(..t..O..%[email protected]....
....!..8..L.._..1........C..>.....2.....5..w...........6..{........
......-.....$.....G..v...../..1..2...........g........E...........(.. 
.....S..1.....3..u..Z.....u..!..7.....t.....6.....7........`...w.d....
..........:..,..n..4..(..6..k..*..,..,..?..V.....I.,1...wtRNS.........
......................................................................
...........................................e....IDATx....VUQ....N7'l0.
A.D..l.EB.lQJE..e_?......g.u.....T.E.[7...ME.J..?......Ra....9"..i
<<< skipped >>>

GET /images/tip_stopXP_2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Thu, 10 Apr 2014 08:46:27 GMT

ETag: "661-4f6ac40b11ec0"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 1633

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:03 GMT

Age: 29432469

Connection: keep-alive

x-hits: 85759081
.PNG........IHDR...H...C.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:819736BFC08A11E39E8CF5CE
7DFF4371" xmpMM:DocumentID="xmp.did:819736C0C08A11E39E8CF5CE7DFF4371"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:819736BDC08A11E39E
8CF5CE7DFF4371" stRef:documentID="xmp.did:819736BEC08A11E39E8CF5CE7DFF
4371"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..8.....PLTE..&.....Sh.....y....Ey....8...j
....j......z..s..r..q..t.....|..x..x.....w.......p\..l...........x....
.s....n..w..wl..m..o..{..o...........n..}..~.....k..l..p.............@
w..o..U.....v..m.....b......@tRNS.....................................
............................{.D....IDATx...]W.0....*..........Q.J.....
.#.t........?g..1.............c....R..Ne.qSM.\......a1'..(*..Q.j.s.(.z
.P..Y../...i.ANeH..RO.Q...2D..(....b.Ne.....gd......P.......r.}.M.....
.>.#.\.qo..&j....<..8...b.T;.i.l..i...(.....1f..,...:..6.N?....l
..N.."[email protected]....*......
<<< skipped >>>

GET /right/site/like/gul_default_b_v3.js?2438209&ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Wed, 11 May 2016 00:00:01 GMT

ETag: "c058-53285b918c240"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:20:05 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:18:03 GMT

Age: 478

Connection: keep-alive

x-hits: 147
008000..T.gul && T.gul.init([{"category":{"name":"\u6e38\u620f","url":
"http:\/\/wan.2345.com\/?frm=wzdh-cnxhyx&referer=wzdh","flid":"f2"},"s
ites":[{"name":"\u4e00\u5200\u7206\u6a59\u88c5","url":"http:\/\/bdtg.9
377a.com\/sousuotg.php?id=12096","type":"2","ggid":67425,"sex":0,"jing
zhun":"\u9875\u6e38","province":"","city":"","unitPrice":"3.40","md5":
"75c78ba718a0a1b1e6a45151db0eb0ed"},{"name":"\u6b66\u795e\u8d75\u5b50\
u9f99","url":"http:\/\/g.wan.2345.com\/s\/1\/1254\/566.html?frm=wzdh-c
nxh8","type":"2","ggid":68331,"sex":0,"jingzhun":"\u9875\u6e38","provi
nce":"","city":"","unitPrice":"3.59","md5":"1d6a47e436c83f394aed0de798
903382"},{"name":"\u4e00\u5200999\u7ea7","url":"http:\/\/g.wan.2345.co
m\/s\/1\/1254\/118.html?frm=wzdh-cnxh-cqby","type":"2","ggid":68332,"s
ex":0,"jingzhun":"\u9875\u6e38","province":"","city":"","unitPrice":"3
.59","md5":"8c12279a13e9932efce5f20ca7fb8ebb"},{"name":"\u53d8\u600199
9\u7ea7","url":"http:\/\/g.s8dj.com\/s\/1\/728\/37629.html?uid=515372"
,"type":"2","ggid":68156,"sex":1,"jingzhun":"\u9875\u6e38","province":
"","city":"","unitPrice":"3.10","md5":"40a9a78d50d2596a8a569d3024f487b
f"},{"name":"\u53d8\u6001\u5f81\u9014","url":"http:\/\/news.9377ne.com
\/6886\/","type":"2","ggid":68637,"sex":0,"jingzhun":"\u9875\u6e38","p
rovince":"\u56db\u5ddd,\u5b89\u5fbd,\u7518\u8083,\u5185\u8499\u53e4,\u
6cb3\u5317,\u897f\u85cf,\u6e56\u5317,\u8fbd\u5b81,\u5c71\u897f,\u798f\
u5efa,\u5b81\u590f,\u6d77\u5357,\u5c71\u4e1c,\u5e7f\u897f,\u6c5f\u897f
,\u5409\u6797,\u6cb3\u5357,\u65b0\u7586,\u9ed1\u9f99\u6c5f,\u6d59\
<<< skipped >>>

GET /Umid/getDeviceInfo?_cbFunction=fn_UkNjDH1L&tokenid=2kkSfq2OWuY0OhAEVRA0Yap9gkEYUcqs&acookie=OWi5D5caaE8CAcLyYNrLinLK&n=first HTTP/1.1

Accept: */*

Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: jsonp.aid.alibaba.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Date: Wed, 11 May 2016 00:18:04 GMT

Content-Type: application/javascript

Content-Length: 72

Connection: close

X-Content-Type-Options: nosniff
/**/ typeof fn_UkNjDH1L === 'function' && fn_UkNjDH1L({"result":false}
);..

GET /app.gif?&cna=OWi5D5caaE8CAcLyYNrLinLK HTTP/1.1

Accept: */*

Referer: hXXp://cdn.tanx.com/t/acookie/acbeacon2.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pcookie.tanx.com

HTTP/1.1 200 OK

Server: Tengine

Date: Wed, 11 May 2016 00:18:02 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=OWi5D5caaE8CAcLyYNrLinLK; expires=Sat, 09-May-26 00:18:02 GMT; path=/; domain=.tanx.com

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Te
ngine..Date: Wed, 11 May 2016 00:18:02 GMT..Content-Type: image/gif..C
ontent-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa A
DMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=OWi5D5caaE8CA
cLyYNrLinLK; expires=Sat, 09-May-26 00:18:02 GMT; path=/; domain=.tanx
.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache.
.Pragma: no-cache..GIF89a.............!.......,...........L..;..

GET /bao/uploaded/i4/196820111924680478/TB2zW4GeXXXXXcrXpXXXXXXXXXX_!!17159682-0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 12182

Connection: keep-alive

Date: Tue, 11 Aug 2015 13:24:05 GMT

Last-Modified: Wed, 29 Jul 2015 03:58:17 GMT

Expires: Fri, 08 Aug 2025 13:24:05 GMT

Cache-Control: max-age=315360000

Via: cache54.l2de1[0,200-0,H], cache49.l2de1[0,0], cache3.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 23626437

X-Cache: HIT TCP_MEM_HIT dirn:6:632273062

X-Swift-SaveTime: Thu, 18 Feb 2016 06:23:44 GMT

X-Swift-CacheTime: 298882821

Timing-Allow-Origin: *

EagleId: d5f4b28814629258826542112e
......JFIF.....,.,.....C..............................................
......................C...............................................
........................~.............................................
..........................................a...........`.. .9J.....o.0.
..P. ....I...'..&....=.$aU......|.R.Z..-....`..f.w.|.5.n.t......t.4...
/.....-Qa..... ...2W.q...c:.....X.V...!ty.........Q.].k.ja..r.4.tx. 1j
..s^..u..)j#...v.~T.5.>.g.Y..G...b....a.J...=....uxG.......... IKU[
.Y;cY5 .7eK..%.9-....C.Y.. .H....../..2F..[.u.c..2...0.....j.tZ...G..K
%t.....B.<.$..8M.qh..9.?.z......[.2V.E.1L. .v...J.b...V...=Y..l.p.X
..dA.s.....;])...=LE.e..,.....n%o...."....`..}7...$$,....T.....W.H...%
~_q{..l.Vi...'.0.A..3a.{qtm....*............Y.7...z.9.).FQZ..?)).:..F.
....B...`.....F..J.X.cHC_..f.....">..e.toD.O..:..f...}R...V.E...,iX
..A.........u,8A..].-].....G..l..k.|[email protected]"r6........*.Q...`
t..E...h'...l.u.u.)2..\Y>h.._H{.v..a.f.Vs&.wM.....g.>........au.
L.V.....L.F......86po........#[email protected]..%v...d.Y][email protected]'
._?......o;lxE$S..SD.F.6Z.7...,(YF........L...^...9...@....)..........
..................!..."..#12C.........."hlMv8Zy.....8..Z..B......V.Y..
=O..*..M.-.^..o......T_..Eo..\........Y.k..:~#..`^C...\..!I..g........
....m. ..Z.0}G).....q.......O.../..-\4W..};.d.`...N.88C;.b.-..|.]..<
;>...x......-.!G...o..-.hYp.W.....(..H..3v....Xn...-..l\...O/V.{<
;........D..$.^veo". ..!...i.....\.p...D..&...l^..O.~~...'.`C Y.u..Ue.
.e..6.)._...!a..6;.C...e.C.(aD...fn^....8.k...%..6D....X.1.Cn\....
<<< skipped >>>

GET /bao/uploaded/i2/163900212226022832/TB2mWKbopXXXXaJXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 13127

Connection: keep-alive

Date: Sat, 07 May 2016 20:06:33 GMT

last-modified: Thu, 05 May 2016 03:58:57 GMT

Expires: Sun, 07 May 2017 20:06:33 GMT

Cache-Control: max-age=31536000

Via: cache32.l2de1[0,200-0,H], cache5.l2de1[1,0], cache10.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 274289

X-Cache: HIT TCP_HIT dirn:10:137942557

X-Swift-SaveTime: Sat, 07 May 2016 20:29:49 GMT

X-Swift-CacheTime: 31534604

Timing-Allow-Origin: *

EagleId: d5f4b28814629258827212115e
......JFIF.............C..............................................
......................C...............................................
......................................................................
..E...........................!1A.."Q.2a.#Bq.....3CRbr...$&S.....%D...
...............................2......................!.1.AQa."q.2....
.....#Br..............?...m.P.(rp.<....E`.2.....,S....&D.Rd..).P..]
.!...i..*R.....l.h.s...B...!7..e1Q...V..,.JO..~....w.......f}Z....].%.
nu..T...........7.6.1 ..ka..`............|j...v2.XM.....R.d.Q...V?...5
V.G`i]Y..K....R..{.$.$.d\.....<X...o.2e.OS...v..^G...iL......].....
...,....."..X....)....\..#..d...$.`M....m-.p...../..."..X..X.1.j.6..g.
k3..R.0.....Cl..r...... .'....8j..\..4.c.]4..C.&.z...nW.{...O=4.}L....
u....l......T8..|.... .X`.$...!Sj.......G6...u....Nq..{..DF.p7....x.."
......V...}M........f....[[email protected];.]..'k... .G...
4..U..LfT........Hst).n.Q.4.l. ....9^....nu...*.\.....)-..UVj#..[..~..
.....%..:...hNRrT..K...Q...Ck...u>s.r..(#...[....k...M.O.D......h.a
KY...C...=..n...&... e..aZOvp.o..H.u..Y.=...:...*....F.'..K.7.Z {.....
AD....'..-.\..\..n_.. ...6..A.H%JQ..u$...b.<z..sR.|. ......-..:.e.*
.R{[.I"..M......f..Es..^ #h...8......7...D..0._..........3.J.s2fH.l.I.
[..V...F[......O...{...c.mk.n...x]3H.../..`t.-.$nR.f.Q`...'...[..J.z4*
.]..d.'....W..2CM...uKH..U...-V.-..... "...Sj)a..v.p.Oa...h.~..T..)*..
.us.....j.W.6.Bj.E....ieu.mY..z....e).s..p..H7..z^..sk.$...3..f|....g,
.T.u.....M[....7...l.....)n.Tb...u).....o*..6.$.....l...^..N$G..u.
<<< skipped >>>

GET /bao/uploaded/i3/167250205621602380/TB2jCwGnFXXXXc_XXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 12351

Connection: keep-alive

Date: Wed, 27 Apr 2016 03:13:37 GMT

last-modified: Sun, 24 Apr 2016 12:38:57 GMT

Expires: Thu, 27 Apr 2017 03:13:37 GMT

Cache-Control: max-age=31536000

Via: cache24.l2de1[0,200-0,H], cache26.l2de1[0,0], cache5.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 1199065

X-Cache: HIT TCP_HIT dirn:9:652281303

X-Swift-SaveTime: Thu, 05 May 2016 04:11:14 GMT

X-Swift-CacheTime: 30841343

Timing-Allow-Origin: *

EagleId: d5f4b28814629258827832124e
......JFIF.............C..............................................
......................C...............................................
......................................................................
..C..........................!.1.."AQ.a2q...#B..R.3b....$C.....4S.....
..............................2........................!.1.AQ."2a....B
Rq.#.$3..............?...g..GL..3..u........Z1.WF7% .......](....}m..z
.".....g......o4.#IF>.d.6.1.....................................Y.d
..HMK3.h2.)...A....i.Y...h_.- v}M9x.]..nn....J..My.y.4j..rV.A@..@..@..
@..@..@..@..@..@..@..@w?R?..Nk.LKKZR\k...>[email protected]=u.s....R.i
T....@........~...rB5&...QCV.A@..@..@..@..@..@..@..@..@..@..@w....."*.
;{..>..a?.q[.H.....z...Ff..c..dH.....Y8J.oE....WN.3.w.*.q.-..-.....
..B...E'.)J...............................?N-.8.z-R... J~..;..2....8. 
....M.........mM..s,@\.2S...0.HI#.;.........d....O..P.@..@..@..@..@..@
..@..@..@[email protected]._s..#(......X8%*.#>..r.=...dJ....B}.^.a..-)N
G... qR..Hp..'..*.:.=....Q....}...}1.. .#...WD..-..U*..@..@..@..@..@..
@..@..@..@..@~..:.Mj4$."=....N.P..#$.sU.I.:T'V.o.;..7>...":.R....t.
'8..G..Z.e.....x?.:..#R#......3......{.l..fs.......P..P..P..P..P...h..
....E.- o.i.. ..:..I kb.....y..Y.Z>..,7e._..Z. ....V.............g.
........'...3.V......C....%Q.....G...._.:........|#jX...f.u..TS..]J..I
W.2I.....J.2jE..Dz$...*...i....e?..c.%..D...i..t...Gb...kY.%\8R9.....I
..c....|J.;.Mxh..$)2-.'<.H..J...<...... "._..L....Z....T..=._.5/
.D{.....M...C.(...[[email protected]>O....B.y..RL.i7.1.W7%<.....{....F
<<< skipped >>>

GET /bao/uploaded/i3/196950176218462707/TB2K.kmlXXXXXbkXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 14448

Connection: keep-alive

Date: Sat, 12 Mar 2016 00:17:31 GMT

last-modified: Mon, 07 Mar 2016 09:32:00 GMT

Expires: Sun, 12 Mar 2017 00:17:31 GMT

Cache-Control: max-age=31536000

Via: cache28.l2de1[350,200-0,M], cache17.l2de1[351,0], cache8.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 5184031

X-Cache: HIT TCP_MEM_HIT dirn:11:522079781

X-Swift-SaveTime: Sat, 12 Mar 2016 00:17:31 GMT

X-Swift-CacheTime: 31536000

Timing-Allow-Origin: *

EagleId: d5f4b28814629258828442132e
......JFIF.....H.H.....C..............................................
......................C...............................................
......................................................................
.G...........................!1A.Q.."2aq..BR..#.....$3br..Cs...'Tc....
...................................;.........................!1.AQ."a.
..2q....#...3BCRb...$4.............?..N.!B...P.(B.!....B.!B...P.(B.!..
..B.(...Zw.:bV...|h.@)RN....q......:.....hax.^.T..'.{v?.......e......U
....o}J0n.N...#.V;..W....P?]Zv?.._W.3......{...g...?-..d...J ....Vr...
..>.p.GkmR.....C.....>...q [email protected]..~.._..\.m1.."....#W.
....9.y7}/d../...._.sO.c....&*...*.......7.^..`..4...i_.;.n.........".
.9.79...zX.x..*A....Y.......<..S./m....N0.....c....u.^V..,..pA4p...
.9kw...1.E\........%.)."N:s.G.#:[email protected].#:..KB.T.q....FtA.'#.FA.SG
....}[email protected].:..I.I......k..S..ixA/.m..Ka`...Z8A..6.G..6XN.
...'...S..p...U.*.K.Fu....6T#....8I3.b. .K..G.U.$gF..Y.QP.{...$.....l,
....n....lM.J..I...G.#:...^..%.^..6.L..~..._e........9.c.PU.?....YYF..
..#...0....kw.x..j...i...=.4..*.)Xt...F...<.N.rRac....i.N..._.%..?n
%.v.b."9Z/(.....&e.,..p.....4q..M......\[..[Q..mATF.J2.}g(S.........R.
.c..h.u.....N..z.gPb=.^.Z...N.......-....kB...";...Q....u....X(vY.. ..
....D.R.MvL........>?..S.._....H.v.....k4.9.Q.....1.....,.d.g.L3i..
..m)qf@i(...icqlgv...r..$.B.i..(m.N~.?6[T}...f..Ldp..a.....4.v..}..6U.
.......u.......NR._.....s.Z...n.A...=........3V..$.....[*..S.>.c...
[email protected].)uL.a{.|)...jqqQ.bK......\..8......BH..[.....E....
<<< skipped >>>

GET /bao/uploaded/i1/165210189382602147/TB2LWI9lVXXXXcwXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 31716

Connection: keep-alive

Date: Sun, 03 Apr 2016 03:24:38 GMT

last-modified: Wed, 30 Mar 2016 03:24:03 GMT

Expires: Mon, 03 Apr 2017 03:24:38 GMT

Cache-Control: max-age=31536000

Via: cache18.l2de1[657,200-0,M], cache56.l2de1[659,0], cache9.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 3272004

X-Cache: HIT TCP_MEM_HIT dirn:10:310478492

X-Swift-SaveTime: Sun, 03 Apr 2016 03:24:39 GMT

X-Swift-CacheTime: 31535999

Timing-Allow-Origin: *

EagleId: d5f4b28814629258829472138e
......JFIF.....d.d.....C..............................................
......................C...............................................
......................................................................
...:..............................!."1.A.#2Qa.B..$q.%3R.b.............
........................I........................!..1..AQa."q..#2B...R
.....$3b.r....S...%[email protected].
.N.x..s7J.........v.....l_w.....S.s'i..#(q.....8...........O.....d..2.
_.R..r..c.XM....F..bG.....YO...z..c.v...F=....h...k..]A....{.}.9GY.JS.
[email protected].>.w.. ...H.e.....,.7/...&S]....2%8.........l.A..R..
<[email protected]}..F...hZ<..H..(P.... 1P.N......^.
.WX]~......"..qz..nZn.]..Z.....}B.E....."....m.V.e.[..LD.......|..<
.....;...n...g]J(...v.E.G..J...w....w... ......yx......;.....y...Y..~.
....y?".g..(.{l.".*..jV )..9......K..2....i4<...i..../.4O8....1L..J
_.H.u...vU#$VK^....^&L...<2.z?....3AYq[RE. !^>.IS.T...[.......z.
h....u..iRB.<.I....A.#.......Z.W.c.67u....q.g..r........;I.n._.'..U
TDEU.E.....ZZ!i...u$.R.  .F.;....H.UTd........wm......X......9K.......
."..;. ..H...$i.E..Q:.j...:=...-O..........|N..1..4.^..]KV.a...C..nRy~
{z...#PJ:(...:(...:(...:(...:(...:(....U..W...^.:T/....wt.w]...&...)..
o../.G...x.....*..."..B..."....8i...p.....v..H2\`Igb.. ........(......
Q\q.G...i.3vU.#,V.. .E...?~..?....x.......o9w..o.i......S...........$.
z09.a.......$*..Z.%./..;...u?.B.....n,.ogT..RVNs)[email protected]
.V.H..v....h..B...?rm[~..nf<.$../8...................i......-.$
<<< skipped >>>

GET /bao/uploaded/i2/173890212987521547/TB2CFOIopXXXXXaXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 16883

Connection: keep-alive

Date: Tue, 10 May 2016 06:37:04 GMT

last-modified: Fri, 06 May 2016 04:52:02 GMT

Expires: Wed, 10 May 2017 06:37:04 GMT

Cache-Control: max-age=31536000

Via: cache36.l2de1[0,200-0,H], cache59.l2de1[0,0], cache9.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 63659

X-Cache: HIT TCP_MEM_HIT dirn:2:654115609

X-Swift-SaveTime: Tue, 10 May 2016 17:29:00 GMT

X-Swift-CacheTime: 31496884

Timing-Allow-Origin: *

EagleId: d5f4b28814629258831062153e
......JFIF.............C..............................................
......................C...............................................
......................................................................
.P..........................!.1."AQ..a.2q..#B...$Rbr..%3.....4Ce.....&
67cds......................................@.......................!.1
.AQ."aq.2.........#3BRbr..$4%CS.................?.k....kv .$6...Q....N
..&.. ...f......2...1..NT5)...#2HU.{.H."Be7A...."R0F;.......R...WY....
I.....g.....`...y.........6N/ eyI$.o..m..G..#{..E....(.8.D....)5\{....
.N$.7Q.....N.H........!H..4|.L.....\ 8c....e,....ZU..6...N..:J]...!.M.
{.bo.......N...........j..Z`.{.Wd.N.......jre.....".....(=.eA.l8 ..-7.
.....4......}qb.....F...3).........i.B....1..7~O>....T.d.q.F.,C\...
h..A.IET...X......m.UWa..z ......Y..i...SD.F..e....tL4.4....p...}. ...
..4.p.....v'k7. .N......il..}.b10.U\..$.3(.!..k.>..U...W....E...DY.
........WBF.....du...$a2..D..R.(.)aa.'.<k..!..G....-....(..St.....G
{.Yk....9.2./cgRT......IN..8J.Q.I k~x......52...6.8....;..,lR.7...b..%
J$.WQ.......o\@...r_E;.1U.P.K.A.j..IR.JS.C.}.....ih%,.H.IL....lH....J.
.o.7>[.8..N..].,Z.....|....a.K.:...T.9.(-pA.q.m....E...k....c.b.1(5
.#".K[.bjd.J.VHD.H..?t.|H....#)k..=.v..|0..|.i,P.EHw,.{a......(..!.k~.
......AIX9bx..bYM...^v...1....AP...-..W.r.Q;#H..y.c%..!o..4.D.l!.U..C.
IJ0a.OH..:....|1..b....=5V.-..d9.Gt.**#....pO.#c\p...%.E.ZE.G=....f..A
.K..g.*^.........$sf..C*..W...;i..'*..z9"k<J....>.[.0...O"."..,.
.[5. ..tBp. .%[email protected]...#.G...D.>S.Q .Px6..8sXJ...8.J.#u.Q.4
<<< skipped >>>

GET /bao/uploaded/i1/190240185345146474/TB2cbj2iVXXXXaAXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 19296

Connection: keep-alive

Date: Fri, 25 Mar 2016 23:26:56 GMT

last-modified: Wed, 23 Mar 2016 09:07:27 GMT

Expires: Sat, 25 Mar 2017 23:26:56 GMT

Cache-Control: max-age=31536000

Via: cache5.l2de1[0,200-0,H], cache61.l2de1[0,0], cache5.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 3977467

X-Cache: HIT TCP_MEM_HIT dirn:3:285915113

X-Swift-SaveTime: Sat, 26 Mar 2016 07:48:50 GMT

X-Swift-CacheTime: 31505886

Timing-Allow-Origin: *

EagleId: d5f4b28814629258831762157e
......JFIF.............C..............................................
......................C...............................................
......................................................................
..E..........................!..1A."Qa..2q.#B...3CR...$br....%...&cs..
..................................I........................!1..AQa."q.
.......#2..BRbr...$34Cc.........5Ss.............?..M>"g0...........
.....YX.\.1......G....`%..&.9.}..0M.T......r.....0S.....~.C ..G....b..
.q.z...`..&..."..|.M...k.OuNCBD..x.*[email protected]...
..t..<.'...*...WZ...h}...J.Z.Z-.".....| .....z..... .... ...i:...2.
..H#..X....ap*.s.......CdK..e.:....'.hV.M.1 \.S.*..4.......a.....,..S.
.r.4.............^.........n........x-.........O....c..q..j....^p{ p..
Y...Ki6i..%j8.]{#xZ..>#8(.E...Z..t..[.,!&...RJ.ko.' &.b.....B.H.:..
!z.g<\.../?..v..BK".Z....&......`BJi.WN...S)..Z.z`BG*?0....G!.o.. .
...)b.....8.n......\].d......#..w.... ....V.........y$P.....T'....m..\
...........1Q..8[?G}.o.6>J,G....u.Rr.|.Q.!..9.NI.S.r&A.0.-8.T|.V.S.
/....S.<.....M.-$..#.3.C.V..]..{8^f...q.er{[email protected]........*
.k2.3V...a..p..{....O....sr..........aU..i..CZ,,r..=..c..1...z.b..."..
.'.......[...)..bD.[ih%D...:....F.....F.}...BSt...!CY...T.&.T9........
,..........u.........3-.F.q.G..XFy..io.[...k'Q..&.)...h.....:g...F_.6.
.4..-([email protected] "..8..P.3C..*>!...|....V....dt.......9..) B......v
...dn.x....qk..(O....{.[.....TP..I.....P......y'Bw....\85!)......7...v
......L.h'N...q........1....t...%.2H.7$.M.za..Rr..4Ho.p!7....)W...
<<< skipped >>>

GET /bao/uploaded/i3/123390111690826752/TB241poeXXXXXbBXpXXXXXXXXXX_!!11442339-0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 13617

Connection: keep-alive

Date: Sun, 30 Aug 2015 05:48:45 GMT

Last-Modified: Mon, 27 Jul 2015 16:30:55 GMT

Expires: Wed, 27 Aug 2025 05:48:45 GMT

Cache-Control: max-age=315360000

Via: cache63.l2de1[0,200-0,H], cache16.l2de1[1,0], cache6.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 22012162

X-Cache: HIT TCP_MEM_HIT dirn:3:838613949

X-Swift-SaveTime: Fri, 20 Nov 2015 15:47:23 GMT

X-Swift-CacheTime: 308239282

Timing-Allow-Origin: *

EagleId: d5f4b28814629258876212394e
......JFIF.....H.H.....C..............................................
......................C...............................................
......................................................................
.B..........................!.1.AQa.."q#2...BR..r..Cb...$3S..E......
.............................3.........................!1..AQ".q2a...#
3..BCR...............?....\..<E.,..1....._td....4.)`..}9!.D...?....
....>$.ZC.2.....VT....u*.xm*f`...R].......R.s......ak.8..F.H].=....
[email protected]...?rh..2][email protected].
MA.!.....$(......7..XyX..$..m..V..Y.........0V....$..^...3N...UM......
....8.k#..............1.......JQ..i.......*W'[email protected]..{.........
[email protected]......?.T......j.N..<@<.R.`XZw.n|M.l....O4..
ZZ[.OO\.../.Y.....G..oO..%...,.....A.$.5..R.p..G5.!v....<......O...
.&.X.....`.....B.@ .6....E.C...*lrR*q`.....ic......V.1..4.~...8...1..'
......RB...<VtDC.B.d..p(.$LZu!......-}.......I..)......i.h.{)....?Q
.....;.@.(......08$....=...Q.;K..6...S\l.. .z:..Q..K`\....Pi.6..&.<
....F....J..l.X.....R`...L_......[O.2.P.4.K1Q....1.M.....$....e..!C..&
lt;....6.4n.p$ma.R{...M...\.[Jt '..-....-.{]'...%...l#........U.r..'..
..&F..X.S..K ..*Oq.i0,kZ.....V&...K....S..3m....%8.......I.z.......D.7
...f:O..[....f.q..$!_j6..O.%[email protected]~.... ...........(.b./.....
...^..".P...H.].&U.JR.$$.:..H......q.<..*[@%..[.......Af..~.....e..
BO.Z.J.j6.....5..[cQG....[...5GO~"4..e. qi...jP......kn....$.)9.2.....
...r............`....G.P ..Oj......F....^X....il..%........"5.n;..
<<< skipped >>>

GET /bao/uploaded/i2/171640196430212344/TB2TFmdmVXXXXaXXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 21780

Connection: keep-alive

Date: Sun, 10 Apr 2016 15:41:01 GMT

last-modified: Sun, 10 Apr 2016 15:40:19 GMT

Expires: Mon, 10 Apr 2017 15:41:01 GMT

Cache-Control: max-age=31536000

Via: cache46.l2de1[0,200-0,H], cache33.l2de1[0,0], cache6.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 2623026

X-Cache: HIT TCP_MEM_HIT dirn:9:549913515

X-Swift-SaveTime: Sun, 10 Apr 2016 16:38:02 GMT

X-Swift-CacheTime: 31532579

Timing-Allow-Origin: *

EagleId: d5f4b28814629258876912398e
......JFIF.............C..............................................
......................C...............................................
......................................................................
..G...........................!.1.AQ.."a.#2Bq...3....$Rbr..S....4Ccs.D
d...................................E........................!1..AQ.."
aq..2......#B...3Rr..Cb..$..%5S...............?.....BX...%..`BX...%..`
BX...%..`BX...%..`BX...%..`BX...%..`B.zS.y?S.Q..i.~..{..&S...p..%@]&..
W......(.'.}.r9.c.Q... ......../....gm.H..3 .f.....R.......i&y....G...
..E^..[d.I...C..5...k.{m.....T:n...%.nQ4.Y..w$..9...i.<.HN}5...U.ju
T:._.....SV>.Op...?..f.K.B..L........<..B].?j.?y..-....2.~V.CG.p
......J..>..h...*^`...L...h?}@..G....-v.5[..?..O......e.3..=7l..l.7
..........B"o.8.X..V..........F.?U.d.1.5...'.h.Y.c.......hy...........
R.....;......$%.&.e..P./*.bl.e%...L.`0..........Q.)JG.!~w.,p!y..`BX...
%..`BX...%..`BX...%..`BX.../V6..C...Ns..:....k..t)H.......$.2.hYWL.w.a
.<..V..........mbu..f....M$ .......G..................A.6.......*..
..v.y..5..k.C.....=..qd.{u.:..y...666.m.=U.........1Mx4.I.(.......?...
...../..........J......?....cD...D4.e...........W&..k..R)...LI..X...-.
..%.R.......u.$.....0A.1...h...s...... ../.B\..I?zh.C%...^.^.}.u...}5.
(Y.6.........I....Dt..S.K.n**J._..r.L...a...5.w.t...L.J.7-2.......o;..
(..|.!~K..'........;.B..z..*.U..^....U.*....e...j....]..>... ....t.
.....RZ......=.k....La.$....r...'.TG......"~Q.N...N.....6V..!..h$rU.X.
...:LR.....O.S.....#z..-....FJ`p..kw..S.Y^.mF.?N..`.9.>.....*Dj
<<< skipped >>>

GET /bao/uploaded/i4/126770134198657702/TB2LvGmgFXXXXaCXpXXXXXXXXXX_!!23282677-0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 18614

Connection: keep-alive

Date: Thu, 05 Nov 2015 23:29:26 GMT

last-modified: Thu, 29 Oct 2015 15:15:19 GMT

Expires: Fri, 04 Nov 2016 23:29:26 GMT

Cache-Control: max-age=31536000

Via: cache26.l2de1[0,200-0,H], cache54.l2de1[0,0], cache9.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 16159721

X-Cache: HIT TCP_MEM_HIT dirn:11:873723086

X-Swift-SaveTime: Tue, 23 Feb 2016 05:27:59 GMT

X-Swift-CacheTime: 22096887

Timing-Allow-Origin: *

EagleId: d5f4b28814629258879572408e
......JFIF.....H.H.....C..............................................
......................C...............................................
......................................................................
...:...............................!."1AQ..#aq...Rb..$26B.............
.........................>........................!1..A..Qaq.."...2
....#B..Rb...r.$3..............?..f.j.....n..Z.~4.;....8.....E.p...M#.
c...7S..!@L ..l...U.[l......DpS...y.....\.....0..8.......;m.._...[M..j
..... ....,.dm.q.n\..CFI.Z.;.RN.S^.f..Q.......l.vKT.I...t....U.lU....r
..........w.P>..o...>.....RN.I...d..`.......k..........Gc...V...
.I..:..,..jq.<Te..x.........hT.NAh.6....-c..M..Ts.;.q.G.U.....5r.@.
].)..A.e0....5@.....................,....G..K...=.....0d..bF...5X5...g
l....v.c..WIQ.2.u..9f..CW.rI;Z.)."*.4.C!..5..p.kk....T.T.OI..p...<7
..*.j....Y...p@.....`d<M...a.`.7.x..S.[......Q.7...GV\..i.......wN!
..kyr@[gq....Kh..[.u..7.i.m0.j..<...y.%(c\..x`1r5...IV..H..6*.rCv..
0......y~....N).0.R-.. ...| .....T{.......~.jj.(i.".=m..*"e...Begy....
..F|l.........w..*.}.....-..%4..]...H.....]8d...w)......;ERCtP.......i
.Fo..._m6.8.m...V.!..,......fr......._.wp.q.......J..*.3g.S.IK3dtn..l.
.9........]...7n.g...l.\[-d}. m.Ipu]7t'..v..c-?ty........9U.w..sR.....
.....FN.[] .*..".$..-<......IG....S..C.........IT..]M..t.F.5..9....
4':...\........f.{..Ou....>.X...q#..)]..h......f"..|..BSfk.F.R.7.dT
d..P....A.c,.kg.$..v....T.E.(.R1.20X...........%Tld..%...........m...(
x ..uU.6.........b...Ii.3...M."/...<,..4=....v..._Y\d...b..u.|,
<<< skipped >>>

GET /bao/uploaded/i4/164130173274074824/TB2gG_OkVXXXXXnXXXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 17409

Connection: keep-alive

Date: Thu, 03 Mar 2016 01:57:04 GMT

last-modified: Wed, 02 Mar 2016 02:42:36 GMT

Expires: Fri, 03 Mar 2017 01:57:04 GMT

Cache-Control: max-age=31536000

Via: cache29.l2de1[0,200-0,H], cache32.l2de1[1,0], cache1.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 5955668

X-Cache: HIT TCP_MEM_HIT dirn:4:400604250

X-Swift-SaveTime: Thu, 03 Mar 2016 07:37:22 GMT

X-Swift-CacheTime: 31515582

Timing-Allow-Origin: *

EagleId: d5f4b28814629258927302675e
......JFIF.............C..............................................
......................C...............................................
......................................................................
..S............................!1..A."Qaq..2..#BR...b...$SVr.....3C..&
56FTUcsu........................................9.....................
..!..1.A.."Q.aq..2S...B..R....#.b.............?..w.\c.........>.2.Q
n...........F...TT.....P.U.'.....%....{."..n...h...*.B.63...q....P...z
.]B.0..%2..A.-..*.....SiN.#.... ..d.\\..b..U....D[...8..KD..F{...4..H#
.=.....TO......Pn.".l..yb...H.....<.... ...s..5.....'..-.C.A..z....
=..7..... ..6? .....'..?.....'..|zm..;=O....~.Y}.)...dH.....)..Ch%jWl.
[email protected]..]s=H...h.XCN(.rj.R.Hu. ..(ZO.8=..x./,........=......
V.\...........)R.T.....=I.<.,#)C.......kym...v|.....>..v..2....k
ui.J.2.NU..q.3K..5..........dj.....~.......o:..u.R..)..$.........%@.L'
.......u[b.I..e...[.B..-*../`&?....b.yI...<.,)....v?.vE&.....N...LJ
....1V......HH'.U`..zj........>6..>............Kb...]\..$2....VJ
[email protected]).e7f..{[C......n......UD....J.W....=..t:.*..Nu1...L...jkDA
..h......Rq.,Js.,....."..:.EN......=..n....*.r\.....J.c.R..!Iq|.( .._.
X<.l.$...../..$[........`..Q..i..%'.., CVT....l.g.]c.Y..]..p...W...
.[..T"N...6......X....<..[X.c.O_.X.Y..s7............z..W....(..T.%Q
.'.....O.pz.:..%k.I.U.{.....5...]..D.!.A.n..)....W.....>.O....j....
xD.x..xO.^....I.Ub4KxG....J.R..\P..~e-.....C.Q...r.^).;....%l_.t._V..K
..6.k......b... e0.....<....(... ..D..T.....i.5z]sg...U.$......
<<< skipped >>>

GET /bao/uploaded/i1/190240181080113079/TB2D0RdlVXXXXaLXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 16663

Connection: keep-alive

Date: Fri, 18 Mar 2016 00:16:30 GMT

last-modified: Wed, 16 Mar 2016 09:02:23 GMT

Expires: Sat, 18 Mar 2017 00:16:30 GMT

Cache-Control: max-age=31536000

Via: cache34.l2de1[0,200-0,H], cache47.l2de1[9,0], cache1.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 4665702

X-Cache: HIT TCP_MEM_HIT dirn:0:759366562

X-Swift-SaveTime: Fri, 18 Mar 2016 21:23:03 GMT

X-Swift-CacheTime: 31460007

Timing-Allow-Origin: *

EagleId: d5f4b28814629258928472680e
......JFIF.....`.`.....C..............................................
......................C...............................................
............................."........................................
..?..........................!..1"A..2Qa.q.#B.R....$3b.....%4T........
...........................9.......................!.1..AQ"aq..2......
..BR..#$35b..............?.....fs.2.......vEw..q_<..`.=..`..Pm....%
....H(.N.e..,.T...rIe.~q........i....G[.....Re.:..,..x.dEJT.....M.na..
H...7.%..".#c....{[email protected]<[email protected]....<........
..a....?..%8..<o7@..:....5...(..j...UOM%2.l...........&.w .M. Y..'.
......y].e.mngM.)..... ....`..cbl.llok!}rq#.......G.ZQ.Z.Z.I..,.=G.#..
#pW1*:;.bI$jH.F.C...X../......^......e. ....&I.=6J.-N^.)X..R.Q..X).p..
....E.^..cv...W9.#......^m......ZT...6...d.6..........{pO..6...<.$M
.....,../.I${~p.&...q.....<.".gQ..k.`|s...O..Qo{_..|5.....#.c.rU.rn
.... .....0.)[email protected].....)..#j.Ve$_.<.N..F.|[.
2M3.T*..$.?.$.6U....>.....SP.L.4.klkm.z...6C.(.d....!.0G&.6....-..b
M..*..Q...'..q..,%.}.......O.bI.....8a.<p98-....)..-..Q.q>..~...
.{.....g...P.....W.B..o...<[email protected]....,M;..H...
......I.3......Q.%.......]...D..VsoS....(t.......| ....).......N.....P
.Q..\....9.r.;.o..6.....o|^.WF.....t.z....1f.-Q.<.L..I,......{2.y..
.%... .CB....O#H.4..v ........QKS=DR.G5N.......g.....n/....R....4.....
..}e.....-....H}65.........W.C...W.3L.=P.h.$....U....7<H...U..B..3x
........F.L.K.[.....5Yup.tc.C1...].Rlo .....>)3.jd..v.y..I.0...
<<< skipped >>>

GET /bao/uploaded/i3/155470185780814024/TB2TTdcepXXXXbFXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 27028

Connection: keep-alive

Date: Sun, 27 Mar 2016 18:32:48 GMT

last-modified: Thu, 24 Mar 2016 03:38:06 GMT

Expires: Mon, 27 Mar 2017 18:32:48 GMT

Cache-Control: max-age=31536000

Via: cache48.l2de1[0,200-0,H], cache58.l2de1[0,0], cache5.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 3822324

X-Cache: HIT TCP_MEM_HIT dirn:3:302345596

X-Swift-SaveTime: Mon, 28 Mar 2016 07:20:13 GMT

X-Swift-CacheTime: 31489955

Timing-Allow-Origin: *

EagleId: d5f4b28814629258929092685e
......JFIF.....`.`.....C..............................................
......................C...............................................
............................."........................................
...G............................!.1.."A..2Qaq.#...$;R.&C...'(457bgt.
......................................F...........................!.1.
."A.Qa.2q..3B...#$CSb.....%R45DGTe...............?...GGGC......7....u.
I..0Z.,...-X\..O..,.eFmE&k....Y..=&..I.......I..........F.Y.`.<.7'a
.'`=....g..... W..17.Y{...?.^K6e...q.`..(...g .1.I .)`..:..?..e.n5.C..
". ....F.X......Kl.[.......D'c.~-.$.OC......2..H.7....{....}..........
...n}.....?...|(.@0V..'v.e.9g4....r.8.....)....L?GP...m...C...... w...
6.>..F.G..]....%@.a....Rsj....J.... .?..>O.Pa.......~C..~}..(.@x
#.......K~.....x...?a....uKYqM#M".x...|..........z#..L...**V%6.S.J])t%
[...5...2.?...U....*|o..U@....?.L'[email protected]...).U.....0.u.
.e*4....R...NG.._7...R...V.$.e.d.DU.if}....C^6#.$4.......o........f...
...5.....0..V)B..~b."MA..&... ..]>...$Q3.....N...c/.}.b.m.?..r.\.}.
I..=v'.]&W...}=...r.!>..J.J..y....a.G.].V....b.S...k%..._...g.B...$
4..`..........8.Kg.=Mu..._.a.[..}D*.!.G.4,......W..R.o.......PO.......
W.v..V'..b........uFrX.l=..x....Tn..N.us5.....\w"K...)....%K.......i.x
.......j4.......h..i.J..T.C."#..xS`..}i....!..|...u!...I. .%'`T...R...
@o..'..)].....4.k.....W...T....L.'b....*.p..?....R..B.......e..'.....q
........f.1....H....s....$s.7">.g.&wK...kK...L.%..0..Ir......k.j.4.
.........B..#c..2.y....g..=..[..[7$.....<...C* ....m..rv...(.M.
<<< skipped >>>

GET /bao/uploaded/i3/173890213147801832/TB2dlWPopXXXXXIXFXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 25723

Connection: keep-alive

Date: Tue, 10 May 2016 16:03:46 GMT

last-modified: Fri, 06 May 2016 09:02:14 GMT

Expires: Wed, 10 May 2017 16:03:46 GMT

Cache-Control: max-age=31536000

Via: cache60.l2de1[0,200-0,H], cache53.l2de1[0,0], cache7.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 29667

X-Cache: HIT TCP_MEM_HIT dirn:11:55423338

X-Swift-SaveTime: Tue, 10 May 2016 16:32:18 GMT

X-Swift-CacheTime: 31534288

Timing-Allow-Origin: *

EagleId: d5f4b28814629258930252703e
......JFIF.....,.,.....C..............................................
......................C...............................................
......................................................................
..A............................!.1.."A2Qaq.#..B...$%3....Rbr.....C....
.............................=.......................!.1.AQ."aq..2....
.B...#Rr..3b...$%.c............?.........Cb.| .W..J.gWm.~.=*......>
.*6b....J.'.p6...R.i......J..*D.?^...E......B.5D...=*M;..~>OJ....}.
T....{....'.......".G0;...|....}.w.....2..o....B...4'....F...`>.z.f
.S........W7....{K......E.F.V..6|'......L.J..V...[M..........Do...3...
..).Z.r....~..B....O4...l...VR..}_R3......... -..p.B..........*....Hx.
.....(.$...t...?......*.:3.a....).N...T..#L....R.c......... .O...CyH..
...*....{m..*T..N;}.\.RWa..........*[email protected]..~:\...7."F.!..:.....
lG..@.. nQ?n...G.a...q.....^.....?..(9..B.vC...~7,.P.i.Wo%......o>.
.AQ...a?..Zv.K...#.uUwf.......RS.v.-.T.Xmb:.K........G.u{{E.t..T0.....
...M..m_..$y=.>....[....).......~...K(.o...J.3..w.{....L..s..*Tl. .
.....*.r....H.../.t.J..U.q....*M4..m..n....s..:T...P..t......N...!Jh(.
...~..:fj...{~..n..=..,T;!J....([email protected]%..$3<3B.....b?q
..P;U...6...z!..%....3[...D0i. ....i1..'[email protected].] .kL....7
a..>.Y4q*GS..1.....$.W...d.}.....b=...:....S...p..V..)..G..}...'j..
y...m...@[email protected]....|~}=?
*..}...:T..L..t.fk.)..Uw....Tu...^...Y...u........C.,h.7..EKJ}.. . .^.
_....U.....}..E6...8KT[.o.,..o.........X.-..v.....ZE......%.]5....
<<< skipped >>>

GET /bao/uploaded/i3/183970182615491456/TB24aEXlVXXXXcfXXXXXXXXXXXX_!!2-saturn_solar.png_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 36460

Connection: keep-alive

Date: Fri, 08 Apr 2016 05:49:00 GMT

last-modified: Sat, 19 Mar 2016 01:33:28 GMT

Expires: Sat, 08 Apr 2017 05:49:00 GMT

Cache-Control: max-age=31536000

Via: cache54.l2de1[0,200-0,H], cache60.l2de1[1,0], cache3.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 2831357

X-Cache: HIT TCP_MEM_HIT dirn:1:152698278

X-Swift-SaveTime: Fri, 08 Apr 2016 13:39:33 GMT

X-Swift-CacheTime: 31507767

Timing-Allow-Origin: *

EagleId: d5f4b28814629258978542951e
.PNG........IHDR................!....gAMA......a.... cHRM..z&.........
.....u0...`..:....p..Q<....bKGD..............IDATx.....eI.&.....s..
..32r......uz......g..pH.@..$A?...... @.@. Ej.!9Z..........* .* ......
.w;....~0.s..........E. 2..{.u777........png.....O.>].UU..........1
 . ."...... ".h<...p.../<.8"^.r.m....?.......h......,...;w......
..;...7o_o..C........vY..s;;... ".....(d....)=....D.. =...W..D.....`?.
F.....>.O...../...........G1...K.|.._|..'GkkEQX.\Q.n....7.DDDP. ...
( ...Zf..$.@".5..........BD.....|.c......s........q..u.6.>#.....g_|
........^.o.....1..D.. Y........".C.@..'..A.ED.D..Y].....Q........l6._
~..k...s.V.6....Gi.[.....4.....M....|.c..}..c667.....M'..iD.?.<....
[....-..;7o.....c..~.9..l2}.........w.8.....]l.frt..mU.\Q0.dr|..{p...[
7......!..........?!....{..x.>..{..s.9..!..""..d>...E.....h8.."b
]...c.}Q....c...C1..lZ/j.(.b0....^.o.1..0.0s.q>...y....|...........
...8g'...^.....MQ.....3.p8.......O>..........k......a..[c.w.......P
...H.w....{"b.B2.........w.|c:.........M3=>.M...................A..
..{...w]Q...x8^....>.X..o..".......{.!......ug...P...2d...........=
..!6Ms........B.m.9}...>s.w..O~|.....[[_7D..|>_.z.K...}...;7~Y..
.Ed...P......u...._x|g{........p4.....KA.........7..a....9w.......!JY.
UU1..../f.G{Wn......u..a.o.Zg..........u=.BY.....O.c.q..b>G..m.....
..UOl.B.m.B0..F.K....gN=..3...9g.E.t..TU.s.........o.I.X..~o{.........
...D...{..".....n.4.d.....|........[wo~.].o..."...H.....>Te...._.9.
N..\.....Z........^.....{....................on...~1....N.n....&.G
<<< skipped >>>

GET /bao/uploaded/i3/188210149566741470/TB29oNvipXXXXXmXXXXXXXXXXXX_!!95758821-0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 26941

Connection: keep-alive

Date: Wed, 16 Dec 2015 03:12:17 GMT

last-modified: Fri, 11 Dec 2015 11:02:55 GMT

Expires: Thu, 15 Dec 2016 03:12:17 GMT

Cache-Control: max-age=31536000

Via: cache55.l2de1[0,200-0,H], cache3.l2de1[0,0], cache7.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 12690360

X-Cache: HIT TCP_HIT dirn:10:487256994

X-Swift-SaveTime: Wed, 16 Dec 2015 06:14:17 GMT

X-Swift-CacheTime: 31525080

Timing-Allow-Origin: *

EagleId: d5f4b28814629258979732957e
......JFIF.............C..............................................
......................C...............................................
......................................................................
...E.............................!.1."A..2Qa.#Bq.....$3Rr.....%.&Sb...
...................................G......................!..1A.Q.."aq
..2......#BR..3b..r..$C..S.4Tcs................?...=.....bR..... .R...
.....(./.>=......(./..<{..q....R.....'..6%.W..tfP.3.W..../f-ve.6
]...!"...mU........kc.4.rUUL..[Z...2..;....D. [email protected].
..c.....r..8...JQ. .g-......A.:.T....e..>4..N.j.y}.........B^.%Y...
..xW...{..$.6.}8LJ..:....c......sW..x8..1...?..G..H......o........5bb.
.>B..R0.C}..JA7....Q..P.....P...q......5..p.r"..L.4H...Z].D.!......
..."?M...%...$|.i..Qf..p......0,..../c....M...F.\.("R..p.L."..@4J..)XP
."...8.D.0N...~.K#Wm_7E.'(;j.0U.-VM.u.7.Q..1.....Q.......A....F..JQ.(.
.iJ...@M.= &...<....D.g...2N.........l.&..W.6.8..5v..W 6;[email protected]<..
.J.?m'o....`...;..s N.$.pm...,...3D..L....O.Y.I_o"Qm7.W.7.B..M..6.....
...Vc e..X..q5..,w?.v..;h..'%`#a.....qr..#..r.),{.3..1.6.'1.......*.X.
..cq. .....9..j.[.....5V&.....6.mZG...V...a....I...:..fQu..v....O..L..
S(o"...2.?.&...E..!FM....,&.7$;.Z..u...S..>......Z.g...Be.UT...Y...
.n/.H.,....{"......Q8|.f..=.;...s.!..'/[email protected].}..v
..7.lK..e.].....j..B.G...trm!.NB?r.Tp..Rq.XD^........:...M.s.(...1<
.O...O.>.7c.}D....7P.m.8m.Fg..Da.i..Xn....@..)...-"I....-.3..0..&..
..H.u.k.QYH.(@...%.u.!ym:N..Y...........~.....v..Ur.J..zU.h..yv.d.
<<< skipped >>>

GET /bao/uploaded/i2/192730193493502434/TB2wm.EmpXXXXaSXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 13710

Connection: keep-alive

Date: Sat, 09 Apr 2016 06:44:07 GMT

last-modified: Wed, 06 Apr 2016 02:37:51 GMT

Expires: Sun, 09 Apr 2017 06:44:07 GMT

Cache-Control: max-age=31536000

Via: cache50.l2de1[0,200-0,H], cache53.l2de1[0,0], cache1.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 2741651

X-Cache: HIT TCP_MEM_HIT dirn:3:769773665

X-Swift-SaveTime: Mon, 11 Apr 2016 22:01:52 GMT

X-Swift-CacheTime: 31308135

Timing-Allow-Origin: *

EagleId: d5f4b28814629258980352962e
......JFIF.............C..............................................
......................C...............................................
......................................................................
................................................................4.....
.3.....(.>3.......>.q&L....G<!.S.1.. .?.s..]:..{*.......3t..D
.....5....k....#x...:...q ..Dz....|....,..r.n.....1..1B2.........!..r.
t... C....N.-.....`r...(..}.).$.....B......AY...1.LO..S.s.Kq? ......$)
..8s....i.g..|............n...D.d~..t.W......#b..l..E..'Q<..YQ...Y.
[email protected]..:.1..}w>..~Y..4.............8./G6._ mO.7 .
..)[email protected]=.f<...oO...p.j.._
_..........3..K..x...'.....^..Fg......[.^...;...................g..<
;9......?.1...b....![..l...O.P...h...{.L...o..Z....s.i.tSj....-.......
....<xzf..........."........P.)........3.}.P.....9../..=G[;.....7.I
..M......PHK...1.............?@....)........................... 0.....
."1@P...............>.... ....?d....b.Gm....d...'.h..k.I.gP.:...m..
.J.>..m...p....5i...^....,.1.... ...3.8.8......:..._....tS.|...Z.jb
....nH.{.....G..oYL....&.-..:|'.Q/..#q.w..<u.. ..e...........Lq....
..5 ...He.4..<.s.......#. ..q..c.8.wX}.9E.k..c... b]....4...Z.?..).
....\....:.3..F.|....0..O........X..Z...].(O/.].O.*g..r..Hv.....Md....
..v.(.}...Sl.....y....2....l.t.?}.d.....!}.L.R..z.T.....L...m~zi.s..(.
[5..J..^.....l....LU.lrK2.F6..p....k.H"....f...M..m...I....v.q../....l
...R.!.9V........ .......Ilw6...*......O.E4KC..K%.....`.X....c3f.=
<<< skipped >>>

GET /bao/uploaded/i2/177380111609007392/TB2m7lteXXXXXbIXXXXXXXXXXXX_!!26097738-0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 6663

Connection: keep-alive

Date: Thu, 24 Dec 2015 15:37:53 GMT

last-modified: Mon, 27 Jul 2015 08:04:57 GMT

Expires: Fri, 23 Dec 2016 15:37:53 GMT

Cache-Control: max-age=31536000

Via: cache58.l2de1[0,200-0,H], cache27.l2de1[14,0], cache1.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 11954425

X-Cache: HIT TCP_HIT dirn:10:623697461

X-Swift-SaveTime: Tue, 29 Dec 2015 14:52:36 GMT

X-Swift-CacheTime: 31106717

Timing-Allow-Origin: *

EagleId: d5f4b28814629258980962964e
......JFIF.....d.d.....C..............................................
......................C...............................................
......................................................................
.;...........................!1..Aa"Qq..2...#r...$3BRb................
......................0........................!1.AQ..."a..2q....#B...
[email protected]........~.P..........{..
.P.....[t....z...|.B....([email protected]....<"[email protected].#...
.....U...j.l..8.P-....z....PP.....'"_..B.b3....Q.5.?n..j......#.....&g
t;......qK<."x..^=.../K...1.q.U.V....6.yP<Ff...3.W.a...Sm.......
dex.b....k.......x.@?~/./X....X{.../...............U?..Kq....sK.u...w_
.k....~.....#7o ;..0...P..R..z...O0yT..:.[[email protected].
...:v....#..iZ'.{[email protected]..'.k.z..U..-;j..._.^.mMN-.........n@...!I..9..
0...t.].rI....M  ...F.[.5....=6...Kk._V..g(@....c.a.>..Y...v.o.k...
$V.^$.Io.-F.N....oev......ZB...I.yp...S&u.....c.R.15.1...Zcn..,.k..:..
e}....tr.I..#........:..u_^..J.6....h.l.?.........]7,7k3>\...{.... 
.t:....$...=..fX1.F..]..z........A..,...... ......irI...X.N...K......F
..z....WLo.*].>x|3..K...A.ceWP...8.^?...=...iI..E|)........I=..<
........p....{r.t.p..../......M.W.q..z...M....V<.M.... Q..LrM..).I.
.%.E.I.. .....q@z{P.{..OZ...........~@f......^k...Q..".....!....&.....
q.n@`Fv.u(^V..*...>..2.g<n..Q.M)XX...y".&.`.y...;|...]..H..o....
..~.... ..I!.=.cA..4.E.O.-.......-[o.:M..n.!.q.ij.4..P.L"9....W$..^..\
.s...._...>1.....B...{T..;sV.......L..@<..R..6"4..6X...s^n.G
<<< skipped >>>

GET /bao/uploaded/i4/182930173993735555/TB2YgAwkVXXXXaVXpXXXXXXXXXX_!!0-saturn_solar.jpg_190x190.jpg HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: asearch.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 15155

Connection: keep-alive

Date: Thu, 03 Mar 2016 08:25:23 GMT

last-modified: Thu, 03 Mar 2016 08:24:17 GMT

Expires: Fri, 03 Mar 2017 08:25:23 GMT

Cache-Control: max-age=31536000

Via: cache44.l2de1[0,200-0,H], cache24.l2de1[0,0], cache7.nl1[0,200-0,H], cache8.nl1[1,0]

Age: 5932375

X-Cache: HIT TCP_MEM_HIT dirn:11:355423155

X-Swift-SaveTime: Thu, 03 Mar 2016 09:00:46 GMT

X-Swift-CacheTime: 31533877

Timing-Allow-Origin: *

EagleId: d5f4b28814629258981582967e
......JFIF.............C..............................................
......................C...............................................
......................................................................
.Q..........................!.1.AQ..."a.2q..B....#$3Rb...s....%&C.7EST
ru..........................................8.......................!.
1..AQ."aq....2B....R...#3..C$............?....E.E.E.Z......_.........O
..........n..B....J........h.:..D..^..j...DTi....r...TG..I..f.Q...h.w]
.~.......ci..q.F\..!J.Ka..6.v..H#.......Y.$.Q1.||.....B....]...A.....L
..d..D........h..D.$..F*&...2..d..J..JN...O.k}b.\..z....m.[Z..U..u..."
f...r}=."o....N..Wz.w.Y1.-*..> ia....rW.`$s..9..o\."..`.q...z*~..W.
..6....?..H.Btl..8...{..m..PZn....Yl.n..G...`d/`J.%%*..H.5....s..4...[
|?V....z..6.,.2..d..A..._i...1.En..Gd.b%.n0....-...o...m:[email protected]."4
.X...G.....#Q..|K...]R..,[email protected]*f.....[.V...%;T.
.s.8.ke.2..M..E..........k4..$m ..&A..uM..1..j.9d..;......[.......YR.y
......)!Gv28...5.n..H...1.Lo.u...kP.U.U..1....jqn.....CH..4.V.u.h..D[.
..k...Ga1C..2.....~....VU.=...5.E.B.....s..p.o....}.:.h.3.2..-.Q'.....
}...5.Z,7c......Xi.f.)......{.3..W..v5... .& ..$....w..nuT.k3Ps.......
...?.3.....[z.R&%.O..bT.......4..(...Jp:...N...A.E^..k..:d..N.d.m.....
2...a......$jpn..3...Q....i...Z%.....ED.uc..._........ 8.q`.........;.
..r.!v.V..4:0.q;m.3.>.Rt...jkF...iN...)M..v.AF@V..^..8.c..2r...s...
p..............j...mch..Xe.*].5.C.d........d.....J....5.....ONH....9..
5.2..uo]X...`..j-...Z'P.#.P.=..rb...WV~";2..W.Uwm.?..h....S..p..v.
<<< skipped >>>

GET /t/detect2009v2.php?ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tianqi.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Set-Cookie: wc=54511; expires=Sat, 09-May-2026 00:17:57 GMT; path=/; domain=2345.com

Set-Cookie: lc=54511; expires=Sat, 09-May-2026 00:17:57 GMT; path=/; domain=2345.com

Set-Cookie: lc2=54511; expires=Sat, 09-May-2026 00:17:57 GMT; path=/; domain=2345.com

Cache-Control: max-age=0

Expires: Wed, 11 May 2016 00:17:57 GMT

P3P: CP=CAO PSA OUR

Vary: Accept-Encoding

Content-Type: text/html; charset=gbk

Content-Length: 1277

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:57 GMT

Age: 0

Connection: keep-alive
var wea_ = {city:"\u5317\u4eac",day1:["18\uff5e30\u2103","\u4e09","\u9
634","\u5317\u98ce","26"],day2:["10\uff5e24\u2103","\u56db","\u9634","
\u5317\u98ce4-5\u7ea7","26"],day3:["14\uff5e26\u2103","\u4e94","\u591a
\u4e91","\u5fae\u98ce","28"],has15day:"yes",title:"\u63d0\u793a\uff1a\
u67e5\u770b\u6700\u65b0\u5929\u6c14\u9884\u62a5\uff0c\u8bf7\u6309Ctrl 
F5\u5237\u65b0\uff01
05\u670811\u65e5,\u5468\u4e09,\u9634\u8f6c\u9
6f7\u9635\u96e8,18\uff5e30\u2103,\u5317\u98ce
05\u670812\u65e5,\u5
468\u56db,\u9634\u8f6c\u6674,10\uff5e24\u2103,\u5317\u98ce4-5\u7ea7

0;05\u670813\u65e5,\u5468\u4e94,\u591a\u4e91\u8f6c\u9635\u96e8,14\uff5
e26\u2103,\u5fae\u98ce
05\u670814\u65e5,\u5468\u516d,\u9634\u8f6c\
u591a\u4e91,13\uff5e22\u2103,\u5317\u98ce
05\u670815\u65e5,\u5468\
u65e5,\u6674,14\uff5e28\u2103,\u5317\u98ce3-4\u7ea7
05\u670816\u65
e5,\u5468\u4e00,\u6674,16\uff5e29\u2103,\u5fae\u98ce
05\u670817\u6
5e5,\u5468\u4e8c,,\u2103,",id:54511,chnid:101010100,pinyin:"beijing",r
c:["05","03"],rl:["19","17"]};if(typeof(weaCallBack)!="undefined"){wea
CallBack(wea_,54511,54511)}var weaAlert_ = {};if(typeof(weaAlertCallBa
ck)!="undefined"){weaAlertCallBack(weaAlert_)}var weaAir_ = {aqi:181};
if(typeof(weaAirCallBack)!="undefined"){weaAirCallBack(weaAir_)}clickC
ount('detected');..
<<< skipped >>>

GET /tps/i2/TB1K2c1JpXXXXbOXpXXTEHbGpXX-36-40.gif HTTP/1.1

Accept: */*

Referer: hXXp://strip.alicdn.com/L1/377/101011/2015-09/creation-13653BUOKkRewcdMT-633358.html?tanxdspv=http://rdstat.tanx.com/trd?f=&k=a09e279ad7f7a12a&p=mm_26632324_6858394_36942102&pvid=0ab7409a000057327a365c68000a8e48&s=998x297&d=59420271&t=1462925878&pid=mm_26632324_6858394_36942102&tp=3&tsid=0ab7409a000057327a365c68000a8e48&u=http://VVV.2345.com/?kqq876038563&r=&tp=3&tsid=0ab7409a000057327a365c68000a8e48&pid=mm_26632324_6858394_36942102

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms02.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/gif

Content-Length: 1338

Connection: keep-alive

Date: Mon, 21 Sep 2015 12:01:49 GMT

Last-Modified: Tue, 15 Sep 2015 01:08:17 GMT

Expires: Tue, 20 Sep 2016 12:01:49 GMT

Cache-Control: max-age=31536000

Access-Control-Allow-Origin: *

Via: cache3.l2de1[0,200-0,H], cache39.l2de1[1,0], cache12.ru1[0,200-0,H], cache10.ru1[0,0]

Age: 20088973

X-Cache: HIT TCP_MEM_HIT dirn:7:102194305

X-Swift-SaveTime: Thu, 14 Apr 2016 19:59:00 GMT

X-Swift-CacheTime: 13708969

Timing-Allow-Origin: *

EagleId: bcfe56d214629258829472310e
GIF89a$.(................!..XMP DataXMP<?xpacket begin="..." id="W5
M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:
xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "
> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns
#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.c
om/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/Resourc
eRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocument
ID="xmp.did:65951bab-2f93-844c-af0e-f21973d795c8" xmpMM:DocumentID="xm
p.did:AD021F2E52DB11E58FC2A28910A322D0" xmpMM:InstanceID="xmp.iid:AD02
1F2D52DB11E58FC2A28910A322D0" xmp:CreatorTool="Adobe Photoshop CC 2014
 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a13f
cda0-9cc0-094b-a0ff-60131945a4c1" stRef:documentID="adobe:docid:photos
hop:e4076f7c-5546-11e5-b7ad-fd1b51c20052"/> </rdf:Description>
; </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......
......................................................................
.....................................................~}|{zyxwvutsrqpon
mlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.
-, *)('&%$#"! .................................!.......,....$.(.......
......Lj..rC.Q 6r....i5..n/.'(..3..;..uB....;r..\K$45m..SZue].-....hcr
y.8s..u..nc.s6............'[email protected]....(.......P...x...f.#GqjP..;..
<<< skipped >>>

GET /ex?i=mm_26632324_6858394_36942102 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: p.tanx.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 11 May 2016 00:17:55 GMT

Content-Type: application/x-javascript; charset=gbk

Transfer-Encoding: chunked

Connection: close

Server: Tengine

Vary: Accept-Encoding

Expires: Wed, 11 May 2016 00:17:54 GMT

Cache-Control: no-cache

Content-Encoding: gzip

Timing-Allow-Origin: *
1b2............]R.n.0... ..X.e.a.p.0F..h..>[email protected]/.
....`I...f.l........$G.@]g.j....2[.?..7.l..Y.Q...hU.P.'..;...]$.......
...../f......u..}d.0^[email protected]<u..T.Q...J..d...V.. ..:..J..qC.
..n.....Z.....z.h...z...(.T.^...w.....?..*.$J.7.j....=.........9..q...
.Z...r...5o...=.F.s:......B..k.c.85.R..fJ..._.k!.=<........9...9...
Tin.t....2T..F>.6...6-.h.c.-/....K\....RT9.x..1....{........'..Y;..
.mp....a@^/.\..$Y.....;TH.._.....0..

GET /css/common_20160406.js?v=2.28.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Last-Modified: Wed, 06 Apr 2016 01:07:50 GMT

ETag: "a48d-52fc6972ea580"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:26:48 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:48 GMT

Age: 60

Connection: keep-alive

x-hits: 1242
008000..var main = domain(),isIE = /*@cc_on!@*/!1,isIE6 = isIE && /msi
e 6/.test( navigator.userAgent.toLowerCase());..var is2345= false;..tr
y{..    document.domain=main.replace("VVV.","").replace("hao.","");.. 
   if ( top.location == self.location ) { is2345 =  true }..}catch(e){
}..;(function (exports){..    var xhr = window.XMLHttpRequest ? new XM
LHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP');..    xhr.onre
adystatechange = function (){..      if (xhr.readyState == 4) {..     
   if(xhr.status >= 200 && xhr.status < 300 || xhr.status == 304
){ ..          exports.serverTime = new Date(xhr.getResponseHeader('Da
te')).getTime();..        }..      }..    };..    xhr.open( 'GET' , 't
ime.txt?t='  Math.floor(new Date().getTime()/60000) , false );..    xh
r.send(null);..}(this));..function $(_id){..  return document.getEleme
ntById(_id);..}..function $c(_tag){..  return document.createElement(_
tag);..}..function $t(_tag){var _doc = arguments[1]||document;return _
doc.getElementsByTagName(_tag)}..function $cls(_cls){..  var _doc = ar
guments[1]||document,rs = [],o = _doc.getElementsByTagName("*");..  fo
r(var i = 0,t,len = o.length;i < len;i  ){..    t = o[i];..    if((
' '   t.className   ' ').indexOf(' '   _cls   ' ') !== -1){..        r
s.push(t);..    }..  }..  return rs;..}..function domain(){..  try{.. 
     var _host=location.host,_pos=_host.indexOf(":");return(_pos==-1)?
_host:_host.substring(0,_pos);..  }..  catch(e) {..     return '2345.c
om';..  }..}..function g_cookie(_name){..  var returnVal = cookieS
<<< skipped >>>

GET /css/index_build3_20160503_01.css?v=5.28.1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 03 May 2016 05:54:36 GMT

ETag: "11f8a-531e9be747f00"

Cache-Control: max-age=1296000

Expires: Wed, 18 May 2016 06:21:19 GMT

Vary: Accept-Encoding

Content-Type: text/css

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:51 GMT

Age: 669392

Connection: keep-alive

x-hits: 2739357
008000..@charset "gb2312";html{overflow-y:scroll}html,body{background-
image:url(about:blank);background-attachment:fixed}body,div,span,ul,ol
,li,h1,h2,h3,h4,h5,h6,p,img,dl,dt,dd,table,td,th,hr,sub,sup,form,selec
t,fieldset,input,button,textarea{margin:0;padding:0}body{background:#f
1f7ff;min-width:1000px}body,button,input,select,textarea{font:12px/1.5
 Arial,\5B8B\4F53,Helvetica}table{border-collapse:collapse;border-spac
ing:0}h1,h2,h3,h4,h5,h6,font{font-size:1em}iframe,img{border:0 none}im
g{vertical-align:top}em,i,ins{font-style:normal;text-decoration:none}u
l,li,ol{list-style:none outside none}input{outline:none}input::-ms-cle
ar{display:none}.clearfix:after{content:".";display:block;height:0;cle
ar:both;visibility:hidden}.clearfix{*zoom:1}.clear{clear:both;overflow
:hidden;font-size:0;height:0;line-height:0}a{text-decoration:none;colo
r:#333}a:hover{text-decoration:underline;color:#f30}.fred{color:#f30 !
important}.fgreen{color:#178517 !important}.fblue{color:#0c6ad4 !impor
tant}.fblue:hover{color:#f30 !important}.fgray{color:#888 !important}.
block{display:block !important}.none{display:none !important}.fleft{fl
oat:left}.fright{float:right}.mt4{margin-top:4px}.mt10{margin-top:10px
}.mt8{margin-top:8px}.life_c1 li ins{display:inline-block;width:14px;h
eight:14px;overflow:hidden}.skin-c{color:#0c6ad4}.skin-c:hover{color:#
f30 !important}@font-face{font-family:'2345';src:url("../fonts/2345_16
0108.eot");src:url("../fonts/2345_160108.eot?#iefix") format("embedded
-opentype"),url("../fonts/2345_160108.woff") format("woff"),url(".
<<< skipped >>>

GET /images/index/index-sprite-160224.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Wed, 24 Feb 2016 08:05:20 GMT

ETag: "1c14-52c7f86f19000"

Cache-Control: max-age=31536000

Expires: Sat, 25 Feb 2017 02:02:35 GMT

Content-Type: image/png

Content-Length: 7188

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:52 GMT

Age: 6473717

Connection: keep-alive

x-hits: 30070968
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:a8ca6eaf-5047-cd4c-b093-ab90c1cb0093" xmpMM:DocumentID="xmp.did:
8F4B76AEDABB11E583EAC9188DD62D35" xmpMM:InstanceID="xmp.iid:8F4B76ADDA
BB11E583EAC9188DD62D35" xmp:CreatorTool="Adobe Photoshop CC 2014 (Wind
ows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c33bc2fa-ebd
4-c547-a3cc-cded6ab15b8d" stRef:documentID="xmp.did:a8ca6eaf-5047-cd4c
-b093-ab90c1cb0093"/> </rdf:Description> </rdf:RDF> <
;/x:xmpmeta> <?xpacket end="r"?>.:.)....PLTE.................
.x..\........fff.......O......T.......................................
.............,...R.].............w..........e...............I.........
.....[o.......vuv........... ..8...l..N.l...8...nH...$......s....._...
............#........Mg.......iY.{...z.........h.LLL...0.........wZ.".
..................O......y^..1........6........o..-......u....-.......
.....h.....9..ed`.........P..5..QVmV........h`h.........`ge...........
..C..........6.T.....r..................wxk...hgq..Y..........I>
<<< skipped >>>

GET /i/blank.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 18 May 2012 05:59:19 GMT

ETag: "3b9-4c04940ca7bc0"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:53 GMT

Content-Type: image/png

Content-Length: 953

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:53 GMT

Age: 29432460

Connection: keep-alive

x-hits: 123174682
.PNG........IHDR...............?.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:BE04A97D9F3C11E1BC65ED9A
1562F288" xmpMM:DocumentID="xmp.did:BE04A97E9F3C11E1BC65ED9A1562F288"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BE04A97B9F3C11E1BC
65ED9A1562F288" stRef:documentID="xmp.did:BE04A97C9F3C11E1BC65ED9A1562
F288"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.H"[email protected]
x.b`.'..0..n..........IEND.B`.....


GET /images/logo/logo_normal.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 07 Apr 2015 01:27:05 GMT

ETag: "27cd-513184ff2ac40"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:53 GMT

Content-Type: image/png

Content-Length: 10189

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:53 GMT

Age: 29432460

Connection: keep-alive

x-hits: 102790863
.PNG........IHDR.......9......'8.....tEXtSoftware.Adobe ImageReadyq.e&
lt;....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:60479eaa-3d1e-a041-ac04-73afa977a47b" xmpMM:DocumentID="xmp.did:
4508AD04D9B411E4AFC0E4DB349F1651" xmpMM:InstanceID="xmp.iid:4508AD03D9
B411E4AFC0E4DB349F1651" xmp:CreatorTool="Adobe Photoshop CC 2014 (Wind
ows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:719e4563-f8f
b-d54b-ba9a-389e92764bee" stRef:documentID="adobe:docid:photoshop:5bd2
3a12-d797-11e4-afcb-d464024abc62"/> </rdf:Description> </r
df:RDF> </x:xmpmeta> <?xpacket end="r"?>;jiv..#.IDATx..
}.......VUo3= 3.0....,.....1.I^.F...4j\..F...D}..[......_M\01QQQ\.>
.?...( ...0.LO..U...>5s..{.GM....~......=.s...s...mCmsWu`..A@[email protected].
..`.y..6...u...O..*5...M .h.X.....LXv(i.!..0t-.O[I../e......|..Y.?....
cx....v........._xav.61.A....b}.....C.a..)..p;oH._......f|...S.N.9Y.XT
..g......m..'...g.pc'...L YG..po.../.> p.P..O......>Rs......I...
.Hx..E..,B....i...]..7..).._.........p,  \.........^-...Cw....\..b.}5m
..m!!...F{....>n...i..:./...............Z.....G|..9.....C...5..
<<< skipped >>>

GET /images/index/lazyloading.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 21 Aug 2015 06:42:55 GMT

ETag: "6fb-51dcc93dfb9c0"

Cache-Control: max-age=31536000

Expires: Fri, 26 Aug 2016 14:09:42 GMT

Content-Type: image/gif

Content-Length: 1787

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:53 GMT

Age: 22241291

Connection: keep-alive

x-hits: 88684908
GIF89a . ............................444...............TTT...!..NETSCA
PE2.0.....!.......,.... . ......I)K....JJ5....U.RK....(..&...05 /.mbp.
z...1...;$.1C....I*..HCh`A.o..."3qT5.\.8a....B....d..wxG=Y..g...wHb..v
.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H...........b..Z.b.O
Eg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*....f.7D..!.......,......
....r..I..5........bRH.h.W...*lkL&-)..1-..v.m...).....M..t.\.....Rd..A
..H..... .......o............................Gz{..!.......,..........r
[email protected]!(.(.(..8.........J..Kb..r....3.h..K!..6..3u`.&.D.A..z.
fL.Z*..^`n.F.....O..ssyJ}T....N.aqXshC..XJ...!.......,..........i....Y
4.......Cv....A.M.A."....J..j..A'.0T....*.b..JI.I..ZF..P.MM...s.bg.qV$
........v.!...5....?}..........!.......,..........ep....80....#^.q..X.
...[..(\.-......S..@ P....0". ....L......z...xL....*Z....._..H......D.
.eU..ywZt.n..!.......,.....................A.2.W..E.&j.....B.&..w~.6..
b8....p`4r|.F...M.>.......,bLv|?.4B.v......P..u.9.. .&..2..x&...k..
&...U]..vo...o..p..raT&..!.......,..........{.........'..e.7......\l.-
).S7@.&..4. `.yT.SL.\:=.....J..k...:......;.e....8.c.A.8O.j@b/. :.{..t
y....t#....|.....-...mN..qK..!.......,..........l..I .8.b....y ..h..*.
...Zp=.....3...`.....C....`B.".p..X..9bP...B.`Z=.....8.>.u,.S..t"..
O..T\um.|.;....8.~*..!.......,..........x..I.......A.]G...e..AP.b.)...
"!s...... .B..I..........V...5q(.(.X2=.,.I.........n#&..A....Vq5t..sn.
y\)_.....g......|r.5..!.......,..........g..D .8.[{.`&y_h..I.).(L.". g
N.8..l5.."....L..A ...%@%[email protected] ............p.us/.j...j.Vj..
<<< skipped >>>

GET /i/search0320/baidu_web.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Wed, 20 Mar 2013 08:34:57 GMT

ETag: "78a-4d85718d1ce40"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:53 GMT

Content-Type: image/gif

Content-Length: 1930

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:54 GMT

Age: 29432461

Connection: keep-alive

x-hits: 121953348
GIF89aU. .................cZ.............9/......ZU..........!..XMP Da
taXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x
:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.
134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="http:/
/VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:abo
ut="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpM
M="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/x
ap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xm
pRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:91695398A26DE
111951AE4839BBBE675" xmpMM:DocumentID="xmp.did:6E0F9B15912F11E29525B1A
BCBF93F2A" xmpMM:InstanceID="xmp.iid:6E0F9B14912F11E29525B1ABCBF93F2A"
 xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:C68C50D22D91E2119448AF4ED6042198" stRef:d
ocumentID="adobe:docid:photoshop:f6eab62f-7678-11e1-82f0-c1042319e464"
/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <
;?xpacket end="r"?>................................................
......................................................................
............~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFE
DCBA@?>=<;:9876543210/.-, *)('&%$#"! ...........................
......!.......,....U. ......I..x6.j.`(.....'5...p,S......|..6@ ...|.d.
.....(..d<.(.t.3...k..-S.P*...0l..\Rc>........}s\jO!..q.JX.;.C.o
6V.Jup..(..`vr.......#.....c.E..c........................d.....o..
<<< skipped >>>

GET /right/homepage/zjsVersion.js?t=24382097 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Wed, 11 May 2016 00:15:13 GMT

ETag: "121-53285ef74c640"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:27:44 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:54 GMT

Age: 10

Connection: keep-alive

x-hits: 122
00121..;(function(){$CONFIG["jsVersion"] = {"life":1462846838,"enterta
in":1462862755,"game":1462523419,"shopping":1462867692,"auto":14407164
00,"novel":1439350467,"news":1462925713,"spic":1427879216,"vpic":14627
62042,"live":1462784820,"news1":1462925413,"trip":1462862286,"video":1
462849150};})();..HTTP/1.1 200 OK..Last-Modified: Wed, 11 May 2016 00:
15:13 GMT..ETag: "121-53285ef74c640"..Cache-Control: max-age=600..Expi
res: Wed, 11 May 2016 00:27:44 GMT..Vary: Accept-Encoding..Content-Typ
e: application/javascript..Transfer-Encoding: chunked..Date: Wed, 11 M
ay 2016 00:17:54 GMT..Age: 10..Connection: keep-alive..x-hits: 122..00
121..;(function(){$CONFIG["jsVersion"] = {"life":1462846838,"entertain
":1462862755,"game":1462523419,"shopping":1462867692,"auto":1440716400
,"novel":1439350467,"news":1462925713,"spic":1427879216,"vpic":1462762
042,"live":1462784820,"news1":1462925413,"trip":1462862286,"video":146
2849150};})();..0......


GET /css/input_20160503.js?ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 03 May 2016 07:57:39 GMT

ETag: "2aaa-531eb768422c0"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:18:50 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:55 GMT

Age: 545

Connection: keep-alive

x-hits: 9725
002aaa..eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(pa
rseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):c.toString(36))
};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function
(e){return r[e]}];e=function(){return'\\w '};c=1};while(c--)if(k[c])p=
p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return p}('T.p={\'1e\
':$t(\'5v\',$(\'1u\'))[0],\'1g\':\'34\',\'U\':U.2Z(\'p\')?U.2Z(\'p\'):
\'0@0@0@1@0@0@0@0@0\',\'46\':r,\'2a\':r,\'2T\':-1,\'O\':0,\'1v\':2R,\'
L\':[[{\'f\':\'/3M/P.1w\',\'w\':\'R\',\'i\':\'i/I/3G.G\',\'a\':\'k://Y
.y.j/P.1z?V=1c\',\'E\':\'D-8\',\'c\':\'\\14\\3B\\3t\\3p\',\'h\':{\'V\'
:\'1c\',\'1h\':\'-1\'}}],[{\'f\':\'k://Z.y.j/2p\',\'w\':\'R\',\'i\':\'
i/I/4W.G\',\'a\':\'k://Z.y.j\',\'E\':\'D-8\',\'c\':\'\\15\\19\\2h\\1P\
'},{\'f\':\'k://Z.M.j/Z\',\'w\':\'X\',\'i\':\'i/I/42.G\',\'a\':\'k://Z
.M.j/\',\'E\':\'D-8\',\'c\':\'\\14\\1f\\2h\\1P\'},{\'f\':\'k://Z.16.j/
n.q\',\'w\':\'X\',\'i\':\'i/I/3E.G\',\'a\':\'k://Z.16.j\',\'E\':\'D-8\
',\'c\':\'2K\\2h\\1P\'}],[{\'f\':\'k://1d.y.j/W\',\'w\':\'1H\',\'i\':\
'i/I/3x.G\',\'a\':\'k://1d.y.j\',\'E\':\'D-8\',\'c\':\'\\15\\19\\2B\\2
A\'},{\'f\':\'k://1V.M.j/1d.2l\',\'w\':\'X\',\'i\':\'i/I/3S.G\',\'a\':
\'k://1V.M.j/\',\'E\':\'D-8\',\'c\':\'\\14\\1f\\2B\\2A\'},\'\'],[{\'f\
':\'k://v.y.j/v\',\'w\':\'R\',\'i\':\'i/I/3D.G\',\'a\':\'k://v.y.j\',\
'E\':\'2r\',\'c\':\'\\15\\19\\2e\\2y\'},{\'f\':\'\',\'w\':\'26\',\'i\'
:\'i/I/5y.G\',\'a\':\'k://3C.1F.j/\',\'E\':\'D-8\',\'c\':\'1F\\4h\\2e\
',\'h\':{\'4k\':\'0\'}},\'\',{\'f\':\'k://v.M.j/v\',\'w\':\'X\',\'
<<< skipped >>>

GET /images/kz_tmall_20160504.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Wed, 04 May 2016 10:06:24 GMT

ETag: "8f47-5320160cda800"

Cache-Control: max-age=31536000

Expires: Thu, 04 May 2017 10:31:01 GMT

Content-Type: image/gif

Content-Length: 36679

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:55 GMT

Age: 568015

Connection: keep-alive

x-hits: 1347056
GIF89a}....................{..w...................................j...
....  ...............................v ..........yy..............U....
.........kk..f.>>......hef..........@@...............#. ....||..
........o .y0..`....e..................P.``.pp..p................00...
.  ....PP...ZWW......>;;...ZWX0--...0-.ust>;<gee...ussLIJLII.
......................................................................
........WW.aa.....W....  ..........LL........L.AA....................`
.o ..A.......ww.....a....``....a..66.....J.vv.......~~.uu.............
..................h........>...........nn......................ll..
...l....vv..e.......gg.U......9.e`....00.....t..Z.......dd..........~@
...................}6..............P..q.....>.............Q@.......
............'............@.[....!..XMP DataXMP<?xpacket begin="..."
 id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:me
ta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27  
      "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-sy
ntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.ad
obe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:
stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool
="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:67C12B1B10D
C11E6A7F8BFA9F48FE796" xmpMM:DocumentID="xmp.did:67C12B1C10DC11E6A7F8B
FA9F48FE796"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67C12
B1910DC11E6A7F8BFA9F48FE796" stRef:documentID="xmp.did:67C12B1A10D
<<< skipped >>>

GET /right/homepage/newsChannel_20150831.js?t=1462925413&ver=4.11.3.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Wed, 11 May 2016 00:10:08 GMT

ETag: "4a46-53285dd46d800"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:25:14 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:17:56 GMT

Age: 162

Connection: keep-alive

x-hits: 3
004a46..T.newsChannel.init([{"hd":"<a href=\"http:\/\/VVV.2345.com\
/newsweek.htm\" name=\"2\" tj=\"yxw_1\">\u65b0\u95fb<span class=
\"line\"><\/span><\/a>","bd":"<ul><li><a
 tj=\"yxw_1_1\" class=\"fred\" href=\"http:\/\/finance.ifeng.com\/a\/2
0160510\/14375333_0.shtml#_zbs_2345_bd\" title=\"\u4e2d\u65b9\u6d3e3\u
519b\u673a3\u519b\u8230\u9a71\u79bb\u7f8e\u519b\u8230\" name=\"2\">
\u4e2d\u65b9\u6d3e3\u519b\u673a3\u519b\u8230\u9a71\u79bb\u7f8e\u519b\u
8230<\/a><\/li><li><a tj=\"yxw_1_2\"  href=\"http
:\/\/finance.ifeng.com\/a\/20160511\/14375882_0.shtml#_zbs_2345_bd\" t
itle=\"\u5b98\u5458\u6d3e\u79d1\u957f\u51fa\u56fd\u5e2e\u5973\u513f\u5
750\u6708\u5b50\" name=\"2\">\u5b98\u5458\u6d3e\u79d1\u957f\u51fa\u
56fd\u5e2e\u5973\u513f\u5750\u6708\u5b50<\/a><\/li><li&
gt;<a tj=\"yxw_1_3\"  href=\"http:\/\/finance.ifeng.com\/a\/2016051
1\/14376000_0.shtml?_zbs_2345_bd\" title=\"\u6551\u62a4\u8f66\u649e\u6
b7b15\u5c81\u5973\u5b69\u9003\u9038(\u56fe)\" name=\"2\">\u6551\u62
a4\u8f66\u649e\u6b7b15\u5c81\u5973\u5b69\u9003\u9038(\u56fe)<\/a>
;<\/li><li><a tj=\"yxw_1_4\"  href=\"http:\/\/finance.i
feng.com\/a\/20160511\/14375891_0.shtml#_zbs_2345_bd\" title=\"\u5973\
u5b50\u770b\u623f \u5760\u5165\u5730\u4e0b\u5ba4\u6454\u65ad\u810a\u69
0e\" name=\"2\">\u5973\u5b50\u770b\u623f \u5760\u5165\u5730\u4e0b\u
5ba4\u6454\u65ad\u810a\u690e<\/a><\/li><li><a tj=
\"yxw_1_5\"  href=\"http:\/\/news.ifeng.com\/society\/special\/rds
<<< skipped >>>

GET /images/ico_taobao.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 27 Sep 2013 10:25:50 GMT

ETag: "3be-4e75ae90f2780"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 958

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:57 GMT

Age: 29432463

Connection: keep-alive

x-hits: 117313914
.PNG........IHDR.............(-.S....PLTE....i/.m4.J...V..............
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..........................................Y....tRNS.........SOx....dID
AT..U.A..1..$.,..q.I..n.X.......n.X....d.4..m....yN!.........F|.G.n...
.`...-....I..YLej.j..1.e..<......K.e....IEND.B`.....


GET /images/mz_ic_tmall2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Thu, 10 Jul 2014 10:04:51 GMT

ETag: "4fc-4fdd3f4a196c0"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 1276

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:57 GMT

Age: 29432463

Connection: keep-alive

x-hits: 118197216
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e&
lt;...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:0480117407206811822AB97ADF869A58" xmpMM:DocumentID="xmp.did:CDF9
C3FAFF3E11E3A69CE6CFEC5F358C" xmpMM:InstanceID="xmp.iid:CDF9C3F9FF3E11
E3A69CE6CFEC5F358C" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:058011740720681182
2AB97ADF869A58" stRef:documentID="xmp.did:0480117407206811822AB97ADF86
9A58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.='Z...*IDATx...Oj.@.._B.e.Rs...7.M....&7p.
....7..........&H.........&....0......(..f.'....).X... ._...o?<D...
.F.X.k!.#...h.l.;.......bMx.J.....k....`p..~}@...k:EK..M&.:..6....2. .
.%....=.z...h....w.E...\.J.}]....#.....o.L,....K4.....e...........u]&.
.Z.k.f.$I>!...Y..=...!Vu.g..qD..A.4M..|.l}....yH..&._...>.....IN
....IEND.B`.....
<<< skipped >>>

GET /images/lvy/mz53_160307.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Mon, 07 Mar 2016 09:43:45 GMT

ETag: "735-52d724d013640"

Cache-Control: max-age=31536000

Expires: Tue, 07 Mar 2017 10:00:39 GMT

Content-Type: image/png

Content-Length: 1845

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:58 GMT

Age: 5581039

Connection: keep-alive

x-hits: 24406626
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:EEDEFD2FDBAB11E58FFAF759
B2BB2376" xmpMM:DocumentID="xmp.did:EEDEFD30DBAB11E58FFAF759B2BB2376"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EEDEFD2DDBAB11E58F
FAF759B2BB2376" stRef:documentID="xmp.did:EEDEFD2EDBAB11E58FFAF759B2BB
2376"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>m.K.....PLTE........G........F..?..F.....&g
t;..............>..............B..6.....F..:.E..x#.K.7.`;;;c-...G..
..)!...0.Q....~^.........2.R/.J..=..E.....D.....=.........0.[.x..b 1.]
.|.ogOt....>HLO...n.U..F..Cv.o...s.m1.]............Y..t.&..R.0.....
.u........s..,[email protected]..(..J......
.........E".E.....B,.Z.....y..G.....u.....B..G.....F........:.....=...
`2...m...,.J..............<.}....XY[HGHNf........./.....V.H...h..@.
.:.....G..<........Q.....G.....e.u#.../.[..-..=.B....7.a..<...W.
S...........>..<..D..zb.i.....=................U...v..u..>
<<< skipped >>>

GET /images/lvy/icon_mz62_160329.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 29 Mar 2016 08:44:27 GMT

ETag: "5ff-52f2c0970b0c0"

Cache-Control: max-age=31536000

Expires: Wed, 29 Mar 2017 09:00:19 GMT

Content-Type: image/png

Content-Length: 1535

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:17:58 GMT

Age: 3683859

Connection: keep-alive

x-hits: 16215561
.PNG........IHDR................a....sRGB.........gAMA......a.....pHYs
.......... ......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.a
dobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" 
xmpMM:InstanceID="xmp.iid:302F918F658B11E584BBDD0F24716BFE" xmpMM:Docu
mentID="xmp.did:302F9190658B11E584BBDD0F24716BFE"> <xmpMM:Derive
dFrom stRef:instanceID="xmp.iid:302F918D658B11E584BBDD0F24716BFE" stRe
f:documentID="xmp.did:302F918E658B11E584BBDD0F24716BFE"/> </rdf:
Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="
r"?>..Y....AIDAT8O.SKh.Q.=o..d.dJcm..?...-tU\t]A,.U..bA7..gQ?.. Aq.
..........n..f.`..*M...N3If.yo o&5./..y..s/.. ..59rg.k...&.?...IC...4D
.B^...z.5..J.>`D.-T.J..)..T....$~.z....P..%G.R..A.0V.:.W...'2{gJ..D
'.o.(P....%............X...7.-...........e.8.N.A......][email protected],.....
...*..)(.....L.....A.{c..."..,.'A.b*.)YL..@B...][email protected] ...i..
..?.R.0ts._.4.$.c...~9fS....v5...{..3...j.t..c....1:..z(/ ....x...W.HL
6.D....V....i...Q.17".(..p..j.m.G.p......z70..............H.d..us.6cj.
...b.Hy.b......Ed.`.b..E.q..T.i.{.....ca.......C....<...K.o..2.
<<< skipped >>>

GET /images/ico_amazon.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 16 Aug 2013 07:32:51 GMT

ETag: "218-4e40b99166ec0"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 536

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:00 GMT

Age: 29432466

Connection: keep-alive

x-hits: 116929364
.PNG........IHDR.............(-.S....PLTE......................I......
.....G..a.....G..H....ZZZ....! ...WWW........g.o............i.........
.. ....{....kkk........x..I.......n... ..........i.........#...ppp....
...................^|||..5.....f.c....NNN........9..........,A....LtRN
S.....................................................................
...............IDAT.WM.U..0.................|X..F2af..b....>...@...
Br E!3..[Q.......%.Z@|}...,.....z...;.l....4.nC.$..vb..L8...yJ.!.|.qM2
.Y}g..Y...p@..:......{...Y.....<[email protected]`.....


GET /images/i_tmall.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 25 Feb 2014 10:06:56 GMT

ETag: "3e8-4f3383f815000"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 1000

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:00 GMT

Age: 29432466

Connection: keep-alive

x-hits: 116118124
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:69815D71833111E38AF6B230
08E312F1" xmpMM:DocumentID="xmp.did:69815D72833111E38AF6B23008E312F1"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:69815D6F833111E38A
F6B23008E312F1" stRef:documentID="xmp.did:69815D70833111E38AF6B23008E3
12F1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...J....PLTE...............W.......tRNS....
....S...0IDATx.b`aB.,.L..H..ebF.`.F8.%.. .\... 9..s....0.H_.ye);.....I
END.B`.HTTP/1.1 200 OK..Last-Modified: Tue, 25 Feb 2014 10:06:56 GMT..
ETag: "3e8-4f3383f815000"..Cache-Control: max-age=31536000..Expires: S
at, 04 Jun 2016 08:36:54 GMT..Content-Type: image/png..Content-Length:
 1000..Accept-Ranges: bytes..Date: Wed, 11 May 2016 00:18:00 GMT..Age:
 29432466..Connection: keep-alive..x-hits: 116118124...PNG........IHDR
.............(-.S....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:c
om.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTcz
<<< skipped >>>

GET /images/icons/y2x5_150626.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Fri, 26 Jun 2015 10:04:24 GMT

ETag: "8b8-51968dd523a00"

Cache-Control: max-age=31536000

Expires: Sat, 25 Jun 2016 10:23:03 GMT

Content-Type: image/png

Content-Length: 2232

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:01 GMT

Age: 27611698

Connection: keep-alive

x-hits: 112645444
.PNG........IHDR.............(-.S....tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:2C320153E7ED11E4BA39BE293C
13D554" xmpMM:DocumentID="xmp.did:2C320154E7ED11E4BA39BE293C13D554">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2C320151E7ED11E4BA39
BE293C13D554" stRef:documentID="xmp.did:2C320152E7ED11E4BA39BE293C13D5
54"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>...C....PLTEMB;..%..$4,)*# )#!.....2..p%!%.tJ
..2 ......."...C6%.. MD;=..l`a0*$,&.......n15,%.........s...YOI..nVU..
.;.sz...../......2 ".".@53...:)..uSGGJGCLp]SXKE.hF1 2[JB.vUbQI...hYSq.
.eMG- ,p.. --.)(..*D:6..wH;=YKJ*2B.fGM:;....eC6*.@0"..iKB<)',l...rn
..Z ..mg_....~{.A;d[OH8Dplf...)'%.{j."!u'.J35 #-hg.xl[-$ jaagb.B5'." .
kJH;,...KFD...UN\.z^.)%..F{rvn_VK.2QRpzp_.|i%..K==....*&rcLnS7cR<y.
.......q........5,).....r$"&.& o27..(C:6.....[..R.$...P..=..J..Te^V31C
WK=..9bTLWH;.2,i\J.jD]TOq_P...b]XB..-..]WUm....?@9<}vsSF;vsrmbZ1&.e
TW.....=fUETHD`^^H@D^^.oec1'(LA@IC@kS;hTTLJ....`[.>51XBL64<.
<<< skipped >>>

GET /day_data/20160511.js?ver=1.0 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Tue, 10 May 2016 02:58:01 GMT

ETag: "89-5327417d54040"

Cache-Control: max-age=600

Expires: Wed, 11 May 2016 00:25:51 GMT

Vary: Accept-Encoding

Content-Type: application/javascript

Transfer-Encoding: chunked

Date: Wed, 11 May 2016 00:18:01 GMT

Age: 130

Connection: keep-alive

x-hits: 2454
0089..mystyle.everyday.data = {title: "\u7b11\u8bdd\uff1a\u771f\u662f\
u6167\u773c\u8bc6\u73e0", url: "hXXp://day.2345.com/20160510302383.htm
l"}..HTTP/1.1 200 OK..Last-Modified: Tue, 10 May 2016 02:58:01 GMT..ET
ag: "89-5327417d54040"..Cache-Control: max-age=600..Expires: Wed, 11 M
ay 2016 00:25:51 GMT..Vary: Accept-Encoding..Content-Type: application
/javascript..Transfer-Encoding: chunked..Date: Wed, 11 May 2016 00:18:
01 GMT..Age: 130..Connection: keep-alive..x-hits: 2454..0089..mystyle.
everyday.data = {title: "\u7b11\u8bdd\uff1a\u771f\u662f\u6167\u773c\u8
bc6\u73e0", url: "hXXp://day.2345.com/20160510302383.html"}..0..>....


GET /images/index/mod-dot.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0

HTTP/1.1 200 OK

Last-Modified: Thu, 27 Aug 2015 11:51:36 GMT

ETag: "6b4-51e4996dc0200"

Cache-Control: max-age=31536000

Expires: Fri, 26 Aug 2016 14:10:04 GMT

Content-Type: image/png

Content-Length: 1716

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:02 GMT

Age: 22241278

Connection: keep-alive

x-hits: 94698655
.PNG........IHDR.............a.E.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F8
B2C6AD4B2611E5B810C0794A4CB90F" xmpMM:InstanceID="xmp.iid:F8B2C6AC4B26
11E5B810C0794A4CB90F" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D868CCB324311E4B5
3F954A3C1DF708" stRef:documentID="xmp.did:7D868CCC324311E4B53F954A3C1D
F708"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>........PLTE...............................
.................................................................   !!
!"""###$$$%%%&&&'''((()))***   ,,,---...///000111222333444555666777888
999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJ
JJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aa
abbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxx
yyyzzz{{{|||}}}~~~....................................................
......................................................................
..................................................................
<<< skipped >>>

GET /images/w_day40.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Wed, 04 Sep 2013 01:32:03 GMT

ETag: "163b-4e584c5c04ac0"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:54 GMT

Content-Type: image/png

Content-Length: 5691

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:02 GMT

Age: 29432468

Connection: keep-alive

x-hits: 114571596
.PNG........IHDR.....................PLTEooo)......f............O.....
U.........................................C......................."R..
........z..R...........l.......................<.....N.....N.......
.i........E..H...........D....................{..T........t...........
..................j..n.............. ...........\..[...:..........B..#
.....~..<.............................f}}}../../.....t.............
..........{................._.....?..o.....N.{......b...X..../.....Y..
 .................:.................a...........-.....q.....?.....S...
.................K.....3...........#..m...........).....O.._..E.....K.
._.................t.....O.....n...........3.....R....s...............
...............).....{..,.....B............../.....l...........J..y...
..!..H.....E...........<..............C.......u......tRNS..........
......................................................................
......................................................................
......................................................................
....................................S..%....IDATx....|.e..k..Xj.....f.
&u-....V.E];..e........u..-.... .."cC...6. .F.....t..*..............'.
..I.r..=..Yz.=.Osm.>.{.{..y.....$.0 ..m......VOQ..<..a.....l...V
l).5....`c...-...v...a....9.....C.*......u......`4..jC..E.?"..>...{
..q.=.........^[email protected]..<l"
.VV.Y\'F$......Af...6.d.t8.a..Y...N.C{a..a.M....=..FAzS.w.XyAT-...kmc.
.YH..e..).x.......7%..`.z...=R.]i..G..(......A.0....T^w..5=&@.<
<<< skipped >>>

GET /images/mystyle_wait.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Thu, 17 Feb 2011 07:01:58 GMT

ETag: "17d-49c74f9354580"

Cache-Control: max-age=31536000

Expires: Sat, 04 Jun 2016 08:36:52 GMT

Content-Type: image/gif

Content-Length: 381

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:03 GMT

Age: 29432470

Connection: keep-alive

x-hits: 117211572
GIF89a.............s.................!..NETSCAPE2.0.....!.......,.....
.....0h.E.0.2.\ ..^...D..e..],.._...U..........F....d..!.......,......
.....hj..&.PHa....]..!.......,...........XT.F.8...`......!.......,....
.......XTf4.).j... B.@..!.......,...........hVTJ.(..... ..J..!.......,
...........hjE.....`....]..!.......,..............."8.X!e.A.-..!......
.,.............f!.).j-.42H.E..;....


GET /images/index/yun-skin-151015.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Wed, 25 Nov 2015 10:03:10 GMT

ETag: "afb-5255a90ca1380"

Cache-Control: max-age=31536000

Expires: Wed, 30 Nov 2016 08:10:22 GMT

Content-Type: image/png

Content-Length: 2811

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:03 GMT

Age: 13968461

Connection: keep-alive

x-hits: 47440189
.PNG........IHDR...(............g....PLTE.........r.[aaa..uU....e.....
........................r...........................b.................
........................}}}}.h...s....................................
.........................................jjj.....}.................y..
............................z.d......mmm..............................
......................................|.....................i.........
............................u.....m...................................
...............................qqq........................{...........
......................................._.....^........................
.....ttt..............................................................
...............q.........................................l............
......................................}.)[email protected]^..S.
.k....g.m...m..m...m..m...R.U*.j:.L:....M..< .E!.......x..U......L.
q.m=.x..U..^..2....3....>....ez...g...W}t{.....Fc.,.=....b....n..g.
o......=[..[.[[email protected]..`..7........g...C..C.9t.....Y......&l
t; ......iIq Q.,.?8.JKa......J...?........ E.{.....&|/..^...Y.<.s23
.@.....?..|...2...I........9B6.^.i....Pz....5...RXv.!.>......`.X...
..`..#....."....h..{u.?a....ty..j.u'WV.....N.f.....c.....u(.....>..
[email protected]).......:.X/"V<t....x...c.W...E........#..C..VKu...
....:...!..4.$xM.&E...J..?Y.Q.JK..t..*i.W.....X..n.4..O..]G....p....t.
...f.4.I.u.%..%K.h..3...>}.......IF......Q.v|........eG ...'....*.7
.....p..\.f..k.m.%..L..S.........'..n......l.>...}...>n\.d..
<<< skipped >>>

GET /right/homepage/img/block1409031001/tab1/20160505092233.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Thu, 05 May 2016 01:27:36 GMT

ETag: "191b-5320e3f457200"

Cache-Control: max-age=31536000

Expires: Fri, 05 May 2017 01:28:05 GMT

Content-Type: image/jpeg

Content-Length: 6427

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:03 GMT

Age: 514199

Connection: keep-alive

x-hits: 2744179
.....0Exif..II*.......1...............VVV.meitu.com....C..............
......................................................C...............
........................................................N.|...........
....................................................}........!1A..Qa."
q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwx
yz....................................................................
..........................................................w.......!1..
AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghi
jstuvwxyz.............................................................
.......................?.....4....j..^.t.......b...2p1.Mx..*.}.e....u.
..R..!{...K.......l....|.....61..N...........?i..j.........}]...nbd..`
....z..8.Y'(....u...L...a}yo.wPj67..-..:.\*..GR3.W.I{...&T./2G.4ZO.u..
'J.5.][.y.e..\......5.F.U%.Z.......~$x.].. K.J.......PC.R:g...V..;..c.
.Z.2<%...jq.z....VV.`.ms?...9.s.....)..U6.v.\........,.../.Y....$E.
..<..g.c8.B2S............H........W3ih...f.....a... .....~....2...j
.t...E....AW.9...c..{V..R)...f[W{...j}[.?[v.....y.D.9d.I....}:V...../%
..B..?uy.'......X....]2.w..Rv..uV.$..WIO.{.m.G..[....'.j.z....._.fA;..
r.u..Tf.u7.......?.....M.Z..cw .E7o.D..J...UjFvZ.... Q......k..Ky.....
'... ...T...tV.4......1i.....x...Y.X...wH..L.2.`.k....&...WW.T#.....t.
o...P..JWQ...^UXHr.;....n|.*.7J.NsgC......yQ\..d/'.p......#..........7
dq..25.d......3.........\TL.v.B.A.E.)..2K.o.{......`....3.rH...<..|
V.T\.u......F.s.D......O..%...H`.( ..:.#.....B.......w....x.y.Q.H.
<<< skipped >>>

GET /right/homepage/img/block1409031001/tab1/20160505092249.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Thu, 05 May 2016 01:27:36 GMT

ETag: "1bee-5320e3f457200"

Cache-Control: max-age=31536000

Expires: Fri, 05 May 2017 01:28:05 GMT

Content-Type: image/jpeg

Content-Length: 7150

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:03 GMT

Age: 514199

Connection: keep-alive

x-hits: 2621454
......JFIF.............0Exif..MM.*.......1..............VVV.meitu.com.
...C..................................................................
..C...................................................................
....N.|...............................................................
}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUV
WXYZcdefghijstuvwxyz..................................................
......................................................................
......w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFG
HIJSTUVWXYZcdefghijstuvwxyz...........................................
.........................................?...Z.g....e...3...Ae!3..,...
...9Y.....t....B.t.X:......0H.......3XN|.Kr...T......A5...Ap..h..1.=.8
..hV.......Zh7.}}..4dF.H......O.....v..rG.:....kH...s$0.dVB......98...
.99(.....9..S../u.3T.#.......,eH..F.y.r...0OZ.U.ch..8QR...9......Ki...
.1..-......[..GN1.tQ.EwSveVQ..".F...S...._4....r....J.C%...x*....s&.w.
...3..^uI..M%.3.x..e.=....s!...t..<O.j6...\...%jQm..n*.9 ]B....._j.
.u..[kt..'.1...9..U...&..........~S....Z.s.VCQh.?......G.&.&...m....Ye
.#<.b.....x.1>.N.]*..J......6..SYh.... m..K...8..^..^..\..#.B..n
.X...3t..W.jn.....J.<.#...4....,hJj.?At.F.^..A~_u...%..c..#T....~{.
F.....s.p.........Y._.|.`...|1l........3.b....74.....X].]..p....DW...o
.C...p......=kV......<....~$|F.i.%....!.....!.. q..qn.e.8.5i.7c...u
......3Z....F..S.%...AVPzm........VZ..p...{.....9#MFm.-..".,F.~\..t. 4
.et].8o....G. ......I..c..8e...<....Sr.9jG..... I.,..k.t.......
<<< skipped >>>

GET /right/homepage/img/block1409031001/tab1/20160505092311.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.2345.com/?kqq876038563

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.2345.com

Connection: Keep-Alive

Cookie: sts=0; wc=54511; lc=54511; lc2=54511; wc_n=%u5317%u4EAC

HTTP/1.1 200 OK

Last-Modified: Thu, 05 May 2016 01:27:36 GMT

ETag: "1302-5320e3f457200"

Cache-Control: max-age=31536000

Expires: Fri, 05 May 2017 01:28:05 GMT

Content-Type: image/jpeg

Content-Length: 4866

Accept-Ranges: bytes

Date: Wed, 11 May 2016 00:18:04 GMT

Age: 514199

Connection: keep-alive

x-hits: 2549983
......JFIF.....H.H.....0Exif..MM.*.......1..............VVV.meitu.com.
...C..................................................................
..C...................................................................
....N.|...............................................................
}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUV
WXYZcdefghijstuvwxyz..................................................
......................................................................
......w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFG
HIJSTUVWXYZcdefghijstuvwxyz...........................................
.........................................?.O..............bC.C.s...$..
......k......r'..\.....cc.......O..-..BI.-mt}M..p.g..E$.2.|.....o.#..1
./.|i..O.:....u5....J.].cff$.'.(....X4u-.........g..v..t....O....k..].
$~u#h..../.1k..L....8.....i .S..7....V..q*j.D.7...1...9.k.....t<=H.
.}[email protected].......}Y.....},./...~Pjd..w;q....h....
..(.......tw.cl....d....l.>o/[........2 Xu2..9..*.[.....n..k....FX.
l.........`J....k.....1..q.w.....<?ut.p...6..c.8......S..E....o.Clp
.O'w......L..Z.h......W....30.......nRp.....L............... ..,.5.Po.
..|.)%R..._......rH..kU..RWe..|j....Z...&...Q.f.f....,?. ..j9_.....<
;_..ao.>.:.!.-..&..Go..$.j,.c.`. ..ki.h.e..2...u...P.@..|..1Cj:*K..
...&.'.H.R.....<]...$H.(.F...#.3....6.5..[.>r....E.d.|...k..)[S.
_...xw.Wv...[. ... ...5..wA..dhxWJYn...'R.gp.Z..[...w5.'....Ps..ul.i&l
t;).i.L..V....bE.p..#.q.x..8..R2.....I{...]...$..D..r....'>.. .
<<< skipped >>>

GET /t/acookie/acbeacon2.html HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.2345.com/?kqq876038563