Trojan.Win32.FlyStudio_bceb152306

by malwarelabrobot on September 7th, 2015 in Malware Descriptions.

Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, Trojan.Win32.IEDummy.FD, GenericEmailWorm.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan, Worm, EmailWorm

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: bceb1523065e3be16ed6387d85223ab6
SHA1: 98d85ba0be2a5764233af13bfbca3d611ff8ba93
SHA256: 54451125ff266284e25e4ce50f96011db081f56a0dc625ecc5199a1f15bc881b
SSDeep: 49152:EheWt7pOWC7uUMmrVE1tSJGqfSxV8Ka8hTL/I LxPuSCynwxhRcO1QH9:M7t7phnmu1tSJGqfSxVXL/DxDH9
Size: 4030464 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171, UPolyXv05_v6
Company: MyBrowser 1.0.2V28.08
Created at: 2015-07-19 14:45:32
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):

cacls.exe:1316
cacls.exe:264
cacls.exe:1752
cacls.exe:1336
cacls.exe:1772

The Trojan injects its code into the following process(es):

%original file name%.exe:856

Mutexes

The following mutexes were created/opened:

DDrawDriverObjectListMutex
{1B655094-FE2A-433c-A877-FF9793445069}
__DDrawCheckExclMode__
__DDrawExclMode__
CTF.TMD.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Layouts.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Asm.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Compart.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.LBES.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
ZonesLockedCacheCounterMutex
ZonesCounterMutex
ZonesCacheCounterMutex
ÃŒÃ¥Ã‘Ã©Â·Ã¾Ã’Â»Ã‡Ã¸
WininetProxyRegistryMutex
WininetConnectionMutex
WininetStartupMutex
c:!documents and settings!adm!local settings!history!history.ie5!
c:!documents and settings!adm!cookies!
c:!documents and settings!adm!local settings!temporary internet files!content.ie5!
_!MSFTHISTORY!_
RasPbFile
ShimCacheMutex
DDrawWindowListMutex
DBWinMutex
c:!documents and settings!adm!userdata!

File activity

The process %original file name%.exe:856 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CA8127G5.swf (1983 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\exists[1].htm (56 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439574409548965382[2].jpg (883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1437495922489029677[1].jpg (859 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[3].jpg (293 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[2].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5oiR54ix5L2gX-WbvuaghzUwXzE0MzY1MTk4OTQ5MjE[1].png (2682 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\t[1] (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1418090705130314943_s[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFortunelLevelList[1].action (2444 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\airline_prom2_v6[1].png (7918 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\logo_foot_v4[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery_MIN_5[1].htm (9 bytes)
%System%\drivers\etc\hosts (308 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\airline_prom3_v7[1].png (5718 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\v627061383118550[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\openguard_edb1bde[1].png (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1395152088400052091_s[2].jpg (219 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1433251374571726650[2].jpg (3603 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\close_b836070[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1429894951825129732_s[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435635632917325370_s[2].jpg (434 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\LAB_0.1[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\unreadTipList[1] (147 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorMsg[1].htm (108 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ips[1].jcp (56 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lpisearchd[1] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1441413431739154894_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\anchor2_2c3e5d6[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\loading[1].gif (9701 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\icons6-p8[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\fx_loading_c785dd3[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\t[1] (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1440648332755373327_s[1].jpg (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getThisRoomOnlineManager[1].htm (271 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\new_head_v1[2].jpg (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qunar[2].txt (5319 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1438744520607433069_s[1].jpg (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrnvjt5cj201x01st8j[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1438945428930586147_s[1].jpg (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\blank_5307b88[1].png (949 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head_6853a2a[1].css (336 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\entSceneConfig[1].xml (1537 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\55So5b-D5ZCsX-WbvuaghzUwXzE0MzY1MTkzNDEzODA[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\newhistory[1].htm (1048 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weibo-title_v1[1].png (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\openguard_close_a6285d9[1].png (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\c1.web.yystatic.com\r\rc\yaoguo\main\1\3\main.swf\main_guest_sobj.sxx (59 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1422324423827564029[1].jpg (2960 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1438379669194197912_s[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\allocateCookie[1].htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\47a8e2ac999885[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\a0b8c87b6804155aa4db6b07abc52998_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435219348429169353_s[2].jpg (422 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\login-close_73c6be5[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441295193740557125[2].jpg (1901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[2].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1431836293039868445_s[1].jpg (1250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1427148922469733899_s[2].jpg (1734 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=flight_float_layer&chan=flight&pg=home&pos=top&site=qunar&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬[1] (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\tipsbg_51160c7[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\analytics[1].js (758 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440223203292588355_s[1].jpg (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\swfobject_dc734ee[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\dis[1].htm (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFollowCount[1].action (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\t[2] (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440928658925275259_s[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1436004451432314709_s[1].jpg (458 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (249 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\e6u5-min[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\logo-mini_ca367ba[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\20150806_flighthp_background_1600x336_Ebb_6027[1].jpg (13436 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1432637075681653373[1].jpg (418 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\jquery.min_4de7337[1].js (2475 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1438627049996466424[1].jpg (855 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (146 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@czcycm[1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1441413431739154894_s[1].jpg (229 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorIsInWeb[1].action (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\f1f51d8b64555950213a9cdb[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[5].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getThisRoomManager[1].htm (459 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo3037ca6j208w05kjs5[1].jpg (13802 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getManagerCount[3].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\showwall-bg-v3[1].jpg (2859 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[1] (848 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0.1[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1eoo304ivslj208w05k3z6[1].jpg (3596 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\queryNewGift[1].action (42 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\socketAndLiveflash_9a63a0d[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\udb.sdk.pcweb.embed.min[1].js (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_login[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[3].js (4062 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1436152159875483712[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\xelogin.sdk[1].css (667 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\home_pack@659eac6bc96cfd402d2a5a4a0dc394e4[2].js (9943 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mmListIco_v3[2].gif (300 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440223203292588355_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m-usertoolbar@8731b28d87b58d8ff99018b261f9430e[1].js (6047 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CACTMFSV.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\index_MIN_32[1].css (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar[1].js (325 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getManagerCount[2].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\11[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\flash_star2[1].gif (443 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1440771193057527291[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFollowCount[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1441206263416060384[1].jpg (4649 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[3].css (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441173204394825695[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1440424030229980088[1].jpg (3662 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\checkbox_ed6f91a[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1432637075681653373[2].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\framId=homeadSy&chan=flight&pg=home&pos=right_top&site=qunar&size=230x200&type=Tear_angle&tile=14415244931185684352&city=åŒ—äº¬[1] (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436108213754093726_s[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1438744520607433069_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guard_ico_c95738b[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\44734782[1] (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CATGID1B.js (24482 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@kugou[1].txt (149 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\DD_belatedPNG_79c3052[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnwfx5tj201x01sweb[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\kg_d6ff0a7[1].js (2453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ips[2].jcp (65 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\CA2NIH61.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\guide_hd_490015c[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1011v1431328135664996922_s[2].jpg (325 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getAnchorIsInWeb[1].action (76 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\airCoPromote[1].jsp (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440221938622582571[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\live-status_572c6a8[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\peihuaBox[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\month_on_b78df36[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\ga.min[1].js (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\gold_show_ca021d1[1].png (4123 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\girlfall_5[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\btnbg_f441c87[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1422961785334695929[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_login[2].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertro07v1ij201x01smwz[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\db85577447[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440848628254728116_s[1].jpg (950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guardcar_img2_b3ed2ed[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439574409548965382[2].jpg (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\exists[1].action (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\logo_foot_v4[2].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\6[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\db85577447[2].jpg (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guide_bd_5f205ce[1].png (2927 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\db85577447[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\promimg[1] (659 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\t[2] (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\js[2].js (13729 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\local[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\BaiduCM[1].png (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440053194108171729_s[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lgdsa1435203485699_1435203485703[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\dijia1[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436004451432314709_s[2].jpg (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\e6u5-min[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5oqx5oqxXzUwXzE0MzY5MjkxNjAzMTI[1].png (2794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\pixel[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\loginPop-inner[1].css (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getHeaderRecomAnchors[1].htm (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\ag_track-0.1.10[1].js (961 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jr_v1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\c[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\coin_g_18_6baac9d[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lgdsa1432702441696_1432702441700[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\float_close_69e4889[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[3].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\6aOe5aSp54yqXzUwXzE0Mzk0NzQ2ODIzODg[1].png (2142 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\medal3_7d0cb56[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\unpaycount[1].jsp (151 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\76a2433690d165a4111a247725573faa_s[2].jpg (322 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1422961785334695929[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\adba7f9116[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\index[1].htm (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5ZWk6YWSXzUwXzE0MzY5Mjg4Njk3OTQ[1].png (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1436152159875483712[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\8[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\index[1].do (618 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441361998196183527[2].jpg (707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CAT8ZENX.swf (3640 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1439197486367993238[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441374469426980004[2].jpg (1216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[4].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lowerPrice[1].jcp (3 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@irs01[1].txt (169 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\new_head_v1[1].jpg (509 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\iplookup[1].htm (149 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\t[1] (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\20150819170820_54770[1].swf (66873 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\message_ico_ff852cc[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\crossdomain[1].htm (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\a0b8c87b6804155aa4db6b07abc52998_s[2].jpg (333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\adba7f9116[2].jpg (780 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\dGFua2VfMTQzMjcxODI0OTQ1Ng[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\arc[1].png (153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5qOS5qOS57OWX-WbvuaghzUwXzE0MzY3NzEyMTk1OTM[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1439574409548965382[2].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\8f3879f2gw1es8ao4bqm4j20p00b4ads[1].jpg (11676 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\2387[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ips[2].jcp (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\TanxCM[1].png (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440862419512215827[1].jpg (1318 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getManagerCount[2].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\b[1].html (3480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\19[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\800374[1] (2035 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\header_new_v7[1].png (809 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm2[1].html (11187 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnq0jnjj201x01s3yc[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\lgdsa1441438583869_1441438583873[1].jpg (1590 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[1].action (807 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ico_en_v1[1].png (207 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\framId=ad_home_leftAD_float&chan=flight&pg=home&pos=left&site=qunar&size=24x202&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬[1] (4097 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1431320164947388798_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[1].ifmRightFlightExt&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (912 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\vdax.youzu[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\diamond_show_e38fc4c[1].png (5840 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20150828_flighthp_hs_24X202_6983[1].jpg (152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\s[1] (1114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440322326408959442[2].jpg (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\home_pack@659eac6bc96cfd402d2a5a4a0dc394e4[1].js (9200 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\gift[1].swf (3175 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\6[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\core[1].php (764 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[1].ifmRightTextlink&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\7cc0a9cabf777b1f4559aba439ed2c09[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery-1.7.2[1].js (4513 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\14[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1395152088400052091_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mmListIco_v3[1].gif (314 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324423827564029[1].jpg (2577 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[2].css (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\lgdsa1439891787785_1439891787790[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx_sideico_v10[2].png (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\footer_v10[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorMsg[1].htm (108 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ico_a[1].png (552 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\44734782[1].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\10[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertro6hn8jj200k00k741[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (30192 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\new_head_v1[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (156 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\recommend_lexiu_singer_5374cd6[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnstw19j201x01sq2r[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1eoo3020m1hj20dt0a7abq[1].jpg (6304 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440848628254728116_s[2].jpg (998 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\num_png8_0cea530[1].png (992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\12[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1046289[1].htm (4571 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\13[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\luckystar_png8_ce21b1c[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrno5dejj201x01sdfo[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\dh1_b95047e[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1418090705130314943_s[1].jpg (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getForbidSpeakList[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lgdsa1440644629465_1440644629470[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1437884372255724437_s[1].jpg (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ips[1].jcp (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\home@743e4cc42d940601823c9a8f4fac0402[1].css (1616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440221938622582571[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\large_plane[1].swf (23705 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lgdsa1441183347702_1441183347706[1].jpg (2422 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\z_stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\card_v1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1013v1440753029591128319[2].jpg (4348 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440862419512215827[2].jpg (1461 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\iwt-min[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\hurryup[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435841090922650162_s[2].jpg (1939 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\udb.sdk.pcweb.embed.min[2].js (881 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\54K45by5XzUwXzE0Mzk5MDkxNjc3NzQ[1].png (461 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bigScrollBg_344e5d6[1].jpg (76 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1406526224346765016[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\base_MIN_13[2].css (2286 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LAB_0.1[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\index_MIN_32[2].css (2058 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1424708659772115033[2].jpg (424 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ld[1].js (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\firstpay_bg_055c479[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\Camal_walk_loading[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\d184421399861104[2].jpg (4753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CA8DMPN0.js (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\loading[1].swf (1270 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[2].js (6779 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\idx_leftside_icon_v8[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\duowan[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LoginPop[2].js (2710 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_z[1].js (6817 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\unbind[1] (98 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\640[1].jpg (4316 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\bg_flyhd[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\css[1].css (6553 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\goldguard_img1_e327b51[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[3].jpg (227 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertrnr49h5j201x01s743[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\16[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\js[1].js (1681 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loading_wb[2].gif (479 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1013v1440424030229980088[1].jpg (4804 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\saleprice[1] (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ips[2].jcp (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1437884372255724437_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[2] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\640[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\22[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1433251374571726650[1].jpg (2758 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\base_MIN_13[1].css (1700 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (197 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo30076x3j20kw0c4abv[1].jpg (7392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\live_3eb55a3[1].png (630 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youzu[2].txt (286 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\reg4Merge[1].js (2391 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\e6u5-min[1].js (969 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\unpaycount[1].jsp (152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\main[1].swf (1769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\iwt-min[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\y[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1431840649105458010[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1418953953835284831[2].jpg (1976 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\cookieMapping[1].png (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\userLevel_v30[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertrnndoxdj201x01sdfn[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorMsg[1].action (117 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CALW8FHP.htm (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yystatic[2].txt (361 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ccc[1].css (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\roomGameIco_v13[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\546r55GwX-WbvuaghzUwXzE0MzY1MTcwMDMwMjE[1].png (2982 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440485378285229059_s[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\all_ae701ad[1].gif (2694 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\c2lyZW5mZWlqaV8xNDMyNzE4MjM2MDEz[1].png (922 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441361998196183527[1].jpg (752 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm2[1].htm (5952 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertro88zh3j200i00h0sh[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\MTFlashStore[1].swf (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo2zy2mvuj20m809vgnf[1].jpg (7572 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0.1[2].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\large_gift[1].swf (868 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\pixel[1].gif (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1438379669194197912_s[1].jpg (823 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (556 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\tipclose_ef3c29a[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5Y-j57qiXzUwXzE0Mzk0NzQ3NDQxOTk[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnyj5ifj201x01sa9v[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\loadAnchorInfo[1].htm (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[2].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[2].jpg (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\23[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo30ioszdg200o00omwx[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertrnuprdhj201x01sglg[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435841090922650162_s[1].jpg (1238 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441374469426980004[1].jpg (1389 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1013v1440753029591128319[1].jpg (2714 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\uparrow_83cd0fc[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getThisRoomOnlineManager[1].action (204 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo-v5[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\gold_min_e632ead[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20140717_quna_hp_logo_sjq[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1431320164947388798_s[2].jpg (226 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\forceReg[1].gif (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CA6T4ZM9.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[2].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ico_arr_ad[1].png (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getForbidSpeakList[1].action (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[1].jpg (1023 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1431320164947388798_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1431836293039868445_s[1].jpg (1164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\jquery_MIN_5[1].js (3820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ie7@dce0e00678bff57c9b1b95ed80a2890b[2].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\c[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vdax.youzu[1] (219 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\receivePhoneNumber[1].htm (56 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@criteo[1].txt (192 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\czcycm[1].htm (2880 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\base_head_v20_8bit[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1441206263416060384[2].jpg (3373 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435219348429169353_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\bdd631314f165f[1].jpg (2662 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[4].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\6ZK75oiSXzUwXzE0Mzk0NzUyMzc4ODM[1].png (2794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1437150501366480600_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lgdsa1440385065861_1440385065865[1].jpg (2404 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1427148922469733899_s[1].jpg (1708 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\entCard[1].swf (4469 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\reg4Merge[1].js (1007 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (189 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\5Lqy5LqyXzUwXzE0Mzk0NzQ5NDkwMTY[1].png (2794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1438945428930586147_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertrnxfxowj201x01sq2s[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\unreadTipList[1] (147 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\css[2].css (457 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\funny_gift[1].swf (868 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LAB_0[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery-1.7.2[2].js (3768 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\room2014_z_854673e[1].png (1757 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CA[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (156 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\offline_mask_ef50909[1].png (983 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ips[1].jcp (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\logo-v5[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[2].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\800374[1].htm (862 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\head-nav-v2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weekstar2_26e4de2[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\8f3879f2gw1es8cb5k86sj20kw0c4n0x[1].jpg (11596 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324075364249066[2].jpg (5618 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\MTFlashStore[1].swf (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[2].ifmRightTextlink&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\goldguard_img2_4bcb1d6[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertro1ar2vj201x01sdfo[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\IE7[1].js (598 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435841090922650162_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5545pcmix_regstyle[1].css (472 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\6I2n5YWJ5qOSXzUwXzE0Mzk0NzUyMDE5ODA[1].png (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_v5[2].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1418953953835284831[1].jpg (1145 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youzu[1].txt (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\defaultScene[1].swf (2553 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\mm[1].css (3639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439574409548965382[1].jpg (857 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441374469426980004[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1432637075681653373[1].jpg (418 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\goback2_0a3cafa[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436004451432314709_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\12[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\20130115111108651409[1].jpg (9524 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LoginPop[1].js (3260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\car[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\airline_prom1_v2[1].jpg (1582 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getManagerCount[1].action (124 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\e6u5-min[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\crossdomain[2].xml (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1433776513658558468_s[1].jpg (540 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\queryNewGift[1].htm (22 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\5ZGo5pif56S854mpX-eBsDFfMTQzNjE2NTEwODk3Ng[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mm_z[1].js (6716 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439458208429025694[2].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\vataplan[1].ifmRightHotelInter&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (900 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1433251374571726650[2].jpg (3988 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440221938622582571[1].jpg (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1436004451432314709_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\23317925[1].jpg (6593 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\showwall-bg-v3[1].jpg (3984 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_index[2].js (5354 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\b[1].html (2320 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1418090705130314943_s[2].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\weekstar_0db5739[1].png (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\c1.web.yystatic.com\pcInfo.sxx (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\guide_e62d96c[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\20150902_flighthp_912x90_7241[1].jpg (2743 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[1].js (7752 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CAOHQFKP.js (20723 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\e6u5-min[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1424708659772115033[1].jpg (394 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (197 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\c[3].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\7[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\crossdomain[1].xml (476 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5q2M56WeXzUwXzE0MzY5MjkwODI0Mzg[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[3].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\yellow_warn2_b8d73e7[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\icon_dire[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[1].txt (439 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\yaoguo[1] (376 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\kaibo_png8_54b424c[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\6JOd6Imy5aaW5aesXzUwXzE0Mzk0NzQ3OTE0NTI[1].png (407 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\f1f51d8b645559506886324a[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Application Data\E_UIEngine\90afea1eeb37be7a93471c36152ab43a\90afea1eeb37be7a93471c36152ab43a.jpg.data (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\entSoundControl[1].swf (2553 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\59[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ie7@dce0e00678bff57c9b1b95ed80a2890b[1].css (363 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorMsg[1].action (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\loading[1].swf (641 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\promimg[1].htm (17 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\m-usertoolbar[1].js (467 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@vataframe[1].txt (153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[2].css (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorGuardianList[1].action (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mootools_MIN_1.4.5[2].js (1816 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bodybg_33f93c5[1].jpg (26944 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\jquery_MIN_5[2].js (4304 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\js[1].js (20185 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\o266831357706635[1].png (265 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\home@743e4cc42d940601823c9a8f4fac0402[1].css (504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1439574409548965382[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\play_png8_f46d0c7[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\idx_sideico_v10[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\vataplan[1].topicLinkL&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (917 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1440549063335539924[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440928658925275259_s[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\anchorRandomURLZC[1] (686 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440059547324436188_s[2].jpg (231 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\base[1].css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[3].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\v.6[1] (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getUnlogRoomRecomAnchor[1].action (998 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\core[1].bmp (25617 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\airCoPromote[2].jsp (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\a0b8c87b6804155aa4db6b07abc52998_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\22[2].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\css[1].css (3745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getHeaderRecomAnchors[1].action (833 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (586 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_v5[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440181490946282973[2].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\receivePhoneNumber[1].action (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1011v1431328135664996922_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\crossdomain[1].htm (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435635632917325370_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440221938622582571[1].jpg (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\b[2].html (1160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\lowerPrice[1].jcp (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\fresh_normal_9dec513[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\button_old_171[1].gif (2 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (440 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[6].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo30ll39pg200o00odfl[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guide-close_d202536[1].png (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertro5j9b9j200j00h3y9[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\mm[2].css (2558 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\framId=ad_home_leftAD_bottom&chan=flight&pg=home&pos=mid&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬[1] (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\guardcar_img4_d5f9878[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\j[1].gif (35 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx-bg[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\s[1].htm (389 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\spread_cc93d16[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFollowCount[1].action (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\face_b020a38[1].png (675 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[3] (359 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery_MIN_5[1].js (3708 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\774ebecc402bde[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=rightTopBanner&chan=flight&pg=home&pos=top&site=qunar&size=272x220&tile=14415244931185684352&city=åŒ—äº¬[1] (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guardlist_bg_551206f[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\0b08ff7e458a5a[1].gif (11450 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440063054446958994[2].jpg (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5LmI5LmI5ZOSXzUwXzE0Mzk0NzQ4OTY3MzY[1].png (921 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440648332755373327_s[1].jpg (695 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\9df8c0850fd466[1].jpg (3374 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\firstpay_0b891c6[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20150902_flighthp_272x220_7241[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[3].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\new[1].png (984 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\btn_normal[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1440549063335539924[1].jpg (221 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFollowCount[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\queryCurrentRoomGiftPresentRec[1].action (31 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m_usertoolbar_ie6[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getUnlogRoomRecomAnchor[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1440771193057527291[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yaoguo[1].txt (172 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (897 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertro7f7fsj200q00e3y9[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440312136660066846_s[2].jpg (227 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weekstar_hd_560505f[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\to_top[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\59[2].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\db85577447[2].jpg (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437498037639692733_s[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\v627061383118550[1].png (89 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ff6fb4ec084fe7[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\pixel[1].gif (129 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weekstar_close_ad2dae8[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440059547324436188_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx_sideico_v10[1].png (392 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\Y2hhb2ppcGFvY2hlXzE0MzI3MTgxOTc4NzQ[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\SC[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\luckystar_bg_e8825da_e8825da[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\guard_page_0351b31[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ico_hm[1].png (757 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[2].jpg (295 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\all[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[2].txt (441 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\cookieMapping[1] (82 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=ad_home_rightAD_top2&chan=flight&pg=home&pos=top&site=qunar&size=230x90&tile=14415244931185684352&city=åŒ—äº¬[1] (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1eoo30gvn2pg201c01cjrc[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lpisearchd[2] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\LAB_0.1[2].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\d184421399861104[1].jpg (2666 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1433251374571726650[1].jpg (3513 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1435076285361226983[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\bjcx[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435841090922650162_s[2].jpg (426 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@agkn[1].txt (155 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\login_12[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CARY2U5P.js (1465 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440181490946282973[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\girlfall_5[2].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[1].action (1222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437498037639692733_s[2].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1436782172623299618_s[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\head-nav-v2[2].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\iwt-min[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\header-bg-v3[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\db85577447[2].jpg (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getActiveList[1].htm (74 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\c1.web.yystatic.com\r\sc\yaoguo\defaultScene\1\26\entSoundControl.swf\yaoguoSound.sxx (47 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438627049996466424[1].jpg (880 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\aside-close_a715ed0[1].png (651 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\button_old_171[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\IE7[2].js (1338 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\6aG56ZO-XzUwXzE0Mzk0NzUxNjQ3OTk[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439708920138471436[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mootools_MIN_1.4[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[2].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\arrow_5765863[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\room2014_f52238b[1].css (6769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lgdsa1441092502252_1441092502256[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\footer1_042bc00[1].png (1640 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439458208429025694[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getSlots[1].action (57 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getHeaderRecomAnchors[1].action (833 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1431320164947388798_s[2].jpg (226 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440312136660066846_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lgdsa1439712855329_1439712855333[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\DD_Deldtedng[1].js (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[3].gif (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\5YGa5pyL5Y-L5ZCnX-WbvuaghzUwXzE0MzY1MTk4MDU2NDE[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1439197486367993238[2].jpg (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_foot_v4[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\db85577447[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFortunelLevelList[1].action (392 bytes)
%Documents and Settings%\%current user%\Application Data\E_UIEngine\90afea1eeb37be7a93471c36152ab43a\90afea1eeb37be7a93471c36152ab43a.jpg (1924 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439574409548965382[1].jpg (121 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\c[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1441422031094414229_s[2].jpg (63 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\BaiduCM[1] (82 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1.tmp (8 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@agkn[2].txt (474 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\7[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m784061357704567[2].png (360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\js[1].js (5041 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lei_ico_c502e46[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\register_hd_7d5aff2[1].png (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guardcar_img3_8a36267[1].png (1388 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\crossdomain[1].xml (258 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yy[1].txt (155 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (368 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_foot_v4[2].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1eoo30hp6kgj203i02ta9x[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lock_700c688[1].png (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\framId=ad_home_leftAD_middle&chan=flight&pg=home&pos=top&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬[1] (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\b[1].html (3480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\successIcon_754795c[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lpisearchd[1] (360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CZ[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\qunar[1].eot (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1410630337859816512[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yaoguo[2].txt (289 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertrnp2iykj201x01sdfo[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\a0b8c87b6804155aa4db6b07abc52998_s[2].jpg (333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1432637075681653373[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\newhistory[1].html (1292 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\js[1].js (73743 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\5L2g55yf5qOSXzUwXzE0MzY5Mjg5NjU2NDc[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mootools_MIN_1.4.5[1].js (2696 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yystatic[1].txt (187 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LAB_0.1[2].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\guardcar_img1_96ea2b3[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\header-bg-v3[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\queryCurrentRoomGiftPresentRec[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1404267074821837648[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[3].htm (24 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (187 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324075364249066[1].jpg (3191 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\user_upgrade_png8_8efa0f0[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\sidecode_v3[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439708920138471436[2].jpg (438 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\base[2].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[1].topicLinkR&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (937 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\header_v16[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\entJsApp[1].swf (4853 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\76a2433690d165a4111a247725573faa_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\t[2] (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435635632917325370_s[2].jpg (434 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\TanxCM[1] (82 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\flash_star4[1].gif (645 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1416884712906517143[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getSlots[1].htm (46 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m-usertoolbar@8731b28d87b58d8ff99018b261f9430e[2].js (4120 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\modify_002fa1e[1].png (462 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\8f3879f2gw1es8btuhnzcj20kw0c4jv6[1].jpg (10148 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\iwt-min[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\16[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\v.6[1].htm (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\medal1_9ec86c9[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\loadAnchorInfo[1].action (32 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getManagerCount[1].action (93 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertrnzfsf9j201x01smwz[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\anchorRandomURLZC[1].htm (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CAEJCPMN.css (32713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\flash_star1[1].gif (411 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441173204394825695[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrnrvhnbj201x01sjr7[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\wealth2_27cd73b[1].png (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\header_v13[1].png (392 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CA274VBO.js (22840 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\duowan[2].js (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\broadcast_e962076[1].png (778 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=topAD&chan=flight&pg=home&pos=top&site=qunar&size=1600x336&tile=14415244931185684352&city=åŒ—äº¬[1] (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\yellow_warn_0473de0[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\headline_4835e01[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\640[3].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bg_wrap_ie6[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436108213754093726_s[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#c1.web.yystatic.com\settings.sxx (220 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1429894951825129732_s[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20150707155554612396[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440063054446958994[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\guard_d7153be[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrntqggoj201x01s0sk[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1435076285361226983[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441295193740557125[1].jpg (1861 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qunar[1].txt (4178 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437150501366480600_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\20150828_flighthp_fc_912x250_6983[1].swf (11014 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\b[2].html (1160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\a6474588f25947[1].jpg (2902 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\24h[1].png (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\goback_3e3f089[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\luckystar_165d5a5[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFollowCount[1].action (132 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\require.min[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\dot_0c624c3[1].png (119 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\reg4merge[2].css (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\entApp[1].swf (4025 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\quick_login2[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1eoo305zadvj208w05k754[1].jpg (3656 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorIsInWeb[2].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\dbt_14[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\img_qnkhd[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\b[1].html (2320 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\holidayService[1].xml (4749 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loading_wb[1].gif (407 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getHeaderRecomAnchors[1].htm (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\6aaZ5rC0XzUwXzE0Mzk0NzUwOTEwOTQ[1].png (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getThisRoomManager[1].action (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getAnchorIsInWeb[2].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[2].gif (301 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\oneway_index_config@55cc625333acbe2719021318e33cd061[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[4] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\weibo-title_v1[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\flash_star3[1].gif (481 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5Lqy5Zi0XzUwXzE0Mzk5MDkyMTI5OTU[1].png (922 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\vataplan[1].ifmRightFlightOwner&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (886 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m784061357704567[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\room2014_z_854673e[1].png (8392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1437495922489029677[1].jpg (878 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\d41869fb6060c0[1].jpg (3979 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFortunelLevelList[2].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\23[2].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\allocateCookie[1].htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\headerbg_60ee1fa[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1440485378285229059_s[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorIsInWeb[1].action (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bg2013_2015_f530136[1].png (5896 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorGuardianList[1].htm (241 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\546p5YW354aKXzUwXzE0Mzk0NzUwNTU2NDM[1].png (7 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\aGFvaHVheW91dGluZ18xNDMyNzE4MjIxNjQz[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\y[2].js (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\showwall-bg-v3[2].jpg (5420 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@agrantsem[1].txt (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\o266831357706635[1].png (258 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\flash_star5[1].gif (697 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorMsg[2].htm (108 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[1].jpg (639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\yaoguo[1].htm (927 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1410630337859816512[2].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\require.min[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440322326408959442[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\css[1].css (457 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1[1].htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1440053194108171729_s[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1441422031094414229_s[1].jpg (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\reg4merge[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx-bg[2].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\c[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\main[1].swf (2719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435635632917325370_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_index[1].js (4265 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\quanjia[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lab.min_c0c155c[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\chat_checkbg_423e9c6[1].png (341 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\cookieMapping[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439574409548965382[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\2387[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ips[1].jcp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[3].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[2].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFortunelLevelList[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\head-nav-v2[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\16[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\t[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437498037639692733_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\b[1].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1418090705130314943_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFortunelLevelList[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\logo_foot_v4[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\800374[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435841090922650162_s[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm2[1].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\button_old_171[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\v627061383118550[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439708920138471436[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1433251374571726650[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435841090922650162_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1429894951825129732_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1437495922489029677[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1440771193057527291[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1418953953835284831[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youzu[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1431320164947388798_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ips[1].jcp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\defaultScene[1].swf (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439458208429025694[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1441413431739154894_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\mm[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\receivePhoneNumber[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439574409548965382[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441374469426980004[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440312136660066846_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1432637075681653373[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\require.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\6[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\adba7f9116[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436004451432314709_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[3].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorIsInWeb[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\t[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\20130115111108651409[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_foot_v4[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lowerPrice[1].jcp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\db85577447[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery-1.7.2[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qunar[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1439574409548965382[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1395152088400052091_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mmListIco_v3[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439574409548965382[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324423827564029[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[2].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\BaiduCM[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\s[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\7[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorMsg[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mm_z[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1437884372255724437_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1438379669194197912_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\allocateCookie[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\duowan[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440221938622582571[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\a0b8c87b6804155aa4db6b07abc52998_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1436004451432314709_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\showwall-bg-v3[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\12[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_foot_v4[2].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\main[1].swf (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\y[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\yaoguo[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorMsg[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\b[1].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1418090705130314943_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1410630337859816512[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\22[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\a0b8c87b6804155aa4db6b07abc52998_s[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\a0b8c87b6804155aa4db6b07abc52998_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1432637075681653373[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\newhistory[1].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\dis[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFollowCount[1].action (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440928658925275259_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mootools_MIN_1.4.5[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1436004451432314709_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\e6u5-min[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[2].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\iwt-min[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\b[1].html (0 bytes)
%System%\drivers\etc\hosts (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\header-bg-v3[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1438627049996466424[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324075364249066[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LAB_0.1[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\IE7[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CA8DMPN0.js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\airCoPromote[1].jsp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ie7@dce0e00678bff57c9b1b95ed80a2890b[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\showwall-bg-v3[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0.1[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\queryNewGift[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getSlots[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\db85577447[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\TanxCM[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\udb.sdk.pcweb.embed.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_login[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[3].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorGuardianList[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\exists[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\iwt-min[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\v.6[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\db85577447[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\o266831357706635[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\home@743e4cc42d940601823c9a8f4fac0402[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1439574409548965382[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440223203292588355_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m-usertoolbar@8731b28d87b58d8ff99018b261f9430e[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1440549063335539924[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\index_MIN_32[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440862419512215827[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\anchorRandomURLZC[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\queryCurrentRoomGiftPresentRec[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\base[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\LAB_0.1[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\v.6[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1441206263416060384[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[3].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441173204394825695[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1440424030229980088[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1433251374571726650[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\t[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lpisearchd[1] (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1438744520607433069_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435635632917325370_s[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getHeaderRecomAnchors[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\44734782[1] (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_v5[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\e6u5-min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436108213754093726_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\b[1].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFollowCount[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\iwt-min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1011v1431328135664996922_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1418090705130314943_s[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[1].ifmRightTextlink&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440063054446958994[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435635632917325370_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440221938622582571[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getManagerCount[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\b[2].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\button_old_171[1].gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440221938622582571[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getThisRoomOnlineManager[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ips[2].jcp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441295193740557125[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440485378285229059_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qunar[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441361998196183527[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx-bg[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getHeaderRecomAnchors[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\girlfall_5[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFollowCount[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437150501366480600_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\b[2].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\MTFlashStore[1].swf (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[3] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery_MIN_5[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440848628254728116_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0.1[2].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\pixel[1].gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getUnlogRoomRecomAnchor[1].action (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440648332755373327_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#c1.web.yystatic.com\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[2].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\e6u5-min[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\23[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[3].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\59[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435841090922650162_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441374469426980004[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1013v1440753029591128319[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\reg4merge[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\promimg[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loading_wb[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo-v5[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getAnchorIsInWeb[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440053194108171729_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yaoguo[1].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx-bg[2].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[2].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\db85577447[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1431320164947388798_s[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorIsInWeb[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\home_pack@659eac6bc96cfd402d2a5a4a0dc394e4[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\weibo-title_v1[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m784061357704567[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1439197486367993238[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getForbidSpeakList[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1431320164947388798_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\db85577447[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1431836293039868445_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\jquery_MIN_5[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\v627061383118550[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[3].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\pixel[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1422961785334695929[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vdax.youzu[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440059547324436188_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx_sideico_v10[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bg2013_2015_f530136[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1436152159875483712[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getManagerCount[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435219348429169353_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\index[1].do (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\room2014_z_854673e[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\76a2433690d165a4111a247725573faa_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1427148922469733899_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\loadAnchorInfo[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\reg4Merge[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\new_head_v1[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\base_MIN_13[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ips[1].jcp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1424708659772115033[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440322326408959442[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\LAB_0.1[2].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1438945428930586147_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\d184421399861104[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getThisRoomManager[1].action (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1433251374571726650[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1435076285361226983[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1441422031094414229_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1432637075681653373[2].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LoginPop[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[2].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@agkn[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435635632917325370_s[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_index[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\room2014_z_854673e[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440181490946282973[1].jpg (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yystatic[1].txt (0 bytes)

Registry activity

The process %original file name%.exe:856 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1437306332"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CB 6A 3A F0 D0 24 24 0C 64 69 6F 16 DB 92 3D 23"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\MediaPlayer\Health\{88E49DFC-8E57-4D93-B3FA-32827360FD5F}]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process cacls.exe:1316 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D3 2E A2 7F D2 11 9A 2E 62 F5 C0 AB 63 45 0C B5"

The process cacls.exe:264 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D0 1E F1 51 18 9E 23 3C 67 B2 77 1D 13 82 53 E0"

The process cacls.exe:1752 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CE B9 45 1A 48 E0 37 06 82 8E E8 05 AC EC C8 D1"

The process cacls.exe:1336 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E0 CB 2A 3B 70 24 E3 BA A3 B9 B1 EF 09 36 91 CF"

The process cacls.exe:1772 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "EA CB E4 30 4A 73 89 75 6A E0 55 6A 20 8E 7B 8D"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 308 bytes in size. The following strings are added to the hosts file listed below:

127.0.0.1	www.cfyalan.com
127.0.0.1	cfyalan.com
127.0.0.1	cc.cfyalan.com
127.0.0.1	xiongda.i-ce.in
127.0.0.1	xiongda.cfyalan.com
127.0.0.1	www.xiongda.cfyalan.com
127.0.0.1	bbs.cfyalan.com
127.0.0.1	jmp.cfyalan.com
127.0.0.1	www.xiongda.i-ce.in
127.0.0.1	ÃÃœÂ´Ã³.cfyalan.com

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	886034	888832	4.50539	8cd0bfa5649fb292d192548108e96353
.rdata	892928	2931800	2932736	4.55834	12f35619f431b1b39a9c55aa7994d499
.data	3825664	335146	81920	3.74119	c5c39dbab13f4c88ee4a6170b4da79b1
.rsrc	4161536	119320	122880	3.42723	9db1c9072cd4557f7b305d6092dda33e

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://www.cfmogu.com/8.htm	192.126.113.201
hxxp://www.cfmogu.com/6.htm	192.126.113.201
hxxp://www.cfmogu.com/7.htm	192.126.113.201
hxxp://www.cfmogu.com/1.htm	192.126.113.201
hxxp://pic.pay838.com/mshow.aspx?AID=10851	115.238.72.30
hxxp://pic.pay838.com/mshow.aspx?AID=10850	115.238.72.30
hxxp://abc.ss229.com/AP5Min.aspx?AID=10851&Auth=AC1D06D058020A33550F33AE34123C9AD2828245B35634966FDAC96888940D2B&referer=http://www.cfmogu.com/6.htm&utz=1441524456008	115.236.16.240
hxxp://abc.ss229.com/AP5Min.aspx?AID=10850&Auth=5404AC7914545AD44F21F4654D944BD924889D9D3D844E0AF61A48712ABFDD38&referer=http://www.cfmogu.com/8.htm&utz=1441524456430	115.236.16.240
hxxp://abc.ss229.com/AP5Min.aspx?AID=10850&Auth=5404AC7914545AD44F21F4654D944BD924889D9D3D844E0AF61A48712ABFDD38&referer=http://www.cfmogu.com/8.htm&utz=1441524457837	115.236.16.240
hxxp://6880faf6fb5e6087eb1b2dc.http.uuzuonline.net/?q=150706X7ZzHz4&sid=14516
hxxp://6880faf6fb5e6087eb1b2dc.http.uuzuonline.net/js/y.js
hxxp://p.huluwa8.com/1/2016.html?uid=614516
hxxp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd	203.205.143.142
hxxp://6880faf6fb5e6087eb1b2dc.http.uuzuonline.net/t/?t=begin&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&ou=0&rand=1441524460852&ip=3270664410&timestamp=1441524459
hxxp://p.huluwa8.com/api/c.php?platform_id=1&union_id=2016&union_type=1&link_id=0
hxxp://abc.ss229.com/AP5Min.aspx?AID=10850&Auth=5404AC7914545AD44F21F4654D944BD924889D9D3D844E0AF61A48712ABFDD38&referer=http://www.cfmogu.com/8.htm&utz=1441524461274	115.236.16.240
hxxp://p.huluwa8.com/js/1/g2.js?0.8850470745084853
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_pc2826cc.css
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve2826cc.css
hxxp://p.huluwa8.com/1/
hxxp://youzu.xdwscache.ourglb0.com/usr/uploads/201508/20150819170820_54770.swf
hxxp://6880faf6fb5e6087eb1b2dc.http.uuzuonline.net/t/?t=complete&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&l_t=2875&rand=1441524463727&ip=3270664410&timestamp=1441524459
hxxp://mp.weixin.qq.com/	203.205.143.142
hxxp://youzu.xdwscache.ourglb0.com/images/vali_sprite.png
hxxp://youzu.xdwscache.ourglb0.com/swfs/87/25090zshh0203/index.swf
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch.2x278965.png
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch_active.2x278965.png
hxxp://p.huluwa8.com/p/1/2016/0/2.js?uid=614516&lt=1594&key=0&tid=1&0.8503053447648762
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/images/icon/common/icon_loading_white2805ea.gif
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_combo2826cc.css
hxxp://youzu.xdwscache.ourglb0.com/swfs/87/25090zshh0203/bg.jpg
hxxp://youzu.xdwscache.ourglb0.com/swfs/87/25090zshh0203/sound.swf
hxxp://youzu.xdwscache.ourglb0.com/swfs/87/25090zshh0203/reg.swf
hxxp://p.huluwa8.com/p/1/2016/0/5.js?uid=614516&lt=2469&key=0&tid=3&0.4339676475296046
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/js/biz_wap/moon275627.js
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/js/appmsg/emotion/caret278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/map278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/textarea27cdc5.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/nav278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/common278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/slide27cdc5.js,/mmbizwap/en_US/htmledition/js/pages/report2805ea.js,/mmbizwap/en_US/htmledition/js/pages/music_player275627.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/dom278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/emotion27f4f1.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/hashrouter2805ea.js,/mmbizwap/en_US/htmledition/js/a/gotoappdetail281ad5.js,/mmbizwap/en_US/htmledition/js/a/ios275627.js,/mmbizwap/en_US/htmledition/js/a/android275627.js,/mmbizwap/en_US/htmledition/js/a/profile281ad5.js,/mmbizwap/en_US/htmledition/js/appmsg/a_report282222.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/monitor27f4f1.js
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/js/biz_common/utils/report275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/cookie275627.js,/mmbizwap/en_US/htmledition/js/pages/voice_component275627.js,/mmbizwap/en_US/htmledition/js/new_video/ctl280b59.js,/mmbizwap/en_US/htmledition/js/appmsg/reward_entry2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/comment2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/like2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/a281ad5.js,/mmbizwap/en_US/htmledition/js/pages/version4video282222.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/storage275627.js,/mmbizwap/en_US/htmledition/js/biz_common/tmpl275627.js,/mmbizwap/en_US/htmledition/js/biz_common/ui/imgonepx275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/attr275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/ajax275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/string/html275627.js,/mmbizwap/en_US/htmledition/js/appmsg/report27ff13.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/class275627.js
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/js/appmsg/report_and_source2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/page_pos28055f.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_speed_report275627.js,/mmbizwap/en_US/htmledition/js/appmsg/voice275627.js,/mmbizwap/en_US/htmledition/js/appmsg/qqmusic275627.js,/mmbizwap/en_US/htmledition/js/appmsg/iframe282763.js,/mmbizwap/en_US/htmledition/js/appmsg/review_image275627.js,/mmbizwap/en_US/htmledition/js/appmsg/outer_link275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/jsapi/core275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/event275627.js,/mmbizwap/en_US/htmledition/js/appmsg/copyright_report2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/async27de55.js,/mmbizwap/en_US/htmledition/js/biz_wap/ui/lazyload_img275627.js,/mmbizwap/en_US/htmledition/js/biz_common/log/jserr2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/share2805ea.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/mmversion275627.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_img_lib275627.js
hxxp://ssd.tcdn.qq.com/mmbizwap/en_US/htmledition/js/biz_common/utils/url/parse275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/device27f470.js,/mmbizwap/en_US/htmledition/js/appmsg/index280a8c.js
hxxp://1sthw.dtwscache.speedcdns.com/mm2.html?src=tuigao
hxxp://1sthw.dtwscache.speedcdns.com/event/promimg/?src=pming393
hxxp://mmbiz.qpic.cn.cdngc.net/mmbiz/MXngSX3icHBCficD74531aZ17r0DKrb84QOBMwCLunABfX61XDRXgicb2tDbYofdkx2oOWy6pvf5sjSMzSTOUJZew/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://mmbiz.qpic.cn.cdngc.net/mmbiz/MXngSX3icHBCficD74531aZ17r0DKrb84Qva5N5kQ5TOXQs3E2SAE8DMcu9VDpKK9SbeEJt4HxrwSlIW6ZkfgEicQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://status.login.37.com/api/login.php?action=status&game_id=281&server_id=60766&callback=_loginCheck&tid=2&0.6229994462676207	121.201.25.195
hxxp://6880faf6fb5e6087eb1b2dc.http.uuzuonline.net/t/?t=load&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&l_t=2875&rand=1441524463727&ip=3270664410&timestamp=1441524459
hxxp://myconf6room.dtwscache.ourglb0.com/css/index_MIN_32.css
hxxp://pic.pay838.com/mshow.aspx?AID=10852	115.238.72.30
hxxp://myconf6room.dtwscache.ourglb0.com/css/base_MIN_13.css
hxxp://abc.ss229.com/AP5Min.aspx?AID=10851&Auth=AC1D06D058020A33550F33AE34123C9AD2828245B35634966FDAC96888940D2B&referer=http://www.cfmogu.com/6.htm&utz=1441524468618	115.236.16.240
hxxp://www.yaoguo.com/anchor/anchorRandomURLZC?f=1003&cpuid=14516	14.17.109.66
hxxp://abc.ss229.com/AP5Min.aspx?AID=10852&Auth=F6AE3332AE97FEE7DB40F759E6F828F59A242DCC63042F4324D85058ACDAD99D&referer=http://www.cfmogu.com/7.htm&utz=1441524469055	115.236.16.240
hxxp://myconf6room.dtwscache.ourglb0.com/csjs/_/mm.css
hxxp://abc.ss229.com/AP5Min.aspx?AID=10852&Auth=F6AE3332AE97FEE7DB40F759E6F828F59A242DCC63042F4324D85058ACDAD99D&referer=http://www.cfmogu.com/7.htm&utz=1441524470149	115.236.16.240
hxxp://flight.na.glbs.qunar.com/?ex_track=auto_5580e628
hxxp://1sthw.dtwscache.speedcdns.com/
hxxp://c01.i05.arnic.hadns.net/ext/union/?url=room&unionId=111&sUnionId=14516
hxxp://qunarzz.com/flight/prd/styles/wide/usage/home/page/[email protected]	120.132.34.29
hxxp://gae.xdwscache.ourglb0.com/imges/live2012/logo_v5.png
hxxp://source.qunarzz.com/common/hf/tags/quanjia.gif	120.132.34.41
hxxp://source.qunarzz.com/common/hf/logo.png	120.132.34.41
hxxp://a1574.g.akamai.net/site/images/flight/ico_en_v1.png
hxxp://gae.xdwscache.ourglb0.com/imges/live2012/new_head_v1.jpg
hxxp://qunarzz.com/flight/prd/styles/wide/usage/home/page/[email protected]	120.132.34.29
hxxp://gae.xdwscache.ourglb0.com/0c/95/m784061357704567.png
hxxp://gae.xdwscache.ourglb0.com/live/2015/01/27/10/1013v1422324075364249066.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/24/21/1013v1440424030229980088.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/02/23/1013v1441206263416060384.jpg
hxxp://wpa.qq.com/pa?p=1:1305643224:17	112.90.83.87
hxxp://wpa.qq.com/pa?p=1:494666586:17	112.90.83.87
hxxp://gae.xdwscache.ourglb0.com/imges/pixel.gif
hxxp://gae.xdwscache.ourglb0.com/imges/live2012/mmListIco_v3.gif
hxxp://save.xdwscache.ourwebpic.com/69/06/d184421399861104.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/13/17/1003v1439458208429025694.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/23/17/1003v1440322326408959442.jpg
hxxp://source.qunarzz.com/common/hf/tags/all.png	120.132.34.41
hxxp://myconf6room.dtwscache.ourglb0.com/js/LAB_0.1.js
hxxp://source.qunarzz.com/common/hf/tags/local.gif	120.132.34.41
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/20/14/1010v1440053194108171729_s.jpg
hxxp://gae.xdwscache.ourglb0.com/9c/23/o266831357706635.png
hxxp://gae.xdwscache.ourglb0.com/imges/live2012/weibo-title_v1.png
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/10/17/1003v1439197486367993238.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/28/17/1013v1440753029591128319.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/02/13/1003v1441173204394825695.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/28/22/1003v1440771193057527291.jpg
hxxp://wpa.qq.com/pa?p=1:1712482633:17	112.90.83.87
hxxp://wpa.qq.com/pa?p=1:2473590371:17	112.90.83.87
hxxp://source.qunarzz.com/common/hf/tags/card_v1.gif	120.132.34.41
hxxp://source.qunarzz.com/common/hf/tags/bjcx.gif	120.132.34.41
hxxp://myconf6room.dtwscache.ourglb0.com/csjs/_/girlfall_5
hxxp://gae.xdwscache.ourglb0.com/live/2015/05/17/13/1003v1431840649105458010.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/22/02/1003v1440181490946282973.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/01/27/10/1013v1422324423827564029.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live2014/logo-v5.png
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/05/08/1010v1441413431739154894_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/05/74/76a2433690d165a4111a247725573faa_s.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live2014/showwall-bg-v3.jpg
hxxp://flight.na.glbs.qunar.com/site/fonts/qunar.eot?v=1
hxxp://c01.i05.arnic.hadns.net/1046289
hxxp://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd	203.205.143.142
hxxp://source.qunarzz.com/common/hf/tags/jr_v1.gif	120.132.34.41
hxxp://source.qunarzz.com/common/hf/tags/car.gif	120.132.34.41
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/05/11/1010v1438744520607433069_s.jpg
hxxp://a1574.g.akamai.net/flight/home/airline_pro/airline_prom1_v2.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/26/12/1010v1437884372255724437_s.jpg
hxxp://a1574.g.akamai.net/flight/home/airline_pro/airline_prom2_v6.png
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/15/01/1003v1439574409548965382.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/07/19/1010v1438945428930586147_s.jpg
hxxp://a1574.g.akamai.net/flight/home/airline_pro/airline_prom3_v7.png
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/04/18/1003v1441361998196183527.jpg
hxxp://a1574.g.akamai.net/site/images/flight/home/hurryup.gif
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/23/14/1010v1440312136660066846_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/22/13/1003v1440221938622582571.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/27/12/1010v1440648332755373327_s.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live2014/idx-bg.png
hxxp://p21.tcdn.qq.com/qconn/wpa/button/button_old_171.gif
hxxp://gae.xdwscache.ourglb0.com/live/2014/03/18/22/1010v1395152088400052091_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/44/16/db85577447.jpg
hxxp://a1574.g.akamai.net/flight/home/ico_hm.png
hxxp://a1574.g.akamai.net/flight/flight_inter/list/bg_wrap_ie6.png
hxxp://myconf6room.dtwscache.ourglb0.com/js/s/iwt-min.js
hxxp://a1574.g.akamai.net/site/images/ico/dbt_14.png
hxxp://a1574.g.akamai.net/flight/flight_inter/list/bg_flyhd.png
hxxp://a1574.g.akamai.net/flight/flight_inter/list/icon_dire.png
hxxp://a1574.g.akamai.net/site/images/flight/flight_search/btn_normal.png
hxxp://source.qunarzz.com/common/hf/header_v16.png	120.132.34.41
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/01/05/1010v1438379669194197912_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2014/07/28/13/1003v1406526224346765016.jpg
hxxp://source.qunarzz.com/common/hf/header_new_v7.png	120.132.34.41
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/30/17/1010v1440928658925275259_s.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js/LAB_0.1
hxxp://user.na.glbs.qunar.com/webApi/unpaycount.jsp?format=js&username=null&callback=callback_120887&1441524480274
hxxp://t.qunar.com/count/headerImageHd	211.151.112.118
hxxp://user.na.glbs.qunar.com/webapi/message/unreadTipList?callback=callback_639073&1441524480274
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/25/14/1010v1440485378285229059_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/13/18/1010v1436782172623299618_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/16/15/1003v1439708920138471436.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/22/14/1010v1440223203292588355_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/05/22/1010v1436108213754093726_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2014/11/25/11/1003v1416884712906517143.jpg
hxxp://source.qunarzz.com/common/hf/header_v13.png	120.132.34.41
hxxp://gae.xdwscache.ourglb0.com/live/2015/05/17/12/1010v1431836293039868445_s.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js/s/e6u5-min.js?101016
hxxp://gae.xdwscache.ourglb0.com/f2/9a/v627061383118550.png
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/26/08/1003v1440549063335539924.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live2014/header-bg-v3.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js/jquery_MIN_5.js
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/29/23/1003v1440862419512215827.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2014/07/02/10/1003v1404267074821837648.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/03/24/06/1010v1427148922469733899_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/20/16/1010v1440059547324436188_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2014/12/09/10/1010v1418090705130314943_s.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live2014/head-nav-v2.png
hxxp://p.huluwa8.com/1/bg.jpg
hxxp://kgnop1.kugou.com/fxstatic/images/yellow_warn2_b8d73e7.png
hxxp://kgnop1.kugou.com/staticPub/css/common/head_6853a2a.css
hxxp://source.qunarzz.com/common/hf/footer_v10.png	120.132.34.41
hxxp://gae.xdwscache.ourglb0.com/live/2015/02/03/19/1003v1422961785334695929.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/csjs/_/mm_z.js
hxxp://gae.xdwscache.ourglb0.com/live/2014/12/19/09/1003v1418953953835284831.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/04/02/1003v1438627049996466424.jpg
hxxp://ws.qunar.com/ips.jcp?callback=__getip__	59.151.16.185
hxxp://gae.xdwscache.ourglb0.com/live/2015/02/24/00/1003v1424708659772115033.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/logo_foot_v4.png
hxxp://kgnop1.kugou.com/fxstatic/images/yellow_warn_0473de0.png
hxxp://p.huluwa8.com/1/sound.swf
hxxp://p.huluwa8.com/1/reg.swf
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/04/16/1003v1441354186519694368.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/csjs/_/mm_login.js
hxxp://source.qunarzz.com/common/hf/arc.png	120.132.34.41
hxxp://myconf6room.dtwscache.ourglb0.com/js/mootools_MIN_1.4.5.js
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/20/17/1003v1440063054446958994.jpg
hxxp://qunarzz.com/jquery/prd/jquery-1.7.2.js	120.132.34.29
hxxp://gae.xdwscache.ourglb0.com/live/2015/04/25/01/1010v1429894951825129732_s.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/csjs/_/mm_index.js
hxxp://source.qunarzz.com/common/hf/24h.png	120.132.34.41
hxxp://gae.xdwscache.ourglb0.com/imges/live2012/base_head_v20_8bit.png
hxxp://1sthw.dtwscache.speedcdns.com/api/liveInfoCk.php
hxxp://sohu.irs01.com/MTFlashStore.swf
hxxp://a1574.g.akamai.net/hotel/homesearch/Camal_walk_loading.gif
hxxp://a1574.g.akamai.net/site/images/zhuanti/huodong/dijia1.gif
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/29/19/1010v1440848628254728116_s.jpg
hxxp://ws.qunar.com/history/newhistory.html	59.151.16.185
hxxp://mmbiz.qpic.cn.cdngc.net/mmbiz/AVNibO5YtlFOV1qVkHufbYB76DM6aKjngN2nibGGSuBz51YG7alXcCKN6iacpp6dWutN2AvHRia0mTVaCuISfFMcWQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://mmbiz.qpic.cn.cdngc.net/mmbiz/AVNibO5YtlFOV1qVkHufbYB76DM6aKjngptibmFBTicicZyP8elJPhIkgYbTsrI40P11RiaVUD1oGcOuotCQvCjATpQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://mmbiz.qpic.cn.cdngc.net/mmbiz/AVNibO5YtlFOiagiaw7KLsiahnBcGvCYfGCa1ZPiaUezghlh5xiaFhwzYlvGIRP3iaRnPCHOyRC3GksNkBAKku9HfibOWg/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/05/11/1010v1441422031094414229_s.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js/s/iwt-min
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/04/21/1003v1441374469426980004.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/05/26/18/1003v1432637075681653373.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js/s/e6u5-min?101016
hxxp://gae.xdwscache.ourglb0.com/imges/live2012/idx_sideico_v10.png
hxxp://www.na.glbs.qunar.com/twell/cookie/allocateCookie.jsp
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/22/00/1003v1437495922489029677.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/06/25/16/1010v1435219348429169353_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/06/24/00/1003v1435076285361226983.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/05/11/15/1011v1431328135664996922_s.jpg
hxxp://kgnop1.kugou.com/staticPub/css/room/room2014_f52238b.css
hxxp://1sthw.dtwscache.speedcdns.com/getActiveList.php
hxxp://1sthw.dtwscache.speedcdns.com/event/flower/active.php
hxxp://gae.xdwscache.ourglb0.com/bb/3f/adba7f9116.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js/jquery_MIN_5
hxxp://gae.xdwscache.ourglb0.com/live/2015/06/08/23/1010v1433776513658558468_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/18/00/1010v1437150501366480600_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/59/47/a0b8c87b6804155aa4db6b07abc52998_s.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/level/userLevel_v30.png
hxxp://qunarzz.com/flight/prd/scripts/[email protected]	120.132.34.29
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/27/21/1003v1440682861143479209.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/12.gif
hxxp://gae.xdwscache.ourglb0.com/live/2015/05/11/12/1010v1431320164947388798_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2015/09/03/23/1003v1441295193740557125.jpg
hxxp://1sthw.dtwscache.speedcdns.com/message/follow_recommend.php
hxxp://save.xdwscache.ourwebpic.com/imges/pixel.gif
hxxp://qunarzz.com/flight/prd/scripts/[email protected]	120.132.34.29
hxxp://1sthw.dtwscache.speedcdns.com/event/highsing/homeEvent.php
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/02/20/1010v1435841090922650162_s.jpg
hxxp://xnop060.tlgslb.com/live.6.cn/e6u2/r.php?location=v.6.cn/mm2.html?src=tuigao&referer=www.cfmogu.com/6.htm&browser=mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; sv1; .net clr 2.0.50727; .net clr 3.0.04506.648; .net clr 3.5.21022; .net4.0c)&flash=10.0&msr=1276,846&uid=0&pro=4&stamp=1441524481493
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/23.gif
hxxp://gae.xdwscache.ourglb0.com/live/2015/06/30/11/1010v1435635632917325370_s.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/19.gif
hxxp://1sthw.dtwscache.speedcdns.com/api/liveWatchRoomGet.php
hxxp://gae.xdwscache.ourglb0.com/imges/live/room/roomGameIco_v13.png
hxxp://gae.xdwscache.ourglb0.com/live/2015/08/17/06/1003v1439763696488313126.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/16.gif
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/04/18/1010v1436004451432314709_s.jpg
hxxp://gae.xdwscache.ourglb0.com/live/2014/09/14/01/1003v1410630337859816512.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js/s/login_12
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/31/13/1003v1438320109052895370.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/13.gif
hxxp://myconf6room.dtwscache.ourglb0.com/js/mootools_MIN_1.4.5
hxxp://gae.xdwscache.ourglb0.com/imges/live2012/idx_leftside_icon_v8.png
hxxp://gae.xdwscache.ourglb0.com/imges/user/avatar/59.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/IMGSRC/loading_wb.gif
hxxp://kgnop1.kugou.com/fxstatic/images/sprite/css/room/room2014_z_854673e.png
hxxp://kgnop1.kugou.com/fxstatic/images/userfile/successIcon_754795c.png
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/22.gif
hxxp://kgnop1.kugou.com/fxstatic/images/blank_5307b88.png
hxxp://kgnop1.kugou.com/fxstatic/images/room/2014/bigScrollBg_344e5d6.jpg
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/10.gif
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/06/11/1003v1436152159875483712.jpg
hxxp://kgnop1.kugou.com/fxuserlogo/85/20150707/20150707155554612396.jpg
hxxp://kgnop1.kugou.com/staticPub/js/lab.min_c0c155c.js
hxxp://kgnop1.kugou.com/fxroombg/20130115111108651409.jpg
hxxp://myconf6room.dtwscache.ourglb0.com/js
hxxp://gae.xdwscache.ourglb0.com/live/2015/06/02/21/1013v1433251374571726650.jpg
hxxp://kgnop1.kugou.com/fxstatic/images/room/2014/headline_4835e01.png
hxxp://kgnop1.kugou.com/fxstatic/images/footer1_042bc00.png
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/imges/live/levelIco_v4/11.gif
hxxp://gae.xdwscache.ourglb0.com/live/2015/07/22/01/1010v1437498037639692733_s.jpg
hxxp://kgnop1.kugou.com/staticPub/js/DD_belatedPNG_79c3052.js
hxxp://kgnop1.kugou.com/staticPub/js/kg_d6ff0a7.js
hxxp://kgnop1.kugou.com/fxstatic/images/starLevel/pc/14.png
hxxp://kgnop1.kugou.com/fxstatic/images/bg2013_2015_f530136.png
hxxp://a1574.g.akamai.net/site/images/new.png
hxxp://ws.qunar.com/lowerPrice.jcp?&callback=DomesticLowPriceHome.showLowPrice	59.151.16.185
hxxp://kgnop1.kugou.com/fxstatic/images/fx_loading_c785dd3.gif
hxxp://a1574.g.akamai.net/site/images/flight/home/img_qnkhd.png
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://a1574.g.akamai.net/site/images/flight/flight_search/ico_a.png
hxxp://ws.qunar.com/ips.jcp?callback=QNR.ips.callback&_=1441524487852	59.151.16.185
hxxp://kgnop1.kugou.com/fxstatic/images/giftres/55/7cc0a9cabf777b1f4559aba439ed2c09.png
hxxp://kgnop1.kugou.com/staticPub/js/room/swfobject_dc734ee.js
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://dataapi.flight.qunar.com/api/saleprice?&callback=jQuery17209276773639123068_1441524483508&_=1441524487821	119.254.124.89
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://ws.qunar.com/lpisearchd?callback=jQuery17209276773639123068_1441524483510&from=&to=Hot&month=All&cachefrom=&cacheto=&type=rt&source=fhome&_=1441524489149	59.151.16.185
hxxp://ws.qunar.com/lpisearchd?callback=jQuery17209276773639123068_1441524483509&from=&to=Hot&month=All&cachefrom=&cacheto=&type=ow&source=fhome&_=1441524489149	59.151.16.185
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=flight_float_layer
hxxp://flight.na.glbs.qunar.com/site/timetrack.htm?action=FH\|domload\|8.312&t=1441542480312
hxxp://kgnop1.kugou.com/clanBadge/20150807/20150807142202631516.gif
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://kgnop1.kugou.com/staticPub/js/room/socketAndLiveflash_9a63a0d.js
hxxp://kgnop1.kugou.com/staticPub/js/jquery.min_4de7337.js
hxxp://ws.qunar.com/airCoPromote.jsp?airCoList=CA,SC,CZ&num=5&callback=AirLineDeals._parseData	59.151.16.185
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=homeadSy
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=topAD
hxxp://flight.na.glbs.qunar.com/site/main.swf?20090107
hxxp://www.yaoguo.com/anchor/anchorRandomURL?f=1005&cpuid=214516	14.17.109.66
hxxp://czcycm.com/	100.43.153.3
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://a1574.g.akamai.net/site/images/airlines/SC.gif
hxxp://a1574.g.akamai.net/site/images/airlines/CZ.gif
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_float
hxxp://a1574.g.akamai.net/site/images/airlines/CA.gif
hxxp://a.qunar.com/vataplan?framId=topicLinkL&f=s&cur_page_num=0&rep=1&tag=99&vataposition=QNR_ZTc=_CN&vatacon=&rows=1&qtype=js&vataframe=bannerDefault&callback=QNR._AD.topicLinkL&ab=b&tile=14415244875081465434&city=åŒ—äº¬	211.151.112.111
hxxp://a.qunar.com/vataplan?framId=topicLinkR&f=s&cur_page_num=0&rep=1&tag=99&vataposition=QNR_Zjc=_CN&vatacon=&rows=1&qtype=js&vataframe=bannerDefault&callback=QNR._AD.topicLinkR&ab=b&tile=14415244875081465434&city=åŒ—äº¬	211.151.112.111
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://www.yaoguo.com/800374?f=1005&cpuid=214516	14.17.109.66
hxxp://kgnop1.kugou.com/staticPub/js/head_55cffdc.js
hxxp://gae.xdwscache.ourglb0.com/imges/live/IMGSRC/to_top.gif
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://flight.na.glbs.qunar.com/?ex_track=auto_55360807
hxxp://gae.xdwscache.ourglb0.com/images/common/flash/flash_star2.gif
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/css/??common/scrollv2.css,uiwidget/uiwidget-messagebox.css,common/launchremind.css?v=2015060101,common/popbox/popbox.css?v=2015061201,room/lovingday.css?v=2015081901,room/broadcast.css?v=2015082701
hxxp://gae.xdwscache.ourglb0.com/images/common/flash/flash_star1.gif
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/images/common/flash/flash_star3.gif
hxxp://int.dpool.sina.com.cn/iplookup/iplookup.php?format=js	180.149.136.219
hxxp://irs01.com/irt?_iwt_UA=UA-6cn-000001&p=value1,value2&jsonp=_12YX3	180.169.18.131
hxxp://user.na.glbs.qunar.com/webapi/message/unreadTipList?callback=callback_840037&1441524492008
hxxp://user.na.glbs.qunar.com/webApi/unpaycount.jsp?format=js&username=null&callback=callback_58451&1441524492008
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/images/common/flash/flash_star4.gif
hxxp://gae.xdwscache.ourglb0.com/images/common/flash/flash_star5.gif
hxxp://czcycm.com/css1/ccc.css	100.43.153.3
hxxp://czcycm.com/js/DD_Deldtedng.js	100.43.153.3
hxxp://user.na.glbs.qunar.com/passport/addICK.jsp
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/js/??jquery/jquery.min.js,jquery/jquery.cookie.min.js,jquery/jquery.url.min.js,jquery/jquery-ext.js,commons/common-util.js,statistics/statisticsUtil.js?v=20150708
hxxp://user.na.glbs.qunar.com/images/usercenter/clk.gif
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://lz-furniture.com/jquery.js	67.229.80.170
hxxp://ws.qunar.com/ips.jcp?callback=QNR.ips.callback&_=1441524493383	59.151.16.185
hxxp://qunarzz.com/usertoolbar/prd/v1.0.0/m-usertoolbar.js?8008469	120.132.34.29
hxxp://static.criteo.net/js/ld/ld.js	178.250.0.74
hxxp://dataapi.flight.qunar.com/api/saleprice?&callback=jQuery17207264470782716407_1441524492993&_=1441524493368	119.254.124.89
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://ws.qunar.com/lpisearchd?callback=jQuery17207264470782716407_1441524492994&from=&to=Hot&month=All&cachefrom=&cacheto=&type=ow&source=fhome&_=1441524493868	59.151.16.185
hxxp://ws.qunar.com/lpisearchd?callback=jQuery17207264470782716407_1441524492995&from=&to=Hot&month=All&cachefrom=&cacheto=&type=rt&source=fhome&_=1441524493868	59.151.16.185
hxxp://flight.na.glbs.qunar.com/site/timetrack.htm?action=FH\|domload\|0.985&t=1441542490985
hxxp://flight.na.glbs.qunar.com/site/timetrack.htm?action=FH\|load\|1.266&t=1441542491266
hxxp://widget.criteo.com/event?a=17463&v=3.4.0&p0=e=exd&site_type=d&p1=e=vh&p2=e=dis	178.250.0.80
hxxp://ws.qunar.com/js/ga.min.js	59.151.16.185
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://t.agrantsem.com/js/ag.js	123.59.41.212
hxxp://a.qunar.com/vataplan?framId=topicLinkL&f=s&cur_page_num=0&rep=1&tag=99&vataposition=QNR_ZTc=_CN&vatacon=&rows=1&qtype=js&vataframe=bannerDefault&callback=QNR._AD.topicLinkL&ab=b&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://a.qunar.com/vataplan?framId=topicLinkR&f=s&cur_page_num=0&rep=1&tag=99&vataposition=QNR_Zjc=_CN&vatacon=&rows=1&qtype=js&vataframe=bannerDefault&callback=QNR._AD.topicLinkR&ab=b&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://widget.cn.criteo.com/event?a=17463&v=3.4.0&p0=e=exd&site_type=d&p1=e=vh&p2=e=dis
hxxp://czcycm.com/css1/css.css	100.43.153.3
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://xnop5002.tlgslb.com/f_tejiahui/card/1509/8d/bdd631314f165f.jpg
hxxp://n4cswhk3.gccdn.net/mw690/8f3879f2gw1es8cb5k86sj20kw0c4n0x.jpg
hxxp://n4cswhk3.gccdn.net/small/808700fdgw1eoo30gvn2pg201c01cjrc.gif
hxxp://a.qunar.com/vataplan?framId=ifmRightTextlink&vataposition=QNR_OA==_CN&tag=99&rows=14&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightTextlink&ab=b&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1eoo2zy2mvuj20m809vgnf.jpg
hxxp://n4cswhk3.gccdn.net/mw690/808700fdgw1eoo30ioszdg200o00omwx.gif
hxxp://a.qunar.com/vataplan?framId=ifmRightFlightOwner&vataposition=QNR_ZTU=_CN&tag=99&rows=1&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightFlightOwner&ab=b&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://n4cswhk3.gccdn.net/large/8f3879f2gw1es8ao4bqm4j20p00b4ads.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1eoo304ivslj208w05k3z6.jpg
hxxp://n4cswhk3.gccdn.net/mw690/8f3879f2gw1es8btuhnzcj20kw0c4jv6.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1eoo30hp6kgj203i02ta9x.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertro5j9b9j200j00h3y9.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertro1ar2vj201x01sdfo.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1eoo3037ca6j208w05kjs5.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertro88zh3j200i00h0sh.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnyj5ifj201x01sa9v.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnwfx5tj201x01sweb.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrntqggoj201x01s0sk.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnp2iykj201x01sdfo.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrno5dejj201x01sdfo.jpg
hxxp://qunarzz.com/usertoolbar/prd/v1.0.0/js/[email protected]	120.132.34.29
hxxp://a1574.g.akamai.net/site/images/flight/home/ico_arr_ad.png
hxxp://ws.qunar.com/f?utmwv=0.1&t=0.5984095723930103&utmsr=1276*818&utmr=-1&utmp=http://flight.qunar.com/?ex_track=auto_55360807&utmhn=flight.qunar.com&s=249	59.151.16.185
hxxp://n4cswhk3.gccdn.net/mw690/808700fdgw1eoo30ll39pg200o00odfl.gif
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1eoo30076x3j20kw0c4abv.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1eoo3020m1hj20dt0a7abq.jpg
hxxp://n4cswhk3.gccdn.net/mw690/808700fdgw1eoo305zadvj208w05k754.jpg
hxxp://a.qunar.com/vataplan?framId=ifmRightFlightExt&vataposition=QNR_NmE=_CN&tag=99&rows=1&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightFlightExt&ab=b&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnzfsf9j201x01smwz.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertro7f7fsj200q00e3y9.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertro6hn8jj200k00k741.jpg
hxxp://a.qunar.com/vataplan?framId=ifmRightHotelInter&vataposition=QNR_ZmE=_CN&tag=99&rows=1&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightHotelInter&ab=b&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnxfxowj201x01sq2s.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnuprdhj201x01sglg.jpg
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnvjt5cj201x01st8j.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnrvhnbj201x01sjr7.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnstw19j201x01sq2r.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnq0jnjj201x01s3yc.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnr49h5j201x01s743.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertrnndoxdj201x01sdfn.jpg
hxxp://n4cswhk3.gccdn.net/large/808700fdgw1ertro07v1ij201x01smwz.jpg
hxxp://all.cnzz.com.danuoyi.tbcache.com/z_stat.php?id=1255214667
hxxp://a.qunar.com/js.ng/framId=flight_float_layer&chan=flight&pg=home&pos=top&site=qunar&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://x2ipv6.tcdn.qq.com/cd/pics/23317/23317925.jpg
hxxp://dis.cn.criteo.com/dis/dis.aspx?p=17463&cb=82255824989&ref=&sc_r=1276x846&sc_d=32
hxxp://xnop5002.tlgslb.com/f_tejiahui/card/1504/fc/47a8e2ac999885.jpg
hxxp://oz.cnzz.com/stat.htm?id=1255214667&r=&lg=en-us&ntime=none&cnzz_eid=997130195-1441521926-&showp=1276x846&t=ã€äººã€‘è‡ªå·±çš„æŒ–é‡‘ç§˜ç±&h=1&rnd=1524265161	198.11.132.200
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/ag_track-0.1.10.js
hxxp://a.qunar.com/js.ng/framId=topAD&chan=flight&pg=home&pos=top&site=qunar&size=1600x336&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_middle
hxxp://a.qunar.com/js.ng/framId=ad_home_leftAD_float&chan=flight&pg=home&pos=left&site=qunar&size=24x202&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=1255214667&t=z
hxxp://xnop5002.tlgslb.com/qs/1508/c8/774ebecc402bde.jpg
hxxp://pagead.l.doubleclick.net/pixel?google_nid=agrantcn&google_cm&atscu=AG_275634_HFVR
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_bottom
hxxp://a.qunar.com/js.ng/framId=ad_home_leftAD_middle&chan=flight&pg=home&pos=top&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://qunarzz.com/usertoolbar/prd/v1.0.0/css/[email protected]	120.132.34.29
hxxp://user.na.glbs.qunar.com/webApi/popup.jsp?display&ver=v1.0
hxxp://xnop5002.tlgslb.com/qs/1504/ad/ff6fb4ec084fe7.jpg
hxxp://cms.gds.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR
hxxp://t.agrantsem.com/pv?atscu=AG_275634_HFVR&atsdomain=qunar.com&agfid=ANshGOFRiVoTm4YF&atsp=Win32&atsl=en-us&atsbr=1256x3719&atssr=1276x846&atsc=utf-8&atsh=flight.qunar.com&atsrf&atspv=1&atstime=1441524496805	123.59.41.212
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=rightTopBanner
hxxp://a.qunar.com/js.ng/framId=ad_home_leftAD_bottom&chan=flight&pg=home&pos=mid&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://xnop5002.tlgslb.com/qs/1508/33/0b08ff7e458a5a.gif
hxxp://user.na.glbs.qunar.com/static/userlogin/prd/v1.1.6/loginPop-inner.css
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_rightAD_top2
hxxp://a.qunar.com/js.ng/framId=rightTopBanner&chan=flight&pg=home&pos=top&site=qunar&size=272x220&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://a1574.g.akamai.net/site/images/wns/20150806_flighthp_background_1600x336_Ebb_6027.jpg
hxxp://a1574.g.akamai.net/site/images/wns/20150806_flighthp_background_464x320_Ebb_6027.swf?clickTag=http://qde.qunar.com/event.ng/Type=click%26FlightID=179692%26AdID=240081%26TargetID=8462%26Segments=13,28,148,373,530,534,535,536,539,540,541,542,543,544,545,546,548,549,550,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,611,1101,1142,1183,4487,4494,4497,4648,4649,4676,4742,4951,4956,5001%26Targets=5302,29,1504,8462,8347,8351%26Values=34,46,51,63,77,80,101,110,150,204,215,228,243,250,252,301,305,323,5402,5598%26RawValues=%26Redirect=T58eySexufTRN91ezLFpOgFQ6MQfQ46JHk1J5g5gXi_kNdila1GaDckyVn9eP3Dh_FNtTX2g3kfgSYQd3EkEYcwSReZ1muv759lW5plBku02sdIKDRbO89djMgImKw8PAQxMzv8jyfIY638s7zpLVkk6iXchx4ZF27gyLD3hRnY=
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=topicLinkL
hxxp://a.qunar.com/js.ng/framId=homeadSy&chan=flight&pg=home&pos=right_top&site=qunar&size=230x200&type=Tear_angle&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://pagead.l.doubleclick.net/pixel?google_nid=agrantcn&google_cm=&atscu=AG_275634_HFVR&google_tc=
hxxp://ws.qunar.com/crossdomain.xml	59.151.16.185
hxxp://user.na.glbs.qunar.com/webApi/popup.jsp?js&ver=v1.0&_=1441524496962
hxxp://xnop5002.tlgslb.com/f_tejiahui/card/1509/53/9df8c0850fd466.jpg
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://www.na.glbs.qunar.com/vataframe/b.html?_=20120830&rnd=topicLinkR
hxxp://a.qunar.com/js.ng/framId=ad_home_rightAD_top2&chan=flight&pg=home&pos=top&site=qunar&size=230x90&tile=14415244931185684352&city=åŒ—äº¬	211.151.112.111
hxxp://gae.xdwscache.ourglb0.com/css/??room/index.css?v=2015082501,room/mediaqueries.css?v=2015061701,room/firstpayact.css?v=2015072001,room/weekstaract2.css,room/guard.css?v=2015082601,room/dayndaygift.css?v=2015072201,room/xingyuan.css?v=2015072101,room/messagenotice.css?v=2015081001,room/funnygift.css?v=2015081701
hxxp://ws.qunar.com/holidayService.jcp?count=2	59.151.16.185
hxxp://user.na.glbs.qunar.com/static/userlogin/prd/v1.1.6/LoginPop.js
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://xnop5002.tlgslb.com/qs/1508/da/d41869fb6060c0.jpg
hxxp://xnop5002.tlgslb.com/qs/1506/81/a6474588f25947.jpg
hxxp://adx.agrantsem.com/cookieMapping?atscu=AG_275634_HFVR&google_gid=CAESEMwJ6kNLyuHlHNmhyH3ZZBU&google_cver=1	118.192.89.161
hxxp://a1574.g.akamai.net/site/images/sidecode_v3.png
hxxp://ws.qunar.com/o?s=1706&utmwv=0.2&utmsr=1276846&utmasr=1276818&utmr=-1&utmp=http://flight.qunar.com/?ex_track=auto_55360807&utmhn=flight.qunar.com&t=0.9807935955502813	59.151.16.185
hxxp://a1574.g.akamai.net/usercenter/usertoolbar/v1.0.0/img/icons6-p8.png
hxxp://user.na.glbs.qunar.com/index/order/unbind?callback=jQuery17207264470782716407_1441524492996&csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3&isTimeOut=true&_=1441524499493
hxxp://a1574.g.akamai.net/usercenter/login/quick_login2.png
hxxp://a1574.g.akamai.net/flight/flight_inter/list/m_usertoolbar_ie6.png
hxxp://flight.na.glbs.qunar.com/ifavorites/get?
hxxp://gae.xdwscache.ourglb0.com/images/room/bodybg_33f93c5.jpg
hxxp://xnop5002.tlgslb.com/qs/201405/08/f1f51d8b645559506886324a.png
hxxp://gae.xdwscache.ourglb0.com/js/ie/IE7.js
hxxp://a1574.g.akamai.net/usercenter/usertoolbar/v1.0.0/img/loading.gif
hxxp://www-google-analytics.l.google.com/analytics.js
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j38&a=1521449289&t=pageview&_s=1&dl=http://www.yaoguo.com/800374?f=1005&cpuid=214516&ul=en-us&de=utf-8&dt=çµé‚æŒå§¬å°ä¹–ä¹–çš„ç›´æ’é—´ï¼è…°æžœç½‘ï¼å…¨å›½å¤§åž‹åœ¨çº¿è§†é¢‘ç›´æ’å¨±ä¹äº’åŠ¨ç¤¾åŒº&sd=32-bit&sr=1276x846&vp=1256x842&je=0&fl=11.6 r602&_u=AEAAAEAAI~&jid=2092192789&cid=54479836.1441524500&tid=UA-62639335-1&_r=1&z=1444354087
hxxp://a1574.g.akamai.net/site/images/wns/20150828_flighthp_fc_912x250_6983.swf
hxxp://a1574.g.akamai.net/site/images/wns/20150714_flight_homepage_bottom_banner_912x90_6687.swf?clickTag=http://qde.qunar.com/event.ng/Type=click%26FlightID=164623%26AdID=235155%26TargetID=8345%26Segments=13,28,132,148,373,530,534,535,536,539,540,541,543,544,545,546,548,549,550,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,611,1101,1143,1183,4053,4487,4494,4497,4648,4649,4676,4742,4949,4954,5001%26Targets=5302,29,1504,5768,8345,8353%26Values=34,46,51,63,77,80,101,110,150,204,217,228,243,250,252,305,308,320,5402,5634%26RawValues=%26Redirect=T58eySexufTRN91ezLFpOuUgESJcUeNGAJjELNEGPow-zpNxVQsorYHxgyhuwf2iQHqwNdMcUgmvajOWroxGEA==
hxxp://xnop5002.tlgslb.com/qs/1411/f1/f1f51d8b64555950213a9cdb.png
hxxp://gae.xdwscache.ourglb0.com/images/common/logo-mini_ca367ba.png
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://dart.l.doubleclick.net/ddm/trackimp/N9221.1818125HOTEL.QUNAR.COM/B8898618.120652839;dc_trk_aid=293506848;dc_trk_cid=64276792;ord=[timestamp]?,dhttp://source.qunar.com/site/images/wns/20150806_flighthp_background_464x320_Ebb_6027.swf?clickTag=http%3A%2F%2Fqde.qunar.com%2Fevent.ng%2FType%3Dclick%2526FlightID%3D179692%2526AdID%3D240081%2526TargetID%3D8462%2526Segments%3D13%2C28%2C148%2C373%2C530%2C534%2C535%2C536%2C539%2C540%2C541%2C542%2C543%2C544%2C545%2C546%2C548%2C549%2C550%2C551%2C552%2C553%2C554%2C555%2C556%2C558%2C559%2C560%2C561%2C562%2C564%2C565%2C567%2C568%2C569%2C570%2C571%2C572%2C573%2C574%2C575%2C576%2C577%2C578%2C579%2C580%2C581%2C582%2C583%2C584%2C586%2C587%2C610%2C611%2C1101%2C1142%2C1183%2C4487%2C4494%2C4497%2C4648%2C4649%2C4676%2C4742%2C4951%2C4956%2C5001%2526Targets%3D5302%2C29%2C1504%2C8462%2C8347%2C8351%2526Values%3D34%2C46%2C51%2C63%2C77%2C80%2C101%2C110%2C150%2C204%2C215%2C228%2C243%2C250%2C252%2C301%2C305%2C323%2C5402%2C5598%2526RawValues%3D%2526Redirect%3DT58eySexufTRN91ezLFpOgFQ6MQfQ46JHk1J5g5gXi_kNdila1GaDckyVn9eP3Dh_FNtTX2g3kfgSYQd3EkEYcwSReZ1muv759lW5plBku02sdIKDRbO89djMgImKw8PAQxMzv8jyfIY638s7zpLVkk6iXchx4ZF27gyLD3hRnY%3D,u
hxxp://a1574.g.akamai.net/site/images/wns/20150828_flighthp_hs_24X202_6983.jpg
hxxp://gae.xdwscache.ourglb0.com/css/??header/header.css?v=2015051901,login/loginbox.css?v=2015051901,room/nickmodifybox.css?v=2015072901
hxxp://log.gds.mmstat.com/cm.gif?url=http://cms.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR
hxxp://a1574.g.akamai.net/site/images/wns/20140717_quna_hp_logo_sjq.png
hxxp://a1574.g.akamai.net/site/images/wns/20150902_flighthp_912x90_7241.jpg
hxxp://gae.xdwscache.ourglb0.com/js/??login/loginUtil.js?v=2015072702,header/header.js?v=2015080901
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://data-agkn-com-2105097999.eu-central-1.elb.amazonaws.com/pixel/2387/?ct=UA&st=&city=13101&dma=0&zp=&bw=0&che=2949964848&col=8853099,883117,120058784,292870917,63928392
hxxp://cms.gds.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR&cna=FNlyDjvVEGICAcLyYNovtkCK
hxxp://a1574.g.akamai.net/site/images/wns/20150902_flighthp_272x220_7241.jpg
hxxp://adx.agrantsem.com/CookieMapping/TanxCM?tanx_ver=1&atscu=AG_275634_HFVR&tanx_tid=ArYplpb_HF0=	118.192.89.161
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://res.udb.duowan.com/lgn/js/oauth/udbsdk/pcweb/udb.sdk.pcweb.embed.min.js	221.228.83.151
hxxp://cm.pos.e.shifen.com/pixel?dspid=6666724&ext_data=AG_275634_HFVR
hxxp://adx.agrantsem.com/CookieMapping/BaiduCM?baidu_error=1&timestamp=1441524506	118.192.89.161
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/images/loginbox/register_hd_7d5aff2.png
hxxp://gae.xdwscache.ourglb0.com/imges/live/CSSIMG/peihuaBox.png
hxxp://gae.xdwscache.ourglb0.com/images/room/headerbg_60ee1fa.png
hxxp://gae.xdwscache.ourglb0.com/images/room/messagenotice/message_ico_ff852cc.png
hxxp://www.yaoguo.com/	14.17.109.66
hxxp://gae.xdwscache.ourglb0.com/images/room/luckystar_bg_e8825da_e8825da.png
hxxp://gae.xdwscache.ourglb0.com/images/common/grade/anchor2_2c3e5d6.png
hxxp://gae.xdwscache.ourglb0.com/images/room/guard/guard_d7153be.png
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://3gact.bs2dl.yy.com/6byT5o6MMDJf6ZmE5Lu2NTBfMTQzNjc3MTUzNzYwMw.png	182.131.17.129
hxxp://3gact.bs2dl.yy.com/5qOS5qOS57OWX-WbvuaghzUwXzE0MzY3NzEyMTk1OTM.png	182.131.17.129
hxxp://gae.xdwscache.ourglb0.com/images/room/guard/guardcar_img2_b3ed2ed.png
hxxp://gae.xdwscache.ourglb0.com/images/room/kaibo_png8_54b424c.png
hxxp://gae.xdwscache.ourglb0.com/images/room/luckystar_png8_ce21b1c.png
hxxp://3gact.bs2dl.yy.com/546r55GwX-WbvuaghzUwXzE0MzY1MTcwMDMwMjE.png	182.131.17.129
hxxp://3gact.bs2dl.yy.com/55So5b-D5ZCsX-WbvuaghzUwXzE0MzY1MTkzNDEzODA.png	182.131.17.129
hxxp://gae.xdwscache.ourglb0.com/images/room/xingyuan/dh1_b95047e.gif
hxxp://gae.xdwscache.ourglb0.com/images/room/live-status_572c6a8.png
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/images/room/dot_0c624c3.png
hxxp://gae.xdwscache.ourglb0.com/images/room/guard/guardcar_img1_96ea2b3.png
hxxp://gae.xdwscache.ourglb0.com/images/room/guard/goldguard_img2_4bcb1d6.png
hxxp://gae.xdwscache.ourglb0.com/images/room/guard/guardcar_img3_8a36267.png
hxxp://gae.xdwscache.ourglb0.com/lgdsa1432702441696_1432702441700.jpg
hxxp://gae.xdwscache.ourglb0.com/lgdsa1441092502252_1441092502256.jpg
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/images/room/guard/openguard_edb1bde.png
hxxp://gae.xdwscache.ourglb0.com/images/room/weekstar/v2/weekstar_hd_560505f.png
hxxp://3gact.bs2dl.yy.com/5ZWk6YWSXzUwXzE0MzY5Mjg4Njk3OTQ.png	182.131.17.129
hxxp://gae.xdwscache.ourglb0.com/lgdsa1435203485699_1435203485703.jpg
hxxp://gae.xdwscache.ourglb0.com/css/??common/asidebar.css?v=2015072701,common/launchremind.css?v=2015060101,room/guard.css?v2015082601
hxxp://gae.xdwscache.ourglb0.com/images/room/guard/diamond_show_e38fc4c.png
hxxp://gae.xdwscache.ourglb0.com/js/??commons/json.js,cookie/cookieUtil.js,asidebar/asidebar-userinfo.js?v=2015072201,asidebar/asidebar.js?v=2015080501,subscribe/follow.js?v=2015082601,announceAndHelp/announceAndHelp.js?v=2015072701,history/history.js?v=2015080610,uiwidget/uiwidget-pagebar-subscribe.min.js,asidebar/asidebar-guard.js
hxxp://3gact.bs2dl.yy.com/5YGa5pyL5Y-L5ZCnX-WbvuaghzUwXzE0MzY1MTk4MDU2NDE.png	182.131.17.129
hxxp://gae.xdwscache.ourglb0.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js
hxxp://gae.xdwscache.ourglb0.com/images/room/uparrow_83cd0fc.png
hxxp://g.bj73.com/1/sound.swf	61.188.87.111
hxxp://vi3.6rooms.com/live/2015/06/24/00/1003v1435076285361226983.jpg	8.37.231.20
hxxp://simg1.qunarzz.com/site/images/flight/ico_en_v1.png	188.43.73.1
hxxp://vr1.6rooms.com/imges/live2014/logo-v5.png	220.162.97.209
hxxp://vr1.6.cn/imges/live/IMGSRC/to_top.gif	117.27.241.99
hxxp://source.qunar.com/site/images/wns/20150828_flighthp_hs_24X202_6983.jpg	188.43.73.51
hxxp:///err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502
hxxp://s4.fx.kgimg.com/staticPub/js/DD_belatedPNG_79c3052.js	112.90.229.27
hxxp://vi0.6rooms.com/bb/3f/adba7f9116.jpg	117.27.241.99
hxxp://v.6.cn/event/flower/active.php	203.130.61.11
hxxp://flight.qunar.com/?ex_track=auto_5580e628	59.151.11.22
hxxp://vi0.6rooms.com/live/2015/05/11/15/1011v1431328135664996922_s.jpg	117.27.241.99
hxxp://kwcdn.000dn.com/swfs/87/25090zshh0203/index.swf	203.130.61.92
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://static.yaoguo.com/images/room/luckystar_png8_ce21b1c.png	220.162.97.209
hxxp://s1.fx.kgimg.com/fxstatic/images/bg2013_2015_f530136.png	112.90.228.7
hxxp://vr1.6rooms.com/imges/live2012/new_head_v1.jpg	220.162.97.209
hxxp://vi0.6rooms.com/live/2015/08/23/17/1003v1440322326408959442.jpg	117.27.241.99
hxxp://s4.fx.kgimg.com/staticPub/js/kg_d6ff0a7.js	112.90.229.27
hxxp://qde.qunar.com/js.ng/framId=topAD&chan=flight&pg=home&pos=top&site=qunar&size=1600x336&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://vr0.6.cn/imges/live2012/base_head_v20_8bit.png	8.37.231.22
hxxp://kwcdn.000dn.com/swfs/87/25090zshh0203/reg.swf	203.130.61.92
hxxp://mmbiz.qpic.cn/mmbiz/AVNibO5YtlFOV1qVkHufbYB76DM6aKjngptibmFBTicicZyP8elJPhIkgYbTsrI40P11RiaVUD1oGcOuotCQvCjATpQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vr0.6.cn/imges/live/levelIco_v4/19.gif	8.37.231.22
hxxp://ww4.sinaimg.cn/large/808700fdgw1ertrnuprdhj201x01sglg.jpg	37.29.0.40
hxxp://static.yaoguo.com/images/common/flash/flash_star3.gif	220.162.97.209
hxxp://s2.fx.kgimg.com/fxstatic/images/yellow_warn2_b8d73e7.png	112.90.228.7
hxxp://ww1.sinaimg.cn/large/808700fdgw1ertrnndoxdj201x01sdfn.jpg	37.29.13.11
hxxp://user.qunar.com/index/order/unbind?callback=jQuery17207264470782716407_1441524492996&csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3&isTimeOut=true&_=1441524499493	59.151.11.54
hxxp://qde.qunar.com/js.ng/framId=ad_home_leftAD_float&chan=flight&pg=home&pos=left&site=qunar&size=24x202&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://v.6.cn/getActiveList.php	203.130.61.11
hxxp://cm.g.doubleclick.net/pixel?google_nid=agrantcn&google_cm&atscu=AG_275634_HFVR	173.194.113.217
hxxp://qde.qunar.com/js.ng/framId=flight_float_layer&chan=flight&pg=home&pos=top&site=qunar&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://static.yaoguo.com/images/room/xingyuan/dh1_b95047e.gif	220.162.97.209
hxxp://fanxing.kugou.com/1046289	183.61.10.157
hxxp://vi4.6rooms.com/live/2015/04/25/01/1010v1429894951825129732_s.jpg	8.37.231.20
hxxp://vr1.6rooms.com/imges/pixel.gif	220.162.97.209
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=rightTopBanner	59.151.11.19
hxxp://static.yaoguo.com/images/room/guard/guardcar_img2_b3ed2ed.png	220.162.97.209
hxxp://ww3.sinaimg.cn/mw690/8f3879f2gw1es8btuhnzcj20kw0c4jv6.jpg	37.29.0.109
hxxp://vj3.6rooms.com/js/LAB_0.1	61.140.14.19
hxxp://static.yaoguo.com/images/common/logo-mini_ca367ba.png	220.162.97.209
hxxp://user.qunar.com/webApi/popup.jsp?display&ver=v1.0	59.151.11.54
hxxp://vj3.6rooms.com/js/mootools_MIN_1.4.5	61.140.14.19
hxxp://ww3.sinaimg.cn/large/808700fdgw1ertrnyj5ifj201x01sa9v.jpg	37.29.0.109
hxxp://tracker.youzu.com/t/?t=load&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&l_t=2875&rand=1441524463727&ip=3270664410&timestamp=1441524459	115.182.198.91
hxxp://vj3.6rooms.com/js/jquery_MIN_5	61.140.14.19
hxxp://vi3.6rooms.com/9c/23/o266831357706635.png	8.37.231.20
hxxp://static1.yaoguo.com/images/room/guard/guardcar_img1_96ea2b3.png	218.6.111.42
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://s1.fx.kgimg.com/fxstatic/images/sprite/css/room/room2014_z_854673e.png	112.90.228.7
hxxp://vr1.6rooms.com/imges/user/avatar/59.jpg	220.162.97.209
hxxp://s2.fx.kgimg.com/fxstatic/images/blank_5307b88.png	112.90.228.7
hxxp://vi4.6rooms.com/live/2015/08/26/08/1003v1440549063335539924.jpg	8.37.231.20
hxxp://vi3.6rooms.com/live/2015/08/27/12/1010v1440648332755373327_s.jpg	8.37.231.20
hxxp://vr4.6.cn/imges/live/CSSIMG/peihuaBox.png	117.27.241.99
hxxp://shrek.6.cn/live.6.cn/e6u2/r.php?location=v.6.cn/mm2.html?src=tuigao&referer=www.cfmogu.com/6.htm&browser=mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; sv1; .net clr 2.0.50727; .net clr 3.0.04506.648; .net clr 3.5.21022; .net4.0c)&flash=10.0&msr=1276,846&uid=0&pro=4&stamp=1441524481493	111.121.193.144
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/js/biz_common/utils/report275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/cookie275627.js,/mmbizwap/en_US/htmledition/js/pages/voice_component275627.js,/mmbizwap/en_US/htmledition/js/new_video/ctl280b59.js,/mmbizwap/en_US/htmledition/js/appmsg/reward_entry2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/comment2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/like2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/a281ad5.js,/mmbizwap/en_US/htmledition/js/pages/version4video282222.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/storage275627.js,/mmbizwap/en_US/htmledition/js/biz_common/tmpl275627.js,/mmbizwap/en_US/htmledition/js/biz_common/ui/imgonepx275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/attr275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/ajax275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/string/html275627.js,/mmbizwap/en_US/htmledition/js/appmsg/report27ff13.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/class275627.js	203.205.147.226
hxxp://www.google-analytics.com/r/collect?v=1&_v=j38&a=1521449289&t=pageview&_s=1&dl=http://www.yaoguo.com/800374?f=1005&cpuid=214516&ul=en-us&de=utf-8&dt=çµé‚æŒå§¬å°ä¹–ä¹–çš„ç›´æ’é—´ï¼è…°æžœç½‘ï¼å…¨å›½å¤§åž‹åœ¨çº¿è§†é¢‘ç›´æ’å¨±ä¹äº’åŠ¨ç¤¾åŒº&sd=32-bit&sr=1276x846&vp=1256x842&je=0&fl=11.6 r602&_u=AEAAAEAAI~&jid=2092192789&cid=54479836.1441524500&tid=UA-62639335-1&_r=1&z=1444354087	173.194.113.198
hxxp://static1.yaoguo.com/images/room/live-status_572c6a8.png	218.6.111.42
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://user.qunar.com/webApi/unpaycount.jsp?format=js&username=null&callback=callback_58451&1441524492008	59.151.11.54
hxxp://user.qunar.com/webapi/message/unreadTipList?callback=callback_840037&1441524492008	59.151.11.54
hxxp://s1.fx.kgimg.com/fxstatic/images/yellow_warn_0473de0.png	112.90.228.7
hxxp://user.qunar.com/webapi/message/unreadTipList?callback=callback_639073&1441524480274	59.151.11.54
hxxp://static.yaoguo.com/images/room/dot_0c624c3.png	220.162.97.209
hxxp://vi3.6rooms.com/live/2015/08/22/02/1003v1440181490946282973.jpg	8.37.231.20
hxxp://vi2.6rooms.com/live/2015/06/25/16/1010v1435219348429169353_s.jpg	8.37.231.21
hxxp://flight.qunar.com/ifavorites/get?	59.151.11.22
hxxp://simg1.qunarzz.com/site/images/flight/home/img_qnkhd.png	188.43.73.1
hxxp://g.bj73.com/1/2016.html?uid=614516	61.188.87.111
hxxp://ww4.sinaimg.cn/large/808700fdgw1ertrnxfxowj201x01sq2s.jpg	37.29.0.40
hxxp://vi5.6rooms.com/live/2015/08/24/21/1013v1440424030229980088.jpg	8.37.231.22
hxxp://user.qunar.com/passport/addICK.jsp	59.151.11.54
hxxp://tracker.youzu.com/t/?t=begin&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&ou=0&rand=1441524460852&ip=3270664410&timestamp=1441524459	115.182.198.91
hxxp://vi5.6rooms.com/live/2014/11/25/11/1003v1416884712906517143.jpg	8.37.231.22
hxxp://simg1.qunarzz.com/flight/home/airline_pro/airline_prom3_v7.png	188.43.73.1
hxxp://s4.fx.kgimg.com/staticPub/js/room/socketAndLiveflash_9a63a0d.js	112.90.229.27
hxxp://static.yaoguo.com/js/??commons/json.js,cookie/cookieUtil.js,asidebar/asidebar-userinfo.js?v=2015072201,asidebar/asidebar.js?v=2015080501,subscribe/follow.js?v=2015082601,announceAndHelp/announceAndHelp.js?v=2015072701,history/history.js?v=2015080610,uiwidget/uiwidget-pagebar-subscribe.min.js,asidebar/asidebar-guard.js	220.162.97.209
hxxp://vi0.6rooms.com/f2/9a/v627061383118550.png	117.27.241.99
hxxp://vi4.6rooms.com/live/2015/09/04/16/1003v1441354186519694368.jpg	8.37.231.20
hxxp://vi2.6rooms.com/live/2015/08/10/17/1003v1439197486367993238.jpg	8.37.231.21
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vi5.6rooms.com/live/44/16/db85577447.jpg	8.37.231.22
hxxp://img1.qunarzz.com/qs/1411/f1/f1f51d8b64555950213a9cdb.png	119.145.149.101
hxxp://static.yaoguo.com/js/ie/IE7.js	220.162.97.209
hxxp://user.qunar.com/webApi/unpaycount.jsp?format=js&username=null&callback=callback_120887&1441524480274	59.151.11.54
hxxp://ww1.sinaimg.cn/large/808700fdgw1ertrnrvhnbj201x01sjr7.jpg	37.29.13.11
hxxp://vr2.6.cn/imges/live2012/mmListIco_v3.gif	220.162.97.209
hxxp://user.qunar.com/webApi/popup.jsp?js&ver=v1.0&_=1441524496962	59.151.11.54
hxxp://vr1.6rooms.com/imges/live2012/logo_v5.png	220.162.97.209
hxxp://ww4.sinaimg.cn/large/808700fdgw1eoo30076x3j20kw0c4abv.jpg	37.29.0.40
hxxp://static.t.agrantsem.com/ag_track-0.1.10.js	220.162.97.209
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vj3.6rooms.com/js/jquery_MIN_5.js	61.140.14.19
hxxp://vi2.6rooms.com/live/2015/08/15/01/1003v1439574409548965382.jpg	8.37.231.21
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=topAD	59.151.11.19
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=topicLinkL	59.151.11.19
hxxp://simg4.qunarzz.com/usercenter/login/quick_login2.png	188.43.73.1
hxxp://qde.qunar.com/js.ng/framId=ad_home_leftAD_middle&chan=flight&pg=home&pos=top&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://ww4.sinaimg.cn/mw690/808700fdgw1eoo30ll39pg200o00odfl.gif	37.29.0.40
hxxp://static.yaoguo.com/images/loginbox/register_hd_7d5aff2.png	220.162.97.209
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=homeadSy	59.151.11.19
hxxp://vi0.6rooms.com/live/2015/08/13/17/1003v1439458208429025694.jpg	117.27.241.99
hxxp://vr4.6.cn/imges/live2012/idx_sideico_v10.png	117.27.241.99
hxxp://g.bj73.com/js/1/g2.js?0.8850470745084853	61.188.87.111
hxxp://vi5.6rooms.com/live/2015/08/17/06/1003v1439763696488313126.jpg	8.37.231.22
hxxp://static.yaoguo.com/css/??common/asidebar.css?v=2015072701,common/launchremind.css?v=2015060101,room/guard.css?v2015082601	220.162.97.209
hxxp://vr1.6rooms.com/imges/live2014/idx-bg.png	220.162.97.209
hxxp://s3.fx.kgimg.com/fxuserlogo/85/20150707/20150707155554612396.jpg	112.90.228.7
hxxp://simg2.qunarzz.com/usercenter/usertoolbar/v1.0.0/img/loading.gif	188.43.73.1
hxxp://vi5.6rooms.com/live/2015/01/27/10/1013v1422324423827564029.jpg	8.37.231.22
hxxp://vi5.6rooms.com/live/2014/12/09/10/1010v1418090705130314943_s.jpg	8.37.231.22
hxxp://vi1.6rooms.com/live/2015/08/22/13/1003v1440221938622582571.jpg	117.27.241.99
hxxp://static.yaoguo.com/images/common/flash/flash_star5.gif	220.162.97.209
hxxp://vi1.6rooms.com/live/2014/07/02/10/1003v1404267074821837648.jpg	117.27.241.99
hxxp://source.qunar.com/site/images/wns/20140717_quna_hp_logo_sjq.png	188.43.73.51
hxxp://flight.qunar.com/site/fonts/qunar.eot?v=1	59.151.11.22
hxxp://simg1.qunarzz.com/site/images/ico/dbt_14.png	188.43.73.1
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://s2.fx.kgimg.com/fxstatic/images/footer1_042bc00.png	112.90.228.7
hxxp://simg1.qunarzz.com/site/images/flight/home/ico_arr_ad.png	188.43.73.1
hxxp://vr0.6.cn/imges/live/levelIco_v4/22.gif	8.37.231.22
hxxp://i3.6.cn/69/06/d184421399861104.jpg	8.37.231.22
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_combo2826cc.css	203.205.147.226
hxxp://ww3.sinaimg.cn/large/8f3879f2gw1es8ao4bqm4j20p00b4ads.jpg	37.29.0.109
hxxp://weblive.bs2cdn.yy.com/lgdsa1435203485699_1435203485703.jpg	218.6.111.42
hxxp://vi5.6rooms.com/live/2015/09/02/23/1013v1441206263416060384.jpg	8.37.231.22
hxxp://s5.fx.kgimg.com/staticPub/css/common/head_6853a2a.css	112.90.228.7
hxxp://vi2.6rooms.com/live/2014/03/18/22/1010v1395152088400052091_s.jpg	8.37.231.21
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vi3.6rooms.com/live/2015/08/29/23/1003v1440862419512215827.jpg	8.37.231.20
hxxp://ww2.sinaimg.cn/mw690/808700fdgw1eoo30ioszdg200o00omwx.gif	46.232.206.201
hxxp://simg1.qunarzz.com/flight/home/ico_hm.png	188.43.73.1
hxxp://vr4.6rooms.com/imges/live2014/header-bg-v3.jpg	220.162.97.209
hxxp://static1.yaoguo.com/images/common/grade/anchor2_2c3e5d6.png	218.6.111.42
hxxp://ww2.sinaimg.cn/large/808700fdgw1ertro1ar2vj201x01sdfo.jpg	46.232.206.201
hxxp://vi3.6rooms.com/live/2015/09/04/18/1003v1441361998196183527.jpg	8.37.231.20
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch.2x278965.png	203.205.147.226
hxxp://simg1.qunarzz.com/site/images/airlines/SC.gif	188.43.73.1
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_rightAD_top2	59.151.11.19
hxxp://simg1.qunarzz.com/site/images/flight/flight_search/btn_normal.png	188.43.73.1
hxxp://vr1.6rooms.com/imges/live2014/head-nav-v2.png	220.162.97.209
hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47	61.140.14.19
hxxp://vi3.6rooms.com/live/2015/05/17/13/1003v1431840649105458010.jpg	8.37.231.20
hxxp://s2.fx.kgimg.com/fxstatic/images/fx_loading_c785dd3.gif	112.90.228.7
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vi4.6rooms.com/live/2015/02/03/19/1003v1422961785334695929.jpg	8.37.231.20
hxxp://vr1.6rooms.com/imges/live2014/showwall-bg-v3.jpg	220.162.97.209
hxxp://cms.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR	140.205.142.233
hxxp://source.qunar.com/site/images/wns/20150806_flighthp_background_464x320_Ebb_6027.swf?clickTag=http://qde.qunar.com/event.ng/Type=click%26FlightID=179692%26AdID=240081%26TargetID=8462%26Segments=13,28,148,373,530,534,535,536,539,540,541,542,543,544,545,546,548,549,550,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,611,1101,1142,1183,4487,4494,4497,4648,4649,4676,4742,4951,4956,5001%26Targets=5302,29,1504,8462,8347,8351%26Values=34,46,51,63,77,80,101,110,150,204,215,228,243,250,252,301,305,323,5402,5598%26RawValues=%26Redirect=T58eySexufTRN91ezLFpOgFQ6MQfQ46JHk1J5g5gXi_kNdila1GaDckyVn9eP3Dh_FNtTX2g3kfgSYQd3EkEYcwSReZ1muv759lW5plBku02sdIKDRbO89djMgImKw8PAQxMzv8jyfIY638s7zpLVkk6iXchx4ZF27gyLD3hRnY=	188.43.73.51
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/js/appmsg/report_and_source2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/page_pos28055f.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_speed_report275627.js,/mmbizwap/en_US/htmledition/js/appmsg/voice275627.js,/mmbizwap/en_US/htmledition/js/appmsg/qqmusic275627.js,/mmbizwap/en_US/htmledition/js/appmsg/iframe282763.js,/mmbizwap/en_US/htmledition/js/appmsg/review_image275627.js,/mmbizwap/en_US/htmledition/js/appmsg/outer_link275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/jsapi/core275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/event275627.js,/mmbizwap/en_US/htmledition/js/appmsg/copyright_report2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/async27de55.js,/mmbizwap/en_US/htmledition/js/biz_wap/ui/lazyload_img275627.js,/mmbizwap/en_US/htmledition/js/biz_common/log/jserr2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/share2805ea.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/mmversion275627.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_img_lib275627.js	203.205.147.226
hxxp://simg4.qunarzz.com/usercenter/usertoolbar/v1.0.0/img/icons6-p8.png	188.43.73.1
hxxp://s4.cnzz.com/z_stat.php?id=1255214667	1.99.192.15
hxxp://vi4.6rooms.com/live/2015/07/06/11/1003v1436152159875483712.jpg	8.37.231.20
hxxp://ww1.sinaimg.cn/large/808700fdgw1ertro07v1ij201x01smwz.jpg	37.29.13.11
hxxp://vj0.6rooms.com/csjs/_/mm_z.js	61.140.14.19
hxxp://vr6.6.cn/imges/live/room/roomGameIco_v13.png	218.6.111.42
hxxp://ww3.sinaimg.cn/large/808700fdgw1ertrntqggoj201x01s0sk.jpg	37.29.0.109
hxxp://simg1.qunarzz.com/site/images/new.png	188.43.73.1
hxxp://s4.fx.kgimg.com/staticPub/js/jquery.min_4de7337.js	112.90.229.27
hxxp://ww3.sinaimg.cn/mw690/8f3879f2gw1es8cb5k86sj20kw0c4n0x.jpg	37.29.0.109
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vi4.6rooms.com/live/2015/08/07/19/1010v1438945428930586147_s.jpg	8.37.231.20
hxxp://img1.qunarzz.com/qs/1508/c8/774ebecc402bde.jpg	119.145.149.101
hxxp://vi5.6rooms.com/live/2015/07/02/20/1010v1435841090922650162_s.jpg	8.37.231.22
hxxp://vi2.6rooms.com/live/2015/07/05/22/1010v1436108213754093726_s.jpg	8.37.231.21
hxxp://vi0.6rooms.com/live/2015/08/28/22/1003v1440771193057527291.jpg	117.27.241.99
hxxp://vi3.6rooms.com/live/2015/08/20/14/1010v1440053194108171729_s.jpg	8.37.231.20
hxxp://vj0.6rooms.com/js/s/iwt-min.js	61.140.14.19
hxxp://qde.qunar.com/js.ng/framId=rightTopBanner&chan=flight&pg=home&pos=top&site=qunar&size=272x220&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=flight_float_layer	59.151.11.19
hxxp://static.yaoguo.com/images/room/guard/goldguard_img2_4bcb1d6.png	220.162.97.209
hxxp://static.yaoguo.com/images/common/flash/flash_star2.gif	220.162.97.209
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vdax.youzu.com/js/y.js	115.182.198.92
hxxp://vi6.6rooms.com/live/2014/09/14/01/1003v1410630337859816512.jpg	220.162.97.209
hxxp://simg1.qunarzz.com/site/images/flight/flight_search/ico_a.png	188.43.73.1
hxxp://ww2.sinaimg.cn/large/808700fdgw1ertro5j9b9j200j00h3y9.jpg	46.232.206.201
hxxp://simg1.qunarzz.com/flight/flight_inter/list/bg_wrap_ie6.png	188.43.73.1
hxxp://s1.fx.kgimg.com/fxstatic/images/room/2014/bigScrollBg_344e5d6.jpg	112.90.228.7
hxxp://flight.qunar.com/?ex_track=auto_55360807	59.151.11.22
hxxp://g.bj73.com/p/1/2016/0/5.js?uid=614516&lt=2469&key=0&tid=3&0.4339676475296046	61.188.87.111
hxxp://ww2.sinaimg.cn/large/808700fdgw1ertrnwfx5tj201x01sweb.jpg	46.232.206.201
hxxp://mmbiz.qpic.cn/mmbiz/MXngSX3icHBCficD74531aZ17r0DKrb84QOBMwCLunABfX61XDRXgicb2tDbYofdkx2oOWy6pvf5sjSMzSTOUJZew/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://vi5.6rooms.com/live/2015/05/11/12/1010v1431320164947388798_s.jpg	8.37.231.22
hxxp://vj0.6rooms.com/csjs/_/mm_login.js	61.140.14.19
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_float	59.151.11.19
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vr0.6rooms.com/imges/pixel.gif	8.37.231.21
hxxp://ww2.sinaimg.cn/large/808700fdgw1eoo304ivslj208w05k3z6.jpg	46.232.206.201
hxxp://simg1.qunarzz.com/flight/home/airline_pro/airline_prom1_v2.jpg	188.43.73.1
hxxp://vr0.6.cn/imges/live/levelIco_v4/13.gif	8.37.231.22
hxxp://vi0.6rooms.com/live/2015/09/02/13/1003v1441173204394825695.jpg	117.27.241.99
hxxp://c.cnzz.com/core.php?web_id=1255214667&t=z	195.27.31.246
hxxp://vi5.6rooms.com/live/2015/07/31/13/1003v1438320109052895370.jpg	8.37.231.22
hxxp://cms.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR&cna=FNlyDjvVEGICAcLyYNovtkCK	140.205.142.233
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/js/biz_common/utils/url/parse275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/device27f470.js,/mmbizwap/en_US/htmledition/js/appmsg/index280a8c.js	203.205.147.226
hxxp://flight.qunar.com/site/main.swf?20090107	59.151.11.22
hxxp://v.6.cn/event/highsing/homeEvent.php	203.130.61.11
hxxp://static1.yaoguo.com/images/room/kaibo_png8_54b424c.png	218.6.111.42
hxxp://vr2.6.cn/imges/live2012/idx_sideico_v10.png	220.162.97.209
hxxp://s4.fx.kgimg.com/staticPub/js/lab.min_c0c155c.js	112.90.229.27
hxxp://vr0.6.cn/imges/live/IMGSRC/loading_wb.gif	8.37.231.22
hxxp://g.bj73.com/api/c.php?platform_id=1&union_id=2016&union_type=1&link_id=0	61.188.87.111
hxxp://fanxing.kugou.com/ext/union/?url=room&unionId=111&sUnionId=14516	183.61.10.157
hxxp://mmbiz.qpic.cn/mmbiz/MXngSX3icHBCficD74531aZ17r0DKrb84Qva5N5kQ5TOXQs3E2SAE8DMcu9VDpKK9SbeEJt4HxrwSlIW6ZkfgEicQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://simg2.qunarzz.com/hotel/homesearch/Camal_walk_loading.gif	188.43.73.1
hxxp://www.google-analytics.com/analytics.js	173.194.113.198
hxxp://g.bj73.com/1/	61.188.87.111
hxxp://simg4.qunarzz.com/site/images/sidecode_v3.png	188.43.73.1
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/js/appmsg/emotion/caret278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/map278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/textarea27cdc5.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/nav278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/common278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/slide27cdc5.js,/mmbizwap/en_US/htmledition/js/pages/report2805ea.js,/mmbizwap/en_US/htmledition/js/pages/music_player275627.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/dom278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/emotion27f4f1.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/hashrouter2805ea.js,/mmbizwap/en_US/htmledition/js/a/gotoappdetail281ad5.js,/mmbizwap/en_US/htmledition/js/a/ios275627.js,/mmbizwap/en_US/htmledition/js/a/android275627.js,/mmbizwap/en_US/htmledition/js/a/profile281ad5.js,/mmbizwap/en_US/htmledition/js/appmsg/a_report282222.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/monitor27f4f1.js	203.205.147.226
hxxp://g.bj73.com/p/1/2016/0/2.js?uid=614516&lt=1594&key=0&tid=1&0.8503053447648762	61.188.87.111
hxxp://v.6.cn/message/follow_recommend.php	203.130.61.11
hxxp://simg4.qunarzz.com/site/images/zhuanti/huodong/dijia1.gif	188.43.73.1
hxxp://vi1.6rooms.com/live/2015/07/13/18/1010v1436782172623299618_s.jpg	117.27.241.99
hxxp://vr0.6.cn/imges/live/level/userLevel_v30.png	8.37.231.22
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vi4.6rooms.com/live/2015/08/28/17/1013v1440753029591128319.jpg	8.37.231.20
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_pc2826cc.css	203.205.147.226
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502	117.27.241.99
hxxp://simg1.qunarzz.com/site/images/flight/home/hurryup.gif	188.43.73.1
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://static.yaoguo.com/images/room/messagenotice/message_ico_ff852cc.png	220.162.97.209
hxxp://user.qunar.com/static/userlogin/prd/v1.1.6/loginPop-inner.css	59.151.11.54
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch_active.2x278965.png	203.205.147.226
hxxp://user.qunar.com/static/userlogin/prd/v1.1.6/LoginPop.js	59.151.11.54
hxxp://g.bj73.com/1/bg.jpg	61.188.87.111
hxxp://log.mmstat.com/cm.gif?url=http://cms.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR	140.205.96.1
hxxp://v.6.cn/event/promimg/?src=pming393	203.130.61.11
hxxp://vi5.6rooms.com/live/05/74/76a2433690d165a4111a247725573faa_s.jpg	8.37.231.22
hxxp://vr0.6.cn/imges/live2012/new_head_v1.jpg	8.37.231.22
hxxp://static.yaoguo.com/images/room/bodybg_33f93c5.jpg	220.162.97.209
hxxp://g.bj73.com/1/reg.swf	61.188.87.111
hxxp://weblive.bs2cdn.yy.com/lgdsa1441092502252_1441092502256.jpg	218.6.111.42
hxxp://img1.qunarzz.com/f_tejiahui/card/1509/8d/bdd631314f165f.jpg	119.145.149.101
hxxp://vj3.6rooms.com/js/mootools_MIN_1.4.5.js	61.140.14.19
hxxp://vi4.6rooms.com/live/2015/06/02/21/1013v1433251374571726650.jpg	8.37.231.20
hxxp://s4.fx.kgimg.com/staticPub/js/room/swfobject_dc734ee.js	112.90.229.27
hxxp://static.yaoguo.com/images/common/flash/flash_star1.gif	220.162.97.209
hxxp://static.yaoguo.com/images/room/weekstar/v2/weekstar_hd_560505f.png	220.162.97.209
hxxp://ww1.sinaimg.cn/large/808700fdgw1ertrnvjt5cj201x01st8j.jpg	37.29.13.11
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://static.yaoguo.com/js/??jquery/jquery.min.js,jquery/jquery.cookie.min.js,jquery/jquery.url.min.js,jquery/jquery-ext.js,commons/common-util.js,statistics/statisticsUtil.js?v=20150708	220.162.97.209
hxxp://vi1.6rooms.com/live/2015/07/22/00/1003v1437495922489029677.jpg	117.27.241.99
hxxp://vi1.6rooms.com/live/2015/03/24/06/1010v1427148922469733899_s.jpg	117.27.241.99
hxxp://static1.yaoguo.com/images/room/guard/diamond_show_e38fc4c.png	218.6.111.42
hxxp://vi1.6rooms.com/live/2015/09/03/23/1003v1441295193740557125.jpg	117.27.241.99
hxxp://vi1.6rooms.com/live/2015/08/20/17/1003v1440063054446958994.jpg	117.27.241.99
hxxp://ww3.sinaimg.cn/large/808700fdgw1eoo30hp6kgj203i02ta9x.jpg	37.29.0.109
hxxp://vr0.6.cn/imges/live/levelIco_v4/12.gif	8.37.231.22
hxxp://vi0.6rooms.com/live/2015/08/01/05/1010v1438379669194197912_s.jpg	117.27.241.99
hxxp://source.qunar.com/site/images/wns/20150828_flighthp_fc_912x250_6983.swf	188.43.73.51
hxxp://simg1.qunarzz.com/site/images/airlines/CZ.gif	188.43.73.1
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/js/biz_wap/moon275627.js	203.205.147.226
hxxp://t4.agrantsem.com/pv?atscu=AG_275634_HFVR&atsdomain=qunar.com&agfid=ANshGOFRiVoTm4YF&atsp=Win32&atsl=en-us&atsbr=1256x3719&atssr=1276x846&atsc=utf-8&atsh=flight.qunar.com&atsrf&atspv=1&atstime=1441524496805	123.59.41.213
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve2826cc.css	203.205.147.226
hxxp://vj0.6rooms.com/csjs/_/girlfall_5	61.140.14.19
hxxp://s3.fx.kgimg.com/fxroombg/20130115111108651409.jpg	112.90.228.7
hxxp://vi1.6rooms.com/live/2015/08/25/14/1010v1440485378285229059_s.jpg	117.27.241.99
hxxp://s4.fx.kgimg.com/staticPub/js/head_55cffdc.js	112.90.229.27
hxxp://kwcdn.000dn.com/swfs/87/25090zshh0203/sound.swf	203.130.61.92
hxxp://vr1.6rooms.com/imges/live/logo_foot_v4.png	220.162.97.209
hxxp://ww4.sinaimg.cn/large/808700fdgw1eoo3020m1hj20dt0a7abq.jpg	37.29.0.40
hxxp://ww3.sinaimg.cn/large/808700fdgw1eoo3037ca6j208w05kjs5.jpg	37.29.0.109
hxxp://vi3.6rooms.com/live/2015/02/24/00/1003v1424708659772115033.jpg	8.37.231.20
hxxp://vj1.6rooms.com/css/index_MIN_32.css	61.140.14.19
hxxp://static.yaoguo.com/js/??login/loginUtil.js?v=2015072702,header/header.js?v=2015080901	220.162.97.209
hxxp://vi2.6rooms.com/0c/95/m784061357704567.png	8.37.231.21
hxxp://static.yaoguo.com/images/room/guard/guard_d7153be.png	220.162.97.209
hxxp://img1.qunarzz.com/qs/1508/33/0b08ff7e458a5a.gif	119.145.149.101
hxxp://v.6.cn/api/liveInfoCk.php	203.130.61.11
hxxp://vj0.6rooms.com/js/s/e6u5-min?101016	61.140.14.19
hxxp://bc.qunar.com/f?utmwv=0.1&t=0.5984095723930103&utmsr=1276*818&utmr=-1&utmp=http://flight.qunar.com/?ex_track=auto_55360807&utmhn=flight.qunar.com&s=249	59.151.16.186
hxxp://mmbiz.qpic.cn/mmbiz/AVNibO5YtlFOiagiaw7KLsiahnBcGvCYfGCa1ZPiaUezghlh5xiaFhwzYlvGIRP3iaRnPCHOyRC3GksNkBAKku9HfibOWg/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://s3.fx.kgimg.com/fxstatic/images/starLevel/pc/14.png	112.90.228.7
hxxp://vj0.6rooms.com/csjs/_/mm.css	61.140.14.19
hxxp://static1.yaoguo.com/images/room/headerbg_60ee1fa.png	218.6.111.42
hxxp://simg1.qunarzz.com/flight/flight_inter/list/icon_dire.png	188.43.73.1
hxxp://vi4.6rooms.com/live/2015/09/05/11/1010v1441422031094414229_s.jpg	8.37.231.20
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_middle	59.151.11.19
hxxp://source.qunar.com/site/images/wns/20150714_flight_homepage_bottom_banner_912x90_6687.swf?clickTag=http://qde.qunar.com/event.ng/Type=click%26FlightID=164623%26AdID=235155%26TargetID=8345%26Segments=13,28,132,148,373,530,534,535,536,539,540,541,543,544,545,546,548,549,550,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,611,1101,1143,1183,4053,4487,4494,4497,4648,4649,4676,4742,4949,4954,5001%26Targets=5302,29,1504,5768,8345,8353%26Values=34,46,51,63,77,80,101,110,150,204,217,228,243,250,252,305,308,320,5402,5634%26RawValues=%26Redirect=T58eySexufTRN91ezLFpOuUgESJcUeNGAJjELNEGPow-zpNxVQsorYHxgyhuwf2iQHqwNdMcUgmvajOWroxGEA==	188.43.73.51
hxxp://vj3.6rooms.com/js/s/login_12	61.140.14.19
hxxp://vr0.6.cn/imges/live/levelIco_v4/16.gif	8.37.231.22
hxxp://vi2.6rooms.com/live/2015/08/16/15/1003v1439708920138471436.jpg	8.37.231.21
hxxp://qde.qunar.com/js.ng/framId=ad_home_rightAD_top2&chan=flight&pg=home&pos=top&site=qunar&size=230x90&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://vi5.6rooms.com/live/2015/06/30/11/1010v1435635632917325370_s.jpg	8.37.231.22
hxxp://vj0.6rooms.com/csjs/_/mm_index.js	61.140.14.19
hxxp://vi1.6rooms.com/live/2015/06/08/23/1010v1433776513658558468_s.jpg	117.27.241.99
hxxp://img1.qunarzz.com/f_tejiahui/card/1509/53/9df8c0850fd466.jpg	119.145.149.101
hxxp://static1.yaoguo.com/images/room/guard/guardcar_img3_8a36267.png	218.6.111.42
hxxp://v.6.cn/mm2.html?src=tuigao	203.130.61.11
hxxp://ww3.sinaimg.cn/large/808700fdgw1ertrno5dejj201x01sdfo.jpg	37.29.0.109
hxxp://s2.fx.kgimg.com/fxstatic/images/userfile/successIcon_754795c.png	112.90.228.7
hxxp://source.qunar.com/site/images/wns/20150902_flighthp_912x90_7241.jpg	188.43.73.51
hxxp://vi4.6rooms.com/live/2015/05/26/18/1003v1432637075681653373.jpg	8.37.231.20
hxxp://ww3.sinaimg.cn/large/808700fdgw1ertro88zh3j200i00h0sh.jpg	37.29.0.109
hxxp://s3.fx.kgimg.com/fxstatic/images/giftres/55/7cc0a9cabf777b1f4559aba439ed2c09.png	112.90.228.7
hxxp://vi0.6rooms.com/live/2015/08/05/11/1010v1438744520607433069_s.jpg	117.27.241.99
hxxp://qde.qunar.com/js.ng/framId=homeadSy&chan=flight&pg=home&pos=right_top&site=qunar&size=230x200&type=Tear_angle&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://qde.qunar.com/js.ng/framId=ad_home_leftAD_bottom&chan=flight&pg=home&pos=mid&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬	119.254.124.31
hxxp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516	115.182.198.92
hxxp://vj0.6rooms.com/js/s/e6u5-min.js?101016	61.140.14.19
hxxp://simg1.qunarzz.com/flight/home/airline_pro/airline_prom2_v6.png	188.43.73.1
hxxp://vr0.6.cn/imges/live/levelIco_v4/10.gif	8.37.231.22
hxxp://ww1.sinaimg.cn/large/808700fdgw1ertro7f7fsj200q00e3y9.jpg	37.29.13.11
hxxp://history.qunar.com/history/newhistory.html	59.151.16.186
hxxp://vr0.6.cn/imges/live/levelIco_v4/11.gif	8.37.231.22
hxxp://simg1.qunarzz.com/site/images/airlines/CA.gif	188.43.73.1
hxxp://ww2.sinaimg.cn/large/808700fdgw1ertrnp2iykj201x01sdfo.jpg	46.232.206.201
hxxp://vi5.6rooms.com/live/2015/07/22/01/1010v1437498037639692733_s.jpg	8.37.231.22
hxxp://ww1.sinaimg.cn/large/808700fdgw1ertro6hn8jj200k00k741.jpg	37.29.13.11
hxxp://img1.qunarzz.com/qs/1506/81/a6474588f25947.jpg	119.145.149.101
hxxp://vj1.6rooms.com/css/base_MIN_13.css	61.140.14.19
hxxp://vi5.6rooms.com/live/2015/08/29/19/1010v1440848628254728116_s.jpg	8.37.231.22
hxxp://kwcdn.000dn.com/swfs/87/25090zshh0203/bg.jpg	203.130.61.92
hxxp://ww1.sinaimg.cn/large/808700fdgw1ertrnr49h5j201x01s743.jpg	37.29.13.11
hxxp://static.yaoguo.com/images/room/luckystar_bg_e8825da_e8825da.png	220.162.97.209
hxxp://s5.fx.kgimg.com/staticPub/css/room/room2014_f52238b.css	112.90.228.7
hxxp://res.wx.qq.com/mmbizwap/en_US/htmledition/images/icon/common/icon_loading_white2805ea.gif	203.205.147.226
hxxp://static.yaoguo.com/images/common/flash/flash_star4.gif	220.162.97.209
hxxp://vr1.6rooms.com/imges/live2012/weibo-title_v1.png	220.162.97.209
hxxp://cm.pos.baidu.com/pixel?dspid=6666724&ext_data=AG_275634_HFVR	61.135.185.179
hxxp://static.uuzu.com/usr/uploads/201508/20150819170820_54770.swf	203.130.61.92
hxxp://simg1.qunarzz.com/flight/flight_inter/list/bg_flyhd.png	188.43.73.1
hxxp://static1.yaoguo.com/css/??room/index.css?v=2015082501,room/mediaqueries.css?v=2015061701,room/firstpayact.css?v=2015072001,room/weekstaract2.css,room/guard.css?v=2015082601,room/dayndaygift.css?v=2015072201,room/xingyuan.css?v=2015072101,room/messagenotice.css?v=2015081001,room/funnygift.css?v=2015081701	218.6.111.42
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_bottom	59.151.11.19
hxxp://cm.g.doubleclick.net/pixel?google_nid=agrantcn&google_cm=&atscu=AG_275634_HFVR&google_tc=	173.194.113.217
hxxp://vi5.6rooms.com/live/2015/07/18/00/1010v1437150501366480600_s.jpg	8.37.231.22
hxxp://vi2.6rooms.com/live/2015/09/05/08/1010v1441413431739154894_s.jpg	8.37.231.21
hxxp://source.qunar.com/site/images/wns/20150902_flighthp_272x220_7241.jpg	188.43.73.51
hxxp://vi5.6rooms.com/live/2015/07/04/18/1010v1436004451432314709_s.jpg	8.37.231.22
hxxp://tracker.youzu.com/t/?t=complete&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&l_t=2875&rand=1441524463727&ip=3270664410&timestamp=1441524459	115.182.198.91
hxxp://vi5.6rooms.com/live/2015/08/22/14/1010v1440223203292588355_s.jpg	8.37.231.22
hxxp://img1.qunarzz.com/qs/1508/da/d41869fb6060c0.jpg	119.145.149.101
hxxp://vi3.6rooms.com/live/2015/08/20/16/1010v1440059547324436188_s.jpg	8.37.231.20
hxxp://static.yaoguo.com/css/??header/header.css?v=2015051901,login/loginbox.css?v=2015051901,room/nickmodifybox.css?v=2015072901	220.162.97.209
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://bc.qunar.com/js/ga.min.js	59.151.16.186
hxxp://ww3.sinaimg.cn/small/808700fdgw1eoo30gvn2pg201c01cjrc.gif	37.29.0.109
hxxp://vi1.6rooms.com/live/2015/08/23/14/1010v1440312136660066846_s.jpg	117.27.241.99
hxxp://ww4.sinaimg.cn/large/808700fdgw1ertrnq0jnjj201x01s3yc.jpg	37.29.0.40
hxxp://vi4.6rooms.com/live/2015/08/30/17/1010v1440928658925275259_s.jpg	8.37.231.20
hxxp://img1.qunarzz.com/f_tejiahui/card/1504/fc/47a8e2ac999885.jpg	119.145.149.101
hxxp://ww4.sinaimg.cn/large/808700fdgw1ertrnzfsf9j201x01smwz.jpg	37.29.0.40
hxxp://mmbiz.qpic.cn/mmbiz/AVNibO5YtlFOV1qVkHufbYB76DM6aKjngN2nibGGSuBz51YG7alXcCKN6iacpp6dWutN2AvHRia0mTVaCuISfFMcWQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1	37.29.0.102
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://d.agkn.com/pixel/2387/?ct=UA&st=&city=13101&dma=0&zp=&bw=0&che=2949964848&col=8853099,883117,120058784,292870917,63928392	52.28.232.244
hxxp://www.qunar.com/twell/cookie/allocateCookie.jsp	59.151.11.19
hxxp://img1.qunarzz.com/qs/201405/08/f1f51d8b645559506886324a.png	119.145.149.101
hxxp://v.6.cn/api/liveWatchRoomGet.php	203.130.61.11
hxxp://vi5.6rooms.com/live/2015/09/04/21/1003v1441374469426980004.jpg	8.37.231.22
hxxp://vi0.6rooms.com/live/2014/07/28/13/1003v1406526224346765016.jpg	117.27.241.99
hxxp://vj3.6rooms.com/js/LAB_0.1.js	61.140.14.19
hxxp://ww4.sinaimg.cn/mw690/808700fdgw1eoo305zadvj208w05k754.jpg	37.29.0.40
hxxp://vi5.6rooms.com/live/2014/12/19/09/1003v1418953953835284831.jpg	8.37.231.22
hxxp://vj0.6rooms.com/js/s/iwt-min	61.140.14.19
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://kwcdn.000dn.com/images/vali_sprite.png	203.130.61.92
hxxp://vr0.6.cn/imges/live/levelIco_v4/23.gif	8.37.231.22
hxxp://source.qunar.com/site/images/wns/20150806_flighthp_background_1600x336_Ebb_6027.jpg	188.43.73.51
hxxp://ww4.sinaimg.cn/large/808700fdgw1ertrnstw19j201x01sq2r.jpg	37.29.0.40
hxxp://vi4.6rooms.com/live/59/47/a0b8c87b6804155aa4db6b07abc52998_s.jpg	8.37.231.20
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502	117.27.241.99
hxxp://vi2.6rooms.com/live/2015/01/27/10/1013v1422324075364249066.jpg	8.37.231.21
hxxp://vi1.6rooms.com/live/2015/08/04/02/1003v1438627049996466424.jpg	117.27.241.99
hxxp://static.yaoguo.com/css/??common/scrollv2.css,uiwidget/uiwidget-messagebox.css,common/launchremind.css?v=2015060101,common/popbox/popbox.css?v=2015061201,room/lovingday.css?v=2015081901,room/broadcast.css?v=2015082701	220.162.97.209
hxxp://v.6.cn/	203.130.61.11
hxxp://vr0.6.cn/imges/live2012/idx_leftside_icon_v8.png	8.37.231.22
hxxp://simg1.qunarzz.com/flight/flight_inter/list/m_usertoolbar_ie6.png	188.43.73.1
hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vi0.6rooms.com/err.html?errurl=hxxp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502	117.27.241.99
hxxp://www.qunar.com/vataframe/b.html?_=20120830&rnd=topicLinkR	59.151.11.19
hxxp://s2.fx.kgimg.com/fxstatic/images/room/2014/headline_4835e01.png	112.90.228.7
hxxp://irs01.net/MTFlashStore.swf	220.181.11.61
hxxp://ww2.sinaimg.cn/large/808700fdgw1eoo2zy2mvuj20m809vgnf.jpg	46.232.206.201
hxxp://img1.gtimg.com/cd/pics/23317/23317925.jpg	103.7.29.196
hxxp://pub.idqqimg.com/qconn/wpa/button/button_old_171.gif	103.7.28.33
hxxp://img1.qunarzz.com/qs/1504/ad/ff6fb4ec084fe7.jpg	119.145.149.101
hxxp://vi0.6rooms.com/live/2015/05/17/12/1010v1431836293039868445_s.jpg	117.27.241.99
hxxp://vi4.6rooms.com/live/2015/08/27/21/1003v1440682861143479209.jpg	8.37.231.20
hxxp://vi0.6rooms.com/live/2015/07/26/12/1010v1437884372255724437_s.jpg	117.27.241.99
sclick.6rooms.com	42.62.27.202
id.b.qq.com	183.232.119.175
ad.doubleclick.net	173.194.113.219
image.fanxing.kugou.com	112.67.255.203

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY Unsupported/Fake Windows NT Version 5.0
ET POLICY Outdated Windows Flash Version IE

Traffic

GET /live/2015/08/22/13/1003v1440221938622582571.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 16 Aug 2016 05:52:51 GMT

Date: Sat, 22 Aug 2015 05:52:51 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6184

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 22 Aug 2015 05:38:58 GMT

ETag: "2045301650"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:8110 (Cdn Cache Server V2.0), 1.1 fuz114:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...WUP....eq..tq'...........;.........;...].5AB........z...zz.
f^V^~.......@ .p.../..i.*2.*.2**.*..*:&.&&..&. \l<."RR."bbrJFjr.z01
1.;.=.3 . .5.7..7#. ..L.hhh.......,...,.o.|....Z.-  >..............
_....../..:......AH. ......G.....Q.hyP%5...,=..y?..Ii}lD..`...K{.\j[..
4].s ..7.....=..6.?...."..h.xx%...4-Q^......|.>@.`E...m...."p....G.
...PMD.j.j...`[email protected]@g..`.@...}.am..A./A.,A2.G..!l....t..(@j. .P0
...K.".....-B.F~...(...G..........7B..0..h~.....(".1>.I..Q.....t..\
.X(..A.....8@D8....^G....]R.. ..q......4/O.y..bkR........wj...;~..Pww.
..x.C.....c..x:...>.51....I<..t.a.../.]..m:..?..`D.{..dj.Aq.A>
;i.......o.q....%....JP..>.}r......w...n....!..:o.\...H.PN....&...x
........G8:.....2.U...O..J...._..@../.S...q..9Sw.........K-|.|.L2.5...
B...e.a.........._.a.8.f.f\..6.J.mI...Y&|/....Be1A.y.....I.=.^.IL;. Xk
. .Pt......U.Ad..c..........)..$..4N. ....":..zU....'....[M." ...i....
x.A..Bgu|.....e......C.g.\.....ei....p.kJ..L.lx...w?.....XT......_.Y..
.......<...?;\.?_./.#]...b..y.]...R...rAZHr.P...y.hP.)&.k....'`.~J.
[email protected]\#\.t"U.lvN....~..K...Y.l....
...7...~{.....)[email protected]....>........&...*..Q_._n{.P...~...z..*...Gv@...
..kH.d.n7.2s.../.z^RP._U..}G?...tH..!..!O?0.*.#.a...;.8..I..@... ....-
}LO.Z...6.ff.T.....V$..m=....)..].. ..e...gQi.vcEu....q}i..-5{.|CK...T
.3!.....S.. ......M._7..`....Zk......$......^.SF.r...._......7.M...v,.
3.4..S.z..'.&Y.Z.z[.P..=...I6.g.C.K#|.g......}.).).>....~D.j..h..~?
...V.&...`..6[.<[email protected]......"<<< skipped >>>

GET /live/2015/07/13/18/1010v1436782172623299618_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 07 Jul 2016 11:47:55 GMT

Date: Mon, 13 Jul 2015 11:47:55 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 17508

Cache-Control: public, max-age=31104000

ETag: "1371173203"

Last-Modified: Mon, 13 Jul 2015 10:09:32 GMT

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 huzhou89:8080 (Cdn Cache Server V2.0), 1.1 fuz110:7 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
B.........................!.1AQ."aq.....2..#3BRb....r....$%CS..4......
..........................3.....................!..1.AQ."a2q........#B
...$3R............?..T..$.,v*.. .4U)....G?.G...0.HK......dn...(.`..1NG
n.u*...K/..%.[.(.d.h.i.$2..k..b.?.v....*[H.J....F5.......0.q4.E'.C...2
...s.gWx..wD.......1G%V.A.Fs.SD4.8.O..k.w;..s?..n.gc....L.L.a.O.....T.
...|.K .7:.....)|:x.UE......Kr...A.G.......C2K........V...TI....^./|Z.
...t....a.x.......sZ.&.{..l...-.^............fuq..z..o...;....o.m.o.[/
=X....Dl..IH..h.7..8..H.........F..y...5..1..{./oQ....$...E.PR..A,....
.c...{..BTX.8I;x.N....eg.i..............YE....L..C...E. ...~...".zT...
e..b.X.@.,I..R@../.yE.7.0.W..&a,K<[email protected].....{.
,.N..b.eRC.g......LM...}..3..j.................Z ;a.1m..4...N.X.d)e...
.......ariF*...1...O.....*..Z...S.aX.=... P..KXC......R..R.&3.}..e..:_
K....xN.. $...RT..A......N..D....w/.q.NaN/.DAC.\*..m....}.).Q...y.5.T.
%....[...=.rN. '..GS.De.......].~$...n...~~....v.I.....w$.oRl..=....M.
7].!*5J......`@,....(.'orN../.V.[.....I..U...H.!k......|M.. x..m.,i..#
..K.7'...I?<...R.....\.@......|..j...[5.*.Q%.c.k.......H]8ov.......
.........".:v.d..j..).....X..{.....l ...........)`,;.E.)....a.b..:MQ1.
.&.a.GL.WU.,5.o..>..8*...G.y.Ih.s.l1...)jZZU.......=.~XF......*.q.(
N.j..ko......_I.G.r...."...!.<..cM.d6p0.JH.V....V.......}H..Q;.<<< skipped >>>

GET /live/2015/03/24/06/1010v1427148922469733899_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 18 Mar 2016 02:06:25 GMT

Date: Tue, 24 Mar 2015 02:06:25 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 13145

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 23 Mar 2015 22:15:22 GMT

ETag: "63851377"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 jfzh181:8106 (Cdn Cache Server V2.0), 1.1 fuz109:7 (Cdn Cache Server V2.0)

Connection: keep-alive
....z..U....UP.L...w..ap.......;..ww........Np...N......l....{..sZ...~
_~...*........&................................................DALL.N.
bdbae.Rspq0s10.0....................[.=.<T@?............>.......
......2"......]I\.<..<.2.2..."[email protected]&.S3u..IB!.....J..\.
....2..FuM.d.....9......D..*.p(.5...K.C.C@@....... .!..rK".......LC.y.
...W....y.!..$....,".r..... .5.. ... .}V.B.....a.....n......t...).}...
..S ..........w...e.r%.;v..^[email protected].~.y.rF?[....I.I]D..6 ..*..
...q3.m....A..'...ts....~../.I..sm(..].........g....v...2...J.U.G.....
.H>?... .! :.g..|.._V...ysS<=.5...*..8/5...O.....V|.Dw ...M.kB.f
.Q....O.K.G.`...^..l......D........w.lz..>8..p.8?`%........G .WsW..
..h....W.v_........#.Y.q..i...Q.f.|Kd%.Gh..^...`.......{...^...V;~..&l
t;.1..!G..Fw..9?.w#nM=..%h..=Wip^M2..Oj/g......`.....o| ..|u..#..iu.X.
...[.P..o...5M.......iUZEl{..h...7.h2..8...X)...C...p.\P.....j~>T..
.A..T..Pe...UZ..kK..Ta....T....m.....5./.7..S..ku...i!....C..&.Yw.r.. 
.{W...}.6.....!9a..RR'`]\h....#....r....?'..~z...tTB..7t......m...5..9
.1....A..i........UO.....z6.F.N.*....\j...m....[..$....}.M.9~..[..JA S
......~...B....>o......e#.?8H.um....8POS......X..&...t..l.....*....
.&...!.J.'7K..k..S.....g.j.6..>,........z...._....r.\...Tn....*.U..
....Hh...D,.N...]...m..8C.Z./.(.Q.......R...].'.A..2.<Y....=.. ...p
#!.ng.N.M..2U.k:.....x.h.....P.L.......<.../...1....#..._.......u.p
.=.....x.....{.P......[B.#.....-U..?l.{....-..2....3:......~..6....I7F
|..9..:\R........{i.....(^G..y~g.......k.;..R...ly?.).c^..P?g.....<<< skipped >>>

GET /live/2015/08/20/17/1003v1440063054446958994.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 14 Aug 2016 15:22:08 GMT

Date: Thu, 20 Aug 2015 15:22:08 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 11492

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 20 Aug 2015 09:30:54 GMT

ETag: "3022762544"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou83:8080 (Cdn Cache Server V2.0), 1.1 fuz114:6 (Cdn Cache Server V2.0)

Connection: keep-alive
....N..U....uP.^...X...\b...s.%....T.......eI.J.K..H)..... \.w........
=s>.y..3.>.<n.(..:..,,,..,..:@.....?.O...K...................
..(H.(...)h)(..ihhH...i..A.4.........K..KHMJLJ....a.%...@.`Q..).p(....
,....................V..`a................R..8D..T..8....br.Fh.Ta.....
.......Bn5..j.?.......=..........3%.....b..`....o.........k.@.)...S.9.
N........x\....cR.P...K..I.U z?..........U.Z[...neb..i..e..Y.i.......o
.1z.b......{.&kR......r.&..K._...Gk\(..d.Y..5.g;..E.P.*Q .N..e8...te.%
F`....Yn.A.".%.9.V....K....T.B..3.......9.~.S.e.(e.#.U..[x..It...E."?.
.f......]....u...Q~.S....X....s...Q...9.@z......\.Q..[. ..;Jo.....x.?.
...._Gw..D/......z....w;.o.C..K.......'m2......4..Rga#.M.]2.F...^..%..
5B.........8j.k...... x.\ C....a.?'[email protected]. ./....a...
>......J.Y7-...(g..,t.D..,.I.P..S..(_e).)....1O.Wr....bM..B. .$.P./
....D1..Y.......2.p..Q..j.Cp....._......i{....0.Em.- .h|.,A..;p...W.,.
t4.J..5..F..*...I.(0.m....3%w.WK.m..'.KG...<.[pY....\8....F]..?.<
;.......9.ZR...r~u.Z.nR..u)..#s..^....eW..8.x........0*.U.zk(c{{.J.0..
S..~.T........O.UB....E.....bM....n..:...K.op........p.M[\v.......u.9.
v.....O]....Joc..y.......x.:.&.i.8.5..O]..9t.......3..c...'.F.........
.7...?.>..{!.^.oh.4H.....U.....A. .1.'".....2K...J`.{...z.....QK,..
.mHJ........JS..i&../*^!.#.J./Z..W.-_.6.|..lj.u>G.......h....[. .'1
H~.I.n..4.F...2.....m.......Y./.q!_.#...ZX..).....>..K3.`..v....1.Z
.6.......\C[.W..c...U_....(..h....|.9.p!..b..FZo..cf3..Dmc)..e.3......
g.....7..gJ.r..$....O.t.G.s`/.6l..!Y.Q.v...=....5....d.....#....'%<<< skipped >>>

GET /live/2015/08/22/13/1003v1440221938622582571.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 16 Aug 2016 05:52:51 GMT

Date: Sat, 22 Aug 2015 05:52:51 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6184

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 22 Aug 2015 05:38:58 GMT

ETag: "2045301650"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:8110 (Cdn Cache Server V2.0), 1.1 fuz114:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...WUP....eq..tq'...........;.........;...].5AB........z...zz.
f^V^~.......@ .p.../..i.*2.*.2**.*..*:&.&&..&. \l<."RR."bbrJFjr.z01
1.;.=.3 . .5.7..7#. ..L.hhh.......,...,.o.|....Z.-  >..............
_....../..:......AH. ......G.....Q.hyP%5...,=..y?..Ii}lD..`...K{.\j[..
4].s ..7.....=..6.?...."..h.xx%...4-Q^......|.>@.`E...m...."p....G.
...PMD.j.j...`[email protected]@g..`.@...}.am..A./A.,A2.G..!l....t..(@j. .P0
...K.".....-B.F~...(...G..........7B..0..h~.....(".1>.I..Q.....t..\
.X(..A.....8@D8....^G....]R.. ..q......4/O.y..bkR........wj...;~..Pww.
..x.C.....c..x:...>.51....I<..t.a.../.]..m:..?..`D.{..dj.Aq.A>
;i.......o.q....%....JP..>.}r......w...n....!..:o.\...H.PN....&...x
........G8:.....2.U...O..J...._..@../.S...q..9Sw.........K-|.|.L2.5...
B...e.a.........._.a.8.f.f\..6.J.mI...Y&|/....Be1A.y.....I.=.^.IL;. Xk
. .Pt......U.Ad..c..........)..$..4N. ....":..zU....'....[M." ...i....
x.A..Bgu|.....e......C.g.\.....ei....p.kJ..L.lx...w?.....XT......_.Y..
.......<...?;\.?_./.#]...b..y.]...R...rAZHr.P...y.hP.)&.k....'`.~J.
[email protected]\#\.t"U.lvN....~..K...Y.l....
...7...~{.....)[email protected]....>........&...*..Q_._n{.P...~...z..*...Gv@...
..kH.d.n7.2s.../.z^RP._U..}G?...tH..!..!O?0.*.#.a...;.8..I..@... ....-
}LO.Z...6.ff.T.....V$..m=....)..].. ..e...gQi.vcEu....q}i..-5{.|CK...T
.3!.....S.. ......M._7..`....Zk......$......^.SF.r...._......7.M...v,.
3.4..S.z..'.&Y.Z.z[.P..=...I6.g.C.K#|.g......}.).).>....~D.j..h..~?
...V.&...`..6[.<[email protected]......"<<< skipped >>>

GET /live/2015/07/22/00/1003v1437495922489029677.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 16 Jul 2016 06:53:39 GMT

Date: Wed, 22 Jul 2015 06:53:39 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7103

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 21 Jul 2015 16:25:22 GMT

ETag: "910670738"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8105 (Cdn Cache Server V2.0), 1.1 fuz109:5 (Cdn Cache Server V2.0)

Connection: keep-alive
....rr.U....eP.n....iXRr.]J...Q..Xb.e......Y..K:..i..R.E..II..A.....3.
~|[email protected]!.1.!11.1..1)9.99..9...=.&.ff&. ..
>.' ./;..%.../....p..........!x$$$.......`V  ......-)...L......#...
............ !......G.O...........AB.O......h....$...<.........J...
.V}.@>......l..)...../...@.?J..!....s|.........KZ.n:.."!...%.g.."..
.......y..On.`...].'i.a.K......zpi....6.]q...Q...v....aFog.){L...v...h
..$;W..[m...qg.N.u....Z.........I0.l.}.1..j"9..[.....r......}.R.6....1
U...H..{E../.g.. G.2.b.....X.......pvy,_Q...G...b.]U._.R.H...|..r.T..j
... ..L.].p.$q....4.....\.>...U^uS.....U.5..qD`...s.[.......e._."(.
>...}R.eV.Y.k..VM../..t..[.-.C...).k..........PC..dC..M.H..-...../.
.|...5.........W..........iV<..;...r..}..%.6.....j7...w.X. ._.vR..T
...K.G.....m..C>..F2..Vj...!1..yT}.aHp.9....u..V[..).I......{.i.U..
1.[.K..&]a..T.x|k/ )..a.....c.W.4e...).Ibp.....G..W.._.=G........>.
[email protected].'k...p..A._|...M..r]X.Ca...)NV/C.....m..K....P.._..#^,
9.-o..)...#w....ge.r[-..!.'<..f{.............A .I.<%....^.s\..M.
../.&..% .L...;X....._..pV......~.....M<\.,yjI.a1.................2
..zh..[.kW.g;.....y.go...@`..Yy..'<...........|......8...S..|..}...
K...|6y.<@..Gj&.W.........uj.E.v....#.....<.R...o.%.....O8".ZU..
Vu.]....FW.2.....cX.U ...@..........[=X......$.2..O..]..W.V.C..s].....
..mMu.&.$..Z[....R.......JQDp..wFM\.t.G......G.$(5....g.._.........Ik7
......)...=t..c..x...W..a...p...kKb`....C..1.b&..J...;.aiP.d..=...!...
.XE....#..........a...&.....|..c.>n...h...HOI....#;....1..b..tT<<< skipped >>>

GET /live/2015/09/03/23/1003v1441295193740557125.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 29 Aug 2016 04:13:51 GMT

Date: Fri, 04 Sep 2015 04:13:51 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6543

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 03 Sep 2015 15:46:33 GMT

ETag: "4055150544"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou83:8108 (Cdn Cache Server V2.0), 1.1 fuz110:5 (Cdn Cache Server V2.0)

Connection: keep-alive
....Yk.U....eT.^..g...i...AZ.c..JA...A$..K.!.......$$$%.%D.B......w...
>g.:.u......g....a.P......w....U...............`"||<.."..b"bbR2J
rR2.2bbrZr.*j.......h..(.i....A......`BjRbR..3......4@........(..=.f..
...........'..... ... .........b ......c...Q.2..p.MBW.P.v.p..........=
..H..:.g`[email protected].....?@./[email protected]..
!._N...dIS....b.9.4..`.........:..g...l.&q....UOAL..1...o..M.h.a.J .:.
L..."9.}..Vw.l..V,.i?....?FT....C..B.....'G.D.B.H.2CF!.........5.....V
..X..X.:...S>......Xr.W ...q..s....\o.u......>..@..:..O.3.\.`2..
..7E..B [email protected]..'.S~...s...[.;...a?...d.7R%)fV/?..L.Eb4O......Ao..... 
.d..Oo..3,........M.........$S.x......@.{....~...[...,..e..\........k.
5...<.T....G].b....5n......p..................o....6CG]...-..-.....
.S.ev.......pv_........S;.............. ... i..71...A...5g.&..*......|
.\..S)KQ.u.1..5.g...b]@...C.JW...8........_...og~..H.>?T..X.j....k.
....%.?...M......7CH....iL:..OB..U....8...../..hG.-....A.....jZ<...
..kXB..bfy.t.Yl.7........a... ...V.s...j..[..B\.a.)._3f..c..\........&
..y...i...U.n..q!WvV$.^R...M...........(<.]ej....!...-1...P.g.6R...
.....qN.j.8...i0......V.&...DX..^..9C.=.2:.w.....?......f..A........?M
...'........*:SNB.._..0.O*....;...VT.....>y..K.QS..K.....}...uv....
.R>..F3.m.s%...%^7\... [email protected]<.i.,"V.q./^...ur..6..W.;..N].
.B...#./.Z..)g.I27..?R8f@...#P..6*am'`....%>..=...-..........2.Xf..
.x.g.....zJ.w0.%1S....Y.2...n.r.*u....<.Q...K=R.J9%.].E...>W..~.
.......I.......#.......{./-9.o......6....u.^..U|.....A.T>.|...A<<< skipped >>>

GET /pixel?google_nid=agrantcn&google_cm&atscu=AG_275634_HFVR HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cm.g.doubleclick.net

Connection: Keep-Alive


HTTP/1.1 302 Found

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Location: hXXp://cm.g.doubleclick.net/pixel?google_nid=agrantcn&google_cm=&atscu=AG_275634_HFVR&google_tc=

Date: Sun, 06 Sep 2015 07:28:17 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Content-Type: text/html; charset=UTF-8

Server: HTTP server (unknown)

Content-Length: 305

X-XSS-Protection: 1; mode=block

Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 06-Sep-2015 07:43:17 GMT; path=/; domain=.doubleclick.net
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://cm.g.doubleclick.net/pixel?google_nid=agrantcn&a
mp;google_cm=&atscu=AG_275634_HFVR&google_tc=">here</A&g
t;...</BODY></HTML>..HTTP/1.1 302 Found..P3P: policyref="h
ttp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa 
DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DS
P COR"..Location: hXXp://cm.g.doubleclick.net/pixel?google_nid=agrantc
n&google_cm=&atscu=AG_275634_HFVR&google_tc=..Date: Sun, 06 Sep 2015 0
7:28:17 GMT..Pragma: no-cache..Expires: Fri, 01 Jan 1990 00:00:00 GMT.
.Cache-Control: no-cache, must-revalidate..Content-Type: text/html; ch
arset=UTF-8..Server: HTTP server (unknown)..Content-Length: 305..X-XSS
-Protection: 1; mode=block..Set-Cookie: test_cookie=CheckForPermission
; expires=Sun, 06-Sep-2015 07:43:17 GMT; path=/; domain=.doubleclick.n
et..<HTML><HEAD><meta http-equiv="content-type" content
="text/html;charset=utf-8">.<TITLE>302 Moved</TITLE><
;/HEAD><BODY>.<H1>302 Moved</H1>.The document has
 moved.<A HREF="hXXp://cm.g.doubleclick.net/pixel?google_nid=agrant
cn&google_cm=&atscu=AG_275634_HFVR&google_tc=">here<
/A>...</BODY></HTML>......
<<< skipped >>>

GET /pixel?google_nid=agrantcn&google_cm=&atscu=AG_275634_HFVR&google_tc= HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cm.g.doubleclick.net

Connection: Keep-Alive

Cookie: test_cookie=CheckForPermission


HTTP/1.1 302 Found

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Location: hXXp://adx.agrantsem.com/cookieMapping?atscu=AG_275634_HFVR&google_gid=CAESEMwJ6kNLyuHlHNmhyH3ZZBU&google_cver=1

Date: Sun, 06 Sep 2015 07:28:17 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Content-Type: text/html; charset=UTF-8

Server: HTTP server (unknown)

Content-Length: 317

X-XSS-Protection: 1; mode=block

Set-Cookie: id=22f8b2fcf9030004||t=1441524497|et=730|cs=002213fd48e7998ce74bb7c7ab; expires=Tue, 05-Sep-2017 07:28:17 GMT; path=/; domain=.doubleclick.net

Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; Max-Age=0; expires=Mon, 21 Jul 2008 23:59:00 GMT
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://adx.agrantsem.com/cookieMapping?atscu=AG_275634_
HFVR&google_gid=CAESEMwJ6kNLyuHlHNmhyH3ZZBU&google_cver=1">
here</A>...</BODY></HTML>..HTTP/1.1 302 Found..P3P: 
policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP
="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NA
V OTC NOI DSP COR"..Location: hXXp://adx.agrantsem.com/cookieMapping?a
tscu=AG_275634_HFVR&google_gid=CAESEMwJ6kNLyuHlHNmhyH3ZZBU&google_cver
=1..Date: Sun, 06 Sep 2015 07:28:17 GMT..Pragma: no-cache..Expires: Fr
i, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, must-revalidate.
.Content-Type: text/html; charset=UTF-8..Server: HTTP server (unknown)
..Content-Length: 317..X-XSS-Protection: 1; mode=block..Set-Cookie: id
=22f8b2fcf9030004||t=1441524497|et=730|cs=002213fd48e7998ce74bb7c7ab; 
expires=Tue, 05-Sep-2017 07:28:17 GMT; path=/; domain=.doubleclick.net
..Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; Max-Age=0
; expires=Mon, 21 Jul 2008 23:59:00 GMT..<HTML><HEAD><m
eta http-equiv="content-type" content="text/html;charset=utf-8">.&l
t;TITLE>302 Moved</TITLE></HEAD><BODY>.<H1>
302 Moved</H1>.The document has moved.<A HREF="hXXp://adx.agr
antsem.com/cookieMapping?atscu=AG_275634_HFVR&google_gid=CAESE<<< skipped >>>

GET /large/808700fdgw1ertro7f7fsj200q00e3y9.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww1.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1086.v0-mow ( h0-s1154.v0-mow), ht h0-s1154.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Fri, 18 Sep 2015 15:55:18 GMT

Age: 6708777

Content-Length: 1193

Content-Type: image/png

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.13.11,c=194.242.96.218

Connection: keep-alive
.PNG........IHDR.............1..C....tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:C9D3C0FFE00011E497E0E1B9B0
95DE95" xmpMM:DocumentID="xmp.did:C9D3C100E00011E497E0E1B9B095DE95">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C9D3C0FDE00011E497E0
E1B9B095DE95" stRef:documentID="xmp.did:C9D3C0FEE00011E497E0E1B9B095DE
95"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>A. .....IDATx..T...@.]..P.v.....t ....-.....^
.@...[..x.M.0d\`=.$....y......m;.../.3u}....xy.w..u.....>$....^@..q
...........@&J/.o..l..HL.P.g0..d....?.....`..5Y.LU.$.c.......K)~M..*m.
...R.w............EO.-..q.s.l.}..I`...5....:uy26...L..H.)....\.UJ.(a..
.:T}..;...H..A.GF.....u..._q....v.'._..[....%.vi-.M....IEND.B`.
....
<<< skipped >>>

GET /large/808700fdgw1ertrnvjt5cj201x01st8j.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww1.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1086.v0-mow ( h0-s3.v0-mow), ht h0-s3.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Fri, 30 Oct 2015 13:51:25 GMT

Age: 3087410

Content-Length: 3936

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.13.11,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:150EEC53E00311E49E2FFC1F57F6BE85" xmpMM:DocumentI
D="xmp.did:150EEC54E00311E49E2FFC1F57F6BE85"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:150EEC51E00311E49E2FFC1F57F6BE85" stRef:doc
umentID="xmp.did:150EEC52E00311E49E2FFC1F57F6BE85"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
...........................................!1..Aa"2..Q.Rq..Bb....#3%..
.......................!1.A..Qa.q...."...2B............?..#..&... .l.F
..o(t.2.%...{.........[Ua..d[#.B.KYa..r.b.!}Fu.H>....)N.........M.q
.. r..&.Q..McQ5.................ra.Y.{.......R..g..1..3Xt.`n..N#.. ...
...%...z......b.DU.d...R.././0..9..|:KK g..[)....h.<..A..4~/%..{k..
.{.-.=.....H.Wd!.(i..ud.R.[..l.nP.y%......Z.J......s...........Zi.<<< skipped >>>

GET /large/808700fdgw1ertrnr49h5j201x01s743.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww1.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1086.v0-mow ( h0-s1142.v0-mow), ht h0-s1142.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Tue, 27 Oct 2015 15:39:25 GMT

Age: 3340130

Content-Length: 3262

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.13.11,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:C6A12CF7E00211E49EBBEEC5A4B3D648" xmpMM:DocumentI
D="xmp.did:C6A12CF8E00211E49EBBEEC5A4B3D648"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:C6A12CF5E00211E49EBBEEC5A4B3D648" stRef:doc
umentID="xmp.did:C6A12CF6E00211E49EBBEEC5A4B3D648"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
.........................................!..1A..Qaq.."2...BC.Rbr....3$
........................!1.A..Q"2.B.aq................?..~........!$C.
.f\J.).O..9d.G.....G.U...yr..Y<....nI(...F....S..d.F.......)S.;{...
.....H..;~i.Z||8....h....0...t...2%..bX..b......&M....>..P.......fF
.X...v{w.J..fJj..E.. i..G..H.1f....n.-.Jy.t.ET.......cN....O....t. B..
X}.......$..i.:%m8.C. B.....)..4.r....w...'.:..U..dO..\...` ..;..T<<< skipped >>>

GET /large/808700fdgw1ertro07v1ij201x01smwz.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww1.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1086.v0-mow ( h0-s1126.v0-mow), ht h0-s1126.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 01 Nov 2015 06:25:26 GMT

Age: 2941369

Content-Length: 3805

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.13.11,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:48AA47D6E00311E4805FDD2ADEC60674" xmpMM:DocumentI
D="xmp.did:48AA47D7E00311E4805FDD2ADEC60674"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:48AA47D4E00311E4805FDD2ADEC60674" stRef:doc
umentID="xmp.did:48AA47D5E00311E4805FDD2ADEC60674"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
........................................!.1.A"..Qa.q.2B...Rr$...#3.S..
...................!.1..AQ.".aqBb...2....R............?..\.....,P.;I/.
.&...........g...k.L..j.... .#..^Y..1y..5...n..x......PO...e...&._r..r
......n...:...g2.?.....OH^..I.....M.....om.....{I.A.*..x...S.'B.Yc.9c.
.$N.7SB.7.j.)Ee....O{[email protected]?q..IA....Tw5N.q.....~.
..F........ ^E.....7..Mbg...-.F......%F..M#<...22M$E.....S...Mc<<< skipped >>>

GET /js/LAB_0.1.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 06 Oct 2015 01:45:12 GMT

Date: Sun, 06 Sep 2015 01:45:12 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 2787

Last-Modified: Tue, 01 Jul 2014 23:47:18 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 guigu229:8105 (Cdn Cache Server V2.0), 1.1 yfdx34:4 (Cdn Cache Server V2.0)

Connection: keep-alive
...........Yis.8.......;..b.rfw...xu..-...$....EA.c..y........$.8....*
".F..........v{...A..~:..Pz. .it.I..J.._..{....EJ_.h.....].......2...`
.Hd..O.]6../.D4^.x.~."...C.M...$CoL..7..!.,..@F..].{qc.....Q.;.>%b(
}/.::........L>."...8.'"......a.-...R.X.3...?..,I-v......^:..9o.u..
.c.........l.C..Y,...... t..s..n..=..u{.S.. . >.~6.Qj..7.l.......G.
....y....P..Lp.....{......S{..T....Sy.....{.....r..m....E7.b..Uw..^.E.
..A.(-0...v...(.T.....*...(..y......'[email protected]},e(..b...V.d...."...V..d.(
..4..`%p..o^...,#.s...`.....ZM...4.$..X.Y.5~.MP...`...K]..........'..i
f.uR...6.D..m..R")]K..:)..2.......`..d.%m.......&....%w..eQ...H...d...
...m.}...4.v......`8.H.Iqmi....!..#..%@D.wn0...)...t.aG*(.....8.V...o.
.y....n...... ...W..w[..a...~s#b.A......?..Q....~.8.,@.I[F...... w...F
p...L........|9_."...........lb...q...F..;B...[$n.u...B41....%./.V..
. IE$...Ry..^..r....T..;r.... .<..;.U2.1..e0.2K......%.......g)F...
b......y.ivK....l...'.........8.../...ugc...L..%.....7....G...P.......
- ....=..I.....hd>....~...F..]C..D....X.e.(.VkiC...gS....n.......G.
.qu:<J.....0.P'........U...;1......d!.._...u....n$2.}..|.......f,DD
...K.-..DD......O,[email protected](.`.....Y.NH....Qp........H{..C..
 `}..J..5.7B?.2..Y...1....U..?..9.......L...s...h& .....C.Hp|.#..Q....
..?W..#nYUUMH...J/[email protected].. .?...'.
........W....Lh.q.....{.g fU..QT...k......J.......~.[....$...9.W..`...
..O.........5.]K.19....@{e..Y.^.V..d....U=..5o..........s@sg..........
..7c<..>..C..h..........QCt.j}.:..7hG....B.lC.9.sB_..5....-.<<< skipped >>>

GET /js/LAB_0.1.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 06 Oct 2015 01:45:12 GMT

Date: Sun, 06 Sep 2015 01:45:12 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 2787

Last-Modified: Tue, 01 Jul 2014 23:47:18 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 guigu229:8105 (Cdn Cache Server V2.0), 1.1 yfdx34:4 (Cdn Cache Server V2.0)

Connection: keep-alive
...........Yis.8.......;..b.rfw...xu..-...$....EA.c..y........$.8....*
".F..........v{...A..~:..Pz. .it.I..J.._..{....EJ_.h.....].......2...`
.Hd..O.]6../.D4^.x.~."...C.M...$CoL..7..!.,..@F..].{qc.....Q.;.>%b(
}/.::........L>."...8.'"......a.-...R.X.3...?..,I-v......^:..9o.u..
.c.........l.C..Y,...... t..s..n..=..u{.S.. . >.~6.Qj..7.l.......G.
....y....P..Lp.....{......S{..T....Sy.....{.....r..m....E7.b..Uw..^.E.
..A.(-0...v...(.T.....*...(..y......'[email protected]},e(..b...V.d...."...V..d.(
..4..`%p..o^...,#.s...`.....ZM...4.$..X.Y.5~.MP...`...K]..........'..i
f.uR...6.D..m..R")]K..:)..2.......`..d.%m.......&....%w..eQ...H...d...
...m.}...4.v......`8.H.Iqmi....!..#..%@D.wn0...)...t.aG*(.....8.V...o.
.y....n...... ...W..w[..a...~s#b.A......?..Q....~.8.,@.I[F...... w...F
p...L........|9_."...........lb...q...F..;B...[$n.u...B41....%./.V..
. IE$...Ry..^..r....T..;r.... .<..;.U2.1..e0.2K......%.......g)F...
b......y.ivK....l...'.........8.../...ugc...L..%.....7....G...P.......
- ....=..I.....hd>....~...F..]C..D....X.e.(.VkiC...gS....n.......G.
.qu:<J.....0.P'........U...;1......d!.._...u....n$2.}..|.......f,DD
...K.-..DD......O,[email protected](.`.....Y.NH....Qp........H{..C..
 `}..J..5.7B?.2..Y...1....U..?..9.......L...s...h& .....C.Hp|.#..Q....
..?W..#nYUUMH...J/[email protected].. .?...'.
........W....Lh.q.....{.g fU..QT...k......J.......~.[....$...9.W..`...
..O.........5.]K.19....@{e..Y.^.V..d....U=..5o..........s@sg..........
..7c<..>..C..h..........QCt.j}.:..7hG....B.lC.9.sB_..5....-.<<< skipped >>>

GET /js/jquery_MIN_5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 01 Oct 2015 22:38:21 GMT

Date: Tue, 01 Sep 2015 22:38:21 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 41543

Last-Modified: Mon, 13 Oct 2014 06:28:22 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 bjsb71:8105 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: keep-alive
............i{.G......D{d@,n^...X.....-[.%...i_....XH..b.....D.U..r...
u<.b..\"#c....z.[....".4n......q.6[.v...Nv.......z1....YoT........C
#._......vz....m#...'. .u.~.f<...4.<xp...p6..o>\..{P.g.....=\
......?t...''...j.r.._<..y....v....V.q.z........lXK..-.....Z|......
:.~.o..7k.l..?O....d................U.\.|.wx.-...^......m/[...qs.;....
osZ......~.....`...lw...L3...k{i.]..z...........y..u........\..k...{'.
....}Yo.............R#.ogt.i..l.-..^..U*n.. ..C.n....Y...........L....
.Y.....]....,4... ..?Q.n.N.z.9.`...^...M&..d.-.mC.u.x..v..KP|~....V.O.
.'.f...n .=..'4.OV...M.d..hui....uS.:qp.?=>.....b..[...|..g.N~..lm]
k.vX...".V..y.z..?_dC......g.\7.B.V.p....Q....P_.....U..F..l..7.....l.
m6...F..|......|......2.w.|.....?..F1...NXt..X...z..l..6h.._...ZZ....m
....x.5i$.4?..2..Pid..k...I..w..;.O.d._.J&..<=N....?...O.p....T..Y.
.....................W..N....-......Nks..Fo.g.H...........N..0...q....
:.j.6Hqmnd..L.A..L.{8.:/.~..K.-^7......r.X..V...O&.Y..A....z....!.}J..
&T...&.G.fm<..^.@.<x.9.....6...Av=Y=....\3.. p.]%.....:7.eW..]..
.m...RL.M.{...z Z.B..........%.:Y.........~6k..b|.f#..~e....J.|.?0[X.t
..XI.i......wI....Q..1..,..Rv<...;[email protected]..:_|pp./.O&4.y.}.9/.
...oc..l.lX..b%..W.%D..k.D...,.-..E.X"..../R t,'cD...3..}.............
.....f..X.S....'..\..f....w.[.{.Z.. .}.5.....U6...J..jE./|.qV"gi.<.
BvF......Qk...1;.....\}.....~FZ.Ovj.I?.#...{z..#...z._...;i...fx.z)^..
}...N.}&...c../..k.....~.<IeL..&..7..f.....8.....=?.....G[.........
..Yw...;.........n.%...B=K...9..8X..l5:.f...I.99?......}......{.XI<<< skipped >>>

GET /js/mootools_MIN_1.4.5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 26 Sep 2015 23:39:14 GMT

Date: Thu, 27 Aug 2015 23:39:14 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 35358

Last-Modified: Tue, 01 Jul 2014 23:47:19 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 xphun232:8103 (Cdn Cache Server V2.0), 1.1 yfdx34:0 (Cdn Cache Server V2.0)

Connection: keep-alive
.............{.F...W$...F.%9......-....gcg..b..I..E../.X....}....r<
..<gwb.@_.......q.1...r.....bV.W...r4K........a.......(F.F.....}..?
...c.?~....n........;8...?.dyv...?.~.1Z6...V.J...I.......}...4./F...4.
/........O..e1.....r..........2...|......5....|<7...........Z}.....
.....y.8...s>G..fX..$...r..f9....>.....|....e'.F..n6...../....e&
.Dh.2.*.[@.).-QA...,....E..I.Z.g.l.. u.(Z.U.n.3...l..y.I.D...;/....z..
.(Gy<..gi.:..P!_..Y}.M1.b.{^.f..7....$....0L..|.Qa%.t.}...!>..I.
>..r....b.~^~.O...q...O.........}.D....}.*f.j^*..yb`|3;.....3..z^.-
1K.."/...1Q{....m.^bm....!.....j ...2......E2...V......a6....i.)..AI.!
.D..-.IV1k%...u.......7..Pd.fo....I...D...)..k.[..)...q..(..... ..5.(.
..9.....t.V.[Bf.....S....L..E..@..`n.=.5.u..4o....vwQ.u.....z..f.1.|Yx
D.`.,#..<M..`.d..v:[..N\.....(..P...c-......4.....Q.......e..].q..5
p.K.Q..h..H.C....-.....0.V..I...`.........?.@d.] . ....F.l.$|ue.n..'..
3..9x.]w.......S...e......gr.n.....i...E/..!.......2,... ...0....C.[..
.....'~..r.w<CW.,]...n...l..z.....t.......j.f..7.v..mYbV..."1.6.]K.
....V'. r..V.. v^W...TkV.L...g...I.v..*...}......".Y.%.#7.q.C.4.&.wvrK
X..V).m..9....b....?...n.f.b.x...].f.........T.x(...p......! .c#...}.M
-...G3...dS..&...q....k.K....C.I......}.[..ZI..Ik..].`zx...?q.k...pz .
@.6ok...2......J....|m....dt...Y...'.....'X.....s..#X4.....C...fk."...
.P.e.......1.DI.q..%.....ya.f2DL........d...b:-.A;..%..d1.....".....7[
Y..gDI.. .=..6.G .,..v.,.Z."..$LLA..M.5T.--.....M.$...M.......u.N.....
..s........si..X.....gt.`.e...Q.....<}./.P..Z|.:h...u.v.u......<<< skipped >>>

GET /js/jquery_MIN_5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 01 Oct 2015 22:38:21 GMT

Date: Tue, 01 Sep 2015 22:38:21 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 41543

Last-Modified: Mon, 13 Oct 2014 06:28:22 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 bjsb71:8105 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: keep-alive
............i{.G......D{d@,n^...X.....-[.%...i_....XH..b.....D.U..r...
u<.b..\"#c....z.[....".4n......q.6[.v...Nv.......z1....YoT........C
#._......vz....m#...'. .u.~.f<...4.<xp...p6..o>\..{P.g.....=\
......?t...''...j.r.._<..y....v....V.q.z........lXK..-.....Z|......
:.~.o..7k.l..?O....d................U.\.|.wx.-...^......m/[...qs.;....
osZ......~.....`...lw...L3...k{i.]..z...........y..u........\..k...{'.
....}Yo.............R#.ogt.i..l.-..^..U*n.. ..C.n....Y...........L....
.Y.....]....,4... ..?Q.n.N.z.9.`...^...M&..d.-.mC.u.x..v..KP|~....V.O.
.'.f...n .=..'4.OV...M.d..hui....uS.:qp.?=>.....b..[...|..g.N~..lm]
k.vX...".V..y.z..?_dC......g.\7.B.V.p....Q....P_.....U..F..l..7.....l.
m6...F..|......|......2.w.|.....?..F1...NXt..X...z..l..6h.._...ZZ....m
....x.5i$.4?..2..Pid..k...I..w..;.O.d._.J&..<=N....?...O.p....T..Y.
.....................W..N....-......Nks..Fo.g.H...........N..0...q....
:.j.6Hqmnd..L.A..L.{8.:/.~..K.-^7......r.X..V...O&.Y..A....z....!.}J..
&T...&.G.fm<..^.@.<x.9.....6...Av=Y=....\3.. p.]%.....:7.eW..]..
.m...RL.M.{...z Z.B..........%.:Y.........~6k..b|.f#..~e....J.|.?0[X.t
..XI.i......wI....Q..1..,..Rv<...;[email protected]..:_|pp./.O&4.y.}.9/.
...oc..l.lX..b%..W.%D..k.D...,.-..E.X"..../R t,'cD...3..}.............
.....f..X.S....'..\..f....w.[.{.Z.. .}.5.....U6...J..jE./|.qV"gi.<.
BvF......Qk...1;.....\}.....~FZ.Ovj.I?.#...{z..#...z._...;i...fx.z)^..
}...N.}&...c../..k.....~.<IeL..&..7..f.....8.....=?.....G[.........
..Yw...;.........n.%...B=K...9..8X..l5:.f...I.99?......}......{.XI<<< skipped >>>

GET /js/jquery_MIN_5 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /?ex_track=auto_5580e628 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: flight.qunar.com


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:52 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Cache-Control: no-cache

Pragma: no-cache

Expires: 0

Content-Encoding: gzip

Server: QWS/1.0

Set-Cookie: QN99=8709 ; Domain=.qunar.com; Expires=Thu, 23-Jan-2081 13:20:12 GMT; Path=/

Set-Cookie: QN1=O5cLFlXr6viJanyZTO9EAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=qunar.com; path=/

P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
1f11...............w.U.8.........c...E.,..l.{.0..y...NKj..H.Jw..c.{.!.
@6.....f.H..........l.......v..M...a.....R..n...u.Nl...........Q.L....
<6..B...E..3.Q......bs...M..ccc..XF....X....!..tT:T.gs.NU1$.....IB.
H.r.!.6.X;.*.......Q.f.P..1d."M.|.\....[_7^..r.......pc..K...X..id..O.
7..W.........._.s....."j..Z....M@..*.....j..p.R..G.j...E.~..]...*...9U
 ..L8._k...z..B.b....._...v.....W....5..5.|...g..Q.....$.EM....p.[M.XM
.mPx...u.y........n.r<5.H4>....E......^..Q...N7^..x.......G_j.;.
<.c.....>........8}..h...r...oO._..q.X...<... ..?66.8~.o.*&..
.?._.}..|.3...]i.t......e.~.r......7.....[1..<7.....E.jj.C..F...zU.
 W..8...jeU..F.L.l]...<.......f...k.............XW.Y9...JN......H..
0.Iek.....!.. .....i.8-...KR...h...*.k...7:......Til(1.HfR....)...bb(.
..u.B...&.D...r.bH.'w.F...-....n]7..4..JE)!%.#..B.<<Z. $.c.R)..S
..D..pb.>I)....(>.MqUPK.D.=6A:.. ..t........y]Q..(.)l..PU..ee<
;..........x2.H..gCUY.:..HXo<5....xpZS.J....j...2.Ly4..-.u.......&.
J.2=>T;...v..U..rT%.L.........b%.....%M.gC8...- .E`BI..L.H$......w.
^.o{v'..i...lHQ.&.%.kN.kY.....:.`SL...8QC_,.-..'..(...bE.a.....0.."es.
: ie.....$)Y!$.r.....V-........Z.....O.d...../7...2......^n\...f......
.}..... p..n0Q.....q....g...N.........../.N'S.W.._...^.......\..<.U
.....Z^.r.q.5.../....M.....8.M......W/....c.....!9wb.. ..'.g.l.zc.....
..'..y<[email protected].^.>.MK....?w.?Y
......p.Q."[email protected]...`hk..Vgy.5(
"{............ -M.B...._...\h,..z./y...t.].......P..mc.....GD.JU..<<< skipped >>>

GET /site/fonts/qunar.eot?v=1 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: flight.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: application/octet-stream

Content-Length: 4664

Connection: keep-alive

Last-Modified: Tue, 28 Jul 2015 09:23:50 GMT

Accept-Ranges: bytes

Server: QWS/1.0
8.................................LP...........................]......
..............Q.u.n.a.r.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...0...
..Q.u.n.a.r................ OS/2FvS....(...VcmapC.u.........glyf.|....
......head...e.......6hhea._.........$hmtxs..........tloca!.#........&
lt;maxp.2.o....... name6.v.........post..&m.................\.........
.........................]..._.<............4.......4..............
.............c...................................................2....
..........................PfEd.@.........\............................
......................................................................
..................................................................... 
.....................'.*.1.4.8.>[email protected].........................
..&.).1.3.8.>[email protected]............................................
......................................................................
......................................................................
......................................................................
......................................................................
.............................................d.~.........T.......\.p..
...............8.V.j.|.......................?...&$'......6.... ...>
;.;...71.........#7467>.7676'4&"...#767632...................|.$...
$.$...$^.'.....i....6......K.l..B)<Ni...................".%9#.%....
........#..'......(2...c*.KK*.......=.=.....'.'....7.7'.=[..[..[..[...
[..[..[..[..........................>.7...3.#. .53.#53.3.......<<< skipped >>>

GET /large/808700fdgw1ertro6hn8jj200k00k741.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww1.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1086.v0-mow ( h0-s1068.v0-mow), ht h0-s1068.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 11 Oct 2015 01:24:54 GMT

Age: 4773801

Content-Length: 1246

Content-Type: image/png

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.13.11,c=194.242.96.218

Connection: keep-alive
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:A73B32E1E00011E4AA60E72141
7C7484" xmpMM:DocumentID="xmp.did:A73B32E2E00011E4AA60E721417C7484">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A73B32DFE00011E4AA60
E721417C7484" stRef:documentID="xmp.did:A73B32E0E00011E4AA60E721417C74
84"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>G.[....TIDATx....q.0.E%..(.t.n\}..w`...T..B..
`*.s..... t...!.3...G....H...W.k~.V..57..?C...X.0...,..\.&5.C.....e9..
).W. .w...\(.<rY...gqhr....Z......76.F.{S...h.=........*a...L.(.{..
m...*a..TC;......#Y..5.Q.....MJ..t....wwE6.. TT....gG:...O..._hVG.....
.9.'....3..K....G.....C.../M,...*.......I.S....:.._8......HA-..A.IX*|q
..~......Sq......j ...O....t...Q......IEND.B`.....
<<< skipped >>>

GET /large/808700fdgw1ertrnrvhnbj201x01sjr7.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww1.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1086.v0-mow ( h0-s1107.v0-mow>CONN), ht h0-s1107.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Tue, 03 Nov 2015 04:48:02 GMT

Age: 2774413

Content-Length: 3677

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.13.11,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:D0BF32B4E00211E4ACC2D4D4C6372C06" xmpMM:DocumentI
D="xmp.did:D0BF32B5E00211E4ACC2D4D4C6372C06"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:D0BF32B2E00211E4ACC2D4D4C6372C06" stRef:doc
umentID="xmp.did:D0BF32B3E00211E4ACC2D4D4C6372C06"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
.........................................!1..Aa.Qq"2......B#C.....R3s$
%........................!1.QAaq"...B........2#..Rb............?..,I.n
...M....*)Q.Bt....~.].0W9..-.4i~...W.XTp....2.W.=..P,<....ww...gp..
h...=.g..{AZ.x..........0..H...(......-...N........}[<.7...}fx...X!
..{u........9E...\.5...<?. n..._....J.......#(......2.!.$....t@: %.
$A.........m..%....9L..P.2.,A....(.T....#..{][.5.. V..........#q.m<<< skipped >>>

GET /large/808700fdgw1ertrnndoxdj201x01sdfn.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww1.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1086.v0-mow ( h0-s1015.v0-mow), ht h0-s1015.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sat, 31 Oct 2015 14:46:15 GMT

Age: 2997720

Content-Length: 3519

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.13.11,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:630F219BE00211E4A564BED1CF70610A" xmpMM:DocumentI
D="xmp.did:630F219CE00211E4A564BED1CF70610A"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:630F2199E00211E4A564BED1CF70610A" stRef:doc
umentID="xmp.did:630F219AE00211E4A564BED1CF70610A"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
............................................!1..AQ".aq2...B...Rbr.#3$.
......................!.1AQ..a"q.....2B.R.3.............?......;......
..[.!Z...:..0L...V...Cv..R..i...H.I:."a.....%j.%.&dU.............A.$.G
.1.....k....RH..PI.^$.d.._n..w"..Q..oQ.u m..P....V=d.Kn...74o...y64...
7k.....)....A......g|.!...Q.Vu..O.....q..h}4.gU....a.Wo.....[.....Q...
...N..n..I..2P..y.<[email protected]...]."I....2..9P....K.]}.0#......E<<<< skipped >>>

GET /qconn/wpa/button/button_old_171.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pub.idqqimg.com


HTTP/1.1 200 OK

Server: X2S_Platform

Connection: keep-alive

Cache-Control: max-age=259200

Last-Modified: Fri, 11 Jun 2010 10:44:10 GMT

Content-Type: image/gif

Content-Length: 1297

Keep-Alive: timeout=60

X-Cache-Lookup: Hit From MemCache

X-Cache-Lookup: Hit From Inner Cluster 
GIF89a.......KKK..?......Y...................K..$444..r........d..WMMM
EEE...............Fq....\8................FFF...?.....=Tp.../9Cmmm....
.....III:Oj.............................B...k...C.......###..D.......X
b.............FP........O..1..".<G.........?BB&0:...)33.....Z...tz.
..m..............5/VVDDD.......e..........CCC......p~.666.6.......AAA.
...........***,,,777..(..:.y......................`...........HLL....S
.ocGX<....Abb....y...............g.........-%......s...............
...............V..].....d..P.....M}.q..j..~..d.....z..w..Y..W..l..o..u
.....h..U..^..p..`..]........m..[..K|.Q..U..N~.o..j...................
......................................................................
......................................................................
.................!..NETSCAPE2.0.....!.......,...............h.......$h
[email protected].... SH`....5...,...Fc.H....A.d0..a.b.L...e.d......=
...../E..%.IS.....(..Y.(P.\[email protected]#....;..{...?[.Q!.a....
................5..4F.8R..ur .p............*.X......<Z.\`.......'.0
a.$d..@\....=."(..`.. .!:[email protected]...%..`...... .p..hA.%..
s.....G......x4R..o...K.<.......!.......,............3...!.......,.
.............J....d...!...,...,..........K..%#@.....d.ZUk....~....U.\.
.!.....S...B%...T.T=$.lX,].X=.H...Q....8s'M.....;....
<<< skipped >>>

GET /qconn/wpa/button/button_old_171.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pub.idqqimg.com


HTTP/1.1 200 OK

Server: X2S_Platform

Connection: keep-alive

Cache-Control: max-age=259200

Last-Modified: Fri, 11 Jun 2010 10:44:10 GMT

Content-Type: image/gif

Content-Length: 1297

Keep-Alive: timeout=60

X-Cache-Lookup: Hit From MemCache

X-Cache-Lookup: Hit From Inner Cluster 
GIF89a.......KKK..?......Y...................K..$444..r........d..WMMM
EEE...............Fq....\8................FFF...?.....=Tp.../9Cmmm....
.....III:Oj.............................B...k...C.......###..D.......X
b.............FP........O..1..".<G.........?BB&0:...)33.....Z...tz.
..m..............5/VVDDD.......e..........CCC......p~.666.6.......AAA.
...........***,,,777..(..:.y......................`...........HLL....S
.ocGX<....Abb....y...............g.........-%......s...............
...............V..].....d..P.....M}.q..j..~..d.....z..w..Y..W..l..o..u
.....h..U..^..p..`..]........m..[..K|.Q..U..N~.o..j...................
......................................................................
......................................................................
.................!..NETSCAPE2.0.....!.......,...............h.......$h
[email protected].... SH`....5...,...Fc.H....A.d0..a.b.L...e.d......=
...../E..%.IS.....(..Y.(P.\[email protected]#....;..{...?[.Q!.a....
................5..4F.8R..ur .p............*.X......<Z.\`.......'.0
a.$d..@\....=."(..`.. .!:[email protected]...%..`...... .p..hA.%..
s.....G......x4R..o...K.<.......!.......,............3...!.......,.
.............J....d...!...,...,..........K..%#@.....d.ZUk....~....U.\.
.!.....S...B%...T.T=$.lX,].X=.H...Q....8s'M.....;..<<< skipped >>>

GET /dis/dis.aspx?p=17463&cb=82255824989&ref=&sc_r=1276x846&sc_d=32 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dis.cn.criteo.com

Connection: Keep-Alive

Cookie: uid=742bcce7-dc6a-4f32-afe4-4c0d3905c0da


HTTP/1.1 200 OK

Cache-Control: no-cache,no-cache

Pragma: no-cache,no-cache

Content-Type: text/html; charset=utf-8

Expires: Mon, 26 Jul 1997 05:00:00 GMT,Mon, 26 Jul 1997 05:00:00 GMT

Server: Microsoft-IIS/7.5

P3P: CP='CUR ADM OUR NOR STA NID'

P3P: CP='CUR ADM OUR NOR STA NID'

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Length: 25

<!-- default response -->HTTP/1.1 200 OK..Cache-Control: no-cach
e,no-cache..Pragma: no-cache,no-cache..Content-Type: text/html; charse
t=utf-8..Expires: Mon, 26 Jul 1997 05:00:00 GMT,Mon, 26 Jul 1997 05:00
:00 GMT..Server: Microsoft-IIS/7.5..P3P: CP='CUR ADM OUR NOR STA NID'.
.P3P: CP='CUR ADM OUR NOR STA NID'..X-Powered-By: ASP.NET..Date: Sun, 
06 Sep 2015 07:28:15 GMT..Content-Length: 25..<!-- default response
 -->..

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Expires: F
ri, 04 Mar 2016 07:12:01 GMT..Date: Tue, 10 Mar 2015 07:12:01 GMT..Cac
he-Control: max-age=31104000..Content-Type: image/gif..ETag: "16351286
98"..Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT..Content-Length: 43.
.Server: tux/3.3..Age: 1..X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)..
Connection: keep-alive..GIF89a.............!.......,...........D..;..

GET /ips.jcp?callback=__getip__ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip

31..............OO-.,....VJ.,.T.Rz.3...5J....n.('......0..HTTP/1.1 200
 OK..Date: Sun, 06 Sep 2015 07:28:01 GMT..Content-Type: application/x-
javascript; charset=utf8..Transfer-Encoding: chunked..Connection: keep
-alive..Server: QWS/1.0..Content-Encoding: gzip..31..............OO-.,
....VJ.,.T.Rz.3...5J....n.('......0......

GET /lowerPrice.jcp?&callback=DomesticLowPriceHome.showLowPrice HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:07 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip
dbd.............\MoU.../^.H...{.,.E.Yd....RX$...Q4B..6.....`.01.....`c
...y..._.=0.=.tu.Qv...............=....?.....s...~........./..~......N
~?V...7~................'...;.........,I..I.x..;6..H...e2...........?.
KO.._.............M.....:v.....EU"..Q...fu.%'..r...........DN..O.....d
'R.s..`.MPN.IXN.r~.V....' YN.r.n.w....&m9y..........N;.][email protected]%.&
gt;iKNQ.>..g.e...i..%.,..].3=.....\m9EZ..i..7........_.O.s...c.\.D.
.v..s..W.p.....{19;....'.*....W.t.....C..h......;..niGn)&..u....)8..6.
.v..g.I..'/.@,.X1.V-9UF...N........>EJ...1.dp.i.6.jC.p........G.*).
.7w.U...N...A..z.R..g......N.{.a.j-x...d ......k.........*N.%;..d..~..
....n.............S..sr.`.n..(X{..........I..2..r?f..........@Zz..;...
..>..C....$.4.....l.......IH[....../f..l..]...%MHNJ...|'&-d...!.g..
...........].C..].YNQ..e...v...L.!`.................M.{c.^PX ...V.j?_.
.6e[.*`.fm...9..n.r0.#.T&.".~. .....D....`...r....R....._.k...(-R..h..
.)....qB'n.-xTM..>C<...jJ*.C4..s1Z.S.Q.x .=..T*.v3..}.:..#.(...#
[email protected]}......."..;..;..y...>T..0.2Q...e4...9eJ.-'...^.f.z...
./.i..[....?hLF.. ...S..L`....y....,....`...C....I%..0f...z.....k3O..M
.`.,..H.82(g4 ......!r..:.....$l's.1....../...h....M$..(....\.8.....(X
.h~1... ....r..L.Dr....=...L%....I.e......N.....u..F.%..C.Bq.|....4MRV
..}.T.?$nC.....t....P..I..U.`9d.[S..a.\.;.N3.....J.C...$W3{v.^....B&t.
...Tt6.7.9%{..v...@.%9%.".,G.J...!..L.%.E.<....>....R.......9..i
..l.8.. ..x.....`_/...e...n(:sB...'x...a......~....|...oA=.....L......
..A..=....B. y.Dq..1D.3.w.8......l.1...4...\V..Z..z(G.......rC....<<< skipped >>>

GET /lpisearchd?callback=jQuery17209276773639123068_1441524483510&from=&to=Hot&month=All&cachefrom=&cacheto=&type=rt&source=fhome&_=1441524489149 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:08 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip

1a8...............J.A...e........St......$.z!.E..QRPje..*..X..V/.l...%
f.."......w.s.7.....A*QdE.dA.D@rp.."..(.....$0u..,3......V......{.Z..n
....fi .....`tZ.....(.j..j...Y. ,CD .FO...D*D2 F".A........j..Z.4.."N.
&....:Ko=l.b...c Sl.`.....Y.{...3.1.....g`w........F....^Q...F?.ni...N
cH./..L..~.....p..3`...p:Gm..n..n.......r.'...O1....N.......a..?q.j...
5.<..23X..OO.'qS...F..ln.G..;&..s...l#_C&.......-..[E./O...........
.7............0......

GET /airCoPromote.jsp?airCoList=CA,SC,CZ&num=5&callback=AirLineDeals._parseData HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip
b68..............[o\.......V.e.}[email protected]
."....._&3$....!>{.3>c3.y..=gF.........{..z.K...hO........G.....
....._........\../..4qx.....[...?..~...&...?.W...W{K>...........8@.
..x...<..|.t.........C...9s.....w...p....Kk.......>...S...#v-N..
.D.!.}....B.\{......v............O/.b .....`................p..G&.....
?.n.N=U-j...o...t2..OJ.X...`.H...N{..K.p#../.......L8...............8.
.K...0$.a`8=.x.C"...Bf.qI5..d..J%M..0.F...WF1.9Cv...........R...x...{r
.-.E.!....6.&).)a..)...<#..(....dh2..7>.w.Z.CN..\~baz.\.0".CZch8
 0....'.A.J...{.R.%C...;...|..!.m........6....Z.....C......p....Rh%.. 
a% ..........g.g.uv....TMw.|...........8C[...X........e...5.I".U..P...
4p/...8...9..f~.y....h...7.1..u............o.S.\$&`.s..V"$.M$....;....
..=...,L..!k..".qI.....K...$D..0..1...,.e.........W....\...........Z..
...\N..ZX...NLfj.&.q'..^...i.!.q...{.0...3..0.Z.<....5w ...` ..(0.5
X....l...k.*\..35?_.w^.....p..........v..[u.i..zoh?..t.....m.S......S.
...1.qm0.....%A.7\.-..."............f....I.FR...:;...H.&..o.%...#.. .C
..@T<....h.t .$..m.~]...'.mO...O..K...|{...I...{Drv.H........Z.s..k
....H4.....SP.3.1Ha;.A......L.......{4...A.u...I..$-.$...P.#%u.F....I.
...d.~.M(N... T......;...>1>.N.=.1........Ql>..5|.C....\..(.j
..d2..*.O.h...s..s..-...k.......9.c..._.*k.?7.9i..F...O.h.2n.'g..Z. ..
.{.xtZ.a.f^..5..=...i<...nsO.rS|T.M.;#.]...g.E.)G.1Ji..6.d.C*...k
..otq.....w...3m.{..W...Y\..E...U7..1`.$DyJ..c#......./tq..Xp.r..g....
...Jn....7.w....7........yi.!J..).oS..-.......q.m..v.k`6.......J..<<< skipped >>>

GET /ips.jcp?callback=QNR.ips.callback&_=1441524493383 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:13 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip

38.................,(.KN..IJL...VJ.,.T.Rz.3...5J....#...$.....0..HTTP/
1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:13 GMT..Content-Type: applica
tion/x-javascript; charset=utf8..Transfer-Encoding: chunked..Connectio
n: keep-alive..Server: QWS/1.0..Content-Encoding: gzip..38............
.....,(.KN..IJL...VJ.,.T.Rz.3...5J....#...$.....0......

GET /lpisearchd?callback=jQuery17207264470782716407_1441524492995&from=&to=Hot&month=All&cachefrom=&cacheto=&type=rt&source=fhome&_=1441524493868 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:13 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip
1a8...............J.A...e..vaf.?.=E...l ....."^d(.%..V.Z.B..EJn.2..o.X
b.;........w.s.....B2.2..A.r..H.......X...(.Z........9.MhQ3....^.....I
?.8...*.o.A..ON....&.eRo.S...tZ..I<.<.'O.."...J......-...N...:..
....E..f....:On]l.G..2.-....E.....l....=......o...s .... .[5...8...Q.|
.......F<....3...-.k....>z.4...l.X6...8..#..r].e.O..7.b..c...s.d
S{/....B.j."...>.D..,...'......EC% ....`...r....3...........FK..V.F
.Sw8....>.. ..............0..HTTP/1.1 200 OK..Date: Sun, 06 Sep 201
5 07:28:13 GMT..Content-Type: application/x-javascript; charset=utf8..
Transfer-Encoding: chunked..Connection: keep-alive..Server: QWS/1.0..C
ontent-Encoding: gzip..1a8...............J.A...e..vaf.?.=E...l ....."^
d(.%..V.Z.B..EJn.2..o.Xb.;........w.s.....B2.2..A.r..H.......X...(.Z..
......9.MhQ3....^.....I?.8...*.o.A..ON....&.eRo.S...tZ..I<.<.'O.
."...J......-...N...:......E..f....:On]l.G..2.-....E.....l....=......o
...s .... .[5...8...Q.|.......F<....3...-.k....>z.4...l.X6...8..
#..r].e.O..7.b..c...s.dS{/....B.j."...>.D..,...'......EC% ....`...r
....3...........FK..V.F.Sw8....>.. ..............0......


GET /crossdomain.xml HTTP/1.1

Accept: */*

Accept-Language: en-US

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: text/xml; charset=utf8

Content-Length: 476

Connection: keep-alive

Last-Modified: Wed, 11 Jun 2014 13:10:54 GMT

Accept-Ranges: bytes

Server: QWS/1.0
<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy.  SYSTEM 
"hXXp://VVV.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<c
ross-domain-policy>.  <allow-access-from domain="*.qunar.com" se
cure="false" />.  <allow-access-from domain="*.shandongair.com.c
n" secure="false" />.  <allow-access-from domain="*.baidu.com" s
ecure="false" />.  <allow-access-from domain="*.sogou.com" secur
e="false" />.  <allow-access-from domain="*.soso.com" secure="fa
lse" />.</cross-domain-policy>.HTTP/1.1 200 OK..Date: Sun, 06
 Sep 2015 07:28:17 GMT..Content-Type: text/xml; charset=utf8..Content-
Length: 476..Connection: keep-alive..Last-Modified: Wed, 11 Jun 2014 1
3:10:54 GMT..Accept-Ranges: bytes..Server: QWS/1.0..<?xml version="
1.0"?>.<!DOCTYPE cross-domain-policy.  SYSTEM "hXXp://VVV.macrom
edia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy
>.  <allow-access-from domain="*.qunar.com" secure="false" />
.  <allow-access-from domain="*.shandongair.com.cn" secure="false" 
/>.  <allow-access-from domain="*.baidu.com" secure="false" />
;.  <allow-access-from domain="*.sogou.com" secure="false" />.  
<allow-access-from domain="*.soso.com" secure="false" />.</cr
oss-domain-policy>...

GET /css/base_MIN_13.css HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 19 Sep 2015 21:23:19 GMT

Date: Thu, 20 Aug 2015 21:23:19 GMT

Server: ngx_openresty

Content-Type: text/css

Content-Length: 16862

Last-Modified: Tue, 30 Jun 2015 05:21:20 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 gg228:8080 (Cdn Cache Server V2.0), 1.1 yfdx33:0 (Cdn Cache Server V2.0)

Connection: keep-alive
...........}........Qc`..E..76.8...........S.H..u..IvK.F..y...?......k
f..Hj4.....*feFF.="3....3...;.....,......v...d..~....Pw...3..V.yS/g...
.,;..........3;t..dYw...aQW..a....]....f/.j......m5.5..q.....7...?.~z.
.^...5...s......?6..^..........t...........7w..r.._....I5....<.g...
.n.].>.......P...~..,p.j}.!.j_.^..............W.f.<~..f...7.C.?.
E......r_...k.zx.lv.z..x<.6...zwh........U3.-....n.`n7..P.^........
...C...S...}...7...|......$.....l.5..:` ...yY...e3..G...a1.o?.......[.
..S..`y,./..y..[.vq8l.o.>.z...f..w...[.`...l.......?...o..?...=t...
o.......:...w..i.....|./7...q.x.0^..r./........vY=...u............Y.,.
=.;M.......0.e...c..J?..EQ...z=@%.5=.."..?....0....pZ...nv.......C.T:.
..../p.:b...u...}.WB.2...Z.6..;.cH...f.....w.}.U......}UN.t.....,.....
...J.A....8:..)..vw...........'............90O.b[=...k....oz..t.....M.
..N.g....~....=5.f.,...x..[..XX ...vr{[email protected].].9..A../.....WD..
..:4..a.^....z.........2..._..v.;.,C.m.......u.t.t....n...h5.9.x..v..K
......o.z.p....2....G..{......A*.PH.e0....i....4$m"..g)...,........"g\
M. ..".{......)[email protected]~.$.....'.z.......Y....-./]9....0
...tQ..>...........A............TL..zW....:..%...... .] ...........
."b...=!....?...7.....T.K^^"A...."..Hb.......v.....Z..b.t....Z......{.
p;0.........>....r.......g.tW?...b..v...$p6[.MI...2./i} .5..f......
[email protected].[..`..y... .._."................Tt'uEOuv......o
f....W..h...0...~@...'..>!..7..9.m.'x)..>.W.W4..$.TY.......BIDD}
"TCD/`.V.1..gQ..... ..,....z~......7V..9:.i...'...z...........n..I<<< skipped >>>

GET /cm.gif?url=http://cms.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: log.mmstat.com


HTTP/1.1 302 Found

Server: Tengine

Date: Sun, 06 Sep 2015 07:28:20 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=FNlyDjvVEGICAcLyYNovtkCK; expires=Wed, 03-Sep-25 07:28:20 GMT; path=/; domain=.mmstat.com

Location: hXXp://cms.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR&cna=FNlyDjvVEGICAcLyYNovtkCK

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache

GIF89a.............!.......,...........L..;..

GET /css/??room/index.css?v=2015082501,room/mediaqueries.css?v=2015061701,room/firstpayact.css?v=2015072001,room/weekstaract2.css,room/guard.css?v=2015082601,room/dayndaygift.css?v=2015072201,room/xingyuan.css?v=2015072101,room/messagenotice.css?v=2015081001,room/funnygift.css?v=2015081701 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:18 GMT

Server: nginx

Content-Type: text/css

Content-Length: 62315

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

X-Via: 1.1 hzh91:8110 (Cdn Cache Server V2.0), 1.1 sm23:9 (Cdn Cache Server V2.0)

Connection: keep-alive
body{margin:0;padding:0;text-decoration:none;font:12px/1.5 "\5FAE\8F6F
\96C5\9ED1";color:#666;background:url(hXXp://static.yaoguo.com/images/
room/bodybg_33f93c5.jpg) no-repeat center 30px #252027}*{margin:0;padd
ing:0}a{outline:0;text-decoration:none;cursor:pointer}img{border:0;-ms
-interpolation-mode:bicubic}ul,li,dl,dt,dd,form{margin:0;padding:0;lis
t-style:none}.clearfix{clear:both;display:table;content:""}.fl{float:l
eft}.fr{float:right}.blank10{height:10px}.blank15{height:15px}.blank20
{height:20px}.blank30{height:30px}.blank50{height:50px}.f12{font-size:
12px}.headbar{position:relative}body .sitebar{height:29px}.sitebar .se
p,.gh-create{display:none}.wrap{min-width:1280px;max-width:1440px;marg
in:8px auto 0}.sitebar .top{width:auto}.sitebar .logo{padding-left:140
px}.layout-left{width:480px;float:left}.column-right{margin-left:490px
}.layout-center{width:65%;background:#fff;position:relative;float:left
}.layout-right{width:33%;margin-left:10px;background:#fff;overflow:hid
den;float:left}.headbar{background:url(hXXp://static1.yaoguo.com/image
s/room/headerbg_60ee1fa.png) repeat-x;min-width:1150px}.header{width:1
250px;margin:0 auto;position:relative;color:#fff}.headpic{float:left;b
order:2px solid #fff;margin-right:25px}.header .anchor-info{float:left
}.header .anchor0,.header .anchor1,.header .anchor2,.header .anchor3,.
header .anchor4,.header .anchor5{width:23px}.header .anchor-info .intr
o span{background:#323337;padding-left:5px}.sitebar .sep2,.sitebar .se
p3{display:none}.headpic img{display:block}.anchor_area{margin-top<<< skipped >>>

GET /images/room/headerbg_60ee1fa.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: nginx

Content-Type: image/png

Content-Length: 1563

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-61b"

Accept-Ranges: bytes

X-Via: 1.1 fuzhou59:8105 (Cdn Cache Server V2.0), 1.1 sm26:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......8.......#.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc
/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" x
mlns:Iptc4xmpCore="hXXp://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:
OriginalDocumentID="xmp.did:945EC7AF931CE111A9318AE6F6CE1C61" xmpMM:Do
cumentID="xmp.did:BCB40538FAAD11E49791A00E929318D6" xmpMM:InstanceID="
xmp.iid:BCB40537FAAD11E49791A00E929318D6" xmp:CreatorTool="Adobe Photo
shop CC (Windows)" photoshop:AuthorsPosition="Creator"> <xmpMM:D
erivedFrom stRef:instanceID="xmp.iid:8e058ff1-b4cb-c546-8670-9b837c988
8cb" stRef:documentID="xmp.did:945EC7AF931CE111A9318AE6F6CE1C61"/> 
<dc:creator> <rdf:Seq> <rdf:li>Justin Cates</rdf:
li> </rdf:Seq> </dc:creator> <dc:title> <rdf:A
lt> <rdf:li xml:lang="x-default">1080 Grid System - 18 Column
 Grid Photoshop Template</rdf:li> </rdf:Alt> </dc:title
> <Iptc4xmpCore:CreatorContactInfo Iptc4xmpCore:CiEmailWork="jus
[email protected]" Iptc4xmpCore:CiUrlWork="VVV.1080.gs"/> </rdf:De<<< skipped >>>

GET /images/room/guard/guardcar_img1_96ea2b3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: nginx

Content-Type: image/png

Content-Length: 15398

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-3c26"

Accept-Ranges: bytes

X-Via: 1.1 fzh61:88 (Cdn Cache Server V2.0), 1.1 sm26:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...t.........>]......tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:12BEFD0C2A9C11E58EDAE
78B04DBCF6F" xmpMM:DocumentID="xmp.did:12BEFD0D2A9C11E58EDAE78B04DBCF6
F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:121A2F2B2A9C11E
58EDAE78B04DBCF6F" stRef:documentID="xmp.did:121A2F2C2A9C11E58EDAE78B0
4DBCF6F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>'.....8.IDATx.....U..>..v{.....C.... 
.*60...1.....q.....'....w.1..,..Mqc7QQQ...Cgzowfn......{G/# . ....{..S
..{..y..;..4M.ty..n...Y..@]3j...].#o...O.....-...........K.....{..T.:.
t.b....|.d..........Jw...MCsv.}....r...p.V...........5....q.{..e....h.
....w....1|....h.........4.......<..XZ..........Y(T9y..[....u......
......}qE..O]{..E....A{u.....*.om.>../...~#l...x.p.IX............%.
.#[email protected][...$..V-..t.......).F.. W...(....>H&e\S.....e@)
.%........A....b....H4X.K.y....>>...u.~...p/[email protected]...}.e.
.C...A_...N..n..>..Z..cl[jv..... [email protected].<<< skipped >>>

GET /js/s/iwt-min HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:02 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /fxstatic/images/footer1_042bc00.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: image/png

Content-Length: 16322

Keep-Alive: timeout=20

Last-Modified: Thu, 03 Sep 2015 10:04:17 GMT

Expires: Sun, 04 Oct 2015 06:22:47 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR...p..........}......tEXtSoftware.Adobe ImageReadyq.e&
lt;...!iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC (Windows)" xmpMM:InstanceID="xmp.iid:323A006A292A11E5B3A085D34
BC264D9" xmpMM:DocumentID="xmp.did:323A006B292A11E5B3A085D34BC264D9"&g
t; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:323A0068292A11E5B3A
085D34BC264D9" stRef:documentID="xmp.did:323A0069292A11E5B3A085D34BC26
4D9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
 <?xpacket end="r"?>.%K...<7IDATx.....%U.7..2...DD..` .0. &.A
P...EX. "....5!.....*FP...3...ET..50*(*Y%......_.-nwO7..~_....]U.N....
=o.;..cN............L7W....&....8{.......).......:..s..X0..s....,77.s.
8W..p..Q.8...w...q...c.r.r...L<.h....c.elsQ.O..c.....m..Ka.....z...
..c...q..uv.;E.]&&.=.1..M.=...M..........z....X.@..^...........$..h.H.
.Y........%.........I..c...l7. .M,..^...4.....[.p..Z .&9_.._i..L..'4.[
4...S..s....r..[.s.....1.rl.;.._8.Y.......1.7k(....].;..o-...-..... ..
....I9tL..o.ca.T/...M...G..L.3..0]..r..<\8.e..Z.X8....s............
...'..%...(.t.....]C.......u..Y......g.....f....P/...kd.M'......\0<<< skipped >>>

GET /5qOS5qOS57OWX-WbvuaghzUwXzE0MzY3NzEyMTk1OTM.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 3gact.bs2dl.yy.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:27 GMT

Content-Type: image/png

Content-Length: 7370

Connection: keep-alive

Accept-Ranges: bytes

Expires: Mon, 07 Sep 2015 07:28:27

Last-Modified: Mon, 13 Jul 2015 15:07:00 GMT

Etag: 7fe59b88dd718a938e05258601a402c0bace174a

Cache-Control: public,max-age=86400
.PNG........IHDR...2...2......?......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /546r55GwX-WbvuaghzUwXzE0MzY1MTcwMDMwMjE.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 3gact.bs2dl.yy.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:28 GMT

Content-Type: image/png

Content-Length: 7852

Connection: keep-alive

Accept-Ranges: bytes

Expires: Mon, 07 Sep 2015 07:28:28

Last-Modified: Fri, 10 Jul 2015 16:30:03 GMT

Etag: 66e28f82e5bed0cbc9337811351aa483c1d1016e

Cache-Control: public,max-age=86400
.PNG........IHDR...2...2......?......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /staticPub/js/DD_belatedPNG_79c3052.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:51:25 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 08:14:30 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
a20.............Ymo.F.. ..........u<.N.......I....\....$%......]R$.
..].....pw.....b.........n...m..e=..*Y~T.......O.d..,..[.(.w.E!...$~.'
.c.....TT*K-{.db...rR...Z..gG..*R...........Usp.*R...L..<Q...,..E..
.$f..=...)..#)..........v.2..5.tX......wJY.RU.Z.*i.D..g....).v...Z....
.^G*.......e......-.n}..-.C.....B5w.X6...?.p...7...k...............w7.
V_...2.s..yV*2../.,....-..p......Y.#oU....w.N.TN.....5/.....i..{>..
.,..1......*.B..zr#..2.S.......`..ZS..f^.....).gc..........T....Ho.3..
YQ.i5%..........G...."........{.[....*......,[email protected]..(.A......Y...r).
@.~!".-|.uYd.4`.....5p.m......y.?...o..I.N}Q.......#5b.w..(p...f..Yv."
..W6..Z.@..}E[.:._~xH.uY..e..Y4w....6B=ao.s.P...p...........[...q.....
......<.#.:..5.q...r.(.5b...Z..x...._V....B.y..M.....l>../......
....h......M*...a3...\...9@...... ....#.... :..Df...$..`...@...}-..)..
..........8<0.......L.U4.F#...........c^...,.?.Nw...0.........;.*.p
w.cQ......3..fx.U..4.....*{...`.U^'..P..,..&.\j..M8GU."...)..4.(*...\.
.../..$q....TA0..9...L..l9.....*.(d...m.lU.X..|....e.2Pql9D......E.:.e
.z...q...=..{K..u.@....!E..uK..?..sKA..1...B.....B.l{z..DQ..sm.....K..
7..|a.(&(}....P.. %.#a..uP3[....*.!_.W{..}M..x..6&.kx.gcn^?.......)...
....H{.Z.....MC....=...T.S:...n.....4.......Rg....>A.. 3....t....&l
t;.S.w.6.jM......H...uZ&c.Av D.<?K...T..B..r..!....x=...7..o...W.B/
.......WH.~..N./.j9..g :Y..Y......G.@.))...i.WcF'..^.y...eXuJ.~.. U..X
....hE..|.G..].....0...d:.i....I...........d..F.!!....C.!..r. x $E.NW.
[email protected].|.[.......Dm...;..m.....s.,@...K.zg..N]...X.zX).{D...G.. ./N<<< skipped >>>

GET /history/newhistory.html HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: history.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:02 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Tue, 18 Mar 2014 14:18:23 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Content-Encoding: gzip

Server: QWS/1.0
ce2.............[ms.6..,..F....-J.....t. .k.y.J.......m..H....l..... .
.;N.N..L...bw.`.......O.{..X...x....x..l.......h:2......^.`L.?JC....t.
..;Fg.....~.....I/N.......u.q...9.w...............u;...?z..8bA...W..c.
D....3....l.'i..w.........$\3.A....?...............#..a..Io..:..?..0LY
.\y.....`.^,...h..1..#.7\..Xk..O..&..B,......%........m..J77...K......
.........^8........c.............1>..........r...3h >...#.07.<
;8..`n...u1<....1p.-.At.<..6.%ujQ.a..Pr....a. ...o.ms...Z..2/v{.
X.\......,HL....c.......]....1.Y D....[.maG...9.G..f.=..i..,^...mt.3..
...??............iP....(.....T.g..\.M. .....g..7/..\....5=.F.*..D.M..?
. ..5.x..l......C<.Y..>..C.c...g:F...y....~.Z....'.....O.!.....w
...e.\...QB1.........../-V..2u...h..i/]/Cf.C...<Np.%F...!....{. .`.
..v.cf....."...D:)J-.....'...Z$.`.......J.[.rZ..:.AI.%.E.R..Y....p.y3.
!..F.......eS}.v:.P6...e s......g.P.t.^.,.B.k..A.......!......Y.M..g.q
YY0=. ..F^..3.e.;}...9m....o;.(.......A.........).N.W........p...?....
..... .N....T........`.....P[.,dW\...a.C.t.....B..._Dm..x.).1b...Y...N
b.#E...G.....I.rX.G.g......#.h..L3.......X\.%*$'Q.......H..!.,....|.!.
... ..... ......w.U..5D ...$.`...O<..d....=....Y....e.A....G..#...f
...&][email protected])..K9.:.....W:....T.Z .W5o..r-,5.N*....Sfd. ..
.5..(.)I.951Y..E.E......[xC...7..7..t..^.?(..B......D...r..D.t..,.%I..
i...s...;.<..y..I.....k....X...}f(C;b....X.....l.:......Gx9wW.?...u
....F..X.^%.....).^g_P........P..X!.f......VX_..ay. "[email protected].
..K..ZgKK.x.A!....?Y.d.....r8n.......i..._.P.......$.Gm..".H..x_.o<<< skipped >>>

GET /fxstatic/images/yellow_warn_0473de0.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:01 GMT

Content-Type: image/png

Content-Length: 1126

Keep-Alive: timeout=20

Last-Modified: Thu, 03 Sep 2015 10:04:19 GMT

Expires: Sun, 04 Oct 2015 06:22:46 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:C22784AFA5E211E480CAFCDF35
114CA2" xmpMM:DocumentID="xmp.did:C22784B0A5E211E480CAFCDF35114CA2">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C22784ADA5E211E480CA
FCDF35114CA2" stRef:documentID="xmp.did:C22784AEA5E211E480CAFCDF35114C
A2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>...c....IDATx.b..L...p.q.....1..q ^..S....i6.
.u@,...,.8.....>H..M......=...b-d.x.6s2....x..3..H.e3g..0..t.8.f@,.
y [email protected].)...85...8.@.|...dz.5,...i.Y....4`...... ..`D...@|..%..
.J...a.,x...}@l...-3=.Jz.q...C..5 ........@...~/,Jr.......IEND.B`...

GET /flight/home/airline_pro/airline_prom2_v6.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 95610

Accept-Ranges: bytes

Last-Modified: Mon, 10 Aug 2015 08:45:06 GMT

Server: QWS/1.0

Expires: Mon, 05 Oct 2015 20:00:27 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive
.PNG........IHDR..............N......pHYs.......... .... .IDATx.\.[.m[
v..Z.c........{o].l...]..c... ....,./!>.."K.$".....>........0...
GA..#.#6A..?cW....r.}.s..{.9......\..-..s..{.9.....Zo}\./?..h2...$.P..
@.d...`.D..@.$0....`._..$..C2J.@..\...dNS.F.N...fF..HP&........HA.$..M
0*.4R.I .-.d.....l......G.....g.....h.%.F#   .H9.4"I....n.(...@`.[.d$f
z..I%.4.b.0PR...4R ..I.hJf..s.&%..^_.I.....`[email protected]($...
H ..D:[email protected](.W..Y...~.....d..$...Z.I..EV@i_.H.R..-..
$!..g&.-.....L...d...D2....SB..u..@t%...H3..U.A.O #@[email protected]
..........d#%...=&....... .....@!.. .0%E......'..4g.F......&.)N.......
....W>.mt...6>.n....m.$E.*.....[... ..R.H1.4.y..Ka.P.j....b.u5:Z
wI.......lRHv.J.L....$jc...a...VaS... ...$d...9..A&.$._7...._...^$.B..
.R...^.SC.Y-.%.A.p...... 8-....\*..b....2S..I....NU....J3.,%.F..'.2. .
b.........H..UUD......BTN......B..Im!....IcW.I.....I....0.h.....*U_.v.
(@.>...$.....o.z9......at.j.M8Z[ondv..g.3..].&.U...[_..W...j.fm.=..
... ..PR.......{^.)..JV....'...$..wV.S.W>#...a ......0")..fY!...sD9
M.....X=.U..7..X..3.....1.eU...3EQ......t.........../..DX. ..2V.C.wRV.
p.7........XR.8.`..52.4yBL.00.....TE.....f.=2..L...........6.....J....
...8.)...p....4!YeKf&..&....$Q{.pR.$)...XA..<. ........`$..6.E.....
......|C.{G..a.'....U .Z}.4.R........;..T"L.y...k.G...I ..U..A........
...K.<.H.......y].c.....`=.V.....K...IpTQ.R.D.D(YhN..R{...){(H.....
 .$.U6.,../1vza...f.IU.R.4#.2..D...^_..........~K....../.....5*....;..
:F.hN..`0...L........Z.m..DV.d^.r..T.VL.8....dc.LIs.F.1......../G.<<< skipped >>>

GET /site/images/flight/home/hurryup.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 1265

Accept-Ranges: bytes

Last-Modified: Thu, 29 May 2014 08:05:04 GMT

Server: QWS/1.0

Expires: Tue, 06 Oct 2015 18:29:35 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive
GIF89a#........T...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin
="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe
:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:0
9:15        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-
rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http:/
/ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" 
xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:Creat
orTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:64242D
D8E70311E3A809E2D4CBC3A918" xmpMM:DocumentID="xmp.did:64242DD9E70311E3
A809E2D4CBC3A918"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:
64242DD6E70311E3A809E2D4CBC3A918" stRef:documentID="xmp.did:64242DD7E7
0311E3A809E2D4CBC3A918"/> </rdf:Description> </rdf:RDF>
 </x:xmpmeta> <?xpacket end="r"?>.........................
......................................................................
...................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\
[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ....
.............................!.......,....#.....BL`.k..X........,E..,W
WV.:...q.j....9......X....2.B...V...?.p.aj....!.......,....#.....C....
..XDs.....B.<"...cX]........-5..Hr~.Cy.D.k....B...!.0...i.R*.C..;font>....<<< skipped >>>

GET /flight/flight_inter/list/bg_wrap_ie6.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 3240

Accept-Ranges: bytes

Last-Modified: Mon, 20 Apr 2015 06:40:24 GMT

Server: QWS/1.0

Expires: Sat, 10 Oct 2015 08:41:05 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive

.PNG........IHDR.............."......tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTEQ....ZF.....5..M...........Y..m..)...........V.............
.... .................J..........................w....'y.....j.....`..
....|..........n..............8....>F.....3.....!.....L..$.....v...
..~..r......................................c.........................
....3........s...........y..............,...........f..=........d..A..
...$......r..........'...............................................E
..........................m.....C........0.................$........_.
.....u......................}......t.......v........'........... .....
......O........9........\..]..>.......{s..............y........V...
.........w..........w...../...........................................
......................x....K...g.....%.....q..)....B..E..r...j.......c
..l...h................tRNS...........................................
......................................................................
......................................................................
......................................................................
...S..%...2IDATx....X.G..O...QU .x.Q,`D..b.....QcHT4.r"r..rh4...1..[,.
....{........63...;..v..n...o.p..3.....7o.,.....e..D.4.......E.4.....$
a.....`a.'Y..i.J..,.....4.#.b.X*.....e......j.f5..e..[..YM.d....J..e..
[..YM.d.e%..Xj.s..5.P.T,...X..'..\....y}..$*$.........&...RS.{...0V..|
?.V... 5......X.>[email protected].}.97\[.......R.....
l.k..w...".._..L.......6e`.v29.s.(.V.P.`........E.\.%..m.r....jO..

<<< skipped >>>

GET /flight/flight_inter/list/bg_flyhd.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 5383

Accept-Ranges: bytes

Last-Modified: Mon, 20 Apr 2015 06:40:24 GMT

Server: QWS/1.0

Expires: Tue, 06 Oct 2015 09:00:35 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive
.PNG........IHDR.......y.......[.....tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTEH..^.........*8............T...k'............Jlp&..({......
..#1.K).~.t..f;).R(...............P..........(.e*.vk.Yv...@...........
.......]f....jR..............$...7....].j...........iz.....@..}zC)....
[email protected]]<.....L(.......H...j.@[email protected][email protected].
.]4#[email protected]...`[email protected] .3...P..d.(....v....
...v.............x.......FQ.....cuk\5.....U...3A.d....*.......h`..p...
..........................B{........Ql.......`i..........w.9.......t..
........p..hq...M..qvmq...b..i..]([email protected]@[[email protected]}.
[email protected]......._}.].............U......
..a............Ok.......g......^.....]...p........0..[jf(..l..=WZ.h...
.O...o.?^b.j.......1.A.....`..]...f.....{..0.....V.)f..\.i...P..m.Y.ak
..r`..p.....b.mO....tRNS..............................................
......................................................................
......................................................................
......................................................................
S..%....IDATx....\.g....=...D1.HD ........iD..Y......Eh-.....(........
......tu.Z]V...-.........w..w..^..z...33.LBH&!....?.w.=..|..3.z..}*..D
BZ".Cq....#.15....P.M.........cB.B..bV..%.....B!d.b.P..C.B...."...'.Qh
..T.E.U.*.".q.....n....4DX...6,T.h..g6....>...!.J0...Bm.q{.YQ.4;.i.
 ...hp....Y...$.."...1M.kZJ"M..f.h..E.HK.G..*d...Mh....O.."t..Q!Lt.~`A
.a....j.Tp.<.dO..5...hv.......b^"#,p..hF.W.TT. ....@/...P..*aN.<<< skipped >>>

GET /site/images/new.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 984

Accept-Ranges: bytes

Last-Modified: Thu, 02 Apr 2015 07:00:06 GMT

Server: QWS/1.0

Expires: Tue, 06 Oct 2015 22:27:47 GMT

Date: Sun, 06 Sep 2015 07:28:06 GMT

Connection: keep-alive
.PNG........IHDR..............O."....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:818C951AD11211E4938AE3E6
82D05A08" xmpMM:DocumentID="xmp.did:818C951BD11211E4938AE3E682D05A08"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C1D51875D10411E493
8AE3E682D05A08" stRef:documentID="xmp.did:C1D51876D10411E4938AE3E682D0
5A08"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.>tg....PLTE.TO....TP.SOr#_....4IDATx.&l
t;....0.....s....0....SpT..Kv...^..a.........0.....6.c>....IEND.B`.
HTTP/1.1 200 OK..Content-Type: image/png..Content-Length: 984..Accept-
Ranges: bytes..Last-Modified: Thu, 02 Apr 2015 07:00:06 GMT..Server: Q
WS/1.0..Expires: Tue, 06 Oct 2015 22:27:47 GMT..Date: Sun, 06 Sep 2015
 07:28:06 GMT..Connection: keep-alive...PNG........IHDR..............O
."....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp...
..<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xm
pmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61<<< skipped >>>

GET /site/images/flight/flight_search/ico_a.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 552

Accept-Ranges: bytes

Last-Modified: Wed, 26 Dec 2012 08:35:15 GMT

Server: QWS/1.0

Expires: Tue, 06 Oct 2015 14:13:41 GMT

Date: Sun, 06 Sep 2015 07:28:07 GMT

Connection: keep-alive
.PNG........IHDR................E....tEXtSoftware.Adobe ImageReadyq.e&
lt;...-PLTE ...h....UUUWWW<|..i.G...Z..a.0s.%j.Q..W......y.M....tRN
S......................vIDATx...... .E#.n.6... -*%.#...u.?.c..{.*.=hj.
..$.Jv.s...4l.5[`.2T...JGE&9H8....r4@.\..%.J.>...2g..N...x...T:*2.A
...l....F..8|M%.v?r3gt9.C.("...*.=.O..i"^./..4:..ZGZ...6.<.._...$..
..{....N.XDF...h......L.yd#)'.N...}.p'=A$..pKSNC7")'..wo.{ ......v.G9.
.H....:.Al.O..f.7..Y......`.. [email protected]....;r.w..F..|.m.5m.........
....*...z.0.6.8...}oa.u.......D3.m.`lE2-......C.o........S........IEND
.B`.HTTP/1.1 200 OK..Content-Type: image/png..Content-Length: 552..Acc
ept-Ranges: bytes..Last-Modified: Wed, 26 Dec 2012 08:35:15 GMT..Serve
r: QWS/1.0..Expires: Tue, 06 Oct 2015 14:13:41 GMT..Date: Sun, 06 Sep 
2015 07:28:07 GMT..Connection: keep-alive...PNG........IHDR...........
.....E....tEXtSoftware.Adobe ImageReadyq.e<...-PLTE ...h....UUUWWW&
lt;|..i.G...Z..a.0s.%j.Q..W......y.M....tRNS......................vIDA
Tx...... .E#.n.6... -*%.#...u.?.c..{.*.=hj...$.Jv.s...4l.5[`.2T...JGE&
9H8....r4@.\..%.J.>...2g..N...x...T:*2.A...l....F..8|M%.v?r3gt9.C.(
"...*.=.O..i"^./..4:..ZGZ...6.<.._...$....{....N.XDF...h......L.yd#
)'.N...}.p'=A$..pKSNC7")'..wo.{ ......v.G9..H....:.Al.O..f.7..Y......`
.. [email protected]....;r.w..F..|.m.5m.............*...z.0.6.8...}oa.u....
...D3.m.`lE2-......C.o........S........IEND.B`.....
<<< skipped >>>

GET /site/images/airlines/CZ.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 1199

Accept-Ranges: bytes

Last-Modified: Wed, 01 Jan 2014 13:56:23 GMT

Server: QWS/1.0

Expires: Tue, 06 Oct 2015 12:31:33 GMT

Date: Sun, 06 Sep 2015 07:28:09 GMT

Connection: keep-alive

GIF89a................................................................
......................................................................
......................................................................
......................................................................
............................~..}~.|}.zz.yz.uu.rs.pr.pq.mo.ln.lm.kk.kl.
km.ll.kl.jl.hi.fg.ce.^`.^_.YZ.WY.WX.XZ.SU.ST.QS.MO.MN.LM.KM.KL.JK.JL.J
L.HI.FG.DE.DD.DE.BC.CE.BD.?@.<<.<=.;;.9:.78.7:.23.24./1.,,.,,
.').$%. ". #.. .......................................................
......................................................................
......................................................................
......................................................................
....................!.......,...............H...C..*\(0H..74i...H...Q 
R....=...B..#A..:. h.S .&....A../.6`i.. ...Dl.D....1.......(.....%...8
p.PX...L|R..4E..I&L....J...........J .XQ...B...9E.)...H..P....~.......
....j%C .N..DPQH..-C.d.`....yPqb!...2;..p4.A."E.4X.(..2N.0...M.....y..
'....40#D...p....i....b......%#.?.....p/....`...*@,...K.pE..a.B..Tp...
........ \... .......`..n..H(...J#..AA..$..(4..J"..'....".(.D......B..
......9..!..@L...;....

GET /site/images/airlines/CA.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Last-Modified: Wed, 01 Jan 2014 16:35:05 GMT

Server: QWS/1.0

Content-Type: image/gif

Content-Length: 1206

Accept-Ranges: bytes

Expires: Wed, 23 Sep 2015 15:56:57 GMT

Date: Sun, 06 Sep 2015 07:28:09 GMT

Connection: keep-alive

GIF89a................................................................
......................................................................
..................................x....................r.....|........
x........d.}t.x..v..xA.tQ.q{[email protected]<.iZ.ff.jD.l7.fO.dL.`s.dZ.cB.b=
.\r.e3.Zm.[[.Zd.\A.Vd.Tl.TU.SZ.X).U0.IW.M .JI.HA.EQ.EX.EB.I!.=:.;B.6#.
[email protected](.2..)@.*:....)".%6.)..$2.%0.&..$-.!...3. .. ...!..(........
...&..................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..............!.......,...............H............)...T....2q......D.
[email protected]`|..dRIBUp.......F$IJ......B..RB....@. .(R$G.l.(.......HR.A.
#I..<.AA...E... .$...$%...A.H~L.|..../.....F.....`Z...$..B0.2..A...
.P......*.Pa.R$Ir0......A....tI..K7...D...IV"......G..."`.po.....0|...
..,......T...`..S...*x.C..P.T*[email protected]'A.'......\.... ....%.D..4..
&5.P...|..`[email protected]....=..B....Q..\p..Z....tX!.J...E.l8a.
.aLa.J.!.....p..S%...;HTTP/1.1 200 OK..Last-Modified: Wed, 01 Jan 2014
 16:35:05 GMT..Server: QWS/1.0..Content-Type: image/gif..Content-Lengt
h: 1206..Accept-Ranges: bytes..Expires: Wed, 23 Sep 2015 15:56:57 GMT.
.Date: Sun, 06 Sep 2015 07:28:09 GMT..Connection: keep-alive..GIF89a..
..................................................................

<<< skipped >>>

GET /flight/flight_inter/list/m_usertoolbar_ie6.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 11017

Accept-Ranges: bytes

Last-Modified: Mon, 20 Apr 2015 06:40:24 GMT

Server: QWS/1.0

Expires: Sun, 11 Oct 2015 01:36:47 GMT

Date: Sun, 06 Sep 2015 07:28:19 GMT

Connection: keep-alive
[email protected] ImageReadyq.e&
lt;...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:E2452CE79F206811871FD887DDFCFA7D" xmpMM:DocumentID="xmp.did:A7C5
7638DA5E11E4BBE3CE33CAD8C889" xmpMM:InstanceID="xmp.iid:A7C57637DA5E11
E4BBE3CE33CAD8C889" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E5F706879720681192
B0CF7FCB595EF6" stRef:documentID="xmp.did:E2452CE79F206811871FD887DDFC
FA7D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>U..j....PLTE........k......................
.....b........wvv|....jggg.......................\)))...2.............
....}........XXX........`...*....T............L...........Q...........
.....{......lz......Z............KKK..................@...........[...
.....r............................p...................................
.........^.............}Y.............................t...F...........
................................................9.....................
.......V........d..h............Y...._.............~~...~.........<<< skipped >>>

GET /qconn/wpa/button/button_old_171.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pub.idqqimg.com


HTTP/1.1 200 OK

Server: X2S_Platform

Connection: keep-alive

Cache-Control: max-age=259200

Last-Modified: Fri, 11 Jun 2010 10:44:10 GMT

Content-Type: image/gif

Content-Length: 1297

Keep-Alive: timeout=60

X-Cache-Lookup: Hit From MemCache

X-Cache-Lookup: Hit From Inner Cluster 
GIF89a.......KKK..?......Y...................K..$444..r........d..WMMM
EEE...............Fq....\8................FFF...?.....=Tp.../9Cmmm....
.....III:Oj.............................B...k...C.......###..D.......X
b.............FP........O..1..".<G.........?BB&0:...)33.....Z...tz.
..m..............5/VVDDD.......e..........CCC......p~.666.6.......AAA.
...........***,,,777..(..:.y......................`...........HLL....S
.ocGX<....Abb....y...............g.........-%......s...............
...............V..].....d..P.....M}.q..j..~..d.....z..w..Y..W..l..o..u
.....h..U..^..p..`..]........m..[..K|.Q..U..N~.o..j...................
......................................................................
......................................................................
.................!..NETSCAPE2.0.....!.......,...............h.......$h
[email protected].... SH`....5...,...Fc.H....A.d0..a.b.L...e.d......=
...../E..%.IS.....(..Y.(P.\[email protected]#....;..{...?[.Q!.a....
................5..4F.8R..ur .p............*.X......<Z.\`.......'.0
a.$d..@\....=."(..`.. .!:[email protected]...%..`...... .p..hA.%..
s.....G......x4R..o...K.<.......!.......,............3...!.......,.
.............J....d...!...,...,..........K..%#@.....d.ZUk....~....U.\.
.!.....S...B%...T.T=$.lX,].X=.H...Q....8s'M.....;....
<<< skipped >>>

GET /qconn/wpa/button/button_old_171.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pub.idqqimg.com


HTTP/1.1 200 OK

Server: X2S_Platform

Connection: keep-alive

Cache-Control: max-age=259200

Last-Modified: Fri, 11 Jun 2010 10:44:10 GMT

Content-Type: image/gif

Content-Length: 1297

Keep-Alive: timeout=60

X-Cache-Lookup: Hit From MemCache

X-Cache-Lookup: Hit From Inner Cluster 
GIF89a.......KKK..?......Y...................K..$444..r........d..WMMM
EEE...............Fq....\8................FFF...?.....=Tp.../9Cmmm....
.....III:Oj.............................B...k...C.......###..D.......X
b.............FP........O..1..".<G.........?BB&0:...)33.....Z...tz.
..m..............5/VVDDD.......e..........CCC......p~.666.6.......AAA.
...........***,,,777..(..:.y......................`...........HLL....S
.ocGX<....Abb....y...............g.........-%......s...............
...............V..].....d..P.....M}.q..j..~..d.....z..w..Y..W..l..o..u
.....h..U..^..p..`..]........m..[..K|.Q..U..N~.o..j...................
......................................................................
......................................................................
.................!..NETSCAPE2.0.....!.......,...............h.......$h
[email protected].... SH`....5...,...Fc.H....A.d0..a.b.L...e.d......=
...../E..%.IS.....(..Y.(P.\[email protected]#....;..{...?[.Q!.a....
................5..4F.8R..ur .p............*.X......<Z.\`.......'.0
a.$d..@\....=."(..`.. .!:[email protected]...%..`...... .p..hA.%..
s.....G......x4R..o...K.<.......!.......,............3...!.......,.
.............J....d...!...,...,..........K..%#@.....d.ZUk....~....U.\.
.!.....S...B%...T.T=$.lX,].X=.H...Q....8s'M.....;..<<< skipped >>>

GET /common/hf/logo.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:58 GMT

Content-Type: image/png

Content-Length: 4146

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Thu, 11 Dec 2014 08:05:08 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2939

X-Cache: HIT from l-cdnimg1

Server: QWS/1.0
.PNG........IHDR.......6..... .!e....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:2782B431810C11E4A54293B1
6E70510E" xmpMM:DocumentID="xmp.did:2782B432810C11E4A54293B16E70510E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2782B42F810C11E4A5
4293B16E70510E" stRef:documentID="xmp.did:2782B430810C11E4A54293B16E70
510E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>o3......PLTE..... ..V......................
.............n......mmm2(%...v..|.....................................
.ztr......SKH[....................iii&........LCA......J...........m..
.....?:...........c[Y...kdb.....................qqq.}{......B;8 ..U...
........tmkvvv............'..^VS......b..}}}.....D.....1..............
............................YQOzzz..^...$................I............
..d...-$".........K..........................A........g`]...I@=.......
......................q....................................0..........
.=31  ..........D..............!..8.,l.D....UU....................<<< skipped >>>

GET /common/hf/tags/local.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: image/gif

Content-Length: 1753

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Tue, 14 Apr 2015 11:20:05 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2940

X-Cache: HIT from l-cdnimg4

Server: QWS/1.0
GIF89a/.........x.R}.X..}..v..`..n..g.........s.Kn.F...l.C...!..NETSCA
PE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzN
Tczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XM
P Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RD
F xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:
Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/"
 xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xm
p="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8a
0f202-a013-1d49-a5f4-f38d9fa20dc4" xmpMM:DocumentID="xmp.did:0B54DE57E
28C11E4A308C1816420699A" xmpMM:InstanceID="xmp.iid:0B54DE56E28C11E4A30
8C1816420699A" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <
xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d8534dbd-fedd-8a49-9e5f-1c
e0fcc49be1" stRef:documentID="xmp.did:f8a0f202-a013-1d49-a5f4-f38d9fa2
0dc4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...........................................
......................................................................
.................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJ
IHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ......................
...........!...,...,..../.....{..I..8k&....].X...Q.....O.k;.8....;....
..H..&..|-.m..EO...8c...XQ:..*LT.8...2.......*[email protected]).m..*............
...............!.......,..../......p..B.8ka...#..x.Gz.lK..0....8.$y...
...A.b7...X6w.' H0..X....zQ.p..rU.V...`2...|....K.OF.t.`fB.?>@A<<< skipped >>>

GET /common/hf/tags/bjcx.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: image/gif

Content-Length: 1853

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Mon, 25 May 2015 07:35:05 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2940

X-Cache: HIT from l-cdnimg4

Server: QWS/1.0
GIF89a/.........}.X..q..dy.S..nn.F..v..............}...l.C...!..NETSCA
PE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzN
Tczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XM
P Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RD
F xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:
Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/"
 xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xm
p="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8a
0f202-a013-1d49-a5f4-f38d9fa20dc4" xmpMM:DocumentID="xmp.did:1DB3D1FA0
07211E5A7B5F2C8F272A4E5" xmpMM:InstanceID="xmp.iid:1DB3D1F9007211E5A7B
5F2C8F272A4E5" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <
xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4880fa53-8d89-ba49-9c34-92
df8fb341e1" stRef:documentID="xmp.did:f8a0f202-a013-1d49-a5f4-f38d9fa2
0dc4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...........................................
......................................................................
.................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJ
IHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ......................
...........!...,...,..../........I..8k#....QMi.SS..{.'::.m.1..|6.1.*e#
.....i...=b.1B.t....5R;Z.5x{..K.x.MF........pa...2._RX@[cWwC.!..".....
.......................!.......,..../........9..7%..)...CqHL..G...X.K.
)Z....s..H.#...B-......O...> .0V$.L.D..,;.....j-s.(`N...S.:....<<< skipped >>>

GET /common/hf/tags/car.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: image/gif

Content-Length: 1844

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Thu, 13 Aug 2015 03:30:06 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2940

X-Cache: HIT from l-cdnimg1

Server: QWS/1.0
GIF89a/.........s.M...........^n.Fz.U.....y..p.....g...l.C...!..NETSCA
PE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzN
Tczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XM
P Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> <rdf:RD
F xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:
Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/"
 xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xm
p="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8a
0f202-a013-1d49-a5f4-f38d9fa20dc4" xmpMM:DocumentID="xmp.did:A4A1945A3
B3C11E5BBDFECDA3D0F2E93" xmpMM:InstanceID="xmp.iid:A4A194593B3C11E5BBD
FECDA3D0F2E93" xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)">
 <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7830606f-8105-c340-9b
e3-315c450cb5ff" stRef:documentID="xmp.did:f8a0f202-a013-1d49-a5f4-f38
d9fa20dc4"/> </rdf:Description> </rdf:RDF> </x:xmpme
ta> <?xpacket end="r"?>......................................
......................................................................
......................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPO
NMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................
................!...,...,..../.....~..I..8k#....Y.Vb...l;:M,..<....
....U....n..M.2......C-..gT..AQ..w5...$l.X....gn.S....0K...iQsR:w!.!..
..........................!.......,..../......0.y.....Yf ..!.qC: .....
.tM.K.#.@$.OfB.`J#Eb..%.....k&Y:.K..-.*./..z.>..x(.. .\..N..^..<<< skipped >>>

GET /common/hf/header_new_v7.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: image/png

Content-Length: 5769

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Fri, 14 Nov 2014 09:05:14 GMT

Expires: Mon, 12 Oct 2015 07:15:43 GMT

Age: 737

X-Cache: HIT from l-cdnimg1

Server: QWS/1.0
.PNG........IHDR..............\......tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:447CB09F7C5EE411A99FFD5FAAD45241" xmpMM:DocumentID="xmp.did:725D
BE926BDC11E48DCF85CF5B000DAA" xmpMM:InstanceID="xmp.iid:725DBE916BDC11
E48DCF85CF5B000DAA" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B6BB18A0A96BE411B1B3
8221C2963F5C" stRef:documentID="xmp.did:447CB09F7C5EE411A99FFD5FAAD452
41"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.u......PLTE..... ..V........................
...........n......mmm2(%...v..|......................................z
tr......SKH[....................iii&........LCA......J...........m....
...?:...........c[Y...kdb.....................qqq.}{......B;8 ..U.....
......tmkvvv............'..^VS......b..}}}.....D.....1................
..........................YQOzzz..^...$................I..............
d...-$".........K..........................A........g`]...I@=.........
....................q....................................0........<<< skipped >>>

GET /js/ag.js HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t.agrantsem.com

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.1

Date: Sun, 06 Sep 2015 07:28:13 GMT

Content-Type: text/html

Content-Length: 167

Connection: keep-alive

Location: hXXp://static.t.agrantsem.com/ag_track-0.1.10.js

Set-Cookie: agsid=xU7oqm36So0Pe8QJ; expires=Wed, 03-Sep-25 07:28:13 GMT;path=/;domain=.agrantsem.com

Expires: Sun, 06 Sep 2015 07:28:12 GMT

Cache-Control: no-cache
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>openresty/1.5.11.1
</center>..</body>..</html>..HTTP/1.1 302 Moved Temp
orarily..Server: nginx/1.6.1..Date: Sun, 06 Sep 2015 07:28:13 GMT..Con
tent-Type: text/html..Content-Length: 167..Connection: keep-alive..Loc
ation: hXXp://static.t.agrantsem.com/ag_track-0.1.10.js..Set-Cookie: a
gsid=xU7oqm36So0Pe8QJ; expires=Wed, 03-Sep-25 07:28:13 GMT;path=/;doma
in=.agrantsem.com..Expires: Sun, 06 Sep 2015 07:28:12 GMT..Cache-Contr
ol: no-cache..<html>..<head><title>302 Found</tit
le></head>..<body bgcolor="white">..<center><h
1>302 Found</h1></center>..<hr><center>open
resty/1.5.11.1</center>..</body>..</html>....

GET /live/2015/06/02/21/1013v1433251374571726650.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 27 May 2016 13:24:44 GMT

Date: Tue, 02 Jun 2015 13:24:44 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 44033

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 02 Jun 2015 13:22:54 GMT

ETag: "3203596503"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh91:8080 (Cdn Cache Server V2.0), 1.1 fuz110:6 (Cdn Cache Server V2.0)

Connection: keep-alive
......mU....wT._.7.d...T...H.9. ..y.I..a.......0...J.9.d.,.......A....
....{.}....c.......>U....}.....W....P.ppp....v... ..1. ...1.?.v....
..- $..#hc.i. h....h...........6v....[.Gg........g{.v..mam....3<...
 X.....N..]I.".(...vw......y...*...q......b.......;.......D...."!(&`',
"...................m.."......R...._4o...(5..a......T@@.`...........?6
DE..J...y....x.p........3.......oc..............m.?.......}|Q.....>
.Ah.!........_q.....Z.......z;.}(6nj.v~.....5...=.....R.......Rb......
.d$T`R2j2j0i.....m.G....2..i.)....*..0.)iQ1........u..>.6.v...u....
.K]YUo.._OoCOO..g........'..j ..o..a......................._Y.../*...U
....S..'n..........*LEBZ.._...o.L..3B..d..........._..'.......wj......
..?./..m.......$DD..d$dd.$....`*r.j.RR*z*j.Z:::2.;w.i..i.h.1...W...D@.
.%'%...L.].51.=.:..5.K..G.s..0.]/p.p.Y:.M.D.][email protected].._
. .&d#......i.m."S.EU.?.q.v...l..R{[email protected]>i.'w8..$.}.../..?
...........[../&.>...a".#$ .....' d.....l.R.i.#k..iE?.....9..m.R...
...QM..:..x.y...fhw........kA..7)u.hX..D....T1...o...m;4.#~...JGvI....
........rDgy..4..E.#3.k.=."..\DU*16.`.n....7.....rO.zj........!...>
....'...[.....x:g.v-..y.......%..w...F.Mzv4...l..t.Q_=W.vClZO$ng......
7.......(.8N(..q..i.....&....`Q.....1t.B3...........*.w$.j..{.~...H.U.
.}.....7......N.9...;.. L8........7...W.].6U.....yz.|.uH.N..V....z.nq.
$}2i.....T...%.Y..^._R.W.E/..a~..~.w_A?....,..l..D......f..z(OA.sV.NW.
:.....1..q..s...G..n...".FKV..WnW..UV^....kzm.G<[email protected].|n.1..J&g..
T.d.....{.H,>1d......L..]....#.y.. o7.6.$U...F.....j.j&.....h..<<< skipped >>>

GET /fxstatic/images/sprite/css/room/room2014_z_854673e.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: image/png

Content-Length: 137989

Keep-Alive: timeout=20

Last-Modified: Thu, 20 Aug 2015 03:36:24 GMT

Expires: Sat, 19 Sep 2015 06:02:26 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR.............C..... .IDATx...w|.........v.mY..7.....j 
...!...!..!..rINBnrsOrBN...B..N8!!!!@ .B......2.E.lYe..3s....mUkW.I...
5/iv..y4k..G....N.k.""""#X.0.X.........Z?.............1.1A.)h1A.)h1.i.
.... .....4|s.ZL.s..........';.'......9...;@.....#""""CA.0......./a.`.
...`..e$""""CB.0..............l..lDDDDdH..&"""#.w._aF|..^.~p..........
.DDDD.$.........W./.........DDDd$....X.C...u........U.....,2Zh......w.
...s.....A.FDDD.....s...NC..J."""2\9....;.f....L..........1.1A.)h1A.)h
1.i..... ........B...cS.o..6&_..RL.s.k.........G..........0.l......]L.
s.ZL.s.Z.r..9.-&.9.-F9.1.H.gjk..Z..X.s..I.c.$...pm. .....2!.h.k..h..7.
a..Z......;..P.LDDD......Sz.y.S.....DDD$.....Sv..K..\...x.E......-.u..
&.*....ZJ.3....uX!.B.....^;...p.l.Y.6...C.wV.....R.0....N..<I...o.g
.......~]....p.....U.....<5..._.e.....B.?..{.y..)....F.~I..=.cW7`W7
..a.E6.4.LDDD..)./..=.........DDDd...H?8..{....o.).j.........]8.6c.eqJ
.x.6..UA&D..EX.q..$.....r(k.Lx.......uI.i.......e.jz.~....._"""2.Zb..3
..O.`o..qJ.X.I...uU..R..R...J2.,.t...~4..M....W1*h......U5p.pq/q?.....
xF""}.....}.kf.=w.Pg#.Ts.............]5........m..?...g8<..6.>..
.....6...0...y.X......Zdz....Sva.$.l.J.f......w.gm.7g...P.T.!.x.V4M..9
.~....A.'Sd...L8.{Y`*....H.].....OPq....A.HD./l..........m....}.l.7..:
3.FvTTp.UW.....4E..l.3.X&.7T.:(Vi...s.p.7....%DN..U....D.$...........{
...5U$.w3n.v.},.gs.fX.a.Y.RT.....*jo..,^Ch.z.ge.......H...p&UC@.`..)""
"AR...u.=..V.G.....L..'./.i.w......!t.....H/VN.....|{.k..{...o.6.Y....
.....R........f@,3.S{[.c.=B...q...V...\....J..y......{.<..v....<<< skipped >>>

GET /mmbiz/AVNibO5YtlFOV1qVkHufbYB76DM6aKjngptibmFBTicicZyP8elJPhIkgYbTsrI40P11RiaVUD1oGcOuotCQvCjATpQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1 HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mmbiz.qpic.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1126.v0-mow ( h0-s1150.v0-mow), ht h0-s1150.v0-mow.cdngp.net

Cache-Control: max-age=2592000

Expires: Fri, 18 Sep 2015 07:02:08 GMT

Age: 1556753

Content-Length: 25757

Content-Type: image/jpeg

Last-Modified: Wed, 19 Aug 2015 14:53:05 GMT

Connection: keep-alive
......JFIF..............Exif.....C...........................#.%$"."!&
 7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;......7...."...............
.........................N.........................!.1AQ."a..2q#BR...3
b......$Vr...CES..MT...6Uc...t..............................!.......
...............!1...AQ.2............?....q...'....1}.....>R...E.I..
..'_ XH.i.?... 7.<]u....V.....H......5....-..{h..z..].15.n.P.q.=..8
F...R.....OL.Y..~.G..]....jxkGs..YIt.S0..#.j:wT....oF..f..7G.=6.S.....
..8.O{X.O8...|Y.....%...l...... ...."9.7..$...d.....s..&.........O.a..
.M..Ob..5.2.w~.B.3"......Y...wI....i..G...([email protected].
.l..z..........:.dt....G.......V.C.88l1..(.U._.......].T.=SZK.g?.C.S/s
"...........1.V.N..R.(.....Es..[..-.]C.%r..x..H.j2d....q.....{..c#$)..
_.....An.V....N......e..=w.$..L..mt.......Ak..R4....f...T.K...j5W.;...
..X......j.^4.G....1......%.9j&...w..J.q_.<..7F.......1.6..Itw.._.T
...dqB.....%......w_.$.).x..'v......l....kk"....S...hn.......1....9...
.......<@....&...$.d..9.2.v....Z=...6S!..p1..k.. .........2P...8.As
?..?.n#.mh.ME..t.ef......P..sS.|@.?.\..\....)........I..........G?... 
d..s...8.aA....UT.0.nRz..3.....P...e..sc.2kd.......`v..lc..4....i..=..
.8;~.Nz...?f^.n=.....^..\B.d.._(w..y..S.G.......q...WT..b.2.\...V..C..
.z:...=....}..(x`....s...}..6.....H.....\.S.rVU.....3#h.....&...ym5eU5
.|.:Wjx.....(.ZZ. /.{.. ....3.:...N...F0......}...C$.l{fI..;......O.I?
.Q=.....j.t......eG}t....?.*5el4.:y..cy... ..h../..<.......E...<<< skipped >>>

GET /jquery.js HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: lz-furniture.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Content-Length: 1308

Content-Type: text/html

Server: Microsoft-IIS/6.0

Date: Sun, 06 Sep 2015 07:28:14 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "hXXp://VVV.w3.or
g/TR/html4/strict.dtd">..<HTML><HEAD><TITLE>.....
.......</TITLE>..<META HTTP-EQUIV="Content-Type" Content="tex
t/html; charset=GB2312">..<STYLE type="text/css">..  BODY { f
ont: 9pt/12pt .... }..  H1 { font: 12pt/15pt .... }..  H2 { font: 9pt/
12pt .... }..  A:link { color: red }..  A:visited { color: maroon }..&
lt;/STYLE>..</HEAD><BODY><TABLE width=500 border=0 c
ellspacing=10><TR><TD>..<h1>............</h1&g
t;....................................................<hr>..<
p>................</p>..<ul>..<li>...............
.........................................</li>..<li>......
......................................................................
......</li>..<li>....<a href="javascript:history.back(1
)">....</a>....................</li>..</ul>..<
h2>HTTP .... 404 - ..................<br>Internet ........ (I
IS)</h2>..<hr>..<p>..............................<
;/p>..<ul>..<li>.... <a href="hXXp://go.microsoft.co
m/fwlink/?linkid=8180">Microsoft ............</a>..........&l
dquo;HTTP”..“404”........</li>..<li>....
“IIS ....”...... IIS ...... (inetmgr) ....................
....“........”..“............”..“.......
...........”........</li>..</ul>..</TD><<<< skipped >>>

GET /staticPub/js/kg_d6ff0a7.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:40:15 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 07:43:01 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
6171...............s#Y...Y. P.5$PH..>.Jb.Y]......bO..dU$.I . ..@...
...X[a.c$.J.......p..]}.b..........'....s...........w.E....y...}....4.
.r.._...[...... ..].W...`.w.q~...8..=x.8....6..kc..j...(.......8..au.,
..O^..^..?.....mO.j.`...:.E0._..#.<..I..=.W..&o.G..x:y.O.q0........
|oZ.}..On...".^..v.o<......WO5{>......_...]..l<v...x8.N.#..;w
z..&..Q?...}..".9.r..Z......z.\...i^.].p;s.9..z...Q.....uwx]..W.~0.,..
.M .8V.-Z....c5....a7....j..s.^/...n.....Qg.l.[6..5)......?.~.YN.2&y1.
..2.Qo.f..3|x....g5..L.....N..8n.vz...G..>.}.`............_.....7..
.V....&.q0.Z...~x.s...r..........^P..V......g....................o.._.
._...{..&...oy......a.....$...W&..U....%.. ........Ag8..q..o0.....4..O
.i\...z..[..8......xs|4....../..d!;..;'K.?..U..;|...j.*b...h....V~....
{.~T_.Q=...6.h{.G.......!f.~.'Swj.Hz.&...T...........W.`..6.X.....1u..
...}...=../:./.......=c<.......n...`s.f0q~.-?>.{.....x..ZR.....\
...A_N.}W.....'.S ........[.#5..a....-...uP...G..8.f.T.o..b.....'3.h..
....t....6..qv..$(.J..n..;BOv..X..u5....d..S.....Tk.h..g6..}w...h....i
z.a...~j<......A.Hd]&..p._........`.....z^.^\....:.^#...~..M...6J[.
.!...X..`..?=y..(..,^.ni.*4W.G4....v.....$ .s,.K........7R....pI......
....?_8w.'[email protected]<..7.\2...K>M.Z (&.....$P.%*: w
K.._...V....c.].BWI....oZ..'>.\!J.f. .... ..#._..i.5..b.........3\B
E....Y.u.......8:.d.w......KK.(.y......u....Yt.d..j.3..B....m!...J....
.|.....({...!.cb..E.`.;m.ESP.........(.m...D$..aA....d...B...a....8s:'
........?N..mG..8...8.G(...;...8...x'......)...#.. ......A....M...<<< skipped >>>

GET /ext/union/?url=room&unionId=111&sUnionId=14516 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: fanxing.kugou.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:27:58 GMT

Expires: Sat, 26 Jul 1997 05:00:00 GMT

Location: /1046289

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Cache-Control: no-store, no-cache, max-age=0, must-revalidate

Connection: Close

Set-Cookie: __fx_unionId__=111-14516; expires=Mon, 07-Sep-2015 07:27:58 GMT; Max-Age=86400; path=/; domain=.kugou.com

Set-Cookie: _m_u_union_=php_55ebeafec16ce1.49213412; expires=Tue, 06-Oct-2015 07:27:58 GMT; Max-Age=2592000; path=/

Set-Cookie: _m_u_union_=php_55ebeafec1c339.44956151; expires=Tue, 06-Oct-2015 07:27:58 GMT; Max-Age=2592000; path=/

P3P: CP=CAO PSA OUR

Fw-Via: UGenerate MISS from 183.61.10.157

0..

GET /imges/live2012/logo_v5.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 18 Apr 2016 04:06:56 GMT

Date: Fri, 24 Apr 2015 04:06:56 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 12 Dec 2012 03:29:18 GMT

ETag: "2850254503"

Content-Type: image/png

Content-Length: 3413

Server: tux/3.3

Age: 1

X-Via: 1.1 hbtj81:88 (Cdn Cache Server V2.0), 1.1 huzhou85:8080 (Cdn Cache Server V2.0), 1.1 qzh246:9 (Cdn Cache Server V2.0)

Connection: keep-alive
.......P...>....PNG........IHDR...{...9......5.O....IDATx...}PT....
..E.v..ew.-E.Z..zU|..A,......D.PR.._.....6..v.2...r3....%.R.4..k.4..MM
MM...4.q.{N..{....,.L...G....^.~.9..{vF.u[c b...l....6....h19.0E.....q
.d..)...k..n.=l.`[email protected]....{y,SSSSRR..7??_..x.w...&q~"...(...F.ua|L.
0....#b.B.1.7.L....xRRRqq1.eLLLiiibb.x..C.U.....{......g..9q,...X.q.,.
.6....{....B.........y..q..'.|...f..O.^g...>.h.H...UVV.*.x.b...K...
7F....mQ....R..w_UU..qff&.YII..J...x.'O.\SS..^ N...........6..|M.]..@.
N.}='.l.CW..L......;''.1...).."......x..2.d...x..9r_....t......Q./.8..
.^..{..<f.rs.J.F..".744.......KJNN.lp .hp.y.fe.... '........G...A..
...O.8.e.../J.iiiJ.L.lX.'O..r..8...p..n...S.&M....b.777K....J.L.l@|..e
...=`.o..7..=....0.(.`.........\.t.:......."....o.B......|.......X&../
/_...Ht..d.W.1..,.1...._~Y9.}`ww7...@:....0).y......Sqf......K|r......
-..q........^joo.....H..p*.0..Q.|...{hB.)S..#>.7W..4...-Z..._....9.
.O?...;....= .dgg [email protected]}}}MMM*..*Ud..t.>.
.U.l~..W.W.......%.."./...p_".V...(...F.p..-u.,.......|......J6...Pkk.
d..l..c.H..."........5...1.........P7UTT.-si...Vh.M..\..?p...{....."V^
\....&.dk....p.w..?%... .....o........(....3g.s....x...?.8......%3..S.
...J.L.EV.[...V.M..!15..g.GL.....h..v..VS..m....N........&hpp...&...b.
..^l...x.p.7&z...r.:..p...-........1.'........[......P\\.....t...... .
H.s..._t..H."y...*...H.....[../..G...c/1.#..b|......y[T.S....l........
X..{e.{..&.=B.0.W...$...Q.......-.......1.%..!]..1....}.yRRR./_..'z.ge
.)&q.....3i..$%%....U*.).....E..b..p..q...;..MH'!..Y...]....K....j<<< skipped >>>

GET /imges/live2012/new_head_v1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 18 Apr 2016 04:06:56 GMT

Date: Fri, 24 Apr 2015 04:06:56 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 30 Nov 2012 06:44:07 GMT

ETag: "3653483698"

Content-Type: image/jpeg

Content-Length: 509

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou85:8106 (Cdn Cache Server V2.0), 1.1 jqzh233:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.....U.P........./7O7.F&... d...A..49........!.(....1%?).!..P...m...&8
`.a.f...l,[email protected]..\\..<........................rP........A......
.Q..I..Y.......F.`@..L,.."  .....Q(Q0.P.C..[.<..@ .....>.Ep&.6Lc
.Pl?.0...g.P.....L...........\..j^8VI.......1..K...$.....0.)..A.B.w...
).8X4.2<b<...Uo.B%.b]...0...........8..hz.........!zX...*......J
...Q.Qg.......u.....VL%...uX6....P{.4.C....^U.Jd.X^..oP........`.D6...
8...`mp.0}[email protected]/..I_j.b.`Y .......a.Mxe7..}...2.I@I'.h...b..
.f...4..` .....Q.fv..^..7..v.H7.......


GET /imges/live2014/showwall-bg-v3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:11:53 GMT

Date: Tue, 10 Mar 2015 07:11:53 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/jpeg

ETag: "1627641608"

Last-Modified: Wed, 30 Jul 2014 03:26:48 GMT

Content-Length: 36625

Server: tux/3.3

Age: 1

X-Via: 1.1 zhenjiang170:8107 (Cdn Cache Server V2.0), 1.1 jqzh233:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......U.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:D9DED8BE2916E411A
EB7BD26DC135CD2" xmpMM:DocumentID="xmp.did:4B9E84F0179911E4ACE79122D82
3DF8B" xmpMM:InstanceID="xmp.iid:4B9E84EF179911E4ACE79122D823DF8B" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:09D59B81179811E4A95CAD211A060908" stRef:doc
umentID="xmp.did:09D59B82179811E4A95CAD211A060908"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
......................................................................
.................................!.1A.Qaq........"2.....B..S.T.Rb3Cs$4
r.#..Dd.....t..c...^u.E........................!1QA.aq....R..".2....
........?....n.....#K.?q....;_..n...G.4...;_.}/G....h.&z........^... .
F..^.W..OC....../.u.w._'...G.4..t.9Rz....<....:.. ..t...hF?.h.#...j
_#....C.4~.}'...G......:?...|;U...~....?....].]/F...#.....g...O.^.<<< skipped >>>

GET /imges/live2014/head-nav-v2.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Aug 2016 08:11:02 GMT

Date: Tue, 01 Sep 2015 08:11:02 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 28 Jul 2014 08:08:06 GMT

ETag: "2837767067"

Content-Type: image/png

Content-Length: 1549

Server: tux/3.3

Age: 1

X-Via: 1.1 fuzhou60:8105 (Cdn Cache Server V2.0), 1.1 qzh241:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......S...UiT.W.....U\[email protected]$............Z..q .V,Q..
!"K...V..B.e..B.R6q:A.....z..y...}..w.7g...|.M.?.@ L.....,...[ .}....O
.PN ..KP.P....p..pe.......#.B....Q*.D.y.."XF.Z0.(.B....(D(..P ....3...
Z" .3..\y....B....P..?.hW..CL\....b..d.*..d.r%#[email protected]&.mQ.<
;...  [email protected].. .......J......0\........n....g.y...1..(.0.d.JER.H.
b;.......R.q..2Z.....J...lH)RH.T..../..w.L"q..2.}Z..]........$Q...y..C
e..h%..$.G ...D.CJx.B._...BF.,.$Da...#F......2.F.V..X.I*..*.....cp.JT(
.A\[email protected].....\..\..\....!.t'$^..e
......k.....\...x..%....s..!\=..{...{.Cr\..\..s....D..:.G..vww777.L...
......z.Z...............K..............300.e.(//.r.%%%z....khh..."77..
.......ZZZ0.Pgg... ..7..XJ.Vk......`..........uXj...............XvKAA.
vY...233....4.v...a6..X^ .~VUU..h...t:.6b......qP._..?.!.U.;.0.&..%.j0
&I....G<d...|.T.7....t.UUb.o.!f..Q...O....r.4....vE....B.j........7
....&\._Z.w.K.*..Y.$......w..}0......".0...Zf.........T%".r;.l)g.."J..
..........'..v g..{.t1..w..q..>..A....j..6.p.6.&..0.....ur.A.......
S.}7m2......[...h..}.1..;n....j...O..7...q......5h.....h......"5..1..9
.....m.9..$.".T.h w7...l.q.6...%....A\Z....9...U.J..O..v..6/..2.wsjV.u
.....:H..J..._...dsO..\p7....|m.W.I...Q.?9..w~..E..[G....w.m.?G.m.....
.7q...^.....0~.....].a.~|.....1...5.w.S....V...."U9...J..eq......,.s..
|bf........^j..E.H.#.Mb....A...O...jA"...=....~Vj.....a.fK.../^E...9.&
lt;.nv../.n.....:.C].<..}q...x.cI./RP..8.w.(yZs...a...b3.uMZ..D]z.2
..:y.7.....9n.....0......o.y:...........o.[.$..z-.......d.8....9..<<< skipped >>>

GET /imges/live/logo_foot_v4.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 11 Jul 2016 10:41:09 GMT

Date: Fri, 17 Jul 2015 10:41:09 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/png

ETag: "4287139147"

Last-Modified: Fri, 17 Jul 2015 04:27:25 GMT

Content-Length: 4193

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou89:8106 (Cdn Cache Server V2.0), 1.1 qzh243:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...c.........<..'....tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B16949FB2C2F11E58251F
06F4E150D55" xmpMM:DocumentID="xmp.did:B16949FC2C2F11E58251F06F4E150D5
5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B16949F92C2F11E
58251F06F4E150D55" stRef:documentID="xmp.did:B16949FA2C2F11E58251F06F4
E150D55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>-L'@....IDATx..[{pT..?ww...b"(. . U^#$. 
(......D..2....a.T.v...P_Sg....N..B}[email protected]......{..v....9.&
gt;....pf~s.....{.....|.......Ea}.j.2.u..3>.N..:.n>..}...S..h...
%.M)((.......\..........e..;.b..8.C..NN.K2..... l....... ]a1..r!....M.
kY..'.....B6..J....\....n5...H7]...4&M.K...m.S2@.:(.4JD.2...XS........
. C....c%d.\....R.?...................f!. ...UQ.pmb...m=)..p...Nr.YonD
F9....$Y...O.,.N..K..f..D..u.;...S...}8.....pYL.*..9Y.z...E..E...eK.#.
5\W N"......0[C$../5.\5.).U...">.d...:..rA.(.V"R`............ZX....
.1.J.......NX;..C.n.k?d<.I..|.SaY.T.....1M.eGz...\..D<..@/..<<< skipped >>>

GET /imges/live2014/head-nav-v2.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Aug 2016 08:11:02 GMT

Date: Tue, 01 Sep 2015 08:11:02 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 28 Jul 2014 08:08:06 GMT

ETag: "2837767067"

Content-Type: image/png

Content-Length: 1549

Server: tux/3.3

Age: 1

X-Via: 1.1 fuzhou60:8105 (Cdn Cache Server V2.0), 1.1 qzh241:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......S...UiT.W.....U\[email protected]$............Z..q .V,Q..
!"K...V..B.e..B.R6q:A.....z..y...}..w.7g...|.M.?.@ L.....,...[ .}....O
.PN ..KP.P....p..pe.......#.B....Q*.D.y.."XF.Z0.(.B....(D(..P ....3...
Z" .3..\y....B....P..?.hW..CL\....b..d.*..d.r%#[email protected]&.mQ.<
;...  [email protected].. .......J......0\........n....g.y...1..(.0.d.JER.H.
b;.......R.q..2Z.....J...lH)RH.T..../..w.L"q..2.}Z..]........$Q...y..C
e..h%..$.G ...D.CJx.B._...BF.,.$Da...#F......2.F.V..X.I*..*.....cp.JT(
.A\[email protected].....\..\..\....!.t'$^..e
......k.....\...x..%....s..!\=..{...{.Cr\..\..s....D..:.G..vww777.L...
......z.Z...............K..............300.e.(//.r.%%%z....khh..."77..
.......ZZZ0.Pgg... ..7..XJ.Vk......`..........uXj...............XvKAA.
vY...233....4.v...a6..X^ .~VUU..h...t:.6b......qP._..?.!.U.;.0.&..%.j0
&I....G<d...|.T.7....t.UUb.o.!f..Q...O....r.4....vE....B.j........7
....&\._Z.w.K.*..Y.$......w..}0......".0...Zf.........T%".r;.l)g.."J..
..........'..v g..{.t1..w..q..>..A....j..6.p.6.&..0.....ur.A.......
S.}7m2......[...h..}.1..;n....j...O..7...q......5h.....h......"5..1..9
.....m.9..$.".T.h w7...l.q.6...%....A\Z....9...U.J..O..v..6/..2.wsjV.u
.....:H..J..._...dsO..\p7....|m.W.I...Q.?9..w~..E..[G....w.m.?G.m.....
.7q...^.....0~.....].a.~|.....1...5.w.S....V...."U9...J..eq......,.s..
|bf........^j..E.H.#.Mb....A...O...jA"...=....~Vj.....a.fK.../^E...9.&
lt;.nv../.n.....:.C].<..}q...x.cI./RP..8.w.(yZs...a...b3.uMZ..D]z.2
..:y.7.....9n.....0......o.y:...........o.[.$..z-.......d.8....9..<<< skipped >>>

GET /imges/live2014/idx-bg.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Aug 2016 09:30:54 GMT

Date: Wed, 02 Sep 2015 09:30:54 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 16 Jul 2014 08:13:36 GMT

ETag: "4169713856"

Content-Type: image/png

Content-Length: 2049

Server: tux/3.3

Age: 1

X-Via: 1.1 lysx179:8080 (Cdn Cache Server V2.0), 1.1 hzh92:8108 (Cdn Cache Server V2.0), 1.1 quanzhou245:8 (Cdn Cache Server V2.0)

Connection: keep-alive
....04.S..}V.P.g....<....].ic..P...B [email protected]@ ..%.....$..........L"
(-&HE.HEG..........j..)SN.("h...x77cw.y.....}...'3...bi.?..D".$..K&...
!.3.x.|....0...aL....X..bUX.BO...H2...69.([email protected]$...)...
\.H.B.Q.....y..U....2P.. 9..b=.R."UY.....1...B.^@..az.&Ok.....uE8&.\.}
.b..3^..!K.K0=B..... ......... ...B<....l./...x..W....W.E.q..z. 1#.
h.......NA...gs!.PH....8.m(...B...2U!.1(....bZ:.....F1.1......Z..c...[
........Q&.}.F..m0&#..g.R.t.7.1`..J...!.X'......S1,o...r0#f..ttI.....j
UX.a.$_&.%j.FX.D....<.AQ......%`.(..0....!.\".. ./2.....a...Dk.....
......K5.G..U....'_Y..y.%o...V..Y$o.r.a..w.S).=.|m[|.....w.....G...?.j
.45~ll...'O.>....W.=$.........#?....R%......!.....uZ.y..;.....C...#
kz.n..|..a4...dE...1..U..Y.P#p.5....`?C.@({.=.,c.C[...!."......8.^.z..
...c..;...9M=u..j.x....A.<.<j1........pg..W..(....h...=....<.
..X...v...-.l....j....~l.....T8.../_i..:...R@..^.T.....t(.~%. ...oU.(.
...;......Q.Y6.....F)....2lW..!..........s..P....W~. ]{.1.......EyT...
.3.2W.*.(..h.....=#.&../..,......7!..m......O..8<....2Z..V.W*sg.iP.
..cz9.s./..n.@[email protected]|.^?....>.B.5^.
=........1......]..uF..1l...H.p.IG........aC....w.....c......>.....
...J...-m...E.Sa...No{~.s.N..hX [email protected].
7.,....C..T..K..o..3..c....0Z#U........pR...Psy'.:z......Lf.=..t.M`v..
.,......C$...... .x...y.S...h...?.7.c..v...>......=4.s{.O.......R2E
Ot[...N.W.!.....C {WI.a..z&.<.>......._...Sx..I........M.....|WR
.]......o.........:.Hg.....mok......u.m...m.. ..V3.rc.......=.5...<<< skipped >>>

GET /imges/live2014/showwall-bg-v3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:11:53 GMT

Date: Tue, 10 Mar 2015 07:11:53 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/jpeg

ETag: "1627641608"

Last-Modified: Wed, 30 Jul 2014 03:26:48 GMT

Content-Length: 36625

Server: tux/3.3

Age: 1

X-Via: 1.1 zhenjiang170:8107 (Cdn Cache Server V2.0), 1.1 jqzh233:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......U.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:D9DED8BE2916E411A
EB7BD26DC135CD2" xmpMM:DocumentID="xmp.did:4B9E84F0179911E4ACE79122D82
3DF8B" xmpMM:InstanceID="xmp.iid:4B9E84EF179911E4ACE79122D823DF8B" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:09D59B81179811E4A95CAD211A060908" stRef:doc
umentID="xmp.did:09D59B82179811E4A95CAD211A060908"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
......................................................................
.................................!.1A.Qaq........"2.....B..S.T.Rb3Cs$4
r.#..Dd.....t..c...^u.E........................!1QA.aq....R..".2....
........?....n.....#K.?q....;_..n...G.4...;_.}/G....h.&z........^... .
F..^.W..OC....../.u.w._'...G.4..t.9Rz....<....:.. ..t...hF?.h.#...j
_#....C.4~.}'...G......:?...|;U...~....?....].]/F...#.....g...O.^.<<< skipped >>>

GET /imges/live2014/showwall-bg-v3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:11:53 GMT

Date: Tue, 10 Mar 2015 07:11:53 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/jpeg

ETag: "1627641608"

Last-Modified: Wed, 30 Jul 2014 03:26:48 GMT

Content-Length: 36625

Server: tux/3.3

Age: 1

X-Via: 1.1 zhenjiang170:8107 (Cdn Cache Server V2.0), 1.1 jqzh233:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......U.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:D9DED8BE2916E411A
EB7BD26DC135CD2" xmpMM:DocumentID="xmp.did:4B9E84F0179911E4ACE79122D82
3DF8B" xmpMM:InstanceID="xmp.iid:4B9E84EF179911E4ACE79122D823DF8B" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:09D59B81179811E4A95CAD211A060908" stRef:doc
umentID="xmp.did:09D59B82179811E4A95CAD211A060908"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
......................................................................
.................................!.1A.Qaq........"2.....B..S.T.Rb3Cs$4
r.#..Dd.....t..c...^u.E........................!1QA.aq....R..".2....
........?....n.....#K.?q....;_..n...G.4...;_.}/G....h.&z........^... .
F..^.W..OC....../.u.w._'...G.4..t.9Rz....<....:.. ..t...hF?.h.#...j
_#....C.4~.}'...G......:?...|;U...~....?....].]/F...#.....g...O.^.<<< skipped >>>

GET /imges/live2014/head-nav-v2.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Aug 2016 08:11:02 GMT

Date: Tue, 01 Sep 2015 08:11:02 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 28 Jul 2014 08:08:06 GMT

ETag: "2837767067"

Content-Type: image/png

Content-Length: 1549

Server: tux/3.3

Age: 1

X-Via: 1.1 fuzhou60:8105 (Cdn Cache Server V2.0), 1.1 qzh241:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......S...UiT.W.....U\[email protected]$............Z..q .V,Q..
!"K...V..B.e..B.R6q:A.....z..y...}..w.7g...|.M.?.@ L.....,...[ .}....O
.PN ..KP.P....p..pe.......#.B....Q*.D.y.."XF.Z0.(.B....(D(..P ....3...
Z" .3..\y....B....P..?.hW..CL\....b..d.*..d.r%#[email protected]&.mQ.<
;...  [email protected].. .......J......0\........n....g.y...1..(.0.d.JER.H.
b;.......R.q..2Z.....J...lH)RH.T..../..w.L"q..2.}Z..]........$Q...y..C
e..h%..$.G ...D.CJx.B._...BF.,.$Da...#F......2.F.V..X.I*..*.....cp.JT(
.A\[email protected].....\..\..\....!.t'$^..e
......k.....\...x..%....s..!\=..{...{.Cr\..\..s....D..:.G..vww777.L...
......z.Z...............K..............300.e.(//.r.%%%z....khh..."77..
.......ZZZ0.Pgg... ..7..XJ.Vk......`..........uXj...............XvKAA.
vY...233....4.v...a6..X^ .~VUU..h...t:.6b......qP._..?.!.U.;.0.&..%.j0
&I....G<d...|.T.7....t.UUb.o.!f..Q...O....r.4....vE....B.j........7
....&\._Z.w.K.*..Y.$......w..}0......".0...Zf.........T%".r;.l)g.."J..
..........'..v g..{.t1..w..q..>..A....j..6.p.6.&..0.....ur.A.......
S.}7m2......[...h..}.1..;n....j...O..7...q......5h.....h......"5..1..9
.....m.9..$.".T.h w7...l.q.6...%....A\Z....9...U.J..O..v..6/..2.wsjV.u
.....:H..J..._...dsO..\p7....|m.W.I...Q.?9..w~..E..[G....w.m.?G.m.....
.7q...^.....0~.....].a.~|.....1...5.w.S....V...."U9...J..eq......,.s..
|bf........^j..E.H.#.Mb....A...O...jA"...=....~Vj.....a.fK.../^E...9.&
lt;.nv../.n.....:.C].<..}q...x.cI./RP..8.w.(yZs...a...b3.uMZ..D]z.2
..:y.7.....9n.....0......o.y:...........o.[.$..z-.......d.8....9..<<< skipped >>>

GET /imges/live/logo_foot_v4.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 11 Jul 2016 10:41:09 GMT

Date: Fri, 17 Jul 2015 10:41:09 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/png

ETag: "4287139147"

Last-Modified: Fri, 17 Jul 2015 04:27:25 GMT

Content-Length: 4193

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou89:8106 (Cdn Cache Server V2.0), 1.1 qzh243:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...c.........<..'....tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B16949FB2C2F11E58251F
06F4E150D55" xmpMM:DocumentID="xmp.did:B16949FC2C2F11E58251F06F4E150D5
5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B16949F92C2F11E
58251F06F4E150D55" stRef:documentID="xmp.did:B16949FA2C2F11E58251F06F4
E150D55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>-L'@....IDATx..[{pT..?ww...b"(. . U^#$. 
(......D..2....a.T.v...P_Sg....N..B}[email protected]......{..v....9.&
gt;....pf~s.....{.....|.......Ea}.j.2.u..3>.N..:.n>..}...S..h...
%.M)((.......\..........e..;.b..8.C..NN.K2..... l....... ]a1..r!....M.
kY..'.....B6..J....\....n5...H7]...4&M.K...m.S2@.:(.4JD.2...XS........
. C....c%d.\....R.?...................f!. ...UQ.pmb...m=)..p...Nr.YonD
F9....$Y...O.,.N..K..f..D..u.;...S...}8.....pYL.*..9Y.z...E..E...eK.#.
5\W N"......0[C$../5.\5.).U...">.d...:..rA.(.V"R`............ZX....
.1.J.......NX;..C.n.k?d<.I..|.SaY.T.....1M.eGz...\..D<..@/..<<< skipped >>>

GET /imges/user/avatar/59.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:53 GMT

Date: Tue, 10 Mar 2015 07:12:53 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 23 Sep 2014 07:17:17 GMT

ETag: "1449768658"

Content-Type: image/jpeg

Content-Length: 3323

Server: tux/3.3

Age: 1

X-Via: 1.1 zhenjiang170:8105 (Cdn Cache Server V2.0), 1.1 jqzh233:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....}.!T.....<.......Il.....p...d....r.t. ....f.mL.h....G%j.P.S!.rP
(.).N....\..I~./........n...|>...<...<./.z...B...pu5..._,..J.
..;...0i.S*..r.|~...........f4.. .........;aH ...cv3.....c..........f.
.Ba0Y..........l.5]....AH.rB8.~ F......d...I..E1V..Q..&......7O.......
,Mi.8..H4...D"n....g.5.>DS..D .,.0.....F.C.rp.4..E...TDD.Y...7l/.gm
m.....T.a......M.yzK...<Z. ....c......>YWw).N...g..\-......{1...
6.;2...b...0.C....P.l..(...#.%... ..M.a..].....3:.N..).....B.tr..p.A..
..\.ZP,(...K>.ek.7w2'....N8.....q..8.%.....z.%[.`.?0..X.e}.5w.G[.%.
....ys.AK......<&7.C..0.Y.tn.oqs>.....g........%..1..9...b.[.}.F
....xG"hM X....l..........J'.].*K"i.-~~N|i...a.K.K..`,.......U...Yh...
2....0...........! ...E...X!'[email protected](...C ......P.RP..}..V.V...U.......
B...%.T..P...V.(..@.* p.,.....R._..t........[.@..........~..=r"{.rA.S]
...B.U=.-))wT.E...T}oU...... .R'JP%........C%......t0.uc..E....]4..VE.
f...~X..../...... .7....Mc}...\.......Q..x(..%.\[|"..|.......)........
..w:m.w..J.h.CZ5.y.Kl..wo&.M(.H...x%.../&..fIak].89...P.'.yzx..i.. .3.
.&.Y.Fd&r...C-..q.k.9-M..%.sg$v. ..$....Z.mO*.t............2_"o..9.l..
FI..G....p.W...h..H....`.H.d4.op.. ..8.f.f..'....@..... .gs...Bp.d....
.......{... ..x......B....1.......D.....g<.T...=o<'h7....F|.....
...^/..`C.`..:.w.......U...<...J..|....*.lu........W..BE<....gQ|
7....d..SJ.!.B..Px.[..I..............w.....].#.$...-...."~.....Tx.].K.
....v.....}.W?...1.....}.........sc<.....m1.m...).6#..E.:...b..6..^
.%.=m....~iq.L;....:u.'...W..D..../d(. p..lT.3.........2.".....Z..<<< skipped >>>

GET /usr/uploads/201508/20150819170820_54770.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.uuzu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 13 Sep 2015 06:25:29 GMT

Date: Sun, 06 Sep 2015 06:25:29 GMT

Server: nginx/0.7.59

Content-Type: application/x-shockwave-flash

Content-Length: 540364

Last-Modified: Wed, 19 Aug 2015 09:15:20 GMT

Cache-Control: max-age=604800

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 kf48:3 (Cdn Cache Server V2.0)

Connection: keep-alive
CWS.?N..x....\.W.?|.}'..P."....P........LQ...@F .K...........Xw...n.. 
..Vm...uN.P.<.....y?/.|s.u.s.s.q..j......Af,.42C.}.Y.G..2S.7&0X\..W
.......jua_....R.R.g.2.............8.T..ji.S....@1..(Se(s..9..1iK.....
..:.e...b.T..LE..9C..R&-tqsvu!r..o.R&U .q.E.@..%.......J.\.R.xi.8 .K.$
N/....{...w.xd;Y.@(..].<..\.....y............k..ZN..H.Z.)UK[..qr.qr
..s...........xu...9...5..S....H...FF.......p..12...V....\bd*E.2C..=u.
[email protected]''...w@.{..o.7O..>nn>>....=..|...z..RG?.."-P
.Q./ P..e./...."-J.......R.|..........3.....#........G...w.....j.L.S".
.V*..,.J.*......P.0.....4L...>( .#.?9....i..:....5.................
....|..[.e.wDKR.?....!n...8._.tfFk... ......"...m*.R7.cdf.. ..R.@iaa^N
...t)sRe 2rK.%2'9.=...1..I..Mp...0.5..b..Q..C..l..!.h.L..p=B........I.
...:D..?\1.w3...8...~o.8......4XT3t.^...,.g..}..............2....}..Y.
2.o.\J.....}a1F........E..u.WQ.b..... Az;...uW...X1..H.84...c=.777....
.e...o..D]...T.3n..........].q.d.g....C/...>r.&.......e..&.}.xwoS..
.s...rw..q..u...7......H...........r....S.s.'..a.^...N..E....Q....6...
..f.m..o.......8..w........WZT..$.n...].....\.g. ?..n..7>..#.]rG.(;
...We\Y]C.....d.(..y.t..ek..Z.2%..)i..4A...s...V..t/Xa.....DF.}/......
.0_..k........W......=..r...V.E.............3...^......]]....I...XV...
k..g....5#.h2...b..)...]o......W["..7em.....]......../wg?..x.....l,P5.
...ih`...F.....}....._[.k...&.......y..\..................Pb/~.w.F..6&
gt;.SM.>.l....u..Z.J.<.....h.5.E....Z.[xC..v8Z"A.V..}q.....|a...
U.[.G..G\..-.Cz.=..~....l._..N3.~..$..U....v.,.....?.....pe..1.z.h<<< skipped >>>

GET /ddm/trackimp/N9221.1818125HOTEL.QUNAR.COM/B8898618.120652839;dc_trk_aid=293506848;dc_trk_cid=64276792;ord=[timestamp]?,dhttp://source.qunar.com/site/images/wns/20150806_flighthp_background_464x320_Ebb_6027.swf?clickTag=http%3A%2F%2Fqde.qunar.com%2Fevent.ng%2FType%3Dclick%2526FlightID%3D179692%2526AdID%3D240081%2526TargetID%3D8462%2526Segments%3D13%2C28%2C148%2C373%2C530%2C534%2C535%2C536%2C539%2C540%2C541%2C542%2C543%2C544%2C545%2C546%2C548%2C549%2C550%2C551%2C552%2C553%2C554%2C555%2C556%2C558%2C559%2C560%2C561%2C562%2C564%2C565%2C567%2C568%2C569%2C570%2C571%2C572%2C573%2C574%2C575%2C576%2C577%2C578%2C579%2C580%2C581%2C582%2C583%2C584%2C586%2C587%2C610%2C611%2C1101%2C1142%2C1183%2C4487%2C4494%2C4497%2C4648%2C4649%2C4676%2C4742%2C4951%2C4956%2C5001%2526Targets%3D5302%2C29%2C1504%2C8462%2C8347%2C8351%2526Values%3D34%2C46%2C51%2C63%2C77%2C80%2C101%2C110%2C150%2C204%2C215%2C228%2C243%2C250%2C252%2C301%2C305%2C323%2C5402%2C5598%2526RawValues%3D%2526Redirect%3DT58eySexufTRN91ezLFpOgFQ6MQfQ46JHk1J5g5gXi_kNdila1GaDckyVn9eP3Dh_FNtTX2g3kfgSYQd3EkEYcwSReZ1muv759lW5plBku02sdIKDRbO89djMgImKw8PAQxMzv8jyfIY638s7zpLVkk6iXchx4ZF27gyLD3hRnY%3D,u HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://source.qunar.com/site/images/wns/20150806_flighthp_b
HTTP/1.1 200 OK

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Date: Sun, 06 Sep 2015 07:28:20 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Content-Type: image/gif

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 42

X-XSS-Protection: 1; mode=block

GIF89a.............!.......,...........D.;HTTP/1.1 200 OK..P3P: policy
ref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa
 ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC 
NOI DSP COR"..Date: Sun, 06 Sep 2015 07:28:20 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, must-r
evalidate..Content-Type: image/gif..X-Content-Type-Options: nosniff..S
erver: cafe..Content-Length: 42..X-XSS-Protection: 1; mode=block..GIF8
9a.............!.......,...........D.;HTTP/1.1 302 Found..P3P: policyr
ef="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa 
ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC N
OI DSP COR"..Date: Sun, 06 Sep 2015 07:28:20 GMT..Pragma: no-cache..Ex
pires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, must-re
validate..Location: hXXp://d.agkn.com/pixel/2387/?ct=UA&st=&city=13101
&dma=0&zp=&bw=0&che=2949964848&col=8853099,883117,120058784,292870917,
63928392..Content-Type: text/html; charset=ISO-8859-1..X-Content-Type-
Options: nosniff..Server: cafe..Content-Length: 0..X-XSS-Protection: 1
; mode=block..HTTP/1.1 302 Found..P3P: policyref="hXXp://googleads.g.d
oubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo
 OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"..Date: Sun, 
06 Sep 2015 07:28:20 GMT..Pragma: no-cache..Expires: Fri, 01 Jan 1990 
00:00:00 GMT..Cache-Control: no-cache, must-revalidate..Location: http
://d.agkn.com/pixel/2387/?ct=UA&st=&city=13101&dma=0&zp=&bw=0&che=

<<< skipped >>>

GET /fxstatic/images/giftres/55/7cc0a9cabf777b1f4559aba439ed2c09.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:08 GMT

Content-Type: image/png

Content-Length: 3147

Keep-Alive: timeout=20

Last-Modified: Wed, 12 Aug 2015 07:44:21 GMT

Expires: Fri, 11 Sep 2015 07:45:43 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR...(...(........m....gAMA....7.......tEXtSoftware.Adob
e ImageReadyq.e<....IDATx..XkleU...y.Wo....1m.L..:tt.<........H.
.I.@0&.LB.c$....A4..1..h..#.QG 8.a.e..>i;m...>...............dvs
z.y.........e...............m..........>9.0...M...k....."..C=l..8..
.....4g(......q.b0...BbaZG|T.. `..N2Zru5^..Up.$Gy...!1.k..T....1.C....
.c...........^.jA...J.|...G./.PJH.cm../#....0...Wl..x..,..uU^...7....W
.k.h....0...* ......{......8....Oy.RJ.$(B...C.....,@Y...M.9.a~,.75..|.
.<.z._....m........~..0B.....p.K:1.;......V....1i.0.@.."=.\`xy....=
.......[4...=.....8.!o3.B.....F.4..`..b....3.l..8)G....r..,......."...
...).N)...)^.Ey=2T....{.GX......V.7.Y^)...E.!..........}_.*<......-
.M.l......:...o.t.}...#B'u.G .l5.xF(....N......"....m..}..NpI.-*.t$.P.
. ...P....J..q....S..=.lQ....*.[...|.A....5.....=h.,.....R..Rb..,EI...
DQQ.5a.4.!..[v.o..0. e,..T....`=.. .q.Gc.|...o.0.f.(..v......Nv.Aj..cm
....< ..V....!).N..U..H..? ...1.mW........C..DB.5].........5'.^.71.
.bn6/-km0..l`~..(.......J[...KC.$A04.....DC.qy..0..PI.P6Cf~...W.x...Qt
xN.%T....:...."....6n....!*WY...ob.}.!..Ky.=..TJ.C...fj..Ru.........2.
.-.<.*x.L..#.).~...l..ID...F......G.a.N!Bq!..@......$JI.tJ..T`.....
.y.oDh...L.^*|e.s...):O..J.kd........t.....I.......D....W...M.R.!M..8.
.r.W.....v2Ev...O.X..6l.D.U.P(pY.._r.....d.i..7..BV(.Tm|...f-Y.abt..k.
.I..p..jd..W..T.../....C$..Dd*yQ.p.M.5..H.............G..'..7.`l(.!.j 
..W......!kS..).6D....?F3.fq..R.W5..}..n.....a...{....X..`.6)....j)..j
T.5-M..0b..-.EO_..v..w..KtV...I#.A..]l!...Y<.f......Q!:....pH.t<<< skipped >>>

GET /js/s/e6u5-min?101016 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /0c/95/m784061357704567.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jan 2016 12:59:55 GMT

Date: Tue, 06 Jan 2015 12:59:55 GMT

Server: ngx_openresty

Content-Type: image/png

Content-Length: 12042

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 09 Jan 2013 04:09:32 GMT

ETag: "3376854542"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 czdx90:8104 (Cdn Cache Server V2.0), 1.1 sm27:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....|..P...zUP.L..%.w....-..;\,.;..........sqw....o..a_...T......]=55U
... ...........T.....s.,... 5.....,"..........|aQ.S....x||...<<&
lt;...\\\.........lll...***JOOOJJ.........rvv...633..@***222"""...O@.'
 ..*....."..2..:..".........x.%z.2t.K..T.8.....".."d.... ...t@'.. ...W
.J$.&8.66.,..JX.r8.RX.M.i..N..a".a...".'..x....h......1..'.M..[6.U..].
[email protected][email protected]$r....(..h$g4....cl1G4.....h.J(.N...M
..S..................g...C..B.h.....M..m...qxe....1G..'..ja.VA.4.8..DB
.Qca.A.xU.XULA-.A..,.D.dhXO$."[email protected]'& '.RE................
%..OJJJGD..K......L..M.....N.....?........*...."2FA!&..'%[email protected].#TGC5
CD.!.Jc..............`bS...a......H...Y0.y..qqq.p.1qpq...=...r..EEA...
.......... .... ... f7|......Z..N.....v$j....f.&fn&.6.?.E.]..,T..\...L
..&.F.$..N.n.N..$....us....@ZLX.=..O.(..ob..%O-t.!..q.q..y..$.A MQ..l.
}zQ._,..6{.6......p.(.....R.I:......[.........?..V_...7Q\....vsuUw..|.
Wg.[..#.M%.5...SH].........:.C?...S..ALB.........X....&...........O%..
%..]....6E....!..<b......i..U.......cW.6|...*..E..t.|....lfc...G.yt
....p.|...x..R....\V.7..!/r....FK]..rHz..1".8.x.f.~....u.,(...aP. X..\
....h?f..{.....!.}0~*h.s.Y.8?R..h...... ...T...n0..-.;......B.N.......
....':..{..m.(G....1;.._...=.Y...l"..~...s.....v6.._.o..&.A\...&To....
..CY$..TB.`....dM....-...............`.k.O1..T..(..]......O.......Y$..
.7FW$.M..I....B.g..... @...Gw..........:...^..^...=....C6.....'.9..D..
..>...w[..A.C..h^..2.|.%h&...>.(.$...S.....\...2.....C6.....C.OF
s4....U..%..C.N.'OG9.. ...Ok.....A^..g.'e1..a/.8..g{s....u.).z)..H<<< skipped >>>

GET /live/2015/08/10/17/1003v1439197486367993238.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 9183

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 10 Aug 2015 09:04:46 GMT

ETag: "2489990979"

Expires: Wed, 31 Aug 2016 07:28:00 GMT

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 hzh86:8105 (Cdn Cache Server V2.0), 1.1 sm24:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.....i.U...vU\.... .t.4HJ.H3 %5t.4.t..t.Hww.-=t................[......
[..~.S..   ......2@.......? .Gd4dd$$d.TT.4L.L.....ca..ba.a...K..G@HDD.
.CBJLH.OHD.?C....ABFGFF'.z.E...............x...............G...2"..*.;
.t..ii\.;..wHH..(....U!.C. .!...sK.............N..K..uKo...30...xe,~%\
.7.........CDB. [email protected]'..F.#eZK....q....DD.O8".@..*....
.0....H-......D$j./.........4.1......>...h...y...}...j....EH.y...{.
0...p.....s.h.......].:Y>.....^L3.v._...97..?:f5H(.2Z............Ko
aJ.&dR.#.Ip<....L.)w...1y.....zc..o..X.........x. iE2t...Bd.v.B..K.
.....y..wb...7*.l..s..w..Y...z:..q.\.Ó]'7.-..H....B.[..[.5.1Y.....uI
...g.5r.l}...qD.....uW.1")..MY.........&AL...........m$.0..m..eZS...Nu
........sM.%[email protected].}.(......uS..R....qpb..1.P. 6k......
..".H.BO=D...YI.j...(.......{.......l.........[...Fq.......e7.f@.. RF!
..%P]Bq3..J...?)=>....&.,x..jn.XTJB. F...2..2.. ".....Aq...M..w....
.e_........2....=!......F.W.K....h.DY.%>......!.*..P,...b...I.R...w
....E.4.P..2.V..=.b{j.l.......G.$...........JN"nK..9~xC....pNq.k..G...
..1.E.."...).S.....A..w.........)Z......yQ.d.V.}..8f*xE<......A..$.
......nS...|6!...{...%.gF3...'.a........!^1......HzH...... .e.j..t.!Z.
.......b!n`'..:[email protected]..."7.U..w>.}..f`.j...x..ubLu
..u.........R...3.Yd.."L.j.....W#3.Z7..6.d.....e.?.S.UD:U.l...ZB6.s.Q.
~..QDz}9.O.{..XTB..Ie...'...M#.$..4....x...M.....L....?.;....p&.[.#...
......Y...D{$......_9.~.R.....sU..F...X."<=\p.o.I...X..9...0Z....*.
.M....d-..x.....!lh..'.7...}$.......XS.B......n.....X...|.q...R..c<<< skipped >>>

GET /live/2015/08/15/01/1003v1439574409548965382.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 09 Aug 2016 13:58:48 GMT

Date: Sat, 15 Aug 2015 13:58:48 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8051

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 14 Aug 2015 17:46:49 GMT

ETag: "1338458073"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou90:8108 (Cdn Cache Server V2.0), 1.1 sm25:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.....).U...weL.@....,....................-......(....Hqw.....K......d.
..L2.d...._.....4.....3.O(.;....?..........................'&..'...!|N
[email protected]`<#...#.?......P......hD@[email protected]...'
[email protected]`..X...hEB.....B....c...e....D....<`.)5F^3...,R.._.L|o...W...
.>#...[.y.a....o.9.k.........y.W.....!.....O....QD..< ...0......
..D "..`.%..!..i.7.<W..A1.K...y.Z.!1.G,X`........27...~a.(G<.1..
~..r3.B..%........I#1..h.jT.=.kl. }o..:.UYQz3..#U?m.a........|1.J...;.
[email protected]#.u ..U...S.........n.._.{[email protected]...^Y...I.....
....9bC..s..<..........C...=..N.f.I1.&...wxS{...X&..aP.._.;.~...A.u
....,.uC.P_.Z.u.e[..FS........)..Yt..h..TU!.....[......X..D.yPr....D..
D.7..6$..]...M:>[email protected]...."...u.Jc....^.`%....}..T
..lC..A"................|.j..c....w_.m..t.%.^(=...'..*....S...^.J^..3.
......*....t.W...:[email protected].....$
..H.. YY.b...7m.v..Dn..|..9"Vh."...6g.)..1.............h|(..s......i.d
WK.......4..B).~z..6.1M.{.PjD.#$..}..3..&....j.&.Q.......pL.}.x1.HS..$
..{..... ...[Q.....OCQ..W.w......<..>=.B...{Q.B.}.U.........z.;.
....*.,[email protected].].0.yG.....o#[email protected]..,.....
...O3..t|...[....[9.r..CF.^A..".....cZ.#[-..F..U.B..y6..].\...O..M...!
.P.k.K..V..^....L.~<..Q2........*....E...d...$...S.[.O.JvUo;.<-.
>.......2-A...-..(:z.o.......O..j.7.<...i......u..2./......g...-
...z$w...`..6t..6.u\.......y......O.O...k..3.2.T.Ag.e...z.....M.0...9w
y%.......=Y..9..-.!9........4..9.....3.:F7."G..~.2..u...jr..2..Vo-<<< skipped >>>

GET /live/2015/08/16/15/1003v1439708920138471436.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 11 Aug 2016 08:11:16 GMT

Date: Mon, 17 Aug 2015 08:11:16 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 13513

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 16 Aug 2015 07:08:40 GMT

ETag: "3290442085"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:8080 (Cdn Cache Server V2.0), 1.1 sm24:10 (Cdn Cache Server V2.0)

Connection: keep-alive
.....6.U...wUP.L..............;..!...........}q].......x...L......9...
...*/-'......o.>.....h...........`a......Q.PP....Q.0...a.!#........
.............. [email protected]. ...............
@C..s...@[email protected]....(....9B....PJ..q....^..Q.Kj.&....
.......0.7....#..../.h(...(..[...?..XLr8vq53,l.7..B.%UR..k.]N....5...;
.1`0.....u.I..,...D....l|_......9...u.`.F..i.e..'.g..z_A[.#....*.dy.6E
z...B.9......u.....L.....D.._.O.....5Xr......$...n9["..W..j..:.....e&g
t;.j....AB.u..k.]2..H.<.......#..f:......Wk..T...............>}Q
..8...E7....r.W...p.. ...A&YF&...~3...iz.......z..7.}...U..g..g...W(..
..&....N...c.hY.........\.........n-..8.J-.cZs.m......Qd.v .rU ......c
.!...}o,.qv.P..A..,!..g...O....|m...mx..!...{......L..g8G.#j.6.3>.6
=....'0..G.p.Q....&.......,....... .UP. -e....W..L...9.5u.&..``..v....
........../.d..R....f...J...'*Xg...1..YF.!|.3.2t.%*..$...7...a.aw.u...
e.a...R.e\.1."..........=...*.M ....H.~..Z$*.del...p..P....q..J.....\.
{..{....".....a...<Y../.....k..SY.gq.^...n.......<...u...._M....
.C...Rt!......&_.. .hT..B..E..BK..1A.Q.*^...E.V......#.5f..:...\..T.
...\..MQ.PR8EO-....-.|S...0*.$&..b...6.O....=.k...H..)6(.1.:.oE%)aT..b
. 4.....u.. ....o.'.f..../..7.F.0-./|.%.<.....%..:sK.f.ev....8,,...
...7'0.........v(.Qc......GE...`.A..Y.L....w.....6>.T.*I...Xr...]..
.v.OK.?...'...7...Z...U?H.....O..30h..~p.....).c.q.( ....2..V...E.....
..EH@.....$.b|.@&..D..l.Xz.Hd..........7/E.'..$...;....dt5.~.~0.'.C...
....q.......o....".....].A....<.L&au..u..Z).e..([..d..W.../aJ?!<<< skipped >>>

GET /live/2015/08/15/01/1003v1439574409548965382.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 09 Aug 2016 13:58:48 GMT

Date: Sat, 15 Aug 2015 13:58:48 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8051

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 14 Aug 2015 17:46:49 GMT

ETag: "1338458073"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou90:8108 (Cdn Cache Server V2.0), 1.1 sm25:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.....).U...weL.@....,....................-......(....Hqw.....K......d.
..L2.d...._.....4.....3.O(.;....?..........................'&..'...!|N
[email protected]`<#...#.?......P......hD@[email protected]...'
[email protected]`..X...hEB.....B....c...e....D....<`.)5F^3...,R.._.L|o...W...
.>#...[.y.a....o.9.k.........y.W.....!.....O....QD..< ...0......
..D "..`.%..!..i.7.<W..A1.K...y.Z.!1.G,X`........27...~a.(G<.1..
~..r3.B..%........I#1..h.jT.=.kl. }o..:.UYQz3..#U?m.a........|1.J...;.
[email protected]#.u ..U...S.........n.._.{[email protected]...^Y...I.....
....9bC..s..<..........C...=..N.f.I1.&...wxS{...X&..aP.._.;.~...A.u
....,.uC.P_.Z.u.e[..FS........)..Yt..h..TU!.....[......X..D.yPr....D..
D.7..6$..]...M:>[email protected]...."...u.Jc....^.`%....}..T
..lC..A"................|.j..c....w_.m..t.%.^(=...'..*....S...^.J^..3.
......*....t.W...:[email protected].....$
..H.. YY.b...7m.v..Dn..|..9"Vh."...6g.)..1.............h|(..s......i.d
WK.......4..B).~z..6.1M.{.PjD.#$..}..3..&....j.&.Q.......pL.}.x1.HS..$
..{..... ...[Q.....OCQ..W.w......<..>=.B...{Q.B.}.U.........z.;.
....*.,[email protected].].0.yG.....o#[email protected]..,.....
...O3..t|...[....[9.r..CF.^A..".....cZ.#[-..F..U.B..y6..].\...O..M...!
.P.k.K..V..^....L.~<..Q2........*....E...d...$...S.[.O.JvUo;.<-.
>.......2-A...-..(:z.o.......O..j.7.<...i......u..2./......g...-
...z$w...`..6t..6.u\.......y......O.O...k..3.2.T.Ag.e...z.....M.0...9w
y%.......=Y..9..-.!9........4..9.....3.:F7."G..~.2..u...jr..2..Vo-<<< skipped >>>

GET /live/2015/06/25/16/1010v1435219348429169353_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 20 Jun 2016 05:49:07 GMT

Date: Fri, 26 Jun 2015 05:49:07 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 12763

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 25 Jun 2015 08:02:28 GMT

ETag: "944806180"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:8108 (Cdn Cache Server V2.0), 1.1 sm28:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...wUP.\........6...w.....08..=..Bpw...5hp...j..u.}..}OKu...X.
..`.(* .```......... .# ".#"" "!!".b......cb.c.........R0P......R.S.12
....Pqps0s30.0.......*2*.**.3)!)..7>~.p....78...,...........A..o./.
a....`...I....0p...p..p.H(.)....q.h.qyd....hy=.......d....u...w.t.....
.....x.D..GD........G......2.....0.p....!.....<.-....6......o.:..48
p8.)......h..#.H...]...0A{....of..... .uz6. .....q...Xz..d........n..x
........<*..?....V..H/[email protected]:....?..EN..&.G...|..5.M69...:u).,.y0
.Py.Q.O..0:..F.Y....'.@.....*N]2....a..:$.*.Z...u.....[c.(..'.........
\.I.oF...jZ.1.g...sE.?...l.[fF.P....|bc~.6}.(P...`o.P......i........3{
O.q......\..E..`^.....BN.Y.......;.'...2....?..ptt.$....8jC.6....3I]'.
..H....|_....M..4...eJ.Gv..(H.....N_T&..kw.i.m....[q._ .(..S.%2.....l.
~v..?.n......})....'.(..b. ..9I.=.. |B.....h.G`p. .Fy..>....0h... .
.>..OV\..J...D.{.....V.......l.".....gf$y=....'..(.......E.#y^..O.V
*.5...p|Y...E.....z..KzB)L...o....6..|...P...w?K_%...S..... ..........
y..... s......\.Eq`;.....2..x...y*. ? ...yR,.h.W..[-.....*..JH..2l..5K
5.RE.....[...Nn.,}.4s..y...4m..A[CW;..cb.nwQk>?...r..3.g...`. ..rBi
.(0..|X5..........>.)..X.>.r.F...ee2_.j.6.WDa.Z.;P...I{f.F..Mdm.
[email protected]..=......K....$.n. ..r....\..(..v.....].1.L.Ile...
...n..9.VB.}.I.(m.a..y.@"fs...71..5...._A6Z^.....c...Y....n.z.7..c4..W
M...o....].X./F...Td..:.1.,t.$.T.....1W..C.].7..W.Bx..ULf.q$........O.
.y^.EF.I.5c...i......./....sR.f...dr}..-...Xqvu.G..\.G/.T..........._K
d6 n..J..2....~w....U.....3.......*.F..`...d....x........'6w[.g...<<< skipped >>>

GET /js/jquery_MIN_5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 01 Oct 2015 22:38:21 GMT

Date: Tue, 01 Sep 2015 22:38:21 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 41543

Last-Modified: Mon, 13 Oct 2014 06:28:22 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 bjsb71:8105 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: keep-alive
............i{.G......D{d@,n^...X.....-[.%...i_....XH..b.....D.U..r...
u<.b..\"#c....z.[....".4n......q.6[.v...Nv.......z1....YoT........C
#._......vz....m#...'. .u.~.f<...4.<xp...p6..o>\..{P.g.....=\
......?t...''...j.r.._<..y....v....V.q.z........lXK..-.....Z|......
:.~.o..7k.l..?O....d................U.\.|.wx.-...^......m/[...qs.;....
osZ......~.....`...lw...L3...k{i.]..z...........y..u........\..k...{'.
....}Yo.............R#.ogt.i..l.-..^..U*n.. ..C.n....Y...........L....
.Y.....]....,4... ..?Q.n.N.z.9.`...^...M&..d.-.mC.u.x..v..KP|~....V.O.
.'.f...n .=..'4.OV...M.d..hui....uS.:qp.?=>.....b..[...|..g.N~..lm]
k.vX...".V..y.z..?_dC......g.\7.B.V.p....Q....P_.....U..F..l..7.....l.
m6...F..|......|......2.w.|.....?..F1...NXt..X...z..l..6h.._...ZZ....m
....x.5i$.4?..2..Pid..k...I..w..;.O.d._.J&..<=N....?...O.p....T..Y.
.....................W..N....-......Nks..Fo.g.H...........N..0...q....
:.j.6Hqmnd..L.A..L.{8.:/.~..K.-^7......r.X..V...O&.Y..A....z....!.}J..
&T...&.G.fm<..^.@.<x.9.....6...Av=Y=....\3.. p.]%.....:7.eW..]..
.m...RL.M.{...z Z.B..........%.:Y.........~6k..b|.f#..~e....J.|.?0[X.t
..XI.i......wI....Q..1..,..Rv<...;[email protected]..:_|pp./.O&4.y.}.9/.
...oc..l.lX..b%..W.%D..k.D...,.-..E.X"..../R t,'cD...3..}.............
.....f..X.S....'..\..f....w.[.{.Z.. .}.5.....U6...J..jE./|.qV"gi.<.
BvF......Qk...1;.....\}.....~FZ.Ovj.I?.#...{z..#...z._...;i...fx.z)^..
}...N.}&...c../..k.....~.<IeL..&..7..f.....8.....=?.....G[.........
..Yw...;.........n.%...B=K...9..8X..l5:.f...I.99?......}......{.XI<<< skipped >>>

GET /js/LAB_0.1 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:02 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 2

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /1/2016.html?uid=614516 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: g.bj73.com


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: text/html

Content-Length: 24189

Connection: keep-alive

Last-Modified: Wed, 02 Sep 2015 03:16:12 GMT

ETag: "55e669fc-5e7d"

Cache-Control: no-cache

Accept-Ranges: bytes
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"..   
     "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..&l
t;html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<met
a http-equiv="Content-Type" content="text/html; charset=utf-8"/>..&
lt;title></title>..<style type="text/css">..    body {.
.        background-color: #000;..        font-size: 12px;..        ma
rgin: 0;..    }..    td img {..        display: block;..    }..    inp
ut {..        width: 150px;..        height: 16px;..    }..    /**..  
   * ........     */..    .qp #main {..        width: auto;..        m
argin: 0 auto;..    }..    .qp #show {..        position: absolute;.. 
       top: 0px;..        left: 50%;..        margin-left: px;..      
  padding-left:20px;..        width: 480px;..        height: 400px;.. 
   }..    .qp #tr_olduser_notice{..        display:none;..        colo
r:red;..        padding-left:45px;..    }..    .qp #register_form{..  
      width: auto;..    }..    /**..     * FL..     */..    .fl #main 
{..        width: auto;..        margin: 0 auto;..    }..    /**..    
 * ........     */..    .pp #register_form{..        width: 480px;..  
  }..    .pp #tr_olduser_notice{..        display:none;..        color
:red;..        padding-left:45px;..    }..    .pp #main {..        wid
th: 1024px;..        margin: 0 auto;..    }..    .pp #show {..        
position: relative;..        top: 0px;..        left: px;..        wid
th: 480px;..        height: 400px;..    }..    .pp #flash{..      <<< skipped >>>

GET /api/c.php?platform_id=1&union_id=2016&union_type=1&link_id=0 HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:28:01 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.2.14

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Sun, 06 Sep 2015 07:28:01 GMT

Cache-Control: no-cache, must-revalidate

Pramga: no-cache
36c..var gconfig={"platform_id":1,"platform_domain":"regapi.37.com","s
tatus_login_domain":"status.login.37.com","ad_domain_cdn":"http:\/\/kw
cdn.000dn.com","platform_deploy":"1","union_id":2016,"union_type":1,"u
nion_category":4,"link_id":-1,"referer":"zhenpin","title":"\u8bf8\u795
e\u4e4b\u6218\uff0c\u7b49\u4f60\u6765\u6218","title_id":"3796","ad_par
am":"25090zshh0203","ad_name":"\u8bf8\u795e\u4e09\u7f8e\u5973[FL]","ad
_id":"25090","banner_id":0,"swf_file":"\/swfs\/87\/25090zshh0203\/","d
igest":"","flash_path":"http:\/\/kwcdn.000dn.com\/swfs\/87\/25090zshh0
203\/","width":"1400","height":"700","left":"","top":"0","game_id":"28
1","game_server_id":"60766","template_id":3100,"proportion":"70","time
_temp":"1441163771"};gconfig.key=0;.function getTimestamp(){var d=new 
Date();var timestamp=Date.parse(d) d.getMilliseconds();return timestam
p}..var vtime = adltime = getTimestamp();..0..HTTP/1.1 200 OK..Server:
 nginx/1.4.2..Date: Sun, 06 Sep 2015 07:28:01 GMT..Content-Type: appli
cation/x-javascript..Transfer-Encoding: chunked..Connection: keep-aliv
e..X-Powered-By: PHP/5.2.14..Expires: Mon, 26 Jul 1997 05:00:00 GMT..L
ast-Modified: Sun, 06 Sep 2015 07:28:01 GMT..Cache-Control: no-cache, 
must-revalidate..Pramga: no-cache..36c..var gconfig={"platform_id":1,"
platform_domain":"regapi.37.com","status_login_domain":"status.login.3
7.com","ad_domain_cdn":"http:\/\/kwcdn.000dn.com","platform_deploy":"1
","union_id":2016,"union_type":1,"union_category":4,"link_id":-1,"refe
rer":"zhenpin","title":"\u8bf8\u795e\u4e4b\u6218\uff0c\u7b49\u4f60<<< skipped >>>

GET /1/bg.jpg HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://kwcdn.000dn.com/swfs/87/25090zshh0203/index.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:28:02 GMT

Content-Type: text/html

Content-Length: 570

Connection: keep-alive
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
2</center>..</body>..</html>..<!-- a padding to d
isable MSIE and Chrome friendly error page -->..<!-- a padding t
o disable MSIE and Chrome friendly error page -->..<!-- a paddin
g to disable MSIE and Chrome friendly error page -->..<!-- a pad
ding to disable MSIE and Chrome friendly error page -->..<!-- a 
padding to disable MSIE and Chrome friendly error page -->..<!--
 a padding to disable MSIE and Chrome friendly error page -->..nt>....

GET /1/reg.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://kwcdn.000dn.com/swfs/87/25090zshh0203/index.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:28:03 GMT

Content-Type: text/html

Content-Length: 570

Connection: keep-alive
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
2</center>..</body>..</html>..<!-- a padding to d
isable MSIE and Chrome friendly error page -->..<!-- a padding t
o disable MSIE and Chrome friendly error page -->..<!-- a paddin
g to disable MSIE and Chrome friendly error page -->..<!-- a pad
ding to disable MSIE and Chrome friendly error page -->..<!-- a 
padding to disable MSIE and Chrome friendly error page -->..<!--
 a padding to disable MSIE and Chrome friendly error page -->..HTTP
/1.1 404 Not Found..Server: nginx/1.4.2..Date: Sun, 06 Sep 2015 07:28:
03 GMT..Content-Type: text/html..Content-Length: 570..Connection: keep
-alive..<html>..<head><title>404 Not Found</title
></head>..<body bgcolor="white">..<center><h1&
gt;404 Not Found</h1></center>..<hr><center>ng
inx/1.4.2</center>..</body>..</html>..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
.<!-- a padding to disable MSIE and Chrome friendly error page <<< skipped >>>

GET /small/808700fdgw1eoo30gvn2pg201c01cjrc.gif HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1033.v0-mow), ht h0-s1033.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Thu, 10 Sep 2015 06:56:16 GMT

Age: 7432318

Content-Length: 8782

Content-Type: image/gif

Last-Modified: Fri, 12 Jun 2015 06:56:18 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
GIF89a0.0.............................................................
....................................sss.........vvvNNNBBB>>>E
EEIIIPPP\\\fffiiirrr...........................OOO222$$$)))...VVV...FF
FQQQUUU^^^..................{{{YYYAAAxxx.........yyyuuu.........|||ggg
...............pppccc.........nnn..............................lll...S
SS......aaa......ZZZzzzddd...TTTVVV.........___............???......[[
[:::qqqjjjbbbhhhmmm...........................ttt.........}}}......ooo
...............&&&.........***   555.........111...000............@@@.
..666'''...........................LLL...DDD]]]---<<<...eeeCC
C.........~~~423JJJ;;;(((XXXWWW...MMM...GGG......!!!"""===......bdc...
......```...444KKKRRR333999///........................................
.............................!..NETSCAPE2.0.....!.......,....0.0......
..H.........@@.....(` .....H. .#...-"[email protected]\  .G...8.. ...."H.@....
.2h..a....,JT.t.E..%>......!.$.PA...%L.8."...,Z.x.#.....(.1....G...
Q....9t...... A...A.i..F. I.d..&3.<...I.......@@.(..H.BeE.*V.(....E
..&d..d...].|......P.r.....1,... ........iQ....j..i`&...h.|...a.5k..."
....iD&5........G..-...q.Q..tpd.S..PA..<...luT..v....y.e..c........
.fd...N...F.Y..w...T.I..A.?... .HT. Zh.....bH.....!......0t."......h.B
"{..."/@...Q...".|p..V ...*4..R-...#`<.^L.D"..5L2..<P.E%.A0."N.!
.%f\.."}.P.&..QD...`Sh.,..R.,.H&....H.[l..$p....c02.'.0....x......@...
...WP..M.I.....2.)..r...d... l.E#......`h.......DX..E....G...J.J...)..
BI#F... .8B.)...K,.4.......!.....^...F.9..,>...&.TQ....1..X.q.*<<< skipped >>>

GET /large/8f3879f2gw1es8ao4bqm4j20p00b4ads.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1130.v0-mow), ht h0-s1130.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Mon, 05 Oct 2015 10:48:56 GMT

Age: 5258358

Accept-Ranges: bytes

Content-Length: 147813

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
......................................................................
..N...........................!1..AQ"aq..2...#BR...3b.$r...CS......4.%
Dcs...T...................................:........................!1.
."2AQ..a#..3Bq...R...$4....5b............?...Dx1...f...3...u$...n.8...
.......6.....K.._.].Y..R.p.=...OQ''....F<.e........1..).76:.c....2]
.VJ..&....%.L.P......}.E.;M-\.....u...-d*i.(.0.EU....}...j...O"..]D...
......!"^P?.-...!o..'H.(....FF.)..C.z.....;<..K7'..._.... [email protected]..
*)...p3...Q.y....).*JE..P....X../.}4h."...B)...`..Q#....d{..i......J.3
......Y....O....J....*.Le..zd...:[s...SI...H.!....~!..l...cU'...?.....
.....I.....u........g-...Y-.... .4jH<....1..u.....fSIr.;.......9...
..'..........Yr.....6.B..S...$.... .q.'..,.5...........cW...........E.
[email protected].{..jn./&....Q;r...t'...?M0.#.aC.IxG....Q..T.M=..!..)..<w
.'....9.......)..7......U.%xKH|...r~.01....:...3 >.....M.o..n{...).
..sON...G#....9R..l..b.....@......[k...y..4a.w`I_.......xW...=b%|mV...
&a.......@?....}....m.i$....[}. . ....*.....,....G....N...q.....f.....
...]]*.=4...b2T..u.C.u..YG.....&......p..{..KWO).....}r=4..:..D.1..Zb.
W$.........t......1..q..:.....S...'..V..).X]...y....I.q.d.n.........N.
..I.........YB.yD...:/....b...<....*..?F....$H.....d]./.....`......
H....PL...;jm.........H.B.........N.ò_`.-KC......2.r.W=...W.8.......
.....:.y..z~.../.../.. 1.qKl.......;z.Y....- ...\e>..AQjyf.Q.rQ<<< skipped >>>

GET /large/808700fdgw1eoo30hp6kgj203i02ta9x.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1024.v0-mow), ht h0-s1024.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sat, 21 Nov 2015 14:39:56 GMT

Age: 1183698

Content-Length: 5430

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
......JFIF.....`.`.....C..............................................
......................C...............................................
........................e.~.."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?..S..?i_
.*o..go......=..%...w.A.$J.I.J.P...u..9............|u...j.............
.f......Tn:...:....\......!....o.9.......}...Y.....s....s.|6.o.?.z.\..
.../...q..VV......>..Q......>>...N...>-..:. ...0.s.o'...i_
i.,.I.o.^......-.M26i<.X..c...M.|..~._......F......u}W.6..)..:..T..
.....I........../.#.c.X....#A.m.pO.(......S..^#.......g.W...k?..."C.e&
lt;(..|-h.L.....3.^.'.. g.|T.b....m.......B.........7.?..[.[I........!
#.m..y....oM.._....7.^.......tf.S..h.Q..okw..7.v..C......q...!....Q..4
..................7Rui.8%.#.v7n..=~x...r.k.....x.g......^..I#C.7;...s.
[email protected]@[email protected]@.s......o.> .].......2..&......a...g|;.u..._..F..V
..}..Y.....#c..[...G..?.)......|-.......N..o..h ....E_.._p.c.........6
..L.-....O.e.([email protected]...]..........1Yu...
.u......7>.P:.8.Z...v.U..wwq.[[email protected]..|nO.jQ.......=H..
.....[. ........W..i. .U........Y.....x.Y#..G.jr'.Kk.f.....q.8.W..<<< skipped >>>

GET /large/808700fdgw1ertro88zh3j200i00h0sh.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1071.v0-mow), ht h0-s1071.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Tue, 20 Oct 2015 13:47:01 GMT

Age: 3951674

Content-Length: 1109

Content-Type: image/png

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
.PNG........IHDR..............Z......tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:D39FFC09E00011E48A56BD12C6
1925FC" xmpMM:DocumentID="xmp.did:D39FFC0AE00011E48A56BD12C61925FC">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D39FFC07E00011E48A56
BD12C61925FC" stRef:documentID="xmp.did:D39FFC08E00011E48A56BD12C61925
FC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>..X9....IDATx.bd..?....T<. ... >..6w...
..I.R.Hj......1B...R.....(..^...X.,.....4....g..&@..<j.A...2..(....
`...01P.P...T0....BP`Q.. 3..i...0rA!..F.T;.DC.a....P.B.]..B...x..F.@.`
....a...4.O.%......b.NC.. ..........%FM.|......IEND.B`.....
<<< skipped >>>

GET /large/808700fdgw1ertrntqggoj201x01s0sk.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1112.v0-mow), ht h0-s1112.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Fri, 30 Oct 2015 08:41:13 GMT

Age: 3106022

Content-Length: 4120

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:E04126D5E00211E4989B891C946A502C" xmpMM:DocumentI
D="xmp.did:E04126D6E00211E4989B891C946A502C"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:E04126D3E00211E4989B891C946A502C" stRef:doc
umentID="xmp.did:E04126D4E00211E4989B891C946A502C"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
.......................................!1..A.Q".aq#..2BRr$...b3CS.&...
......................!1AQ"..a.q.2b#............?..;.&W..... ....x....
..)S.5&H.o..#.~.,.0.3c...Yi.....}....Ti.P..8k@.,...........9..B....V..
.Nz.....R.GE&E.u..n.....?/.K.9..O.....k.H.H.|H..1.^..Y.......=.....|..
&R...LAm>.~g...b....:..'.:.".......Ks.G....6. ..........i....&.Y#..
}KK...z..<Yi..w.Y.z.D$|.!.g.[u.1.....#.....=..yZ..ZB... .......<<< skipped >>>

GET /large/808700fdgw1ertrno5dejj201x01sdfo.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1043.v0-mow), ht h0-s1043.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Mon, 21 Sep 2015 01:39:02 GMT

Age: 6500953

Content-Length: 4471

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:A8C59C6CE00211E4A896C23ECB7D4146" xmpMM:DocumentI
D="xmp.did:A8C59C6DE00211E4A896C23ECB7D4146"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:A8C59C6AE00211E4A896C23ECB7D4146" stRef:doc
umentID="xmp.did:A8C59C6BE00211E4A896C23ECB7D4146"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
.........................................!1.A"Q...aq.2B..R#...........
...........!..1.AQaq...".....2B.#.....b............?...Fx..j....6..e..
4.....G~...g.......M..zs]..Uf. ..)a.....j.*:w:*>[email protected].
...T$$^....jT.. ZM7$.Z..}G.....q.N..\...G....u#.}7...!)T...J.R......tu
..;!lc.M.._Bg..l.|.Lg..g.m.(...-..!G..*.K..3".9.......E\s-.q..b.a)}...
...Kr"..q...E&.W...z..j.....yUq..b..8....&4.Z". b......\.........~<<< skipped >>>

GET /js..6rooms.com/js/z_MIN_47 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 400 Bad Request

Date: Sun, 06 Sep 2015 07:28:07 GMT

Server: openresty

Transfer-Encoding: chunked

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close

0..

GET /stat.htm?id=1255214667&r=&lg=en-us&ntime=none&cnzz_eid=997130195-1441521926-&showp=1276x846&t=ã€äººã€‘è‡ªå·±çš„æŒ–é‡‘ç§˜ç±&h=1&rnd=1524265161 HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oz.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /js/mootools_MIN_1.4.5 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:08 GMT

Server: openresty

Content-Type: text/html

Content-Length: 2870

Content-Encoding: gzip

X-HITS: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close
...........Zi..G.............k...A.@.. .5."@.....Z.....].VB.H.&..r"..@
.X ....r........TUW.5.;...qUW...g.u..7^}.......`G.3.|i...6.#......(...
.x.S.|/B^T...T..k.........eC..h....[.V...\.Fc....A..?....?.=...._...'.
...?:.....O..1....#...U0....0..=.tT..Y-..j..j.^.:5..9../_.p!.`.T......
{..q|....H.T.S5.......-h...Unb...?..[.F..j....^.[.C..=..P.-X....CD...(
..;>1_14.eh.e.Z.'..z#3".8....w.......92...l.....s.....Td.......a.3.
.{H...?C..Z ..!.`I.\ [email protected]]...t.....t.h..8..6.....f@%.
.....=...6A.C=.O=.......#h ._.....*GH....W....s....L.R..-.w.0j..1a...g
......R.H......G...E......&G~d..........wM...M8..s1..J....0p......... 
H.=?..v.......a.GG.M]..~....\(.B#.u.7....p....2:/.......$.U..6.$...N..
.SN...j.L........}}....r..r.w..M.-.L......."1..R....b)3...8.U...fsF.F.
ayM..(l:x...wwo.|...{..~0.n.X... ....A#.....k`...=..?.|....w...JS...7.
. ...u.y]H..m..."..<.#S1.P[.......fh.....C.=...7.(J]]gS(..A.oO..LOP
P.kA.(.^RRUc7J]...J......Z,`....c...7...pS....V.A..Ri..0......c,.H..1.
.2..ZZ1<.c...*............n.<....8..0/L..@,4..s..v]#...P......S.
...bF-)R."q#.`...1.-..E<W.[}..W.....,.1.y......J.H....._^@.bz!.r..4
..n..........)L..%o.x..2..t.h..$..ju./[.cp!p@.,.6.3..........V...6../.
[email protected]: Y<..../.2....;.3.{..._Kp.........T.zW..%...At.T..R,.
JD.......=...;...R...4#zYdg..g.........e_(..&.TF-.f{/).d]\..F...S.l...
.QH.5$./[..YA....G..g#9%z.%..$..%.h.h......Xl...9(n.yN.kD.....6)..Gx..
Z...^f........@,ms.cN...&u.....&nf......6..Z...P=}|....V...n .,.x^..R&
gt;...Fo..;l.......U ..;..;....L...R...V.........d;.).....l......)<<< skipped >>>

GET /ag_track-0.1.10.js HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Cookie: agsid=xU7oqm36So0Pe8QJ

Connection: Keep-Alive

Host: static.t.agrantsem.com


HTTP/1.1 200 OK

Date: Tue, 01 Sep 2015 09:17:21 GMT

Content-Type: application/x-javascript

Content-Length: 8822

x-amz-request-id: 635161a6-f581-4505-95b0-03bc38233c09

x-ba-request-id: 635161a6-f581-4505-95b0-03bc38233c09

x-scs-request-id: 635161a6-f581-4505-95b0-03bc38233c09

x-ba-version-id: null

x-scs-version-id: null

Server: scs.sohucs.com

Access-Control-Allow-Origin: *

Last-Modified: Tue, 16 Jun 2015 09:12:14 GMT

Accept-Ranges: bytes

Content-MD5: bd82aad4aeaefa84374c5613cf863471

ETag: "bd82aad4aeaefa84374c5613cf863471"

Age: 1

X-Via: 1.1 qzh244:7 (Cdn Cache Server V2.0)

Connection: keep-alive
(function() {..ag_para = {...getCookie : function(key) {....var arr = 
document.cookie.match(new RegExp("(^| )"   key......  "=([^;]*)(;|$)")
);....if (arr != null).....return unescape(arr[2]);....return null;...
},...from_input : function(para) {....if (!_agt) {.....return;....}...
.for (var i = 0; i < _agt.length; i  ) {.....if (_agt[i][0]) {.....
.key = _agt[i][0].substring(1);......para[key] = "0";.....}.....if (_a
gt[i].length > 1) {......para[key] = _agt[i][1];.....}....}........
if (self.frameElement && "IFRAME" == self.frameElement.tagName) {.....
var parentUrl = parent.location.href;.....if (parentUrl) {......para['
purl'] = parentUrl;.....}....}....para['agfid'] = ag_cookie.getAGFID()
;...},...from_comParams : function(para) {....var n = navigator;....pa
ra.atsp = n.platform;....para.atsl = n.language ? n.language : n.brows
erLanguage;....para.atsbr = document.body.clientWidth   'x'......  doc
ument.body.clientHeight;....para.atssr = window.screen.width   'x'   w
indow.screen.height;....para.atsc = document.charset || document.chara
cterSet;....para.atsh = location.host;...},...from_atstd : function(pa
ra) {....var url = "";....try {.....url = window.top.location.search;.
...} catch (e) {.....url = window.location.search;....}....try {.....i
f (url.indexOf("?") != -1) {......var str = url.substr(1);......strs =
 str.split("&");......for (var i = 0; i < strs.length; i  ) {......
.if (strs[i].split("=")[0] == "ag_kwid")........if (strs[i].split("=")
.length > 1) {.........para.atstd = strs[i].split("=")[1];.....<<< skipped >>>

GET /js/mootools_MIN_1.4.5 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:08 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /images/common/grade/anchor2_2c3e5d6.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:57 GMT

Server: nginx

Content-Type: image/png

Content-Length: 11284

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-2c14"

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 fuzhou59:8107 (Cdn Cache Server V2.0), 1.1 sm25:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......x.......mB....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:09EB99D602BA11E59867CF36
8A5CDBB7" xmpMM:DocumentID="xmp.did:09EB99D702BA11E59867CF368A5CDBB7"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09EB99D402BA11E598
67CF368A5CDBB7" stRef:documentID="xmp.did:09EB99D502BA11E59867CF368A5C
DBB7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>......(.IDATx....|\e...g.-..M..)i...6ta_l..
.PvY..H!.^Q.x.W_..WE...d.........A..i...-..4.$..d.3g..9.....d...\.....
$g&.=.r.s.o..s8].q46.Gi...9...^x!......f....p.)...z./....v...........,
Z.......].W....ohhx....{.?........O=....O.\..r..Q............?..3gl...
.|...V.^...Gii)...TTT....o.....I........./...AQQ...8..`.......;.g555..
g!.2...!...,Y..O>. ..z.....yyyW.........<*.///......D"..`0h~...L
%%%....N...p..Coo/rss......3.....d....:F[[.y0...N:...`.e...2..........
.k|...i.I.C.P.$I ..%.r..fn.W..s.N....~].~.z....y...i.....a......I.F...
.......}7.xc-;......_lmm}..[...%#..h.|5..={.03.......s.|.[...===. <<< skipped >>>

GET /images/room/kaibo_png8_54b424c.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: nginx

Content-Type: image/png

Content-Length: 1009

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-3f1"

Accept-Ranges: bytes

X-Via: 1.1 fzh55:8107 (Cdn Cache Server V2.0), 1.1 sm28:0 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...............dm....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B2CEF14AF6E211E4BB50818E
2527BB3C" xmpMM:DocumentID="xmp.did:B2CEF14BF6E211E4BB50818E2527BB3C"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B2CEF148F6E211E4BB
50818E2527BB3C" stRef:documentID="xmp.did:B2CEF149F6E211E4BB50818E2527
BB3C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...5....PLTE..............tRNS....0J...EIDA
Tx......0..o...K..l...Ta.K..Z.'.D..V...J..r..e.....S..g.,B........s...
........IEND.B`.....


GET /images/room/live-status_572c6a8.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: nginx

Content-Type: image/png

Content-Length: 2554

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-9fa"

Accept-Ranges: bytes

X-Via: 1.1 huzhou87:8108 (Cdn Cache Server V2.0), 1.1 sm29:9 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...P.................tEXtSoftware.Adobe ImageReadyq.e&
lt;...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc
/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" x
mlns:Iptc4xmpCore="hXXp://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:
OriginalDocumentID="xmp.did:945EC7AF931CE111A9318AE6F6CE1C61" xmpMM:Do
cumentID="xmp.did:DBABE63FE96711E4994FE2F3B0A30B64" xmpMM:InstanceID="
xmp.iid:DBABE63EE96711E4994FE2F3B0A30B64" xmp:CreatorTool="Adobe Photo
shop CC (Windows)" photoshop:AuthorsPosition="Creator"> <xmpMM:D
erivedFrom stRef:instanceID="xmp.iid:8e058ff1-b4cb-c546-8670-9b837c988
8cb" stRef:documentID="xmp.did:945EC7AF931CE111A9318AE6F6CE1C61"/> 
<dc:creator> <rdf:Seq> <rdf:li>Justin Cates</rdf:
li> </rdf:Seq> </dc:creator> <dc:title> <rdf:A
lt> <rdf:li xml:lang="x-default">1080 Grid System - 18 Column
 Grid Photoshop Template</rdf:li> </rdf:Alt> </dc:title
> <Iptc4xmpCore:CreatorContactInfo Iptc4xmpCore:CiEmailWork="jus
[email protected]" Iptc4xmpCore:CiUrlWork="VVV.1080.gs"/> </rdf:De<<< skipped >>>

GET /images/room/guard/guardcar_img3_8a36267.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:29 GMT

Server: nginx

Content-Type: image/png

Content-Length: 13707

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-358b"

Accept-Ranges: bytes

X-Via: 1.1 fuzhou60:8107 (Cdn Cache Server V2.0), 1.1 sm25:10 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...t.........>]......tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:37AC0B372A9C11E58E77C
D26F436F9FE" xmpMM:DocumentID="xmp.did:37AC0B382A9C11E58E77CD26F436F9F
E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:36C9972F2A9C11E
58E77CD26F436F9FE" stRef:documentID="xmp.did:37AC0B362A9C11E58E77CD26F
436F9FE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>......1.IDATx..}..].u....e..>.u....L.
.56........yq.>S.....6.sI.........`.w [email protected]{/....9wt.A.....
...S.....^[email protected]@[email protected].....
[email protected]=...$..7..].S.....'...? ....Za.t..Ne@.
...8R3c.8K..h9.........P..z..k.. .0[.0.6....o0.h.E.....$.?.;........).
......(....SM-..k...a.(b...e.@..#.K?Q.cs.'.6k........6e.........|.-...
.,~.c.{..a..h..9[H{../.e.....v...<k..b..HJ....4.{.}..M.].n...t.._..
.....T.....5..rTK........4R..5F....>..o..EH0.m..f.V6JN...>._]..y
... .. ......:~0......#.!./A&.....K.|?........$0..A...G.3........|<<< skipped >>>

GET /images/room/guard/diamond_show_e38fc4c.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static1.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:29 GMT

Server: nginx

Content-Type: image/png

Content-Length: 45867

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-b32b"

Accept-Ranges: bytes

X-Via: 1.1 huzhou88:8111 (Cdn Cache Server V2.0), 1.1 sm26:0 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...............z.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:3974EDBF2C5A11E59ADCAA17
A9479DCA" xmpMM:DocumentID="xmp.did:3974EDC02C5A11E59ADCAA17A9479DCA"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:38918F542C5A11E59A
DCAA17A9479DCA" stRef:documentID="xmp.did:3974EDBE2C5A11E59ADCAA17A947
9DCA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.c......IDATx.....\e.7...N....}7.M/[email protected].!tD
.T.{.{?D..Z.. "v,.......0" ...H....f..M.wn....l.../ ....;3;s..<..;.
9.<.m.p..W\q..W...w.. .... .....W\q..W\q.. .... ...F...>.8.e.4&l
t;.s....h...c{v..}..... ...1\...=.o..9R..W..8.}..... ....A.b..Z.S.8;*.
........(..uF.{.;..r..W\q...?..........A..}./H.....N.B.Z......^O..ns..
. .......$..v..&..?6./....o .I...........=.O.U...&..M:f.m.W\q..W\y}{.`
...7<..>za.:Z.......k^..W.t-~.9.\\.M% ...nS... .....@.,...m.&...
.. /.?.r./.......H}..>...FDIEar.....6. .... .....dP......vt7Tc...DK
.?N......QT.W.......(v.....1.2.u...W\q..W.............G1.2...O... <<< skipped >>>

GET /swfs/87/25090zshh0203/index.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: kwcdn.000dn.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 08:06:11 GMT

Date: Sun, 06 Sep 2015 07:06:11 GMT

Server: nginx/1.4.2

Content-Type: application/x-shockwave-flash

Content-Length: 1001

Last-Modified: Thu, 05 Feb 2015 01:12:39 GMT

ETag: "54d2c387-3e9"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 kf50:5 (Cdn Cache Server V2.0)

Connection: keep-alive
CWS.....x..U_o.E..;;..Ii....n...54..4„.....KdS..u.[....Z.{q"!.G.....
....O|&......s.B_.........fN~..'...Oa....._.>99..........$. {b.....
.<.....z.."....51.A.y\........H.$vC...F.w..8xn.bt$...8.x5....Jl..~.
.C......p}.CK.]...........~.*....u.0.q..W....c.x..{i..c..bP..6`.FL6>
;z............U|... .....q.]..m.\.J=.K.ICp}..Y.\..4.Z...n.y.Ud.Y.%`..}
.Yk'B(.k.0y..........$...E9...i..t.]|.." [email protected].....%!.....$......wgm
i.z.... .R..EB. ..=..=.U....A..#...c..........A.....'[email protected].)....
.s..\[email protected]:R9N...<..q.2..S.&b.E......8../.'.`..g...
....l..d....3........s....1....a.........M..;Gq..ft.o...p.F....../...y
0.^...i..c.Sp.g...W.03....g.w....z......=}_fWJ....6kr.NY...7.....e....
.a..U...k.z....F.W.,...(.^...f...*....2...$.<{...s.....M...I.......
.V. .......C...E........<..E?f7..dt........9....^.......}N0FO...V&.
.....F.{..FX..j...iJD...;.S;.,7).*q=..kX.3..2}.I.w........5eeV...... j
hD..%_....ei .iZ.....j................Rr2.............o.j.....pf.[d.~a
..7L.f....G......y....,...Q..f.6Q}.^...HTTP/1.1 200 OK..Expires: Sun, 
06 Sep 2015 08:06:11 GMT..Date: Sun, 06 Sep 2015 07:06:11 GMT..Server:
 nginx/1.4.2..Content-Type: application/x-shockwave-flash..Content-Len
gth: 1001..Last-Modified: Thu, 05 Feb 2015 01:12:39 GMT..ETag: "54d2c3
87-3e9"..Cache-Control: max-age=3600..Accept-Ranges: bytes..Age: 1..X-
Via: 1.1 kf50:5 (Cdn Cache Server V2.0)..Connection: keep-alive..CWS..
...x..U_o.E..;;..Ii....n...54..4„.....KdS..u.[....Z.{q"!.G.........O
|&......s.B_.........fN~..'...Oa....._.>99..........$. {b......<<< skipped >>>

GET /swfs/87/25090zshh0203/sound.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://kwcdn.000dn.com/swfs/87/25090zshh0203/index.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: kwcdn.000dn.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 07:30:51 GMT

Date: Sun, 06 Sep 2015 06:30:51 GMT

Server: nginx/1.3.3

Content-Type: application/x-shockwave-flash

Content-Length: 57262

Last-Modified: Thu, 05 Feb 2015 01:12:39 GMT

ETag: "54d2c387-dfae"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 kf49:4 (Cdn Cache Server V2.0)

Connection: keep-alive
CWS.*...x...eT.Q.....,............!X.........XB.......%t..o.33g..;..u.
.a-~t..............9../.B.$/...... ......t...W..&.qrtv...$Dn..........
.....f.............$.....a....NA.L..A..................C..._..8..O....
f...V...N,>f.,l..,0=OB..nVf..n.....b0)RiG3w[RU7.k w.'.f......L...v.
....l.,......J.._..........G....................?.*Yy.Y.y....|L...l..l
.....v........v......*I*...X..f[K..iZWO7.....`.r.r.r.p.2/..y--..]...&l
t;..\]..,.`.Y|..m],.......a..d.W...Gz.....~...X.)...ne...v..u.bQ.rw.t.
.z.........,nv^V..n.N...j..n...".....3.........JNR.i4...%?./.'....//..
.'.../;............. ....Om....0#..6.'mR.\l|.b...lR0m|<...b\.l\b<
;R......o..S..........?.... }.h..N.j...b...3....Omr..q......q......s.?
..O.4..8AaR..K(.*.J.. .....|&.^............K]....0...%N..%...9...o..s.
..........{."u..E.b.4...\....|...oD.(N....[....:....KMO...Cj.8......B.
.bhL..p)Y.......2}.^H...#@.c..........{(.....f.}..ZU!..<.DjA....0..
..........5?.u.....UT...o}..V.B.....'.d.S........... &MXfsB..w.H....".
Kw..Cq.|E.E...u:GT1..(.._Q.ERN.9.U...w"....I.b~v.-,..`*|.`'!X...]...Dq
..~..G'.......V.b.u.2.M.......oo....,h{:.FN.......<....|..4.r..?...
.....:...o...bd..>..=s.>.Y..H7V.!..J.r.`.'.yG4.D......`.F(.....J
...<.....n...........`..*.2....Q.........Vc..7w,.r..(..T.T0......'N
...h......>......h...|B..39^...7(....VP0.....E.a.....XT8..%i.C.~...
O..ps....R.a..Z."..H.\.."..g....#....q..{.w5.....*...e.,[email protected]).
......OD..MZ9..ka.b......!.=..Vm.XIU...F2......U.P.".V\...5..I$.....-@
[email protected]?n..M2.........v.h.I....d{...q.-..ja..>..K....Y...%.m.<<< skipped >>>

GET /mw690/808700fdgw1eoo30ioszdg200o00omwx.gif HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww2.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1006.v0-kuf ( h0-s1002.v0-kuf), ht h0-s1002.v0-kuf.cdngp.net

Cache-Control: max-age=7776000

Expires: Thu, 10 Sep 2015 08:54:44 GMT

Age: 7425210

Content-Length: 1764

Content-Type: image/gif

Last-Modified: Fri, 12 Jun 2015 08:54:45 GMT

X-Via-CDN: f=TXCDN,s=46.232.206.201,c=194.242.96.218

Connection: keep-alive
GIF89a..................C.F......m.}...].....C..L..&....b...F..G......
.._..=.. ..%.....9..4..R........W.....!..............1..B..4..........
.......[..H..&.....:..*..w..t.p..j.........Q........%..1.J......8..X..
...V..{..N........>.....2..6..*.....`..&...........:..... .........
...........o....~...a.....D..m..?..%.......t...P|-.........x..P.....R.
.S..;.q...o._..y\.....]..?..b....Z.........N..-..-.....{.."..-..R.....
!..&....s .....S..7..L..K..".....$..[.|..]......E..............m..X..R
........K.........../..>.........]#...... ..........._..3........0.
.D..K..!..&../.p,..e........k..o..Y.w...g..>........I.{2.....K.m%..
......).{..L...3../....f...g..9..B..U..s......../..A..3.M......)..".. 
..!....q!.r(..9........i..I.....O..o..7..h.n..g......H..Q../../.....|.
....P.....Q..F..:...!..NETSCAPE2.0.....!.......,...............H......
*....%f..M..p.)F..I..#.*'.Z-.Db..3........A..."..M.....9.a..m.:.......
.>.Xc`.. c2D.ep..3*...$....Z..c.BA.aJZt0S....j....`J/...,@`...:fr..
......`..U.O..hR..fE...h. .P .A[........ ....g...O.5.Sk@..."..0...9. .
.4d....3...qB....J.``d.0.........5C.N.x.....(n.".....r.......;z..XQdSA
A;..C|[email protected]._...`[email protected][email protected]. .E
......(.....,..!ZT.J.O..B...R.@.<..%.$...Of.e....!.......,.........
.......o......c'.....:..W...7....$p...0...7a...6..........dK!b.?..:.0g
p...9|.<.......L..E..p.......A/5....#E....q..$..o...D./[email protected]....
s."......T....a ^....!.......,...............(e.......'[email protected].....&
gt;..8...1....T.....>.<....20....2&..f...c&...;.......4..|..<<< skipped >>>

GET /large/808700fdgw1eoo304ivslj208w05k3z6.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww2.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1006.v0-kuf ( h0-s1004.v0-kuf), ht h0-s1004.v0-kuf.cdngp.net

Cache-Control: max-age=7776000

Expires: Tue, 08 Sep 2015 09:22:06 GMT

Age: 7596368

Accept-Ranges: bytes

Content-Length: 34987

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=46.232.206.201,c=194.242.96.218

Connection: keep-alive
......JFIF.....`.`.....nExif..MM.*.............................b......
.....j.(...........1.........r.2...........i....................'.....
..'.Adobe Photoshop CS3 Windows.2014:05:07 02:44:56...................
.........@.......................................................&.(..
...............................8.......H.......H..........JFIF.....H.H
......Adobe_CM......Adobe.d...........................................
......................................................................
................................d...."................?...............
...........................................................3......!.1.
AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE..t6..U.e.....u..F'.....
..........Vfv........7GWgw........................5.....!1..AQaq"..2..
...B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te......u..F...............
Vfv........'7GWgw.................?...M<..k*....Wf?.._.1..h...4....
9.....".g...3..}t{.<|j.........Ug...(........\..HP8..n..h..;..-..]3
-...*s....Z..'......2......k.I.o.G..t.\;...Um..S.n..<.X....T....Hy.
T..Cg.?%.....J....w..7..<:g..E...........0B.. I:.<.N.qkx.pn.f.!V
..S....zN>vV%..Y \~.....W]....n..o.....>.f....U.D.p..w..zM.....B
.u...C...kY.....w.%V..v.9..9p......wm...,..]O.F I='9...s.,p..o.YK...U.
...Y.4..Q...6h.;..V][..^..=..x..D2]..X..O....=uT.......Y..i..cE.....N.
........._P.............s....||.q.=.......U..}.......:.b.K..p<T.|x]
.}...g....'......0n.t.....r.v^....$AG.qwP...4.......ON.....|v...k\....
M.K{k..w.z..`oP....O.|bU.Gw.....-m.X.....F....y.[.....U7}n......_Q<<< skipped >>>

GET /large/808700fdgw1ertro1ar2vj201x01sdfo.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww2.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: rf-ms h0-s1006.v0-kuf ( h0-s1013.v0-kuf), ht-d h0-s1013.v0-kuf.cdngp.net

Cache-Control: max-age=7776000

Expires: Tue, 06 Oct 2015 08:49:40 GMT

Age: 5179115

Content-Length: 4527

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=46.232.206.201,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:50C10448E00311E4829A962C2218238B" xmpMM:DocumentI
D="xmp.did:50C10449E00311E4829A962C2218238B"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:50C10446E00311E4829A962C2218238B" stRef:doc
umentID="xmp.did:50C10447E00311E4829A962C2218238B"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
..........................................!.1.AQ".a#..q..2.Rr3..bC%...
....................!.1AQ..a"q.2....B.....#c$%............?.d....x....
..V?...T.%..#..J.../?...&.H"S......I...PH...&c.=P..r...d,#...Y..O.zIe.
|fa....)NC.x.....&..u.t...q..R........W........H*."FP.E.....Y...^Ek...
.b^S.|..^."....j..om..z:.m?..Lps%.pp.......;OT.....kA......M.SZ.VQ>
.e.....R5?&:|G[_.v...=W7.x..du1..r...l"...C.V.}t&.p.O...0..z:.D.X.<<< skipped >>>

GET /large/808700fdgw1ertrnp2iykj201x01sdfo.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww2.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1006.v0-kuf ( h0-s1004.v0-kuf), ht-d h0-s1004.v0-kuf.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 18 Oct 2015 00:00:21 GMT

Age: 4174074

Content-Length: 4496

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=46.232.206.201,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:B365301EE00211E4B4CAE60E6557FEF3" xmpMM:DocumentI
D="xmp.did:B365301FE00211E4B4CAE60E6557FEF3"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:B365301CE00211E4B4CAE60E6557FEF3" stRef:doc
umentID="xmp.did:B365301DE00211E4B4CAE60E6557FEF3"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
...........................................!.1AQ"2...aqB#..3$..RbS5...
.......................!1A..Qa"....2#..B.............?..e~F;bB...P.* O
.y-).....KJ;.=k..:5.N.....I...)....y.I..V.=x..Ou..&.......~..K....0,..
. .'......C.o.oqa.&...J..*<a..hT...Zu. .....s/.i&.../.....&b.......
...T..IX..zn....Z.9.,......c.c.YS[Cc>;.x..o...B.]..c......f.x.8.6..
.mW..b-6..(...R.P..t...O....k).O.9.....Sr.v.....D.X.6...U.hRR.R7{.<<< skipped >>>

GET /site/images/flight/ico_en_v1.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Last-Modified: Wed, 28 Jan 2015 09:55:04 GMT

Server: QWS/1.0

Content-Type: image/png

Content-Length: 207

Accept-Ranges: bytes

Expires: Sat, 19 Sep 2015 23:33:43 GMT

Date: Sun, 06 Sep 2015 07:27:58 GMT

Connection: keep-alive

.PNG........IHDR.............|R......tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE.9..8..8..............VIDATx.T....!.......`..$F...P.A.Df...
.....`[email protected].(..h/...6..L,..u.x.....-.....?...b1...d.i....IEND.B`.
HTTP/1.1 200 OK..Last-Modified: Wed, 28 Jan 2015 09:55:04 GMT..Server:
 QWS/1.0..Content-Type: image/png..Content-Length: 207..Accept-Ranges:
 bytes..Expires: Sat, 19 Sep 2015 23:33:43 GMT..Date: Sun, 06 Sep 2015
 07:27:58 GMT..Connection: keep-alive...PNG........IHDR.............|R
......tEXtSoftware.Adobe ImageReadyq.e<....PLTE.9..8..8............
..VIDATx.T....!.......`..$F...P.A.Df........`[email protected].(..h/...6..L,.
.u.x.....-.....?...b1...d.i....IEND.B`.....

GET /flight/home/airline_pro/airline_prom1_v2.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 24211

Accept-Ranges: bytes

Last-Modified: Fri, 15 May 2015 11:25:08 GMT

Server: QWS/1.0

Expires: Mon, 05 Oct 2015 01:53:32 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive
......Exif..II*.................Ducky.......P...../hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c01
4 79.156797, 2014/08/20-09:53:02        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F94A1726F30E11E4B6F9A4FCA
BC26AA8" xmpMM:InstanceID="xmp.iid:F94A1725F30E11E4B6F9A4FCABC26AA8" x
mp:CreatorTool="Adobe Photoshop CC 2014 Macintosh"> <xmpMM:Deriv
edFrom stRef:instanceID="xmp.iid:F94A171DF30E11E4B6F9A4FCABC26AA8" stR
ef:documentID="xmp.did:F94A171EF30E11E4B6F9A4FCABC26AA8"/> </rdf
:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=
"r"?>....Adobe.d...................................................
......................................................................
......................................................................
.................................................!.1.A..Qa"2.q#3...B4.
...Rb5.6...c$E.r.CS7..d..sDt%8.......................!1A..Qaq......"2.
...BR.3..C.b.#4r.S............?...,...._.oob.h5bw...jz!.o.I..)......j&
gt;-..P......}.t;.m...P....;...kQ....<.F...`....y*.^..N.e5;."(..6..
=F.r.`j...].(......]...B4n.&.....!.YZ .....0U..'.`:R.'.h...*.9<z...
..[...S"......iPF.H.f.G..$O%.e. ..[o..5..EM=..y..Tm....x..\..Y...'<<< skipped >>>

GET /flight/home/airline_pro/airline_prom3_v7.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 72108

Last-Modified: Mon, 10 Aug 2015 08:45:06 GMT

Accept-Ranges: bytes

Server: QWS/1.0

Expires: Tue, 15 Sep 2015 07:29:16 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive
.PNG........IHDR..............N......pHYs.......... .... .IDATx.....,9
..(......!w....?..<..r..d..2o.Tf!....#.j.....n.....'....). ..$...B.
....$..B.8...$........H....#...b..:.N.....zX......U.J....^o..xs.T.....
.}[email protected]../.:.._..1.......~.s0......-.zA..o-...zA...r(..(.C.
.....(...~. !..9.r...R...%..EL.7.?EI....v.T....E....`R..H.......=...$A
./..D.j...$.....F.~...)*.b..$}.._....L..cU..|....tPa...o.'...u<K.:.
......|`..I.&.77....S!......UM.</..A..;.?4......}..^]&.c.S.3..[7q..
.[...&7..U.~...bH\..B... ...... D.2...d0.$.......9..,rQx.....JzH".....
?}....~_.?.[."2)).8!......r,...O......H.....{..\..`....j4.......z.E..S
r..#.....$.....'.Ox{4.....c.. s?..........O.3..].2.HU.M.3..R0...".yN..
...y....eO.B..:[email protected]&.....%...dH.J..=.$."H..l..,pXB.%...>.Af.
 kZ.7....u.R......~.:W..cM.$".I.. =9.`X....K.ra.-l.7..!.I..z^%Gk......
.n.Ig..3H`....S_S.y...........0....DD/$_....b-..r..}.. c (,]jj.......k
%&H...&.....2.....o.g..Okp...PR..!..._ .<.... .....L...4.K.d.0..[..
.J_......Qc'....%;..f.....P......ZY3L.........o,.,3....x....SIe"...m..
......|K..!|....~.`X0....$..R^o.5i...C..O....^.......7..&...af`.Zm....
.`O.)[email protected].>@..bS....y....$.[..U........@pI.,.."yIK....h..
[email protected]<...%.. 3..f.....) .->?@0.'.......XA.OW...2...V...[.
F.0.Z..BY/..RT..R.'u.......Y....@.%e..VK. .8..u....>..Q<..`.....
=^...?...'.......(....9.["4.Md....s.....F.......@,.L0.r.C..2...`.\....
..*......S.G4.p`D...e......0.Z..UO..RJ....f...[.Qz...&ZO.0.Im..&JH...&
.=.....$....E.../6......8.m.4.9....4.S4P..d.*..'\........@...=....<<< skipped >>>

GET /flight/home/ico_hm.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 757

Accept-Ranges: bytes

Last-Modified: Thu, 21 May 2015 06:15:08 GMT

Server: QWS/1.0

Expires: Wed, 07 Oct 2015 02:04:37 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive

.PNG........IHDR.......<........F....tEXtSoftware.Adobe ImageReadyq
.e<....PLTE........................................................
......................................................................
...VVV.........sss....................................................
.................................e.....f..........(...QtRNS...........
......................................................................
h......;IDATx..R.r.0..Gv...t.....D...5%..I....D.!.......:.|."....M.0S.
 )r[.L.....A.."..h\..9.j..s....j1........v.....?.,..I*...h.......y.r.Z
k...\=_.......tn....*......./...Yu>..G.P....eW}..k&..1y.......#^...
.0Fl8A..cU.f......Iy...N..g.Q..=.....LTe...][email protected].(
 g......q: .).#.L.........$:.e....%.]O.........E.)........IEND.B`.nt>....

GET /site/images/ico/dbt_14.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 1234

Accept-Ranges: bytes

Last-Modified: Thu, 16 Oct 2014 08:55:06 GMT

Server: QWS/1.0

Expires: Tue, 06 Oct 2015 12:54:06 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive
.PNG........IHDR.............\.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5551C5C7545711E4A318CE3B
C733C8F8" xmpMM:DocumentID="xmp.did:5551C5C8545711E4A318CE3BC733C8F8"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5551C5C5545711E4A3
18CE3BC733C8F8" stRef:documentID="xmp.did:5551C5C6545711E4A318CE3BC733
C8F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.(>.....PLTE...S....."..b...........v..D
..............~..o..w..Q..j.....5...........a........t.....V..........
._..'...............................~t...,tRNS........................
...........................~IDATx.d....1.C}....;[email protected].
[email protected]!...y8.L)b._.Di...n.......y.=.a../h6N....$....K
..5Y..Bi...-..A.%.G.n.....IEND.B`.....
<<< skipped >>>

GET /flight/flight_inter/list/icon_dire.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Last-Modified: Mon, 20 Apr 2015 06:40:24 GMT

Server: QWS/1.0

Content-Type: image/png

Content-Length: 1031

Accept-Ranges: bytes

Expires: Fri, 25 Sep 2015 19:35:35 GMT

Date: Sun, 06 Sep 2015 07:27:59 GMT

Connection: keep-alive
.PNG........IHDR.......d......Wp7....tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE...&.......................................................
.....................................   !!!"""###$$$%%%&&&'''((()))***
   ,,,---...///000111222333444555666777888999:::;;;<<<===>
>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSS
STTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjj
kkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~..........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........................z..5....tRNS......A....IDATx...A.. ..c...}R
).i1....Jr..!....aI..0...a.........L~N.....;c....Y... 8.-.......].'.6.
..g...n6.%.....`....`j....L....sm~w.EC..r...f.W...`.....K.J.....IEND.B
`.....


GET /site/images/flight/flight_search/btn_normal.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 2662

Accept-Ranges: bytes

Last-Modified: Wed, 26 Dec 2012 08:35:14 GMT

Server: QWS/1.0

Expires: Thu, 01 Oct 2015 01:53:04 GMT

Date: Sun, 06 Sep 2015 07:28:00 GMT

Connection: keep-alive
.PNG........IHDR.......X.......<.....tEXtSoftware.Adobe ImageReadyq
.e<...pPLTE........................................................
............................................Q...&{.$/.. {.............
.a...."r.......$t..h.h...~.)y...2m...Z...*.`..b..f.(x..d.y.#.....3.|..
.....y.............. p..n.{.!.w..v.....V......).S..j...)u..|."s....'.j
..t.w."m..}.%,}..X.....p.q...f..z..\..b..~..r....q...^.k...d.i..r. %v.
.U...'o.... .h.../.n..m...5..-w....... ..0.k.~.$u.!o...l.l..._..P..q.f
....6....q.0.......,.O..p..r.k..1.......7..-.^.e.................... .
.E....I...,........|.5......y.1..Y....................a...............
 `.D...........s. v./..@.............~........}..m....!a.0o......./o..
n.#b............tRNS..................................................
......................................................................
......................................................................
....................9.....IDATx....r.g.E...<.II.H.-..ff.'.3s.ff&33.
.......r..}.R...LyU.z....bW...p.......qy .....P...)..K.B?.@....}..._W 
.....L...*..y.B_.@....}....V ....>^........l...B..f..F...BO..ha..k^
XM9...SXM9...SXM9...SXM9...SXM9...SXM9...SXM9...SXM9...SXM9...S..k[...
[email protected] .....R..o)..\.B..@.[..}....U 
.}..>O...*..*[email protected].....<.z....<!.m..F..K.i...K.ym..)...r..)
...r..)...r..)...r..)...r..)...r..)...r..)...r..)...rJ#x..f..m.w...6.h
..6..R....,...)e..5....]!t-.].'..n%.....z..<.z0.....B.!.......DtsS.
..E/...B/'........Y...6.h...%t.W........C/.....6..UGD....L..^.....<<< skipped >>>

GET /site/images/flight/home/img_qnkhd.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 8490

Accept-Ranges: bytes

Last-Modified: Tue, 11 Mar 2014 13:52:42 GMT

Server: QWS/1.0

Expires: Thu, 01 Oct 2015 18:39:19 GMT

Date: Sun, 06 Sep 2015 07:28:07 GMT

Connection: keep-alive
.PNG........IHDR...z...z.....G.......tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE***........................................................
......................................................................
SSS............===......888))){{{....q..........MMM..................x
xx...DDD.o.000...___mmmJJJ...............---...............&%%GGGjjjLL
Laaa...ggg...POO............}}}.......{.:::666.l........v.UUUAAACCC222
......(((uuu...\\\.x.......WWW...ddd...QQQ...$$$...###444...rrr...""".
.....ppp..................'''.........FFF......vvvYYY.Pn....PX........
.......!!!............z............s....#...i........-8...7..k...4>
....",.............z..ENb........Y...d.;..S..}........1|.<..u..K...
.........Sf...B75n...BL............e..o..0'%...%..sSP...&fp.OZh][!PU..
....1$ 3(&R@<......V........'S^... =ES........7....................
..IDATx.|[w\[email protected]>.i.`...8g....~......6....s.w/.
.........a|e.p.5..tuu..QM.U!...8-,..F...;P|...,.kT.F[h.*....^s...dr...
C..Wpx..m$.;\R20{../,H.s....&a.:'B....$.....ll.`{......B#....j..c.$.s.
a4.TB...8z.... .B:A.0&A...@..?$...F.{..0.a..B....Y..n..:.Y.......##...
..?lAn_.7#..4.y....oY...........7...-.<5.O..~z_.02.o.!..&"#........
..I.....Q.E...6.(.2.....[.6B....n1a.R.2..^...a..>k.j5Z.u..^.......F
...........}....Gfl..Q4} ..L/!0<.#..."t$...z.999..h...E....C.K.4H..
&...5......$V7.BIu...[.)KM.$.>%c..# o...j..C....^..#E.ho~..C;.A"E.(
R'....1.z..K1.fd.nA....zD.J.^.......... Ni.:.c.Y[..w.......)D..M).CB.B
....V. v.....i.-.p.......>....A....Z..K(.O..*3...T.......N...z.<<< skipped >>>

GET /site/images/airlines/SC.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 1232

Accept-Ranges: bytes

Last-Modified: Wed, 01 Jan 2014 14:03:10 GMT

Server: QWS/1.0

Expires: Wed, 07 Oct 2015 08:52:56 GMT

Date: Sun, 06 Sep 2015 07:28:09 GMT

Connection: keep-alive
GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................||.}}.xx.yy.{w.u
u.vv..j.ll.sj.olvllzll.ii.pjwikwkkw{d.ff.ta.ee.dd~l^.xY.ccdb`.[^.^^.c\
.X].WY.ZZ_XX}XXpWV.TU.WVrUUwTTx\Q}QRx^G.bHv_EpKKoII.OH[VAfGDlEF`BDoJCc
DDeSAOAAo@@jO:a>>t==g><`==e>=G::d<>@9;[F4O35`81U3
3Y//`..[--S  b,*Q''S&&Q%%N"#F..[..I..T..J..G..Y..M..F..E.. ..?..6..O..
B..?..>..8..$..*..<..9..G..0..?..B..4..3..2..1..0../.....-..*..)
..(..'..&..%..$..#.."..!..............................................
......................................!.......,...............8...)Q..
 ....&.z]..-..........4i}..\.&c.*..Q.......!\.u##.r.s.. [email protected]... .cY.iH
...3.O,..5,.3..,nI.A &C..a1.zp....'[email protected]`.6....0pA.
`..N..A ...Y..X...$..3.!P....z..2N.....Y.('.@U>.:.vl.......2I . .7]
C...bp..JQ$.......2...brx.*.$........r.,sVmE..!#.........I.Zp.....H...
u0.....2..6<.........h!......@[email protected],......a.(.... ..s....
..9..........h.aF.DfA....CK.....8Pv#..Sv.B..$QJ3....)[email protected].$c..CT
.Q@.;....


GET /site/images/flight/home/ico_arr_ad.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 247

Accept-Ranges: bytes

Last-Modified: Wed, 02 Apr 2014 08:00:03 GMT

Server: QWS/1.0

Expires: Thu, 01 Oct 2015 08:25:25 GMT

Date: Sun, 06 Sep 2015 07:28:15 GMT

Connection: keep-alive

.PNG........IHDR...$...#.......X.....tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE....i...............9~....tRNS.............iIDATx...1.. .C.
i.......C......m..A0*x......yA...J.'o:oOG...F...A\)B3.@.!V......c.Xy..
.6.u%..7....n...G.......!3.}....IEND.B`.HTTP/1.1 200 OK..Content-Type:
 image/png..Content-Length: 247..Accept-Ranges: bytes..Last-Modified: 
Wed, 02 Apr 2014 08:00:03 GMT..Server: QWS/1.0..Expires: Thu, 01 Oct 2
015 08:25:25 GMT..Date: Sun, 06 Sep 2015 07:28:15 GMT..Connection: kee
p-alive...PNG........IHDR...$...#.......X.....tEXtSoftware.Adobe Image
Readyq.e<....PLTE....i...............9~....tRNS.............iIDATx.
..1.. .C.i.......C......m..A0*x......yA...J.'o:oOG...F...A\)B3.@.!V...
...c.Xy...6.u%..7....n...G.......!3.}....IEND.B`...

GET /event?a=17463&v=3.4.0&p0=e=exd&site_type=d&p1=e=vh&p2=e=dis HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: widget.criteo.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Location: hXXp://widget.cn.criteo.com/event?a=17463&v=3.4.0&p0=e=exd&site_type=d&p1=e=vh&p2=e=dis

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:28:12 GMT

Content-Length: 230
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://widge
t.cn.criteo.com/event?a=17463&v=3.4.0&p0=e=exd&site_type%3
Dd&p1=e=vh&p2=e=dis">here</a>.</h2>..</b
ody></html>..HTTP/1.1 302 Found..Location: hXXp://widget.cn.c
riteo.com/event?a=17463&v=3.4.0&p0=e=exd&site_type=d&p1=e=vh&p
2=e=dis..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Sun
, 06 Sep 2015 07:28:12 GMT..Content-Length: 230..<html><head&
gt;<title>Object moved</title></head><body>..&
lt;h2>Object moved to <a href="hXXp://widget.cn.criteo.com/event
?a=17463&v=3.4.0&p0=e=exd&site_type=d&p1=e=vh&
p2=e=dis">here</a>.</h2>..</body></html>.
...

GET /fxstatic/images/yellow_warn2_b8d73e7.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: image/png

Content-Length: 1124

Keep-Alive: timeout=20

Last-Modified: Thu, 03 Sep 2015 10:04:19 GMT

Expires: Sun, 04 Oct 2015 04:29:56 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:E12878A9A5E211E49D77EC7E91
FBAC91" xmpMM:DocumentID="xmp.did:E12878AAA5E211E49D77EC7E91FBAC91">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E12878A7A5E211E49D77
EC7E91FBAC91" stRef:documentID="xmp.did:E12878A8A5E211E49D77EC7E91FBAC
91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>L.. ....IDATx.b......p.q.....1..q ^..S....i6.
.u@,...,.8.....>[email protected] ..&
lt;.....f .'.9d.....o..q{..v ....w2.....g.4.,...d.....R]q..w0"..E >
...Dh.%cs.0@.<N@.> ..i....A%..8....i..._...P... ....,.Qu......IE
ND.B`...<<< skipped >>>

GET /live/2015/08/20/14/1010v1440053194108171729_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 14 Aug 2016 06:48:35 GMT

Date: Thu, 20 Aug 2015 06:48:35 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7374

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 20 Aug 2015 06:46:33 GMT

ETag: "685730896"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 hzh92:8105 (Cdn Cache Server V2.0), 1.1 sm29:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.....w.U...ww4.N...V'zo..%zY.w...QV..D... !H.(....]BD.N.....(A...}....
.}...3wn9........h.u.t...........h...@. "bb.1..1)9.99..9...J.f...f.&&6
N.n6v>.&&.1.>A.{".X.....?...'.......rRrzrrza6&6..o....%...n....B
Z. -..^[email protected]....^..[.*.....HLt.I......D. ......$.....Ro?.3.Yt3j.
i..O.....H'f.........t..-?..$H{{M..n....-...$...9/.... ....%...-......
....E.....%..#..e..%..'.2...0.'........1r\>..~.."..p..>.5.n..k..
.&.....N.zX&5....K.6.9P...H.Udz.a.......w@w.`..OGB....0..O...2Bm.*}.a.
..Tb.7.g..;..a.N.5........R.k........i.?.....IF...'.*|....y....L.`....
.5.h...A..\..7...N>...%.Z..~....0.....4.....&.U..J;.?.!'g.6..W....Z
...`[email protected]\..Z)..%|!!.$$% T.#...*\..m..lI.k.C...HR
....E.f5Q.~...3.......H.....xce......q..\~..d..p..\..Jw]^...xH...n.Z..
.OA.~\..7j!........._e.k8p..l.T/x..}%....<c..... 6{w$.....c$...t..&
-O=.. kO.....'.r.v....\..y./.O...QP...j.n.C.oX.....tIGR........h...E0.
*[.B9.4.x.X. &..z[...S=>U|3..|.2.tu.."....:r.Hf.n...Y$.......*...;.
....P..v...Rd........m.i...].F.T.O.}<.........qF .RiT..I.....0s.c..
e.5.ZT..?.*..z."d.H.........p2..f^D..AEkJ.p....~.....q..fY..K.$...e..I
..Hy.............S.$ NJa....d.e.G.....r.......<fN.!.C|Y.z..x...f(..
.K`#[email protected]._J..X.....X.V.z.W..
I./.......o*..&Z...xA*.\1!..P.......},c...v.........\..?.D...?.Ci.....
\=..jQ*....L......^[email protected]."[email protected].?P.`.#..E...4=_...a
...s....'.n3.4(k't....7k.G...........uI.g............9W..@...!.:...w..
..y"....x.}.|.. ....0...........B....v2.......`8....*...J..<...<<< skipped >>>

GET /live/2015/08/22/02/1003v1440181490946282973.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 17 Aug 2016 11:09:30 GMT

Date: Sun, 23 Aug 2015 11:09:30 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5952

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 21 Aug 2015 18:24:50 GMT

ETag: "590807105"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou88:8105 (Cdn Cache Server V2.0), 1.1 sm28:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.....l.U....uT....?c.[.at3..=`twHK....E....%..T...".!%....QP.,...9.s..
..}..:.{...z.z.......@ ......U@. ....CHH.IHII.(.((..).ih..n123.bdb...s
BYy....ns.....a,[email protected]&...Z...=.....A...=.L.......D
._../b...B......t.....A .D...(..G..opK...0..0J.....f..4.vm.#..........
.`..0..3&&......../[email protected]..%
) .8..IrI...0.....@..|..)g^k.j.V##3.L.qQC......!..*.n..*-.!...r..p%.1.
.d..i.^[email protected]?<T..VR...X`.ET-.E.D.M........$...`%.......J.q..
D..MY.S`....?...|. .....A.3....vA.~i..4..WVq.:=..%'._z$.....!bU....u.A
.9.lRC...Z......1..G.......6[.3.]..a..U.h.....o....."...pM....UUU*|..2
M]..R.(.g.....3.........s....<...........Z....!#....'.36.....].*9..
`kK.W......q\.............e.........M-.y(..qK.o1...P...1a....`;.......
dXeK)k.A..<.f....Sf....w.%..@;.U......k.B..Ic;4.2g....b...v?\...Q.G
........OM'...n...N.]w..*......7<.4.....o......p....=..G0.....Q .s.
.t~..e.n...D.5.>...a....~...&..8Px.....7Hp........'i....j'..R....az
.U..QPK.....y...........3...'Dg.a.-g;fC...5.[./&.z.G...Pa0..O*.fX.,@..
r..D.%!.d2....<........,e..G..nJ.{..i.V.p..z.....x%....'..F../..'h.
..N.X.'.E.k.......j......D............X.?X7"...a..Pi[^.Z7d.......U..o.
....Fh.O...>.s.\..|rMF;n>Lr..........f.....5..QDX2bD.rC.]w?....H
......t....KP....YmE.(%..r3.TG$W...[........H...P...............x...%.
..a... .....b...WTn.9oN...R.k.d<*O.&D6....\....%.....1..:l..V......
.....C..".q......%...l[...w...m....du.....s...]....$..h...u. ..c....W.
...-..).Q..G..klr".YO; .........s.*/.d..u...ma..&"..i#.4......L...<<< skipped >>>

GET /live/2015/08/27/12/1010v1440648332755373327_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 12:30:35 GMT

Date: Sat, 05 Sep 2015 12:30:35 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8015

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 27 Aug 2015 04:05:32 GMT

ETag: "2223924213"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:8105 (Cdn Cache Server V2.0), 1.1 sm26:0 (Cdn Cache Server V2.0)

Connection: keep-alive
[email protected]...\......w..{p..4........6....>..O.
_....p.....M.....,.... ...^W.R..$d.d$..d.TT.4t\t.7o...q0q.....%$&&.|OM
FNGALL.JC.........#.....L..1A@EEEGC'@G'`$#&c..........<..h..x.@<
..>......D.....H(...h..T.....D.. ..Q...(."..........V.l.....HH.O$iV
....:.uq.F....H*.g@..@.?.......!:<.....9."...?c.$0!.)............. 
....H.Vu.eR..7....vD...z....~.........H...l.,...o.........X.....m...$.
.....I.8'...:.I.b.......9G.$.'A/.......u2W.........&.........9..w.H.. 
/..L.Z.5.....bE|.7.x...-&.X...9..{......I..P...nez...q-43.-8..|q.....;
73.7.........>.a.\ol......lm.yw.f`......p7..2E..A..W....)e..\.,o0L 
.]....l&hI. ...u....,.."m.YPIVK..6)@$...G..0JC.)O.=.F........dA.Xf...o
/5.. .7...;J..q.......5..,..*K..3..C.3....}.7...k....]S..N".KT...!..S.
.|.......1.....5.Z...f.MF..1.....r?'([email protected](...!.G?.~i\O...h^...e....
'.;.m04)...T.J..p........"..3.A.K....523..";.r.4.z....c.A&............
..i..._..c..G...M.9^.i..p..T[......_...Z......Xi.~uI...m"..[..\.L'.`._
....W...:pZ@......]SE....t.;.P.~.>%....^D.U.W..t.zh'8..q.4.Wp.0....
...`...~^..]T.D.......18.rC..z...U9...........X&..S...................
..i......_.h ....w}..).>[v..,........n...y.. .>.W..7.O.G^..s.)EH
z[...ot..<fyq..[|%n.......D%>}A.).SaI..K. ..8....P.....RHo*.z..^
.O..TM.=..b.._......n.......B.e..XF.Xw..<5...%...E..(.@[......]Y|..
 C.........WsM5qH.d.\{.;2p3^......:_...)..[...........S.w..wkq.>...
9..FR.....q. (f.Bv....$c..I.In....F..H`.R{9...s.aV.Am...&....}.aB....L
7,..%^..T....V~Kdu...q............_...v.i...,.Q<........HZ>.<<< skipped >>>

GET /live/2015/08/29/23/1003v1440862419512215827.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Aug 2016 09:02:24 GMT

Date: Tue, 01 Sep 2015 09:02:24 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8109

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 29 Aug 2015 15:33:39 GMT

ETag: "1963649229"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh86:8108 (Cdn Cache Server V2.0), 1.1 sm26:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...veT.P.........3.PJJ.....0twJ (!..-.H.=....H. H7H.....w.....
?.s....y.>{[email protected]."B.... ..@2 ...HNJJBFINIIANAAE
[email protected]:.":.....
.@@Lt..... &!%$"...V.....&$&"!&..na.B"b.....KT....-...X.eJa...~L......
z.......~..m.V....s..@x.. .-.w..V.[..[......q...*......mS..7...[.... .
.]....'_.h.0I|..WZ........M./p)6..*.v......0 >...R)...P.G....-.x?.*
Hqy...... 4r.(.#.....m">.....Q>.N...!U.P.g......S....64#[email protected]
U..C.9N.....}>......x..2(.z......V..\]]..:.@'.3.x.{Ms...I.vH0.E....
u..SWA.tA..atB..R.yZu\..x._r..k.Tu1..e.U.V1.=.p.]....zS.W.....o..P...q
..{*.....^...{.V..v.@R.~9..a..!y8...u....C...i"....,Nqa.M........}....
...;Ii#W*.....7....U<.:.......s..`k@/.b?... ....8....c4..f.4..@....
.r6.P].t.,..H.a.........,).Q.q.,.....g..ruZ....C..C S.(>Y....vo....
*v.%w/.R}..p.=..#..Y.q.e.....jk.&.u...px,xIH*.&......$s&:...A.F.7~..._
.....'c......m..L.. c.2...#....p..1i.w:.........\...../..v...o........
T..p>...MO.4v..i.....!ru....S.........&e....w....a.7$L#*....c...cc.
c|R...7'`S-H..R2{Me..S..x/..i.5......`.....P`.T..v.C!...K.......c..R9&
...!a2 ..D.C8.y(:L...........T%.r'@....cX'U.H.....g..........#..v.....
...UU89\..7..z3.........R........'.d.2.....f.2&.o...}..G..N.k=-.A...5.
D..g.....;.....Q.(...$7Sn....UD.~9.L.,.}...~.<..L..{.3....Ht.....\.
...\zG?.`<s...p.N$...( .Gu:6.......=......,x..}i.&......._<..<
;].z!........%.Bn..!...^.1s...3$i..q.G..Ab..{C.It4.....X....i..|....r.
.............|..?9...d....U.qP.>....(....E.....f........ss....'<<< skipped >>>

GET /live/2015/06/24/00/1003v1435076285361226983.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 20 Jun 2016 05:39:11 GMT

Date: Fri, 26 Jun 2015 05:39:11 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6767

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 23 Jun 2015 16:18:05 GMT

ETag: "2755270777"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou89:8108 (Cdn Cache Server V2.0), 1.1 sm26:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...ti8.....0c.]%.0f".(...c.![%&Y.l..%....u..B.(.,!*k...!..O..z
.....>..}.}.s>......3JG_........b...(A......%.......QSCh........
..X...X....9.Y..988..q].d............*0-.L..H.....E..B...i............
....0.....P..T..0.......P.....J....."..%@.f...J.S....{.&...K..........
<...!..k.F..(..6.... .... [email protected].....?m*..0...MP..]Z....b.`.g.b.d.
T..."...R.O.#...u5.:F...*.qaV.{^5.....?.qm.h .....P.$J..../.=/.ix.....
.....!V[.....}1..Ha..)...HtXCy.A8z.|.Ks../.......D....].:z?.........Q.
.5G.fZ..`2o....:...../.-..iZ...>..o.]..)Y.6.T8.s....^.zs...K.......
.....S......F...<a.x.m....R.........BS.]..[.G..Nc.1.M....7.........
..p.$.KV.?vOH.....O.Qm.CE.....J:....O.....=J.E.....<...............
w.,[email protected]_l78.......j.....*b.....zE.v4.`F=...Q..f..7
...:7....Y...)...%.*.....9.......f*.&.7b..1...3;9..h.^.k....`....uXqC.
..5S.l)..W...udj...<....h..?..G.?jM.sY.Xg..n&H|P.....>sW..4.....
..k.O...N.>. .;.2.`.'..a..Cq....Q...a.q...\.A....!.j.k.....E.F.....
.._.FmD.o....d,.:.q;.....^.>..=8o....._...m....(..e9.o..y..3.P.....
#[email protected].=..w`1;.J./ .x..=.. ..4az_.........%.<.
...N(.k.xr|o..........){8...E.i&k.Q_6..).Z:.T.`\[email protected]
....v.]:.f.Hm......5M}.cr..*..d.c.N.7...z[..j.O.2.[.........V..sA.S.;a
.Up..p....k'.........7..}..r....S..|e.?:..|.ul..i...!._.6.r.(..$..(..]
..2...B..6.`....LE..A..0L.H........w..8...:..6..|[email protected]....
d-.....J......0(.5.]..&o...;F..2.SG.mz...\~.....I.....*...=.....L...w.
...3Z..B.Q..F...IF.i&t.Q.-5W...U.....o.7x#..0.7....o.c?....=./..y.<<< skipped >>>

GET /imges/live2014/header-bg-v3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:11:54 GMT

Date: Tue, 10 Mar 2015 07:11:54 GMT

Cache-Control: max-age=31104000

Content-Type: image/jpeg

ETag: "543844006"

Last-Modified: Wed, 30 Jul 2014 07:16:57 GMT

Content-Length: 13677

Server: tux/3.3

Age: 1

X-Via: 1.1 tzwl34:8105 (Cdn Cache Server V2.0), 1.1 quanzhou242:5 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......Z.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:04EB36198705E4119
C88904029588FC3" xmpMM:DocumentID="xmp.did:7D70DF6817B911E4BC549597C1B
46877" xmpMM:InstanceID="xmp.iid:7D70DF6717B911E4BC549597C1B46877" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:D1DF01B9B317E4119456AC7A1BD277C6" stRef:doc
umentID="xmp.did:04EB36198705E4119C88904029588FC3"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
..................1.@.................................................
.....................................!1.A..Qaq."..2.....B....3.#..r.4R
b.CSs.........................!1A...Qaq.....2...."..3...............?.
.j....JR...3.W.F_..O..o.|&E/..!........x..Q8.(H4.Ld.B(.F.....T..VC..`I
..J....C;....]DM....a.G../....w..Z....Eu:.|....9F....!.%..3.vq....q..s
..Gj......YC.BR...@.(........T..Y...K.;uIH)......8.....6Rb4.I%..V.<<< skipped >>>

GET /imges/live2014/header-bg-v3.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:11:54 GMT

Date: Tue, 10 Mar 2015 07:11:54 GMT

Cache-Control: max-age=31104000

Content-Type: image/jpeg

ETag: "543844006"

Last-Modified: Wed, 30 Jul 2014 07:16:57 GMT

Content-Length: 13677

Server: tux/3.3

Age: 1

X-Via: 1.1 tzwl34:8105 (Cdn Cache Server V2.0), 1.1 quanzhou242:5 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......Z.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:04EB36198705E4119
C88904029588FC3" xmpMM:DocumentID="xmp.did:7D70DF6817B911E4BC549597C1B
46877" xmpMM:InstanceID="xmp.iid:7D70DF6717B911E4BC549597C1B46877" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:D1DF01B9B317E4119456AC7A1BD277C6" stRef:doc
umentID="xmp.did:04EB36198705E4119C88904029588FC3"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
..................1.@.................................................
.....................................!1.A..Qaq."..2.....B....3.#..r.4R
b.CSs.........................!1A...Qaq.....2...."..3...............?.
.j....JR...3.W.F_..O..o.|&E/..!........x..Q8.(H4.Ld.B(.F.....T..VC..`I
..J....C;....]DM....a.G../....w..Z....Eu:.|....9F....!.%..3.vq....q..s
..Gj......YC.BR...@.(........T..Y...K.;uIH)......8.....6Rb4.I%..V.<<< skipped >>>

GET /mshow.aspx?AID=10851 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.cfmogu.com/6.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pic.pay838.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionIfrmADShowTG=976; expires=Sun, 06-Sep-2015 10:27:33 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:33 GMT

Content-Length: 4281
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y.^.>....u....i...].o.
...W..[,...v....|...E.L.....U..o5w~qq...6w..]...>:l...fLo..4.....w.
........>;........w..9..)..%...W.y^..../.v.a[_.....b9...m.....z./.q
YM3.5..../.......5.hqH....q.L.U.e.q...e....}.K~I0...;..l.....v.H.f..C|
.|../..0..>....a..2.J.fm~.|.|../\.?.6.."o.......6........U......"..
r.Y]....A../N...>...~&...'h..G.m}..;....l....v.(N..w,.c.9^0....;...
^*u.........1_..ey........r..Z.R.n.~..G....O..........;.'i.~ .t.......
s.A...EN.>"....[.....p..........i".C...../..n.byA...`*`.......~....
:.|..*..X. ._..j..., ...89.2D".....C..g...........>...2.d..b0..e.Kb
....".t...g.w.m..[.;#...G. ..>.}.;.._....O....A.......*g...R.3?...A
.............S...:......~.g...O<.. "....*.}.......3..|.. ...'.W...M
.u....<. ...w..................>...7&....e>. .=.-..&?[.[Q...|
.{.{......{...m...G.yF.t..B...G...y..~....(b..F\S..nl....9}.:;.."..Z..
_..:.?o.../.6{.f..)F.E....v^[email protected]..^O..,V..%F..j.
.b.m.6.$.[.9h.MH.h/..I.1i..2...P....6.......W....mZ.>..._.~....;.w?
%....QzU.H.}..Q:...y..N..i........>}.....|.w|.o...}..x{...}zo......
..C?Nv.....d..?....]...c.fo#6{..!....>ZUM...(.4U.&KW.......C2......
.o...|Z..G{O....{;.........@}..}..(..c..s...y..d.8..=.|V\2.og.....<
 .rV..-i....yU/...6i.t.....4..#.@4....~..3.i....}8)..[.P,W.6m.W..YO...
.. e...G........o..^ ......A#8........Fb\.?.3.[K...... [ _.#y.4.f.L\j.
Mk..9..v.^!...y..{...lj~}K.M~...7....q.a...W.....o.u).2.....U.,..B<<< skipped >>>

GET /mshow.aspx?AID=10850 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.cfmogu.com/8.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pic.pay838.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionIfrmADShowTG=894; expires=Sun, 06-Sep-2015 10:27:34 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:34 GMT

Content-Length: 4293
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y.^.>....u....i...].o.
...W..[,...v....|...E.L.....U..o5w~qq...6w..]...>:l...fLo..4.....w.
........>;........w..9..)..%...W.y^..../.v.a[_.....b9...m.....z./.q
YM3.5..../.......5.hqH....q.L.U.e.q...e....}.K~I0...;..l.....v.H.f..C|
.|../..0..>....a..2.J.fm~.|.|../\.?.6.."o.......6........U......"..
r.Y]....A../N...>...~&...'h..G.m}..;....l....v.(N..w,.c.9^0....;...
^*u.........1_..ey........r..Z.R.n.~..G....O..........;.'i.~ .t.......
s.A...EN.>"....[.....p..........i".C...../..n.byA...`*`.......~....
:.|..*..X. ._..j..., ...89.2D".....C..g...........>...2.d..b0..e.Kb
....".t...g.w.m..[.;#...G. ..>.}.;.._....O....A.......*g...R.3?...A
.............S...:......~.g...O<.. "....*.}.......3..|.. ...'.W...M
.u....<. ...w..................>...7&....e>. .=.-..&?[.[Q...|
.{.{......{...m...G.yF.t..B...G...y..~....(b..F\S..nl....9}.:;.."..Z..
_..:.?o.../.6{.f..)F.E....v^[email protected]..^O..,V..%F..j.
.b.m.6.$.[.9h.MH.h/..I.1i..2...P....6.......W....mZ.>..._.~....;.w?
%....QzU.H.}..Q:...y..N..i........>}.....|.w|.o...}..x{...}zo......
..C?Nv.....d..?....]...c.fo#6{..!....>ZUM...(.4U.&KW.......C2......
.o...|Z..G{O....{;.........@}..}..(..c..s...y..d.8..=.|V\2.og.....<
 .rV..-i....yU/...6i.t.....4..#.@4....~..3.i....}8)..[.P,W.6m.W..YO...
.. e...G........o..^ ......A#8........Fb\.?.3.[K...... [ _.#y.4.f.L\j.
Mk..9..v.^!...y..{...lj~}K.M~...7....q.a...W.....o.u).2.....U.,..B<<< skipped >>>

GET /mshow.aspx?AID=10850 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.cfmogu.com/8.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pic.pay838.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionIfrmADShowTG=1804; expires=Sun, 06-Sep-2015 10:27:34 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:34 GMT

Content-Length: 4309
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y.^.>....u....i...].o.
...W..[,...v....|...E.L.....U..o5w~qq...6w..]...>:l...fLo..4.....w.
........>;........w..9..)..%...W.y^..../.v.a[_.....b9...m.....z./.q
YM3.5..../.......5.hqH....q.L.U.e.q...e....}.K~I0...;..l.....v.H.f..C|
.|../..0..>....a..2.J.fm~.|.|../\.?.6.."o.......6........U......"..
r.Y]....A../N...>...~&...'h..G.m}..;....l....v.(N..w,.c.9^0....;...
^*u.........1_..ey........r..Z.R.n.~..G....O..........;.'i.~ .t.......
s.A...EN.>"....[.....p..........i".C...../..n.byA...`*`.......~....
:.|..*..X. ._..j..., ...89.2D".....C..g...........>...2.d..b0..e.Kb
....".t...g.w.m..[.;#...G. ..>.}.;.._....O....A.......*g...R.3?...A
.............S...:......~.g...O<.. "....*.}.......3..|.. ...'.W...M
.u....<. ...w..................>...7&....e>. .=.-..&?[.[Q...|
.{.{......{...m...G.yF.t..B...G...y..~....(b..F\S..nl....9}.:;.."..Z..
_..:.?o.../.6{.f..)F.E....v^[email protected]..^O..,V..%F..j.
.b.m.6.$.[.9h.MH.h/..I.1i..2...P....6.......W....mZ.>..._.~....;.w?
%....QzU.H.}..Q:...y..N..i........>}.....|.w|.o...}..x{...}zo......
..C?Nv.....d..?....]...c.fo#6{..!....>ZUM...(.4U.&KW.......C2......
.o...|Z..G{O....{;.........@}..}..(..c..s...y..d.8..=.|V\2.og.....<
 .rV..-i....yU/...6i.t.....4..#.@4....~..3.i....}8)..[.P,W.6m.W..YO...
.. e...G........o..^ ......A#8........Fb\.?.3.[K...... [ _.#y.4.f.L\j.
Mk..9..v.^!...y..{...lj~}K.M~...7....q.a...W.....o.u).2.....U.,..B<<< skipped >>>

GET /mshow.aspx?AID=10850 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.cfmogu.com/8.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pic.pay838.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionIfrmADShowTG=1811; expires=Sun, 06-Sep-2015 10:27:39 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:38 GMT

Content-Length: 4293
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y.^.>....u....i...].o.
...W..[,...v....|...E.L.....U..o5w~qq...6w..]...>:l...fLo..4.....w.
........>;........w..9..)..%...W.y^..../.v.a[_.....b9...m.....z./.q
YM3.5..../.......5.hqH....q.L.U.e.q...e....}.K~I0...;..l.....v.H.f..C|
.|../..0..>....a..2.J.fm~.|.|../\.?.6.."o.......6........U......"..
r.Y]....A../N...>...~&...'h..G.m}..;....l....v.(N..w,.c.9^0....;...
^*u.........1_..ey........r..Z.R.n.~..G....O..........;.'i.~ .t.......
s.A...EN.>"....[.....p..........i".C...../..n.byA...`*`.......~....
:.|..*..X. ._..j..., ...89.2D".....C..g...........>...2.d..b0..e.Kb
....".t...g.w.m..[.;#...G. ..>.}.;.._....O....A.......*g...R.3?...A
.............S...:......~.g...O<.. "....*.}.......3..|.. ...'.W...M
.u....<. ...w..................>...7&....e>. .=.-..&?[.[Q...|
.{.{......{...m...G.yF.t..B...G...y..~....(b..F\S..nl....9}.:;.."..Z..
_..:.?o.../.6{.f..)F.E....v^[email protected]..^O..,V..%F..j.
.b.m.6.$.[.9h.MH.h/..I.1i..2...P....6.......W....mZ.>..._.~....;.w?
%....QzU.H.}..Q:...y..N..i........>}.....|.w|.o...}..x{...}zo......
..C?Nv.....d..?....]...c.fo#6{..!....>ZUM...(.4U.&KW.......C2......
.o...|Z..G{O....{;.........@}..}..(..c..s...y..d.8..=.|V\2.og.....<
 .rV..-i....yU/...6i.t.....4..#.@4....~..3.i....}8)..[.P,W.6m.W..YO...
.. e...G........o..^ ......A#8........Fb\.?.3.[K...... [ _.#y.4.f.L\j.
Mk..9..v.^!...y..{...lj~}K.M~...7....q.a...W.....o.u).2.....U.,..B<<< skipped >>>

GET /mshow.aspx?AID=10851 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.cfmogu.com/6.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pic.pay838.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionIfrmADShowTG=1811; expires=Sun, 06-Sep-2015 10:27:46 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:45 GMT

Content-Length: 4290
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y.^.>....u....i...].o.
...W..[,...v....|...E.L.....U..o5w~qq...6w..]...>:l...fLo..4.....w.
........>;........w..9..)..%...W.y^..../.v.a[_.....b9...m.....z./.q
YM3.5..../.......5.hqH....q.L.U.e.q...e....}.K~I0...;..l.....v.H.f..C|
.|../..0..>....a..2.J.fm~.|.|../\.?.6.."o.......6........U......"..
r.Y]....A../N...>...~&...'h..G.m}..;....l....v.(N..w,.c.9^0....;...
^*u.........1_..ey........r..Z.R.n.~..G....O..........;.'i.~ .t.......
s.A...EN.>"....[.....p..........i".C...../..n.byA...`*`.......~....
:.|..*..X. ._..j..., ...89.2D".....C..g...........>...2.d..b0..e.Kb
....".t...g.w.m..[.;#...G. ..>.}.;.._....O....A.......*g...R.3?...A
.............S...:......~.g...O<.. "....*.}.......3..|.. ...'.W...M
.u....<. ...w..................>...7&....e>. .=.-..&?[.[Q...|
.{.{......{...m...G.yF.t..B...G...y..~....(b..F\S..nl....9}.:;.."..Z..
_..:.?o.../.6{.f..)F.E....v^[email protected]..^O..,V..%F..j.
.b.m.6.$.[.9h.MH.h/..I.1i..2...P....6.......W....mZ.>..._.~....;.w?
%....QzU.H.}..Q:...y..N..i........>}.....|.w|.o...}..x{...}zo......
..C?Nv.....d..?....]...c.fo#6{..!....>ZUM...(.4U.&KW.......C2......
.o...|Z..G{O....{;.........@}..}..(..c..s...y..d.8..=.|V\2.og.....<
 .rV..-i....yU/...6i.t.....4..#.@4....~..3.i....}8)..[.P,W.6m.W..YO...
.. e...G........o..^ ......A#8........Fb\.?.3.[K...... [ _.#y.4.f.L\j.
Mk..9..v.^!...y..{...lj~}K.M~...7....q.a...W.....o.u).2.....U.,..B<<< skipped >>>

GET /mshow.aspx?AID=10852 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.cfmogu.com/7.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pic.pay838.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionIfrmADShowTG=1931; expires=Sun, 06-Sep-2015 10:27:47 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:46 GMT

Content-Length: 4293
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y.^.>....u....i...].o.
...W..[,...v....|...E.L.....U..o5w~qq...6w..]...>:l...fLo..4.....w.
........>;........w..9..)..%...W.y^..../.v.a[_.....b9...m.....z./.q
YM3.5..../.......5.hqH....q.L.U.e.q...e....}.K~I0...;..l.....v.H.f..C|
.|../..0..>....a..2.J.fm~.|.|../\.?.6.."o.......6........U......"..
r.Y]....A../N...>...~&...'h..G.m}..;....l....v.(N..w,.c.9^0....;...
^*u.........1_..ey........r..Z.R.n.~..G....O..........;.'i.~ .t.......
s.A...EN.>"....[.....p..........i".C...../..n.byA...`*`.......~....
:.|..*..X. ._..j..., ...89.2D".....C..g...........>...2.d..b0..e.Kb
....".t...g.w.m..[.;#...G. ..>.}.;.._....O....A.......*g...R.3?...A
.............S...:......~.g...O<.. "....*.}.......3..|.. ...'.W...M
.u....<. ...w..................>...7&....e>. .=.-..&?[.[Q...|
.{.{......{...m...G.yF.t..B...G...y..~....(b..F\S..nl....9}.:;.."..Z..
_..:.?o.../.6{.f..)F.E....v^[email protected]..^O..,V..%F..j.
.b.m.6.$.[.9h.MH.h/..I.1i..2...P....6.......W....mZ.>..._.~....;.w?
%....QzU.H.}..Q:...y..N..i........>}.....|.w|.o...}..x{...}zo......
..C?Nv.....d..?....]...c.fo#6{..!....>ZUM...(.4U.&KW.......C2......
.o...|Z..G{O....{;.........@}..}..(..c..s...y..d.8..=.|V\2.og.....<
 .rV..-i....yU/...6i.t.....4..#.@4....~..3.i....}8)..[.P,W.6m.W..YO...
.. e...G........o..^ ......A#8........Fb\.?.3.[K...... [ _.#y.4.f.L\j.
Mk..9..v.^!...y..{...lj~}K.M~...7....q.a...W.....o.u).2.....U.,..B<<< skipped >>>

GET /mshow.aspx?AID=10852 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.cfmogu.com/7.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pic.pay838.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Expires: -1

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionIfrmADShowTG=994; expires=Sun, 06-Sep-2015 10:27:48 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:47 GMT

Content-Length: 4293
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:...Y.^.>....u....i...].o.
...W..[,...v....|...E.L.....U..o5w~qq...6w..]...>:l...fLo..4.....w.
........>;........w..9..)..%...W.y^..../.v.a[_.....b9...m.....z./.q
YM3.5..../.......5.hqH....q.L.U.e.q...e....}.K~I0...;..l.....v.H.f..C|
.|../..0..>....a..2.J.fm~.|.|../\.?.6.."o.......6........U......"..
r.Y]....A../N...>...~&...'h..G.m}..;....l....v.(N..w,.c.9^0....;...
^*u.........1_..ey........r..Z.R.n.~..G....O..........;.'i.~ .t.......
s.A...EN.>"....[.....p..........i".C...../..n.byA...`*`.......~....
:.|..*..X. ._..j..., ...89.2D".....C..g...........>...2.d..b0..e.Kb
....".t...g.w.m..[.;#...G. ..>.}.;.._....O....A.......*g...R.3?...A
.............S...:......~.g...O<.. "....*.}.......3..|.. ...'.W...M
.u....<. ...w..................>...7&....e>. .=.-..&?[.[Q...|
.{.{......{...m...G.yF.t..B...G...y..~....(b..F\S..nl....9}.:;.."..Z..
_..:.?o.../.6{.f..)F.E....v^[email protected]..^O..,V..%F..j.
.b.m.6.$.[.9h.MH.h/..I.1i..2...P....6.......W....mZ.>..._.~....;.w?
%....QzU.H.}..Q:...y..N..i........>}.....|.w|.o...}..x{...}zo......
..C?Nv.....d..?....]...c.fo#6{..!....>ZUM...(.4U.&KW.......C2......
.o...|Z..G{O....{;.........@}..}..(..c..s...y..d.8..=.|V\2.og.....<
 .rV..-i....yU/...6i.t.....4..#.@4....~..3.i....}8)..[.P,W.6m.W..YO...
.. e...G........o..^ ......A#8........Fb\.?.3.[K...... [ _.#y.4.f.L\j.
Mk..9..v.^!...y..{...lj~}K.M~...7....q.a...W.....o.u).2.....U.,..B<<< skipped >>>

GET /pv?atscu=AG_275634_HFVR&atsdomain=qunar.com&agfid=ANshGOFRiVoTm4YF&atsp=Win32&atsl=en-us&atsbr=1256x3719&atssr=1276x846&atsc=utf-8&atsh=flight.qunar.com&atsrf&atspv=1&atstime=1441524496805 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t4.agrantsem.com

Connection: Keep-Alive

Cookie: agsid=xU7oqm36So0Pe8QJ


HTTP/1.1 200 OK

Server: nginx/1.6.1

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: image/gif

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT

Expires: Sun, 06 Sep 2015 07:28:15 GMT

Cache-Control: no-cache

Content-Encoding: gzip

38............s.t..Ldd`dh`d..... .d.2..t@|......#.5..... .....0..HTTP/
1.1 200 OK..Server: nginx/1.6.1..Date: Sun, 06 Sep 2015 07:28:16 GMT..
Content-Type: image/gif..Transfer-Encoding: chunked..Connection: keep-
alive..Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT..Expires: Sun, 06 
Sep 2015 07:28:15 GMT..Cache-Control: no-cache..Content-Encoding: gzip
..38............s.t..Ldd`dh`d..... .d.2..t@|......#.5..... .....0..

GET /staticPub/js/room/socketAndLiveflash_9a63a0d.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:51:25 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 08:20:10 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
35c.............V]o.0.. ...D.BR(.TQ.11...l..*........)...9.tP..-{.p...
9..F....~.K.a(./.....e.&D...V`...%.t......$ID...DQ...H.li.R......T..$'
S....3.v.;2!.O..:...........FZ....KI.ND.-... .E.P.6.&...,h.<j.wq.BD
.I.sx....G.G.$<..e_.........3..h....#!..c....~.;.^9.8....l.{....3P.
......4m.P.A.#..)T.nN.Q...e....S.?.j........c.........7..{.;..._.. ..v
,.k....$._L0..]DkL.`@.yZ....k.'c.)H.#J_%d....v. :}.a...t...a...g.x....
.`...".!D/|=......pH...kl..w...........s[T3..@.........`...~-D9-......
[.x....#'......v#\U.jP37.U7.D~...O(.'.T.Em^...V.TC...|..J..;..qp..|n=.
..}q(sXBP.$..)D.........r.......?.F..k%..m......Vf...^R...\..."K ^....
..%...D.H....O....ESk.....f...E..W..<:....T.f..F....R..|U.!.qY.  ..
b.5/.h\`..5;....z..._.m.G..^..Sw......U..[....!....:.c5.O......f.....&
/.h>).]..N....r:.,..4.....<.-....(.vb._..ecTj...s...KX.H...]m6nc
y]..t.@^..pE.j#z-n......J4.Y`..?.*........0..

GET /ips.jcp?callback=QNR.ips.callback&_=1441524487852 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:07 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip

38.................,(.KN..IJL...VJ.,.T.Rz.3...5J....#...$.....0..HTTP/
1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:07 GMT..Content-Type: applica
tion/x-javascript; charset=utf8..Transfer-Encoding: chunked..Connectio
n: keep-alive..Server: QWS/1.0..Content-Encoding: gzip..38............
.....,(.KN..IJL...VJ.,.T.Rz.3...5J....#...$.....0......

GET /lpisearchd?callback=jQuery17209276773639123068_1441524483509&from=&to=Hot&month=All&cachefrom=&cacheto=&type=ow&source=fhome&_=1441524489149 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:08 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip
168...............J.P...w...&..s.)...Y...2...7..#. .e...E..(...L...E'j
.r.l.......9.]/.f..yV...,.iA.x.Mg.8Q.$^.3..* .0u.T.,...E......./..v...
...Y ..F.rV.F....).^4.M..c .3.y."..._.....2.4.<.I)VI.2T......^..^4.
.x....2...J.......d.......N....h..!..up.P...7.6.{..$.. .I.'3w.|a2ac..#
...q........t..../..a.^..U6..x 8f...cB..K....&....O.-....I.#...._.M...
....{......&s.......0..HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:0
8 GMT..Content-Type: application/x-javascript; charset=utf8..Transfer-
Encoding: chunked..Connection: keep-alive..Server: QWS/1.0..Content-En
coding: gzip..168...............J.P...w...&..s.)...Y...2...7..#. .e...
E..(...L...E'j.r.l.......9.]/.f..yV...,.iA.x.Mg.8Q.$^.3..* .0u.T.,...E
......./..v......Y ..F.rV.F....).^4.M..c .3.y."..._.....2.4.<.I)VI.
2T......^..^4..x....2...J.......d.......N....h..!..up.P...7.6.{..$.. .
I.'3w.|a2ac..#...q........t..../..a.^..U6..x 8f...cB..K....&....O.-...
.I.#...._.M.......{......&s.......0......


GET /ips.jcp?callback=__getip__ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:12 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip
31..............OO-.,....VJ.,.T.Rz.3...5J....n.('......0..HTTP/1.1 200
 OK..Date: Sun, 06 Sep 2015 07:28:12 GMT..Content-Type: application/x-
javascript; charset=utf8..Transfer-Encoding: chunked..Connection: keep
-alive..Server: QWS/1.0..Content-Encoding: gzip..31..............OO-.,
....VJ.,.T.Rz.3...5J....n.('......0......


GET /lpisearchd?callback=jQuery17207264470782716407_1441524492994&from=&to=Hot&month=All&cachefrom=&cacheto=&type=ow&source=fhome&_=1441524493868 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:13 GMT

Content-Type: application/x-javascript; charset=utf8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

Content-Encoding: gzip
167...............J.P...w...&l..q.)...Y...2...7..#. .e......(..^......
.X.f..}.........u.$QY.r..*..L.....D....QdE! e0u.T.,......J..../....8..
..3V...2d.<.z7....{.44.TI.l...x...qt........(...L.JB.P.|..k.y./....
.a.#....[..4.w.g...N....&8m`'<.Y....k.d.4l.. ....s.5..D&.......I..^
..@<...cH^...g.i<&..lx.U{..UY.......;...d</......g.O?.5..#t'.
.......l..e.........7...-......0..HTTP/1.1 200 OK..Date: Sun, 06 Sep 2
015 07:28:13 GMT..Content-Type: application/x-javascript; charset=utf8
..Transfer-Encoding: chunked..Connection: keep-alive..Server: QWS/1.0.
.Content-Encoding: gzip..167...............J.P...w...&l..q.)...Y...2..
.7..#. .e......(..^.......X.f..}.........u.$QY.r..*..L.....D....QdE! e
0u.T.,......J..../....8....3V...2d.<.z7....{.44.TI.l...x...qt......
..(...L.JB.P.|..k.y./.....a.#....[..4.w.g...N....&8m`'<.Y....k.d.4l
.. ....s.5..D&.......I..^..@<...cH^...g.i<&..lx.U{..UY.......;..
.d</......g.O?.5..#t'........l..e.........7...-......0......


GET /holidayService.jcp?count=2 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://flight.qunar.com/site/main.swf?20090107

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ws.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:18 GMT

Content-Type: text/xml; charset=utf8

Content-Length: 35668

Connection: keep-alive

Server: QWS/1.0
<?xml version='1.0' encoding='utf-8'?>.<root>.<airline 
from='......' to='......'><line date='2015-09-06' go_start='21:3
0' go_expires='23:30' back_start='22:30' back_expires='00:55' go_avc='
........................' back_avc='........................' go_isNew
='1' back_isNew='1' go_update_time='4...' back_update_time='3......'&g
t;<client name='' price='245' discount='1.9...' type="go"/><c
lient name='' price='1159' discount='9.3...' type="back"/></line
><line date='2015-09-07' go_start='21:30' go_expires='23:30' bac
k_start='21:50' back_expires='00:20' go_avc='........................'
 back_avc='........................' go_isNew='1' back_isNew='1' go_up
date_time='2......' back_update_time='7......'><client name='...
............' price='315' discount='2.5...' type="go"/><client n
ame='' price='335' discount='2.7...' type="back"/></line><
line date='2015-09-08' go_start='21:30' go_expires='23:30' back_start=
'21:50' back_expires='00:20' go_avc='........................' back_av
c='........................' go_isNew='1' back_isNew='1' go_update_tim
e='2......' back_update_time='12......'><client name='' price='4
05' discount='3.2...' type="go"/><client name='............' pri
ce='325' discount='2.5...' type="back"/></line><line date=
'2015-09-09' go_start='07:20' go_expires='09:35' back_start='22:30' ba
ck_expires='00:35' go_avc='........................' back_avc='.......
.................' go_isNew='1' back_isNew='1' go_update_time='15.<<< skipped >>>

GET /imges/live2012/idx_sideico_v10.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr4.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:52:54 GMT

Date: Sat, 20 Sep 2014 13:52:54 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "1104007391"

Last-Modified: Tue, 19 Feb 2013 07:54:41 GMT

Content-Length: 9659

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz113:0 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...Z.........X4......tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE...........u.........................................[.....
......j..a.................................................~..........
.A..............>[email protected]..
.........Q.......................2.................q..................
........&&.............VW........................y......O........m..~.
...201....:8.g..............l..}.......................FG.............
.................................I...,.........................42.MM..
X....{b....(...................b`^.eO............<=F.....B.....0...
.....J..I....L/....z..&...\..:..a....................7........2..k.QO.
...gj.X..........|uwILK................p..............hh...........S.v
m......................G .....u.H3.L........j-..........Y...........e.
...............,.P(....tRNS...........................................
......................................................................
......................................................................
......................................................................
...S..%..!EIDATx....x.....4!.....l..1w@`.f........;).NQ$."%..$.E.?.b.X
.d...).q...........d..eS....hn....P..R.~/.p.2......=..{.| U......Y.Hn.
.pC...7..`.....{mN.:..........ks4..yC_s>...>=b..Z...].....Z.W[.a
XEzz}..L..z.D..V6....`.5..v."...yrS...*..&.....K...k.%.qM[. ..p..8....
..............RBZC....C'(...B...*...... ...;..8t.q8[...k...aXt!,H..p:.
*......;:....6.V\B.q...&.n%....dH.UB....-.}5..{0q44_8. ..........^<<< skipped >>>

GET /imges/live/level/userLevel_v30.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:21:31 GMT

Date: Sat, 20 Sep 2014 13:21:31 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "740209795"

Last-Modified: Mon, 15 Apr 2013 09:31:22 GMT

Content-Length: 12525

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz110:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......<.....7.V.....tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:3D74DAA9A5AC11E2AAEBB
9F16933A0E4" xmpMM:DocumentID="xmp.did:3D74DAAAA5AC11E2AAEBB9F16933A0E
4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3D74DAA7A5AC11E
2AAEBB9F16933A0E4" stRef:documentID="xmp.did:3D74DAA8A5AC11E2AAEBB9F16
933A0E4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>~(7.....PLTE....e...i.............o.....
...P.........9...oovo....1.,Y.._.j.GSd..Y....I.....<......9bs...r..
.V...q.pP.sg......N.....C.f..s0*d.............................Tu......
.....S.fE.V..............6........S..[..nx../.w/..........'...........
.Zid=.2..D..5..0..X.@e.........*...........;....Kv.................|..
........:....^]u.D......Ffde...........;.,.....Y....I..C*......r......
....x.......s....2...m6.X.W.S......G..|) &......o...M........3...M...n
..C...SZ...7......./..Y.......5/.....5.....E............TL..2.N...J.g.
.........8..1..........g.....[#..........VK.R9.u.....F........o...<<< skipped >>>

GET /imges/live/levelIco_v4/12.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 18 Apr 2016 09:57:03 GMT

Date: Fri, 24 Apr 2015 09:57:03 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 29 Feb 2012 03:58:19 GMT

ETag: "2319195169"

Content-Type: image/gif

Content-Length: 1261

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou83:8111 (Cdn Cache Server V2.0), 1.1 fuz110:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....[.MO...SiSS.../...5D.h...(.........D.aU.Z......jK.K.".m..".GTD..(.
...J.Jl......Q c].B^._..=...s..9gnHh..........r3.&.:..b8....p.....-..&
.%..L88.N.B......g..e`...hK. <..}[email protected]...'..m..V!].@].6.
[email protected]....!.......w._.....8....^3nl.G.p..{....."...5D
3.RO...].;.......U.2.D.M4.=...F.i.80....b......;...._.....<...I..M.
t.........i.uq.|....[..s..J...Q#.ZOQ.d.2.........X..U..l<n....z...%
j..=.f.F./.......Ex1..;..:......17@^.....VmP..?...7.f..R1."... *.N2..5
.K.(lO.T..V.s....Zau.............##N....r.p..l<..p.T...Mm...#..BR.k
wb.ry.:...I.........#8_ ..tN,._..LV..l.,....X..{...[E>x.%.!./,&..&g
t;..I.j=w[...*.....f.."..Qx ..U...... ...J.`..Xw6.>.....o.....cI..&
lt;[email protected][email protected].>p.<G..o.L..YNK.$W..
..F.t..1.. ..O.e.w..K......064..n....X.][....F;$.D...2;......M.5.dW1.&
gt;E............ ...a./.p....b.Q..d...7.....<{G..}....8..o.8'.(...t
.\b..v.%..R.....q..a.....v....,J.....8..GN.[...O.....UG.a;H^.".s......
.DG..L.wbP.t..Va_.#.b..........n...S...-..lW...0..e9.....A._...y3.i..W
*/;..-.t..-..m...7...D.....It...X.Fcu.&....W...e<.8.g...jCC|UH...97
.}m2.|VL..O...$.&.....\T...w%../[email protected].<g/.[.H...l...q....gy|...S
 ....`....V.A..n. .g...MM..2.....{....).....S...d...B..."......'h..l..
..{.}...^s....G.V0...RO.%.*....qX......c.......
<<< skipped >>>

GET /imges/live/levelIco_v4/23.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 30 Jul 2016 15:07:00 GMT

Date: Wed, 05 Aug 2015 15:07:00 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 17 Jul 2012 08:08:44 GMT

ETag: "3447651802"

Content-Type: image/gif

Content-Length: 1738

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou84:8105 (Cdn Cache Server V2.0), 1.1 fuz112:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.......P.....W.W.......i@...!..%[email protected]..%.......@
b...P......"V.....1.....................w..`_.h2...*..:z.....Bx.......
....A....`V.?....o.s0TV.].*o.gJ..<@R..NBU...?#.Y.k..._....u..Vs....
..;...&..6......=..p.ao.....k^=D.}.6..(..k/..6............... ........
..`M[.....L.............F.=R.B......#.....%........./.@..*..I2X.o.a.&l
t;[email protected]=W....25 ..$..E...h.P...!#.......Q.:.......m..W
..F...r.K....Q.:e..l.Gy"....og....%.S.8.. G. .../........<.v.I8S..,
u...?}s.A.OT>...m......R.v...1:U.R..4.Y[.tO..u..)...m/D....m......-
............W<....q..`>=.Tl.Q.?.15....._T.p.fN.x.4...U...a.s9L.'
wt.......e..t.>..G....ABLv.?.....{yP.P.G..`...(...k.x...lC.J.y.}l#.
..8.fN..,E...~QEJ.jU....s.#[email protected]^..'....|.*..Q....\.%...5.
..0V..i..V.....7..{P.8EI... q.4..8.WL.I_8p.o.......j...Q.....H..z.Se.*
~.n#~...E_.....-M.m...0...cs..1.9..[A.....8.1...dE..VYF5XD..8.8!..uJ.3
qJ.)..7.M*.;FnI....7i....ZwSr......t..y..*....C$c..}8........../:....g
0hK.....`.X}.~..W..?.Z.YS. .R.....V.A]x..Uh... @.N....a.['o2/16....lk.
.......o"..e.f....i*.pw..!.v4.5.u...Fk.;Y.......A..F.IE.n.......Ed1h..
..9..I..f.0.,0.h.._a..k...'..,..q.Pb.>k..#...t.Z...b...A9.<(.<
;.*. ...%[email protected].#>.Z.rU.)q2....
.w.\...[.S..Z..Z.p8.KP...8T...i...........2t<)%uO..F. .C..w..*..:..
...-`~.>!N>B6.......b..n.zhFp.P.m..H....`..O....v..........}.w.a
p.%g.q.:..\S..o.Q>.a?.11..P.)a.{N>RGl.y.zQ1..j..$.S,=;X#f.y)}j.l
[email protected].~.(0pY..q<<< skipped >>>

GET /imges/live/levelIco_v4/19.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:28:57 GMT

Date: Sat, 20 Sep 2014 13:28:57 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "3570245691"

Last-Modified: Wed, 29 Feb 2012 03:58:19 GMT

Content-Length: 1744

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz113:5 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a$........u0E.......0J....1?.23....=A.1B..................../....
mp.......ko....\]....W[..T....KO........0....... /q......}.....ns.47..
[email protected]...................^b........4...........4...
..T..........m.........<.z......$.................8....b..6b.Ph..U.
.6.......,X..T..6.AY.'>...../.......u..Cx.P\..5..!.LZ.o}.`o..8.R`.8
P.e|..4.^l.. ....^t..H..*..E._l....7b.M...4.)`.R~..J.Ri.|...F.Z..}..J.
.g..."..F.mz.Ny.(^.E[.Wo.\.....#W.)_..F..9.....8.\..............{...;.
`.....{..5C....a..4"./N./P............................................
......................................................................
......................................................................
......................................................................
.................!..NETSCAPE2.0.....!...2...,....$.......O..H..A..D.\.
.....#.L`....9d..  ....B..I. ...R.......([|...fM.6O.<..A.....(P....
[email protected].@}........2. ..S.f.$Ev YRf....`@....t]0.AG.....{*o.S3. .p..
..s. ..b._.~.C...0...%H@`..Y..Oy.0.....>.x0@......^([.A.&.<.....
..L`0x......z.0b....$...{....G..........0......!lH..c.....T.P.....#r.P
[email protected]@.!.......,............O5.....E....a.a.(XLI"r...G...
.!.......,..........5.K ..'..6GL.2..T.&.6..Pg.'S.1...I..I?.04....0=.La
R$J@.!...2...,..........X.K.(!...'*L..b...S.J.9....SFp..s..)S...p.....
*.P..q.&(..X<.....F..J..T.....1u...1'..Ar2 .!...2...,....$.....~.O.
.H......*D(......X..#E...3...@@.......0A....4.Q`$I..n8P.a.)S/....`@...
..L8C...'.,h94!...."@......(<x..CU.$L.x.....h..]......!.......,<<< skipped >>>

GET /imges/live/levelIco_v4/16.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 18 Apr 2016 04:08:51 GMT

Date: Fri, 24 Apr 2015 04:08:51 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 29 Feb 2012 03:58:19 GMT

ETag: "3688336953"

Content-Type: image/gif

Content-Length: 1435

Server: tux/3.3

Age: 1

X-Via: 1.1 hzh92:8105 (Cdn Cache Server V2.0), 1.1 fuz110:4 (Cdn Cache Server V2.0)

Connection: keep-alive
....[.MO.....SSW..........1J.I` ..A.&l.<.....a.....g........[..A...
..........DQ.dS...JU.........=...s....s.....g.-...j@`.....?...r...Z4.v
r.m.....Ky...O.;.....}....VI./..!..v........mq..N......|.....]Wu..5...
.YY...#....t:..:p...(..R.....9;.k....{^^m~.......P..OL...=V....`N.2!..
...~...........0...h..W.n&.o^..v....3..\.xZ|..,...{.n..[......TC..ue.t
.=..j.............8.x...^/........d5..>...._...5o.*...,...s.<:}.
...{.B....^.b..v...(0p.EL.......m..38...I..=.._!.].dX|T.9..'.....w.r..
Y..D.XR.#`.B...o#....L.....J....9..A..{P..w.8K..}F.>.x....p.^..,9.y
D..X]..s./.....kbqt{D._q......q7..:./..ne[.p......................\.xd
z.....jp...~&@.`.65.V.Ks..F..F.....*...P<..o0.!.F.....41.....I..cL.
.#..B.A...Mb".'.3A"..10...etA5qY_<..q.*s......V6...........mJ}@.Q.l
.5.....tJ.."6.7.Kv...,a...Iz.K.?.. ..'h..).^k..w.4..u_*i..B..x.<\-.
...u.kd..-.J ..".P.Q..C..Z.kY=...R&..Ej..m....x...d........J..W..h...}
.>D][email protected]..>.....x.2..3.h.x j...a......._U.[$..<.n..m
...@.....=b.8 i...........U..k.Zx.m.GQ...j#0w..M,...q.....).NKO..E....
[email protected]..[......=UK....W...t.........\.m...].cv..B.
...-...E..Ux...3B...,cg.N?..,...../..L#.3......Z..........2.........=.
...../Jd..a......J...H.}\nZ..u...h8.,..z... ...... ........].n.B....&l
t;...f...c....T .....xJ1]QuzkkL.U9'.U.'..........4......*...Rt...F....
.|..[..|F.P..4P.T4..(...gs..X..x.........Xw.2[..-2w..<.p....k4.....
P......*.v...AE.m....?....)...0x....D..E...Y........`Y,.o.U.^...y.!...
.....
<<< skipped >>>

GET /imges/live/levelIco_v4/13.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:21:35 GMT

Date: Sat, 20 Sep 2014 13:21:35 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1748415636"

Last-Modified: Wed, 29 Feb 2012 03:58:19 GMT

Content-Length: 1381

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz111:4 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a$.......i..d..a..t..u..s..n..q.....k.....'..-..5..3../..*..J..}.
.T..#[email protected]...........
[email protected]...........=...............
........0...........{..Z..............5..z.........:....i........G..O.
..............F.\...........- ..........(..........................E@.
w...... ........)[email protected]@4B.....c..:.....p@..@..#v....A.`.vl
......L..D..!...sf.fX..u@.<.....s ..t..A7C.{...x@QY..._.z ..`.SGUr.
r..`..rt....og...@q_@dS... ..!~....@..@[email protected]...``~..q .U...... .["..B.
.,.ZA.W!..@.. .. .. k...x @[email protected]#[email protected] ..D.n@.. .u ..AO`.O.... ..
EqyQ.Q .g....:]..u..? LW..U...........................................
......................................................................
..............!..NETSCAPE2.0.....!...2...,....$..........H..A."..\..!.
$.#.t......"[email protected]......<...` ..7m......([email protected]..
.p..A.P.B5p......(@...... XkRs........`.....H.........X@p...~..D`.....
,......8h@.$@y!e..;.yPCE.<}R...`.d..R3L]@`.!.x..`.Z......Q0.o......
....u.=.Ca........@ u.&.89......X.D X...j.../X..."f..Y0"....%V.2%...l.
!..t...D>d...(,0F.e.q..R.@C.`tQP@.!.......,...............4...;...j
f.a.Y....&...k...!.......,..........6.....'./].......(\.&X..,Q&k.1..EM
..h..Y.d..5f.....L....!...2...,..........Y.{...I.11.v.....5Q....c.....
x......k.&.s..... ..s4.c.R7r5.x...F.P......4...iem..47P....d@.;
....
<<< skipped >>>

GET /imges/live2012/idx_leftside_icon_v8.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:16:26 GMT

Date: Sat, 20 Sep 2014 13:16:26 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "1654939495"

Last-Modified: Tue, 28 May 2013 04:03:05 GMT

Content-Length: 6177

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz113:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......R......lW&....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:8FC0CBA2C74811E2BD06DD32
5621B4EC" xmpMM:DocumentID="xmp.did:8FC0CBA3C74811E2BD06DD325621B4EC"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8FC0CBA0C74811E2BD
06DD325621B4EC" stRef:documentID="xmp.did:8FC0CBA1C74811E2BD06DD325621
B4EC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...1....PLTE.........ZZZ...WWWYYY...XXXSSSV
VV............UUU.........RRRTTT...$$$PPPOOOLLL!!!###***HHHFFF%%%>&
gt;>'''DDDIIIJJJ666888111<<<///CCC222???...---AAANNNGGG(((
:::444)))&&&KKKQQQMMM"""   ,,,...;;;000EEE   999[[[BBB@@@555===777...3
[email protected]...............
.....................................fff..............o.a.............
...............................p............{.........................
A...{....P..>.................................................."...
......F..x..........U..................-.......K..................<<< skipped >>>

GET /imges/live/levelIco_v4/22.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 18 Apr 2016 04:08:51 GMT

Date: Fri, 24 Apr 2015 04:08:51 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 17 Jul 2012 08:08:44 GMT

ETag: "2889401802"

Content-Type: image/gif

Content-Length: 1738

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou83:8108 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.......P.....WSW...}.H.h....S^.. .B..Z....Z:......b.vi....CBH.......&.
([email protected].)"...w.:cg.....o....Y..;j.;!.......p....r.<.mhp
l_h..f..."./..rxZ.s.0.....7.....(.....K.x...A.7...,V...Q....P...>..
d..u..J..f.M...B.)?T../.tw.. y.L.e....'.q-...PY_.dC....o.....F..A...P.
{Zq.................P....p...O'o<.....N6".....80W.x....l..}.....FxV
.......P....g..WA...ZwL4W..........^... 5..V....m... y....\h.)...9_...
..X..[".I6X....:.!..;....*...?...v..>......`9....kZ.Y[.7k......^w..
l5}.I<..k..l....pX....O..\..;.v...../..p;.|p..{_.w....c.U.k8s.^K.O-
..5)-G.]hP..._;uC.k./`.bKg......@......<...H.nVL\..P......b.[.udC..
.U..;u......7.F...................q.'..... ".G...eA=0.....P...\.O..$.`
...St......G...S.@_.".N|:<'.6%.]|[email protected]..... ....;..^.l%..3.rD".
J...Cb3.....^`.....T......i...q...D).<.y|!m...(.R..#..2.'...%...1..
.......<..T...#D._.....m........P.".L..Lpp.`..'.A...6.<.D^.cL.n.
`.....l..H......".....'.n.}..I..iA*..Lr:A....T..^[email protected]..."BT....
..I.CP...T.9..<.............e*."...3X.......I...e......g ..........
.N.....J....."..gO..(..X.yEU...f..o..Y.`.F.yUk......;Q..;k.....b......
....r.o.e....xe.._Zb./..I.....{>._.a......P.........5... .. \.~7...
.9..rN..t...Tmn.".Yj..L..{.'%..v[.$.{6....X. ].X ......3..o:...\_..6..
M4........4.-..5Z7UC&#>..&1..I....w.1.D....3...7#S..e...g....&.pR..
..W... ....P...x.u.....y.....B{FE ....S....D...iB..u1.c......~.....z8.
X.{.......Tm........8..$7.$N.....a5..G.G/Q7.|aSB.t.`(....z.!....o....|
'?M..k.#.#........b..d....F..4l.g...Oa0..."]..z......../.u..h...(.<<< skipped >>>

GET /imges/live/levelIco_v4/10.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:16:28 GMT

Date: Sat, 20 Sep 2014 13:16:28 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1413905106"

Last-Modified: Wed, 29 Feb 2012 03:58:19 GMT

Content-Length: 1391

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a$.......i..q..n..s..k..u..t..a..d........'..-..5..*../..3..J..}.
.#..T........U...........w..D.....J.....W.....Q..@........R........z..
......D.....0..=.......................G..j........t.....Z......:....{
...........7.............................z........5.....i.....O..@..G.
...................\..(.........F.......- ...............4B...... ..@.
............c.Zh..E@..)[email protected]@[email protected]@dS
..q .k..x ..L.z ...O...:... ...O`... .....A..!@K..? .s QY...... .h#q_@
7C...@[email protected]`[email protected].. O@.:]...Asf...`.._.Q .u vl..u@..,...fX..
.A.ZAr....@.. .. ..DqyQLW..W!.SG.U.`~...#.<[email protected].{...`.og
...@..@.[".....`.C Ur... .U...........................................
......................................................................
..............!..NETSCAPE2.0.....!...2...,....$..........H..A.!..\..!.
..#........"0.......B..I....<.,...J...bhx0..M..o^.y.B.&..hHP.F.'.Dd
.................(........X[Bs`..f..<..Z.$.<XP .....R,HCb.A....6
 8p..H.lP`....)..!..`.../....Z.#.p.h.&O......Lp......~.Y...;6...b..@|D
.$@| q......b...wh.z4a.......~..w.&.HNy...2.... X...j...'X....`..Y0...
..IT..4dP..p....~...D9.`D.(,.E.g....?L.D.].QP@.!.......,..............
)....:.. .e.a.g..v.f...k...!.......,..........6.Q....P.I....v..(g.(X. 
i. k.1z..K".U..Y.dm..S.x.i.JT...!...2...,..........Y..m....,3.8...(.5f
...r.......... ..k.(.ze.... .H.E.c.CDt..x1..H....F*.5..d.ie-...DP.:..d
@.;....
<<< skipped >>>

GET /imges/live/levelIco_v4/11.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:16:28 GMT

Date: Sat, 20 Sep 2014 13:16:28 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "2789843687"

Last-Modified: Wed, 29 Feb 2012 03:58:19 GMT

Content-Length: 1374

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz114:9 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a$.......i..u..n..s..q.....t..k..d..a.....'..-..5..3../..*..J..}.
.#[email protected]...........
[email protected].....=..t........j.....i............
.....0..{...........G..............5.....z........Z.........:....O....
..............F.......\...........(..............- ......Zh...........
w......... .E@4B......@..)[email protected][email protected]@.h#.z 7C...`.n@:]...
,[email protected] [email protected]..[".<...Eog... [email protected]....? .u 
.x qyQ`.... [email protected].{....@@K...@~...ZAd...k...t.Q .q .. .:...!.
. O`[email protected][email protected]!`~..C .._.`...#.. vl...@.. ..L.. ..`k..v.
[email protected]...........................................
......................................................................
..............!..NETSCAPE2.0.....!...2...,....$..........H..A."..\..!.
).#.t......"0.......B.......Yd,..cF...bdxP..M..o........2.(.....!4..`P
...N..dQD.....D.&AA.....,H.,Y...(......\..P.b.......[p.....,a.A......`
......"......&.v.h.&O.....ylp.....X......kJ..0.Z........@.. &l.....Y.V
.Y..y.......d8.0.XLpe.`....]=..~`.......g..MA*H.XA...h0......8.I...I..
..c.Q....X..4.!F.....!.......,..............y...-6....d...I........k..
.!.......,..........6.-..s...P......Z/].(X.`.Y0k.1fb.H".C..Y.d..5J..i.
.M....!...2...,..........Y.=I.%.N.4........J....s.......r.(..k.(..E...
. ..3E.c.f6...x...i.V...J.55...!dM.156P.z..d@.;..<<< skipped >>>

GET /mp/jsreport?1=1&key=0&content=msg:'localStorage' is undefined||url:http://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd||line:783||col:0||info: HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mp.weixin.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Connection: keep-alive

Content-Length: 0

HTTP/1.1 200 OK..Connection: keep-alive..Content-Length: 0..

GET /iplookup/iplookup.php?format=js HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: int.dpool.sina.com.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Date: Sun, 06 Sep 2015 07:28:11 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 149

Connection: close

DPOOL_HEADER: tyr105

SINA-LB:aGEuMjIwLmcyLnlmLmxiLnNpbmFub2RlLmNvbQ==

SINA-TS:OThmMjk2Y2UgMCAwIDAgNCAwCg==
var remote_ip_info = {"ret":1,"start":-1,"end":-1,"country":"\u4e4c\u5
14b\u5170","province":"","city":"","district":"","isp":"","type":"","d
esc":""};..

GET /vataframe/b.html?_=20120830&rnd=homeadSy HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /site/images/zhuanti/huodong/dijia1.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg4.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 9035

Accept-Ranges: bytes

Last-Modified: Sun, 04 Jan 2015 07:25:05 GMT

Server: QWS/1.0

Expires: Sun, 04 Oct 2015 21:55:41 GMT

Date: Sun, 06 Sep 2015 07:28:01 GMT

Connection: keep-alive
GIF89a..$..?...m...X..C...][........B.w.......NQS.........g......s....
.e.w]..........>...............p...........KU...q.....^pt......#...
..e.......YI.....7........q..............x........ ..38;.]..........!.
.NETSCAPE2.0.....!.....?.,[email protected],....r.l:[email protected]..'0
....z.a.u..vt.]..|....p.}#8B...~...#>^.^p.&cD..&.D..##.0..z..D.....
.8:....>..|..BeB8.:.i.[&q^....\>#...x.F.B._.8..&..p>.........
>iB&.}.w....S.U.d...q..88h..@A<[email protected]... .a.b
E.....8.HF..oo..:....20.4.U.....J>}.9...,}..S..Y&u.(....M&...4.R.F(
:_|..J..E...1.....FC&.y..L9iF......<B....[..:..&bIE...5.t. .cp#.BB.
.c....,. h.....t._h@(..CE|6..Y].........A..F....4jM....Th.....70....4:
.....90....2N......./k..{....x.....................h ......F$...B.@...
Y..y......u....F..^|>.W..$\[email protected]". .H.... ....
...<$...B....H.`[email protected]@.>..^~G....V.X%.D>.$..0.$.Fj9..W..&.[B9
[email protected]..!.b.Qe.~.R.{><....2Yc...H..F..)..>S`.)zh...".`
[email protected]....#..."'.CT...b..&...k.........g!.BH.^....-
.%..m.......A.gd..L((......B.;D..>.d..f.#......E&K_....p...W ...._.
..1.......HT.....1l.z. f.F2.....p..$G....>jA.>..-~d..C.}.L..F.)q
...j..d.{..T....!.....?.,..........7...VZ.....X......B.Z.Xj...E...xL..
K"..L...;..MgW...~|...!.....?.,[email protected].
..xL..K"..L...;..MgW...~|/..W;.V.X;%%..././../.....2%...1..1.8../1.. .
.......... '>'... ....22.....  #...1..2../.#. 0..'......8. .8 .....
..1......' .. ......b *@.`...0...L..N1..$8p".x.Fy..B....,..6....%O<<< skipped >>>

GET /lgdsa1441092502252_1441092502256.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: weblive.bs2cdn.yy.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 16:32:29 GMT

Date: Sat, 05 Sep 2015 16:32:29 GMT

Server: nginx

Content-Type: image/jpg

Content-Length: 24231

Accept-Ranges: bytes

Last-Modified: Tue, 01 Sep 2015 15:28:22 GMT

ETag: 1a73c06f03db9c633a87b249d7665d918e2d3b38

Cache-Control: public,max-age=86400

Age: 1

X-Via: 1.1 huzhou84:8110 (Cdn Cache Server V2.0), 1.1 qzh246:0 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF...................................................%...#... 
, #&')*)..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((
((((((((((((((........................................................
............}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:
CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................
......................................................................
..........w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
.............................................?......[X..2/.Rf....[....
.SM".-..!o:...'..;~.V)3Y....D.J.A.P..=.M...}...I......lw...a=7......:.
>.....Y.....V8%...........;...y......`>E.;.4.h...0....,..Q..(. K
..I...]Hn!.x.J........<..7ui6.t$...y...U....9&mX]..c.d.V....s=.s...
.lg........&..EAh.P...[....q...v}..}O...../.icN.x...y...5.....=j._r.}.
.....r\]K.N....OA.F..K.7..Yw(.q..C.R.....Fbk..y.Vdl.>V.>.T.$mF..
9^...z....Q..O.L.....M........Q..:&.N......J...BI...zt.K..z...}.T.P..x
.g......r.rZ...(.B.0..v...Z.KS....y$..I.....;~.A.z.#.)5../...Oi...K. )
..y...i/..-..J..3....h..m.\......d0...;.d7...Z."..4. .%)S....n.9Tv....
."...7_aR.?.|.],y...e........h.l.y ......\.*....rihyv.}..]........Ty.0
.6Q...V....7>[email protected]...?...QPV.........^^.8.Dq[.2../.1..[.)?
.URV.q...iZ.x..........m..........j{.3.....T,...........5...~9...k.6J.
..l.......R.v.Q..m.g.....&...A.........H......jIw..S.........$..j.E.F.
.IOuq..EfL6..K....Ff..c..>\..z....q...p%Z@H(.V....}s.Ss9.lc...:<<< skipped >>>

GET /lgdsa1435203485699_1435203485703.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: weblive.bs2cdn.yy.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 07 Sep 2015 04:39:27 GMT

Date: Sun, 06 Sep 2015 04:39:27 GMT

Server: nginx

Content-Type: image/jpg

Content-Length: 20420

Accept-Ranges: bytes

Last-Modified: Thu, 25 Jun 2015 11:38:05 GMT

ETag: c0e17dd2de0c2c043cd16720cdb24fda93c4f2cb

Cache-Control: public,max-age=86400

Age: 1

X-Via: 1.1 hzh91:8107 (Cdn Cache Server V2.0), 1.1 qzh243:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF...................................................%...#... 
, #&')*)..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((
((((((((((((((........................................................
............}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:
CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................
......................................................................
..........w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
.............................................?.....fkQz..ZB..K.,...;.T
.#..=.5...?@jfU"&.Y..-..L...O.y.".:.Rh.G.F.......&..q..-4.3HcqA-.n.4..
.(5..(....4u.......m..K[..l6..f.X.H..7.B.MW d9%....2.... .....2.....M.
.ki%Te.6<V...}...7..9QdWB.2.6r*.m.._2.$R......$i.E!3.T1#....c..RD-Y
\.V...c.....1......"...W:....Kfr.}[email protected].)!...f..H'".Oa...$2
Q{.$WnN X.Cq.[]X..1.O1$m..d... ..A.....$'&...m]...N(.lp;n..U68....Qy..
) .......C...t'....\.:.......[.c..).....jJLvh([email protected]..".Y#./B.r...
.q...g..-...h.pm-.4.....$.V[......8.WD .*......"..&...vl}....PV8..'r..
..N..o...F.......pW..94&.q..;.n....w.4..G...u..6(....G.y..P.3Ue}...|M.
..mu....9.vP.w...(#../.jz.......VV.....r8.0..7.GM...b...&..s..I..r..u.
GLU.L.......{..l.A...{bq.d..w1S...Q..h:.n1R.$?.#'vD.g.;.... .)....,..J
.4.\.....9l;..pP..hL....d..~.I......8.........M. ,..[.rB..m...8.ryH...
..v...68.Y...Pi%./.)2.......W.cPK.QeG..h.t....>".d.cOtJveg....`.;#.
Dft.Z.l..eB.3W...V...<... ...v..?9...L.. .......4.1..*dk.W..4t.<<< skipped >>>

GET /api/login.php?action=status&game_id=281&server_id=60766&callback=_loginCheck&tid=2&0.6229994462676207 HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: status.login.37.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:27:47 GMT

Content-Type: text/html;charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
10.._loginCheck("");..0..HTTP/1.1 200 OK..Server: nginx..Date: Sun, 06
 Sep 2015 07:27:47 GMT..Content-Type: text/html;charset=utf-8..Transfe
r-Encoding: chunked..Connection: keep-alive..P3P: CP="CURa ADMa DEVa P
SAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"..10.
._loginCheck("");..0..

GET /?ex_track=auto_55360807 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628

Connection: Keep-Alive

Host: flight.qunar.com


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:10 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Cache-Control: no-cache

Pragma: no-cache

Expires: 0

Content-Encoding: gzip

Server: QWS/1.0
1f11...............w.U.8.........c...E.,..l.{.0..y...NKj..H.Jw..c.{.!.
@6.....f.H..........l.......v..M...a.....R..n...u.Nl...........Q.L....
<6..B...E..3.Q......bs...M..ccc..XF....X....!..tT:T.gs.NU1$.....IB.
H.r.!.6.X;.*.......Q.f.P..1d."M.|.\....[_7^..r.......pc..K...X..id..O.
7..W.........._.s....."j..Z....M@..*.....j..p.R..G.j...E.~..]...*...9U
 ..L8._k...z..B.b....._...v.....W....5..5.|...g..Q.....$.EM....p.[M.XM
.mPx...u.y........n.r<5.H4>....E......^..Q...N7^..x.......G_j.;.
<.c.....>........8}..h...r...oO._..q.X...<... ..?66.8~.o.*&..
.?._.}..|.3...]i.t......e.~.r......7.....[1..<7.....E.jj.C..F...zU.
 W..8...jeU..F.L.l]...<.......f...k.............XW.Y9...JN......H..
0.Iek.....!.. .....i.8-...KR...h...*.k...7:......Til(1.HfR....)...bb(.
..u.B...&.D...r.bH.'w.F...-....n]7..4..JE)!%.#..B.<<Z. $.c.R)..S
..D..pb.>I)....(>.MqUPK.D.=6A:.. ..t........y]Q..(.)l..PU..ee<
;..........x2.H..gCUY.:..HXo<5....xpZS.J....j...2.Ly4..-.u.......&.
J.2=>T;...v..U..rT%.L.........b%.....%M.gC8...- .E`BI..L.H$......w.
^.o{v'..i...lHQ.&.%.kN.kY.....:.`SL...8QC_,.-..'..(...bE.a.....0.."es.
: ie.....$)Y!$.r.....V-........Z.....O.d...../7...2......^n\...f......
.}..... p..n0Q.....q....g...N.........../.N'S.W.._...^.......\..<.U
.....Z^.r.q.5.../....M.....8.M......W/....c.....!9wb.. ..'.g.l.zc.....
..'..y<[email protected].^.>.MK....?w.?Y
......p.Q."[email protected]...`hk..Vgy.5(
"{............ -M.B...._...\h,..z./y...t.].......P..mc.....GD.JU..<<< skipped >>>

GET /mw690/8f3879f2gw1es8cb5k86sj20kw0c4n0x.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1137.v0-mow), ht h0-s1137.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 08 Nov 2015 08:04:46 GMT

Age: 2330608

Accept-Ranges: bytes

Content-Length: 124615

Content-Type: image/jpeg

Last-Modified: Tue, 19 May 2015 11:13:43 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
......................................................................
.........................................u.653.....f...#X..1..l..,...^
\.>..)...V9Y..r..O..P.....k[Z...0*.Q.4.,....E..).......',y..]K...E.
0..a..S..>...L.<{.Z..=4...F...[..{..u..E.......#...\i?.t..r...vB
.......c.....XSR.K:y.S...#[email protected]$.f..y..e....%..<..e...z.$.... ;
|...>...h!..f.IY.....I.;...nA#............Q..j.$5...gs.SFXe....;..2
..q.....2........t.e....~...$.UC..... .J...`V?%(Xa..."5\.}J..21. ....q
[email protected]..~V.....).... [email protected]..]~...8
,YW.OG*.  ;....O...".V..Z".gl....|N.[.=..h....K.0..$...1..j...-......M
1.....2....i..wS...u.....!..tj..M|..R...j:..i{....^9..#.....H.*...v.KN
..N!...:W_F(Z.........}...;x.X.{."(...Wg..M....e.....c\JSzrAN.h..5...B
...rSo.z.~w..y...N..YB....d..,...?.....z%Xo.u..i.R[e.k......Y.,...'...
uc./..6Bw...iB.{VuD\.......Rt.D...kzCT)=.!.Y.r.Z..t.f...~.s{..=....%}g
 Y.g.....,f.e`F.P.<..a{x..~x|..t@3..|..%...j.FM.|....2{.>^p9.2..
.;V.......(h.2.=...;...R.8^.Q.lh.c.|...:..3T.5....V...s..d....-...R...
R....[UbK..-i......y...bv.&.h.J...jR....Q!#B...ZI.......)......F...z^.
h*y...NtT0S.....%O..V.,. ..M...2.ir..>..a~u. #.Y.b....^\,......x..8
.u.1...i.....`..\uy..*.........sn..../6......7ZYJ8.,..qj.m@.\..(.r..?V
).......E9.sD.1f.I..Sy... V..8.d'.....=......A/.........{~.R<.h{.u.
E......gq...x|...%..O...Def..v.1..1.L.5*.Q..5.O..%..,"r..e....r..s<<< skipped >>>

GET /mw690/8f3879f2gw1es8btuhnzcj20kw0c4jv6.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1122.v0-mow), ht h0-s1122.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Fri, 30 Oct 2015 11:45:47 GMT

Age: 3094947

Accept-Ranges: bytes

Content-Length: 127442

Content-Type: image/jpeg

Last-Modified: Mon, 18 May 2015 05:11:46 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
......................................................................
.................................................l...U.<.......Dco'
..U...F.(.<....C.l**h... ..;..7....d......II.....1..Ob.D.i9mZ..(...
..5qTN.c.D..Lm...j.'.*F.=...;En...:rH..NY........qJ...@.#.^.{1.j.9...A
.8L..j./..6........T].D.....EX...B|...@.<..-0. ....F..EM.x..:(t....
.....b...m.>...#..0..H..|...u.....y]..Q......#r.".&...h..T..T..7...
\4.T.e.%....c..9Y#[email protected]<..M.U.heM...........
l.4I.....F'..5..D...Xi$.k..%....1..(.)....k...f.)u|....F...h4A.]Z....7
APYE..U..<QU7A.:....P'^[email protected]..:/.
.Y.0...pH0..2..U...b0...p...@<.8....H.......G.L....m.I%....g.H.W2.%
....#&.......<....5.......W.....WNk.x..y(..U.$`.5[*JK.\....6.".2...
.4Gj........wEb.9..az....<.....7........q....... ...(;9Z.I.......kr
.O8f..hW..Z...\[email protected].]...I.....?V......=I5A....e.9.......`MU2....Qa
\... ...IW6I[.'I#7...........p....x.....t.j..5q.m....Y..n.(...EE. H7..
.. ....F .F... . l-.v^...\l.Ws..<..).v]5*3...A.9._..M..e...B..{..%.
......h=\.6?TL.>.Y.n.. Z.Sa..<*..A...%.EQX..c..a.U~5...........x
2.E.* ....JI=V....O...Z4.C..>.%...[..s............D7C._...m.i.j.A..
...f9.3.Z...4.q..lJt.. ....UJ...:...O.[...'..C ..]Y.....:.m.3.`<...
.l.....k.d..jj..^...V...:qE...8..C....rwe.......(a....*.C`...........-
..D....:.c.....xT........&.v.GyM.h.9...x..hl.....#..D..K;te!ae...M<<< skipped >>>

GET /large/808700fdgw1eoo3037ca6j208w05kjs5.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1000.v0-mow), ht h0-s1000.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sat, 12 Sep 2015 18:15:32 GMT

Age: 7218762

Accept-Ranges: bytes

Content-Length: 38519

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive

......JFIF.....`.`......Exif..MM.*.............................b......
.....j.(...........1.........r.2...........i....................'.....
..'.Adobe Photoshop CS3 Windows.2014:05:07 02:43:27...................
.........@.......................................................&.(..
.......................................H.......H..........JFIF.....H.H
......Adobe_CM......Adobe.d...........................................
......................................................................
................................d...."................?...............
...........................................................3......!.1.
AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE..t6..U.e.....u..F'.....
..........Vfv........7GWgw........................5.....!1..AQaq"..2..
...B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te......u..F...............
Vfv........'7GWgw.................?...O .1....'.;|tM\J@.<....NB...R
........T..D....2...|..]..v..."..1...O...k. ...$...4.7.......RN..n x..
n.YWb.../..6.:.<..-..w{..V.y.....k..............e.... ...SW.~.z.'Z.
.U...}J...!.8...*m...........[O..u'c.[......K_.e..Se.5.heD.K..N.o..3..
.c8...7]...6...3..my,....i./......s...~..j......C)hh<..s...........
fN'.Cw..eWMf......Uzz.../[email protected].(....]...66.....6/u.w.......l
...a-..7y.i>.o../..42..[.S..Wm.d....o....F..t..Q.$4.d...&G..49.D..I
.X-...m...D.O....]}4U.Sj... .3?.?.\i.:t.....ot,.,.v;..h....a.-q....*&g
t;...Lt.2r9h..o...k'...]..[.......O}..k..V..s.....:.F.V\........av;.!.
..C.F..u...U.fadl..9.{.......?...V..v5...mc.....r.6b....Q..Y......

<<< skipped >>>

GET /large/808700fdgw1ertrnyj5ifj201x01sa9v.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww3.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1133.v0-mow ( h0-s1125.v0-mow), ht h0-s1125.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Tue, 20 Oct 2015 05:13:28 GMT

Age: 3982487

Content-Length: 3386

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.109,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:2F4275CAE00311E4A1908D2FEE48C9CE" xmpMM:DocumentI
D="xmp.did:2F4275CBE00311E4A1908D2FEE48C9CE"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:2F4275C8E00311E4A1908D2FEE48C9CE" stRef:doc
umentID="xmp.did:2F4275C9E00311E4A1908D2FEE48C9CE"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
........................................!.1..AQ".a2B.q......R.#$......
..................!1..A.a"Q..B.............?.....[d1w...me...s..'.....
`...]y?K#)...G...U..E.l^. ..Kq..34_ [email protected].]..._
45-T.0.&..w.fLgU.w...;a}@...Wv...x.R8i.......p..Q..V...i.e..V@@0J.....
rC.bQR....2t...K 0.M).....JK.....Q...."a...edIa.....YP([email protected]).z...`^M.7
..|G....x.B.[<.:.no..$72Fe1..{7..........L..}9...pN;./nd..f.k .<<< skipped >>>

GET /fxstatic/images/userfile/successIcon_754795c.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:05 GMT

Content-Type: image/png

Content-Length: 1295

Keep-Alive: timeout=20

Last-Modified: Thu, 03 Sep 2015 10:04:19 GMT

Expires: Sat, 03 Oct 2015 17:46:44 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR...1...1.....DB......gAMA......a.... cHRM..z&.........
.....u0...`..:....p..Q<...ePLTE...o.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.O
o.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo
.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.
Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.O
o.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo
.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.Oo.O..........utRNS..;y....z?..D..].
^=.>........ [email protected]#.....!...qp_Cwv.d..e..E.H.....:...B.L..
.U.............FMut.on$.2G......{..?.....bKGD....H....pHYs..........o.
d....IDATH....C.0...R`.mN..1...7..)....1..._..S|. .j..sI..m..}.r....]r
...h.....agxhP.....1...#J2.7B...)'(.....4..etL.o.O.......'3i.01e....&g
t;;....f>7..3.~`n..,,z.j,....9/p.@..%....t.pE4^.F..u......q.oZ^A..-
e.o....r......d.B..u.*[email protected].....::.,..h...D..nk4....A........h=..
..l....6UnZ.....Mt..h.y(........s.l.6..0.)p...6../..8...Ge.p..w.....M&
lt;/..bb\.G....S/.....g.w.[....B...._BZ.!......;..h...7N....E...om....
.I.:..G.._..*.>..../.,V.7....;,.......r... .....}......t...e......A
.....4...~...."...s.jI.......  ...z.k..P. ..qW..............wZ....v...
.|..#.?.E....dA..$=J...'....Oy..{...kO...Lw...>#...........S..~....
Ul.......1..........Pi..U......j....3.N.. 0/....IEND.B`...<<< skipped >>>

GET /live/2015/08/28/17/1013v1440753029591128319.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 22 Aug 2016 09:14:42 GMT

Date: Fri, 28 Aug 2015 09:14:42 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 45758

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 28 Aug 2015 09:10:29 GMT

ETag: "1917375479"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 hzh86:88 (Cdn Cache Server V2.0), 1.1 fuz110:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.....%.U.....P\..7.qw.n..[p..=.......w..A.{p......5.....s.W.n...zf.nY.
...z..y]z..0.e.2.......x...I{.Z..... ..]^.`.l........XM-..,Y.. l^..l..
.l.{Q/gSs{Kw.3Kk[Ga....*.[.a*..%v%gIK.[9.WK..eMs.{s..*Q...^.^.g...)...
..M.K.._.....t.QQ....^.J....]%U.I'WK..V..svN..>.V...>>Nf.Nv.n
6v.6.....AnnAvv....7m..V..R2.........>~..........C@@...............
......?..,..]m..m..).i..9y..SQ.g..g%....?......j7wuK....M....M........
....R....C.f........:H9.{@,...R.To#.....\.....2....<......2..<..
...........?....s..IprK.rqpH..s.H.sI.s.sHpIps......n.hn..^....._y.%]-M
..\5......U.'w'7.'g.I.^.z.[G...n..l..-.t.....qu.P.k}.m....f......,..f.
,.<..,....,.......<..f.T......nlo........7..S./..5...,......=^W.
I......[.}{.!.....!# .#."... ....cc..c...`.cb......b....}.......(.7.X8
$88$\4.4.......B...........`..^......................mX...........CE.C
....`...xlJ..qD.5S\*N..D<...z$..?/@\.f.n!I.....%..C....y$.....s....
....G.[....'l.W.G2<...?......@....... ......``).8....qL].......D...
xS.E..p........4O.f..W.............gUkMR........u..X.L.<q..?H..mm..
.. ......j......JL..J.....N/.[........R........m....D#....gF..M..,....
...hs....m"[email protected]_.......nuD..M#.8:,.,.e..w.......?z...].....
.*[V.w..A.....H....... xx|..._ P"..<?....:..:....7Z.......7y>.'.
.w..y..Y..fEim.a.....4o..x.}....'.[P4N...r....9x.3.[...".i\..Oj..>.
..p..Ye.D...H..7.3.h.;.3.f.oA.J.6......Si2...-@:...x..)x.|..q.m6.x....
......z..:.D........7....<.U~0.n>.........=,.nTR.V..(.J..B_v.d..
A f.,S.VTnX.......U3`...%...K..6.7.6.....9S.ly.~..8.........b..2..<<< skipped >>>

GET /live/2015/08/07/19/1010v1438945428930586147_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 03 Aug 2016 13:43:04 GMT

Date: Sun, 09 Aug 2015 13:43:04 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8648

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 07 Aug 2015 11:03:49 GMT

ETag: "371577948"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:8104 (Cdn Cache Server V2.0), 1.1 fuz110:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...WeL...?\.s.;.2..v....!..w.....n..]......a.y.......M......i.
..~.p...`.....?.x[.............QP.Q.q......X..8D@bb" !!)...)..9!!5.5.#
...............?N.PPP.Q......I.I.......E.t.^..h...p..po..r.....?../!"!
 ........8.x8.xDD..% .#..p.."...2...>....S .0.......4....%!..3.Y...
..$p............=...?.. ...E....B....j.....0.a.......b.r'..T..(....,.&
gt;...~.g..../....m........x. 9.....PJ...V..;"...D.....H.B..'..B......
.Z....T.B.`....&.E.zmN3.9....;.|Wd.D..#[email protected]...{.s
....}...iW..<."z#y}...'....0..w.1.....x.b.n.xr..<:O'6....K..8.{.
...........~i....:u.c.EuJ.]..2.U2ON...A.K...%..{.`..|.`...[y.T.f.[..H.
Fl.~X..>..'......7.T....U..bp..=.E.....=.......(.?..B~.O..*.i..%...
/0Z..5.T...4#..=.}....U..E...@U{...X.*.z..Q~.}Y....p...gn...c|.D.....c
..9..=.z..2M....$M..$.9;i.m.....9~J2.j...zd.x.D#.....o.M..T.U..5.k...a
7...Wp.|L.R..I..-zp...a.....!.{05.<....a...3.#^..$p$q.......>...
....&.I.D..4JE..........>v..L...........,};(..x..:..P.hj..<..N..
......%S...Ke....._C.9.. =...B.K.......4n....>e....:.o.....c.{I.Q'.
f$|....G.oc._...<..[.._.E............P..k>..<... ......~L.2@.
Cw.$R....s..tj.q.LB..'x....-...w[....$.n...v..4_.......,[%_o.}.7!.-.Lk
WO...).7...z.....q....EW.Ey}Vk.L{.rd....!..X.K....#.... ....C.....J.. 
xI....W......IA....1[}....d.K....3{...n...O....M.G.O>6.`..$.:....}`
_v.a.b..5.......U........H.U .4z.F....^q_c..M...h......y.....D..K_....
.1x.....I]..... ...|w.w.-.4G.A~9..o..a.7.7.N...Mx.;../...jR.EB.....S#$
)[email protected].~If.m...!...x"..6.?yU...B...c!....U.#...2-.4..P..I.<<< skipped >>>

GET /live/2015/08/30/17/1010v1440928658925275259_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 25 Aug 2016 03:41:04 GMT

Date: Mon, 31 Aug 2015 03:41:04 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5742

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 30 Aug 2015 09:57:39 GMT

ETag: "122847954"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou83:8107 (Cdn Cache Server V2.0), 1.1 fuz111:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...wg4...~..............YJ..mP{.....cU..F...V..Q.h)..V.../....
}........{.=.v.v.@.....   ..G..... %&!%!&%%!%##%.......d....gcfggcfe..
[email protected].$. [email protected]..
...........!.1)....*O.  .GBbb.bB..*........_J.......Y.E..HF....e...0..
/.....m./.. ..?... ..........Q..I.......v.@M..........\j..g.r.0..*M.b?
U..EE...v..,wt@$.;.@.][email protected].([email protected],.E......Q.
..}.........c.......s.].}.;.9..^......M.r..(................Z. .m..9.h
n.&.....rJU,.z....1b. .....%>:J.....:...0.m.....I..ZK...A%>.{.Ij
0..|{>.r.).,B..u.....$.......w..*..,...GI9.R......'....4.t.........
.A"h.....M:0...N.w......6,[email protected]`=.Z......K..K..y.i&....D.
.z.A...u4mT.}.EG.(:.e..m`.}...h.j..'..QB...O."r.3[.d.......'.S}T.Wo$#.
.Y...>......B".......Ol;K...q......v2.......%....0m.V.....\.....KY.
L...U.....*....5kyOS.t.S....K0`..Zh.3n.....3......Y....]......?...hl..
^..w.Ki....&.j`.7....b}u....Z...._F.d..m.`.l?.....#4RpB..tS...t...4v..
.....l^Z.Ud..D...B..|f.-...H.....0.............*kI.z..:.g*B.F..U..L...
h3......-...u.$..]6-..6?....,g..lDZj....G.,$W.k....w*t....[.D^.e9S8.{.
F..3e.* ..od&.-...t..j.........`.l.=.fK{.u... ...4......"BrP.s..z.A...
........a........e..n6...0,..jN.o.......N...}.~.Q. [email protected]..>.!C.[@..
...w.'J...~...6.0..I.E.T&..D.`.....a...U[" W[...U.rX.'...7b.q...G....8
.......c...g/........$......z....%.O..: ......e..>...=p..._c.g.T.Ri
TC1I]|AT&...2.n,S...T6.Q..h.*.^.....EE./..~}Y<[email protected][....1.`[x......
r....c6.H>....d).C.....-......".Jg.?.....Og...Fp......... .(.o$<<< skipped >>>

GET /live/2015/08/26/08/1003v1440549063335539924.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 25 Aug 2016 03:41:13 GMT

Date: Mon, 31 Aug 2015 03:41:13 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10233

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 26 Aug 2015 00:31:03 GMT

ETag: "2255219129"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh92:80 (Cdn Cache Server V2.0), 1.1 fuzhou181:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...wUT.\.mp .n..........P...[p..."AK. .).Bq |.)....?.u_..y....
[email protected]................%.6..::....&. .W..p....H........(
..I...._.RRQ.Q.....O.....t.....2|<|..o....c.:..h(..Tb.4b....z......
......X.(h8....4......... *&.?......A..I.E./..k.M...YA....U^o..B..`..s
.....O..@EC.... .1..X.H..s........c..........._.C..E....73.m..\PA..3 t
...:[email protected]_w.C.t....rb...s.[....."..... .i.Gt...G.Q.
-}.X.-..S}x$...]i.{....6p.. [email protected]....)... ..l...M.{?.......~.
.3.Ng&9SB..pu..#...o.<..nv..:.9....b....z.?B.%..,...C...X......v..i
2.a.X.cB0`.O.1..F9..l.-....8.........w..........ld9.......1..k....E...
. ......}C.,%.^{.. ^.27..........^.;..Ah..9.RB.D......J..:.......@,.;i
X....".MH.=@}M....vw..V{.s....;....z.2...s.....O...N.}.. ..wLLW...heDf
S......c.L:[email protected]>.......|..T.h|....mX#.......";
..q.2..K5Pm].7.!..o.BX=...o.v.....@........,/r.G..'[email protected]...
.%.~.2j..X........0..{....-Q[....S.........(...6.....V....y....{Ci..y.
{......r....A."...K...}.H...7b.!...,....(.....^m...:....!..Z ....C(^GK
I)...1 (c.......9....:..}.....[.Y...$..t..%.. *...r,:G.....m....e.Ae..
.a..u.]..l..#...U..Fk.KZ..B=Nfc...R.U}U7o...L..psU{..u...C..D.i......"
..%L.....c.7..R.~.[.&.....&.G.~ ^./._.)!.......3.*.j...>...._.TOL..
....(J& ..........O..V..G;..:..PH.....S..Jj.7....(.K.m..9c..Q....%..I.
:..}...&w..0...n.{....i7f...'...94..:.?.zO..V`&..oi.4....Ve^..$..i.7..
[email protected].,..W.%}w. ......./ZlW.-3u. x.9....(h._..b."?/,...?..r...K.}X.
...:..3.....9..............V4..]..-.$.p;G.}Q...7d.V.....g.H....R..<<< skipped >>>

GET /live/2015/02/03/19/1003v1422961785334695929.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 29 Jan 2016 11:23:52 GMT

Date: Tue, 03 Feb 2015 11:23:52 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7705

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 03 Feb 2015 11:09:45 GMT

ETag: "298426192"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zhenjiang166:8109 (Cdn Cache Server V2.0), 1.1 fuz109:10 (Cdn Cache Server V2.0)

Connection: keep-alive
[email protected].....,..]|wqI.....'HpwO......B ..b.....H.........s
=...TO=.=.5?......H!.`.........x\....`.<..~.......<.R..||.Jb.BR.
JZZ.Jjjz& .=..#55.. ..7/./.... ......?$.....x.....<...<..... ..4
...0...d.Xd....&........-.Op.0q.....!...L.L.'Op.q...G..........(......
......*.h...O*.0[jZN...Lq....s...K/...\.............?.........-.....&.
6....(...JvC....b0.4*[email protected].... U&`.`...P).!.....E.l....p..
Q6C.t........![...?.........(Z.`......9.*.H~d..i.{.D.`.)pp...6.#.Z.h,.
...Z.W?.#XN..I.......!...~.#..i..Z\...)........U..M.0W.......1..v..0|t
....3.j.j...t......A...&V.....v.;.K.s$.PA..|.'x..jv.....<..$".,.r..
y.}...#.....:..!\.z..O..!.Gw...o.. ....%A..i.5....].o..t=....(P{.I..M.
...=4.....{.<VS..8!..................MY~kM}.]C..r.(..b>..M..v.:.
...-.=...'|....b.....`........=.p.7.(s^`[email protected].#...~"*.M.~....p.
.ut.r\.l.^.K.!.......B..;`8q.j$.....5Y. ....[Wf.>..._:..^m....&....
.^....`.L...d#..J.H3.^;......|....e.e9.....!m.......9s.w.y....f.....Z.
....,3i..xwk....i!.!....h........n.D...-.z .r..;M.,.lm...........L....
...[?:".....bi."}..3.=.y.sG......t.A..^:.L{...U.t.Jk..YF...El}..f.IJ.C
.s....A|..S.u.Bo.S.O..>.<.S..@...,t..-.......&....f.wvy.....k..E
..n.C5...sG.....?)<[email protected] .........\.b,...2jG3YK*...SHm...
.,n..M.. \.b.......>....s|g......f...2.....I...).M.....v....!.z..m.
..B.y...b...8.c.....X/..\.........n.-Z..*..Cm...2.n..$.4...;<.L...Q
..Yk../.dY.F...i......j....\.................8...|........$..9..auM...
7M....*..Y..3x..N......aO._k...%..._.j....PQ..9.ch....\e.E......1.<<< skipped >>>

GET /live/2015/09/04/16/1003v1441354186519694368.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 29 Aug 2016 08:13:24 GMT

Date: Fri, 04 Sep 2015 08:13:24 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7883

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 08:09:46 GMT

ETag: "3944509804"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 fzh55:8107 (Cdn Cache Server V2.0), 1.1 fuz109:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.....Q.U...WUT...^:....aAPR.aY.Zz.iX`...FR.ZXB..YBB.......)A......>
.o...o.7..9.0...k...5.........<,.....x.x...x.........DD..d.$.O....P
..20s.20r2...=c.|..........}...........1!.cb........o<|.P....4.....
..............._..........B...........y.........G.O...H..C.....Z.Y....
...U........_.8}....}.O.......z.........Q.....].......a...}...'.Gm....
Q.<,.Hp..Q.P....Gx|D.....~.)*..jt...Y`d.C..L......Th.Z.c4]...t,....
.u.0c.|..7.|......n.h:1%.....5..........e........:.\b7.....N..`m...K..
]gS?L..J..N&i....=..T/D...ff'o...-j./<f........t....u.d..#uI..j..m.
.xH.B....cW6g.l....L..Yvk.R......Pr....R..B.g......R......_7sI..f..8.V
f....eb.o...x.=.jnU..K..8.0....x.O..=.'c...`...M.....8.U..f"..`<...
"A6.#...:-.!......s.t._\Y...[0jw..J...t.:.A...exJ.....X.>.C.b.'Z~..
.Csl-'.b..`..w=v.1.!...h.D.F.{.....E.kO....<Ubj.aF..H..............
..&.....k..Y......"...=..a#...0%[email protected]*6"..y..$.P.5....Q..
.6.=.CU5..}J.............].[_,[.....N....4?{gI.jR.<.........Dr.....
.`....LC._...{Rs...{..=u.&0z..*zc./5.1..... N<.5.y.....O..y/l r>
..&.....e..M...y...kE.Z...7n.. .....B........P.....W>d.0=....x%i.,.
..OQe...-.~z..<.:.,.....N.....x.....m.hd)./YVHf.e....O..L.5...S.Oa.
..sLcg.Rl.~1.92d...yWM.9.`.9.w .)..As..yF....Q/.7h.{TL@......>.UQqh
5=z...i9C..Y0........\fX....h.k...E.."[0.......M.n.n.<..I#w.G...x..
.J.................9..y6....lKkK.q!.~X..4Lvw.L....?ku.%D....V..3i...M.
..........r.K|&su.|j....I..I.6"4....s......sf.i..L....!U.W...z........
...T.Th{.oT..X...._.ol..j.......9i.....!"2...1.&.;|....f.......].Z<<< skipped >>>

GET /live/2015/04/25/01/1010v1429894951825129732_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 19 Apr 2016 14:25:46 GMT

Date: Sat, 25 Apr 2015 14:25:46 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6797

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 24 Apr 2015 17:02:31 GMT

ETag: "1667890239"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh86:80 (Cdn Cache Server V2.0), 1.1 fuz110:7 (Cdn Cache Server V2.0)

Connection: keep-alive
....'w:U...WeT.l......A.a..X.....F...\@.].F.u.~`AR.N..T....).........w
....f.>..33......C=.......#....6...................................
[email protected]\R\HR@HX.?A....d$d.dd.BlLlB.o.w.hI.}.[| /....O...
[email protected]@<b...f..................' ...."...p%f.....Y.e2j5.L
K..l....e........../.........WZ .->[email protected].|..!.w...(.
A....,${.}....B-../.?..$....m.....,%/..HJw....m.G.h\.....Z>:Z...:?w
.b..V.4...rw.5..0..I.wfWqA.o........"o_....:.9W..U.[IjIG.....7.w!..')=
t...R..K.....s..Y....c._u?A......$r...g?..Z.. #.G6.i..^...:>vP...6.
.('...n...&...BH...[4.`...}....s........5c..~..I...[....A......]6.I|..
z...N.yC............#..i5.."%...}.<.V...3....%#~......U....s..-(...
...8../..v<..J .y......om.....{......l.%[email protected]&....KZ...../....
....~.uE.6:........x.V.....8D.!...tU...........6.....q2...B.{.....Z.H.
..g>4...ke6|.......?....FbaE...B.$n.!ez.8.G.UyXX..N.<h.e.,Z!.:i.
]..e..p..t.t....v.y..zhy.....3Y)..{...P.....i[2.g.R.........k~f.aXa5zG
5...X..MR.46|.\.hx.X]......P=....VNFh..q..O.."#...]...-.S.........7.M.
~.`a.n.h..Y&@uto|j..h..'q =..b...J..O....Q...dBlD.y{N...J..(3&..U.[/..
&=..)....R""..:..H|.C^.U.).[\....%...I.x^GaB.....R.(.......|~...l.K..~
T/i.u..NJY.e..H.oD.m...<r...........]...&.C..C......M..E.g...*.Z.u.
xXL..9r.&.or[....s-.........].a.Gs.$\...,.a.d...=..*..n.W..........6..
..A.^......jOmvJ...C...ue....Lb.3....973]=@|fwr#V..`..PTG]...........v
`7c.j........V..4.]....`~..V.-..o.v..g ....S./.......d........b.?.".l.
.....OAg.....t..X.9..C0..(.".|3>[P.^.....b..F.........f.7PJo..l<<< skipped >>>

GET /live/2015/09/05/11/1010v1441422031094414229_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 09:34:28 GMT

Date: Sat, 05 Sep 2015 09:34:28 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8137

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 05 Sep 2015 03:00:31 GMT

ETag: "3873483501"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 fuzhou59:8080 (Cdn Cache Server V2.0), 1.1 fuz114:9 (Cdn Cache Server V2.0)

Connection: keep-alive
.....Z.U....UT......N....f...f..I.]...Xb)iQ.na....E..........7.7.0g...
..&._....   .....*@......................I....OFLNNFLJJA..............
.....-./. .[V6.. .hhh...D..D......o.~..............H.....*.....n.W..H.
.D...se....H...H....H........(...|rD..>.Q.h......z$.v..}3[.L...W...
[email protected]......_..5..........umQ|../_W...*.3..2..f.A......QV
{..G0.. ..tc..d.[.......9.?....=..U]..7f...g..]......5..h....(..".....
)5.......)~.a......Q.F...;-{.\.....Vg..~...3;.....B.U..........[e-].Z.
.....Tc.......}...s.[..B#.J9.Z\.....9; 2L...0.&xU...H.....n<.}....4
K\.......QU.*.....\..\..g.k#...<..7.....E]'0^.326._.....O..[73.'...
.Fk.{...t-...-r=s...3.0.0A/&..o.7..^.=..'.l....BBh.)T..........|VE...m
.i.Cmk.,...x..I..=0).;{.X.....Q*tk;A./iW.~n..a3lP..JP.CEu_.w.T.....#..
.......%s8*.u|...........8c*...xfH..0P3.<.}J-.a........."...9..$e..
..c..X.......v......V.p........T.....T.../.0...aG{......)q|..-..Wt.{&g
t;....d...-.E..<..3.2..<...z_cL/.:h.b.*...n|...=-......5..D.....
..5J.o#.=R...v,J. ........ ..Y...z..&.....6(....U..q..]O..1.P. T.D.~6.
.v".H...ke~...g...2..d.......T......?....y..*..|.....#...c-^m..[..['.w
......).S"...Z>.....Ru....pg.0..wX..vb/.n4!.y.C.t...w.....%U.?.`..Z
.xfS.S...........\....7;...of{0.H..7e.-...Nr(W.FT.k...R-.{.h.=.a....f`
lt....t.Re)...t[.8...T 2[$.y[ [email protected]..........:..i....t..J...4...
T...,[email protected]).1.......T`dO.1....FnE.y..M......15.la
..A..U.J.G.....-BEH....L.v..,k.}.}..K......W....V..QK.6.x..AJ...H..%..
.....M.e*...V.......c...^.... Z.R...\#..:y{......U.{Y....3....P..*<<< skipped >>>

GET /live/2015/05/26/18/1003v1432637075681653373.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 20 May 2016 10:54:26 GMT

Date: Tue, 26 May 2015 10:54:26 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 13055

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 26 May 2015 10:44:35 GMT

ETag: "2053989401"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:8111 (Cdn Cache Server V2.0), 1.1 fuz114:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.....NdU....eL.\..=..0......>.....n-...A.w...Kq..R........w........
..N.......>XQE.........m.....(.(...(.hh.........@\<l|. ))...".b.
!.`...h9i..Y....h..s..gbec._.....&:&.&&. [email protected]...
.....7../$dD.T.4....,>.............?......B.JH..FD/.........H,.q/..
..../'.:0G"....{._.........wEF....g.........GAFDD._..6.2.....6.G7Tz...
"`...?.|.s.W ..{..:......H..).}K=.1.9E.I./.. '._........|.. .U......N.
.O.v.&..3..,.4Lz}.d.6..l.4..`......&..G6-.{.=.rs.;v:C..?..............
..hK{..]{.k.T......R.0mj2...(.R8................(J...:..q\.TL..K.R....
[email protected]!....L...x<8=sGM9S..`>....69....L....c...
.(rC.._T.. ..S'..p.l&.......\.......I...~)1..T.OG....?..;7...C .0G...I
j..r..j[.P..v..FL.E.....%L/..N...Q..l..}.Ex.O/.... .m..\cpoR...N.5H"X(
'w./J...M....%P.=4.<.E.c......=He.j.`.?..f!%.B.!...-...Fs....s...UK
p.)Hs..A.....&..-nBx^....e"%hc.....Y40.Q..}....._9.....1O...;M....|._O
.....M...`..$!n*`........GSm.i..]X;..?.:...*?...#..hQ.J.d.j.5.....2.oh
E..J...............;.....'*.g../.....Z\.).!..v`uRv'u.~ .z.1s41 .AJ1&~c
..D.b..V).R....`...}t-U...,`[.A|..M...".K..,3...x.~..I.=...k..........
......^.s.....w...hyqt...s..'b...7.7.*./."..."]X.dq.c].K".<...5....
....9iT...(.cjy..2..F.<A..{.^..4........j..%n....4.$y7.......7U..5=
...........BG....:...R1.....Q..W....n....<.\$.e..9.S..:...Uv,.P..~.
.Y..^b..../.....{N?.W.V}..7..~..(|....e...s.`...`.G..2^r....R..}>..
L.p...2. <..O....yg.e........?.4Q..a.&.>5.MT.G.d..,........~....
....V..Oa.:..h.8..*^.W....hT.&.)[email protected].!.\..%eQX.....z<<< skipped >>>

GET /live/59/47/a0b8c87b6804155aa4db6b07abc52998_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 28 May 2016 16:30:51 GMT

Date: Wed, 03 Jun 2015 16:30:51 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10284

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 21 Nov 2013 07:37:54 GMT

ETag: "253729667"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou88:8104 (Cdn Cache Server V2.0), 1.1 fuz113:10 (Cdn Cache Server V2.0)

Connection: keep-alive
....R..R....UP.........P.....[....."...).Hq..wg....Rlq]X.].~...9...7..
d.L...e.e...(. .@B........ .QCFJKUC.....................NAQ.NQMF..S...
.........N.N...e........................M......1...bRR..w....T..t.t.L.
.l....\.,\.XXY....................Y/]..L@;......L..B..............!!..
.........z|.2...2*...*.?...~.*...[n)t"u3.z.b...\L...n...........I...S.
cbfae.... ($.............HWO................o....a........S~..........
.....7465..........LM.......76...;...............p!.P.....\....QQQP1..
.......T.....R..f.D.<........X....$....I..6.............../.....x..
..y(....=.......F.`.D.......nV).K...g...........Z..P.f!.<...Td..Qsl
@.K$.0F..Y_.)Mb......~-:|.N.T3.~-..'..~..h).B...%DSV..@.\v.!..5.Q. ..9
./D.........PT.-.$..g.... . &Xt.S...s........W..~..o.K...e5K.v...m..&l
t;...:.........Z.".2q9.3/I.v....Y..X....[M.......C.....*...P|.-..e9...
....-....wE...05?".).&7..x....D}.}bm.R.lqa-.6.K*...8..0Y.........BL...
......8.I..Z..zt...%zS....kS.4C$(M.!..T...1V.G...@r$.. ...1.mH.m.{....
..u..........U.d.P.."...[..S.T.N..s.....j$N.XO.s..U.`....E..n}..l.....
.D..i0...UoZQ&D...$.......K].....mZ4.".TW..&...6g.=.;.B.UnD..<....;
.....*N..Y.v...E`..<..d..|.S.......(':.....R. .B"I(....#K.n#..o....
Q.Q..DJdo%.....X8......KE.>[email protected]).f3. :=.1..QB7./..$.|!z.._N
.x..m......'..Q.9.)...~.b.G..7..S...Po...5G...#i,6..o.et .D.w...1....e
'v$=.....\....ll..~...po..b.(C.#;.Q..y.....{....Xb_..G.X...c...N.k....
..R.....jC.n.O~Xbb.|.*...._}...YH.......;Y........R.....Vc.G./.as)...v
(....UF!.S..M.jt[^.g......Z....9d.`.. 2. [email protected].....<<< skipped >>>

GET /live/2015/08/27/21/1003v1440682861143479209.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 21 Aug 2016 14:05:34 GMT

Date: Thu, 27 Aug 2015 14:05:34 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7555

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 27 Aug 2015 13:41:01 GMT

ETag: "877122591"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 huzhou90:8107 (Cdn Cache Server V2.0), 1.1 fuz110:6 (Cdn Cache Server V2.0)

Connection: keep-alive
....m..U...WUX...]B..nX`.....QZR:....n.ZJR..%.$.Q....n.......p...=.6g.
..2..y.{Z...(( ........."@.......&..3, ..........................L.b..
.`.f`be............s..........%..%e...a....'.....h.@#....a..=..h......
..4t..z...X9".:..:..g..hX..&....^`...2.j...]C........?...8...`..^g..q/
B....F.`.....Q|....................&.9....\...3&...........zb.b.4.....
[email protected]...}D.z.z.... .t..,........y]..[.......*.d....L)...R".Y.
~.....\O...fI......e....$.8....r......^.....c....yN..Q..[....8&[...N..
..|.J..x.......~~<..e..;.........fB.^i...e./.....Tk....x..t.Jl..q`6
......../..q....wp...&.0...#t'... L"9../.......!....U....uQ...j..f6eY.
<./f...:.9.........V..;.4.....r....uT...N.x.Z9..`..9v...).$........
^i.....U7.w..n../.C..,..{.*)!ut.ph. v......R._....A..\.B)oo..i/*.~.7n.
...]e}.vZ^..i.e.....;..:..D..'.i..t.s:J.&.x.lXG..V36w$.mM..2...}..$h.~
XA.4...........D~g..d...i(u.m......h.n.%.9.UE..s.0.5-....^.*.c..,.....
........*...c....aG.AS.F......5.. ^~Z....... ..t..Q.d...dt7A......2mf.
J.=%..%w..y65.C$8bw<XkS.vY..........x ..h..].~d.......';xZ.....Z,..
...p..!.....c>.&..ng....!.A7.$..;BL .=.47..c;(#.....g....=G.}-P.k..
G....o9.2NR..3.*..}......#.c.48w.....tU.t....i.=.ww.3.@>...HSj$P{?.
.h...L.74u...(2..89..ECC.5..kL...........D..~K]..r...K.....3z....#....
...p.....gW...cg%.....}.~....Y....$z..^.....g.....M.......d...p...:...
.l....C.e.Q..U.Q..&./.....i.....,...(j1=.<.9.B.;..=?..w..T....4zf..
 .....N'...!p}...8.....ZC~2...h.N..M .3o ...1..m..E.........R.~......)
Gw.*V....c.H...a.3.S.e.T[..SY.D...{..aYYYr.......!.u1W{Au?..il..*&<<< skipped >>>

GET /live/2015/09/04/16/1003v1441354186519694368.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 29 Aug 2016 08:13:24 GMT

Date: Fri, 04 Sep 2015 08:13:24 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7883

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 08:09:46 GMT

ETag: "3944509804"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 fzh55:8107 (Cdn Cache Server V2.0), 1.1 fuz109:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.....Q.U...WUT...^:....aAPR.aY.Zz.iX`...FR.ZXB..YBB.......)A......>
.o...o.7..9.0...k...5.........<,.....x.x...x.........DD..d.$.O....P
..20s.20r2...=c.|..........}...........1!.cb........o<|.P....4.....
..............._..........B...........y.........G.O...H..C.....Z.Y....
...U........_.8}....}.O.......z.........Q.....].......a...}...'.Gm....
Q.<,.Hp..Q.P....Gx|D.....~.)*..jt...Y`d.C..L......Th.Z.c4]...t,....
.u.0c.|..7.|......n.h:1%.....5..........e........:.\b7.....N..`m...K..
]gS?L..J..N&i....=..T/D...ff'o...-j./<f........t....u.d..#uI..j..m.
.xH.B....cW6g.l....L..Yvk.R......Pr....R..B.g......R......_7sI..f..8.V
f....eb.o...x.=.jnU..K..8.0....x.O..=.'c...`...M.....8.U..f"..`<...
"A6.#...:-.!......s.t._\Y...[0jw..J...t.:.A...exJ.....X.>.C.b.'Z~..
.Csl-'.b..`..w=v.1.!...h.D.F.{.....E.kO....<Ubj.aF..H..............
..&.....k..Y......"...=..a#...0%[email protected]*6"..y..$.P.5....Q..
.6.=.CU5..}J.............].[_,[.....N....4?{gI.jR.<.........Dr.....
.`....LC._...{Rs...{..=u.&0z..*zc./5.1..... N<.5.y.....O..y/l r>
..&.....e..M...y...kE.Z...7n.. .....B........P.....W>d.0=....x%i.,.
..OQe...-.~z..<.:.,.....N.....x.....m.hd)./YVHf.e....O..L.5...S.Oa.
..sLcg.Rl.~1.92d...yWM.9.`.9.w .)..As..yF....Q/.7h.{TL@......>.UQqh
5=z...i9C..Y0........\fX....h.k...E.."[0.......M.n.n.<..I#w.G...x..
.J.................9..y6....lKkK.q!.~X..4Lvw.L....?ku.%D....V..3i...M.
..........r.K|&su.|j....I..I.6"4....s......sf.i..L....!U.W...z........
...T.Th{.oT..X...._.ol..j.......9i.....!"2...1.&.;|....f.......].Z<<< skipped >>>

GET /live/2015/09/04/16/1003v1441354186519694368.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 29 Aug 2016 08:13:24 GMT

Date: Fri, 04 Sep 2015 08:13:24 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7883

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 08:09:46 GMT

ETag: "3944509804"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 fzh55:8107 (Cdn Cache Server V2.0), 1.1 fuz109:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.....Q.U...WUT...^:....aAPR.aY.Zz.iX`...FR.ZXB..YBB.......)A......>
.o...o.7..9.0...k...5.........<,.....x.x...x.........DD..d.$.O....P
..20s.20r2...=c.|..........}...........1!.cb........o<|.P....4.....
..............._..........B...........y.........G.O...H..C.....Z.Y....
...U........_.8}....}.O.......z.........Q.....].......a...}...'.Gm....
Q.<,.Hp..Q.P....Gx|D.....~.)*..jt...Y`d.C..L......Th.Z.c4]...t,....
.u.0c.|..7.|......n.h:1%.....5..........e........:.\b7.....N..`m...K..
]gS?L..J..N&i....=..T/D...ff'o...-j./<f........t....u.d..#uI..j..m.
.xH.B....cW6g.l....L..Yvk.R......Pr....R..B.g......R......_7sI..f..8.V
f....eb.o...x.=.jnU..K..8.0....x.O..=.'c...`...M.....8.U..f"..`<...
"A6.#...:-.!......s.t._\Y...[0jw..J...t.:.A...exJ.....X.>.C.b.'Z~..
.Csl-'.b..`..w=v.1.!...h.D.F.{.....E.kO....<Ubj.aF..H..............
..&.....k..Y......"...=..a#...0%[email protected]*6"..y..$.P.5....Q..
.6.=.CU5..}J.............].[_,[.....N....4?{gI.jR.<.........Dr.....
.`....LC._...{Rs...{..=u.&0z..*zc./5.1..... N<.5.y.....O..y/l r>
..&.....e..M...y...kE.Z...7n.. .....B........P.....W>d.0=....x%i.,.
..OQe...-.~z..<.:.,.....N.....x.....m.hd)./YVHf.e....O..L.5...S.Oa.
..sLcg.Rl.~1.92d...yWM.9.`.9.w .)..As..yF....Q/.7h.{TL@......>.UQqh
5=z...i9C..Y0........\fX....h.k...E.."[0.......M.n.n.<..I#w.G...x..
.J.................9..y6....lKkK.q!.~X..4Lvw.L....?ku.%D....V..3i...M.
..........r.K|&su.|j....I..I.6"4....s......sf.i..L....!U.W...z........
...T.Th{.oT..X...._.ol..j.......9i.....!"2...1.&.;|....f.......].Z<<< skipped >>>

GET /live/2015/09/04/16/1003v1441354186519694368.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 29 Aug 2016 08:13:24 GMT

Date: Fri, 04 Sep 2015 08:13:24 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7883

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 08:09:46 GMT

ETag: "3944509804"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 fzh55:8107 (Cdn Cache Server V2.0), 1.1 fuz109:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.....Q.U...WUT...^:....aAPR.aY.Zz.iX`...FR.ZXB..YBB.......)A......>
.o...o.7..9.0...k...5.........<,.....x.x...x.........DD..d.$.O....P
..20s.20r2...=c.|..........}...........1!.cb........o<|.P....4.....
..............._..........B...........y.........G.O...H..C.....Z.Y....
...U........_.8}....}.O.......z.........Q.....].......a...}...'.Gm....
Q.<,.Hp..Q.P....Gx|D.....~.)*..jt...Y`d.C..L......Th.Z.c4]...t,....
.u.0c.|..7.|......n.h:1%.....5..........e........:.\b7.....N..`m...K..
]gS?L..J..N&i....=..T/D...ff'o...-j./<f........t....u.d..#uI..j..m.
.xH.B....cW6g.l....L..Yvk.R......Pr....R..B.g......R......_7sI..f..8.V
f....eb.o...x.=.jnU..K..8.0....x.O..=.'c...`...M.....8.U..f"..`<...
"A6.#...:-.!......s.t._\Y...[0jw..J...t.:.A...exJ.....X.>.C.b.'Z~..
.Csl-'.b..`..w=v.1.!...h.D.F.{.....E.kO....<Ubj.aF..H..............
..&.....k..Y......"...=..a#...0%[email protected]*6"..y..$.P.5....Q..
.6.=.CU5..}J.............].[_,[.....N....4?{gI.jR.<.........Dr.....
.`....LC._...{Rs...{..=u.&0z..*zc./5.1..... N<.5.y.....O..y/l r>
..&.....e..M...y...kE.Z...7n.. .....B........P.....W>d.0=....x%i.,.
..OQe...-.~z..<.:.,.....N.....x.....m.hd)./YVHf.e....O..L.5...S.Oa.
..sLcg.Rl.~1.92d...yWM.9.`.9.w .)..As..yF....Q/.7h.{TL@......>.UQqh
5=z...i9C..Y0........\fX....h.k...E.."[0.......M.n.n.<..I#w.G...x..
.J.................9..y6....lKkK.q!.~X..4Lvw.L....?ku.%D....V..3i...M.
..........r.K|&su.|j....I..I.6"4....s......sf.i..L....!U.W...z........
...T.Th{.oT..X...._.ol..j.......9i.....!"2...1.&.;|....f.......].Z<<< skipped >>>

GET /live/2015/05/26/18/1003v1432637075681653373.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 20 May 2016 10:54:26 GMT

Date: Tue, 26 May 2015 10:54:26 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 13055

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 26 May 2015 10:44:35 GMT

ETag: "2053989401"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:8111 (Cdn Cache Server V2.0), 1.1 fuz114:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.....NdU....eL.\..=..0......>.....n-...A.w...Kq..R........w........
..N.......>XQE.........m.....(.(...(.hh.........@\<l|. ))...".b.
!.`...h9i..Y....h..s..gbec._.....&:&.&&. [email protected]...
.....7../$dD.T.4....,>.............?......B.JH..FD/.........H,.q/..
..../'.:0G"....{._.........wEF....g.........GAFDD._..6.2.....6.G7Tz...
"`...?.|.s.W ..{..:......H..).}K=.1.9E.I./.. '._........|.. .U......N.
.O.v.&..3..,.4Lz}.d.6..l.4..`......&..G6-.{.=.rs.;v:C..?..............
..hK{..]{.k.T......R.0mj2...(.R8................(J...:..q\.TL..K.R....
[email protected]!....L...x<8=sGM9S..`>....69....L....c...
.(rC.._T.. ..S'..p.l&.......\.......I...~)1..T.OG....?..;7...C .0G...I
j..r..j[.P..v..FL.E.....%L/..N...Q..l..}.Ex.O/.... .m..\cpoR...N.5H"X(
'w./J...M....%P.=4.<.E.c......=He.j.`.?..f!%.B.!...-...Fs....s...UK
p.)Hs..A.....&..-nBx^....e"%hc.....Y40.Q..}....._9.....1O...;M....|._O
.....M...`..$!n*`........GSm.i..]X;..?.:...*?...#..hQ.J.d.j.5.....2.oh
E..J...............;.....'*.g../.....Z\.).!..v`uRv'u.~ .z.1s41 .AJ1&~c
..D.b..V).R....`...}t-U...,`[.A|..M...".K..,3...x.~..I.=...k..........
......^.s.....w...hyqt...s..'b...7.7.*./."..."]X.dq.c].K".<...5....
....9iT...(.cjy..2..F.<A..{.^..4........j..%n....4.$y7.......7U..5=
...........BG....:...R1.....Q..W....n....<.\$.e..9.S..:...Uv,.P..~.
.Y..^b..../.....{N?.W.V}..7..~..(|....e...s.`...`.G..2^r....R..}>..
L.p...2. <..O....yg.e........?.4Q..a.&.>5.MT.G.d..,........~....
....V..Oa.:..h.8..*^.W....hT.&.)[email protected].!.\..%eQX.....z<<< skipped >>>

GET /live/59/47/a0b8c87b6804155aa4db6b07abc52998_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 28 May 2016 16:30:51 GMT

Date: Wed, 03 Jun 2015 16:30:51 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10284

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 21 Nov 2013 07:37:54 GMT

ETag: "253729667"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou88:8104 (Cdn Cache Server V2.0), 1.1 fuz113:10 (Cdn Cache Server V2.0)

Connection: keep-alive
....R..R....UP.........P.....[....."...).Hq..wg....Rlq]X.].~...9...7..
d.L...e.e...(. .@B........ .QCFJKUC.....................NAQ.NQMF..S...
.........N.N...e........................M......1...bRR..w....T..t.t.L.
.l....\.,\.XXY....................Y/]..L@;......L..B..............!!..
.........z|.2...2*...*.?...~.*...[n)t"u3.z.b...\L...n...........I...S.
cbfae.... ($.............HWO................o....a........S~..........
.....7465..........LM.......76...;...............p!.P.....\....QQQP1..
.......T.....R..f.D.<........X....$....I..6.............../.....x..
..y(....=.......F.`.D.......nV).K...g...........Z..P.f!.<...Td..Qsl
@.K$.0F..Y_.)Mb......~-:|.N.T3.~-..'..~..h).B...%DSV..@.\v.!..5.Q. ..9
./D.........PT.-.$..g.... . &Xt.S...s........W..~..o.K...e5K.v...m..&l
t;...:.........Z.".2q9.3/I.v....Y..X....[M.......C.....*...P|.-..e9...
....-....wE...05?".).&7..x....D}.}bm.R.lqa-.6.K*...8..0Y.........BL...
......8.I..Z..zt...%zS....kS.4C$(M.!..T...1V.G...@r$.. ...1.mH.m.{....
..u..........U.d.P.."...[..S.T.N..s.....j$N.XO.s..U.`....E..n}..l.....
.D..i0...UoZQ&D...$.......K].....mZ4.".TW..&...6g.=.;.B.UnD..<....;
.....*N..Y.v...E`..<..d..|.S.......(':.....R. .B"I(....#K.n#..o....
Q.Q..DJdo%.....X8......KE.>[email protected]).f3. :=.1..QB7./..$.|!z.._N
.x..m......'..Q.9.)...~.b.G..7..S...Po...5G...#i,6..o.et .D.w...1....e
'v$=.....\....ll..~...po..b.(C.#;.Q..y.....{....Xb_..G.X...c...N.k....
..R.....jC.n.O~Xbb.|.*...._}...YH.......;Y........R.....Vc.G./.as)...v
(....UF!.S..M.jt[^.g......Z....9d.`.. 2. [email protected].....<<< skipped >>>

GET /live/2015/08/27/21/1003v1440682861143479209.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 21 Aug 2016 14:05:34 GMT

Date: Thu, 27 Aug 2015 14:05:34 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7555

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 27 Aug 2015 13:41:01 GMT

ETag: "877122591"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 huzhou90:8107 (Cdn Cache Server V2.0), 1.1 fuz110:6 (Cdn Cache Server V2.0)

Connection: keep-alive
....m..U...WUX...]B..nX`.....QZR:....n.ZJR..%.$.Q....n.......p...=.6g.
..2..y.{Z...(( ........."@.......&..3, ..........................L.b..
.`.f`be............s..........%..%e...a....'.....h.@#....a..=..h......
..4t..z...X9".:..:..g..hX..&....^`...2.j...]C........?...8...`..^g..q/
B....F.`.....Q|....................&.9....\...3&...........zb.b.4.....
[email protected]...}D.z.z.... .t..,........y]..[.......*.d....L)...R".Y.
~.....\O...fI......e....$.8....r......^.....c....yN..Q..[....8&[...N..
..|.J..x.......~~<..e..;.........fB.^i...e./.....Tk....x..t.Jl..q`6
......../..q....wp...&.0...#t'... L"9../.......!....U....uQ...j..f6eY.
<./f...:.9.........V..;.4.....r....uT...N.x.Z9..`..9v...).$........
^i.....U7.w..n../.C..,..{.*)!ut.ph. v......R._....A..\.B)oo..i/*.~.7n.
...]e}.vZ^..i.e.....;..:..D..'.i..t.s:J.&.x.lXG..V36w$.mM..2...}..$h.~
XA.4...........D~g..d...i(u.m......h.n.%.9.UE..s.0.5-....^.*.c..,.....
........*...c....aG.AS.F......5.. ^~Z....... ..t..Q.d...dt7A......2mf.
J.=%..%w..y65.C$8bw<XkS.vY..........x ..h..].~d.......';xZ.....Z,..
...p..!.....c>.&..ng....!.A7.$..;BL .=.47..c;(#.....g....=G.}-P.k..
G....o9.2NR..3.*..}......#.c.48w.....tU.t....i.=.ww.3.@>...HSj$P{?.
.h...L.74u...(2..89..ECC.5..kL...........D..~K]..r...K.....3z....#....
...p.....gW...cg%.....}.~....Y....$z..^.....g.....M.......d...p...:...
.l....C.e.Q..U.Q..&./.....i.....,...(j1=.<.9.B.;..=?..w..T....4zf..
 .....N'...!p}...8.....ZC~2...h.N..M .3o ...1..m..E.........R.~......)
Gw.*V....c.H...a.3.S.e.T[..SY.D...{..aYYYr.......!.u1W{Au?..il..*&<<< skipped >>>

GET /live/2015/07/06/11/1003v1436152159875483712.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 30 Jun 2016 03:10:26 GMT

Date: Mon, 06 Jul 2015 03:10:26 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6437

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 06 Jul 2015 03:09:19 GMT

ETag: "343274327"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:88 (Cdn Cache Server V2.0), 1.1 fuzhou181:8 (Cdn Cache Server V2.0)

Connection: keep-alive
...._..U...wg4.....v...k....u..bW'Z...=J..BtQ.F....BX..... .*.kp......
.w...y.<....s.n.n.@.........\..p..P...@`...............#.&%#!......
..ed..12q2..>.x........&(".#........................lw].."@#.......
..S..z...............x.D.A...@||| .............@.`JvQB*.%}.N1.pj...AJa
..-.....-T\BRE...................?,`..?......O.....K.x..... Q%*.1}./Nq
.p..<.._.. ..".p.....ek..0\.c.....4.G5..y..&.F..=.....Ou.;L..M.....
.*.b....$`.=Y:R\.J..........=Z& ,.....1...4../~.....`zJ......e.e....).
..c...\!U..oF.Y...u...?....q.....s6....' ....z......Q..=;.....)jSu...q
A.r.).....tk.....|.33:..G.........xG........%..n.rzu4E.T."...X.C......
.......y.|.....l`eNo.z...G...-!Y...d.r..:Bk].q.m6e.A....t..p..(.l4...;
Q........s..SQ.Z.q./b..VS.z..:ud.q.....E.. .[....!..c~...z..J0........
..a..]. ..7.. ....G.W|S.Zy.z.......S..%.b...>.1...r.....?.dl..../.A
..D..X....fr....4.<...b....izUv^.u...7b....îc..pU......}...!e}f..
k....zk.T.`t{....Im..).=..M.FT.,...[....I....J.....%..|.u..........Z.u
........hm.HY .Q..q.n.....~m..gs....$...>..P...QU'U....4.|l.D......
d.e...`...G.......cOWo..............w...qZ.G.......vr^.L....U..:.\U..3
...\...u...b.]~... f..I...Sk)U..&........R....#F..n...y*.....<.~.L.
.z...B@..*....v....-..../x{..7.....M.......q.-..G.z..y.....//R....6...
.O,[email protected]...}.......z..QP..........27....PS;....w...i..%..D'.....J..
..eS.{_FX/...].&..._...KV..5g..(5...F../.j...../#...uJ',h......4..._..
z=t....<.2......A...[.CNR....9`%.jVs......$~..K...'VD.P.V..c....<
;PdiQ........Q.9....6RcC.Y./....g..r....n...%|..}wO. 2S..5kF.....K<<< skipped >>>

GET /live/2015/06/02/21/1013v1433251374571726650.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi4.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 27 May 2016 13:24:44 GMT

Date: Tue, 02 Jun 2015 13:24:44 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 44033

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 02 Jun 2015 13:22:54 GMT

ETag: "3203596503"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh91:8080 (Cdn Cache Server V2.0), 1.1 fuz110:6 (Cdn Cache Server V2.0)

Connection: keep-alive
......mU....wT._.7.d...T...H.9. ..y.I..a.......0...J.9.d.,.......A....
....{.}....c.......>U....}.....W....P.ppp....v... ..1. ...1.?.v....
..- $..#hc.i. h....h...........6v....[.Gg........g{.v..mam....3<...
 X.....N..]I.".(...vw......y...*...q......b.......;.......D...."!(&`',
"...................m.."......R...._4o...(5..a......T@@.`...........?6
DE..J...y....x.p........3.......oc..............m.?.......}|Q.....>
.Ah.!........_q.....Z.......z;.}(6nj.v~.....5...=.....R.......Rb......
.d$T`R2j2j0i.....m.G....2..i.)....*..0.)iQ1........u..>.6.v...u....
.K]YUo.._OoCOO..g........'..j ..o..a......................._Y.../*...U
....S..'n..........*LEBZ.._...o.L..3B..d..........._..'.......wj......
..?./..m.......$DD..d$dd.$....`*r.j.RR*z*j.Z:::2.;w.i..i.h.1...W...D@.
.%'%...L.].51.=.:..5.K..G.s..0.]/p.p.Y:.M.D.][email protected].._
. .&d#......i.m."S.EU.?.q.v...l..R{[email protected]>i.'w8..$.}.../..?
...........[../&.>...a".#$ .....' d.....l.R.i.#k..iE?.....9..m.R...
...QM..:..x.y...fhw........kA..7)u.hX..D....T1...o...m;4.#~...JGvI....
........rDgy..4..E.#3.k.=."..\DU*16.`.n....7.....rO.zj........!...>
....'...[.....x:g.v-..y.......%..w...F.Mzv4...l..t.Q_=W.vClZO$ng......
7.......(.8N(..q..i.....&....`Q.....1t.B3...........*.w$.j..{.~...H.U.
.}.....7......N.9...;.. L8........7...W.].6U.....yz.|.uH.N..V....z.nq.
$}2i.....T...%.Y..^._R.W.E/..a~..~.w_A?....,..l..D......f..z(OA.sV.NW.
:.....1..q..s...G..n...".FKV..WnW..UV^....kzm.G<[email protected].|n.1..J&g..
T.d.....{.H,>1d......L..]....#.y.. o7.6.$U...F.....j.j&.....h..<<< skipped >>>

GET /usertoolbar/prd/v1.0.0/css/[email protected] HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:16 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
1529.............].........{..s..L..#.....>..=.}Y...[..q......0..V.
T.lK....p..=...J...U.3;..J.uQd...].*.."...w...oiR.........z;....~.....
p.-L.D.o........I...z.~...$..Y.u........"I...K!. .....!.X.q...Y. .....
.....h.........!.?...5O..2../...l?}....b..5..o.fqq....E^.....?}Y....'.
.S..y.4.....5.........g..]K....*."a\dE...(..Q.$../.A....{....n...g..c.
...7:TEv..>....z.7...46....|)Rd..u..2...K<.....Zm.(..K)........[
..(..q E.....t/..........4Kv.gi.B.pu.................l9^.L.]0.D.......
..;/-..h.u~c....UN.r.&.FB.].bG...`//B.....@.......$...%a...s.....>.
B>...3..w.....g.un3.|.,.f.....N..T...c..M...z.I.5..de...r.....(x...
....f=..., ^.|<'.qp.`So.J.M,.%...d:a.X....:EI...W..y....C.....3[.z.
.Z.........,....%.1.Y#.....k..O. .:..m..2a8........a.G-u.J/....aY..6M.
N"J..<....uN.$..9c.e;P.:..,...5............b...1..Y .J....f.U'.....
...C?..iW......l....%l....b...`..5..o............S.1D..{..,..].......x
..dw.ZV...V....}..c.c.2..U..P.p..{5....9..l{f....AZ.Q.-...5......U.,.A
...`.T...l.([email protected].[....c...B"I..[Re.5.!..Y...D.Q]..o.....S.
.,6#";.$jV.,1..#.....x[EYy..e.P..Q.N}..#.Xm...1..y..,r;...1._A~.....b.
...Km.t.!.>.s....0.dbh......N.oRAi....J . L.....1o.....].2}W...I<
;o^V..R..C.1..%..4k......!..m...r....<...8=....64xL.qS.....iL..]...
S..5. ......%J.4......[..E_"..O.....?|.f.z...`.Z7C.. .S./..R.u...T.g4.
.cK.%....C.D.q.{....n.}....d.|..j....h/.3TT[`M~.,.*z....&..?.......1.d
.P/x3....]2x.Am..%.....8.5. ;q....d..W&.... tlE.'N.)....I..........s#.
c..!.....m.b...-.5w.C.;...}.....r..Q...#.x...0..'kt... ..<q..^y<<< skipped >>>

GET /js/jquery_MIN_5.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 01 Oct 2015 22:38:21 GMT

Date: Tue, 01 Sep 2015 22:38:21 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 41543

Last-Modified: Mon, 13 Oct 2014 06:28:22 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 bjsb71:8105 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: keep-alive
............i{.G......D{d@,n^...X.....-[.%...i_....XH..b.....D.U..r...
u<.b..\"#c....z.[....".4n......q.6[.v...Nv.......z1....YoT........C
#._......vz....m#...'. .u.~.f<...4.<xp...p6..o>\..{P.g.....=\
......?t...''...j.r.._<..y....v....V.q.z........lXK..-.....Z|......
:.~.o..7k.l..?O....d................U.\.|.wx.-...^......m/[...qs.;....
osZ......~.....`...lw...L3...k{i.]..z...........y..u........\..k...{'.
....}Yo.............R#.ogt.i..l.-..^..U*n.. ..C.n....Y...........L....
.Y.....]....,4... ..?Q.n.N.z.9.`...^...M&..d.-.mC.u.x..v..KP|~....V.O.
.'.f...n .=..'4.OV...M.d..hui....uS.:qp.?=>.....b..[...|..g.N~..lm]
k.vX...".V..y.z..?_dC......g.\7.B.V.p....Q....P_.....U..F..l..7.....l.
m6...F..|......|......2.w.|.....?..F1...NXt..X...z..l..6h.._...ZZ....m
....x.5i$.4?..2..Pid..k...I..w..;.O.d._.J&..<=N....?...O.p....T..Y.
.....................W..N....-......Nks..Fo.g.H...........N..0...q....
:.j.6Hqmnd..L.A..L.{8.:/.~..K.-^7......r.X..V...O&.Y..A....z....!.}J..
&T...&.G.fm<..^.@.<x.9.....6...Av=Y=....\3.. p.]%.....:7.eW..]..
.m...RL.M.{...z Z.B..........%.:Y.........~6k..b|.f#..~e....J.|.?0[X.t
..XI.i......wI....Q..1..,..Rv<...;[email protected]..:_|pp./.O&4.y.}.9/.
...oc..l.lX..b%..W.%D..k.D...,.-..E.X"..../R t,'cD...3..}.............
.....f..X.S....'..\..f....w.[.{.Z.. .}.5.....U6...J..jE./|.qV"gi.<.
BvF......Qk...1;.....\}.....~FZ.Ovj.I?.#...{z..#...z._...;i...fx.z)^..
}...N.}&...c../..k.....~.<IeL..&..7..f.....8.....=?.....G[.........
..Yw...;.........n.%...B=K...9..8X..l5:.f...I.99?......}......{.XI<<< skipped >>>

GET /js/mootools_MIN_1.4.5 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:05 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /fxstatic/images/blank_5307b88.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:05 GMT

Content-Type: image/png

Content-Length: 949

Keep-Alive: timeout=20

Last-Modified: Thu, 03 Sep 2015 10:04:17 GMT

Expires: Sun, 04 Oct 2015 04:29:56 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR.............(.4.....tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:ECCE9351EB5711E18EF4F84FBA
F3F77E" xmpMM:DocumentID="xmp.did:ECCE9352EB5711E18EF4F84FBAF3F77E">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ECCE934FEB5711E18EF4
F84FBAF3F77E" stRef:documentID="xmp.did:ECCE9350EB5711E18EF4F84FBAF3F7
7E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>..)[email protected].
b`..0.....OmY.....IEND.B`...

GET /s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mp.weixin.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Cache-Control: public, max-age=500

Connection: keep-alive

Content-Encoding: gzip

Content-Length: 12372
...........}is.........`zjI.%..-9#..EI.$...f8 .. .....3v.8...q.$n.^'..
.n.;....?.W..O...9. .. EKJ.......s...g?..1..\,....2......R.b.g*O......
[email protected].*..x.WRMg0%o..1.g...r.4......s$...aS.e.b...d.....P9..i...
F.9...p....S3....a'N`..0G..%A.II$@1S^..Sf3-..@Q....$..f"GOdh.,N.......
N.=v...h.v...i...s.j.XN..&l\.6D..q....B.`%..:...=...6i.%q0..wz...K.x.J
X]n.."]V...:.6G..H..W_.L..,M..6...r.....4Y.9...L...6.w.........._.ASHJ
.%..aI.....x..t..=v.U...cj....... y..R.<)RYJ.)....8Is$U]...Xa.B.U.k
q.....i....&.........<7...4....%....i...H.... !..1..@Y..).....;.'|.
8..x...W("..i."i."...0...p.%.fs..[......|..x........}.........}.......
..!=..5.... ...P.x......%.$..v.1.d.;...........fR...V....O.rJ.........
...3.ChVl.... {.R2.At'...].6.....2........T....i..%J.<].....4.=@.'.
3.s< ..d.-...."sT.......i."....Y.I9?MRe..&..I..e.g&$.g.i...$.Wi..jR
J.%.W.T<m1a...Z..T......J..&.....%.a.,x..)f.Dr.....D..A^O.....d..rx
..,..<.)..$.]...T J2F..L.....0W'.4..*b.....\0S\:.E..2....`Hf......O
./.W..pX.I....\..j..34.S.2. a...\...%.UR.q.$Mdp. ....ap...$..,.O..L!e.
.#C.y...9...^^....4/7).......>@].%....8.'.1.I....,@....M'....M'1...
ub....u.4._..$.....C.Lg....L........W..........N..r.`..T...*[email protected].
...Q.H.-'%Y....t..j.g(.'.O...........'..(..P9.U.U.^._99...;.~........K
".....{..../_... .D.rF..|....1.h..!J.@.(.<)S.<.....2/NB;0...2...
.%..(.6/.l<....$2.:.;.....1....s.K.4..FN...5...}.\..?l.............
A...w..l5.~o..?..l...T0...-...42......q.fi......J.E...3>{....1z.U..
9F.....f.E.......:.G.l...2..P{...O.W...eY-0"....i.H.#..P..a..ZQ.x$<<< skipped >>>

GET / HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mp.weixin.qq.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Location: hXXps://mp.weixin.qq.com/cgi-bin/loginpage?t=wxm2-login&lang=zh_CN

Connection: keep-alive

Content-Length: 0

....

GET / HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mp.weixin.qq.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Location: hXXps://mp.weixin.qq.com/cgi-bin/loginpage?t=wxm2-login&lang=zh_CN

Connection: keep-alive

Content-Length: 0

GET /staticPub/js/room/swfobject_dc734ee.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:07 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:31:53 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 07:40:38 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
907.............X.o.<.. ..R{q.tw{wa]...[.....V..d...@...^......M...
.k......g....<.E..`.*l.^V.-....-{.q..^p....p.....z.T..\,./....O..B`
4..."........ ..;x.Q..>".#.%.a.}..3.. ...$;.K.....B.B......K.b.'gw.
\.S.R..:...x....ycLv.\\.s.......Q.d.xA. ..Hn."x.=..q.1.t.ER."....~..y.
.D9..IG.#Q ...2y?._...Rr...(!.....O.-6E....\...h....L.;.K..6&..h..Z...
3.....s1.6...!..).I...4.3.P./...$.[-TS.R..7=......-&....^...W.!....y~.
.........2.d...A`...9...2...".....k..R.`j.."...{......`.5=..qC-h..c..!
.A.}..-.A5.....5..J.~Y....&.hvH......|[email protected].. .......1.l.`%E.m
xw....M..#.........wy.?....N.m....g..8.......?.j...u...5......9G...G._
.,`%......^.....>"......2.& .F.*.^..~..~.C./..*.Y.Yq.......cR6..:..
[.H.....U.C.. .......2......... cT`l9.v.c...8.`..C.F.r.-.,.6>"....*
w@.&t.B...P....KRl.f.P._.....v../77......k.\&.K.C..C..H._-....)......\
.....O.4.....B.Gs.....Z.=...G.n.C.apL...%V_.."4.. .m=...`..2s...<..
\.....b.N........5. .A&l.q...=[.X.....h...,.$9W.l...1.n.6.........IN..
.~.............Wa.v.?.ng .....HM*.*.u......#.S.Z$......=..4NC0..r.z...
.....:[$l"..:Z.*...GR.!.6.(.....x......V|6....H3Y....\!d.Y.0*#.C......
.!.....f.]).t..n........#....%.U.e.0.EU.....R..O.y...P.n..T>.R.r.. 
#.K.8fv..^.M..-.z....d.*........<.....!F.C.N..z.B..\..B"OB...0f...-
..3"p|:.n....F}?...l.zAo.Z..x.|[email protected]....$..d..1z.[..9.
&..<...)......`M{.....>.w..0.......6c......z@..._.......\.%.e.yE
Q. R...\Q.V)* .St....H..S...N... mH.o....Y..l.RD./.Kk....`......d..txE
..)....x....K..o.CB....N.?..$]b~8jRt.... ..:.5..([email protected]......<<< skipped >>>

GET /js/s/e6u5-min?101016 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /imges/live/IMGSRC/to_top.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:50:56 GMT

Date: Sat, 20 Sep 2014 13:50:56 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1091482726"

Last-Modified: Tue, 20 Mar 2012 03:58:36 GMT

Content-Length: 4413

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz109:4 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a6.c...........q.................fj.-3.O..^..07.V.....% .UX......
.......f..b..-4.7;.......!............5.=B..........-1.f..$,.3..].....
Z........J..Y.....).....:..]..K..06......................E.....~......
..R..C..t..rw..........|....mmm.........}}}..........7.....:>.WZ...
....Y..&..% ....i..CH.TZ....G......../.....,3....?..U........r..07.C.u
uu.............T.....I..S.....kn.L..f..2.....!..)0....>..G..O..3...
........&..D.....F..=....._..9.....\`....18.L.........................
.n..........fff................o..<...........m..k.....D..j........
...g.....c.....`..............=C.......h.....n.....e..a..c.....c..m...
..6..|..9=.............o........mq.qt.~.....7..............".....j....
..........OT.EJ....h..j.....o.....-5.......,3....L..m.................
V..U........e..g....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpC
ehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk
="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> 
<rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/
1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:
//ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Phot
oshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:55249E8B723E11E194C3D4D
4E392636E" xmpMM:DocumentID="xmp.did:55249E8C723E11E194C3D4D4E392636E"
> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:55249E89723E11E19
4C3D4D4E392636E" stRef:documentID="xmp.did:55249E8A723E11E194C3D4D<<< skipped >>>

GET /site/main.swf?20090107 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: flight.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: application/octet-stream

Content-Length: 23580

Connection: keep-alive

Last-Modified: Tue, 28 Jul 2015 09:23:50 GMT

Accept-Ranges: bytes

Server: QWS/1.0

Expires: Tue, 12 Jan 2016 07:28:09 GMT

Cache-Control: max-age=11059200
CWS.P...x..}.\..........H.b.(.bW..)..R....p........[..E.k.]c/...5...Dc
o1Q....Sv.v..&..........y...7o...y3[.,..`9..w1.v.._.qUU.A..>[email protected]|
E.....WK..r/.)........6\'i.?...g......-.5...}..,. .."O....? ..w......X
.*..*.'....a..:M....2 .....|....9s.J...7........D[.l....._..]..8..6...
..-.a=<..a%[email protected]...[..{.Fu;.Q.o'......AM...A..j.A]..Q].A.....
.Q-W..6.......KPg...N..*.)B..IP...=)...A......:.".n.....*}..`.o..../0.
.g0..G..h....Y...........C..D.;..Ue...)#1..>[email protected]. \..2\
.7.1..-...k.8b*AL$.[....... p.Z_x.......... ..Z.......yZR.. 0.Y,e....f
.RTBh.A;V.."1.f1F.W..N..h.|.Z......38ks2..Eh..4v....3QVH6&.U.^...9k..C
....L..$..i...e...C..(.q.*.u.f.r).{.O...=..{$..TYB..R...J.....#.Eo.kY.
.%....."%.$y..&w.2..Q.u@]..H...h..J...u..Sj...le6....)[email protected]..<.
......Su.b ....x._Q9...D..A.-.`.,%..).....D.Eb....r*,...N......(\.T..@
.^..B..vn.v@&..2."(.-R.....BW....... ..HVd.....*..i*]..T.%:!..?.{....u
&..B..2..Y:@.t.7....9.7........(.F1..S*...{...7q#.sw.l..`.~.=.$N'oe...
. .:..|...)..U.J..5..t.....6.P.aV.R..g......Y c.J.....w.F...y.a..Lb.*.
..I.e.Af.&T.T...6."[email protected]...*....G.$... G..
D..HA.O.........FQ.U.T."-.Y..\...5....4(."...Flb..>. ,.KT.e KQ.r...
."P8<.J.)||4J....A....h..5. ......8.=.. ......Y....T..O...%k..`.E..
..I.%GC5..3...F....H... a.A.*m.......].g.|.}9S F.?.4B.E)P.........%k..
1..\-..e9.V.l.-L...-.Lr..._.....I8CR..,.E...`g.t..Ht...u........R.4.&l
t;I).y..$....'U...For..-..R./%.....x..L.....hk.....h{..v...\L...%U..'g
}.P......}..*I..W9|....1.B.....[..q=.....N....Z0f.....$.-....#...R<<< skipped >>>

GET /event?a=17463&v=3.4.0&p0=e=exd&site_type=d&p1=e=vh&p2=e=dis HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: widget.cn.criteo.com


HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Type: application/x-javascript; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

Set-Cookie: uid=742bcce7-dc6a-4f32-afe4-4c0d3905c0da; domain=.criteo.com; expires=Mon, 05-Sep-2016 07:28:13 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Length: 937
(function() {var qss="&cb=" Math.floor(99999999999*Math.random());try{
qss ="&ref=" encodeURIComponent(document.referrer)}catch(e$$12){}try{q
ss ="&sc_r=" encodeURIComponent(screen.width "x" screen.height)}catch(
e$$13){}try{qss ="&sc_d=" encodeURIComponent(screen.colorDepth)}catch(
e$$14){}.var callDis=function(c,d){var a=function(){callDisInternal(c,
d)};"complete"===document.readyState?setTimeout(a):window.addEventList
ener?window.addEventListener("load",a,!1):window.attachEvent("onload",
a)},disCalled=!1,callDisInternal=function(c,d){if(!disCalled){disCalle
d=!0;var a=("https:"==document.location.protocol?"https:":"http:") "//
" d "/dis/dis.aspx",b=document.createElement("iframe");b.width=b.heigh
t="0";b.style.display="none";b.src=(a "?p=" c qss).substring(0,2E3);(a
=document.getElementById("criteoTagsContainer"))?.a.appendChild(b):cri
teo_q.push({event:"appendTag",element:b})}};...callDis(17463, 'dis.cn.
criteo.com');..})();/*-->*/HTTP/1.1 200 OK..Cache-Control: no-cache
..Pragma: no-cache..Content-Type: application/x-javascript; charset=ut
f-8..Expires: -1..Server: Microsoft-IIS/7.5..Set-Cookie: uid=742bcce7-
dc6a-4f32-afe4-4c0d3905c0da; domain=.criteo.com; expires=Mon, 05-Sep-2
016 07:28:13 GMT; path=/..X-Powered-By: ASP.NET..Date: Sun, 06 Sep 201
5 07:28:14 GMT..Content-Length: 937..(function() {var qss="&cb=" Math.
floor(99999999999*Math.random());try{qss ="&ref=" encodeURIComponent(d
ocument.referrer)}catch(e$$12){}try{qss ="&sc_r=" encodeURIComponent(s
creen.width "x" screen.height)}catch(e$$13){}try{qss ="&sc_d=" enc<<< skipped >>>

GET /api/saleprice?&callback=jQuery17207264470782716407_1441524492993&_=1441524493368 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dataapi.flight.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:13 GMT

Content-Type: application/x-javascript; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Host: l-flightdatadb2.f.cn8

Server: QWS/1.0

63c..jQuery17207264470782716407_1441524492993({"ret":true,"data":[{"pr
ice":277,"arr_tag":"{............}","dep_tag":"{............}","status
":1,"view_count":25234,"uuid":"8c7c1856-97e0-4f61-8f99-5143242ccb8c","
cover_img_url":"http:\/\/img1.qunarzz.com\/f_tejiahui\/cover\/1509\/53
\/9df8c0850fd466.jpg","ppt_img_url":"","card_img_url":"http:\/\/img1.q
unarzz.com\/f_tejiahui\/card\/1509\/53\/9df8c0850fd466.jpg","title":".
....................","is_only":true,"min_price":false,"last_update_ti
me":"2015-09-06 14:29:25","monetary_unit":"...","booking_date_range":"
[2015-09-01,2015-09-09)"},{"price":224,"arr_tag":"{......}","dep_tag":
"{......}","status":1,"view_count":21671,"uuid":"7fdf6ff4-7077-4b03-8d
4b-df8b4fec1709","cover_img_url":"http:\/\/img1.qunarzz.com\/f_tejiahu
i\/cover\/1509\/8d\/bdd631314f165f.jpg","ppt_img_url":"","card_img_url
":"http:\/\/img1.qunarzz.com\/f_tejiahui\/card\/1509\/8d\/bdd631314f16
5f.jpg","title":"...............","is_only":false,"min_price":true,"la
st_update_time":"2015-09-01 14:44:06","monetary_unit":"...","booking_d
ate_range":"[2015-09-01,2015-10-04)"},{"price":59,"arr_tag":"{........
.}","dep_tag":"{......}","status":1,"view_count":103925,"uuid":"ef4e39
09-5e41-4458-9476-5123d3ceff65","cover_img_url":"http:\/\/img1.qunarzz
.com\/f_tejiahui\/cover\/1504\/fc\/47a8e2ac999885.jpg","ppt_img_url":"
","card_img_url":"http:\/\/img1.qunarzz.com\/f_tejiahui\/card\/1504\/f
c\/47a8e2ac999885.jpg","title":".....................","is_only":true,
"min_price":true,"last_update_time":"2015-08-21 20:21:38","monetar

<<< skipped >>>

GET /irt?_iwt_UA=UA-6cn-000001&p=value1,value2&jsonp=_12YX3 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: irs01.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:12 GMT

Content-Type: text/javascript

Content-Length: 33

Connection: close

Set-Cookie: _iwt_id=gxKptAzr61XA67QBR1VfRQA; expires=Sat, 01-Apr-17 23:55:55 GM; domain=.irs01.com; path=/

P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"

Cache-Control: no-store,no-cache

Pragma: no-cache
_12YX3('gxKptAzr61XA67QBR1VfRQA')..

GET /staticPub/css/room/room2014_f52238b.css HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s5.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:02 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:40:11 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 07:43:11 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
9357...............r#....*.1.!i.4. ....n..gK........(..$.A...n.z......
.......'/....U .m{&&0c....r.se~....7..P.[_...../^.....r...\.....<.[
.o.....M....~38......o...}u...o...j]B1.....x~.....*.w...v...w.cu~.9?..
o...js.}. .r....>.....8...j.^l..bw.... ..p...~.............?B...p8_
...j.9_............=?....5J............}8~XW..hM.~I...V.7..a....p...^.
.s...Vq...-n.....r]-..Q_.JV.T..n.......................x..p...u..=....
........~{..... ~[...}4....p9.........V....\..d....:.uU..[h..u....v./.
.M...............X......^m.._t.xY...u.....}..RT.nuX.W.......,../..}{..
......}.?..........n.av.....T.L!........x.3...f.m..s..z......8.....,..
.....>.~......w...x...zi...w-....l.....0..oW0R0........b...[U.X/...
~{.)q..d*..yi_3.f_......N....W...r.G......,.qo.-.}...._B.a...G;C.....r
{w.n.m...........,....v.*[..M..`.?K.....p.l...}..../.{..K../7.........
)x.)..v_.<..hS.....F.....u ...aEo........,....e.v.....g...<.....
w0.............x.:t....... ..|}......Qn(i7...........mY-.....7..B.....
[3Ia......H...nkZ....q.`u....q.].:..=.e8...2...P%,x.....0...(.....=r.6
...%.u.......I....-...S]x.z.<^.........b0........%.:.f.....-.x0..G.
HqW.*.....*.....1...........b_.9....n?......N..qu\W....u......D..G..7h
......z...l..x...{..6.......=......D....[wk........4..od.g...7...6...:
..7.b..B..-.........r......-....m.....B.......B.^k4.[8M.0.].s.p...Ft.&
gt;..1/'8.-NC..,`.U......5.......>e.;....{........9....E.):.......,
.... ......#.]..a..\ON.SY.O.9.. /..|ra...v....*8)..x&.Q2.?..h ..2.....
..&P.........l..<..Q..E.1.Pu.r0.L... ........mW..p.........Xn.,<<< skipped >>>

GET /csjs/_/mm.css HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 10 Sep 2015 19:22:41 GMT

Date: Tue, 11 Aug 2015 19:22:41 GMT

Server: ngx_openresty

Content-Type: text/css

Content-Length: 34508

Last-Modified: Fri, 27 Feb 2015 08:10:00 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 gg233:88 (Cdn Cache Server V2.0), 1.1 yfdx34:1 (Cdn Cache Server V2.0)

Connection: keep-alive
..............#I. .."..........p....y.....e.L..8M....8"..W......G~....
..P...../....].@f$...Ypw;.V5....Y_.w...e..z..8.~,........z.x....T]....
jw.\..j.<V.....i}........zy.>..uu}..N.U..>.v;x..>=^../...P
o....r....w.OX.e..........t........;.V...T>V.7.?.......C]...R..W.zQ
^....{....~.[..wW.b4....r....{...N.(./...t?....rS...~).w....O...e.;,..
..t:../...B.....a{....uu.x:..........z..:]c.dq.~.>......=..Ww....:.
kp.y.{:.......o>.J.X.xz^Ww...^.......x7..4/.D...,[email protected]_..j.Zu...?
<.N..7o....Io.}..T.7..}....?...?.AX...~...o.......j_..N....B.[....I
.....'..!k. [..cug~.....S....~_.....:.....tw...#..e....S...Q?........H
.....f..=..S..T9.....}.6.0...T.\.2...e]=T....>...3..U.q|.8Q.../>
...RA...XW%.....w..O.U.....ns7..w..$...Z..C.7...._........Pa........7.
.>..{..=.......>..z]....A..-K'.k..U..*.Q.N.t..........v.O...X...
..............S...J.-......H....Cu..._,|.....}.Z.....O.f.;....S....m.m
......'.<. ....F.{.-..-...Ta....8p:.../?.u..j.....Xbya`..-.C.m...M.
..j.Av...(....O.M}.>|....v.<..N.Q.O...$_.L2\.9..No-..0.[E.n..z.5
...?(...c5C,g.....f.[.P"./.3...[........OV.^D.o..]..._.i$\...Ae..u.v..
.~$.h{r&n>..O.(... ..g.X........g..4.zD..7.\................[.s.h..
.u'.......ZL...X....~w...S.Nwp...s_.ju...cg]!:.g....wJ. Q....B`.g.t.!.
..H5.'..4.....z.W;W...'..N.......}....:j!.T....Nw8..DW.e.......j......
...A....tW.^eM..B.0KL.L ..X.g.vix..s...6.ob..2....#M.@t .. ......L..Xt
...>8....K....RG.0.....(...RE..\..f.C.?./.~.4.....gr.7......".I..d.
.Y........y...ULR..8.....p.`.NN....)1{?..F.....NN.Dz@...[..dl.Q...<<< skipped >>>

GET /csjs/_/girlfall_5 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:27:59 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /1/2016.html?uid=614516 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: g.bj73.com


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:27:42 GMT

Content-Type: text/html

Content-Length: 24189

Connection: keep-alive

Last-Modified: Wed, 02 Sep 2015 03:16:12 GMT

ETag: "55e669fc-5e7d"

Cache-Control: no-cache

Accept-Ranges: bytes
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"..   
     "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..&l
t;html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<met
a http-equiv="Content-Type" content="text/html; charset=utf-8"/>..&
lt;title></title>..<style type="text/css">..    body {.
.        background-color: #000;..        font-size: 12px;..        ma
rgin: 0;..    }..    td img {..        display: block;..    }..    inp
ut {..        width: 150px;..        height: 16px;..    }..    /**..  
   * ........     */..    .qp #main {..        width: auto;..        m
argin: 0 auto;..    }..    .qp #show {..        position: absolute;.. 
       top: 0px;..        left: 50%;..        margin-left: px;..      
  padding-left:20px;..        width: 480px;..        height: 400px;.. 
   }..    .qp #tr_olduser_notice{..        display:none;..        colo
r:red;..        padding-left:45px;..    }..    .qp #register_form{..  
      width: auto;..    }..    /**..     * FL..     */..    .fl #main 
{..        width: auto;..        margin: 0 auto;..    }..    /**..    
 * ........     */..    .pp #register_form{..        width: 480px;..  
  }..    .pp #tr_olduser_notice{..        display:none;..        color
:red;..        padding-left:45px;..    }..    .pp #main {..        wid
th: 1024px;..        margin: 0 auto;..    }..    .pp #show {..        
position: relative;..        top: 0px;..        left: px;..        wid
th: 480px;..        height: 400px;..    }..    .pp #flash{..      <<< skipped >>>

GET /api/c.php?platform_id=1&union_id=2016&union_type=1&link_id=0 HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:27:43 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.2.14

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Sun, 06 Sep 2015 07:27:43 GMT

Cache-Control: no-cache, must-revalidate

Pramga: no-cache
36c..var gconfig={"platform_id":1,"platform_domain":"regapi.37.com","s
tatus_login_domain":"status.login.37.com","ad_domain_cdn":"http:\/\/kw
cdn.000dn.com","platform_deploy":"1","union_id":2016,"union_type":1,"u
nion_category":4,"link_id":-1,"referer":"zhenpin","title":"\u8bf8\u795
e\u4e4b\u6218\uff0c\u7b49\u4f60\u6765\u6218","title_id":"3796","ad_par
am":"25090zshh0203","ad_name":"\u8bf8\u795e\u4e09\u7f8e\u5973[FL]","ad
_id":"25090","banner_id":0,"swf_file":"\/swfs\/87\/25090zshh0203\/","d
igest":"","flash_path":"http:\/\/kwcdn.000dn.com\/swfs\/87\/25090zshh0
203\/","width":"1400","height":"700","left":"","top":"0","game_id":"28
1","game_server_id":"60766","template_id":3100,"proportion":"70","time
_temp":"1441163771"};gconfig.key=0;.function getTimestamp(){var d=new 
Date();var timestamp=Date.parse(d) d.getMilliseconds();return timestam
p}..var vtime = adltime = getTimestamp();..0..HTTP/1.1 200 OK..Server:
 nginx/1.4.2..Date: Sun, 06 Sep 2015 07:27:43 GMT..Content-Type: appli
cation/x-javascript..Transfer-Encoding: chunked..Connection: keep-aliv
e..X-Powered-By: PHP/5.2.14..Expires: Mon, 26 Jul 1997 05:00:00 GMT..L
ast-Modified: Sun, 06 Sep 2015 07:27:43 GMT..Cache-Control: no-cache, 
must-revalidate..Pramga: no-cache..36c..var gconfig={"platform_id":1,"
platform_domain":"regapi.37.com","status_login_domain":"status.login.3
7.com","ad_domain_cdn":"http:\/\/kwcdn.000dn.com","platform_deploy":"1
","union_id":2016,"union_type":1,"union_category":4,"link_id":-1,"refe
rer":"zhenpin","title":"\u8bf8\u795e\u4e4b\u6218\uff0c\u7b49\u4f60<<< skipped >>>

GET /js/1/g2.js?0.8850470745084853 HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:27:44 GMT

Content-Type: application/x-javascript

Content-Length: 6126

Last-Modified: Thu, 09 Apr 2015 05:23:16 GMT

Connection: keep-alive

ETag: "55260cc4-17ee"

Accept-Ranges: bytes
var _agreement_string = '<td height="10" colspan="3" align="left"&g
t;<input type="checkbox" checked="checked" value="checkbox" id="che
ckservice" name="checkservice" style="margin-left:94px;height:13px;wid
th:13px;"><a target="_blank" id="agreement" href="/service_' pla
tformDeploy '.html" style="text-decoration:none;color:black;">.....
.................................................</a></td>
';.var _SET_37={'agreement':{'status':1,'str':_agreement_string}};.fun
ction _loginCheck(a){oldusername=a}function setLoginAccount(){var a=do
cument.getElementById("login_account");var b=document.getElementById("
divolduser");var f=document.getElementById("main");a&&(a.value=="")&&(
a.value=oldusername)}function loadOther(){if(oldusername!=""){setLogin
Account()}else{if(gconfig.status_login_domain!=""){Jsonp("hXXp://" gco
nfig.status_login_domain "/api/login.php?action=status&game_id=" gameI
d "&server_id=" gameServerId "&callback=_loginCheck",null);if(oldusern
ame!=""){setLoginAccount()}}}try{if(gconfig.union_type==7){var a=docum
ent.createElement("script");a.id="sf";a.src="hXXp://kwcdn.000dn.com/js
/shunfeiCL.js";document.getElementsByTagName("head")[0].appendChild(a)
}}catch(b){}};.var getVar=function(v){return eval('window.' v);};.var 
addEvtListener=function(c,b,a){if(document.addEventListener){if(c){c.a
ddEventListener(b,a,false)}else{addEventListener(b,a,false)}}else{if(a
ttachEvent){if(c){c.attachEvent("on" b,a)}else{attachEvent("on" b,a)}}
}};var catchClickHeat=function(o){var o=o||window.event;var _obj=o<<< skipped >>>

GET /1/ HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:27:44 GMT

Content-Type: text/html

Content-Length: 1280

Connection: keep-alive

Last-Modified: Fri, 07 Mar 2014 12:21:26 GMT

ETag: "5319b9c6-500"

Expires: Sun, 06 Sep 2015 08:27:44 GMT

Cache-Control: max-age=3600

Accept-Ranges: bytes
<html>.<head>.<meta http-equiv="Content-Language" conte
nt="zh-CN">.<meta HTTP-EQUIV="Content-Type" CONTENT="text/html; 
charset=utf-8">.<title></title>.</head>.<body&
gt;.<script language="javascript">..//..var _domain_37 = "p.777w
yx.com|p.17kuxun.com|p.zx910.com";..var _domain_67 = "p.yocc.net|p.zx9
15.com";..var _domain_95 = "p.haliyuya.com|p.0wan0.com";....//baidu_tg
..var _domain_1 = "sgyx.17kuxun.com";..var _domain_2 = "sqyx.17kuxun.c
om";..var _domain_3 = "aszt.17kuxun.com";...var _domain_cu = document.
domain;..if((location.search).indexOf('?404')!=-1){...if((location.hre
f).indexOf('/s/1/403/')!=-1||(location.href).indexOf('/s/2/208/')!=-1|
|(location.href).indexOf('/s/3/1030/')!=-1){....url = "/nopage.html";.
..}else{....url = "/1/843.html";...}..}else if(_domain_37.indexOf(_dom
ain_cu)!=-1){...url = "/1/820.html";..}else if(_domain_67.indexOf(_dom
ain_cu)!=-1){...url = "/2/821.html";..}else if(_domain_95.indexOf(_dom
ain_cu)!=-1){...url = "/3/822.html";..}else if(_domain_1.indexOf(_doma
in_cu)!=-1){...url = "/s/1/381/2763.html";..}else if(_domain_2.indexOf
(_domain_cu)!=-1){...url = "/s/1/381/2747.html";..}else if(_domain_3.i
ndexOf(_domain_cu)!=-1){...url = "/s/1/381/2764.html";..}else{...url =
 "/1/823.html";..}..document.location.href=url;.</script>.</b
ody>.</html>.....
<<< skipped >>>

GET /p/1/2016/0/2.js?uid=614516&lt=1594&key=0&tid=1&0.8503053447648762 HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:27:45 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

a..//success...0..HTTP/1.1 200 OK..Server: nginx/1.4.2..Date: Sun, 06 
Sep 2015 07:27:45 GMT..Content-Type: application/x-javascript..Transfe
r-Encoding: chunked..Connection: keep-alive..a..//success...0..
....

GET /p/1/2016/0/5.js?uid=614516&lt=2469&key=0&tid=3&0.4339676475296046 HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:27:46 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

a..//success...0..HTTP/1.1 200 OK..Server: nginx/1.4.2..Date: Sun, 06 
Sep 2015 07:27:46 GMT..Content-Type: application/x-javascript..Transfe
r-Encoding: chunked..Connection: keep-alive..a..//success...0..

GET /staticPub/css/common/head_6853a2a.css HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s5.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:31:49 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 07:38:55 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
2e9d.............}...F.._.y...'...g..\...yH..m.... P"..3GRD.=.......f.
.%O.9./..YlvWwWW.w...&;.E...k6.....>.........M/.{wUo_...w..nF..q.f.
...nf....m.....,.......].k..&;.Y..[U..._..M.knzM.p.....jx}....m...M...
.......z_U...........l....6......[.6<.^.E]....)............].....q.
."4..c.|..wM.n>U.....U.......4W......W=Te.....z........r....M......
...J..?].......p.....f.G...]..4xa..*...r.....>].T...z.i..f.)...OW..
.O6.q..c.U..*.y..x..`........SvS..P.....o3.._..C......_...|d...'...hw.
z}w.a..}.k.......2.W..}R..2O...~.W........W.....c.77W.dz....p3F..^.../
.0..@S=.Z652....5.Z. ...Y>Z.u.......(vw].|.8..........8..l8..z]..5,
.~wu,..)?....p..u.38T...rG.....|u..P......x<.3..0....V..o..7r....b.
.U....}..z.....//...=..M.k.........L...d!/..;ba...m..U.8..7.....V.z}..
..hV..>.u.*...tuC....>CB...7.eV....f/....].{1.C.G..0I....c......
/..`...D..c...i.W._.)@>x...5X.o_o...v{.....E...i-.t....1......S....
.m.t.>P.......Pd(.......#.8.y...y.... .#.8XWEv\..6.. .*..980.^s..^.
..W.......n.\...0'.P_..'..&.....3.a...1.....*zY]...4t......c....W.9.[F
[email protected]..{.9...G.....{L}.=".;[email protected],....G\Gpu.....
..H.^..7c...........(......_x.e...?]...z_..p.v....d0..$o.1......o...'.
...l..8/............MY...w..].g....;.|..&..k...*`k..P$".......I..f....
.j.X.....I.{...^..t.x..I8...CQ...p...T}.....[i(~o.~...I..q7}B.~D.^....
.t6.........~..,.E.\/E..dx........q.-......R._......6f.mu.....@.......
..M<....^........f.....M....R._.R..l...&..q.-..X.....'n]..G..XM....
Z.'.w.R...../7i.n&..q.-..X..W........j.5.....K=....sn..2_.&y..QK.d<<< skipped >>>

GET /staticPub/js/jquery.min_4de7337.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:51:25 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 07:57:08 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
9417...............v.G....<.Y..PB.$e{..@ElY..{$..R...RZ.........Lp.
e?.~..}.y.BA..:{.3=.Q.......|.q<...6.b...A|k..&.,.].....h.*......3N
v....i....a.v...Yk.......E.y..Z.l..7.D....5:f...q.e......lu4H.....6...
F.8jf..".[.r...o..A....5X....X/..6.;..*.-n.F.4..b.G.T..E.7...1..v....V
y...O.......*..Q...-...b5.W).?....?&y1.l..8...<...!......}.Rj....S\
n.........y..\..qkh~....U....Qk}.\.V....W..i7z|..7....f6...Q.7..r..C.a
b...b.q.1.<*}l&w...g.9.#..a.G.....>6Nd..........*.p"'..].QL..&..
d8.../.n.......b.7..\.8..o'...X_..].L..n..m.....>.......b./.7......
G ........oV[..<.|.....o.w........b.Z...M....?.}.s......|..o.....G6
....O..zS..O..I|...m...t..@..."..1I...*.;..q.Mn.i2K.."Yb..-kL..]R`mL..
x3I...wv..-V.qz.)...q.) ...b......c.0/7...X..z.*.c,...bt.E.....Y.\|.WO
3..&&x....;hw......$z........O......q.N....O_z2K...(j..y..fW.].....Ur&
lt;.o..@.`.~.1..I.-,...t..o..#..).....\.K.w.;......v.3..d......t.^.O.&
lt;O.q..........xy.....Vxu...H.g..x4Z-fhq......E.It.Y.7q2..I..t..7&q{.
X.O...5.P.S.B2..3N...\..lc..JS...*_/..u.......N.....g.w.......Q`^xGG.f
D...]&.h.^9....#..a...v.Ik.o.f^.C...6".....>....$o........ok...u. .
.......;...5.j.H ..1..w.^...i.W.d....mZ.)....I..n.nw..;..nc.....M..-X#
..}.(.Gg~9.$...`...=Y..-.=.L8..s.A..I.v.m.c....|...L3.E.F..~.WR..(....
\^t........t...W.....CDR.j...b..\Z... m...o....!.8F.....7.f.%.n.......
.z...f.C.=.'....A.h....=H.A&..8Ny..%....u.8>K8........Q2.-.#..ejk..
.4...qot..#=`w..6.p...,.I...ak.3p..t..wn..t....OA..m.t.....;.d....4.q.
.7..N.A......4N.....]....c^[email protected].^........Pr....Lh.....Z..$.$<<< skipped >>>

GET /staticPub/js/lab.min_c0c155c.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:51:25 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 07:52:47 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
89b.............Xms.... .\Q.e,p*...9b{...l..}....k..H.!aI`.@......../.
.6..........j....B.....#....Nwqh...7...?...K...r.q.Fi..N.......%....Z.
zE.E......1..}....../w......n0..z.....d..:I..D. R..Wh.../G^5~<Z..E:
...E......`.....6..N..=.<...0.9iRh..bf...aG...d2{....V.i.<..cj.-
..?.T...A.....D..{b8.>J'Q..M.'..:..^...e'.9..n.....'.....Z.........
....wA...06W...}.N...ta.(4.$.L5,[email protected]....
Ha.2..........k..~.i.V.7&....]...~..P....1....Z0{\Jo....f}9...b... ...
Q..[...].ZF3..._...).Ob5.W..S...7.>......].Eg..n.%N...F............
.%.'.H.QGA~...M-f...l.r(..#..>...P?E..1C.7F./..I<a...(<~=..m.
.V.H.~...F..>z...Bx'h...!.f.k{.z...k..].4[.)"...,&,..~...y.c.n.....
.g.l..!....{ r.f.O.Y.l.0..h...p0.{'.v..?}........C.V.......k..D...Qeq.
$..T.> ..S..9.......c.M..W......%'b3&.>l....5..!..J.$5...7r.L...
P.K.c....c....8..VB..V..(.....0.}W...kH..qt;..q..."..u<...w.&/..M..
....x|7:T..n..E..oE.[GG.k.....jL."...........t..........W .Xa.\.'U..s.
...7.....s.l?5..O..X...mV7...^-.j..p...r.<]P..Y.....Gx..r9.\.. ....
...f.......]....=.z.....#....;....Y.........[......-...Qi2.aW......L..
03..A.......&.y.Z..O0.V.%..>uB....N...".....j..h]....$.....x..$....
..L...2......ip7..N7\..*.L...5....]..e.8W..-K.*..z.][email protected]....|)
a.N.E..X.,.(M..T:U.*.&P.*.N..r.<..>.T............._.>L...U..}
.u.h..iV..ue.J......x.'.'..|&D.....xx..-..C.}....y<.8..{q(O~..!....
=.1a.?..7T......UU. .mPTu...]}l...*].o..C..).b6V,....e.{ )....!]....p7
s.e..........-#).6..N..J.W...3g.&..".=.9.o......0......e 1....D...<<< skipped >>>

GET /cookieMapping?atscu=AG_275634_HFVR&google_gid=CAESEMwJ6kNLyuHlHNmhyH3ZZBU&google_cver=1 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: adx.agrantsem.com

Connection: Keep-Alive

Cookie: agsid=xU7oqm36So0Pe8QJ


HTTP/1.1 200 OK

Server: nginx/1.6.0

Date: Sun, 06 Sep 2015 07:28:18 GMT

Content-Type: image/png

Transfer-Encoding: chunked

Connection: keep-alive

P3P: CP=CAO PSA OUR

Content-Encoding: gzip

52...............s....b``...p.... ...$.E.t.%\.C*n%............#.6.%.&l
t;].\.9%4......F.....0..HTTP/1.1 200 OK..Server: nginx/1.6.0..Date: Su
n, 06 Sep 2015 07:28:18 GMT..Content-Type: image/png..Transfer-Encodin
g: chunked..Connection: keep-alive..P3P: CP=CAO PSA OUR..Content-Encod
ing: gzip..52...............s....b``...p.... ...$.E.t.%\.C*n%.........
...#.6.%.<].\.9%4......F.....0......

GET /CookieMapping/TanxCM?tanx_ver=1&atscu=AG_275634_HFVR&tanx_tid=ArYplpb_HF0= HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Cookie: agsid=xU7oqm36So0Pe8QJ

Connection: Keep-Alive

Host: adx.agrantsem.com


HTTP/1.1 200 OK

Server: nginx/1.6.0

Date: Sun, 06 Sep 2015 07:28:21 GMT

Content-Type: image/png

Transfer-Encoding: chunked

Connection: keep-alive

P3P: CP=CAO PSA OUR

Content-Encoding: gzip

52...............s....b``...p.... ...$.E.t.%\.C*n%............#.6.%.&l
t;].\.9%4......F.....0..HTTP/1.1 200 OK..Server: nginx/1.6.0..Date: Su
n, 06 Sep 2015 07:28:21 GMT..Content-Type: image/png..Transfer-Encodin
g: chunked..Connection: keep-alive..P3P: CP=CAO PSA OUR..Content-Encod
ing: gzip..52...............s....b``...p.... ...$.E.t.%\.C*n%.........
...#.6.%.<].\.9%4......F.....0......

GET /CookieMapping/BaiduCM?baidu_error=1&timestamp=1441524506 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Cookie: agsid=xU7oqm36So0Pe8QJ

Connection: Keep-Alive

Host: adx.agrantsem.com


HTTP/1.1 200 OK

Server: nginx/1.6.0

Date: Sun, 06 Sep 2015 07:28:26 GMT

Content-Type: image/png

Transfer-Encoding: chunked

Connection: keep-alive

P3P: CP=CAO PSA OUR

Content-Encoding: gzip

52...............s....b``...p.... ...$.E.t.%\.C*n%............#.6.%.&l
t;].\.9%4......F.....0..HTTP/1.1 200 OK..Server: nginx/1.6.0..Date: Su
n, 06 Sep 2015 07:28:26 GMT..Content-Type: image/png..Transfer-Encodin
g: chunked..Connection: keep-alive..P3P: CP=CAO PSA OUR..Content-Encod
ing: gzip..52...............s....b``...p.... ...$.E.t.%\.C*n%.........
...#.6.%.<].\.9%4......F.....0..

GET /?q=150706X7ZzHz4&sid=14516 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vdax.youzu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:08 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.5.4

Access-Control-Allow-Origin: *

Set-Cookie: ad_code=150706X7ZzHz4; expires=Tue, 06-Oct-2015 07:27:39 GMT; Max-Age=2592000; path=/; domain=9787.com

Set-Cookie: uuzu_LAST_SERVER=s2052310037.mf.youzu.com; expires=Tue, 06-Oct-2015 07:27:39 GMT; Max-Age=2592000; path=/; domain=uuzu

Set-Cookie: ad_code=150706X7ZzHz4; expires=Tue, 06-Oct-2015 07:27:39 GMT; Max-Age=2592000; path=/; domain=youzu.com

Set-Cookie: game_id=100; expires=Tue, 06-Oct-2015 07:27:39 GMT; Max-Age=2592000; path=/; domain=youzu.com

Content-Encoding: gzip

My-app: 200 from 122.227.15.91:80

X-Server: 122.227.15.91

X-Server: 115.182.198.91
66f.............Wko.V..\$....RD.;i.....-..44.b.R..'...c......"P.e.6..X
.l.F%.L0.%[email protected].....'........G.T6.."!O.
...\....E..D..a!.et,..1)6iZ<>..6\.Q||.[.....>:2R.....S.....&l
t;..L.gF.F.E..jT.Gv./V...~.Weqm....V>~r.\.Pu..._....Vf...........?y
.-{..mN].~.....:.........y.v}._...ulh.$...... *.....Y...NlP'Q0......T$
...-...W.......Aiq9...^U..x3..w...A6...e.33S]x.9T.6UYZ..m.....h..r.e.v
.........j..........J..\..t.....5..Je.),.V..6nz7.. .....gW....\Y|Q.[f*
.x.q.. ..V..[*..{..*KS.v..c.5....p.jy.......w].nP.;..YT#..M.k.y..zZ...
...q6-JYT`.(......s...4..q...<...R.?p.5.....C....X. [P..4SH..Yb.JRA
E...q'..B..`.0.|.....[I.c.T..9.....@[........O...X.....%....,...?..l&g
t;...d..6:S.e.- ..ac...4....gh:...f`."..8......O.]].D...~.H..d<.H..
p...D4.s..qh.%.D".....[[...........H..Q.|.r...$.kY..%..%...A...M\S..D.
.>!....^[email protected]......[..l.:[email protected]..=. ...B...3WVGN.V...
..a....;...0.....f.p...5..).HOW.;..3%;....([email protected]
..* ...j!...D2HA....]X...\C5%....ul......U"..6.zb).;..&....u.D?..2....
-5....^X.rI'v.V.M....&7j...F'.z..h..yyb..-a...&.JD..z...M.}"U...g!...,
...b......P..O...P..8.0..... 9.".,t..tT.#......R.L..HLBLM6.}.e.$...r..
5f...C.h.84.d.a.....\l...[....Y....v.....062X......=fj...9.c...B.p.7..
..B.q,hH.{........X..7Y.HP.y.b...z C..k.b......r...8........1.7.....O.
....~....&...k*......X:......_..;P./2........h.*........n..Sg%.Q.]...]
...k&.....0.,j.....:...sj.(..9..~.%..;..s..u&...*).I....{.y..r....o./.
..$..'..g.`]......J.a..}....8...N|....9,.s...a>..m...h.........<<< skipped >>>

GET /js/y.js HTTP/1.1

Accept: */*

Referer: hXXp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vdax.youzu.com

Connection: Keep-Alive

Cookie: ad_code=150706X7ZzHz4; game_id=100


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:08 GMT

Content-Type: application/x-javascript; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Mon, 12 Jan 2015 07:13:19 GMT

Content-Encoding: gzip

My-app: 200 from 122.227.15.91:80

X-Server: 122.227.15.91

X-Server: 115.182.198.91
92e...............o.........A.,Y..m..iE....x...sQ..M.$&....e9......q..
i]......l..!...p...../...N<R...i......x....w......d......z..K.pg...
.................L...U.!..z....MJ.$S...;j.....8..<.l..9.v.:...Zo.4.
YD."g......^V.F.....1....y.e....G../..Z...Z...,.J..lhz.(m..Z.....J.__.
L5O....4...e.6..*.E]s,..y......L.4...j.Tf...hNq.e....-A..o..=....t..SE
".... ...UL.z...F.>t...ZU;.....&..*...q....-..........Y.....N..ZMjz
.&!.er.p..B.WSm..R!.E...2..2.,y..R.,I....P.......%.....E....z.r..B..(.
d.._..>.j.z.^.qp c...j.........i..s..m....t..."[al`.F..*...(.(u..q.
..rd.4.D.....J.....#3....".....'.........L..q*nk.e{...3.......r.)..c/`
N.....{_..n.....EZS.W.S........q.X....j.;0...RLX..D......`.9.N...&2.4.
.-4$...!.$.d.... ..~7bF..f$.i..>.......h......NU.X-.M.ej..H.Z...5..
'..........x...u.u..].Yf..BdD.1z).0.w..o.fy..8@B..[....|....p..:N.ww.[
.`.......{....enDFwo.?....8!.....J4....c&....a.p..c..}Q8i....#.D1.C...
rL....uy.... ....H...2..........93...4nx.4).....b.D.V.7....g...."?F..3
..evj.."H}. .e.R.......r.S,y..e3G...r.*..A.!.I&*M..'W...........9.....
.G..mC.*.D,.P.q@.`...*..\]..@......[..o..n~ ......[..G.......{...8....
tA]Uu.<...Lu.|......W!......./...p......EeHg.......nBU1...p...7....
.i..........n...U...}..Y.".V.....c...O...............GF..<.....xp.a
..k2.0.h.F.w..QT..jc...-Q.U..J....1....R0....x.g...p.....zn.j.90.|IVY6
1 .....o.....z.O......w...}...?.....m/...1........c.q...q......JG.tJ..
..?Hcp..J.%.u1#Bez]......a.4..Z...&).-`...i...T..)...0....'/........7 
P.z9$/q...U8H^x8..n6...W.....I. .%...K..`.....Qpq....z....e7....V.<<< skipped >>>

GET /live/2015/08/23/17/1003v1440322326408959442.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 17 Aug 2016 09:38:34 GMT

Date: Sun, 23 Aug 2015 09:38:34 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8701

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 23 Aug 2015 09:32:06 GMT

ETag: "916392129"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou90:8104 (Cdn Cache Server V2.0), 1.1 fuzhou181:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....ET...,:.C.`..A...{ .....=..0..&......3......w...o.....{...
.....(. ....../....).2".2."22.2..2*..tt44t.l...D...D........@j2BBJfJ..
t...$.,.,.......3.CAAAGE.GG..'%$....{......hD......!........8$........
.........-......................H...8$P..L..\B8..P?RK...p.Oo...^H.^&.W
[email protected].$..8Z\..........p.....8.%...L..$C.W...5./......Tho..P.KT.
..~x.....`l..<.....T..>.w..3.!....\.t.j..je........8....nj.H....
).oo..v.(..-T.Xq.....67.v..[8....)}.O^.Tf..at......x...Q.S&t.x....<
j.r.....\.}.|s.....o......W..onFyz.W..<.......l?h.H...Ot..\...@....
.B.q_7.....)...s...v....5...........D......Dd.f.f{H.f....F.=>....`.
...^.NN.....?L..j .{=.iG....ed..1..9Sy....-bU.{.$}i]q.......s= m..fv.H
..........^.....J...5.2.C.[..T.[..>dW.B.. .6..`^.......4..2.#N?...#
.U...'7J...6b.t.1A..lF..k.G..b......r...0.:..."p.v~b.3;"j.S..lh]..._.,
.,...M.<h#...h..>.L..!p.........$.Y....{.R...ND.$y..'....F.b....
X.K../Az.4..R..._..]...W.>ic...~...Z 5.Jg...../.n8.O6..Eu...D.y..._
|..FD.fP%.....f.$.b....^r.XM...m..0b@k.).l....I. 0....d.'....U..J..'..
.t.. #;~.'8...wB............*...p..Wz....i..>..M.E.&u.Xfa2kfu.i5|..
.../......-..\[....)..V.>....\.]..h......5... ......0*.#...!:..k...
..S..2... l[R.t,...O.=.L..........FwA7vr[.q...Im`.P..C. .....'J..@...;
...............^...[....yh....6r..e..~L...%...=E*.t...i"....D...6...j.
.y...U..6....O..-.... y.q{..{...S.<.....z.Y.w/...U...UWt...o.YK..?.
_.Ew{[email protected]"[email protected]~RQM....9b.[g...L...W......{...D..
..BX...M....'..=......-K=.5.c.28^.&...5A.{f.v..0. M..(.N,.w...?..;<<< skipped >>>

GET /live/2015/08/28/22/1003v1440771193057527291.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 22 Aug 2016 14:32:04 GMT

Date: Fri, 28 Aug 2015 14:32:04 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6667

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 28 Aug 2015 14:13:12 GMT

ETag: "2643078992"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:88 (Cdn Cache Server V2.0), 1.1 fuz112:7 (Cdn Cache Server V2.0)

Connection: keep-alive
....xl.U....w0._..?k.z.V'."...e.h.....D.....5........X.J.-:Q#...%.E...
..o..y.{...3g...y.?..........B...@ [email protected]..
[email protected]...@(.(.)(.E8X8D......'...&0.. 
....A.}...@$......op!Dd7*..&......IIH.;...ndz.>.;.f.F~G&iT....L@F.~
7......r.......7e..Om"[email protected]#...W....3..7c....qd.BE]...n....P..
r(.H.@. ....%."7...7......k.j2.3.}J......0.~l.......gw..L..=......:...
...A>.^.of.A.....z.pF%..|.isp...4d.%7...3.4U.....E......N......z...
.."%.}...!!....z.7......W.4x.R~..6.....?...;*......D....."..fh....z.:~
....H........T-&,.;6.[l...,....;K..Z`......N.$.T.......od%[email protected].."...
...a-.`eGKB..d......c.(.2........`s..i.Dv6..t%..:.*....._.........h.H.
p>.7..B...........5...J5m..W....R.=.I5..x*..&..-:.R..^s.&.=J.q..kLX
.r.r.X"& R....9...W^...'tHk7....4...._.1..k.........c.._X.].>thM-..
.......5CP..Ph4Np...!...k.V..J......ce&.9..J..z...E..x.~..i........Z&2
.6....../. w.jv..).B3....C. .Y6K..lVL.O.(.....n["._...s....[...H...!/&
....o...*}.9.n...f..4~Q.|..(.mv...7%m........y0.fQq...C..~{..u.._.Z.{,
...g.Q...-.<.5?'.Q..,.l.JB..._a..0.<...54...M'..x...ut..........
d'[email protected]%...U$".. S..UD"....... .. K.{..{. ......\....
.....;[.8 pg|f\...d...Er.!. .......X........f ...<...:mG.t..<B.P
]K.P......(8....g..k.E.~eO...9..f..U.7.^........q.|`.T)39.d.....|.;...
l tAg..........S.9.st....*M..........UN....T.....d."T9.F.w.F..}!...;.9
^.6S..>..X.G.][email protected].<8Is...`6....,.)..??.
.w.h..*.e[....].L....c.........2.CM.....^.. ....-.a.K..L.4.......:<<< skipped >>>

GET /live/2015/07/26/12/1010v1437884372255724437_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 20 Jul 2016 15:01:35 GMT

Date: Sun, 26 Jul 2015 15:01:35 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 12072

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 26 Jul 2015 04:19:32 GMT

ETag: "3208933684"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou87:8105 (Cdn Cache Server V2.0), 1.1 fuz113:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....._.U....UL.l..7l............K..www/.EJqww........I..Yo.jM.L2y/....
......$....@...|....0P.0.P00.0..0p.........(H.8...8....D.$..........T.
.t.x$.,.4,[email protected]|......h......4$.
....... .....BB....`.a..k.......`.YE1.U`M\..1)[email protected]......
.n..R...K....!..9.%A..a..(..........?&......\[email protected]`...\.
.b...Z. [email protected]........"..Tb....Q...........lo~....&.?..G/.
.....=#......x&....bf.k.R..0...............3.7..y.w*.v......<1.3...
G..C..H...p9.!.Vp o.a../.Z.W.[[email protected]'
YeRR....0v.n...K.D....1I. ..ya,B..q.....Q...E9H.8.N....R\.I)../.;(b...
...Ei~K...._...uX...f6`..O42.....>.......E]..\.%i.J..n.g...(.......
I .P..F....:..l...R.9........*4#t...x...R...#!.:NM......{hp.e.c87..T..
D.7}.......Su.{..W.w...~ ...m...vH.7...G..@'...........b.........Y.
.........".3.$.,.).q,4.....c.......s...R..1fb.^f.?.;.\m".......7..e.ze
J......q...~&6.d..."....[)./.x..m...0.m..l.i|.`..9.r.*.2.......xT..../
q..F3..X..3=A.9.m.[..`[email protected]..!...GyT.$\.=Q.-..........l..sXyE.....2..
.:............0.c.....W......a).........Bld...Z..X.r}g..3R.^..arzE..)I
..L..l..Xu.W-1....z.g..Po.A..K..2R.z8N....GL..f9.=.c..Rp...g<...Xn.
.R...$..i.$..Q......L.......XJ...[..`.,....WUR3.wD.>0d....z.....v..
..%.e].?I..X...*...aR...>...3.7.A....}!..;..<^~_..._..VA.. 6..!.
8.....P.|...F.uM.!...6Il.....%......q...e,q...6...u..........9.TP..L..
..Q@...)..S....KA.....~....q<.....J..O....TN1.>rW...DD..d..T....
.....i...S7#.....C4...fo...,....[..  ..~|z:}$...9.........a..i...B<<< skipped >>>

GET /live/2014/07/28/13/1003v1406526224346765016.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:15:47 GMT

Date: Thu, 09 Oct 2014 09:15:47 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 4563

Cache-Control: max-age=31104000

ETag: "2755104525"

Last-Modified: Mon, 28 Jul 2014 05:43:44 GMT

Accept-Ranges: bytes

X-HITS: 2

Age: 1

X-Via: 1.1 fuz114:1 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), qu
ality = 80....C.....................................%...#... , #&')*).
.-0-(0%()(...C...........(...(((((((((((((((((((((((((((((((((((((((((
(((((((((..........."........................................7........
.................!.1."AQa2..Bq...#R..3r...c...........................
......#......................!..1"A..Q#2............?...<.k..<.j
BFy...q_7.}.\jS.N9..9....." .8.........b.....b....._.#...oi..:T....h..
..z.u ..FP.......Dz^....T.Q.a...'....][..M.q q.......gQ.)....S....... 
.B.._......m.<.gc.cp.cBG.........M...M'...s.(/XuU..w5..../...?.....
K..?..R..oS.a.....8...x.......NC..nS..(.9..H./.Kwp.{.).O.G...Sx.......
KX.1...6H..>.8..J...~~..].........c...r=......sm*.vyA91.|.u...Q....
S.~.B..Rk8...W.#A..O%...i.....z.....#.....N....Mqsj....I......]y....wc
v9..........NMu......;.Q.?.Q[M.Q..m$h.. .N.Z..\B...B...H..A.n8....Z'M.
...47...2..F...._..Q......?#.4.p.-.H............b.}.....].BC.a4Q..2...
,....1l.1...) ..=....tK[.$.9.3G...[.....v..o.$.%.}.....9h..........6.&
.w.S0F...{)....Y...{......'....T......Z..........Y...vs....Z.5...k=.hR
#.'...p.BK.......j..n...j... .e....H.&.....,..#t..-..Z>.W"V.S...Ha!
....j7......S....4.......9."A.)..:/g..=mn...F.*........y......7..hm.e.
...x...bg.5H.V....s....j.n.1h..xU......9me..d..UN.{..@..."$XI..#......
i..,@..2..Z..Y.yX.*.].......>....3.......5..G.mo....f.......4k.V.Li
8.yiUp..........F8...d=....U:{G{..I..>P.d(}.Gq.N.em..)#......)6.<
;.]oc.z..j.<.#..[..}>...h.W.....Y.)....&<mP.(......j2<<<< skipped >>>

GET /live/2015/05/17/12/1010v1431836293039868445_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 12 May 2016 04:18:32 GMT

Date: Mon, 18 May 2015 04:18:32 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 11173

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 17 May 2015 04:18:13 GMT

ETag: "76625574"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou89:80 (Cdn Cache Server V2.0), 1.1 fuz109:6 (Cdn Cache Server V2.0)

Connection: keep-alive
......XU...wUT.............{p....!.6.qw...$...%.K.'..r......{.{.Vu..^U
. .......<....X...u.................Q0QP..C.E.@.$.%$$...'&.. &.!...
d...g`bf".`.dc..cdb........2.....#1>1..:^..,d..x....`.`..`^..R.....
.....F....- .........!.". .%a`..x,.*.Dl.)..H...4......Y<.....W..V^I
ooI`..`..4......o.`a.aa`....{.-...M.. .C........V:...0.........a.a...u
[email protected]..>.....H.U.c.~.0gZ...Cm.v.3....w^.rD.
O...q.....N..........q.....jlE.}K...1G.7z5..1.W=u],.. ..!...!.$.....g.
De..~%4I...g.....I2c...6^jVi....LZLm...0.7......$.|...%.%.F.R...bF.yxd
.P`/I...k.8[.....! .:.e;.].#Z..L2..<r.......Y..7.....9_A|...j......
JB...U.:N...Bkf....E..g8...%......*..?....D#.t.,o....fq.A.856..1..W%..
......#.C."..H......S..$?......qp4./..X.%...s......f.h.IB..v6....r.U..
].LA.V.S.N..Hi<..6...I|J...%....kg.5.G..b.....N..E..8%.V...Cu7..Jd.
[.@..(S..F?q...IyD.>..V.c.....i......KZ..7Y..:.Ck....$.Y.8..x ..V..
.s..Z......SI..Q}<......;....>.C..$.XK..4..*...N(..Ta$a...r..!.~
....2z...G...2$.\...;...L(...:........@.">..a...)........*.5.Ia....
.l..|ni....V..S.S..8..!..o.h1n."..............'R..)\}.{..=.)I..PO..fB.
.R.#.4.. .S...$........ok...u..N.'.&E.............\.....ZUN._^.|.(.Q..
]*.My.W...h3..?M.(..!Y6nK..6.'$..F.(@..P......j......zk....*A.F..!U..#
.!*..4..*./[..].2........?.k...% .H.d6.x.....V....`.<%. n..T..$....
....{.>T...:%......iT.R..6..kko...E..m.G.E.....2..}......J.#Ob&...2
......P$.N....b"..f....a......{Z.:....,....g..(..8...\.. o..;...;-d.4n
...5.=Q.}..9...M`0.......cQ.L5$..4.h....oJ."j..\N...k...'.....&.Y0<<< skipped >>>

GET /f2/9a/v627061383118550.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:14:43 GMT

Date: Thu, 09 Oct 2014 09:14:43 GMT

Server: ngx_openresty

Content-Type: image/png

Content-Length: 2615

Cache-Control: max-age=31104000

ETag: "221677515"

Last-Modified: Wed, 30 Oct 2013 07:35:57 GMT

Accept-Ranges: bytes

X-HITS: 5

Age: 1

X-Via: 1.1 fuz112:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......b.....N.......sBIT....|.d.....pHYs...........~.
....tEXtSoftware.Adobe Fireworks CS4........IDATx...O..w}...3;.]o....v
&....5).V.....^*P....-9Tj% >.P%(9%...!a....R9TJI.T.UQ..MT..PZ...)..
d7@b....?3... ..Zg......^...z._..\.~~k.g..I.<...y......\..&.3.$I.$.
..'y6...w.......$I....M...SG...o.f..n...J.lllfrr................#...Y_
[.O....K.fv..cs...?..7......N.,//3333333.f...-I.........I.d..j.wx...O.
....................k.s....Z.....7....Q........y.........c.V........Lm
.cfffff.....L.n.x..................$G./...133333.h:I.U............Z..Z
w...@......<z^.....t...Z............. .......<.7.T>.333333...
...=6w...133333.hzm......:\........y4.t.EWp........N.......333333.....
.......@......<.n/..........p.. .'j1.333333...W;[email protected]
.n..6.133333.........c..233333s.......333333..c.V.....Q........y..^...
....133333.h:. .......<..^.=u{m.bfffff..s..\[email protected]
..p..........N.. .........'..233333...w..U........y....333333......b.Y
........y4..^.]@.N.........}t{..\ffffff.... .i...........O...e ffffff.
M'{o@.....@......<...X{...X-.bfffff...Jg..\ffffff...Wp......y......
[...233333s....333333..Iv.............d.w@{q..................S.......
..G...mWp........Nv......c ffffff.=...#I..Hr...x..133333.hzg{ I..k.Z..
....;em.cfffff.....~...}.......c.tk3.333333...o.(..k.-\..X3I....*.....
.;g..O..fem..A......y.|dj*[....ofcm......%Iq...$...Ko....?823...f...(.
G.$I...XY.7.;;WV:._x....'y>...4I..^.MrW..$..L*I.$I....t....3...p.R.
.(....$I.$I...U. I.$Iz}d..$I.$.$..$I.$i Y@%I.$I...*I.$I.H.PI.$I.@.<<< skipped >>>

GET /1046289 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Cookie: __fx_unionId__=111-14516; _m_u_union_=php_55ebeafec1c339.44956151

Connection: Keep-Alive

Host: fanxing.kugou.com


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Expires: Sun, 06 Sep 2015 07:29:59 GMT

Content-Type: text/html; charset=utf-8

Last-Modified: Sun, 06 Sep 2015 07:27:59 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=120

Connection: Close

Vary: Accept-Encoding

Content-Encoding: gzip

Fw-Via: URefresh MISS from 183.61.10.157
466..............i....7.Z>.~.f.....kG3> .-_0...>..wNOw.L[=.M/
Zlq..,./[email protected].........;.=.._...........-.....LUefdddDdl....^Z......
..6......d.c.......d0](......l.?.....y.e..Z.Z..3.m.`...l...9.9 O{.7g..
za6.P.V./....X..l.<...}K....F..[...Ai"....lf.^....5...z..K..T...az3
9.k...#....d...>..O...._;H].;.....=...<[............cA~.O.....,.
V.J...T...........?...g..-.{.6..Y[/..../.x.?.u7..l..>..........7v6O
.j.y..../...j....=.p....G[...'o....o.#W..J..|.....)...\..,...N.1'.v_k.
8n.U.O.....}3.........o..ykb.........7...| kW(.z3.z0[.. c=...i.6P..}..
..c..I......6O....2jb.*.I'.......Axpw..W.........1w.lx...Sf....F:q..~.
...'/.n.k.>........w..\i.R&...^..N..Y.=C.......F....l...N......6jA.
X....Z>824.|h..J...r..l.........L..:.U.(.... ..o0%........).6.o4.SC
P...{[email protected]....\..j....n....ru`*[.Z(M.0........Tf*Q7.\...P
.Fo.....%;....L....T.X.../...C..cc....=U(.....O8..*.l}.\.......$>Z.
. .e......j.>rA_.."&..T..if.....:.gp0..uj.........5.....7....W.J.Z.
[email protected]..&..?q7.....T1[.Q.......g^^..>......j..S.Z5.7..W. ..J}
K.Wy.../...98Y....S....<=......|9...{...g...@...^.%@.D......S...w.k
.<.^.`.......7.....n&&......!.Y_..s'..._..sj.....q..8000....m...3X.
S......h_<.X..B)_.2......_l...t.S.......H.-..lP........r.`a....}...
.t...m.g...R......[ ...g.f..,....-..?.Ld.j..9@g@..>...........@1(M.
g...O....(...._......J"[/..,.........2..h..K..M.#?....E/.j..A..|.&..G}
........=....2S.7[......o..D.7....4j3}.m<3.T.6.`.T.lH.K...d..m..f..
y.$.....E1P..!W-..}..`.. 0F..D.....3.l=7.....)..PiHA*7.}..4o..@.[,<<< skipped >>>

GET /cd/pics/23317/23317925.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.gtimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:28:15 GMT

Cache-Control: max-age=600

Expires: Sun, 06 Sep 2015 07:38:15 GMT

Last-Modified: Sun, 14 Dec 2014 11:53:58 GMT

Content-Type: image/jpeg

Content-Length: 63470

X-Cache-Lookup: Hit From MemCache

X-Cache-Lookup: Hit From Inner Cluster 
......JFIF.....d.d......Ducky.......<.....C........................
......................!........."$".$.......C.........................
..............................................k...."..................
.......................Q..........................".!2BR.#1Ab.Qaqr3...
.C.....$4S......cs.%T...5D...u................................... ....
...................."1.!2AB.QRb...#ar............?....Rna.4....m...;..
.;J.....\l.k.....@-..\1..D......c.......&...W..HF.MN...I...j%.2...i.XB
w.t.nu..C....sO.o.F.<Mv...k.\....5.Z`......-<..........&1.-..c.B
...-!.Ql......3.L....J.r.j.?1_.5.~/(.l..fd....oW.*_... ....6.v...^0.X,
........s....N.RqF)..6.K-6W....O...R..9... ..D"X.Ve.m..[.m....b.......
j........>...W.. B..`...i9.(.ML.6..G.J....5...1....'^...F.p.&.4...B
........8..W...=..q9F..Pn...,..MU...F;T...."....g...I../.>...v..l.{
.M.......{..I..$m...T.......e.!&..E......%.vE....Lm..................b
SH.....kUkI...UX.}..2.........3......A.4..c...f....uI.J...0.....0\....
-1<d..E..q>.*.%..M..Bv[..-...p..pZ........h...L...lG.MP...c.m.bo
....Q.R2e..m.R.m.'[email protected]..&]...^..6..:D.j.."j.c..C.
.`..jE\.o...*..!4^..E`.g.O.fZ.Ua....0........h./.RF.f.70.h.fe.\-2.."p.
~..?.D`-*d.....B.#_...S..w%..v].v.i......4fS...~K..c.,?`.ad..e.... .o(
-k.r.....Tx.Y...\q.q.7/3>'..r..mVsk6.c..g.].}.D.......8l..%..0.. .?
c5_........Y)...3zc,uj.b|.........6&...F..E.........:..d...xP.,.3...4.
M...\C..*...J.......[ q.3....=:...x.VSj...7....e....F-..CD.p.\K.q...D.
....n\J. .| V.E....m....'.?(m8....\BT-)...0<.W...!K..x......"..<<< skipped >>>

GET /js..6rooms.com/js/z_MIN_47 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:06 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502

X-Via: 1.1 gg228:8080 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......

GET /imges/live/room/roomGameIco_v13.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr6.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:38:28 GMT

Date: Sat, 20 Sep 2014 13:38:28 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "1160884200"

Last-Modified: Mon, 03 Jun 2013 10:49:21 GMT

Content-Length: 12812

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz110:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...,...R.....).......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:433630EECC3811E2A90293C6
30219F97" xmpMM:DocumentID="xmp.did:433630EFCC3811E2A90293C630219F97"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:433630ECCC3811E2A9
0293C630219F97" stRef:documentID="xmp.did:433630EDCC3811E2A90293C63021
9F97"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>s.......PLTE.........O..,.....K*.mQ1...W...
.M.0...n....k2..........sP.lk.M.XM3..k..*.V).nS1'.......lJ......!K:&..
.54-..z......yhO..M........J.....md7...:.....C..9..T.....t..3..E....W.
........8...LKK...j......33..........u....bYO............ddc....O4..x}
....X.....k...rpm..7.v5.....n..R..*...........J........>.;......D..
.........Ctc6XD.................. ..W..g..Y.....5.....n.V...t.........
.....R..[.....e..~.....4.......h..K4.....Q.o.....b...7b?,..... ..9....
.R.w......X.SQ.sl.8%..........z..q0..o....r.....RM.)...8..{....wh.gU.t
......A........-....j.....m)........'..d.....).uu.....E..........e<<< skipped >>>

GET /site/fonts/qunar.eot?v=1 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

If-Modified-Since: Tue, 28 Jul 2015 09:23:50 GMT

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: flight.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 304 Not Modified

Date: Sun, 06 Sep 2015 07:28:11 GMT

Connection: keep-alive

Last-Modified: Tue, 28 Jul 2015 09:23:50 GMT

ETag: "55b74a26-1238"

Server: QWS/1.0

HTTP/1.1 304 Not Modified..Date: Sun, 06 Sep 2015 07:28:11 GMT..Connec
tion: keep-alive..Last-Modified: Tue, 28 Jul 2015 09:23:50 GMT..ETag: 
"55b74a26-1238"..Server: QWS/1.0......

GET /pixel?dspid=6666724&ext_data=AG_275634_HFVR HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cm.pos.baidu.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Server: nginx

Date: Sun, 06 Sep 2015 07:28:26 GMT

Content-Type: text/html

Content-Length: 0

Connection: keep-alive

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Location: hXXp://adx.agrantsem.com/CookieMapping/BaiduCM?baidu_error=1×tamp=1441524506

HTTP/1.1 302 Found..Server: nginx..Date: Sun, 06 Sep 2015 07:28:26 GMT
..Content-Type: text/html..Content-Length: 0..Connection: keep-alive..
Expires: Mon, 26 Jul 1997 05:00:00 GMT..Location: hXXp://adx.agrantsem
.com/CookieMapping/BaiduCM?baidu_error=1×tamp=1441524506..

GET /event/promimg/?src=pming393 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.cfmogu.com/8.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 07:32:29 GMT

Date: Sun, 06 Sep 2015 07:24:09 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 6090

Last-Modified: Sun, 06 Sep 2015 07:16:49 GMT

Cache-Control: max-age=500

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 5

Age: 217

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive
...........\.s.G...T....{#9ki4.-..e......6qnn*.R...4F.(3#.c.2.... Y..@
6.,.y...!....$..|....Nw.K...|.6.G=}N.>.>}.4....... .vJU.^.y..i. 
....V.R..fV........aVderrR>@}".....o].U`..q.........[k.........S.bk
.l....bU5-....r|""{X....L{).y..UKu.a....trL..O&...H>\C.k.HA.K....Z|
A3..^Tm.h.0.[...Jc....h>.....G.0*5mC$...|i.5.Gk{cn....c.|9.........
.'e.....lf....^...(i...=.,j....Xj.vM.q.^......{R\..=.|...........s.F..
.......t...}\.u.9..i.#.'.....->k...O......9.TAK7o.kK..Y..#H........
%>p.z..4.h...9y.h_...z..x.}i..|..._:.>^.uk..;../.8|......[......
.\..|.f......k.SG..^_[=....S..o:..........#....WO.................t.}.
...s.3.v..^.......}. ..... '1...`{y`....rV..D..../.Z-....i.[..Cq"R....
...J"c.F.J..... .%........d..s...V4.@..`".......F....F.......RL..(..^:
..}..C......G-..Q:.}..<.{.sFA.i...5..50pE..3..4s[..`xX.FI...$.D....
......L...J..,..Li.... .LT.J...a4G......u4.Etx......p.Cni.Y..HZ.h...^.
M....v.d.[u<$\L.....=FL{OS>O.!C..b.Q..K.0,[.a.-.tYoh....3.5.[..%
c1.EO.......h.0.9LhF. ..C.G.^.....9......&.],*..,....|2..Ek...rS5..f..
...Zg.j3o.....Xb.J83-..4........g2.kA5..r..Lp......2...RM...f.......1.
.<[email protected]..)..S....2.,..m{>.P.m..`..>..?.
..J....=...zM~M^.."zM....zK3...L.#...L..`....W.J21.(.,..'.t.].......'.
......'.U....D5-W.j^0JK.....I/."M..Z.$.R......./......J..X3,..l..E....
..*.F....t..L.aZP"RI..8...7*.........<....2.d...GGF..~MW....Q1..\.d
<.=J.z...".."..^...Hz,.6.~N../h..2*....X...x....bM.y.o...E$...6.&8V
U... 8yr.....E.$.}.3e&.....8.......4gV<....b}Y|........Z.......<<< skipped >>>

GET / HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:58 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 23979

Last-Modified: Sun, 06 Sep 2015 07:25:29 GMT

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 15

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive
...........}yw.U......Am..N_YRUi..Y..n.c........d.l ..I.ch..@.'!.d$.!!
.C&............o.S..RUY.l..J...R.i....{.=.....7l.........C/.8@..[..bu.
g.V ......BSJ.T..K.T*....a/..,[email protected].....
.@f<]......h..'l.R...j.6=..%.>.-..U..YR"1)...J<.......u.g$..N
.Ws5..R..Fs.t-W*.=|.f<.Q4.........~.Qk.c..X^..dtB..}..........6.U..
i4...G........ ....?7..|{K....Z...."LjJ....1..r..:....p.v}[email protected]...
.......6N...u.........?........?....m........J.2.3.........1<q.v.:=
U.d...........i...I...U..J...'....7.g.i....l..^i|.E....{...}.......6.&
gt;...{.mG..6..=. .......7...............'.hg.6.=...d.v......h..ks..x.
........h....}......]_6o...=..>.#....}..>..$.m.A.4R...M...[.\qs.
...{...J-3Q..@P=...:j..dE.. .R......\aL..G...j....j ...\!=........s...
.F'.....j.....^.........R..O.....3..x...W:..J..........y.4....\..Vk}E.
<...*...Zy}..`...z...%N.!.~`0..3.Bh2..e.....T.__%.Z....z_..........
{.J..z....}.....^..?.....j......b..U.......x...-e&...2zZG.A#a.....W-..
@^ .. K.....J.Z`.K..A...j.7.. x....\1[..9...Su...}..R.<.......?..0'
./6.T..9._x.|y..F...O7P.d,|....!S.T.....J..V...#%`].....J..h*...$.....
...zuH0....L..LWt...z.=x"[email protected]^...j.@@v.d......l....#..:.....KJ.5...8
.<]..I5..V...7.c......vx..).?.........i<R.N.y..M.r...2H....{....
t.....t...34....3.R......=.._.N\...4.C.C...J..4)....Z.........%...2. .
.[OIR2....~..f.0.70..S...Jl..a.......ek..=.H..jnl.6...z.D.....IU.H.0..
?....c....M?S..}.0...@:...}M...D`..'........&O;d.9....N.f .`.S..8D....
..;.;..0.1....V./=......u.........i..Z.pl#.....,...<0.7....WG..<<< skipped >>>

GET /large/808700fdgw1eoo30076x3j20kw0c4abv.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1020.v0-mow), ht h0-s1020.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Mon, 26 Oct 2015 09:44:47 GMT

Age: 3447808

Accept-Ranges: bytes

Content-Length: 77122

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive

....$.Exif..MM.*......................................................
.................................................(...........1........
...2...........i............. .........x..'....x..'.Adobe Photoshop CS
6 (Windows).2014:09:16 20:38:51.............0221......................
.............................................n...........v.(..........
...........~.........."z.......H.......H.........XICC_PROFILE......HLi
no....mntrRGB XYZ .........1..acspMSFT....IEC sRGB....................
...-HP  ................................................cprt...P...3de
sc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....
dmnd...T...pdmdd........vued...L....view.......$lumi........meas......
.$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Cop
yright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1
............sRGB IEC61966-2.1.........................................
.........XYZ .......Q........XYZ ................XYZ ......o...8.....X
YZ ......b.........XYZ ......$.........desc........IEC hXXp://VVV.iec.
ch............IEC hXXp://VVV.iec.ch...................................
...........desc........IEC 61966-2.1 Default RGB colour space - sRGB..
..........IEC 61966-2.1 Default RGB colour space - sRGB...............
.......desc.......,Reference Viewing Condition in IEC61966-2.1........
...,Reference Viewing Condition in IEC61966-2.1.......................
...view.........._...............\.....XYZ .....L.V.P...W..meas.......
.........................sig ....CRT curv.......................#.

<<< skipped >>>

GET /mw690/808700fdgw1eoo305zadvj208w05k754.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1076.v0-mow), ht h0-s1076.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 01 Nov 2015 02:54:53 GMT

Age: 2954002

Accept-Ranges: bytes

Content-Length: 41152

Content-Type: image/jpeg

Last-Modified: Sat, 23 May 2015 05:55:52 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive
......JFIF.....`.`.....*Exif..MM.*.............................b......
.....j.(...........1.........r.2...........i....................'.....
..'.Adobe Photoshop CS3 Windows.2014:05:07 02:46:45...................
.........@.......................................................&.(..
.......................................H.......H..........JFIF.....H.H
......Adobe_CM......Adobe.d...........................................
......................................................................
................................d...."................?...............
...........................................................3......!.1.
AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE..t6..U.e.....u..F'.....
..........Vfv........7GWgw........................5.....!1..AQaq"..2..
...B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te......u..F...............
Vfv........'7GWgw.................?.....}W.!.3.a.lF..N.;.P,^.W......V.
.6....8......G_.....u1...........9.k[[..^9ve.^....-..{..9.?.o.(8.I....
..z?.=..#..N5O.`w.......z.|c...KG...-..U}[.>m.....G....L....S.?I.k.
6z....H.....{.Tt>...a....w..G".9t.3...U.......o......./K.6.9.......
X=.-sO...}B.c..?.1..P.....M....?v...;.W....}:"s.....1.#..~..._.......m
;..K....t.........V..fS.1n,.Z.....C..~.[.[.\.H.9....fd>.1..T.......
......C(.^[email protected]"..W;.......z[....>.I....G)......2..........j...m.
......r.....X/...<..Iq.>...W>....>.......X.....7V......~.7
@....*.ju.Z...c.a.r}7;k}..N..5......A.F=........f.....C\........z.8...
..jE......w.?..w......t...........z.9..?.Q4....;_....w.G........:.<<< skipped >>>

GET /large/808700fdgw1ertrnxfxowj201x01sq2s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1135.v0-mow), ht h0-s1135.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 25 Oct 2015 04:43:44 GMT

Age: 3552271

Content-Length: 4871

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:2589C30AE00311E49D5DFF230EC9BA62" xmpMM:DocumentI
D="xmp.did:2589C30BE00311E49D5DFF230EC9BA62"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:2589C308E00311E49D5DFF230EC9BA62" stRef:doc
umentID="xmp.did:2589C309E00311E49D5DFF230EC9BA62"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
...........................................!1.A"..Qa2.#3..q..4..Bbr.(.
......................!...1AQ.aq".......#$...2.CB..............?...n.4
)R.q..~s.*P..O....q4m{.<...U...6....-q$.q J.YMV...A.#.Du(...E..E..n
...>;.o....._5....P.....d%..$!.rSk.R.k.....M.1..$. .j...-...)..../.
........L.-/..V.......mF.K.&.Z.......N.=.....;.....j............d.....
....X..U..l.7(..HKL........T..,...q.BI.......@]...Yw..Ml..X.5....n<<< skipped >>>

GET /large/808700fdgw1ertrnq0jnjj201x01s3yc.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1136.v0-mow), ht h0-s1136.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Fri, 30 Oct 2015 00:08:47 GMT

Age: 3136768

Content-Length: 4227

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:BB72EBBEE00211E4A0CC8A0760F5F12A" xmpMM:DocumentI
D="xmp.did:BB72EBBFE00211E4A0CC8A0760F5F12A"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:BB72EBBCE00211E4A0CC8A0760F5F12A" stRef:doc
umentID="xmp.did:BB72EBBDE00211E4A0CC8A0760F5F12A"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
..........................................!1..AQa"2.q....BRb#C....r.3.
......................!1..AQ..aq.".2B....R.................?.}.:......
 t..R?.MA..YI.x....&......K.'n..H4RA..O~...o.5...... .0.....5.@.....)!
..).K......>.n..A.L..j6.......o......,...bIb.g|...!.jI?.....L.ie...
_..P...._. I..l-8.lG....PS....J.......w/......V.d...s....^... ..2...\.
F....J.I%[email protected],0.W.....vhq.De.....H.H....Sp..j.4.|.5.X...<<< skipped >>>

GET /mmbiz/MXngSX3icHBCficD74531aZ17r0DKrb84Qva5N5kQ5TOXQs3E2SAE8DMcu9VDpKK9SbeEJt4HxrwSlIW6ZkfgEicQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1 HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mmbiz.qpic.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:46 GMT

Server: PWS/8.1.20.22

X-Px: ht h0-s1119.v0-mow.cdngp.net

Cache-Control: max-age=2592000

Expires: Thu, 24 Sep 2015 06:22:08 GMT

Age: 1040738

Content-Length: 27796

Content-Type: image/jpeg

Last-Modified: Wed, 15 Jul 2015 16:34:37 GMT

Connection: keep-alive
......JFIF..............Exif.....C...........................#.%$"."!&
 7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;......c...."...............
.........................I........................!..1A."Qa..2q#BR..3.
br...$CS..D..4c....%&U...................................!............
...........!1.AQ."2............?...hn9G....A..l%.a ....I..y.....F.....
cY..:.tT.........h\7%.......lD...T.:.d...5.....^.M6.b.6..C...&...p.d..
...2..8:.[.;3...9.B.....E.L.>H.........O..n.o..=U~....4h1.O!.X..{..
c..R..D.\....#...3.....e..X.{\....2.>i...j..G....>......T.J...f.
....L.6....j.......?V:{[email protected].%c@o...=.....#G...K..v9.'..B..I..1.n.
.L.....(..r0...c.. .A^...8.SJ.V.....#.};.m.KT... .8.RJ]}.[...Rb=...u..
a...e.r-:.......Fq...S.)e....=.5..X......8...nI].w>..a#.S.=."[...O.
M..q..*8e..G.......v.9...6...ih....`s.HN....d.......i.8j...s..[.*..s.A
.!.Q.....S.....z#~..........V.M.#.Q.../..tF.........p..d.....c.{8 Vp!.
.....Y ...I..o... `.Nm......q<?....`....bF0........[.73.v.It.k._.k.
s............JO.........N....|...^...Dl..F.. .0......2.x}.....7.V.....
 .2...Zk~.~...;a...j..4u...q.....!fJ.|^$....w?e[.....>...bi..H0..wW
.W.V.~f...p..%.7.;%U......9...},m..$....T.Z.v.V...{...{......8R.'.....
.?..%........4d....V...qg...Xuj'...8;5Pq..I-...^Z.r.A.....d{.I%.$.@...
6.;......9...`[email protected]$.q. ...f...D$'
.|......f.....Y#&7......g....q..ZJf.g..'.Zr.W....[...0v`V.?...N.yq.NwM
h:<....|0w .i.d. 6(....]1....x...R|.)..I.D...;V.`ji....;....H..<<< skipped >>>

GET /live/2015/01/27/10/1013v1422324075364249066.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 22 Jan 2016 02:06:08 GMT

Date: Tue, 27 Jan 2015 02:06:08 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 44841

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 27 Jan 2015 02:01:15 GMT

ETag: "1943320014"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zhenjiang166:8109 (Cdn Cache Server V2.0), 1.1 sm23:6 (Cdn Cache Server V2.0)

Connection: keep-alive
....k..T...wuP].........................C..n......I....ow...V..g....Ow
....}.....`.e.e.@ . ........}l...yy............... ..;.....%...#.... ;
.. @H.............I.........0......................9...............)..
......0....x....JA..*........t.T.$..,..Y8......xxX...yx...8..9X....3;.
.7.../..............|.s.......7.7'...5 ;??.?688..5..}.<L}...).mA...
...............C....[ptQR.O...i9:..[..C.....v..u.dU.tw.t3.|W..o..w.?..
........S.)gsOGK'.y)a.w.......$..//.8.?..4.;;?.?..'...8...;...m.OXn6)^
>Iv.qnI>vvi.>.q>iII.iI.nq6...c...=L..-..../......t.4.pv.tv
v.w...8{8..8..Ij.....:Y8{....z............#........_.M.......K...}...I
[email protected]'........
[email protected].`.c......E..E.FEF.....}.L. 
.P.......Bc....H.?.p.....$(h.8x. ,"..]n...B.B..{.ACA.B~g..0.p.... vq,5
SDl.W....J..b<|*N>I7H.....=\.jn3w.....E^i.Mm.s....A.0.:........7
.N........#.X8x ..T.....'*X.8..X...?bLX.9........k.<vJq..{..n.rr...
6.Rqk...,.QKj...H...].....0.1...X(.g. ..U..c....(Y..l...4.D.8.K.Ig./.j
...G..P..i...[.M......6j... ......1...G....Y..1.2?..9...T..O...o8.....
.n...mZ..e!i...v...b$X3T..^.aD....pwu|'c3...I.....Tk.......|..|..z....
v...l.T^.....)......#*WtE......]Z3...( f.}Z....5....Y.\M..%8(H5..jL!..
K].....,<...c..'9%...:?P{@Y....n.~g.X%...;R.z..:.9..3M....#...:.=UF
...% _o8...w.....Y_.}2.p..<.0R'.(.u...N.c..f.W\.7Y7.B..$mPz'GY.I...
......5..&..6".....8 .0 [email protected].,.cj...L.!Hp.n
.w.Y_;Y....w.....O*gw.6r....G?..*.l.......h*e.O.....(..*.....l9...<<< skipped >>>

GET /live/2015/09/05/08/1010v1441413431739154894_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 31 Aug 2016 07:26:34 GMT

Date: Sun, 06 Sep 2015 07:26:34 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8438

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 05 Sep 2015 00:37:11 GMT

ETag: "299853525"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8109 (Cdn Cache Server V2.0), 1.1 sm24:6 (Cdn Cache Server V2.0)

Connection: keep-alive
....79.U....eP........6X``p..........-..gp..!$.d....0Xp.`..$...[......
.U......w?-<m..U....(......<-.d..h...h.......X/._...~A.O.KHAJIIA
JNNM....a...3p20.....Q.s.rAx..6..LP011_`. y...BMN.............Da......
P... ........[..@4tL.....#.....@t4,4t ......LD....#y.m.....'e....L !..
h....E.7....J.?[P.......<.-...".***....@G.?...........$c...H ......
.>.L.$.H.H.C.....\7.....4{E.o...w...*K.....#%...K ..!.......}.|./.*
..N_m.].K......c.....8....C.5._..e.{k.v..F.".. ..#.jL0.2.......!k...gx
........C...m.1N$>......56A..Z.....lm......{......k;...t..8....$>
;.6..l.../z...@..{.s$C...]....B...w?R....ul......Z.Z.........}..n.....
....4$..j.4...LH...1I.......[.t4~....K.X;2^..Z._. 2$e..........Ql...i5
c.Hn.j@.....*{(^...%.h..@?.y{.ge..[|......].f7R. .....wj....m?..w..g..
a:za.;.*.UB.Di........7..L..g.'..|K{vS.E.z..-).g...J...!.E`.$_..uY....
.}*Z5..P....l.o......M.......0'.I. pJ..t....m..V(?. ..G........%...h..
..0=...?.x'.d......nw...h...>.b...3...T.`c...n.F...0.62V&..n.u..E.G
...K..u.P..Y$Yz...V.{.L.w2tj....A.>...`.d<...r[eRbfW..w.l.}...w.
...j....%:..............;r#...C..GyHj..>.....m....b/....?.&^. ...c.
3qISz.6?.R...... ....o".. ;..._h.~.\.9.MmG7.M..Y....`....4]...|T..F...
^|m..B.) .43.2..(..LO..-"......>8Iyt..`.>..f.I..-4...|....V..F6.
..km.,.....7.d......d5fq....}...Bs.r/, ..j9./2...~6..RO.7.'(..N.c.....
:...D.s.GC.%Ph4..rf'.\.>...V.]...%K',.P..H.:......(..<..2mA.*E..
.Y...F<&....'@.&.F\..8..M..V._.&.J..1...@J*.S......-.Q;\...).x.`Z.y
CH............\<....a*...L3.CUS.. j.1.BI._..d.*.m.z..o.........<<< skipped >>>

GET /live/2014/03/18/22/1010v1395152088400052091_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 23 Aug 2016 11:28:13 GMT

Date: Sat, 29 Aug 2015 11:28:13 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8789

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 18 Mar 2014 14:14:48 GMT

ETag: "379954413"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh91:88 (Cdn Cache Server V2.0), 1.1 sm28:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.....T(S....UP.......kqw..P\K.R$.......w.........N(..Cq...s...{..|w...
...}]~....).*....._......<...............................oH..(..i)(
........YX.9..i..................M..M.FAF...........xFAb. ..P.H.0.....
....%d....@....&. . ..........g"...D#..G... f0s.%.Hn . .e..1..<;g..
d.p....:.......Q.H.(....... ##.."#......L *=?...,...:....Y.`........@.
 ..`,z..a....a5......NN%?.F..S.-.._.....9...z..3...G.?r.... G^^..]....
.zW.....6...\{..mW..S3.z.^<od.C....[..../....XI8.....i{.t.[........
.]..^...I.u.>..).....z.........r.!=....._t'U...L.;bD..RnM....:<.
....g.5i..."e.......\P..jF.T..F.a..h.{.. .....y._b......V...6....3....
...\..).......7]...3e.".....#.\[email protected]..=..k.<...(..I.......
...SQ5.?.cz..2jC.?..3J..5O[...#!.9..............M..M....4...Smp..2K..~
..fb....~...2..^...Ir-........g..[.<...~F.G..........).!D.-........
X...(.6^..L..F..Z...y..-j[.q..-Vk...x.e.`.'.......T0...S.c.8%u..'.....
. ...a.O....h........%[email protected]... N..........e.....:J.>S....
%......[f.d.E.........G<..wV.?...f.h...#.......s..$'^,............&
lt;.....~.....#.B;.xU..u....HY..j/[email protected].\....3.A.[|....]...
....?..7|..HW...a........s....(..7;oY.d.'..*.......h.....YY.`\.U..".c8
.ek..\....e...=i:5....-..1.e........m..y7.6.c^9z....... .u9QJH.Ew.N...
]3n.pQGe.E..8.=b.ZT..N.q...M..7.m\....b..c....-?\B.N...e*...-.!0..G.}.
....h...tF.......o#t..,5H....DINn...x.i.}:up.......A).%...e.>'...L_
n...A..F.2g._.....<[email protected]/.B..Z..l7..=)~.l..y.dn-..K.&M.i...i.;.qH...
.WV...k.K.......'..c...~....U..Vc.....f5h.O..L....jlh...U.\.]...=.<<< skipped >>>

GET /live/2015/07/05/22/1010v1436108213754093726_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 14 Aug 2016 15:58:39 GMT

Date: Thu, 20 Aug 2015 15:58:39 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7593

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 05 Jul 2015 14:56:53 GMT

ETag: "1775026766"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou83:8108 (Cdn Cache Server V2.0), 1.1 sm28:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.....E.U....UX.....XX.[:d....n..Ni....W........i..KR...............w.j
~3.3w3.s. ..MU.U.......<..([email protected]...........<."b......O)..h.
..h.X....y.Y.9...h....q>g................s.R.r..... ..t...0..0I1.H1
......LL........p.. [email protected].`a.B..:.%.A...
...WO........i0.X.....i ...b%...K......I....H.LH..].......W$....*..L.$
..>...L>...6}7..N..Rv.DG..g.WMDW.A.Q..6.......t..Q.zJ.Q...K.C..L
9..... ."e.....5.k.NU.WE..g0..=.oaJC^A0HzQ'N.6e.26 R...|6.E..D..;.....
.y4|e...........4..,...q.........YE,........}....]..DM.*.....V~.L...1~
.y..<..E..8.!bI....F..!....5.g....bF..F.4.}....'...y=.............]
EML..7]....#....`..Q..dn.=......M. ..Lqw.4.6..>.\.#.*.F.....1..b..=
.._#....X...:..<U.K3.7..5.H!.>.}U.k....>...r.(.0.>..~.f/.H
.~....S.."r)Y.Mj......q.......:...{E8.`..LM...V[4...$.7..s./[.(YI.P...
.I...x?..%QG^So..P....U....gHe...M..p......T......nA.R.K.~..)V..?.x>
;.V.. W..}.....V.............Q.N..........k3...c...n)z.......^....x|..
`_.....O.by..J...\...o..{ ...Q...O......5^..............t......W)..0#:
.....a.K....8_....)9..m....'..\kPT...9....-...7a.7g...1......H..eb.w.%
.......]4..TX.1...4.i8.Vv.K.. ...^......u.i......q.W.....z|....j.t/..v
.:.....rt]..R.GHrw..!!j..5w.^n..O<.....d.../...{..C...o.......iD..6
..z.W....vu(..X8p..3....:..W.P.)'(.CR$..&>....!....7.n...$..Sc.|./.
3V:.Z.8.o-N...0.....s'@....v........C..v^........Pa..7..[6.....o...k/Q
.[..?0...*.......|roZ..@...;..*.s...\h.....H..'.....k-....T(.....LN...
..... ...ZJ..z.OX.B..........$...B.E^.........8...."1&.j.y-}....|l<<< skipped >>>

GET /live/2015/08/15/01/1003v1439574409548965382.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi2.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 09 Aug 2016 13:58:48 GMT

Date: Sat, 15 Aug 2015 13:58:48 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8051

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 14 Aug 2015 17:46:49 GMT

ETag: "1338458073"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou90:8108 (Cdn Cache Server V2.0), 1.1 sm25:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.....).U...weL.@....,....................-......(....Hqw.....K......d.
..L2.d...._.....4.....3.O(.;....?..........................'&..'...!|N
[email protected]`<#...#.?......P......hD@[email protected]...'
[email protected]`..X...hEB.....B....c...e....D....<`.)5F^3...,R.._.L|o...W...
.>#...[.y.a....o.9.k.........y.W.....!.....O....QD..< ...0......
..D "..`.%..!..i.7.<W..A1.K...y.Z.!1.G,X`........27...~a.(G<.1..
~..r3.B..%........I#1..h.jT.=.kl. }o..:.UYQz3..#U?m.a........|1.J...;.
[email protected]#.u ..U...S.........n.._.{[email protected]...^Y...I.....
....9bC..s..<..........C...=..N.f.I1.&...wxS{...X&..aP.._.;.~...A.u
....,.uC.P_.Z.u.e[..FS........)..Yt..h..TU!.....[......X..D.yPr....D..
D.7..6$..]...M:>[email protected]...."...u.Jc....^.`%....}..T
..lC..A"................|.j..c....w_.m..t.%.^(=...'..*....S...^.J^..3.
......*....t.W...:[email protected].....$
..H.. YY.b...7m.v..Dn..|..9"Vh."...6g.)..1.............h|(..s......i.d
WK.......4..B).~z..6.1M.{.PjD.#$..}..3..&....j.&.Q.......pL.}.x1.HS..$
..{..... ...[Q.....OCQ..W.w......<..>=.B...{Q.B.}.U.........z.;.
....*.,[email protected].].0.yG.....o#[email protected]..,.....
...O3..t|...[....[9.r..CF.^A..".....cZ.#[-..F..U.B..y6..].\...O..M...!
.P.k.K..V..^....L.~<..Q2........*....E...d...$...S.[.O.JvUo;.<-.
>.......2-A...-..(:z.o.......O..j.7.<...i......u..2./......g...-
...z$w...`..6t..6.u\.......y......O.O...k..3.2.T.Ag.e...z.....M.0...9w
y%.......=Y..9..-.!9........4..9.....3.:F7."G..~.2..u...jr..2..Vo-<<< skipped >>>

GET /flight/prd/styles/wide/usage/home/page/[email protected] HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:58 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:27:58 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
efa.............}..#....}.z..j.,6/}o.>: .....C.a...E....oCVO.lc....
.~...|y..>.......Y.E.gf}p........{DFF..t...E.y.T...7..r.z...w....f.
M.......|........vSf.....`....7...S.i....3.w.]...aw1.........;_>>
;...|._..b5...U.Xlf..f.Tv..c....;y*.....NV....O.....n9..0....e........
............P..iiow..;.......{.1.j.).E.|\.....,o....O.e....n._....?-.9
f.v..o.....7..r}x.`..!;.....o..?....;Y>.,U.|qh.....H.8..7.......?..
?....O..?....{(....L.,(..f...o..}q8t.K.d6.t.uw...J..].C.....V...U..U.2
..g...i........_.v....@l......~U.._....r.~(./...f.l.ka.u.y...`K.}S..M`
...QA V._...'..c.......i.Rp...l.Qs.tUt...\4..?..E.c....%`7.....G[.B05 
.|.:t.....[.....1..l..N........./..r....>..?}[email protected]..[...>
;............\l..7?....._.1Y|.......>.*.. ?.....LJ..[..}*...~g.%z.d
..g....|;}:d.....8.._.| ... ...*..C.w....D....C..; V.5.b...D.p&.r....&
u"[email protected]]....._....m.xP=....Y./...0_~|1J....pL...F:.d......,W......
..t..&=|X.f.E.g....*.....X...OPPPR....4.C...~........e..b}h~X...o..e*.
.......~.....~.#.*.f_|(.Um...:r.O.H..y....<.........-.rw.q1..Y...O.
|..n........p!...._......?..o.......2ny...0.w.w_...v>[email protected]....)..0..
.(?..W.u..H.}K...*`Q.6|...`2.._.2EJJ....H$F.....$.5..........d0...2...
..]...7%l...;{`v..>B.....y......$....R4.(J.....-..<..73.\V..3.k}
f..IK<.....5t}.|[email protected].....)...l..I=5
..M..=.K...."y.Lxj.K.n.(>.....F.Ae...v..j.}..j...4o....u.K.a.M...J.
..)a.S.....*9B_i=]..7S#....{E.|.Nyr..<...#.&.-.?}w..[...K...u..N..'
.2.j..|.5.6.b...#....].X<..]dr..........\ p...Y,.....gV..yu/.y.<<< skipped >>>

GET /flight/prd/scripts/[email protected] HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:03 GMT

Content-Type: application/javascript; charset=UTF-8

Content-Length: 1125

Connection: keep-alive

ETag: "55e6a5f4-465"

Expires: Mon, 12 Oct 2015 07:28:03 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Accept-Ranges: bytes

Server: QWS/1.0

Access-Control-Allow-Origin: *
var index_config={module:{SpecialFlight:{enable:true},TrendFlight:{ena
ble:true}}};var alsoSearchConfig={ana:[{fc:"......",tc:"......"},{fc:"
......",tc:"......"},{fc:"......",tc:"......"},{fc:"......",tc:"......
"},{fc:"......",tc:"......"},{fc:"......",tc:"......"},{fc:"......",tc
:"......"},{fc:"......",tc:"......"},{fc:"......",tc:"......"},{fc:"..
....",tc:"......"},{fc:"......",tc:"......"},{fc:"......",tc:"......"}
,{fc:"......",tc:"......"},{fc:"......",tc:"........."},{fc:"......",t
c:"........."},{fc:"......",tc:"......"},{fc:"......",tc:"......"},{fc
:"......",tc:"......"},{fc:"......",tc:"........."},{fc:"......",tc:".
........"},{fc:"......",tc:"........."},{fc:"......",tc:"........."},{
fc:"......",tc:"........."},{fc:"......",tc:"........."},{fc:"......",
tc:"......"},{fc:"......",tc:"......"}],12580:{deptCityLists:[],arriCi
tyLists:[]},wanhao:{"......":"Beijing","......":"Chongqing","......":"
Guangzhou","......":"Hangzhou","......":"Kunshan","......":"Nanning","
......":"Ningbo","......":"Sanya","......":"Shanghai","......":"Shenzh
en","......":"Suzhou","......":"Tianjin","......":"Wuhan","......":"Wu
xi"}}....


GET /usertoolbar/prd/v1.0.0/m-usertoolbar.js?8008469 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Type: application/x-javascript; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:14 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
145...............O.0.....ak.,ec.#$F..?...e1.=...l..#....L.d..r.....-.
;.M.H...3ua...K..s..........@9.).. ...q....jX:.U.A...2..N;.|..2z..CR..
...}...o..............5..}.N....SA..f`UA......l..'.h.S..>:...@xS{..
.V.o..J......M...l..(..6.y.S?.f.~..s...d.,,.......ze.'........r...X...
.HX...wEY..q2....w#...!G..f...5...a......(5....*.......0..HTTP/1.1 200
 OK..Date: Sun, 06 Sep 2015 07:28:14 GMT..Content-Type: application/x-
javascript; charset=UTF-8..Transfer-Encoding: chunked..Connection: kee
p-alive..Expires: Mon, 12 Oct 2015 07:28:14 GMT..Cache-Control: max-ag
e=3110400..Last-Modified: Tue, 03 May 2011 06:22:57 GMT..Content-Encod
ing: gzip..Server: QWS/1.0..Access-Control-Allow-Origin: *..145.......
........O.0.....ak.,ec.#$F..?...e1.=...l..#....L.d..r.....-.;.M.H...3u
a...K..s..........@9.).. ...q....jX:.U.A...2..N;.|..2z..CR.....}...o..
............5..}.N....SA..f`UA......l..'.h.S..>:...@xS{...V.o..J...
...M...l..(..6.y.S?.f.~..s...d.,,.......ze.'........r...X....HX...wEY.
.q2....w#...!G..f...5...a......(5....*.......0......

GET /fxstatic/images/starLevel/pc/14.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: image/png

Content-Length: 1603

Keep-Alive: timeout=20

Last-Modified: Wed, 15 Jul 2015 08:08:41 GMT

Expires: Sat, 12 Sep 2015 14:27:52 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR...............Db....tEXtSoftware.Adobe ImageReadyq.e&
lt;...qiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:84f25697-8665-8440-ab93-67645edd1a8b" xmpMM:DocumentID="xmp.did:
50764245238F11E58460B583C9546F04" xmpMM:InstanceID="xmp.iid:5076424423
8F11E58460B583C9546F04" xmp:CreatorTool="Adobe Photoshop CC (Windows)"
> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a8c04915-e617-c74
e-9c72-cc8383c4a2db" stRef:documentID="xmp.did:84f25697-8665-8440-ab93
-67645edd1a8b"/> </rdf:Description> </rdf:RDF> </x:x
mpmeta> <?xpacket end="r"?>.......hIDATx....k.Q...sg2........
.v!.t)..).](..B..v..6......lQ.........P.. (HI..Q..yN2.......D...33.9..
.y.!.v.;..l.....lK.......;..l.lCl....7L!....S.}.d.*......n0..)...M..Kp
.S%..`...90.....M<b.,oT.3....~..2.~..j.zf...02..~..V!.{MGz.....hP..
M1.M/Lg.1$....o.J......1,..( .......u....3..\z..c....L`.a..%..{&.\....
1.i.<. S!2..s...q4Wx.....v...*/.5....G%............O8."....am8.*...
lR......h..,..}.{.Z.Q.Y.....KNqQ....ld0I.m!..np.W.S....O.........6..g`
..<W.....U.F.Z..........).......h........Se........u.}..m.<.<<< skipped >>>

GET /hotel/homesearch/Camal_walk_loading.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg2.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 4245

Accept-Ranges: bytes

Last-Modified: Wed, 24 Dec 2014 06:35:05 GMT

Server: QWS/1.0

Expires: Sat, 10 Oct 2015 05:03:37 GMT

Date: Sun, 06 Sep 2015 07:28:01 GMT

Connection: keep-alive
GIF89a2.%.............................................................
.......................................!..NETSCAPE2.0.....!..XMP DataX
MP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xm
pmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156
797, 2014/08/20-09:53:02        "> <rdf:RDF xmlns:rdf="hXXp://ww
w.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=
"" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://n
s.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com
/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E9F0E51978FE21187C1B554F
C6EDADA" xmpMM:DocumentID="xmp.did:1EAE98AC8A8711E4BD38E8D045155865" x
mpMM:InstanceID="xmp.iid:1EAE98AB8A8711E4BD38E8D045155865" xmp:Creator
Tool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:ins
tanceID="xmp.iid:8F9F0E51978FE21187C1B554FC6EDADA" stRef:documentID="x
mp.did:8E9F0E51978FE21187C1B554FC6EDADA"/> </rdf:Description>
 </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........
......................................................................
....................................................~}|{zyxwvutsrqponm
lkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-
, *)('&%$#"! .................................!.......,....2.%.....'.^
.x.....a..Pq.....LV...%..([email protected].(..#[email protected].....:...YUy..t..Q .?
VfpI#.....m$....h...m%...r..yn......g....."...i..6/.t............^./..
..h..amB....?.....v...6.O.....................j...h..............n<<< skipped >>>

GET /usercenter/usertoolbar/v1.0.0/img/loading.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg2.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 86414

Accept-Ranges: bytes

Last-Modified: Tue, 14 Apr 2015 10:25:19 GMT

Server: QWS/1.0

Expires: Sun, 11 Oct 2015 23:22:37 GMT

Date: Sun, 06 Sep 2015 07:28:19 GMT

Connection: keep-alive

GIF89a..j............................a................................
..................)........{.........................................]
...................................%........1.....4........l..........
....A.....t.."..M.....J.................R..............p...........Y..
.........U.................E........9.....=..h........................
....................,......................................d.. .......
.........................;...........z........z.....9........E........
u..........................8..o..P.................c..................
..W..............6.....6..............>..............p.............
......................................................................
......................................................................
........S.....!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="...
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:m
eta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 
       "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-s
yntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns
:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorToo
l="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:8F8EC000699
811E4A802F493AF15938C" xmpMM:DocumentID="xmp.did:8F8EC001699811E4A802F
493AF15938C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8F8EB
FFE699811E4A802F493AF15938C" stRef:documentID="xmp.did:8F8EBFFF699

<<< skipped >>>

GET /live/2015/08/24/21/1013v1440424030229980088.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 18 Aug 2016 14:19:29 GMT

Date: Mon, 24 Aug 2015 14:19:29 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 50347

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 24 Aug 2015 13:47:10 GMT

ETag: "2586220521"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8105 (Cdn Cache Server V2.0), 1.1 sm28:7 (Cdn Cache Server V2.0)

Connection: keep-alive
....^ .U....uT.M./...P4........C.Cp......R(....)-m.B....)^.....<.9.
[.z.:g_......2...5...l..@....,,,.?...&.^ ........B...?.8.n.......H.{'.
.g.G./. {_Qq.1Q..j......?... .[........I..\Z_L.W......p6.1.9.x8.;q...)
.).y.z9....yyz#...9..\.o..iQ.....{(s...`..7b..A8.I.H.;.I......KK..J..I
..K.....K... HI).....8.ZC8.(@5..m..H...A.....J.. \E....E.$D%$..J.#....
..........tD.}..>.l....|P........W_........%..i.?.....F..}.E..H....
..8..a....#....C.....{j.8..........9"Np'.I599u9m9)y5i-)qqyum5-i9))9..-
)-.........R2.Z2Rj.j..Z..jr.r.bb...r..................7V...*h ...}.0..
..d..........MC._;..g..v..D...E......pv.F.x..k......r...22.2........R2
............b.rN......N./k'..!.._..g.o&......;.."r..[9..%.g.........%.
...........................9%9........ihhH)..i....i..Q......G..GDMFBF.
.M.....X.X.8X..lJ,.J.?......gX..!.&.B<|.\"l,.._.....?.c.b.....Q....
..O. `'....F.al.....SB=..Z:I.%)...~......1..i........2srv.G.DF....q.._
.............`...e.R.c................OI...!...P.....E)..zz.$.....7Z.I
..DF&.iD.........#......./........f.'...(...7.......^~..W.....V}..U...
. .;..{......8....Z...U4..#.:IN.......`....@5'.x ..![KT D#..P...N...^.
...Aw<......eW....g.[...kZ.i.J.6T...v.U?...L......Yu......i:*......
h.W..-.=H.@;.vF\[email protected]@...U
..t.K.3...o.u....~O......'..L....9..\:.!5u;TC.....~.|.~ ._{.T?..J..E..
..^[email protected].<gp....IJ.q.Uj.T8.$:.:.....r).WS..w_.XV. ...
.|*r.......U....Z4R..._K2H..n&OAo..J.&Y.dnW|. _-{7"....O#k.o.y8.z_e.[.
.........M pR..<YkR.l..OS.M.k......3.;W......L.Y.L.M.aT...C....<<< skipped >>>

GET /live/2015/01/27/10/1013v1422324423827564029.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 22 Jan 2016 02:22:41 GMT

Date: Tue, 27 Jan 2015 02:22:41 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 34700

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 27 Jan 2015 02:07:03 GMT

ETag: "3033768351"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zhenjiang173:8104 (Cdn Cache Server V2.0), 1.1 sm27:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.......T....eX\....x ...h....kp.h...-x .....x................s.>{.{
..{...Ysh.....g.~.{^.`.HHK.....R/?..:....... -M.x..w{^G..pqq.eb.sf44.7
2e4..e.0t`badf...y8..[..P...[..P...SQZ..P.s.3.;..ZXJy9.*{.U....yL...).
=x=l.lM].)=lm..y=..........LT..`q......@.!.H)f.dJ....`...B............
........d`a....e...g.z..db...........?........h.d........VV....gO;.C..
;g..5..:.;Y:.X..Q..74.wu....{......R..F....ong..........`..1u.wu26}a..
.L....1.x...d.2).6......v....T/.F.K.^6.nnQn.nv...O.,,<..".8....Y.&g
t;..b.[..&.,...,".").........E....8..8.......v...v....Z.[......s25t.wR
....{.(Z...;[.;P.)sR~P..3.ww..kz............-.?..k....d}..2H.....'..'v
q.vV.1nq66.....?....3L..............K._.cj..1N/...... ...u.4......."".
.....7ho..F{..-:6.[t,...1.1.pp....`.....b........E................O.. 
8|8..8,.<.....s7....xq..9..P^[email protected].~...
G....J.0`.....UY..%&6...v..%..E!*[email protected]./.y...........7.
...........2".<. 8.......%.H....Q^........;l....d.C..q\|...S@.... ;
Gl.:...s.ojQ1......I`.....j.x......?T`......L|.X.a.RT"..........P.....
?.U..z....t......Z...owk..~.4....u...|.r..M..n..m.;..r;}....d..|.zT...
H.^H.j.;&;...R.$sD"2.._...%./..P/[email protected]...?....mo.oo.
..W....2.%.5...g.`...`...A.u.k......kF...RL9..x................`>..
."N'9..-..WP...v....,.)[email protected]=.a..h]/...Az..t.!.D.^;..V...
.....%.7.....7....Sk..Q.......V=......#..#.......f.`>...bM..ebe.b..
....Q....P....T0h.[.....x...kWJ.wP..J.\u....o.C..zr.b.....,.....#..R..
......x.]......R.6.........&.W.;^#....6......].....|.....X..{x..;3<<< skipped >>>

GET /live/2015/08/22/14/1010v1440223203292588355_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Aug 2016 06:01:10 GMT

Date: Tue, 01 Sep 2015 06:01:10 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 9151

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 22 Aug 2015 06:00:05 GMT

ETag: "3358660809"

Accept-Ranges: bytes

X-HITS: 2

Age: 1

X-Via: 1.1 hzh86:8109 (Cdn Cache Server V2.0), 1.1 sm24:0 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UT.\..g.`..h.JZB..QiD.....aP.C.[:....)....K.IA8..9k.u.....
[email protected]......))i...i.
X ..L<L,..\..h.y.y9..8.8.......p.....8i)i9..... ..t.......R ...4...
....b.........8..k........aac........b..,..J.L...5.uB>9.`m......9..
[.............4....g.L..?.A.o.....g...)H.?.W.......c..zZ.....#...d....
..`k..;%.U...L.)....o.W.....yt$y..m.....9yU.....Xkc.~.xS`.. .=..K.HfV.
O^.........m..K.G..........5..f..}..l...T..0.AvWW....m.k..........8...
?t.!....4([email protected]:(2.([email protected](&.W(f`p2DC..$
.._..'`|s3.;....W..smL...k.3...k...=.."..1.[.....^hi.U.,..2:.r..&RGa..
)|..Ih.....:....k.^....a.Z..#........P..F...J_..\O...'..U...Y..O..C.Q.
X.`.^i...T.v...g).......7...P.y(mR..|k..E[>.u....e/..*....5.....AI.
8..!Y..r;..<......... .'.RP.0.0...U/.{.m.M.w..R..I..v......T[...z..
."rk\..z...2.X..Ho.cM.......c}._A..K6..U.^^.6.c.j...~..Lv..\.^.7.r.>
;ZY.U.9..S.B..q.....B.!...!.2...UH..z.hxa.....w....3. >...$.R..^...
.~&.j...z(.Lw?.0...H<...T..mU ..1.J.T23.....u.E!....X.8..Fvp..h..}z
.'.....Nz..2..*......m...W..g..Il.\..q%u^......bB.i5ME9..v$.K#........
Z..H.a...r.6w..Qm....g.lN..D`WF6.H..p......m...Bo.}... ..).6....G[....
.t.f..6.X.*V....z...-......1...NUj..d...i....n.O.._.W*V.3....b,.x.u.b.
..X....k...? .^~.<.,..........!o...c.D..........<PC02....Z.A...`
&..hh.lb.L...:...yk"./...>..9....,fJ.g...Xd...p.j..f..{........Vr.|
....|.;.}&..V....}.EQP..Ka.Qw..t(...q........6S.!..`..k7.S..#r...`. s.
[email protected].".^..[Y....)Yf/.6$O.3.I...s....{.(7<<< skipped >>>

GET /live/2014/12/09/10/1010v1418090705130314943_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jan 2016 13:20:50 GMT

Date: Tue, 06 Jan 2015 13:20:50 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5192

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 09 Dec 2014 02:05:05 GMT

ETag: "3739072067"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zhenjiang175:8107 (Cdn Cache Server V2.0), 1.1 sm28:8 (Cdn Cache Server V2.0)

Connection: keep-alive
[email protected]...)..H.M. r...J..[hB.....p).T. ..HS.....
.....u~..9...3{...|..........@....\..4.d$.d.$dd.d..d7(.((n..`....cb`ff
b..Y..8Y.x!`0.(./......'L.&(.'($.'........=...  .U..mW.....^.%1..@....
.W.... .H...........$7..Jt. 1....R"...."b.R.-n2I5rz.3;.)........7..=..
^.C.4....w.\.%....INBz............@...$I...x.......T...@. .*..>OB. 
....$.w....@.]......,v..Tsr.s..x.....=`D..KH.M.:[email protected].[...
]..)..wpqn....;..^.>>...Z6.39c2 ....>gS...._&........\"7.p..#
..E#6%?.".......5.Q."...f..H.oLGJ..s.!Gr..@o%\....6.E.."...`*..n.a[...
.}.-...2.R...).G.y6....i.A<.B..:...{....}./.L.....n.@.}6....z...2.(
[..^..W.....C?......N....-=...3..A.k.}l...T.....:..F....=....D[%@.... 
..Dnk..D.Rd4.......<..3.a..$..=....B....u...E}. :......q.......p./^
... .......q.3.....n.g%.1Gt....#.....4.lV..>...,.=..m....7...}.....
...:5...'....R...6.L2.v-&Y...0.'.v*rh..F....>7.Hp.Z.i...&.."L...~..
...M.Z.......?&..<.... 3......68P).P2Y.W...1* ......>.L......;..
.'....O..7yT.E..xh".G:x.....[._....Zq.3..).}e.........P..m.)M...[..9..
O.{.x7(r......f........%U..6.\.:....D..Fl.O..[.&.......y.#.Z....A.R.p}
O.....z.J!.....x8..B.....mZ....g..?P..E.......z8...A.%:.B.g$]......U..
`i.Q.....q.^.=& ..H.^D.s .U.......A....p.ZF..f?...Nz.....=e...7f.aR..X
o...HP....._7$..gh..G[k..s.)]..)..N7.b.ox..I.....E..".L..r.....*vdl...
v..k...%.x3I.p.]o.|f.3..FEd.6-]7..e..*f:0U.y}..cx...WfuK.%;.........:.
......*..B.....V...V1..xx.........bb.|%L....u!...B..%f.I..........?.-.
.q'..6.P.s.o.R...4.".5.....0..F....(...N.1$.aw[........^..J.S....O<<< skipped >>>

GET /live/2015/07/02/20/1010v1435841090922650162_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jul 2016 05:59:15 GMT

Date: Tue, 07 Jul 2015 05:59:15 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 15286

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 02 Jul 2015 12:44:50 GMT

ETag: "3107643448"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou87:8108 (Cdn Cache Server V2.0), 1.1 sm23:8 (Cdn Cache Server V2.0)

Connection: keep-alive
....B2.U...yUP...................Cqw .....ww.K.......}...L.$y.D&......
.e.d.........o. ...............GDGDD@@.FECF........%$.!#$."..%g&...c`d
  cag.g..g...'.ppp...X..X........7......>. (....P...F.$..$.........
......@............/}88h(.........I....E).a.....Z.C%9..i.......o^8....
(........h...!.......O.....gc..@@C@[email protected](.19$4`.(9....A....%.9x.
o......... .xR 4.K1$..6.w9K.....Y._....A.LN..G"._..$..G#...:..{#J.0.`.
.,...d.\.N..;..s.9.vg./....T.....h.G.Td$f...\6L.}K...z.-.8..(....pn..C
...v............P.?.:2\[email protected]:...!b.......n
{aZA.l.6....[..H=..TR..s7Ll..`....g.Npw.o..3vfF^f...I@.....>.^..j..
.~..5^......(lwM*y..F....GQ...3..... ..x]1...r.G.........e..p;.......q
[email protected]....[..d.........u.>.Q #[email protected].|7D.|.I8J.C..<`....!
.......d......IU0..*..^-,W4.df.|...<.....i....1.aGT[;..8....C$.o./.
l......c.z..j.cU...GS@!...N.%n...$....H1.......Q...4....J.2.....[...79
r.U..b.".Iy.........A... .61F.Z.A(T.d..7.,.}.f .....^...).. l'..O.]..[
yo.]K,.@x....{{._[6TH%..._z=*s....k...v..r.....}...*..Z.-%...Rf...;C.L
.e..*[email protected],$/.M. N..N!,ej.H ..Lag."j.....U..W.........}T......N..
.....*.......rM..=.w.....l.:...N\?....*...Ka].Y...<?T?.T....)..`.o.
....m.d.....i.#..8h&.s....T..}...1.......D..... ...3~7..$3..N)..>.c
..C.t........J.|.;..=M...o.6\\|.x.....E.]...]U@Z..}.\.C%b.q..........R
.-S..wSo.a.d.d.../.......1CE.8.P...........Vn...w.....[../..E"..i9...H
<'..N.b..G..n.s0G....>.|.3.W...|.?&3..E...U.....8......e.LQ....k
 .m....s6.rdW.{.k$.Ga........u. 4.L7.E...z...6U:c..4...TB0.....Q..<<< skipped >>>

GET /live/2015/07/04/18/1010v1436004451432314709_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 29 Jun 2016 08:37:47 GMT

Date: Sun, 05 Jul 2015 08:37:47 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 12313

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 04 Jul 2015 10:07:31 GMT

ETag: "3201213952"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8106 (Cdn Cache Server V2.0), 1.1 sm27:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....c..U...wUP.\....$.....2..$..ap....................v..a....=.N..>
;...}.}..QQNA.........W...Dx.D.xDD.D$$Dd....((....h..p...p....h).IhH..
)Y(i......(X9X.8h....#.ABBBEF.AE.a .'f.......2.'.............. ...H...
.....O......,................0........IR....9.. .YJ3.w....[..e..(.tyE.
 .N...........&.....c.'.....G.....G./.C.a..%.@[email protected]<
....|.g}4...r......2../#......Z..d....}...J.K|......>.[y.l.d.@.%<
;.H....).V.Vu.x}...;O.".@5[H..dV$>.#0.......i...`....w.A....t{.Nf..
..0s"I.3...... T...5...9R.N....[..F..S.;.6(.:.. ....- .!._.....q..Mo.9
..U..[...oH....t4.s..{.j.Z........7.>.J........R...1L.l.w0.~...E.y.
....}..f8F.N%..W(0...D.:..J..p.=V;[email protected]..]9.jxd$}/.2....
.j.....&.....&t]..N.ZNY...yV'.....kA.cV.9.h.:a.'m..D..d...R......p;.;.
...m}.i"K....{..@.:.g.!..mW.>.g5~#.....d.M....E.Qth#c.(....7......C
[.V.....S.9M..O..F..t.Y......;....^A..#.....lM..x.1......yzx[z )ni."..
.B..)UE...%.R...%.#..|...N.....Np..`.[.Y{4A....e..N.l.yH.6...H'.......
..^.cR..K..M..U.g#@..\...#.C..G...g~..b.....S.[P.....s.m.K.....o.e....
[email protected]!.nm..(Q..]i..;zF.3.:.t......v7....9.........^.C..
47k.k.Az.1..L.r...*..sQ.Psz...,q.....^lY.5.O7...|.;.T.0.e*=.%.g.M.....
.;:...f....D..C.4.._..d..z.k%.1.M..{..........%Li...Fg...UP.V.n}.....f
...T....s.&.....[.....v..K......f...q`.'J'BMU;.jn..'.......Pk..N..d.:O
.....D.......fD....bI.x-4..:.u..0.].[a.,n..T..|.-. ]@..._.7i.%.q.....1
F...y..................{.a..u...t-.D#. ..j.ny.l$..4.T5..#-p=.CF.....ED
......e...T...j.r6..F...].N....X...j$e.r..y.7...)...n..y/&..}....y<<< skipped >>>

GET /live/44/16/db85577447.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 13 Aug 2016 06:55:46 GMT

Date: Wed, 19 Aug 2015 06:55:46 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 14958

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 17 Nov 2013 09:47:24 GMT

ETag: "3683553925"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:88 (Cdn Cache Server V2.0), 1.1 sm28:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.......R....WT.`....H..HoJ..#.Ho.K(*5..K....t......^"...&..&M.A..`}w.|
{..{.{...3..f.......:.....&..-...?..\.T.M4....(q.:..{9.r.H.Ip....<\
.tt..t_hhq..I..py..z....z.%)!A~..P.............7..].[.[.[...in......p.
.$._....n.&"&.Cz.....C.}..[DD...HH............>.|z.....#oz.wi.w....
<0...H...$#g`dbf..........WPTR.......kjfnaiem.......r........G.....
.OH.......).....................?084<2....._.....lnm.......>9.sv
..{...[...B..r....MLLDL...[[email protected]\.C.-m.}..g...Gf.
.....I......E._`.....$...xD4.5.....x}...vD..7].}.B....qH..-...A30....u
p....')T...y.,.....CZP....8 ..p..u..}..........s.8$....>...&..f.1mh
..yW.d.d..].'......3.O!.\[email protected]
.... .......(w.._D.z]......... <F.>.z|].]=T.tU\....e........N..N
..$~.. .rg.fb...~..>.:....%......c.V...)g.......T.zbt./....8M.$..,.
L*.2..J.V.*.b...4J...^&Q.i&)..m........d......i.....}.#......V.DK..W1.
c.d..X.......;......x.J..>vK.;...P...{A..T.....y..eG'..............
........#..{.:H.$.A..M..OZ_.....Q".1...G.y..........3.R.:......7/.....
....t..E4e..N....uq{4.7..k..g....z..-|..g.Q3......Q.......}...q....}.S
..3%.e.b..}_...E!E....`.......N..M1q..!*...T....R.....7.I..c.d.2.Riv.h
g...x...z..s..8..`.6.c......J.c..f..V.,..q E#L.#...$u....ic...f..5...z
.B.I............%&...I..3..%.*...\. [....U....hp.n.............9.}..#N
m.P-.p&....~qi.............q.;.Z...l..d.{4.P.....d...}}.....#.....~...
.|b.>.`.~$.L.ol.^.......E2mi..zA^6.zsO.=..XG..5.......c...E..(.._..
......~.4.#.J7...\`.V..m...l....le../........[..,...z&.../.Ry,.@..<<< skipped >>>

GET /live/44/16/db85577447.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 13 Aug 2016 06:55:46 GMT

Date: Wed, 19 Aug 2015 06:55:46 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 14958

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 17 Nov 2013 09:47:24 GMT

ETag: "3683553925"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:88 (Cdn Cache Server V2.0), 1.1 sm28:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.......R....WT.`....H..HoJ..#.Ho.K(*5..K....t......^"...&..&M.A..`}w.|
{..{.{...3..f.......:.....&..-...?..\.T.M4....(q.:..{9.r.H.Ip....<\
.tt..t_hhq..I..py..z....z.%)!A~..P.............7..].[.[.[...in......p.
.$._....n.&"&.Cz.....C.}..[DD...HH............>.|z.....#oz.wi.w....
<0...H...$#g`dbf..........WPTR.......kjfnaiem.......r........G.....
.OH.......).....................?084<2....._.....lnm.......>9.sv
..{...[...B..r....MLLDL...[[email protected]\.C.-m.}..g...Gf.
.....I......E._`.....$...xD4.5.....x}...vD..7].}.B....qH..-...A30....u
p....')T...y.,.....CZP....8 ..p..u..}..........s.8$....>...&..f.1mh
..yW.d.d..].'......3.O!.\[email protected]
.... .......(w.._D.z]......... <F.>.z|].]=T.tU\....e........N..N
..$~.. .rg.fb...~..>.:....%......c.V...)g.......T.zbt./....8M.$..,.
L*.2..J.V.*.b...4J...^&Q.i&)..m........d......i.....}.#......V.DK..W1.
c.d..X.......;......x.J..>vK.;...P...{A..T.....y..eG'..............
........#..{.:H.$.A..M..OZ_.....Q".1...G.y..........3.R.:......7/.....
....t..E4e..N....uq{4.7..k..g....z..-|..g.Q3......Q.......}...q....}.S
..3%.e.b..}_...E!E....`.......N..M1q..!*...T....R.....7.I..c.d.2.Riv.h
g...x...z..s..8..`.6.c......J.c..f..V.,..q E#L.#...$u....ic...f..5...z
.B.I............%&...I..3..%.*...\. [....U....hp.n.............9.}..#N
m.P-.p&....~qi.............q.;.Z...l..d.{4.P.....d...}}.....#.....~...
.|b.>.`.~$.L.ol.^.......E2mi..zA^6.zsO.=..XG..5.......c...E..(.._..
......~.4.#.J7...\`.V..m...l....le../........[..,...z&.../.Ry,.@..<<< skipped >>>

GET /live/2015/09/04/21/1003v1441374469426980004.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 06:54:59 GMT

Date: Sat, 05 Sep 2015 06:54:59 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10822

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 13:47:49 GMT

ETag: "4048357252"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:88 (Cdn Cache Server V2.0), 1.1 sm27:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UT...,.$...'@.;E..&x.b..$@)^.5.[p(...)...W..".......[...9.
m..5...9...~.P.hhk......;..[.U..6....p.......................QQ..Q...S
.QPR.......3..0P....O.........$.!%&.....A.%......E........;.`...9.....
x.@..\B,l.?...................q..@J<*.|jQe(.=*...F,.uh.K. .8l....AB
.....<[email protected]...
.7..K.7./.O...uX.:)W....3...!...\&<`..j......Y .]........Bv. .-_=.A
J.....A..G.....q./@kmP....>.....l..A..23........9.....a..a.L.U.l.r{
GIB..k.,=W....6.....)....b...=...Z.....n..2.3.5UqHa.*..,.P..........&s
.......el>.4....V{....`....U{.8...(5.mH.( a.u?..'SR.....mb.|.Q\&...
Q$.X......).7..g.pn./.q.%../............(~..g.6C..'.........w2...f...@
...[._!......o.c...\.D[B...C.z..E..uw...%[Q.)}.. ......7Ar..J."....n..
n..m.@g...\x....9..9.z.....iH.K.T.8wHN.(=w"..{..ZM.6........a.........
.=..W...E..s.E........pe.f$...O....A.yPIk.l.n.....F>8...H ..-....K.
..r,=h. #Sk. wN.....#..U.B#......U.i..#)..FSQ....H.....1..nPT...a..$..
..O?.Ap.E^v.7.....6....J.pFu[...tt......}7.i........s-.....W.x.$E..K..
.:'..;5....;de..D..<....m..y._..@i6sO...^.=...Zs.....B. ........n.h
..v.........h..e....wk/k8[.....Zz2..... ..............Zy...G=......@..
O.t/rX...`....D..yBE....j. .....<.....Z...4.......,...........E...*
..X...8..g.G.>..~.l...........%......[M.V.....'.r....A......U%..C=.
...wV.i.......J....u..1!..K..P./.l.. v....'.......o..pO...... J..E...D
..*83..t....sq..7.\O..&..>..mz.nO...Ke....{.S2.*.....nU.S.N-..ui:..
....i.9Y...~......x`.....MU.....1..o....S..d!B.Y...MZM.X..'......?<<< skipped >>>

GET /live/2014/12/09/10/1010v1418090705130314943_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jan 2016 13:20:50 GMT

Date: Tue, 06 Jan 2015 13:20:50 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5192

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 09 Dec 2014 02:05:05 GMT

ETag: "3739072067"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zhenjiang175:8107 (Cdn Cache Server V2.0), 1.1 sm28:8 (Cdn Cache Server V2.0)

Connection: keep-alive
[email protected]...)..H.M. r...J..[hB.....p).T. ..HS.....
.....u~..9...3{...|..........@....\..4.d$.d.$dd.d..d7(.((n..`....cb`ff
b..Y..8Y.x!`0.(./......'L.&(.'($.'........=...  .U..mW.....^.%1..@....
.W.... .H...........$7..Jt. 1....R"...."b.R.-n2I5rz.3;.)........7..=..
^.C.4....w.\.%....INBz............@...$I...x.......T...@. .*..>OB. 
....$.w....@.]......,v..Tsr.s..x.....=`D..KH.M.:[email protected].[...
]..)..wpqn....;..^.>>...Z6.39c2 ....>gS...._&........\"7.p..#
..E#6%?.".......5.Q."...f..H.oLGJ..s.!Gr..@o%\....6.E.."...`*..n.a[...
.}.-...2.R...).G.y6....i.A<.B..:...{....}./.L.....n.@.}6....z...2.(
[..^..W.....C?......N....-=...3..A.k.}l...T.....:..F....=....D[%@.... 
..Dnk..D.Rd4.......<..3.a..$..=....B....u...E}. :......q.......p./^
... .......q.3.....n.g%.1Gt....#.....4.lV..>...,.=..m....7...}.....
...:5...'....R...6.L2.v-&Y...0.'.v*rh..F....>7.Hp.Z.i...&.."L...~..
...M.Z.......?&..<.... 3......68P).P2Y.W...1* ......>.L......;..
.'....O..7yT.E..xh".G:x.....[._....Zq.3..).}e.........P..m.)M...[..9..
O.{.x7(r......f........%U..6.\.:....D..Fl.O..[.&.......y.#.Z....A.R.p}
O.....z.J!.....x8..B.....mZ....g..?P..E.......z8...A.%:.B.g$]......U..
`i.Q.....q.^.=& ..H.^D.s .U.......A....p.ZF..f?...Nz.....=e...7f.aR..X
o...HP....._7$..gh..G[k..s.)]..)..N7.b.ox..I.....E..".L..r.....*vdl...
v..k...%.x3I.p.]o.|f.3..FEd.6-]7..e..*f:0U.y}..cx...WfuK.%;.........:.
......*..B.....V...V1..xx.........bb.|%L....u!...B..%f.I..........?.-.
.q'..6.P.s.o.R...4.".5.....0..F....(...N.1$.aw[........^..J.S....O<<< skipped >>>

GET /live/2015/07/18/00/1010v1437150501366480600_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 14 Jul 2016 01:53:38 GMT

Date: Mon, 20 Jul 2015 01:53:38 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 12943

Cache-Control: public, max-age=31104000

ETag: "2604328600"

Last-Modified: Fri, 17 Jul 2015 16:28:21 GMT

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:8109 (Cdn Cache Server V2.0), 1.1 sm28:10 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
@.........................!.1.AQa."q.2.....#B..Rb.$3C...Scr...........
........................$......................!..1.A."Q2a............
.?..I4..u?b...;-.....3^u%.(?`.Rq....;...........,.m.3...........B.....
..kyC~..}]..l......h..(..).}.hs.T.P..#m..Ld........M..Piw1...m....i..i
..C1........>.....i.1.skm9=........Awm8F..`fR..j..!...........o.7.G
.T.&.m=g..&..X......B..a.EK]GW.c..\..b...j..o.-...qn.>....&../.V.$.
.B.8b..6);U..kwE.UxwC..d.}.x..........-.ZK.|.!O..........Ayh....}.v...
[email protected]..#..._?ZkK......h.-..'.y..'.......b.\.6{...=<.
_...:wL.=..77.....D.....~....r..A..n.....H.sx.lKH....c..*......W.[.d.;
c.Q..*..$..r....s....mB...B^V....0.a.4.#..S,.xWw.........O{#.6..)..a..
..Y..Y..a.........H..Tve....z..&.....m...Z.[........?..S.......C....G.
.,.......!.?.....~.Zh.{.S.......Lv.n. ...k;......J......&...h.c.....".
y>............ r...H...>.........S.."X...)R..L.....K..`.....$...
X...s...=.aJ9.U.u..=6...fwwkWh.I..s.'.#..7i....w......R....{..{ku1LJ.E
;.....<.......i.]\N... ..Q.....t....E.. 6..I..-..3.....`.%|.1...KX}
.{tc.I&db.;T.3..?.,..7...qX..4.KLS&8...yVVz.....O,......N..h....Ud..O.
N..*....mOY...c\.0..-........3U.jz;......$.U..4"m1...N..B$e3L.~E.0.?..
.|.......w4v.C..>..{..T....S!.V..gq#O<*.q.G.<..7...}..l..{._O
{....../....?.j.Q...{...A...0....h.&.[..=.p..qp ?&...0..[.4r...B..<<< skipped >>>

GET /live/2015/05/11/12/1010v1431320164947388798_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 31 Jul 2016 06:40:07 GMT

Date: Thu, 06 Aug 2015 06:40:07 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8587

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 11 May 2015 04:56:04 GMT

ETag: "1748081144"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8109 (Cdn Cache Server V2.0), 1.1 sm29:3 (Cdn Cache Server V2.0)

Connection: keep-alive
....d6PU...wUP.......w?..".-.........]$H.$...........lqB...{N.[u...{.{
...a.k.....B..e.............h...h.......X8.88..8./...)H)))H....X..i.i.
..!..l.`N0..7.7.. ...?..&&&........595....]......E...(D T"[email protected].?
@(.h.......".@.(h......B.........^b..`..i.J........v...;.mr... 6Y.....
[email protected]!BezI,..?.&.k3W........"T"@..~.B...8I.T.J...B
....M!$ K.2.....g4.X.v...)d.........}y>..0...`g.mr........x{......W
..7...>..r.....u./7h.]...U.)....'..h..PS.T....l..V.99..\p.,R...'.G.
...s...?*...Z3h..8qF.S7.....*2>.aT...6v.KY...".$.;..Q.....r.x.:=!..
.....y..}.D.K.. ..b..$4g4......./b...l..&.IJ........i-.....A.z.Y.eF.(.
B....\...<^!..q*....I.3.S......#......M.....^;.....o.u..b.......].`
..f..o.....:B/].}.Kc.I.Ai..2H.._....a.....Z...o..;6.....9...Q....t.2..
"..p..9D....l....b..wH.._.1. .J4..q.,.3EJ.o|.t.?E...U3I....y....l..*..
dK..!.^[email protected].._..h....\0{..l...C...P.......y..h..H...E
t#....vO..G..?...|X......\.q...%xlq.....u..!]..c...!...p..t.,.........
..*.>}..........f9.....4c......ja1.H5 (.J9|4....\.WE....B....lg ..f
K......5=k.k.[.....[#.P..2;x...!nG=....~..z..3..{..q.V...$.... ..d.U..
.......n....2o/..........S.y_..-...'.)D.tg....#Y.k..X..c..t..3...X.?3.
?...... kDL..F.f...6....5./:....T.B.@04,...nN.z{].h.D. .......z...Pm..
 3....r....2Ht$T.M..i..RT.D..P-.......E....N.j.a..BA.......d.... .....
.....L.Z..%,..D.1...F..k.K. ...K.XmC.~.....)..OL..?.j...E....h.{......
M.hyI.$...*........A............f.....0j..\rRH].. .t..,0......>...{
5_.c.= 2.?..Wo.Y.S.9.n...4...pc...%..Io....B..r.5>.O..{...w.J\.<<< skipped >>>

GET /live/2015/07/02/20/1010v1435841090922650162_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jul 2016 05:59:15 GMT

Date: Tue, 07 Jul 2015 05:59:15 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 15286

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 02 Jul 2015 12:44:50 GMT

ETag: "3107643448"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou87:8108 (Cdn Cache Server V2.0), 1.1 sm23:8 (Cdn Cache Server V2.0)

Connection: keep-alive
....B2.U...yUP...................Cqw .....ww.K.......}...L.$y.D&......
.e.d.........o. ...............GDGDD@@.FECF........%$.!#$."..%g&...c`d
  cag.g..g...'.ppp...X..X........7......>. (....P...F.$..$.........
......@............/}88h(.........I....E).a.....Z.C%9..i.......o^8....
(........h...!.......O.....gc..@@C@[email protected](.19$4`.(9....A....%.9x.
o......... .xR 4.K1$..6.w9K.....Y._....A.LN..G"._..$..G#...:..{#J.0.`.
.,...d.\.N..;..s.9.vg./....T.....h.G.Td$f...\6L.}K...z.-.8..(....pn..C
...v............P.?.:2\[email protected]:...!b.......n
{aZA.l.6....[..H=..TR..s7Ll..`....g.Npw.o..3vfF^f...I@.....>.^..j..
.~..5^......(lwM*y..F....GQ...3..... ..x]1...r.G.........e..p;.......q
[email protected]....[..d.........u.>.Q #[email protected].|7D.|.I8J.C..<`....!
.......d......IU0..*..^-,W4.df.|...<.....i....1.aGT[;..8....C$.o./.
l......c.z..j.cU...GS@!...N.%n...$....H1.......Q...4....J.2.....[...79
r.U..b.".Iy.........A... .61F.Z.A(T.d..7.,.}.f .....^...).. l'..O.]..[
yo.]K,.@x....{{._[6TH%..._z=*s....k...v..r.....}...*..Z.-%...Rf...;C.L
.e..*[email protected],$/.M. N..N!,ej.H ..Lag."j.....U..W.........}T......N..
.....*.......rM..=.w.....l.:...N\?....*...Ka].Y...<?T?.T....)..`.o.
....m.d.....i.#..8h&.s....T..}...1.......D..... ...3~7..$3..N)..>.c
..C.t........J.|.;..=M...o.6\\|.x.....E.]...]U@Z..}.\.C%b.q..........R
.-S..wSo.a.d.d.../.......1CE.8.P...........Vn...w.....[../..E"..i9...H
<'..N.b..G..n.s0G....>.|.3.W...|.?&3..E...U.....8......e.LQ....k
 .m....s6.rdW.{.k$.Ga........u. 4.L7.E...z...6U:c..4...TB0.....Q..<<< skipped >>>

GET /live/2015/08/17/06/1003v1439763696488313126.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 12 Aug 2016 00:47:36 GMT

Date: Tue, 18 Aug 2015 00:47:36 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 9334

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 16 Aug 2015 22:21:36 GMT

ETag: "2967523787"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 hzh92:80 (Cdn Cache Server V2.0), 1.1 sm29:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...VUX.........[..........a.A.f...f..F.S.......?.........g....
...W..............P.."... ........c.cbb``...a.........R...QR1Q...s.3..
qprP........s..W.......................:...!!0.......^{.....2......@BF
EDC./...@D@BBDBA.....?gD$.2..!.......1....bdr.:..n]7...$........m.'p.?
[email protected]..........$......21.....u...........r..2...8.T...).
......j..t.._..I...p#}.>..S0........$Z`....X.._.WB~tK.S.a..'#4.<
J78V...Ag1.Y....|vf\..d...'a....vQ...cR....SL5d.'....}.]#.. ...8..S.2/
.B..J..Y~.U...V.w..a>...<._....K-.. [email protected].
a.v..3..Z..(qz)...|Y..M....^.:.o~y$.......Fh..o%*..|..-/.\k..r..].. ^.
....e.Z...4.%....Z.*{MnQ...i..!|VN.....4e.F..]..t`..kJ..$...]z.9.$.Q.w
F.2]....`.........]............./W.*T..P..q..,.....s .[...........~OH.
x.<....r....b6.[.c....."&.i...3...t..|...gG.....N.........y7A.!.!..
.89...b.Dj..*..b.O$.-...J.UX.U.........-.z=.F.w<....5.......2.]....
..r.l1.(.gVv..5..2.>W][..0$.y..%..L........t|x.....V..."c....G%..WF
..~3..PdB...1o..|......d...8..1...^f..k.6..........!7gHc.X0? .uY......
rM.s.wI>.J.....z.........'.....L.......n..)N}l.......I....jr.L?.i..
>_.$....<9.u..m.6.K........z...3..V<...#g....$..H.....m.p)G5.
..!.G.<'.-...p%-......=\~.x. .....fQ0...L.0..w...YS.....i.].J-.C...
.X.-.S.?A7I.....i...s.....TI7......V...[w....qz6(....=.\~^..#..=)9....
..g.a(.05.../.r.....^.............}..z.rS.Jm......3.p...tU............
.f.b......g.n.6.@].....l.Q....."..Wh#.........\r.F.>1. ....9.>:.
P>a....B...]:h..O.X.!.xq......>.V........pQ..f_.S.e<....M<<< skipped >>>

GET /live/2015/07/04/18/1010v1436004451432314709_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 29 Jun 2016 08:37:47 GMT

Date: Sun, 05 Jul 2015 08:37:47 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 12313

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 04 Jul 2015 10:07:31 GMT

ETag: "3201213952"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8106 (Cdn Cache Server V2.0), 1.1 sm27:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....c..U...wUP.\....$.....2..$..ap....................v..a....=.N..>
;...}.}..QQNA.........W...Dx.D.xDD.D$$Dd....((....h..p...p....h).IhH..
)Y(i......(X9X.8h....#.ABBBEF.AE.a .'f.......2.'.............. ...H...
.....O......,................0........IR....9.. .YJ3.w....[..e..(.tyE.
 .N...........&.....c.'.....G.....G./.C.a..%.@[email protected]<
....|.g}4...r......2../#......Z..d....}...J.K|......>.[y.l.d.@.%<
;.H....).V.Vu.x}...;O.".@5[H..dV$>.#0.......i...`....w.A....t{.Nf..
..0s"I.3...... T...5...9R.N....[..F..S.;.6(.:.. ....- .!._.....q..Mo.9
..U..[...oH....t4.s..{.j.Z........7.>.J........R...1L.l.w0.~...E.y.
....}..f8F.N%..W(0...D.:..J..p.=V;[email protected]..]9.jxd$}/.2....
.j.....&.....&t]..N.ZNY...yV'.....kA.cV.9.h.:a.'m..D..d...R......p;.;.
...m}.i"K....{..@.:.g.!..mW.>.g5~#.....d.M....E.Qth#c.(....7......C
[.V.....S.9M..O..F..t.Y......;....^A..#.....lM..x.1......yzx[z )ni."..
.B..)UE...%.R...%.#..|...N.....Np..`.[.Y{4A....e..N.l.yH.6...H'.......
..^.cR..K..M..U.g#@..\...#.C..G...g~..b.....S.[P.....s.m.K.....o.e....
[email protected]!.nm..(Q..]i..;zF.3.:.t......v7....9.........^.C..
47k.k.Az.1..L.r...*..sQ.Psz...,q.....^lY.5.O7...|.;.T.0.e*=.%.g.M.....
.;:...f....D..C.4.._..d..z.k%.1.M..{..........%Li...Fg...UP.V.n}.....f
...T....s.&.....[.....v..K......f...q`.'J'BMU;.jn..'.......Pk..N..d.:O
.....D.......fD....bI.x-4..:.u..0.].[a.,n..T..|.-. ]@..._.7i.%.q.....1
F...y..................{.a..u...t-.D#. ..j.ny.l$..4.T5..#-p=.CF.....ED
......e...T...j.r6..F...].N....X...j$e.r..y.7...)...n..y/&..}....y<<< skipped >>>

GET /live/2015/07/31/13/1003v1438320109052895370.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 31 Aug 2016 07:28:11 GMT

Date: Sun, 06 Sep 2015 07:28:11 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7548

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 31 Jul 2015 05:21:49 GMT

ETag: "2055052014"

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 huzhou87:8111 (Cdn Cache Server V2.0), 1.1 sm25:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...VUT...^\J...E...%[email protected])...X.....AZ..~.s......s
.a.9.|.s.......LSMC............9....................c.*.R"2.*ZZ.*jjz.'
,..`FjjV~V0'../.........n....`......P..Pr.S.s..... ..4...X..G.X@r..~.#
....g......]<[email protected]..`....R.)Q..Y...P....u..=. .....
'[email protected]..>.....A.x._..u.......F!.....G..R~X...#.U.....
S......./:......`.q........`....u...i<...|o@.*.......P........L....
.L7.u..j.L.v.<._..w.....J.:$,.....c....Z.^M..*B..1.!J]..n.&.....[.m
...t......x..rw.7.k...N...T^F..y....&-...YQ...A{....7*..}...Vj...j...B
....j,......vVu..r...Z_..u..K?.|_oN....k6......#..k..(6. ....Fy.9.|.@=
^../.q.0.R..|.1tP*;Q.i.N..D{.d\&...........U.4...$...|.iz.....N......#
.V..........(..6s.g..a.l...2...Y....s......5..g....e..._.!.}..OYN....L
..2.Uw.>Ec.'.^..5M....v.hB..6vov.1.93...)..<.n...&....!5{.n^...W
&..No[-zo...FH:......u<...MY.U5.qc~!........)Q.*>5..z.d.)...j!..
%.l..K......:[email protected]'........_.g.w..?.....{..,.2......#bu.....
..S.Q...a?.. ..&.........|..ERA..(...TAo..8l....\.9I..5.........~.R.B.
............=..S......?......RQ2.r8<.."Q...k....y.~.....Lm.....zf.X
.....B. ..K..J..,.s#].:.S.avtJ.z.........Em.H..^........<.......^.h
.........t.................l... .....2..>V....F.V....&.Y.P.\....]..
.:....M....$...5.1...b...L..X.......qQ)p.sY/...=...L......Z......H....
..wID...E...h.?........U-.j.B.,.3..V*G..-...kb:b..=..6..n.......jr.I|%
.{y.`'..>:Z..#[email protected]]R[.[..;\.....p.......M(...f.9.....{y..9w0..).$
.]...[|..y:..j.q..Oy.W......4...x.......|...R.z)...kEC>.No[.p.Q<<< skipped >>>

GET /t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR&cna=FNlyDjvVEGICAcLyYNovtkCK HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: cms.tanx.com


HTTP/1.1 302 Found

Server: Tengine

Date: Sun, 06 Sep 2015 07:28:21 GMT

Content-Type: image/gif

Content-Length: 49

Connection: close

P3P: CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV"

Set-Cookie: cna=FNlyDjvVEGICAcLyYNovtkCK; expires=Wed, 03-Sep-25 07:28:21 GMT; path=/; domain=tanx.com

Location: hXXp://adx.agrantsem.com/CookieMapping/TanxCM?tanx_ver=1&atscu=AG_275634_HFVR&tanx_tid=ArYplpb_HF0=
GIF89a...................!.......,...........T..;..

GET /mmbiz/MXngSX3icHBCficD74531aZ17r0DKrb84QOBMwCLunABfX61XDRXgicb2tDbYofdkx2oOWy6pvf5sjSMzSTOUJZew/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1 HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mmbiz.qpic.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:46 GMT

Server: PWS/8.1.20.22

X-Px: ht h0-s1119.v0-mow.cdngp.net

Cache-Control: max-age=2592000

Expires: Fri, 11 Sep 2015 04:42:35 GMT

Age: 2169911

Content-Length: 32749

Content-Type: image/jpeg

Last-Modified: Wed, 15 Jul 2015 16:37:53 GMT

Connection: keep-alive
......JFIF..............Exif.....C...........................#.%$"."!&
 7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;......s...."...............
.........................M........................!..1A."Q.2aq..BR...#
...$3brCS...4Dcs...%6T..5t...................................$........
..............!.12A.."QB3#............?...QI.ZhC.K.fk.A..u6..}u35.....
.f.4.f..L..BE.&....w....."..A....M.<[email protected].(%..
...=..w$.~5W.....51q..;...#=}k.......H..)f..j..r......a.I.2?0=.9......
.. .gz...#bz....@1U..)J...[......X.Y.E#0a.].z.Eq.aI.d..].\.sH8.HM!4.h.
.....1....sHU|..R.8,..V%`74.<...*..t./1!.N.6.HPv.....1.4.b....J..Y.
..b....Se.s.i...r...J0..(..UW...1Z........ .....j....../4.y..|..R]sN..
.R......F.cs..o...,.{.........K.*....dQHf_J.v.E..`\F........Q.....A.&l
t;........:..oZcM....h....u0......._AQ.v..Q!..d...1s....j]7..2n/..3.f.
.~?...@.`0.@;P..*....i........$X...UQ.Oj...h.6A...].>.........l..b\
..z....~.t..J.'..>.m...8.,.w%]....y.....h4..-*./.R....3.....2..}...
4V(-...\...U.?B..D).Y..O_...}Mi.....U.....b..w?.......5..........I....
.....aU..#.$u....&...cd....I..[.#......-..<o.[. .:[]kT ._\I....H..q
[email protected].!o....k...e...r......z{....z.[.~.4\.5...?..7.&...
.._..<h.J{.........9..k.......?......l.?.%...Z....?.IK..7..>..R.
l...%...Zw......w.....YOc.?.I...:1..f.ZA.O..-...O......U.\..$O.F...K..
........r..GOC...C...F1.$U...K..;.......'......t..F.*..)I..........."9
?.....m...}.|.o.^Y.......q"....8....R.....1#.e.8%.....=1).7\.p.|;.<<< skipped >>>

GET /MTFlashStore.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: irs01.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:17:02 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 1866

Last-Modified: Tue, 19 May 2015 10:47:12 GMT

Connection: close

Vary: Accept-Encoding

ETag: "555b14b0-74a"

Content-Encoding: gzip

Expires: Mon, 21 Sep 2015 07:17:02 GMT

Cache-Control: max-age=1296000
......[U..MTFlashStore.swf.."...CWS.....x.}V[l...>?/:...|..'N......
h..f.q.......(....DS..m..H............u.2.....6...n.6.q{. .h.8..c.}...
!._.b.D......;..Dq...#..>B..M..#[email protected]#..r...a:#..R.....lvyy9.|
>c........<..........* ..s25..L.G....[f.. sV...J5Q...h.n..dY...T
..:... .*.#.eW.wL...]U.\ve..X....D.4Cq*...DV...A.&...I....|.9.W.e.),..
'tl.2.V.Q.j.f[..J5i.. ._. j.9Cw*........S.EY.j....f<..yC1...<...
....{...............Xh4.L....{ch*....Ingg.f....._!..M....... t....r#..
X.R....."D.H..*.D1.a..#a.....k..|t.M........e5t.Z........k......*..9V.
O5..-V....s.Du.....C..K.i.........SI./...........ZI..P.....Y....!Y~>
;;W..W7..h....y0^...K....../q....Mb.?.4c..V.....x...........4..y.U.MD.
.;.....<........w?......~.....~s..w~.}.~_k.c......n.<!.m..L.*.!.
.....,....y..o.|...........:....D....B:B...).J....gL...?&.....K).{...p
Ma......z.......C..~W)..{...lp../[T.EO.[.....\......?.'m.}....o.......
........y.|r...w?...|........2g..B..3t...\....(Op!......Ql6l..........
..-)..[w....S3W...:.m.w..x.......'..........&.HX....VV!.)8..0.'....Y..
....{.}H...e..4.D.....,.....w ...i{.1-......._.......$.CB".h....!...z.
{:z:{.z.=.......\K.p0..#.........c.0...1...........6..#............8..
.>.<.....4.3..bHc8.A.0....A..1\..0..P..^..1..8T....^....{.s...M.
};......!...3.=...7@,....!..(":M......B.p..{..h..0......g%....rc...4..
.....G'8!.m{e6..2AkU .a.#h....Z. .n.....Ai)...(.... .DiUL...p $....7(.
.J.t.......NI....T9..kB].....h..lzc..n.w ..Vk.....K ....O.NzlB.Z..x;..
t1.A...g..x.-g}._....{*<....8..2p}6...'..&Q.~....P.X.B!B;.~... <<< skipped >>>

GET /live/2015/08/23/14/1010v1440312136660066846_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 18 Aug 2016 01:22:21 GMT

Date: Mon, 24 Aug 2015 01:22:21 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8640

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 23 Aug 2015 06:42:16 GMT

ETag: "4233711857"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou83:8080 (Cdn Cache Server V2.0), 1.1 fuz112:8 (Cdn Cache Server V2.0)

Connection: keep-alive
....Hk.U...Vg4.@.]vc.....F'z'Dt..ktbY.D'X...5z/...................9.9s
...s..9.......HY^I.....P.7....Y..........,0.........................9=
.5..99.'..3..;........9 ...I0.`0.6.)..) .9..........N.=....I..$.x.....
..?..S...r....PQ".&.....baa.........?y.E. C..0w.N.....uC.^iNmZ.....M.w
....b._....'..g.......10...xIH.e@...%..?...1.%.R....@.....*....YL.!7:.
x..j....$.....B..X]Y.bEk.............1_.....=.l.&.bI&.y..t......=$R!..
....I._.cX"9.X..>2...2i.ts.... .'....5......l.....K....|..ga$~ytVY.
..*(.l:.^...yob.U5.......g...y{31.. .L....aW.a.....Kg!.L.nh^v...{.%/.t
H.>.O.ZPh.f..l..b .t...2V.;(...~"h...9.~~.R.....6......>.......j
f..j.....eA..wU....eW...N.ha../."s.f......v.. ~.8...d.h.).D..........&
gt;_.....%.7.q..[[email protected].).Y_..]9dfj..L.4....!:
...}.$........H..W......9.S....p....R..s...*}r/....._...K.QN....P.....
.X0TN..A.d..5.(..M.*%...7..g..._%.....\.S.W.}?d...Eoc.!.v...{R....1.z.
....M.\...o".b..S2....z..(....Ao...y..C.q..b.I}.......F......F#.......
.Z9..L0.P....O...........C..6..{<.'O....98...g......cJd.P......-|q.
$Y..,S7...~.D..E...};[email protected].. ...u..7.....mL....i...
VJn..^,...')H.....N..xI....d..%~lki.....Y`..6.9.}#y....s..!._2v.=..T.I
..#R.(.INh.%D.... G.k..wh ..H.x...rcD.[.\.8.T......'.B..Y._)....r...;.
.8.;d..h8z#.. .......&.vX.k.............{.SI...`....r\K.->6......C5
.i%-.1.6..y*z$.t.| s....M.$..1...$c...Ì..........%....j.<.z...".2
.X..s.u.....96bOb./.....V..{........[.r.~K#Z.:[email protected];|.....E
|.... bG..u..{.d....E...o..w},.;..{[email protected]..#5. ..8;...o6.O....(;6.u<<< skipped >>>

GET /live/2015/08/25/14/1010v1440485378285229059_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 19 Aug 2016 07:18:49 GMT

Date: Tue, 25 Aug 2015 07:18:49 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8032

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 25 Aug 2015 06:49:38 GMT

ETag: "2457560948"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:8108 (Cdn Cache Server V2.0), 1.1 fuzhou181:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...weP.......'8...........<....:[email protected].:..[.
...........{....w.....2........q..................K............9%%.srr
j0.=5.3-99.7.3 ..'..=.?.;?.;[email protected]................. ..t..@@b..1.D.|.
.... :....5...........V&..Ah.h..8.. ..0...B'. a..T."e...y.............
.M&.h.I.*l...q.M.<w..C.......'.'.....1._.....B. F...RA&.G......1.. 
...!x.F?................5.>.9..\x.rvHg..b.C..`f.c.V.Z...]...... .#.
....*x.*N.'?[.5...d={o......o.PK....`^y.6...'|[email protected].
....37m"Q....!..J.;4lp.....e..j..[8..>j..x..w..3...o..2...<6....
.HO].Mhw9..{...c.T....o4.uL..5...:......y...&.U#R....F.h..q.....F...v.
..g...../D..1.<.. H`*...'.|..z.mO>{.x.'[email protected]*W.....K..
.....5..... ..QB.\.V...D..)F..M.x}....W.7.5.!....U..-.yh..o>?.%...M
.W...58.=.{.|.<(w.& 9......R#....:F..o .v..O..T.{.......'..\..o..Y 
.....3H.ZJ.ehh...HN..;.)..i.!.z...M....<'(.h,.%..4.b.. ...u...E..D;
5.......eY...py..K%$.4....D...n}.D..d.z.u00.A.#.....,3.I.%..|........[
.q.=.T..7F...*....<].....g/.P.P{?.............0.{N$qq@@=.%._..BH|.W
z..]R.0.........~*.^..CS4n.-....*...e........C.(.....c5E......N....5:.
..Y.5.V.....v........."W#....}G..Y4...1..v....x.R..x8x..1...V.:Bc..*m.
.R.v35..W.....=.=5..R-...q......-?^LId>.c.N{m........!}.A...3..'y.o
.....ss<....J.&....z..>.........5j..._......u.........&.e...[ 6.
.....!o.......;.h...i...\....m/..}...k.u...]8. ./...r8s.a..M.q..\..[i.
...F....(..]~..s...zK .T.6...$.]...fp..$....T...3U...........1}...o...
..%z....e..g..".y..%e.<:........(a,7.q..a....4......1H...rO.'..<<< skipped >>>

GET /live/2014/07/02/10/1003v1404267074821837648.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 11:34:22 GMT

Date: Thu, 09 Oct 2014 11:34:22 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5211

Cache-Control: max-age=31104000

ETag: "2136823571"

Last-Modified: Wed, 02 Jul 2014 02:11:14 GMT

Accept-Ranges: bytes

X-HITS: 3

Age: 1

X-Via: 1.1 fuz112:6 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....XExif..MM.*...................i.........&......
...........................................C..........................
...........%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((
((((((((((((((((((((((((((((((((((((((..........."....................
....................8.........................!..1A."Qaq...2...#BR....
$3r..........................................................!1..A"Q..
2q.3Ba.................?....a...>...l...c.R^JR<..%}.....*.1.....
G"H6#..........?..y`MO.......u..n:..m.l......L!.d...-._~.0.....1i r.4.
.....!.5m..kUIW..$5..S..U......k....6>lY"....g2../.G.!F..6...;mn.. 
..E1.];........4.."G.3..Q.G}.rp.......`E.a`m...,...f....$..*.Q....bt..
~.,H.-...1K......Of..u..4......._..!...w5J.*..E...~`n,~1.9.Y.....8..SW
...?.. ..M....I....F`.cm7.'.Am.........e...2..fOK8]1...Z.....&\.:..2&.
./l\ .....,/$na..w.1[W.y.Ow..X..b.'.#...6;.P1_..c..Y..l.w._..C.F..n..O
..a.~....*.8c.....z..r.e..GLJ..d..&...pH......K.L..n..../...ZQ!I!a.6.z
.b..q,N.$....=.DkM.kbd.M.E......d....0..?..X..T[.u...vX9.%.[9>...:.
e...\......Uq$.z..|..I.g5.Ey.M.gC{....<...R.Q.....{.G.>'X.....8.
I....M..[...blw.........A% .P*5(..>...n.7.p...|w...x.....p...d...N.
e...*28..).}1,..1...... ...$r.q..<3..W.#.{.....-..x....I...[!k....U
")c1.......{../.,yl.j&..P.._Ou........vaP.uuK.rbUe..S.....]S...u.T9. .
..:[email protected]......%[email protected]..']xPz.).
.k..U..&"u.h..F(..{<.Q.Hm...3..Ue.....&.........].<.**.D...a.m..
..ce.......q.2...U.$@/.r.......bQP..8...mb(...k[.|....Q..8l...O...<<< skipped >>>

GET /live/2015/08/04/02/1003v1438627049996466424.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 29 Jul 2016 04:44:24 GMT

Date: Tue, 04 Aug 2015 04:44:24 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8063

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 03 Aug 2015 18:37:29 GMT

ETag: "2698512729"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou89:8106 (Cdn Cache Server V2.0), 1.1 fuz111:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...veT.^..........].!..t.t. ....R..H....t... .tHK7.....{...s..
=...<g...yD>.....T..hhh......P...................g.X..qqq.......
...........$&!!.}AFNJLNDLB.......:.6..61.......{..X..@.....$D...=..h..
.......>I.|.........h@. :::.....3.'...A...)..%......V8.;..?R&...)=[
.U2f......'...4`..~......'..........A.......D/..t....1.....1..>..pA
[email protected]_....Y..RF?.d.A...Dw.....0..O........!6y.U.3....\.__.
.D..T_..\....k<...f.wK.rj...A. .........>..u?.[...p..to.B~4.^.ZA
"..{.l.V.i..."...H/.>...!..#(...TlE....6B....IC.T.0......o.....A...
...q}};.......w.. ..=*{..o..y...#.q.~F.Z.E.N .i...2...xi.".E.v...G.n.I
4.1..4.W....8..,......s...Hhr....;.n........q...%t..4.......u0..)...6.
.-8.(..}.....lL\.Id%E(.. .....y.a(...R..!.A........O....#...?s..U."4m@
.u...R.....:....O..5....p`.......N.Q."g..y.]1.............:..D...:....
..7M,.....C;.V/re.e...?...........bI...].. ...U.sU.C...}".i.....#...nI
.,.T..zY....."76".....}4..T...(.z.=.|..Qi.986.....<....g.a.M/...".#
.?9[bQ=\1M;.y._.\Ii..B.}.N..q. ... hw.3u..>.el:..%.h......f.v.....[
...E0..b........mXl..p..#%..........F_.|;....G..........'....h.....S; 
1`Z.R]9...'...m......l.Q.)..h..U.,....K...Q..8m9...C.Bh..[.u..a..{.'Z.
.{.....vP.bN..=n........G. .?...(.t....;.w.S,....SJ..4..i{"..])..Y~ M.
.R...P.: .x.l....h.}.6..L..,....^k.."t..L.g.0K.\.#].-.%..[..).....I9..
.:..QV.>"...N...M.i........^....)...M.fm..^8u.X..q......rb....."...
.9L....l..._u........!..d$.....e.^....>..:...I,..J....."........M..
.f.!. .....m1...p.3-m.D...w.Q.e..D...{.m....r.."....v.!!..D).N...^<<< skipped >>>

GET /live/2015/08/22/13/1003v1440221938622582571.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 16 Aug 2016 05:52:51 GMT

Date: Sat, 22 Aug 2015 05:52:51 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6184

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 22 Aug 2015 05:38:58 GMT

ETag: "2045301650"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:8110 (Cdn Cache Server V2.0), 1.1 fuz114:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...WUP....eq..tq'...........;.........;...].5AB........z...zz.
f^V^~.......@ .p.../..i.*2.*.2**.*..*:&.&&..&. \l<."RR."bbrJFjr.z01
1.;.=.3 . .5.7..7#. ..L.hhh.......,...,.o.|....Z.-  >..............
_....../..:......AH. ......G.....Q.hyP%5...,=..y?..Ii}lD..`...K{.\j[..
4].s ..7.....=..6.?...."..h.xx%...4-Q^......|.>@.`E...m...."p....G.
...PMD.j.j...`[email protected]@g..`.@...}.am..A./A.,A2.G..!l....t..(@j. .P0
...K.".....-B.F~...(...G..........7B..0..h~.....(".1>.I..Q.....t..\
.X(..A.....8@D8....^G....]R.. ..q......4/O.y..bkR........wj...;~..Pww.
..x.C.....c..x:...>.51....I<..t.a.../.]..m:..?..`D.{..dj.Aq.A>
;i.......o.q....%....JP..>.}r......w...n....!..:o.\...H.PN....&...x
........G8:.....2.U...O..J...._..@../.S...q..9Sw.........K-|.|.L2.5...
B...e.a.........._.a.8.f.f\..6.J.mI...Y&|/....Be1A.y.....I.=.^.IL;. Xk
. .Pt......U.Ad..c..........)..$..4N. ....":..zU....'....[M." ...i....
x.A..Bgu|.....e......C.g.\.....ei....p.kJ..L.lx...w?.....XT......_.Y..
.......<...?;\.?_./.#]...b..y.]...R...rAZHr.P...y.hP.)&.k....'`.~J.
[email protected]\#\.t"U.lvN....~..K...Y.l....
...7...~{.....)[email protected]....>........&...*..Q_._n{.P...~...z..*...Gv@...
..kH.d.n7.2s.../.z^RP._U..}G?...tH..!..!O?0.*.#.a...;.8..I..@... ....-
}LO.Z...6.ff.T.....V$..m=....)..].. ..e...gQi.vcEu....q}i..-5{.|CK...T
.3!.....S.. ......M._7..`....Zk......$......^.SF.r...._......7.M...v,.
3.4..S.z..'.&Y.Z.z[.P..=...I6.g.C.K#|.g......}.).).>....~D.j..h..~?
...V.&...`..6[.<[email protected]......"<<< skipped >>>

GET /live/2015/06/08/23/1010v1433776513658558468_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 08 Jul 2016 07:29:47 GMT

Date: Tue, 14 Jul 2015 07:29:47 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10677

Cache-Control: public, max-age=31104000

ETag: "4185514503"

Last-Modified: Mon, 08 Jun 2015 15:15:13 GMT

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou88:8111 (Cdn Cache Server V2.0), 1.1 fuz111:10 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.............C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((....................................................
.9........................!.1AQ.."a.2q..#R..B...3b..$Ccr..............
..................*......................!.1.A."2Qa.Bq................
[email protected]....*....e....;:..doHcL..i.....t.3.AG..... ...8aH..x
....^Yn. 3.W..vai..&.[......lyP#.o.M.WC........)........jT"$P.,.p...I.
t....X....R.......:..o..E...f. [email protected]..:.p......
[email protected]~Sg.T{[email protected].^....x]n?..\.x.9.......U.
)........2.8...f...@...!O.I .R. .)..r;P!..9...L..RE.nM...hGJ@[email protected]...
[email protected].=.8....W.c.!..4{....O.A....54s.. .'z..8f.s.c.>
;......e.(..9..n.....YD..T..9W.....I.cu ..ge......mN...^..T....(......
Bg.H....o..7.j.....u.$..1.L..Qd.&X.SY.Y....J6]...V...C.W.BT..5Yx......
...TQ..w&.<)do..t.....Q.\bg..6.....c.......;.5(R8[.4....m..b...[..A
...#. "...F....E..../.....I1.g4.../.<......O*.dR..\P40........8.!.u
...F...N%o....2qv..T........%....L..~...*..<|z...z.... ..;..-..%..G
V..S.E...4_..o/..)[email protected]<..5............I.eF)..
K........ ..cb4j.p(...i...Tf.&4..y..,...Rj...{0k.- ..I5.%....|.kb...\.
#.....e.6...thY.%^...lix.fd..0.Y.ySBd....Fp;R.#H...h....c<X.4..Jo@.
.............M..d.5%..c4....!.". H..i....;.]%@......N...x.D:6.....n...
.a..;....z..g.......im..H$..j..&h....~.3..I...q$.p.w8.Q)..9z/.\q..qX..
o(*......\.v..G..}.Md..B.zjIg..cM.*. .d.md.,^l..D.H;...q......fnu.<<< skipped >>>

GET /large/808700fdgw1eoo2zy2mvuj20m809vgnf.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww2.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1006.v0-kuf ( h0-s1031.v0-kuf), ht h0-s1031.v0-kuf.cdngp.net

Cache-Control: max-age=7776000

Expires: Sat, 10 Oct 2015 12:05:57 GMT

Age: 4821737

Accept-Ranges: bytes

Content-Length: 77312

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=46.232.206.201,c=194.242.96.218

Connection: keep-alive
......JFIF.....`.`......Exif..MM.*.............................b......
.....j.(...........1.........r.2...........i.................x..'....x
..'.Adobe Photoshop CS3 Windows.2014:12:28 20:37:23...................
......... ...........c...........................................&.(..
.......................................H.......H..........JFIF.....H.H
......Adobe_CM......Adobe.d...........................................
......................................................................
................................G...."................?...............
...........................................................3......!.1.
AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE..t6..U.e.....u..F'.....
..........Vfv........7GWgw........................5.....!1..AQaq"..2..
...B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te......u..F...............
Vfv........'7GWgw.................?.0...C..c..'q...T./....X... .Q..O.'
.-....9..H{`za..u...L..9.$....N.<.Q...r.-...[].4.H.....;g..3.....q.
.W7..vv$...e.~.6............3j.k`....>......./>*ID.GcK%`...=.d..
...e.4>....~k.y.3.............r.~.QsMG...l`..3z......Q..E..k....E..
..q.........%..Do!@)4...;..........*....b..[lu..*..6.W.&..._I......u3.
.O.k.......-..O..,u.....\........s..Y.?...\...Z..v}.4.~i...\..ym....^.
.....~........}B.u..y;[.T.......[o....w.....GB............x..y.Ys^...V
.......?..=..........}..!.......k...i..C...Y#......'d'......f.....d...
..c..{.{.jm...K..W....F.\..n......[Mkb|..S...#.eU..GRom~Vn...c..}c-...
g8..[.j....l.......}X.?X.u...u..................{.F....V.....?..9w<<< skipped >>>

GET /large/808700fdgw1ertro5j9b9j200j00h3y9.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww2.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Server: PWS/8.1.20.22

X-Px: ht-d h0-s1006.v0-kuf.cdngp.net

Cache-Control: max-age=7776000

Expires: Mon, 26 Oct 2015 12:31:16 GMT

Age: 3437819

Content-Length: 1170

Content-Type: image/png

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=46.232.206.201,c=194.242.96.218

Connection: keep-alive
.PNG........IHDR.............?.......tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:B720F358E00011E4894EDF1EDB
7E2127" xmpMM:DocumentID="xmp.did:B720F359E00011E4894EDF1EDB7E2127">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B720F356E00011E4894E
DF1EDB7E2127" stRef:documentID="xmp.did:B720F357E00011E4894EDF1EDB7E21
27"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.?......IDATx.bd....J6.R.@,...P..@|..7...}...
..! ........q#[email protected]...`B.\O.A P.t.|.......(..0..3P........
..1............r..6'..!...`E ...E .$7.]...'....RL."....h.q........f...
..fm..V.......B&h....u .......>.a.(.8..../[email protected].@.
.X2y....V~....%...`.D<Mn........IEND.B`.....
<<< skipped >>>

GET /large/808700fdgw1ertrnwfx5tj201x01sweb.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww2.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1006.v0-kuf ( h0-s1014.v0-kuf), ht-d h0-s1014.v0-kuf.cdngp.net

Cache-Control: max-age=7776000

Expires: Mon, 05 Oct 2015 21:19:08 GMT

Age: 5220547

Content-Length: 4005

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=46.232.206.201,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:1C8FCF34E00311E49E8086F1838AE94D" xmpMM:DocumentI
D="xmp.did:1C8FCF35E00311E49E8086F1838AE94D"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:1C8FCF32E00311E49E8086F1838AE94D" stRef:doc
umentID="xmp.did:1C8FCF33E00311E49E8086F1838AE94D"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
........................................!.1..AQa"..q.2#....B$..br3S%..
.....................!1A.Q"...a2.#qB..............?...g....m....n..$ D
P.R..TB.p ..iW....I(S"e...>B.... :.......S........H....%0.....bO.|)
.......A.JM.4m....O_........&_...J..K...8.C.(.....{.....).yQ.%I5......
S.u...Qb.....X.H\"....)..D.)j.'.H..ifvUtD.:..#.W.6N...|s.JK.[....e.kq.
Ch$.R.m\I.W........h......8?....!.,.....R>vL..s..rM...........2<<< skipped >>>

GET /site/images/wns/20150806_flighthp_background_1600x336_Ebb_6027.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 99195

Accept-Ranges: bytes

Last-Modified: Thu, 06 Aug 2015 10:45:08 GMT

Server: QWS/1.0

Expires: Sun, 11 Oct 2015 00:46:01 GMT

Date: Sun, 06 Sep 2015 07:28:19 GMT

Connection: keep-alive
......Exif..II*.................Ducky.......?.....qhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:11AA0B1F092068118
22AD542E173557E" xmpMM:DocumentID="xmp.did:AC0FE175335B11E5B894D16E7C6
1D3B7" xmpMM:InstanceID="xmp.iid:AC0FE174335B11E5B894D16E7C61D3B7" xmp
:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:643A2DE917206811822ADBDE97C1CB27" stRef:d
ocumentID="xmp.did:11AA0B1F09206811822AD542E173557E"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................P.@...............................................
.........................................!..1AQ"..aq.2.B....#...Rb.r3.
...C$...S...c4T%.......................!1A..Q..a"q.2....B..Rb#..r3$..C
c%............?..5.......X..TU.Z..V/. 9h.t.`.ur.!..L.......j.D.. .DkD=
.%Q...mA,h`v^...h.........J...W zF...4..3.L...(...........o...@vP.....
......0./D.l.L&...e..(.J..h&.!...^[email protected].......`E...E..D..EN...&R.2<<< skipped >>>

GET /twell/cookie/allocateCookie.jsp HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:12 GMT

Content-Type: text/html;charset=utf-8

Content-Length: 4

Connection: keep-alive

P3P: CP="NON DSP COR CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa HISa TELa OTPa OUR UNRa IND UNI COM NAV INT DEM CNT PRE LOC"

Set-Cookie: _q=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: _v=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: _t=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: QN21=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: QN15=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: QN16=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Server: QWS/1.0
....HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:12 GMT..Content-Type
: text/html;charset=utf-8..Content-Length: 4..Connection: keep-alive..
P3P: CP="NON DSP COR CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa HISa
 TELa OTPa OUR UNRa IND UNI COM NAV INT DEM CNT PRE LOC"..Set-Cookie: 
_q=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=
/..Set-Cookie: _v=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:0
0:10 GMT; Path=/..Set-Cookie: _t=""; Domain=.qunar.com; Expires=Thu, 0
1-Jan-1970 00:00:10 GMT; Path=/..Set-Cookie: QN21=""; Domain=.qunar.co
m; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/..Set-Cookie: QN15="";
 Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/..Set
-Cookie: QN16=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10
 GMT; Path=/..Server: QWS/1.0..........
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=flight_float_layer HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=topAD HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=ad_home_leftAD_float HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=ad_home_leftAD_middle HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=ad_home_leftAD_bottom HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=rightTopBanner HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=ad_home_rightAD_top2 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=topicLinkR HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.<<< skipped >>>

GET /AP5Min.aspx?AID=10850&Auth=5404AC7914545AD44F21F4654D944BD924889D9D3D844E0AF61A48712ABFDD38&referer=http://VVV.cfmogu.com/8.htm&utz=1441524456430 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935; expires=Sun, 06-Sep-2015 10:27:38 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:38 GMT

Content-Length: 236
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://mp.we
ixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&s
n=4a58c129caab1c167e96d61e9414924b#rd">here</a>.</h2>..
</body></html>..HTTP/1.1 302 Found..Cache-Control: no-cach
e..Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expires: 
-1..Location: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210
567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd..Server: Microsoft
-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=1935;
 expires=Sun, 06-Sep-2015 10:27:38 GMT; path=/..X-Powered-By: ASP.NET.
.Date: Sun, 06 Sep 2015 07:27:38 GMT..Content-Length: 236..<html>
;<head><title>Object moved</title></head><b
ody>..<h2>Object moved to <a href="hXXp://mp.weixin.qq.com
/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129c
aab1c167e96d61e9414924b#rd">here</a>.</h2>..</body&g
t;</html>....

GET /1/sound.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://kwcdn.000dn.com/swfs/87/25090zshh0203/index.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.bj73.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Server: nginx/1.4.2

Date: Sun, 06 Sep 2015 07:28:04 GMT

Content-Type: text/html

Content-Length: 570

Connection: keep-alive
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
2</center>..</body>..</html>..<!-- a padding to d
isable MSIE and Chrome friendly error page -->..<!-- a padding t
o disable MSIE and Chrome friendly error page -->..<!-- a paddin
g to disable MSIE and Chrome friendly error page -->..<!-- a pad
ding to disable MSIE and Chrome friendly error page -->..<!-- a 
padding to disable MSIE and Chrome friendly error page -->..<!--
 a padding to disable MSIE and Chrome friendly error page -->..HTTP
/1.1 404 Not Found..Server: nginx/1.4.2..Date: Sun, 06 Sep 2015 07:28:
04 GMT..Content-Type: text/html..Content-Length: 570..Connection: keep
-alive..<html>..<head><title>404 Not Found</title
></head>..<body bgcolor="white">..<center><h1&
gt;404 Not Found</h1></center>..<hr><center>ng
inx/1.4.2</center>..</body>..</html>..<!-- a padd
ing to disable MSIE and Chrome friendly error page -->..<!-- a p
adding to disable MSIE and Chrome friendly error page -->..<!-- 
a padding to disable MSIE and Chrome friendly error page -->..<!
-- a padding to disable MSIE and Chrome friendly error page -->..&l
t;!-- a padding to disable MSIE and Chrome friendly error page -->.
.<!-- a padding to disable MSIE and Chrome friendly error page <<< skipped >>>

GET /twell/cookie/allocateCookie.jsp HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:02 GMT

Content-Type: text/html;charset=utf-8

Content-Length: 4

Connection: keep-alive

P3P: CP="NON DSP COR CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa HISa TELa OTPa OUR UNRa IND UNI COM NAV INT DEM CNT PRE LOC"

Set-Cookie: QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; Domain=.qunar.com; Expires=Fri, 24-Sep-2083 10:42:09 GMT; Path=/

Set-Cookie: _q=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: _v=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: _t=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: QN21=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: QN15=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Set-Cookie: QN16=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/

Server: QWS/1.0
....HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:02 GMT..Content-Type
: text/html;charset=utf-8..Content-Length: 4..Connection: keep-alive..
P3P: CP="NON DSP COR CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa HISa
 TELa OTPa OUR UNRa IND UNI COM NAV INT DEM CNT PRE LOC"..Set-Cookie: 
QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; Dom
ain=.qunar.com; Expires=Fri, 24-Sep-2083 10:42:09 GMT; Path=/..Set-Coo
kie: _q=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; 
Path=/..Set-Cookie: _v=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970
 00:00:10 GMT; Path=/..Set-Cookie: _t=""; Domain=.qunar.com; Expires=T
hu, 01-Jan-1970 00:00:10 GMT; Path=/..Set-Cookie: QN21=""; Domain=.qun
ar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/..Set-Cookie: QN1
5=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
..Set-Cookie: QN16=""; Domain=.qunar.com; Expires=Thu, 01-Jan-1970 00:
00:10 GMT; Path=/..Server: QWS/1.0..........
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=flight_float_layer HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:08 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /bb/3f/adba7f9116.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 04 Jan 2016 11:42:52 GMT

Date: Fri, 09 Jan 2015 11:42:52 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 12822

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 11 Sep 2012 19:00:13 GMT

ETag: "239264406"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 zhenjiang169:8106 (Cdn Cache Server V2.0), 1.1 fuzhou181:10 (Cdn Cache Server V2.0)

Connection: keep-alive
....=.OP....UT........^.8..8.m.P.)N..(.\... .h[[email protected].._.a.
.g..a..g>wf.|.....u.................Y..WJ.@}.V'{.WO.'V_aA!Vn.o.w'VM
-uV-.W...."<....[7....r..BB..K.....{.?N..>0......a.0,.6.&9..9.c/
......e............>..?.............l.........O(.. .<...e.P...|.
cW.....<..}[email protected]\BRJZFE.......[.C#c.S3;{.G'g.W..>.~P
....?EFE...R......d~./(,*.)-..o@ ...[.{z........gf....Q..[.;.v.......=
...............\...0....q........r.'..q(..pm!O.D..(.S..v.....S...$....
.<....$......"./......aa..<,r.......M........;).Yb..X.aqh/7..[..
.....O.<f..."..|..x.Pe9D..h.H.V.._.m.hv..:.S..x...p..E)...S...E:.o.
:.O.(.B._e.....*o....7Nu.>8\../.X..f).u...m0.b.v..PR......8........
`.N...I..}..7Y'.C..z...~2..W..,...Ym.........^O.b..g.))1bHTb...;.....I
.{._V.......-z.l.S.............].s.......{......8....x)).M.....k1.....
.3.....m.....H.g.,@..[q.`.X...=.lH.9b.., f[.(wsHnV.?.sp..Q.....!.T....
#'70....R..3k.o.d.n>.....`.th.S.W3..b..H.`._...z....I.....JsW......
."......;`.....4OZ...c.v..U.N.....OkQ.._..@.<W1.L..Ss3.-y..O.$t....
:.t.........O.q...gU..I.w.............)...Mk...-...u^.9:.P.......H].A.
./.IC......Y....'....1.wz...N.6.j.........OB..{...M.^.qU&..~.pA#."U...
H{=.=_.}jc...'q....D$....,&2t.....=....?......H.....1|.l..{.7'.......o
.K......v7N]..........%<Q...*ks..PT...vr..h.;..7b%.w.......).....}.
rmV<.I,...}[email protected].?.}Z_.#e..% .P.5Hep.6b:W......J......?....
..J.....ju.\......&.k.....'e.....j .,.5L.b.\VJ.4.......#,.*...  ...|y.
.....v..DM...`....|.....aS...y..g.8dt.E..)eK.f.B.....7..M...F.#5^.<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:07 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:07 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errco
de=502&errcode=502&errcode=502..X-Via: 1.1 hzh93:8111 (Cdn Cache Serve
r V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)..Connection: keep-alive.
.<html>..<head><title>302 Found</title></he
ad>..<body bgcolor="white">..<center><h1>302 Foun
d</h1></center>..<hr><center>nginx</center&
gt;..</body>..</html>......


GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:08 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:08 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47
&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502..X-Via: 1
.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server 
V2.0)..Connection: keep-alive..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx</center>..</body>..</html>..t>....<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:09 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:09 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_
MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&err
code=502&errcode=502..X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1
.1 fuz109:2 (Cdn Cache Server V2.0)..Connection: keep-alive..<html&
gt;..<head><title>302 Found</title></head>..&l
t;body bgcolor="white">..<center><h1>302 Found</h1&g
t;</center>..<hr><center>nginx</center>..</
body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:10 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:10 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com
/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=5
02&errcode=502&errcode=502&errcode=502&errcode=502..X-Via: 1.1 hzh93:8
111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)..Con
nection: keep-alive..<html>..<head><title>302 Found&
lt;/title></head>..<body bgcolor="white">..<center&g
t;<h1>302 Found</h1></center>..<hr><center&
gt;nginx</center>..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:11 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:11 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errur
l=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6roo
ms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&err
code=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&e
rrcode=502..X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:
2 (Cdn Cache Server V2.0)..Connection: keep-alive..<html>..<h
ead><title>302 Found</title></head>..<body bgc
olor="white">..<center><h1>302 Found</h1></cen
ter>..<hr><center>nginx</center>..</body>..
</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:12 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......


GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:13 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:13 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errur
l=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html
?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/er
r.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.
com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&err
code=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&e
rrcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502
..X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cac
he Server V2.0)..Connection: keep-alive..<html>..<head><
;title>302 Found</title></head>..<body bgcolor="whit
e">..<center><h1>302 Found</h1></center>..&
lt;hr><center>nginx</center>..</body>..</h<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:15 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errur
l=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html
?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/er
r.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.
com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6
rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=5
02&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode
=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errco
de=502&errcode=502&errcode=502..X-Via: 1.1 hzh93:8111 (Cdn Cache Serve
r V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)..Connection: keep-alive.
.<html>..<head><title>302 Found</title></he
ad>..<body bgcolor="white">..<center><h1>302 <<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:16 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......


GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:17 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:19 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: 
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:21 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET 
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:23 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accep
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:24 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:27 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: mp.weixin.qq.com


HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Cache-Control: public, max-age=500

Connection: keep-alive

Content-Encoding: gzip

Content-Length: 12267
...........}is.U....U.?t...=....%v([.d..lk..K.z..Ro.n..U..I.KX2.@.`&@.
w 0lYH...)w,..4..=.tK..Z....^......<.y...9s..6....2VTy..........."C
..5....%.........L]...*.=.]...UB....8V(`.X.P..2!."?9..a.,.;...JD...L..
[email protected]..';...3g..IX"......"S......9..UhEb.zvww..y;U`gHV.....
.<G...>. p.^:.}..k.....w.8~F..a.f.!.=.I...E..Z4...J.<.0?o34J.
`...8.?..H...;i..IQn.C....'..2m..}.....,..:q........,].%...L...k..<
...........yC%%'[email protected]^.yl...N.3gN...~.Q.T...........YfdH...YV..
.F~..K.5...BG:.dGpmS..<6....0N......".d..P O..,?..y.L....D..5......
{.ax....!?..".[ ;pw..PEB.......v..a.i..uT.no..a........ ....K.?|s.....
_......o.?.N/....)Qj.l..F........"qD#....b.sH8g{...[.TD'.$F..Y3d Z....
?...I..~l.k`..b...8B....tt..K.Q...;..V...-(.*`.L..K..6...'t..1.KV.u...
g.6....l...f."/.....Ndy...L..@../WY.&..j(Yci.8O3U.bf..YV`U..f....y.,~.
'.,_..O*.#.[. ..m...UG..T"..V....a..EE... *../c2...hA..`u.*.0(.y...T..
.u..U....gw%....q(E....b,...G-.F.{}F{...U..].\#$;#.R.$/..P....b. ..(..
..*.u:)......R!$.cfx.d...C...3.!.f.6.e...J..e.$........T..H^.yB....A.b
RG................X^aV.EU..g!.... [email protected]......
.........HEBo1........N..C7 1@[email protected].{.......t....2..'.....]..b
.(...g.U.W..r..............s...k..g..(..3...4.?z.}..Dab.l.~....bdF....
z......p.bm.U"B....I2..D....e..F.E.m`d...(...T.@..<...B.(..0t.F..0r
#$.|*.nDX.9.Np.^..A...MO.9.)b.fE..AT.Z....{....{...}........%.......W.
..a.....l...!..q.U''...z..L..4...wg............;o-...;..td....."....f.
.,[email protected]......(9....:.....X...53H.#0....Tkh..'.<<< skipped >>>

GET / HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mp.weixin.qq.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Location: hXXps://mp.weixin.qq.com/cgi-bin/loginpage?t=wxm2-login&lang=zh_CN

Connection: keep-alive

Content-Length: 0

HTTP/1.1 302 Found..Location: hXXps://mp.weixin.qq.com/cgi-bin/loginpa
ge?t=wxm2-login&lang=zh_CN..Connection: keep-alive..Content-Length: 0.
.

GET /mw690/808700fdgw1eoo30ll39pg200o00odfl.gif HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1113.v0-mow), ht h0-s1113.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Wed, 04 Nov 2015 12:15:28 GMT

Age: 2661167

Content-Length: 1484

Content-Type: image/gif

Last-Modified: Thu, 28 May 2015 03:49:20 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive
GIF89a.........w..t..............5.....'..%.....#.....n..B..X..9......
..0...............................~..B..._..G..L..].....:..1..H..W..m.
.4.....&.....x..-..P..9..<..<..-..{.....B..*.................1..
.........\.._...........M..N.............. ..!.....M..H........=.....S
........P../.....R..Y.....S..%.p,.....&..`.o...g.....R.s ..2..g.......
._.....$..I..>..>..!.....&....w......E..3.....G.f...D....`......
...e..W...........o.. ..?....]......W..0.....7.......|............X...
.."........m..:...../..!....{2..>.....K..>../........&........7.
.3.............. .....C....m%..k..[..Q........B..9....c...G..E..K.....
...I.....)..-........4........1..*..0.....S.....a.....>..m..;......
........F..?..|..'..(..{........=..8..!..3..%..&.....;..X.............
.N.. .....=..8.. .....,..8.s....!..NETSCAPE2.0.....!.......,..........
.....H......*.....e.N...p..W.$}..O."V..-.5M...H...U...e\.v.."K.. .....
..v|....*D..}\.p."..-%^.... .E.>..pm..x.@|....._..D..!..'.........1
j....`1."F.X.D...=...!b............F........C..Z...-..f..2..?....X,B..
....\..D..J..).....(......A:.......3# .....FY......#.].  ........%.4.0
J..H.|.......(....&. ...xR.&`.P.-.....-!..>..b.(.$@.:.L .?..pE.D.`.
.k.4..N ..k...B..Hq. q$..1.......!...l L5..RF..\......A..T$P ...H ..C.
.d.If@.!.......,...............(PF:........6...i..O....>.....D.....
......h .0....F.}......'P.D..J.D.............'... .K..!..?....$s...&./
...m...*..C...........(..7.Q....A^....X.a.._..p"...*... .......Q....?|
P.E.,.....X.P.....,lDd.........(.....l.N...;....
<<< skipped >>>

GET /large/808700fdgw1eoo3020m1hj20dt0a7abq.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1150.v0-mow), ht h0-s1150.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Tue, 03 Nov 2015 05:25:21 GMT

Age: 2772174

Accept-Ranges: bytes

Content-Length: 72001

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive

....%.Exif..MM.*.............................b...........j.(..........
.1.........r.2...........i.................x..'....x..'.Adobe Photosho
p CS6 (Windows).2014:09:16 20:40:54...................................
...o...........................................&.(....................
............$S.......H.......H.........XICC_PROFILE......HLino....mntr
RGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP  ..
..............................................cprt...P...3desc.......l
wtpt........bkpt........rXYZ........gXYZ...,[email protected]..
.pdmdd........vued...L....view.......$lumi........meas.......$tech...0
....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c)
 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1..........
..sRGB IEC61966-2.1..................................................X
YZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b
.........XYZ ......$.........desc........IEC hXXp://VVV.iec.ch........
....IEC hXXp://VVV.iec.ch.............................................
.desc........IEC 61966-2.1 Default RGB colour space - sRGB............
IEC 61966-2.1 Default RGB colour space - sRGB......................des
c.......,Reference Viewing Condition in IEC61966-2.1...........,Refere
nce Viewing Condition in IEC61966-2.1..........................view...
......._...............\.....XYZ .....L.V.P...W..meas.................
...............sig ....CRT curv.......................#.(.-.2.7.;[email protected].
J.O.T.Y.^.c.h.m.r.w.|.............................................

<<< skipped >>>

GET /large/808700fdgw1ertrnzfsf9j201x01smwz.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1016.v0-mow), ht h0-s1016.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 25 Oct 2015 06:14:58 GMT

Age: 3546797

Content-Length: 3738

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:3FC64D52E00311E4ADD2F23E373A7AB6" xmpMM:DocumentI
D="xmp.did:3FC64D53E00311E4ADD2F23E373A7AB6"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:3FC64D50E00311E4ADD2F23E373A7AB6" stRef:doc
umentID="xmp.did:3FC64D51E00311E4ADD2F23E373A7AB6"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
......................................!.1..A"Qa..q2B..#3$..R..........
...........Aq.2.!...a....".3............?..P..W...s..9........C...F.Z(
..Y.....V.Q...3. ./..[...b...a...:...Z[...b..T....B\`...Tt..E..,.O<
.n....a>..*.........:....%.?.-o......<..Z.|k.....*.!V....e.3L].'
...>..._.[.|..Z.r...Yf.C2.U^t....G..`~.......C..e.wT6....Mu.u...H%.
.."....'..S.M.G...6.....|pS....]..WRV3.6R.S..]HE"..eA.p}:.......9.<<< skipped >>>

GET /large/808700fdgw1ertrnuprdhj201x01sglg.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1118.v0-mow), ht h0-s1118.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 25 Oct 2015 06:58:42 GMT

Age: 3544173

Content-Length: 4618

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:0D1D92BEE00311E495429AB54CA5BB8E" xmpMM:DocumentI
D="xmp.did:0D1D92BFE00311E495429AB54CA5BB8E"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:0D1D92BCE00311E495429AB54CA5BB8E" stRef:doc
umentID="xmp.did:0D1D92BDE00311E495429AB54CA5BB8E"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
.........................................!.1A"..Q.2..a.b#%q.Br..3.....
....................!1..AQa.."..$....#............?.C.N[...L..O...].{.
.Fn)S....g..vw'qAPP$..<.T.. .P..H ..F.k..)G$......\....N%q...BDVcT6
.XRT...... ...mUE.B.U.. #%...-.V....0...p..n6;s..t.ambS.b...c.-..)PU.I
.......q`.6c.z0F8..1...l...Qq(H..G.O..uF'ME#g*0......K{j...1..6F......
h8.0D...33.y..yS.......*.........}.C.K.)....6....=J....`.G.{L.....<<< skipped >>>

GET /large/808700fdgw1ertrnstw19j201x01sq2r.jpg HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ww4.sinaimg.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1029.v0-mow ( h0-s1038.v0-mow), ht h0-s1038.v0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Thu, 22 Oct 2015 09:26:43 GMT

Age: 3794492

Content-Length: 3868

Content-Type: image/jpeg

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=37.29.0.40,c=194.242.96.218

Connection: keep-alive
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:D8BC4C46E00211E4ACB1C529D92E829A" xmpMM:DocumentI
D="xmp.did:D8BC4C47E00211E4ACB1C529D92E829A"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:D8BC4C44E00211E4ACB1C529D92E829A" stRef:doc
umentID="xmp.did:D8BC4C45E00211E4ACB1C529D92E829A"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
[email protected].................................................
............................................!1.A.Q"#.aq2..R....Bb3$...
.....................!1..A.Q".aq..2..............?.K..?..:v.....]p.6..
..*[email protected].[....?.X...l\2=.|..f6K]..s.!.M..).....h.!.7."..:....).
5............m/..Y.i..R.z...L4.....L;...y?.Lh.....jE..}..$...N....._.U
lt..3e['A.....x..P..,..yb.-n.".......&....[&..c.U3.C.5AU}..........Q.u
...^K..B...*.~.....(..P..../&.P....3Z.......Q..eDt..#..S.Q%N....x.<<< skipped >>>

GET /common/hf/tags/quanjia.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:58 GMT

Content-Type: image/gif

Content-Length: 1832

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Mon, 05 Jan 2015 05:50:05 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2939

X-Cache: HIT from l-cdnimg1

Server: QWS/1.0
GIF89a/..............]..u......n.F......~.[..r...l.C.........!..NETSCA
PE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzN
Tczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XM
P Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RD
F xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:
Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/"
 xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xm
p="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8a
0f202-a013-1d49-a5f4-f38d9fa20dc4" xmpMM:DocumentID="xmp.did:0896310E9
49211E4B93AB32AFEB687DA" xmpMM:InstanceID="xmp.iid:0896310D949211E4B93
AB32AFEB687DA" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <
xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3e2f1116-2a40-b043-8502-7f
f2d655cb3d" stRef:documentID="xmp.did:f8a0f202-a013-1d49-a5f4-f38d9fa2
0dc4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...........................................
......................................................................
.................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJ
IHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ......................
...........!...,...,..../........I..8k#....].V..t2.X. ..4..8..n....%V.
...".'T...gQw...V..7L...`.t.N..g7G.N..1..v..`.....E.XjN$.i2.P.!..... .
.......................!.......,..../........D ......J....."r...l.....
..........e.&H>... 8i..D..yTNW....R...1.`]..X...^[.o.M.6....K..<<< skipped >>>

GET /common/hf/tags/all.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: image/png

Content-Length: 1075

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Thu, 04 Dec 2014 08:10:05 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2940

X-Cache: HIT from l-cdnimg3

Server: QWS/1.0
.PNG........IHDR.../.........z..C....tEXtSoftware.Adobe ImageReadyq.e&
lt;...!iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC (Windows)" xmpMM:InstanceID="xmp.iid:F35B0BAA7A1D11E4B1B19AAD9
8B32820" xmpMM:DocumentID="xmp.did:F35B0BAB7A1D11E4B1B19AAD98B32820"&g
t; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F35B0BA87A1D11E4B1B
19AAD98B32820" stRef:documentID="xmp.did:F35B0BA97A1D11E4B1B19AAD98B32
820"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
 <?xpacket end="r"?>...T....PLTEn.F...l.C...-.w.....tRNS....@*..
....IDATx.....@!.E...?.%.b.eS.!)..G..y.....M.C....(#^.-.!....<|/{k.
.#:/.....G~_...._3...v.G}.0....a.m.4.S.\...G{...<g".4..\..........E
..tK......IEND.B`.....


GET /common/hf/tags/card_v1.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: image/gif

Content-Length: 1872

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Thu, 11 Jun 2015 11:05:07 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2940

X-Cache: HIT from l-cdnimg2

Server: QWS/1.0
GIF89a/.........}.X..q..dy.S..nn.F..v..............}...l.C...!..NETSCA
PE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzN
Tczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XM
P Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> <rdf:RD
F xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:
Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/"
 xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xm
p="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f8a
0f202-a013-1d49-a5f4-f38d9fa20dc4" xmpMM:DocumentID="xmp.did:17C7AD820
FEB11E59AE1D5396751408F" xmpMM:InstanceID="xmp.iid:17C7AD810FEB11E59AE
1D5396751408F" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <
xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5e46ad6f-4fa5-2d4f-a5a5-cf
8a577e6699" stRef:documentID="adobe:docid:photoshop:ee50733f-0fea-11e5
-ad55-993868c5515d"/> </rdf:Description> </rdf:RDF> <
;/x:xmpmeta> <?xpacket end="r"?>.............................
......................................................................
...............................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYX
WVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ........
.........................!...,...,..../........I..8k#....Y.VR....y....
...v.....9.L........Z.o..n..,.L[.....>.S..k..iO.......\.R..4.w.c.RD
r..WJ-HM?]g|.J!..............................!.......,..../........9..
7%..)...CqHL..G...X.K.)Z....s..H.#...B-......O...> .0V$.L.D..,;<<< skipped >>>

GET /common/hf/tags/jr_v1.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: image/gif

Content-Length: 1327

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Tue, 16 Jun 2015 08:46:41 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2940

X-Cache: HIT from l-cdnimg3

Server: QWS/1.0
GIF89a/......n.F...l.C...!..XMP DataXMP<?xpacket begin="..." id="W5
M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:
xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "
> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns
#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.c
om/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/Resourc
eRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocument
ID="xmp.did:f8a0f202-a013-1d49-a5f4-f38d9fa20dc4" xmpMM:DocumentID="xm
p.did:18A50DF5100D11E59F87DD131D986D90" xmpMM:InstanceID="xmp.iid:18A5
0DF4100D11E59F87DD131D986D90" xmp:CreatorTool="Adobe Photoshop CC 2014
 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e693c7
39-9811-8c4d-984a-1cc845d99c19" stRef:documentID="adobe:docid:photosho
p:ee50733f-0fea-11e5-ad55-993868c5515d"/> </rdf:Description> 
</rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.........
......................................................................
...................................................~}|{zyxwvutsrqponml
kjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-,
 *)('&%$#"! .................................!.......,..../...........
`[email protected]>Ad.|..qV.!%G........].r...K.EV*.L.C.V......4...t...:.l)....
/(..f.^%....qh ...9Cq..5.rRAX. f...0.......IYiy.....i).iY..;...
.
<<< skipped >>>

GET /common/hf/header_v16.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: image/png

Content-Length: 10331

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Thu, 25 Sep 2014 09:20:04 GMT

Expires: Mon, 12 Oct 2015 06:38:59 GMT

Age: 2941

X-Cache: HIT from l-cdnimg2

Server: QWS/1.0
[email protected].$....tEXtSoftware.Adobe ImageReadyq.e&
lt;...iiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:4D1F871243D011E49C8BA164830D605A" xmpMM:DocumentID="xmp.did:8071
982C449411E49C9E930A5B71C35D" xmpMM:InstanceID="xmp.iid:8071982B449411
E49C9E930A5B71C35D" xmp:CreatorTool="Adobe Photoshop CC (Windows)">
 <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:246680cd-7c92-e243-bd
fc-760a839cfaed" stRef:documentID="xmp.did:4D1F871243D011E49C8BA164830
D605A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&g
t; <?xpacket end="r"?>.......CPLTE..............................
.................................:::......#.....................f.....
..............j.....}}}...............................................
......................YSQ......NML.................................,..
.........nnn...`__...X.................D....|..............B..........
...........kkkS.......Tsss......|........).....F.......'.........OOO..
....&....................).....vomFFF......p.....___F........d........
........................7.....SSSb..aaaB........xxx......}..!v....<<< skipped >>>

GET /common/hf/header_v13.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: image/png

Content-Length: 10088

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Thu, 24 Jul 2014 09:00:06 GMT

Expires: Mon, 12 Oct 2015 07:15:43 GMT

Age: 737

X-Cache: HIT from l-cdnimg5

Server: QWS/1.0
[email protected].$....tEXtSoftware.Adobe ImageReadyq.e&
lt;...iiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:B83E68C37811E41186F1EC286CDA0DA5" xmpMM:DocumentID="xmp.did:EB16
F1AB130711E4B390EB69915482E8" xmpMM:InstanceID="xmp.iid:EB16F1AA130711
E4B390EB69915482E8" xmp:CreatorTool="Adobe Photoshop CC (Windows)">
 <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b05504f1-1272-1f4b-9f
19-621a09d7ed8e" stRef:documentID="xmp.did:E9ACD3B7FE12E41195F7A4D9478
64D2E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&g
t; <?xpacket end="r"?>U.x.....PLTE..............................
....................................:::...#.....................f.....
..............j.....}}}...............................................
......................YSQ...NML.......................................
,........nnn...`__......X...........D....|.................B..........
..............S..kkk.....Tsss......|.....).....F.......'..............
.......)..p..FFF...vom.........___...F........d.......................
.........7.....SSSb..xxx....  ...!v..**.))...........tRNS.........<<< skipped >>>

GET /common/hf/footer_v10.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Content-Type: image/png

Content-Length: 8209

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Tue, 15 Apr 2014 06:55:05 GMT

Expires: Mon, 12 Oct 2015 07:15:43 GMT

Age: 738

X-Cache: HIT from l-cdnimg2

Server: QWS/1.0
.PNG........IHDR..............9Ms....gAMA......a.....sRGB.........PLTE
........6......................................D........<..........
...j.yyy-....!....v...........z. ....!...............'.....333.g."....
........s..w..p...........|.YYY.....&....."......jjj..................
......GGG..d.............MP..e..m.....$.pp.....!..4....<9.hl.N.....
...............pr.......v....t......EB....dd..%i......9..[..21.......y
y...T..........M....MM.(..............[[.....h.....c....RR....*&.....\
....k...............'.."..{[email protected]......*.5........J.
....8.}.....;$...=....u.pq..X....|..N*A...s...d..S....VZ._a.....X....^
=.................~.......?.....AG...d.l..[..i........E.R. {......?N.W
.7:.....y..=....f.x....p.............'..y|.]..(.........'..^.g6..5....
[email protected]"7?o..)GOz.w .....c.....OY`......o.....|..O....w]...kq.x^
;y[*/g.V....tRNS.".l.......l.!i...l!........IDATh....\SW......w....w.s
....4.....&F%7...L..1....d..."...K...!*..R.# .R.DPAAk..Z..Q..i;m.3m...
......@....../..{..9@~..{.s.....3V60..../..7)......?.0...:L.?.=.......
[email protected].'H..}M...._.|../^z.|..?C^:..y........ .......`...E.{
..E...H...(.I...............^@.!..6Q...&.j..=.....]~k......w.ON.....%.
.....=O...\.5d.j...!......xL... a."..)..w..fwm.w.W.......%...._.$.XSs.
.........l.x....q....o.........F..8.g9.^....}....,k.}.V............?..
.....7.[..|....;..~~!~D..._..-..q#..p.y.{..."...5k.'.Z.b....$..6...#00
...V([email protected]@.........#.j&9.y.v..H.[.....#...3r."(...3
.8..............r.?~$A.f.(h.Oi..r.....D.....s.B.u/.....]..........<<< skipped >>>

GET /common/hf/arc.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Content-Type: image/png

Content-Length: 153

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Tue, 15 Apr 2014 08:15:04 GMT

Expires: Mon, 12 Oct 2015 07:15:43 GMT

Age: 738

X-Cache: HIT from l-cdnimg6

Server: QWS/1.0

.PNG........IHDR.....................gAMA......a.....sRGB.........PLTE
.....^.....: [email protected]...!IDAT..c`d``u`..`..a..............'.. ...
.....IEND.B`.....

GET /common/hf/24h.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Content-Type: image/png

Content-Length: 244

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Tue, 15 Apr 2014 07:10:04 GMT

Expires: Mon, 12 Oct 2015 07:15:43 GMT

Age: 738

X-Cache: HIT from l-cdnimg2

Server: QWS/1.0

.PNG........IHDR................R....gAMA......a.....sRGB........-PLTE
....f..i.......`..x..J...........*........*r..m.O...eIDAT..c``9.......
T.[.&000./`a.....T...I.P..... #. .2..e.D........(.....(.D.90p....Az...
......8%.........b........IEND.B`.HTTP/1.1 200 OK..Date: Sun, 06 Sep 2
015 07:28:01 GMT..Content-Type: image/png..Content-Length: 244..Connec
tion: keep-alive..Accept-Ranges: bytes..Last-Modified: Tue, 15 Apr 201
4 07:10:04 GMT..Expires: Mon, 12 Oct 2015 07:15:43 GMT..Age: 738..X-Ca
che: HIT from l-cdnimg2..Server: QWS/1.0...PNG........IHDR............
....R....gAMA......a.....sRGB........-PLTE....f..i.......`..x..J......
.....*........*r..m.O...eIDAT..c``9.......T.[.&000./`a.....T...I.P....
. #. .2..e.D........(.....(.D.90p....Az.........8%.........b........IE
ND.B`...

GET /imges/live2012/mmListIco_v3.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr2.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:58 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 29 Nov 2012 10:13:45 GMT

ETag: "3723133325"

Content-Type: image/gif

Expires: Wed, 31 Aug 2016 07:28:00 GMT

Content-Length: 314

Server: tux/3.3

X-Via: 1.1 hzh86:8104 (Cdn Cache Server V2.0), 1.1 quanzhou242:2 (Cdn Cache Server V2.0)

Connection: keep-alive
....Y5.P..s.t..L.. .pD.a..U.f..>}.._.....p..../n.....G.O.noo.......
O.8..............w..}.....?.,Yr.......`......020H2..8 ;.XW*...d..X...l
_.......z.k....[..#V."E !.j........7....N..@.|..../$ c.....&..p..g.G..
?;Y..V.......,.......7.r.......<.g.7....`.".....{.....C|.....[&o...
.c......l9.7...:Q{.V.l.y[.Ke.....?.9,...HTTP/1.1 200 OK..Date: Sun, 06
 Sep 2015 07:27:58 GMT..Cache-Control: public, max-age=31104000..Conte
nt-Encoding: gzip..Last-Modified: Thu, 29 Nov 2012 10:13:45 GMT..ETag:
 "3723133325"..Content-Type: image/gif..Expires: Wed, 31 Aug 2016 07:2
8:00 GMT..Content-Length: 314..Server: tux/3.3..X-Via: 1.1 hzh86:8104 
(Cdn Cache Server V2.0), 1.1 quanzhou242:2 (Cdn Cache Server V2.0)..Co
nnection: keep-alive......Y5.P..s.t..L.. .pD.a..U.f..>}.._.....p...
./n.....G.O.noo.......O.8..............w..}.....?.,Yr.......`......020
H2..8 ;.XW*...d..X...l_.......z.k....[..#V."E !.j........7....N..@.|..
../$ c.....&..p..g.G..?;Y..V.......,.......7.r.......<.g.7....`."..
...{.....C|.....[&o....c......l9.7...:Q{.V.l.y[.Ke.....?.9,....
...


GET /imges/live2012/idx_sideico_v10.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr2.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 28 Aug 2016 02:22:24 GMT

Date: Thu, 03 Sep 2015 02:22:24 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 19 Feb 2013 07:54:41 GMT

ETag: "3160538865"

Content-Type: image/png

Content-Length: 9448

Server: tux/3.3

Age: 1

X-Via: 1.1 hnly27:88 (Cdn Cache Server V2.0), 1.1 hzh92:8109 (Cdn Cache Server V2.0), 1.1 quanzhou245:0 (Cdn Cache Server V2.0)

Connection: keep-alive
...../#Q...wUS...,.....!8,n.!..;...H .......;..u....S._.~..........WV.
FG!B...B...P./.BAA. ..Wi.X*.K.n..nj..n.&..P........&V...&......PP.P...
...........a................................. ....\.U.^II.......U..U.I
mm.....*ejj*==.....J.C'|B%.@ .T:....$A`R!...t...........N......C.b...?
 `.p..T<...L....A........O.N0n&.G-.&..*.......A `.F0t.............`
f.....=>>[email protected].*......v........./?ab.......Pi.;.%tt..
...C0T:...]S.....O~.x....&.......?...qq>...Ts|||@......../.8...[.k.
..V....7...L..>.....7xu}........?.....M~..........-....2p.....i.w.`
.<DD......98f...... o. Y..b......w......G...l..l|...!..CA.mC;,,....
..]....#.......zt...........P.......|~..:...z?.......z.d.....<...|.
.-...Y....x...B..9.?....7..;.o..Z<^nI.t].Ag...\=<.A.....%.;.%. .
..vJ.....dt.tk............:.(z...3....:.M...{Z^X..o..>:..::III..S..
..,*~....<;..:_.y....I.....#.Xv..........\.~.2.@e......@t.......?`R
...`.$.l2....`ZV....@..*.A......"-..........e6...j.M(.2..8........1.e.
aa...o(..gE..n*......n.'.d...ab..............u..3....i|k.g4.de<d.=.
.7.0.....t..K././.......f.M..%..xa.'....S..\...b.?.........)..p..-n.*.
..!,d.eC..l. s;.0R.YK/.D[.....S>..'L..N.;.."........*....Em.7.w....
...[r..../.C..z..,5Nq8..d..e=..^....V...........,...[H..K=$....>...
..\ 0.........Y....7.v.d..>v.'..^.<B........w......i..]..m...is.
.......f"?.../.3.`....|L..P.M..o87U...2. ?l.......i0e.3...t...As.[....
t.......ig..?N..;8......5C@]..T.........%.'.<.(..q_F....A...9...'.x
..7...........l...P!Yc..0.,..!T.U....r......r...`........u9.......<<< skipped >>>

GET /pa?p=1:1712482633:17 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: tws

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_old_171.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate

0..

GET /fxstatic/images/sprite/css/room/room2014_z_854673e.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:05 GMT

Content-Type: image/png

Content-Length: 137989

Keep-Alive: timeout=20

Last-Modified: Thu, 20 Aug 2015 03:36:24 GMT

Expires: Sat, 19 Sep 2015 06:02:26 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR.............C..... .IDATx...w|.........v.mY..7.....j 
...!...!..!..rINBnrsOrBN...B..N8!!!!@ .B......2.E.lYe..3s....mUkW.I...
5/iv..y4k..G....N.k.""""#X.0.X.........Z?.............1.1A.)h1A.)h1.i.
.... .....4|s.ZL.s..........';.'......9...;@.....#""""CA.0......./a.`.
...`..e$""""CB.0..............l..lDDDDdH..&"""#.w._aF|..^.~p..........
.DDDD.$.........W./.........DDDd$....X.C...u........U.....,2Zh......w.
...s.....A.FDDD.....s...NC..J."""2\9....;.f....L..........1.1A.)h1A.)h
1.i..... ........B...cS.o..6&_..RL.s.k.........G..........0.l......]L.
s.ZL.s.Z.r..9.-&.9.-F9.1.H.gjk..Z..X.s..I.c.$...pm. .....2!.h.k..h..7.
a..Z......;..P.LDDD......Sz.y.S.....DDD$.....Sv..K..\...x.E......-.u..
&.*....ZJ.3....uX!.B.....^;...p.l.Y.6...C.wV.....R.0....N..<I...o.g
.......~]....p.....U.....<5..._.e.....B.?..{.y..)....F.~I..=.cW7`W7
..a.E6.4.LDDD..)./..=.........DDDd...H?8..{....o.).j.........]8.6c.eqJ
.x.6..UA&D..EX.q..$.....r(k.Lx.......uI.i.......e.jz.~....._"""2.Zb..3
..O.`o..qJ.X.I...uU..R..R...J2.,.t...~4..M....W1*h......U5p.pq/q?.....
xF""}.....}.kf.=w.Pg#.Ts.............]5........m..?...g8<..6.>..
.....6...0...y.X......Zdz....Sva.$.l.J.f......w.gm.7g...P.T.!.x.V4M..9
.~....A.'Sd...L8.{Y`*....H.].....OPq....A.HD./l..........m....}.l.7..:
3.FvTTp.UW.....4E..l.3.X&.7T.:(Vi...s.p.7....%DN..U....D.$...........{
...5U$.w3n.v.},.gs.fX.a.Y.RT.....*jo..,^Ch.z.ge.......H...p&UC@.`..)""
"AR...u.=..V.G.....L..'./.i.w......!t.....H/VN.....|{.k..{...o.6.Y....
.....R........f@,3.S{[.c.=B...q...V...\....J..y......{.<..v....<<< skipped >>>

GET /fxroombg/20130115111108651409.jpg HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: image/jpeg

Content-Length: 70369

Keep-Alive: timeout=20

Last-Modified: Tue, 15 Jan 2013 03:11:08 GMT

Expires: Sun, 20 Sep 2015 20:03:50 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
......Exif..II*.................Ducky.......<.....mhXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-
c060 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:02BF5E27A33EE2
11B17FAE4F3D068149" xmpMM:DocumentID="xmp.did:631EE36E5CB311E29466A232
C65B3D76" xmpMM:InstanceID="xmp.iid:631EE36D5CB311E29466A232C65B3D76" 
xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFro
m stRef:instanceID="xmp.iid:8DFE38213B5AE211B316BDD00A404D1A" stRef:do
cumentID="xmp.did:02BF5E27A33EE211B17FAE4F3D068149"/> </rdf:Desc
ription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&
gt;....Adobe.d........................................................
......................................................................
.....................@................................................
.......................................!1.A..Qaq"........2...B.R#3..b.
....$........................!1A.."aq2Q.r.....#..................?...2
=.`...............,.m.]..(.Q.Z...q.t.D.5.b...(..."..5.f..eY.3YVj..T.P.
[email protected]....~).....#.....PA......z.......................k1*.$..
B2...Pi.j(.4.ad./..81..X.u...."...cH.Q...hj4.E.X.4..(...A..L .EJ.5<<< skipped >>>

GET /AP5Min.aspx?AID=10850&Auth=5404AC7914545AD44F21F4654D944BD924889D9D3D844E0AF61A48712ABFDD38&referer=http://VVV.cfmogu.com/8.htm&utz=1441524457837 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1984


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://g.bj73.com/1/2016.html?uid=614516

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1984|2337; expires=Sun, 06-Sep-2015 10:27:37 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:37 GMT

Content-Length: 157
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://g.bj7
3.com/1/2016.html?uid=614516">here</a>.</h2>..</body
></html>..HTTP/1.1 302 Found..Cache-Control: no-cache..Pragma
: no-cache..Content-Type: text/html; charset=utf-8..Expires: -1..Locat
ion: hXXp://g.bj73.com/1/2016.html?uid=614516..Server: Microsoft-IIS/7
.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=1984|2337; 
expires=Sun, 06-Sep-2015 10:27:37 GMT; path=/..X-Powered-By: ASP.NET..
Date: Sun, 06 Sep 2015 07:27:37 GMT..Content-Length: 157..<html>
<head><title>Object moved</title></head><bo
dy>..<h2>Object moved to <a href="hXXp://g.bj73.com/1/2016
.html?uid=614516">here</a>.</h2>..</body></htm
l>......


GET /AP5Min.aspx?AID=10850&Auth=5404AC7914545AD44F21F4654D944BD924889D9D3D844E0AF61A48712ABFDD38&referer=http://VVV.cfmogu.com/8.htm&utz=1441524461274 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294; expires=Sun, 06-Sep-2015 10:27:41 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:40 GMT

Content-Length: 236
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://mp.we
ixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&s
n=4a58c129caab1c167e96d61e9414924b#rd">here</a>.</h2>..
</body></html>..HTTP/1.1 302 Found..Cache-Control: no-cach
e..Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expires: 
-1..Location: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210
567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd..Server: Microsoft
-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=1935|
2294; expires=Sun, 06-Sep-2015 10:27:41 GMT; path=/..X-Powered-By: ASP
.NET..Date: Sun, 06 Sep 2015 07:27:40 GMT..Content-Length: 236..<ht
ml><head><title>Object moved</title></head>
<body>..<h2>Object moved to <a href="hXXp://mp.weixin.q
q.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58
c129caab1c167e96d61e9414924b#rd">here</a>.</h2>..</b
ody></html>....

GET /usercenter/login/quick_login2.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg4.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 6542

Accept-Ranges: bytes

Last-Modified: Wed, 04 Sep 2013 10:30:03 GMT

Server: QWS/1.0

Expires: Sun, 11 Oct 2015 20:38:01 GMT

Date: Sun, 06 Sep 2015 07:28:18 GMT

Connection: keep-alive
.PNG........IHDR.....................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /pa?p=1:2473590371:17 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: tws

Date: Sun, 06 Sep 2015 07:27:59 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_old_171.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate

0..

GET /core.php?web_id=1255214667&t=z HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 764

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:20:41 GMT

Last-Modified: Sun, 06 Sep 2015 07:20:41 GMT

Expires: Sun, 06 Sep 2015 07:35:41 GMT

Via: cache20.l2de1[363,200-0,M], cache22.l2de1[364,0], cache7.de1[0,200-0,H], cache8.de1[0,0]

Age: 455

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Sun, 06 Sep 2015 07:20:41 GMT

X-Swift-CacheTime: 900
!function(){var p,q,r,a=encodeURIComponent,b="1255214667",c="",d="",e=
"online_v3.php",f="z11.cnzz.com",g="1",h="text",i="z",j="站ž
71;统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",
m="1",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h
=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&
&k["callRequest"]([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k["c
reateScriptIcon"](n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/websi
te.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cn
zz.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "
'><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p=
"<a href='" q "' target=_blank title='" j "'>" j "</a>",k[
"createIcon"]([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type
: application/javascript..Content-Length: 764..Connection: keep-alive.
.Date: Sun, 06 Sep 2015 07:20:41 GMT..Last-Modified: Sun, 06 Sep 2015 
07:20:41 GMT..Expires: Sun, 06 Sep 2015 07:35:41 GMT..Via: cache20.l2d
e1[363,200-0,M], cache22.l2de1[364,0], cache7.de1[0,200-0,H], cache8.d
e1[0,0]..Age: 455..X-Cache: HIT TCP_MEM_HIT dirn:-2:-2..X-Swift-SaveTi
me: Sun, 06 Sep 2015 07:20:41 GMT..X-Swift-CacheTime: 900..!function()
{var p,q,r,a=encodeURIComponent,b="1255214667",c="",d="",e="online_v3.
php",f="z11.cnzz.com",g="1",h="text",i="z",j="站长统
计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m="1",n=l "
//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o<<< skipped >>>

GET /js/ga.min.js HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: bc.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Type: application/x-javascript

Content-Length: 2584

Connection: keep-alive

Last-Modified: Tue, 12 Jun 2012 13:55:42 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

Server: QWS/1.0
(function(){var e=function(){this.param={};};e.prototype.cookie=functi
on(i,j,g){if(arguments.length>1&&String(j)!=="[object Object]"){g=g
||{};if(j===null||j===undefined){g.expires=-1;}if(typeof g.expires==="
number"){var l=g.expires,h=g.expires=new Date();h.setDate(h.getDate() 
l);}j=String(j);return(document.cookie=[encodeURIComponent(i),"=",g.ra
w?j:encodeURIComponent(j),g.expires?"; expires=" g.expires.toUTCString
():"",g.path?"; path=" g.path:"; path=/",g.domain?"; domain=" g.domain
:"",g.secure?"; secure":""].join(""));}g=j||{};var f,k=g.raw?function(
m){return m;}:decodeURIComponent;return(f=new RegExp("(?:^|; )" encode
URIComponent(i) "=([^;]*)").exec(document.cookie))?k(f[1]):null;};e.pr
ototype.add=function(f,g){if(g!=null){this.param[f]=g;}};e.prototype.g
etHashString=function(f){var h=window.location.hash.toString();var g=n
ew RegExp("" f "=([^&?]*)","ig");return((h.match(g))?decodeURIComponen
t((h.match(g)[0].substr(f.length 1))):"");};e.prototype.getQueryString
=function(f){var h=window.location.search.toString();var g=new RegExp(
"" f "=([^&?]*)","ig");return((h.match(g))?decodeURIComponent((h.match
(g)[0].substr(f.length 1))):"");};e.prototype.send=function(){var f=th
is.get_location();var g=new Image();g.src="hXXp://bc.qunar.com/" f "?"
 this._collect_params();};e.prototype._collect_params=function(){var g
=[];var h=this.param;for(var f in h){g.push(f "=" encodeURIComponent(h
[f]));}return g.join("&");};e.prototype.getDomain=function(f){return(f
||"").replace(/^. \.(. ?\.. )$/,"$1");};e.prototype.get_location=f<<< skipped >>>

GET /f?utmwv=0.1&t=0.5984095723930103&utmsr=1276*818&utmr=-1&utmp=http://flight.qunar.com/?ex_track=auto_55360807&utmhn=flight.qunar.com&s=249 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: bc.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT

Expires: Sun, 06 Sep 2015 07:28:14 GMT

Cache-Control: no-cache

Server: QWS/1.0

GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Date: Sun,
 06 Sep 2015 07:28:15 GMT..Content-Type: image/gif..Content-Length: 43
..Connection: keep-alive..Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
..Expires: Sun, 06 Sep 2015 07:28:14 GMT..Cache-Control: no-cache..Ser
ver: QWS/1.0..GIF89a.............!.......,...........L..;....

GET /usertoolbar/prd/v1.0.0/css/[email protected] HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:16 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
1529.............].........{..s..L..#.....>..=.}Y...[..q......0..V.
T.lK....p..=...J...U.3;..J.uQd...].*.."...w...oiR.........z;....~.....
p.-L.D.o........I...z.~...$..Y.u........"I...K!. .....!.X.q...Y. .....
.....h.........!.?...5O..2../...l?}....b..5..o.fqq....E^.....?}Y....'.
.S..y.4.....5.........g..]K....*."a\dE...(..Q.$../.A....{....n...g..c.
...7:TEv..>....z.7...46....|)Rd..u..2...K<.....Zm.(..K)........[
..(..q E.....t/..........4Kv.gi.B.pu.................l9^.L.]0.D.......
..;/-..h.u~c....UN.r.&.FB.].bG...`//B.....@.......$...%a...s.....>.
B>...3..w.....g.un3.|.,.f.....N..T...c..M...z.I.5..de...r.....(x...
....f=..., ^.|<'.qp.`So.J.M,.%...d:a.X....:EI...W..y....C.....3[.z.
.Z.........,....%.1.Y#.....k..O. .:..m..2a8........a.G-u.J/....aY..6M.
N"J..<....uN.$..9c.e;P.:..,...5............b...1..Y .J....f.U'.....
...C?..iW......l....%l....b...`..5..o............S.1D..{..,..].......x
..dw.ZV...V....}..c.c.2..U..P.p..{5....9..l{f....AZ.Q.-...5......U.,.A
...`.T...l.([email protected].[....c...B"I..[Re.5.!..Y...D.Q]..o.....S.
.,6#";.$jV.,1..#.....x[EYy..e.P..Q.N}..#.Xm...1..y..,r;...1._A~.....b.
...Km.t.!.>.s....0.dbh......N.oRAi....J . L.....1o.....].2}W...I<
;o^V..R..C.1..%..4k......!..m...r....<...8=....64xL.qS.....iL..]...
S..5. ......%J.4......[..E_"..O.....?|.f.z...`.Z7C.. .S./..R.u...T.g4.
.cK.%....C.D.q.{....n.}....d.|..j....h/.3TT[`M~.,.*z....&..?.......1.d
.P/x3....]2x.Am..%.....8.5. ;q....d..W&.... tlE.'N.)....I..........s#.
c..!.....m.b...-.5w.C.;...}.....r..Q...#.x...0..'kt... ..<q..^y<<< skipped >>>

GET /anchor/anchorRandomURLZC?f=1003&cpuid=14516 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.cfmogu.com/8.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:27:48 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: JSESSIONID=CBD85CFB643225B963E20C2EAD494BE3; Path=/lexiu/; HttpOnly

Expires: Sun, 06 Sep 2015 07:28:48 GMT

Cache-Control: max-age=60

Content-Encoding: gzip
43c.............Z{s.......;.l.-....`$/.....h).I;.xV.w....bw%Yx4...4.Wh
;0....1}$M.$.........W....K/.i.f......y.{[email protected].....[.CBJ
....I...<zk..1.....d .c....S..~) .....$.Z-....]..NJ.*/..8X.\M8..k3.
.{bEC.bUd.[.R...(N._h.MY.#..-7...c..|$..^u.t..U.v. 7\=5- i(.oR....H...
F..#-..X..).j...3...pM|h.....'........{_uo..zu....................u...
....6^.Y....|zks..w..............&.A...o...)....U.......#...S..k......
.?<......,........5G.A{...v..w..K..~..w.C.......[./......{W..9.. ..
..w....ow?....g0...F...l.w.G..K._.....*/w.........{...Z*..7...xW..]..;
..Z......y...Q....7.k....... ...u9(^...Q..B*."..&.5....^k..|.H......J.
VS.......Y..W...* .VwPw....._h`..?..a......*! ..Nk..PB.L.../.O..k..33.
.{.)z=...M9..............M.m...b..q.U...c.......T34..' ."..IU..bX.o..r
|...K......01..m..h.....).(U.....R.I...............&..J..24.Z,....R...
.[[email protected][..u..."...6qI%&..o........KG.1..bf.....J.0........
N.......s.....3%..t.9u.Z...\..a.(..q[.RT&.V..)kk..|!.g..(..0M....ZC.G.
V..MK.....yE.M.."..l\..[B(..R..1....A......e3l..z.e.....4.^d.X.$...a_.
...h...r:..y==`rhqd0...db.-.=.....7...k.H.jZ...792....%....2.....M....
.BO.j........f8uSi..([email protected][...r..}..{..;..k.-&g
t;.P.......|vw...o...0....e.V....KQ........$sV.1..).(/T..|v&2.........
.....eMT.4.&QWx8cjFp...Z..V....4....;..~.}Q..T....A.g.....#..O.6..KO.r
...kR.`E.a.X1..p....ay.)......... ..(..LT......r........=.1F.Jv.E.G.1 
b.H...iY..VI..YM$.zQ..C..:1.s.KqD>..L..../.0.L..<.". ...|.....%.
..(.g.......:...>...z...#..|>_(...4..PPD.t..Qy.....m. P}~.Y#<<< skipped >>>

GET /anchor/anchorRandomURL?f=1005&cpuid=214516 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: VVV.yaoguo.com


HTTP/1.1 302 Found

Server: nginx

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: text/html

Content-Length: 0

Connection: keep-alive

Location: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Expires: Sun, 06 Sep 2015 07:28:19 GMT

Cache-Control: max-age=10
....


GET /800374?f=1005&cpuid=214516 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: VVV.yaoguo.com


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:09 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: JSESSIONID=DC265FE0D9F550CE47E011719B5366DA; Path=/lexiu/; HttpOnly

Expires: Sun, 06 Sep 2015 07:29:09 GMT

Cache-Control: max-age=60

Content-Encoding: gzip
43b.............}.w.G...p...=z..$. k...9$&..l&..xdN.OKj[mK.B..,.7.`...
....L...!` a1......%......KUwu.e N.|/...]u............h.....n..S....[.
C..q.....N%S..*.V....*L..Q~..OC...:....:...B..0!.C;...\.EiW(.....H.R..
..HY.......8.....#F.4........".\.J.BiP,..B,.....d.;..0........$.......
]...\N...P...1"......e...../JeU .......F.........F.q1 ..U^.3........BG
...W$S.....Z.3...g..9...ewF.h...|................]..dI.$5<..".e.7C;
....29......:...q.6.....;..\(.J.y...=.....-. ..aW,......z.S/......j..i
O.j./..../.......]y......S.....y.Y.^...jw.k...........Z.}......^..-_.N
-....f.wF0..d.*&.m$.......kKo..m.Mc..v.....|G.;......_......Z.5...!N.A
.C......UB..._}......<zl..m..yP.~..>w...:YX.?......f......B...?.
Z./...km.......9.....j.\.-..S.......3?.W^bA../^j...N......h....2e..O..
*...J^.........oB\.$.{.ED,.kT".cA."..P3d.:.>2.....#.h.Q.j^Pr...H..Q
...A....`.......x.x..,[email protected].,..............R..h,.3...".f.
.J...m%..My\.F.|.|...1..K2....J..wEc.....17?.>..a...2i).Y.?R.J.....
2...%E-.U>C.....%*.0.H(......H./ei..f.........i1q...Z.%.u....P.A...
..Y.eIr....|.m8.!.....@$\8..g.q.....j.H.x...4v............3739... ....
..EY...l.....}..n2...=...........91.........6..2..i......Af.:@...*.>
;P...J..T...3..............okKGk....G..3..a].....4..p..V5..t...1.l..fd
yL.....<.E..........U1..#b.@...?~._Z.....Z...._.a..r..p]_..o.NQ....
.....Z.._.) ...X...,..........rS...~....~..~f..a...G........}.V.I.\...
x.^,.............E....I.t&].3c.=_*.....*.........]...}}.tw4..r.U0.d. .
...;.....?D..M.F..S..D...k..r<....-..o.....B.as...}.!!. 4...!D.<<< skipped >>>

GET / HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:27 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Sun, 06 Sep 2015 07:28:20 GMT

Content-Encoding: gzip
f20.............}Yw.W..sX .......6.j..FY4I...iAr.....WI*[.r.Z*.|.t/3..
....`l..1.......t^....s..$=....j.5j.B..(.v.....o......O.......4..7....
.6.O.GQ.o.....-.E.R.....".W"{.!._....4.......F.".a.X.m..s. /J.ByE)n.D.
...3.....' .....~..{Ex..f./....p.........P.F..@.&.ebl4F.Q..W..K...W..}
.'."|h5.H... .2.b.....?....u.E.]..Q.(.QI(...A..u.....oac............y%
OLu.g.gx..n.H).C..j"O..F.Q.qTe.u{#xi!..|.....z....`.....8.-.C..AR.....
QY\.....V*..KeA.VQ..............!...4.....O....as6_...mLH.B...........
[email protected]#..q..k/N.
7.V...~6.N.......Bu..z..f\..g.n.....V&..P1DI<.J....>.. C...];...
y...<r.1wM...MjS...S........:~...N.j...S.0......f.....K'.GO.GOb,.&l
t;r.~l....<..?....N>..=.....=VW.P....7.d....V..s.D..&...~A..R%..
-$.$..|I.....8.....?.e)...-C..B.#...........pA(..A...-[.7....|..(.....
..\.xh.K31:.14.."....*..GX....jo.a/.EpE."..3.ksI....a...d"9..k`(...(..
J....5.....=e.......T./..w.......p..l...l.".@<..kE(.G.W..e={.......
W...UJ...a.....e,v....x..S...#..o.M.Ct2.6......~..P;?...!..t.....i.t..
S....,H9../..h%...M.....P]..^.......}w_.\[email protected]"....N...[. 
z..~_....!A..e.2.d.......v......9..1.M.S.Th3,p.h4.%q.aS.d....T..R,.W.F
c.x....(.dY..H.X.h.d./.|......\.......k"X..f...).s...-..2.XQ.2|..7...-
0C.S.K..~...NA...{.>o.u..b4.4..XP..X|0...B}../......4.....`....}Y..
'2|OQ..E...$.....D ..8.*..T.F./d....Q._,.!..h.hr..,.>.?..J...m.[...
B.[[email protected].>...........Cw...J.E..D)
.M)...$~.u..Q5....H.n...r...o.d.Xn^..sD}W.m....k2....>.r....!..<<< skipped >>>

GET /vataplan?framId=topicLinkR&f=s&cur_page_num=0&rep=1&tag=99&vataposition=QNR_Zjc=_CN&vatacon=&rows=1&qtype=js&vataframe=bannerDefault&callback=QNR._AD.topicLinkR&ab=b&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: a.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Type: application/x-javascript;charset=UTF-8

Content-Length: 937

Connection: keep-alive

Set-Cookie: sn=1441524494_1; path=/; expires=Sun, 06-Sep-2015 15:58:14 GMT; HttpOnly

Server: QWS/1.0

QNR._AD.topicLinkR({.  "response_stat": {.    "elapsed": "4351",.    "
url": "notshown",.    "stat": "success".  },.  "key_data": [.    {.   
   "description": "......300........................",.      "e": "FeF
n38QF3pFipYY9qba1AwjTefqtGhtVOUHIjKh1tn47jk5rISyeUmhscBPSbXmOeKW2YxRhI
CwSZMLrMfdeZn14YJcGdjuHQL3gdKUYamtbggovBG8FJ2A/ 2zXYUbJnUZixNLsDoDCu8d
ur Xjtr2U4O11vGLXcq eox1FNgbCT/asv/D8g3oWNJxRhF5CiGORjttnv9Ilr/DroZhgO
1xtdrvtAnslzsrGK5aWAyhiHpntZKMbsIbpfsF5twcYA0hY7yrjGyeO6Fc94ixwOafivGj
ek97y5bFQzuMj2ttk9uHkwJCSdlwRiy/RP GgqUw fZL3JzTa1lPUZLr7DxFfqwrP/NKjh
KMMchOrRNIV2 0qaBiZLSkxmoCzczQhb7OOaMwjwgoBsjLo8/vqqWAttwe1R7XXB62SKTi
3AEOu/ClE2n92K01o4AaMOi/rbmFy",.      "img": "hXXp://img1.qunarzz.com/
qs/1411/f1/f1f51d8b64555950213a9cdb.png",.      "show": "VVV.qunar.com
",.      "title": "......300.....................",.      "sale_price"
: "",.      "cus": "",.      "s": 3986256,.      "margin": false,.    
  "phone": "".    }.  ].}.)HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:
28:14 GMT..Content-Type: application/x-javascript;charset=UTF-8..Conte
nt-Length: 937..Connection: keep-alive..Set-Cookie: sn=1441524494_1; p
ath=/; expires=Sun, 06-Sep-2015 15:58:14 GMT; HttpOnly..Server: QWS/1.
0..QNR._AD.topicLinkR({.  "response_stat": {.    "elapsed": "4351",.  
  "url": "notshown",.    "stat": "success".  },.  "key_data": [.    {.
      "description": "......300........................",.      "e": "
FeFn38QF3pFipYY9qba1AwjTefqtGhtVOUHIjKh1tn47jk5rISyeUmhscBPSbXmOeKW2Yx
RhICwSZMLrMfdeZn14YJcGdjuHQL3gdKUYamtbggovBG8FJ2A/ 2zXYUbJnUZixNLs

<<< skipped >>>

GET /vataplan?framId=ifmRightFlightOwner&vataposition=QNR_ZTU=_CN&tag=99&rows=1&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightFlightOwner&ab=b&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: a.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: application/x-javascript;charset=UTF-8

Content-Length: 886

Connection: keep-alive

Set-Cookie: sn=1441524495_1; path=/; expires=Sun, 06-Sep-2015 15:58:15 GMT; HttpOnly

Server: QWS/1.0

QNR._AD.ifmRightFlightOwner({.  "response_stat": {.    "elapsed": "180
4",.    "url": "notshown",.    "stat": "success".  },.  "key_data": [.
    {.      "description": "......",.      "e": "xl HaNlLCc9SaOJdRMjjM
XSvtzUWhMgV3Z5pmwO5Mi2zPIjSX6HEm6qA4A32BL4DCDVabA7BmL5sfE cONg4Prl3l//
HjXPLMy5hYSK3jI4ZWqDWIt/Xqsl6FM3cQ7Ph0JWAZkXpDDeOUm2cDAG4aGRvgSh6bY7oM
x0QZkP535yo5fCWCZ/Fc8X09ez1kn1pyL0i6ojgOYnLG79hlVnlQFgnPp5jSIx5a2VPRz 
jygAHyROYR2g3xYxffnUTLJob/DNWbqLgBahplr45G07odT7ogarI0OJgBZ9nvd1QfnC6r
HnOISvrlV7DjPKXSJl8etcXap25Je7WDFp2bMpxK6UZeHfDjrVwi4c8a5MHKDMZrIYUYhY
ats3fB/ hviS0Oos4ooETPKD0AvuPphENpAgecocr52eY9INItxBqKIrKy6r0kXZdi2blg
MSSGdgeYXI=",.      "img": "hXXp://img1.qunarzz.com/qs/1508/33/0b08ff7
e458a5a.gif",.      "show": "quan.qunar.com",.      "title": "......",
.      "sale_price": "",.      "cus": "",.      "s": 8741490,.      "m
argin": false,.      "phone": "".    }.  ].}.)....

GET /vataplan?framId=ifmRightHotelInter&vataposition=QNR_ZmE=_CN&tag=99&rows=1&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightHotelInter&ab=b&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: a.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: application/x-javascript;charset=UTF-8

Content-Length: 900

Connection: keep-alive

Set-Cookie: sn=1441524495_1; path=/; expires=Sun, 06-Sep-2015 15:58:15 GMT; HttpOnly

Server: QWS/1.0

QNR._AD.ifmRightHotelInter({.  "response_stat": {.    "elapsed": "7574
",.    "url": "notshown",.    "stat": "success".  },.  "key_data": [. 
   {.      "description": "............",.      "e": "KR9E5QtE7HEb45dv
k3kYtZQT3j4UoN9Hx9bIN/yrAxiPK9xC7qfEYGoMZ 1nVvit/AYh1cpF6xDkWsIOJaCrQ1
Qq2t0khuk6cJIP1cnTjhJ5PiGjxv 66bRtXNvuxIZoQmFBTuOrreXo7NNuYtNsWfxJx0cM
1b4xVqY/IW04W5h2C6kU UC7U5qW9T4h1tVWNIo6nKIQfJBnRqIP2R4qWjukBFpzqNazUG
HvD/VSY8K3C0gmjXW2IZVqSDvQFugHqRFrsLSeXZUOsTnIGG4gmXuDhaw0nmJonxp ataA
zRGm/gjFOUflPQ60aAQIIv4IGiN9wZSU2JO0vs0 gleCWtQ3x/N99QVNlYBxcFu962d7TE
VkpyofZfq67qhePH/DbKeebM2kqq5LNGQEpx 8M0ORLlaEZ4FqgBwuHbLWy5zAvIPwenWF
j02xdm3oXVazbmFy",.      "img": "hXXp://img1.qunarzz.com/qs/1506/81/a6
474588f25947.jpg",.      "show": "hotelzt.qunar.com",.      "title": "
............",.      "sale_price": "",.      "cus": "",.      "s": 235
5560,.      "margin": false,.      "phone": "".    }.  ].}.)HTTP/1.1 2
00 OK..Date: Sun, 06 Sep 2015 07:28:15 GMT..Content-Type: application/
x-javascript;charset=UTF-8..Content-Length: 900..Connection: keep-aliv
e..Set-Cookie: sn=1441524495_1; path=/; expires=Sun, 06-Sep-2015 15:58
:15 GMT; HttpOnly..Server: QWS/1.0..QNR._AD.ifmRightHotelInter({.  "re
sponse_stat": {.    "elapsed": "7574",.    "url": "notshown",.    "sta
t": "success".  },.  "key_data": [.    {.      "description": ".......
.....",.      "e": "KR9E5QtE7HEb45dvk3kYtZQT3j4UoN9Hx9bIN/yrAxiPK9xC7q
fEYGoMZ 1nVvit/AYh1cpF6xDkWsIOJaCrQ1Qq2t0khuk6cJIP1cnTjhJ5PiGjxv 66bRt
XNvuxIZoQmFBTuOrreXo7NNuYtNsWfxJx0cM1b4xVqY/IW04W5h2C6kU UC7U5qW9T

<<< skipped >>>

GET /z_stat.php?id=1255214667 HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 9941

Connection: keep-alive

Date: Sun, 06 Sep 2015 06:45:26 GMT

Last-Modified: Sun, 06 Sep 2015 06:45:26 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache45.l2de1[0,200-0,H], cache36.l2de1[0,0], cache6.de1[0,200-0,H], cache7.de1[0,0]

Age: 2569

X-Cache: HIT TCP_MEM_HIT dirn:4:477081753

X-Swift-SaveTime: Sun, 06 Sep 2015 06:50:05 GMT

X-Swift-CacheTime: 5121
(function(){function k(){this.c="1255214667";this.R="z";this.N="";this
.K="";this.M="";this.r="1441521926";this.P="oz.cnzz.com";this.L="";thi
s.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" 
this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.la(
)}function g(a,b){try{var c=.[];c.push("siteid=1255214667");c.push("na
me=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer))
;c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator.user
Agent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.ra
ndom()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}
catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURICom
ponent,n=unescape;k.prototype={la:function(){try{this.U(),this.J(),thi
s.ia(),this.H(),this.o(),this.ga(),.this.fa(),this.ja(),this.j(),this.
ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.pa(),e[thi
s.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},na:f
unction(){try{var a=this;e._czc={push:function(){return a.B.apply(a,ar
guments)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;
if("[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b 
 ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object S
tring]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAu
toPageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch
(d){g(d,"cS failed")}},pa:function(){try{if("undefined"===typeof e._cz
_account||e._cz_account===this.c){e._cz_account=this.c;if("[object<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=homeadSy HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.....
<<< skipped >>>

GET /vataframe/b.html?_=20120830&rnd=topicLinkL HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: QXF/1.1.1

Cache-Control: no-cache

Expires: 0

Accept-Ranges: bytes

Last-Modified: Tue, 18 Aug 2015 07:50:41 GMT

ETag: W/"9fa-1208781850"

Vary: Accept-Encoding

Content-Encoding: gzip

Server: QWS/1.0
488.............Vko.6..._..[..z.MS,[email protected]].m_.P"e..H....E...)Y....a
..y...{I..........Ej.H......9'Q.e...g......../o.<..KC..NhEe..z.= ./
..k.,.l6..0.f.]~.n...W2....!e.Eg.N...F*{z.....q/.....`......O......\ .
.K.o[....;...q.._....rw..*.)..E..J~6R.........uLlKULh.J.b....D/*C...z.
.....9.......!uy.....5xP....Y..n...3.Z`.2&...R3<.....e..h.,.......^
.O.X....Zg.5..V........]SX.D.-...pL0o...*5....z%.d.....uI....K..u...O.
.D.........9Bg...cj.(.....I...stTH.)..y........ ..z.._..Y5\...H..\....
..a.. i....;&|.0..........|..K.....H.PK?,..)?.PD...x>..~..s.jn.[.5.
..L..K...r)._./c1.e>2.P...o..9x..m%..C........$..X..........r..s..n
.W...0.....G.....i.....U?.}....h1..*.U.l....R...|;..)..,...I...xH.....
......6..{.#..3.._&.g.M6O..[Ae.h...[.k.E]T....>u........6......./..
pIo.A.k.<U...J..0.....P...n..........p.DaW.!!.....qI.$.f....r.*74..
z.d..^..-5...DA..i..}^ ..2T*.x.......q.o..W.&.0W.b..u3-......zW.{.....
'kaE!.p../c......|oWz...hZm.R;q....W...8...i..J#ZG....f.Hq...hw.1]v85\
.P.B.S..:EMZ.&Z.0....3.. .....A..Kkj..p.).A...,~...T....-..........s3.
 ........C.."...g'..j...".L......{UI.0@&s;/F..83......}..cP`aJz`.P.$&g
t;3..;..o.t.#....`......N...Eu...S2'O?O..........n_&f.'......y......0.
.<<< skipped >>>

GET /live/2015/09/02/23/1013v1441206263416060384.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Aug 2016 17:26:20 GMT

Date: Wed, 02 Sep 2015 17:26:20 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 56717

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 02 Sep 2015 15:04:23 GMT

ETag: "58618860"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 fzh51:8104 (Cdn Cache Server V2.0), 1.1 sm27:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U.....XS].0.C..D...A)......."..I .][email protected].%7..
~..y.s....>.u....Y3k..Ym.d...L.4Zj.j....4...."..;.Qp.3..SLH..V..% .
p ..........O<...P_..9,.f...z..H-J.2......<...~\>.....=..0..7
....M..h.H..=..~...CA.0o..........>.5r..q(..p2?.."[email protected]@...;
.AQ..z...\.....Bk.a.Ld.?...*..`.t...vqG......I...u-.......O./m....z.(.
8.....e){.`.......?..NH..9.......3.c....8.....P.pW...Z.g.J.7.oM.. `...
.}.......po.s...;.#`.FSr.w>%......v......J......".Q.t}?.s.?.d>P.
..P.C.....N.......{*......].....;.... ]..9g..L.A.=...X.b...s.n1*\.!V'%
8...p.....P|.......;..........X.~.q=........u....a..=...... _..(.....~
.>..4..a.....P........k-.[... ....q.....}..&<.A.=.[b..)..w....2?
......-..........[......a.-...........w...._'[email protected]..!......5...Ht
.{..)$...C..x..^8...7-......,8._...[...........^f..!.[..w.....I.-...9%
[email protected].. [email protected][email protected]/.
..../e.;!....!....N.?.#U#...!.....F...0(...u8......J...G..|[F..n?.7../
.....J.E:.u.&.sG..9..F..b..~(M.........;./...pD.....wKQ.m..w2...PG;...
....@....;.....N.pw8....~.PR...S.<..{................7*...".otr.n).
...X:.U....>.?...(.....8.. ....c..Xt.;...(...a.0 ......j...M..T.)..
.N.3...(HHHHI(HI)h...i..)(.........i).......$'.......a...b........'.`^
..$X......<Z.>-.3.m(.....R@._'[email protected].$.d.........3i.........
.....B..I.Op..L.h`G..uU...~j...nF.:{1q..Neb.(.O.k........*......P.G.L.
../n.w{Oo..=H.Y...3..................m)u3'.........Z....-..N.D...*....
`5...'..z...A.a.'1n.I..(e#F.R|.....1......iG.TM$Q...*...|?U......u<<< skipped >>>

GET /live/05/74/76a2433690d165a4111a247725573faa_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 13 Aug 2016 06:24:55 GMT

Date: Wed, 19 Aug 2015 06:24:55 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 11894

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 24 Nov 2013 09:17:57 GMT

ETag: "2019156358"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8080 (Cdn Cache Server V2.0), 1.1 sm28:0 (Cdn Cache Server V2.0)

Connection: keep-alive
....E..R....UP.P......]C......w'..K....C.h...k ..wVVV..o........w.:_.]
..z_x..`.K.I.``..........T...PV...2g.u.....`e...p.q.......W......d`.t.
.fo..C)B........ |.G.....................................H..O.L...c`d 
.`ag.g..g...%0......q..q.............h....P.`.`..`.{... .a.[..!.X...E.
.....................j..:...<.'.q...o.T..........]xj...\..?.......i
h.....yx....%.HI.....khji.....[XZY....{xzy..........JLJNIMK...........
..7@...[Z.{z........gf.....6..wv........on..............?ra...........
``............*.7..*........]H@...<S.Id|j.M.....7....../.........p0
............9`..q.........P...1.H|>.TuM.&...c..t..o..L...zOg.u.....
.....R.s._.v..9.M|.7...'....G..Cm..\...)?.|.k..!r%.6.......#...f...V..
..#Ap.j.w./$.:....O..BC.;.....n3^.4.d.4..RC.)>.cR...z.A..%.....h.f.
...{Ma..Q.q..tq..&.s...*........MYL...%.*..w.....j..i*s..t..W....S..P.
.i.ey...".:........,....:s%....nH.L...84$....\K.` ...*.......|...d.4.{
..%....5..q...............%A..gL..C."a.z<xF..r....MnY.1...C........
.R.....J...x....d..eh....I....w...n....~I...r....R...\..-.=...@......=
!......Q/VZZ....mB...q..RP.....G.[.............`Zp...Q<j..G...|....
.u5^......6..D..7.O..oZ..H...........v.UC.h;...G..i...!...s...`.io._.F
.....;.._.....N..)..b....9........S.r.k.6.H9..JR.W..Z..v.....0..I..x.~
..<."=..^41sn..W...r............Z^....[.g....W_.....^c8w..-.r..(.B.
......m5.C.....)~..^.z...,.d...mF..}Q...CQ."r............Q..../....12O
...z...).Wm.........f.|..$.qD2.%Q...u..=..'._(.o.B..H......A.."....(.b
.G....A..._e.a.......B....&.r.....`C.....Lk...lLv...ql..|.u.....Xt<<< skipped >>>

GET /live/44/16/db85577447.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 13 Aug 2016 06:55:46 GMT

Date: Wed, 19 Aug 2015 06:55:46 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 14958

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 17 Nov 2013 09:47:24 GMT

ETag: "3683553925"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:88 (Cdn Cache Server V2.0), 1.1 sm28:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.......R....WT.`....H..HoJ..#.Ho.K(*5..K....t......^"...&..&M.A..`}w.|
{..{.{...3..f.......:.....&..-...?..\.T.M4....(q.:..{9.r.H.Ip....<\
.tt..t_hhq..I..py..z....z.%)!A~..P.............7..].[.[.[...in......p.
.$._....n.&"&.Cz.....C.}..[DD...HH............>.|z.....#oz.wi.w....
<0...H...$#g`dbf..........WPTR.......kjfnaiem.......r........G.....
.OH.......).....................?084<2....._.....lnm.......>9.sv
..{...[...B..r....MLLDL...[[email protected]\.C.-m.}..g...Gf.
.....I......E._`.....$...xD4.5.....x}...vD..7].}.B....qH..-...A30....u
p....')T...y.,.....CZP....8 ..p..u..}..........s.8$....>...&..f.1mh
..yW.d.d..].'......3.O!.\[email protected]
.... .......(w.._D.z]......... <F.>.z|].]=T.tU\....e........N..N
..$~.. .rg.fb...~..>.:....%......c.V...)g.......T.zbt./....8M.$..,.
L*.2..J.V.*.b...4J...^&Q.i&)..m........d......i.....}.#......V.DK..W1.
c.d..X.......;......x.J..>vK.;...P...{A..T.....y..eG'..............
........#..{.:H.$.A..M..OZ_.....Q".1...G.y..........3.R.:......7/.....
....t..E4e..N....uq{4.7..k..g....z..-|..g.Q3......Q.......}...q....}.S
..3%.e.b..}_...E!E....`.......N..M1q..!*...T....R.....7.I..c.d.2.Riv.h
g...x...z..s..8..`.6.c......J.c..f..V.,..q E#L.#...$u....ic...f..5...z
.B.I............%&...I..3..%.*...\. [....U....hp.n.............9.}..#N
m.P-.p&....~qi.............q.;.Z...l..d.{4.P.....d...}}.....#.....~...
.|b.>.`.~$.L.ol.^.......E2mi..zA^6.zsO.=..XG..5.......c...E..(.._..
......~.4.#.J7...\`.V..m...l....le../........[..,...z&.../.Ry,.@..<<< skipped >>>

GET /live/2014/11/25/11/1003v1416884712906517143.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 13 Jul 2016 11:10:59 GMT

Date: Sun, 19 Jul 2015 11:10:59 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5750

Cache-Control: public, max-age=31104000

ETag: "832438727"

Last-Modified: Tue, 25 Nov 2014 03:05:13 GMT

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou89:8104 (Cdn Cache Server V2.0), 1.1 sm23:9 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
=.........................!1.AQ.."aq.2.....#B.3Rb....$Cr..............
....................#......................!.1.A"2.Qqa............?...
...{...#.I.gT...&......4...Q....p.A..Y.A..=.?..QH...G.....f...b.{.r.'m
.....ci.lC)...[...S..=....O@.~.b....W.u..R........zr.......:%.Tc.....w
J.. y..........%...h.k...%4.....n\......%./!.....m....9[..)..F.^.z.o.`
....j\D./...[.z".(%..r.N..vNc..5..0....`..........t...r...].sih*6.JL..
.sAs....^Pa.j.4..y...K..&d`....\..[p.$0.<...;[email protected]
O...j u.r....7W.?..........#..Dn..[......U.<z6.gx.1..).n.Ag.4....7#
..?.L\...M#.C$>.`.o.].3#.u.X...!.;...d..$S......l..*.Y..j.:.nz..|..
!B%}.Q.6...c....g...X.....%`{.<'Ck.Y..$0..|->*.dh.....J2...W>
....B3.....5..n.J.....W?.`i.."=.6...t....8..kl.UH....`G.I.s.mk..H]#.:.
[email protected]...?R<-.n...D%EGv..`_.jB._..Sc...v....2H..^.|..
R7...t......_.Z.....2.v5......P..9..4n.....UMuK.#2?f.....$.E.`..;.T.s.
...u..{.......Ybl.......~.H.'.1...J..no...60....)...4S.B.EW....V..M.o.
.......Zct...4v..V\..of..b".I.....g.....`5...>..G.....%.!.Z...ac...
..,.4<u.J..{KX.k.;.~.m.,..G.X./.e.vc...n..;...m..M..1....s...IJ.4L.
...F\&...&.[...t..<...Fb.J.........;`=..|E../[email protected].......]..K!
d.g.....9.QA9.]...,t9.J...m..eHmX...A........i..J^b.1....C.[."l.e....A
ai.OE.T.1..S.;. ..E...Mcas.?S...Jf.3..O)..3.X/.A.{.`.x..:h.`..F..u<<< skipped >>>

GET /live/2014/12/19/09/1003v1418953953835284831.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jan 2016 13:20:49 GMT

Date: Tue, 06 Jan 2015 13:20:49 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 18949

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 19 Dec 2014 01:52:34 GMT

ETag: "1643520869"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 czdx89:8104 (Cdn Cache Server V2.0), 1.1 sm29:9 (Cdn Cache Server V2.0)

Connection: keep-alive
.......T....wXSM.7.C..#M..HI.....( [email protected]."..@D.*[email protected]=
;[email protected][O..@ .....?q<...:.....@....@.!
.HA..Fz....D02B.....#...p-.#..\...?t.....r...`D...........6.........|.
....Q..s..P^-#.^.&.!...WOO...C......j.....S..>.......&...X....7....
...y.,/.&...GH.k.......lH..\.b....)..o..v.w..?.......b..!...:...P.....
1$.@...{<%!.<.'.?.w......b...uQ...`...........`.......(..0......
..G?.... .~....A_.:......I'..}.L.i..2......1}..vB2.0>.e.....&.C..A.
..AL.^..2..$.vJ.D........ .....A.|^E0.....Y...HYy)...........j.J...0i.
....Dy..4".,.......H$aR.s...ji#..d`nn....qY.p...11.`[email protected]
......A.<....R..c.....}h...>.G..}.Bt`..`_.~.....t........I...#..
[email protected]:.@M.?... 4TT4.4....
.....xB.|.......W..9..p.B.."........9.......$.B.1.P......SPRA.S.N.....
..C.D.D$d..$PjIP..%.c....F1.{^A.2.=.T..d1~m/)....Av$....oho$kZ.U!....Z
o.}.....c....u.N|....q............U3G..{Ye....dt.........g...9.[KLh..)
....>8#1..O~&...8f|.^.w~........a.....v....2!......l.Zg.}[email protected]
....j([email protected]..]...F............|[email protected]....
Qi...P.B...!..Z...pCd.N.S...r....#.[v....5.7.]8.r..0..O..>....U}~H.
.w...1<.s.....d.-..p....>s...Y.Z...,.....).]..A#.........V..0i/.
!.s...?\V<.}..E.V...N......{'.V.<B$....v.......l.. o.Q.T....E...
..0...|=...[iP_.\..}./......a....`[z.....u..DAe...W.....K/......../..d
'n.i!....t.U..&f3e...|.B.G*..m.^...'g.xA1...c zS..*....O)[|~1........c
.mj..^,....c.WQ.;..{ .o...J> e...,@.G7.e..U.z.F..(......r.....o<<< skipped >>>

GET /live/2015/08/29/19/1010v1440848628254728116_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 25 Aug 2016 06:17:32 GMT

Date: Mon, 31 Aug 2015 06:17:32 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7467

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 29 Aug 2015 11:43:48 GMT

ETag: "3264911071"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh86:8080 (Cdn Cache Server V2.0), 1.1 sm28:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UP......nX`ai......a......di....\[email protected]..;..~g
.<....;.....M..............].(..pp.pq..p......(........I(..tt`jZZ..
'....HK.*........g.............>>>...............#.....x.b...
)...X........... ,l..s....."............P.?L.K.&.....b.AQ....B.4...p..
..*.yo]..9.....Y@......;.....`ccc..k..a.@6*.v.E\.....Z,..*......H.x..V
 #k]%..NI..AV.....0Y.i}....]7>.#.....:_=.s4.`k...`x...[a..C.B.4....
.....J..E"....g..U.B..1,QF.....t.d.&.L .22.[..........{.|...$.6-hl..V.
.(.h.`..8\...tp..O{U..........7.l..A......V.2^.*.....Y.&/..9NAE..s.m..
..U.m....i.E8..S*"..E..-......}.$.t..u.;.0.....&...]D"....Vx....fJ.7:.
n..:)V.E.%.O$..~..Q%. >P........J.*.oi...a\.K...Q4Q.3WB..91>..Ds
k.;K.So..S........Y#...e..?....J.$..._^.c..!.{.\&9u..H.P....5...`.p.h.
['..%..E/......D.........l.,[email protected][PR..N.Ty.
..1J:.nFQN....^..'`........ F.,..h.am...g.......y.....^^.......i.o....
.n9U.9........*....S..F.j..z...R.-n.=f........QJ..g.`.Lre.y.E<.}Z..
.5..?...'Rcw4..f.N...3.?...n....r/.}$..r..y...q.....bZ.}.F..".....}...
.....u0.EDx..R.F..1..m.......g.\^.%.&E|6%.u........V....`.\Z..e..p...E
.WY'....br..............F.}......**.Dtf...W....:.S.7.^..7......>.j{
[email protected]{* S..g.>....2/..!....vm.........T.ty..U8.
[email protected]..)....p.g..n.'..1....V.!2P}QS.(.u.....ka...g.......k..f..^?!.*
.x.. .x...P .8,G9......:~....._?.g.&..]8..e..j(N......U.6..7!.s..?C...
@.......P........&A...y......]....cI..;(s]cNw-..p.q...v7r....{.^.."...
.gu..J..|.=!.W.~....*.....~g.0.NS|..m...\1p.wX..:fS@......:[email protected].<<< skipped >>>

GET /live/2015/09/04/21/1003v1441374469426980004.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 06:54:59 GMT

Date: Sat, 05 Sep 2015 06:54:59 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10822

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 13:47:49 GMT

ETag: "4048357252"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:88 (Cdn Cache Server V2.0), 1.1 sm27:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UT...,.$...'@.;E..&x.b..$@)^.5.[p(...)...W..".......[...9.
m..5...9...~.P.hhk......;..[.U..6....p.......................QQ..Q...S
.QPR.......3..0P....O.........$.!%&.....A.%......E........;.`...9.....
x.@..\B,l.?...................q..@J<*.|jQe(.=*...F,.uh.K. .8l....AB
.....<[email protected]...
.7..K.7./.O...uX.:)W....3...!...\&<`..j......Y .]........Bv. .-_=.A
J.....A..G.....q./@kmP....>.....l..A..23........9.....a..a.L.U.l.r{
GIB..k.,=W....6.....)....b...=...Z.....n..2.3.5UqHa.*..,.P..........&s
.......el>.4....V{....`....U{.8...(5.mH.( a.u?..'SR.....mb.|.Q\&...
Q$.X......).7..g.pn./.q.%../............(~..g.6C..'.........w2...f...@
...[._!......o.c...\.D[B...C.z..E..uw...%[Q.)}.. ......7Ar..J."....n..
n..m.@g...\x....9..9.z.....iH.K.T.8wHN.(=w"..{..ZM.6........a.........
.=..W...E..s.E........pe.f$...O....A.yPIk.l.n.....F>8...H ..-....K.
..r,=h. #Sk. wN.....#..U.B#......U.i..#)..FSQ....H.....1..nPT...a..$..
..O?.Ap.E^v.7.....6....J.pFu[...tt......}7.i........s-.....W.x.$E..K..
.:'..;5....;de..D..<....m..y._..@i6sO...^.=...Zs.....B. ........n.h
..v.........h..e....wk/k8[.....Zz2..... ..............Zy...G=......@..
O.t/rX...`....D..yBE....j. .....<.....Z...4.......,...........E...*
..X...8..g.G.>..~.l...........%......[M.V.....'.r....A......U%..C=.
...wV.i.......J....u..1!..K..P./.l.. v....'.......o..pO...... J..E...D
..*83..t....sq..7.\O..&..>..mz.nO...Ke....{.S2.*.....nU.S.N-..ui:..
....i.9Y...~......x`.....MU.....1..o....S..d!B.Y...MZM.X..'......?<<< skipped >>>

GET /live/2015/07/18/00/1010v1437150501366480600_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 14 Jul 2016 01:53:38 GMT

Date: Mon, 20 Jul 2015 01:53:38 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 12943

Cache-Control: public, max-age=31104000

ETag: "2604328600"

Last-Modified: Fri, 17 Jul 2015 16:28:21 GMT

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:8109 (Cdn Cache Server V2.0), 1.1 sm28:10 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((..........."........................................
@.........................!.1.AQa."q.2.....#B..Rb.$3C...Scr...........
........................$......................!..1.A."Q2a............
.?..I4..u?b...;-.....3^u%.(?`.Rq....;...........,.m.3...........B.....
..kyC~..}]..l......h..(..).}.hs.T.P..#m..Ld........M..Piw1...m....i..i
..C1........>.....i.1.skm9=........Awm8F..`fR..j..!...........o.7.G
.T.&.m=g..&..X......B..a.EK]GW.c..\..b...j..o.-...qn.>....&../.V.$.
.B.8b..6);U..kwE.UxwC..d.}.x..........-.ZK.|.!O..........Ayh....}.v...
[email protected]..#..._?ZkK......h.-..'.y..'.......b.\.6{...=<.
_...:wL.=..77.....D.....~....r..A..n.....H.sx.lKH....c..*......W.[.d.;
c.Q..*..$..r....s....mB...B^V....0.a.4.#..S,.xWw.........O{#.6..)..a..
..Y..Y..a.........H..Tve....z..&.....m...Z.[........?..S.......C....G.
.,.......!.?.....~.Zh.{.S.......Lv.n. ...k;......J......&...h.c.....".
y>............ r...H...>.........S.."X...)R..L.....K..`.....$...
X...s...=.aJ9.U.u..=6...fwwkWh.I..s.'.#..7i....w......R....{..{ku1LJ.E
;.....<.......i.]\N... ..Q.....t....E.. 6..I..-..3.....`.%|.1...KX}
.{tc.I&db.;T.3..?.,..7...qX..4.KLS&8...yVVz.....O,......N..h....Ud..O.
N..*....mOY...c\.0..-........3U.jz;......$.U..4"m1...N..B$e3L.~E.0.?..
.|.......w4v.C..>..{..T....S!.V..gq#O<*.q.G.<..7...}..l..{._O
{....../....?.j.Q...{...A...0....h.&.[..=.p..qp ?&...0..[.4r...B..<<< skipped >>>

GET /live/2015/05/11/12/1010v1431320164947388798_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 31 Jul 2016 06:40:07 GMT

Date: Thu, 06 Aug 2015 06:40:07 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8587

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 11 May 2015 04:56:04 GMT

ETag: "1748081144"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8109 (Cdn Cache Server V2.0), 1.1 sm29:3 (Cdn Cache Server V2.0)

Connection: keep-alive
....d6PU...wUP.......w?..".-.........]$H.$...........lqB...{N.[u...{.{
...a.k.....B..e.............h...h.......X8.88..8./...)H)))H....X..i.i.
..!..l.`N0..7.7.. ...?..&&&........595....]......E...(D T"[email protected].?
@(.h.......".@.(h......B.........^b..`..i.J........v...;.mr... 6Y.....
[email protected]!BezI,..?.&.k3W........"T"@..~.B...8I.T.J...B
....M!$ K.2.....g4.X.v...)d.........}y>..0...`g.mr........x{......W
..7...>..r.....u./7h.]...U.)....'..h..PS.T....l..V.99..\p.,R...'.G.
...s...?*...Z3h..8qF.S7.....*2>.aT...6v.KY...".$.;..Q.....r.x.:=!..
.....y..}.D.K.. ..b..$4g4......./b...l..&.IJ........i-.....A.z.Y.eF.(.
B....\...<^!..q*....I.3.S......#......M.....^;.....o.u..b.......].`
..f..o.....:B/].}.Kc.I.Ai..2H.._....a.....Z...o..;6.....9...Q....t.2..
"..p..9D....l....b..wH.._.1. .J4..q.,.3EJ.o|.t.?E...U3I....y....l..*..
dK..!.^[email protected].._..h....\0{..l...C...P.......y..h..H...E
t#....vO..G..?...|X......\.q...%xlq.....u..!]..c...!...p..t.,.........
..*.>}..........f9.....4c......ja1.H5 (.J9|4....\.WE....B....lg ..f
K......5=k.k.[.....[#.P..2;x...!nG=....~..z..3..{..q.V...$.... ..d.U..
.......n....2o/..........S.y_..-...'.)D.tg....#Y.k..X..c..t..3...X.?3.
?...... kDL..F.f...6....5./:....T.B.@04,...nN.z{].h.D. .......z...Pm..
 3....r....2Ht$T.M..i..RT.D..P-.......E....N.j.a..BA.......d.... .....
.....L.Z..%,..D.1...F..k.K. ...K.XmC.~.....)..OL..?.j...E....h.{......
M.hyI.$...*........A............f.....0j..\rRH].. .t..,0......>...{
5_.c.= 2.?..Wo.Y.S.9.n...4...pc...%..Io....B..r.5>.O..{...w.J\.<<< skipped >>>

GET /live/2015/06/30/11/1010v1435635632917325370_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 24 Jun 2016 04:20:31 GMT

Date: Tue, 30 Jun 2015 04:20:31 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 14876

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 30 Jun 2015 03:40:32 GMT

ETag: "4261909655"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh86:80 (Cdn Cache Server V2.0), 1.1 sm28:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...wcp&L.....7.m....m....m..b;y7..s....oO.Tuu.S.S3.t.l...@....
.........g. ................E.....EGD.G.B...B...%. ..#...$.#&.EIMC.CD.
DO.DAEM.?  PPP...h..hT...T...3.@......@P..( `( ?#.....................
..g.D.........O..`...m.(.$....Ph.F.NA.,"I...d*...l..........M....@..`.
/.?....>.............._..P.0.Tfpa.eR4.#'Ht.{.........-.<.?<.0
.. `%~.Bw.<U{.. ..WL4&....... ...7\A.B...1..&A....D..\!........W.T.
x........./..$.Y..%.f..g..y Z..i.i$`..).C..J..c.......\.......~..m.=.p
....g0.a.W...S!fT..U'..Nd..d..W.b-X.m:....I...|.F.f........._XV.3.9z..
....v.\.s(.."..4S.W....`{. ....K.(.=......'Y.i.g....(.....]I...m.{.S.`
.,.... z....k.C}....b.....7..). ?cL...qv!...I...}x.y..|....c(.......Y.
..d_8...y....]........zZca.U.@1.!......-.Ru^u.....@'.#...8.y..'....5.0
_og.....6.>R....&pX.o..,..~..O.h..~2.1.U.Eh...]o..W..<....~.6a..
.C.....j7'.VF......)....]ys..I.Y.L....e.l.._.ni....i..`..LT7.....sC...
.,......[...<......"S.Ed.....~.....H'..j6.&...4=z....X!.8..||*!T..y
%-.-..sEZ/.>Aj;......E..q.s..3U......-B..Q.. .Q0...i-.. ...AO....P.
..4.{.oIc...V..,s......:.sSy"?q^~.......#{......s.e.;..0l.....Hs<94
.....8.....T...<.>uK.....*.....(|K.0 z.G.m.E.9..t.7h......c..6?.
......J.....].. n...)_..._L|.....8..Zg.W.a....<.r|....*.~.E..Ul<
........[.jW9.....y.1.s.....K..d..../Z...tsv.. .{.&'6-.Y.s|...!z7=!...
...!g....N.....;..,`...o...xroF..Y.-}.....xf .TCA}c..d[.3..W..._..X...
&....u.5i...................DW...M......l2..R.&.-......:Q.V.Q>J....
C../.T$...u...K.#[email protected]..^.<.....".<N........<<< skipped >>>

GET /live/2015/08/17/06/1003v1439763696488313126.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 12 Aug 2016 00:47:36 GMT

Date: Tue, 18 Aug 2015 00:47:36 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 9334

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sun, 16 Aug 2015 22:21:36 GMT

ETag: "2967523787"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 hzh92:80 (Cdn Cache Server V2.0), 1.1 sm29:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...VUX.........[..........a.A.f...f..F.S.......?.........g....
...W..............P.."... ........c.cbb``...a.........R...QR1Q...s.3..
qprP........s..W.......................:...!!0.......^{.....2......@BF
EDC./...@D@BBDBA.....?gD$.2..!.......1....bdr.:..n]7...$........m.'p.?
[email protected]..........$......21.....u...........r..2...8.T...).
......j..t.._..I...p#}.>..S0........$Z`....X.._.WB~tK.S.a..'#4.<
J78V...Ag1.Y....|vf\..d...'a....vQ...cR....SL5d.'....}.]#.. ...8..S.2/
.B..J..Y~.U...V.w..a>...<._....K-.. [email protected].
a.v..3..Z..(qz)...|Y..M....^.:.o~y$.......Fh..o%*..|..-/.\k..r..].. ^.
....e.Z...4.%....Z.*{MnQ...i..!|VN.....4e.F..]..t`..kJ..$...]z.9.$.Q.w
F.2]....`.........]............./W.*T..P..q..,.....s .[...........~OH.
x.<....r....b6.[.c....."&.i...3...t..|...gG.....N.........y7A.!.!..
.89...b.Dj..*..b.O$.-...J.UX.U.........-.z=.F.w<....5.......2.]....
..r.l1.(.gVv..5..2.>W][..0$.y..%..L........t|x.....V..."c....G%..WF
..~3..PdB...1o..|......d...8..1...^f..k.6..........!7gHc.X0? .uY......
rM.s.wI>.J.....z.........'.....L.......n..)N}l.......I....jr.L?.i..
>_.$....<9.u..m.6.K........z...3..V<...#g....$..H.....m.p)G5.
..!.G.<'.-...p%-......=\~.x. .....fQ0...L.0..w...YS.....i.].J-.C...
.X.-.S.?A7I.....i...s.....TI7......V...[w....qz6(....=.\~^..#..=)9....
..g.a(.05.../.r.....^.............}..z.rS.Jm......3.p...tU............
.f.b......g.n.6.@].....l.Q....."..Wh#.........\r.F.>1. ....9.>:.
P>a....B...]:h..O.X.!.xq......>.V........pQ..f_.S.e<....M<<< skipped >>>

GET /live/2015/07/31/13/1003v1438320109052895370.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:05 GMT

Expires: Sun, 28 Aug 2016 12:32:55 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 7548

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 31 Jul 2015 05:21:49 GMT

ETag: "2055052014"

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 huzhou87:8111 (Cdn Cache Server V2.0), 1.1 sm25:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...VUT...^\J...E...%[email protected])...X.....AZ..~.s......s
.a.9.|.s.......LSMC............9....................c.*.R"2.*ZZ.*jjz.'
,..`FjjV~V0'../.........n....`......P..Pr.S.s..... ..4...X..G.X@r..~.#
....g......]<[email protected]..`....R.)Q..Y...P....u..=. .....
'[email protected]..>.....A.x._..u.......F!.....G..R~X...#.U.....
S......./:......`.q........`....u...i<...|o@.*.......P........L....
.L7.u..j.L.v.<._..w.....J.:$,.....c....Z.^M..*B..1.!J]..n.&.....[.m
...t......x..rw.7.k...N...T^F..y....&-...YQ...A{....7*..}...Vj...j...B
....j,......vVu..r...Z_..u..K?.|_oN....k6......#..k..(6. ....Fy.9.|.@=
^../.q.0.R..|.1tP*;Q.i.N..D{.d\&...........U.4...$...|.iz.....N......#
.V..........(..6s.g..a.l...2...Y....s......5..g....e..._.!.}..OYN....L
..2.Uw.>Ec.'.^..5M....v.hB..6vov.1.93...)..<.n...&....!5{.n^...W
&..No[-zo...FH:......u<...MY.U5.qc~!........)Q.*>5..z.d.)...j!..
%.l..K......:[email protected]'........_.g.w..?.....{..,.2......#bu.....
..S.Q...a?.. ..&.........|..ERA..(...TAo..8l....\.9I..5.........~.R.B.
............=..S......?......RQ2.r8<.."Q...k....y.~.....Lm.....zf.X
.....B. ..K..J..,.s#].:.S.avtJ.z.........Em.H..^........<.......^.h
.........t.................l... .....2..>V....F.V....&.Y.P.\....]..
.:....M....$...5.1...b...L..X.......qQ)p.sY/...=...L......Z......H....
..wID...E...h.?........U-.j.B.,.3..V*G..-...kb:b..=..6..n.......jr.I|%
.{y.`'..>:Z..#[email protected]]R[.[..;\.....p.......M(...f.9.....{y..9w0..).$
.]...[|..y:..j.q..Oy.W......4...x.......|...R.z)...kEC>.No[.p.Q<<< skipped >>>

GET /live/2015/09/04/21/1003v1441374469426980004.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 06:54:59 GMT

Date: Sat, 05 Sep 2015 06:54:59 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10822

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 13:47:49 GMT

ETag: "4048357252"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:88 (Cdn Cache Server V2.0), 1.1 sm27:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UT...,.$...'@.;E..&x.b..$@)^.5.[p(...)...W..".......[...9.
m..5...9...~.P.hhk......;..[.U..6....p.......................QQ..Q...S
.QPR.......3..0P....O.........$.!%&.....A.%......E........;.`...9.....
x.@..\B,l.?...................q..@J<*.|jQe(.=*...F,.uh.K. .8l....AB
.....<[email protected]...
.7..K.7./.O...uX.:)W....3...!...\&<`..j......Y .]........Bv. .-_=.A
J.....A..G.....q./@kmP....>.....l..A..23........9.....a..a.L.U.l.r{
GIB..k.,=W....6.....)....b...=...Z.....n..2.3.5UqHa.*..,.P..........&s
.......el>.4....V{....`....U{.8...(5.mH.( a.u?..'SR.....mb.|.Q\&...
Q$.X......).7..g.pn./.q.%../............(~..g.6C..'.........w2...f...@
...[._!......o.c...\.D[B...C.z..E..uw...%[Q.)}.. ......7Ar..J."....n..
n..m.@g...\x....9..9.z.....iH.K.T.8wHN.(=w"..{..ZM.6........a.........
.=..W...E..s.E........pe.f$...O....A.yPIk.l.n.....F>8...H ..-....K.
..r,=h. #Sk. wN.....#..U.B#......U.i..#)..FSQ....H.....1..nPT...a..$..
..O?.Ap.E^v.7.....6....J.pFu[...tt......}7.i........s-.....W.x.$E..K..
.:'..;5....;de..D..<....m..y._..@i6sO...^.=...Zs.....B. ........n.h
..v.........h..e....wk/k8[.....Zz2..... ..............Zy...G=......@..
O.t/rX...`....D..yBE....j. .....<.....Z...4.......,...........E...*
..X...8..g.G.>..~.l...........%......[M.V.....'.r....A......U%..C=.
...wV.i.......J....u..1!..K..P./.l.. v....'.......o..pO...... J..E...D
..*83..t....sq..7.\O..&..>..mz.nO...Ke....{.S2.*.....nU.S.N-..ui:..
....i.9Y...~......x`.....MU.....1..o....S..d!B.Y...MZM.X..'......?<<< skipped >>>

GET /live/2015/09/04/21/1003v1441374469426980004.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 06:54:59 GMT

Date: Sat, 05 Sep 2015 06:54:59 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10822

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 13:47:49 GMT

ETag: "4048357252"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:88 (Cdn Cache Server V2.0), 1.1 sm27:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UT...,.$...'@.;E..&x.b..$@)^.5.[p(...)...W..".......[...9.
m..5...9...~.P.hhk......;..[.U..6....p.......................QQ..Q...S
.QPR.......3..0P....O.........$.!%&.....A.%......E........;.`...9.....
x.@..\B,l.?...................q..@J<*.|jQe(.=*...F,.uh.K. .8l....AB
.....<[email protected]...
.7..K.7./.O...uX.:)W....3...!...\&<`..j......Y .]........Bv. .-_=.A
J.....A..G.....q./@kmP....>.....l..A..23........9.....a..a.L.U.l.r{
GIB..k.,=W....6.....)....b...=...Z.....n..2.3.5UqHa.*..,.P..........&s
.......el>.4....V{....`....U{.8...(5.mH.( a.u?..'SR.....mb.|.Q\&...
Q$.X......).7..g.pn./.q.%../............(~..g.6C..'.........w2...f...@
...[._!......o.c...\.D[B...C.z..E..uw...%[Q.)}.. ......7Ar..J."....n..
n..m.@g...\x....9..9.z.....iH.K.T.8wHN.(=w"..{..ZM.6........a.........
.=..W...E..s.E........pe.f$...O....A.yPIk.l.n.....F>8...H ..-....K.
..r,=h. #Sk. wN.....#..U.B#......U.i..#)..FSQ....H.....1..nPT...a..$..
..O?.Ap.E^v.7.....6....J.pFu[...tt......}7.i........s-.....W.x.$E..K..
.:'..;5....;de..D..<....m..y._..@i6sO...^.=...Zs.....B. ........n.h
..v.........h..e....wk/k8[.....Zz2..... ..............Zy...G=......@..
O.t/rX...`....D..yBE....j. .....<.....Z...4.......,...........E...*
..X...8..g.G.>..~.l...........%......[M.V.....'.r....A......U%..C=.
...wV.i.......J....u..1!..K..P./.l.. v....'.......o..pO...... J..E...D
..*83..t....sq..7.\O..&..>..mz.nO...Ke....{.S2.*.....nU.S.N-..ui:..
....i.9Y...~......x`.....MU.....1..o....S..d!B.Y...MZM.X..'......?<<< skipped >>>

GET /live/2015/07/22/01/1010v1437498037639692733_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 17 Jul 2016 08:37:21 GMT

Date: Thu, 23 Jul 2015 08:37:21 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8155

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 21 Jul 2015 17:00:37 GMT

ETag: "3750918249"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:8107 (Cdn Cache Server V2.0), 1.1 sm26:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.....z.U...vUT.....!!HwI.tw..9....C..C.:..C.t..4(1C...C....k.........&
gt;...9O.O....j.j.444..?......lL,l,Lll,l..l\....xx.dD...)...(.((h._2..
..QP0.2..spqsQ3....|......&h888.../.._p.P.p..... ..|.<`....I.0H....
...4,....?.`.s......'K=...a`.c.GLt.....&..)3. ...E.{.2V...."\ra...6.i.
o......F.`[email protected]. .....2.!a..%....?..$.y. ....B.|.f.
....'...m........d(.i...a.IW..3<.3t.).J.....}R......U..y.$..J..A..:
u...A3..c.n.....j.K0_.A.....^.V.~......G.....d$r.R.!OXu..z.R.v........
&..D..-..vX_...o...Z..%3....X.F.~k. 3..C....N..k..b...-...b.`..T.&.NT.
...n.#... .. g.X....".(Z.X...u.mPi7.TM..y.R........1......v.........:.
ss.[F..rH. .9.....k.Kmk/..BA......4....s...,..0].y"..W..w.Q.P..E..&...
9..i...Y..c.....lEIO.....^..).r..%:.....N..._.C}M3..w....s.........k.[
.*....!.e|...|..^.u..Y:N...Vz.l.\[email protected].=.D
a..."IU..........c...A.kv....-T....B...J.....mW1.^[email protected]..'=.
............h.X....1..$..o...[...O.m'.>..=..........j.VKK......Z..,
...V...9{.F.m&.p..oku.K.$...}FoSr....E.N. .S.d<.C.t.,y}2.z.8....t.\
.;..J...w.......fV.....|.MG.R.e,$.p.w..*..........o.yk..!.,..b....X.w.
_9?.8.pg......%...K.P... z.....;.,.q.i)6...6l.W...J.E.s..].U...=....U.
{.PJ.../.W......$<!.a`...S..7.....1Irl.y.E<S\2"...m..5.T.X.c....
.^.,.6!.jR.;..X.7Jcl.?.....j.N@..,4..HVGL.-....E.. .1..$.YX8$J......'.
..z..l./=~.U...f..S..|.....:"\@........D.-.E..$.;9....l.,...7.\CY...U.
....".;[..#BCQ........h..A]..n..5......]..Y.....U`.I..6.L...H..}....6.
..6.1..9.8...M....N....[........S.......`.=.v........i....V...lP.Y<<< skipped >>>

GET /live/2015/09/04/21/1003v1441374469426980004.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 06:54:59 GMT

Date: Sat, 05 Sep 2015 06:54:59 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 10822

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 13:47:49 GMT

ETag: "4048357252"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou85:88 (Cdn Cache Server V2.0), 1.1 sm27:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UT...,.$...'@.;E..&x.b..$@)^.5.[p(...)...W..".......[...9.
m..5...9...~.P.hhk......;..[.U..6....p.......................QQ..Q...S
.QPR.......3..0P....O.........$.!%&.....A.%......E........;.`...9.....
x.@..\B,l.?...................q..@J<*.|jQe(.=*...F,.uh.K. .8l....AB
.....<[email protected]...
.7..K.7./.O...uX.:)W....3...!...\&<`..j......Y .]........Bv. .-_=.A
J.....A..G.....q./@kmP....>.....l..A..23........9.....a..a.L.U.l.r{
GIB..k.,=W....6.....)....b...=...Z.....n..2.3.5UqHa.*..,.P..........&s
.......el>.4....V{....`....U{.8...(5.mH.( a.u?..'SR.....mb.|.Q\&...
Q$.X......).7..g.pn./.q.%../............(~..g.6C..'.........w2...f...@
...[._!......o.c...\.D[B...C.z..E..uw...%[Q.)}.. ......7Ar..J."....n..
n..m.@g...\x....9..9.z.....iH.K.T.8wHN.(=w"..{..ZM.6........a.........
.=..W...E..s.E........pe.f$...O....A.yPIk.l.n.....F>8...H ..-....K.
..r,=h. #Sk. wN.....#..U.B#......U.i..#)..FSQ....H.....1..nPT...a..$..
..O?.Ap.E^v.7.....6....J.pFu[...tt......}7.i........s-.....W.x.$E..K..
.:'..;5....;de..D..<....m..y._..@i6sO...^.=...Zs.....B. ........n.h
..v.........h..e....wk/k8[.....Zz2..... ..............Zy...G=......@..
O.t/rX...`....D..yBE....j. .....<.....Z...4.......,...........E...*
..X...8..g.G.>..~.l...........%......[M.V.....'.r....A......U%..C=.
...wV.i.......J....u..1!..K..P./.l.. v....'.......o..pO...... J..E...D
..*83..t....sq..7.\O..&..>..mz.nO...Ke....{.S2.*.....nU.S.N-..ui:..
....i.9Y...~......x`.....MU.....1..o....S..d!B.Y...MZM.X..'......?<<< skipped >>>

GET /live/2015/06/30/11/1010v1435635632917325370_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi5.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 24 Jun 2016 04:20:31 GMT

Date: Tue, 30 Jun 2015 04:20:31 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 14876

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Tue, 30 Jun 2015 03:40:32 GMT

ETag: "4261909655"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh86:80 (Cdn Cache Server V2.0), 1.1 sm28:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...wcp&L.....7.m....m....m..b;y7..s....oO.Tuu.S.S3.t.l...@....
.........g. ................E.....EGD.G.B...B...%. ..#...$.#&.EIMC.CD.
DO.DAEM.?  PPP...h..hT...T...3.@......@P..( `( ?#.....................
..g.D.........O..`...m.(.$....Ph.F.NA.,"I...d*...l..........M....@..`.
/.?....>.............._..P.0.Tfpa.eR4.#'Ht.{.........-.<.?<.0
.. `%~.Bw.<U{.. ..WL4&....... ...7\A.B...1..&A....D..\!........W.T.
x........./..$.Y..%.f..g..y Z..i.i$`..).C..J..c.......\.......~..m.=.p
....g0.a.W...S!fT..U'..Nd..d..W.b-X.m:....I...|.F.f........._XV.3.9z..
....v.\.s(.."..4S.W....`{. ....K.(.=......'Y.i.g....(.....]I...m.{.S.`
.,.... z....k.C}....b.....7..). ?cL...qv!...I...}x.y..|....c(.......Y.
..d_8...y....]........zZca.U.@1.!......-.Ru^u.....@'.#...8.y..'....5.0
_og.....6.>R....&pX.o..,..~..O.h..~2.1.U.Eh...]o..W..<....~.6a..
.C.....j7'.VF......)....]ys..I.Y.L....e.l.._.ni....i..`..LT7.....sC...
.,......[...<......"S.Ed.....~.....H'..j6.&...4=z....X!.8..||*!T..y
%-.-..sEZ/.>Aj;......E..q.s..3U......-B..Q.. .Q0...i-.. ...AO....P.
..4.{.oIc...V..,s......:.sSy"?q^~.......#{......s.e.;..0l.....Hs<94
.....8.....T...<.>uK.....*.....(|K.0 z.G.m.E.9..t.7h......c..6?.
......J.....].. n...)_..._L|.....8..Zg.W.a....<.r|....*.~.E..Ul<
........[.jW9.....y.1.s.....K..d..../Z...tsv.. .{.&'6-.Y.s|...!z7=!...
...!g....N.....;..,`...o...xroF..Y.-}.....xf .TCA}c..d[.3..W..._..X...
&....u.5i...................DW...M......l2..R.&.-......:Q.V.Q>J....
C../.T$...u...K.#[email protected]..^.<.....".<N........<<< skipped >>>

GET /pa?p=1:1305643224:17 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: tws

Date: Sun, 06 Sep 2015 07:27:58 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_old_171.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate

0..

GET /js/s/iwt-min.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 03 Oct 2015 22:25:19 GMT

Date: Thu, 03 Sep 2015 22:25:19 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 1531

Last-Modified: Tue, 01 Jul 2014 23:47:10 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 yfdx32:2 (Cdn Cache Server V2.0)

Connection: keep-alive
...........V.o.6..W4np....v...l.......I....P.%....m........i;..8"y<
.>~...h.....s..m?rb..v.....D.....U."...0.....mnZ.P.1..vSB..!...6.}9
_...B.e..U^M.mR.....s..*A.....p....C0......e%.*..w;.......f..w.z"..C..
.V<.{..VRW...Zp#...m.`x.f.p.O8..d...g..|......F..W\..........,u^.,M
(......<.....2....J.;..bi...ryY......I.`.1..... ....nP.....Tr.....c
B.}D..\...x'W.S..2.M..Fj:........_.Q8..l.....A..$*r)x.".....NZX|...j:s
.T..Z[...>#..,_...h..~.Vj]h..\.......R.{.....'H}...j.....p...Si...P
......\..U.4...lR.(.Ve.7^..w.........H...*N.7...."k>t(...^>".}@7
R.2W.T.E7..!..]F.....C........<l.B~R...K....[v..h..Q!Cg..&.3...p;..
........I.)%C.{.2.B.=.W}>.GM>:k..9.d..D........G.....k.99....X).
....FOn4:.]gEx.5......B...>.{...OL.|...Q.K!dU./..5............*u...
.........Z._......h..u.............&q!...0.y"'.......<...%m..1}a...
...........?..5......L..Q..I..T.h8..n...,.......|.....J (.?$..9.;/T...
T....1.nsG~.;.P..#X......}s.........k5...0...Od...p..{.....@ .2_.J.zT7
>...T.-..|4.9Hww%X..`..`^.y......R.Ve.RP...P.......T..G.l...<...
i.%..K.y..I|.Y..&.......7..^_...;....t.B4E.".@.....:...._.1..M-.K...eX
.{...$a}% d.......i2c....'..24.8.:.........m.M...2.Q........QX...GZ..a
..:y(1..F#............t...<.:...CU.&.a^[email protected]......
...5W...d'... `..~/.R....?. l..X...Mao8O......BQ...h.!....BA...x0x..B.
.f:../.mK;.w8.i.lM>..]mv....9X.kj......oP8t">L.V-.......6..Vo...
..i..'..3DK...)*..\..2 ..."\......'.O-..........J.Pg........l{}.E.....
."....D.Z...H............ .;........].l.>[email protected];YC.`y......<<< skipped >>>

GET /csjs/_/girlfall_5 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:27:59 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /AP5Min.aspx?AID=10851&Auth=AC1D06D058020A33550F33AE34123C9AD2828245B35634966FDAC96888940D2B&referer=http://VVV.cfmogu.com/6.htm&utz=1441524456008 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1984; expires=Sun, 06-Sep-2015 10:27:36 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:35 GMT

Content-Length: 169
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://vdax.
youzu.com/?q=150706X7ZzHz4&sid=14516">here</a>.</h2>
;..</body></html>..HTTP/1.1 302 Found..Cache-Control: no-c
ache..Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expire
s: -1..Location: hXXp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516..Ser
ver: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: Union
ADShowTG=1984; expires=Sun, 06-Sep-2015 10:27:36 GMT; path=/..X-Powere
d-By: ASP.NET..Date: Sun, 06 Sep 2015 07:27:35 GMT..Content-Length: 16
9..<html><head><title>Object moved</title><
/head><body>..<h2>Object moved to <a href="hXXp://vd
ax.youzu.com/?q=150706X7ZzHz4&sid=14516">here</a>.</h2
>..</body></html>......


GET /AP5Min.aspx?AID=10851&Auth=AC1D06D058020A33550F33AE34123C9AD2828245B35634966FDAC96888940D2B&referer=http://VVV.cfmogu.com/6.htm&utz=1441524468618 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935|2294


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294|2299; expires=Sun, 06-Sep-2015 10:27:48 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:48 GMT

Content-Length: 164
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://fligh
t.qunar.com/?ex_track=auto_5580e628">here</a>.</h2>..&l
t;/body></html>..HTTP/1.1 302 Found..Cache-Control: no-cache.
.Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expires: -1
..Location: hXXp://flight.qunar.com/?ex_track=auto_5580e628..Server: M
icrosoft-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShow
TG=1935|2294|2299; expires=Sun, 06-Sep-2015 10:27:48 GMT; path=/..X-Po
wered-By: ASP.NET..Date: Sun, 06 Sep 2015 07:27:48 GMT..Content-Length
: 164..<html><head><title>Object moved</title>
</head><body>..<h2>Object moved to <a href="http:
//flight.qunar.com/?ex_track=auto_5580e628">here</a>.</h2&
gt;..</body></html>..HTTP/1.1 302 Found..Cache-Control: no
-cache..Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expi
res: -1..Location: hXXp://flight.qunar.com/?ex_track=auto_5580e628..Se
rver: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: Unio
nADShowTG=1935|2294|2299; expires=Sun, 06-Sep-2015 10:27:48 GMT; path=
/..X-Powered-By: ASP.NET..Date: Sun, 06 Sep 2015 07:27:48 GMT..Content
-Length: 164..<html><head><title>Object moved</ti
tle></head><body>..<h2>Object moved to <a href
="hXXp://flight.qunar.com/?ex_track=auto_5580e628">here</a>.&
lt;/h2>..</body></html>..HTTP/1.1 302 Found..Cache-<<< skipped >>>

GET /AP5Min.aspx?AID=10852&Auth=F6AE3332AE97FEE7DB40F759E6F828F59A242DCC63042F4324D85058ACDAD99D&referer=http://VVV.cfmogu.com/7.htm&utz=1441524470149 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935|2294|2155


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://g.bj73.com/1/2016.html?uid=614516

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294|2155|2337; expires=Sun, 06-Sep-2015 10:27:50 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:50 GMT

Content-Length: 157
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://g.bj7
3.com/1/2016.html?uid=614516">here</a>.</h2>..</body
></html>..HTTP/1.1 302 Found..Cache-Control: no-cache..Pragma
: no-cache..Content-Type: text/html; charset=utf-8..Expires: -1..Locat
ion: hXXp://g.bj73.com/1/2016.html?uid=614516..Server: Microsoft-IIS/7
.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=1935|2294|2
155|2337; expires=Sun, 06-Sep-2015 10:27:50 GMT; path=/..X-Powered-By:
 ASP.NET..Date: Sun, 06 Sep 2015 07:27:50 GMT..Content-Length: 157..&l
t;html><head><title>Object moved</title></head
><body>..<h2>Object moved to <a href="hXXp://g.bj73.
com/1/2016.html?uid=614516">here</a>.</h2>..</body&g
t;</html>......


GET /AP5Min.aspx?AID=10851&Auth=AC1D06D058020A33550F33AE34123C9AD2828245B35634966FDAC96888940D2B&referer=http://VVV.cfmogu.com/6.htm&utz=1441524468618 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935|2294|2155|2337|2317


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://czcycm.com/

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294|2155|2337|2317|2182; expires=Sun, 06-Sep-2015 10:28:07 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Length: 135
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://czcyc
m.com/">here</a>.</h2>..</body></html>..HTT
P/1.1 302 Found..Cache-Control: no-cache..Pragma: no-cache..Content-Ty
pe: text/html; charset=utf-8..Expires: -1..Location: hXXp://czcycm.com
/..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie:
 UnionADShowTG=1935|2294|2155|2337|2317|2182; expires=Sun, 06-Sep-2015
 10:28:07 GMT; path=/..X-Powered-By: ASP.NET..Date: Sun, 06 Sep 2015 0
7:28:06 GMT..Content-Length: 135..<html><head><title>
;Object moved</title></head><body>..<h2>Object
 moved to <a href="hXXp://czcycm.com/">here</a>.</h2>
;..</body></html>......


GET /AP5Min.aspx?AID=10852&Auth=F6AE3332AE97FEE7DB40F759E6F828F59A242DCC63042F4324D85058ACDAD99D&referer=http://VVV.cfmogu.com/7.htm&utz=1441524470149 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935|2294|2155|2337|2317|2182|2001


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://flight.qunar.com/?ex_track=auto_55360807

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294|2155|2337|2317|2182|2001|2021; expires=Sun, 06-Sep-2015 10:28:08 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:28:08 GMT

Content-Length: 164
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://fligh
t.qunar.com/?ex_track=auto_55360807">here</a>.</h2>..&l
t;/body></html>..HTTP/1.1 302 Found..Cache-Control: no-cache.
.Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expires: -1
..Location: hXXp://flight.qunar.com/?ex_track=auto_55360807..Server: M
icrosoft-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShow
TG=1935|2294|2155|2337|2317|2182|2001|2021; expires=Sun, 06-Sep-2015 1
0:28:08 GMT; path=/..X-Powered-By: ASP.NET..Date: Sun, 06 Sep 2015 07:
28:08 GMT..Content-Length: 164..<html><head><title>O
bject moved</title></head><body>..<h2>Object m
oved to <a href="hXXp://flight.qunar.com/?ex_track=auto_55360807"&g
t;here</a>.</h2>..</body></html>....

GET /mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve2826cc.css HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:41 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:41 GMT

Last-Modified: Wed, 02 Sep 2015 08:20:00 GMT

Content-Type: text/css

Content-Length: 1340

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........XK..6.. .[[5.B.<...pIr.^.KN{r.h.2..I.{...OK...ffS)[email protected]?
...q..^.B..gM.........WA.9"'....Y.....;.8..^b.....qLr.P..Q..(!.D.IF.._
..W./.YB.?....{.._...V../Z*........H.D..o. ....d...7...eQL.....2%..B..
....-Y..f}.W~...k?.....ok...........p.......J.)....) .ap...i..2....RH.
.....}YJ....RF..,A.C..I...$..X.}&..s|.Z.P.....L......E.%. .P.....Y}$pT
..:......6.g..Y6 7.!......R..o.uW.X.~..q.4:M...O,.y...6.Z4.$1[....,.&g
t;... .%... .....C.S....B....`...ff.n..Xh-..<`.G.cx%...7....4...V..
.B/...c4........t....r.n..p....R<(... ...,(.m.S.*N_1e..1..s....('..
C..,M9DN-i.0JM...OK.N.5....~..6.......B}.|.3"......i.....]...!.B|'3K.K
..=.6....... 1e.. =V..&...-n.y.......:j]..`......d.e.T..%..'...,y.i..@
og\.....e.g.$p.*.Tt....*.....B........\*.oi......E\.8b...MZ8..i..]..S'
<C.......cq6.5.r1......o.."....VU.p....<*...J.... .V...an3.i.Ln.
..T.r...."...4.A\..6'.-..K....'-z.9..............o..q1...`...._.ewF..^
X.....s...e...0....]....'.bg..V....^...VU......3....5.{rT.R..![X....`5
..y.T.i.Y....S......z\=..j..~.W.Y_5..W..>...Bp[\...s...!.{....N .#$
....T.!.w.o....&..P3..4]P0...b..O_..r.DMvM..Wzn..L../7f...&...L...A.f.
..5....Q..z..".|.Cm.....T.'5..V......w:....e...T jn.?....ic...._...q.6
l...EN...j6u8.~....O6...k......_..Z.t......... '?...}w..I;....|.!.....
..%4=.......$.....&).......OW.;..o>C{^....M....d.GX...XP-....[...\.
-....~`.(..=2.....w[...].....a........
<<< skipped >>>

GET /mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve2826cc.css HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:42 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:42 GMT

Last-Modified: Wed, 02 Sep 2015 08:20:00 GMT

Content-Type: text/css

Content-Length: 1340

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........XK..6.. .[[5.B.<...pIr.^.KN{r.h.2..I.{...OK...ffS)[email protected]?
...q..^.B..gM.........WA.9"'....Y.....;.8..^b.....qLr.P..Q..(!.D.IF.._
..W./.YB.?....{.._...V../Z*........H.D..o. ....d...7...eQL.....2%..B..
....-Y..f}.W~...k?.....ok...........p.......J.)....) .ap...i..2....RH.
.....}YJ....RF..,A.C..I...$..X.}&..s|.Z.P.....L......E.%. .P.....Y}$pT
..:......6.g..Y6 7.!......R..o.uW.X.~..q.4:M...O,.y...6.Z4.$1[....,.&g
t;... .%... .....C.S....B....`...ff.n..Xh-..<`.G.cx%...7....4...V..
.B/...c4........t....r.n..p....R<(... ...,(.m.S.*N_1e..1..s....('..
C..,M9DN-i.0JM...OK.N.5....~..6.......B}.|.3"......i.....]...!.B|'3K.K
..=.6....... 1e.. =V..&...-n.y.......:j]..`......d.e.T..%..'...,y.i..@
og\.....e.g.$p.*.Tt....*.....B........\*.oi......E\.8b...MZ8..i..]..S'
<C.......cq6.5.r1......o.."....VU.p....<*...J.... .V...an3.i.Ln.
..T.r...."...4.A\..6'.-..K....'-z.9..............o..q1...`...._.ewF..^
X.....s...e...0....]....'.bg..V....^...VU......3....5.{rT.R..![X....`5
..y.T.i.Y....S......z\=..j..~.W.Y_5..W..>...Bp[\...s...!.{....N .#$
....T.!.w.o....&..P3..4]P0...b..O_..r.DMvM..Wzn..L../7f...&...L...A.f.
..5....Q..z..".|.Cm.....T.'5..V......w:....e...T jn.?....ic...._...q.6
l...EN...j6u8.~....O6...k......_..Z.t......... '?...}w..I;....|.!.....
..%4=.......$.....&).......OW.;..o>C{^....M....d.GX...XP-....[...\.
-....~`.(..=2.....w[...].....a........
<<< skipped >>>

GET /mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch_active.2x278965.png HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:43 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:43 GMT

Last-Modified: Mon, 24 Aug 2015 12:00:00 GMT

Content-Type: image/png

Content-Length: 2398

X-Cache-Lookup: Hit From Disktank

Access-Control-Allow-Origin: *
.PNG........IHDR...F...F.....q.......sRGB.........IDATx..[kl\...3.:!lq
.Z..T.R..RJ.B...._HE........~X<jP......yX...nK..m...R...D.B..$....F
[email protected]......:..wf.......u...9.;[email protected].\...L...{w
...O|.(..(n"....O....d.. .#...O2.q.. .._E...l6/23qM;1...u'..^..|[)....
..:..N(Ro..I.*......F.2.T.....k..u..- .jT.R..}e..=.......i#...o.p....p
......AOy.4.....j`.V....,.....h.z.G..s..:1.p.|.>..N&.kX.;...t.ISO:.
t~..!67......q..YU..nyd......H....ci.N k./e....E....:...VG.|U.A...n.}.
 W......$..Q..........6<..x..^.U11...z5<....E.S..t.2H...</...
1.....auwKKE8ty0....w..C#..)..6...).Fl..`.Zpj..-...X.oe..!EE..R....jc.
.g.m9..............V,Os/...>.S4...6R.....Y.a..r.U..$..O..E.=z.."...
.Q.....H..=..,..y.~<_...Q.....E..3.U....l.s..>..T=f...fL. e..)3.
....I...ce...];.'.9~x.# Zt..Y........j..c.G]X....$.x.s...ZY....7..."..
.G..=..%......).........k. (...fr...J...,...>a.........a]..........
*.)...D..h..........F&...).*....I.R./..s..R..]|P..6.Xw....?....[......
ZZ6........I..[....QK....'.8..`.l.l*..:`u.D#..I.......I.%T.>.....9g
('1J..d....."R...L*/)<.0.mR........W....K?Y...7V...[..I....RWRy)..e
Im..../.....O.]S...CW|.k...nG.A.s.....x.B...e....S|..T...f.JL......MC.
:V.....bu.2..g...am.S....N.P..V_).}......E..:1...........M........J|.\
.....F9.....U...f...(.XQ........,._l.o%.A*.D..M.\............L....d...
O......[.K..J.^.sr.|.. >.o6...5N.rr..ng=.1Q.Gl!~.fh........w...>
q.Q.(f.1h.n.u..|....O.............q*..Y'....I.. .....Y..^..B...4.....3
W... ..jE.6Tvb...........D.....`.,......rm...Y.ij\r.H.R.vlJ.H.b.r.<<< skipped >>>

GET /mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_combo2826cc.css HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:43 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:43 GMT

Last-Modified: Wed, 02 Sep 2015 08:20:00 GMT

Content-Type: text/css

Content-Length: 7398

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........].s.:..W|.M.......93...I..i..|[email protected].....
Z...vW.....m....kD.zl...._xV..]?....&....g..alx.Sl.]...C?......bk..<
;.&.F.;........8..f......rQ...N..5......>X....E.."..}.[N...C.../. .
...{.(.u.^...eh..qh..-......4.p.~`X..M{.`. ..........{.P).8.8...S....^
..(g..L.....0.f...'.%...~.F..L4.yj/...r...]....kE.. .j.NL......czNmbL&
@.\...V...........^g.1v}..k.~.j..^..!..&`@.....H4J..?r..{....so.SF....
./gNl..=..y~87\..$T..pf;.Y....PPN..=. ...m9....m{..Y..9..Iy.?..E.....P
.4.....v.....02}.L^.%C#i9P...{.ge.......&...X1....xj....=..........xZ.
.... .M].l.....&....a9....u%.G-.%.6.....L....'.U:....o..._.f.e.^.Q....
....ggEI"......1.B.........9.t.0.).y.\B#.....B2.s...D9.&%.DnTkL00...A.
c.4..=x..A".. .K........:[email protected]..}...0{I.%.Jj .. ......E1
\..5C2.K..6.....)..44.0\.G#.......=.XS..xS0z#[.w.....K....?....]../...
....;........~....^]....}...j....R..G......y3...oW..o?..L.L .........p
f........s#2..?9......-qwo....].].=.............9.|f.4.....7..N...>
...r..t..<x<r..O.t..M.....`O..[.....a.{......e....W.'G.....d....
.=3.|...........P....;.} .>..W.......d0....{.............~....?..-?
......[......6...M....>..7.{....l.....{??.....a.....q;.'g."?w..gy0Y
....s.R.....Mwwu>....V....<..$...../.2p.....,...:...o...........
'....]t...q.M...:.;............s7..7......H....0o'....^...k.9w.......%
......_W_...E...;.uf.......W..n'>?.|9~.z.:.j...].-.....]}.~......=.
._{.16.:....`>...u1....uj......x...p=.f..Q..NO/.0{.|.>.~.N...y"-
.o.......g...........f.-.tv*.K..\...c....#U<.y~w.....o..]......<<< skipped >>>

GET /mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch_active.2x278965.png HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:43 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:43 GMT

Last-Modified: Mon, 24 Aug 2015 12:00:00 GMT

Content-Type: image/png

Content-Length: 2398

X-Cache-Lookup: Hit From Disktank

Access-Control-Allow-Origin: *
.PNG........IHDR...F...F.....q.......sRGB.........IDATx..[kl\...3.:!lq
.Z..T.R..RJ.B...._HE........~X<jP......yX...nK..m...R...D.B..$....F
[email protected]......:..wf.......u...9.;[email protected].\...L...{w
...O|.(..(n"....O....d.. .#...O2.q.. .._E...l6/23qM;1...u'..^..|[)....
..:..N(Ro..I.*......F.2.T.....k..u..- .jT.R..}e..=.......i#...o.p....p
......AOy.4.....j`.V....,.....h.z.G..s..:1.p.|.>..N&.kX.;...t.ISO:.
t~..!67......q..YU..nyd......H....ci.N k./e....E....:...VG.|U.A...n.}.
 W......$..Q..........6<..x..^.U11...z5<....E.S..t.2H...</...
1.....auwKKE8ty0....w..C#..)..6...).Fl..`.Zpj..-...X.oe..!EE..R....jc.
.g.m9..............V,Os/...>.S4...6R.....Y.a..r.U..$..O..E.=z.."...
.Q.....H..=..,..y.~<_...Q.....E..3.U....l.s..>..T=f...fL. e..)3.
....I...ce...];.'.9~x.# Zt..Y........j..c.G]X....$.x.s...ZY....7..."..
.G..=..%......).........k. (...fr...J...,...>a.........a]..........
*.)...D..h..........F&...).*....I.R./..s..R..]|P..6.Xw....?....[......
ZZ6........I..[....QK....'.8..`.l.l*..:`u.D#..I.......I.%T.>.....9g
('1J..d....."R...L*/)<.0.mR........W....K?Y...7V...[..I....RWRy)..e
Im..../.....O.]S...CW|.k...nG.A.s.....x.B...e....S|..T...f.JL......MC.
:V.....bu.2..g...am.S....N.P..V_).}......E..:1...........M........J|.\
.....F9.....U...f...(.XQ........,._l.o%.A*.D..M.\............L....d...
O......[.K..J.^.sr.|.. >.o6...5N.rr..ng=.1Q.Gl!~.fh........w...>
q.Q.(f.1h.n.u..|....O.............q*..Y'....I.. .....Y..^..B...4.....3
W... ..jE.6Tvb...........D.....`.,......rm...Y.ij\r.H.R.vlJ.H.b.r.<<< skipped >>>

GET /mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_combo2826cc.css HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:44 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:44 GMT

Last-Modified: Wed, 02 Sep 2015 08:20:00 GMT

Content-Type: text/css

Content-Length: 7398

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........].s.:..W|.M.......93...I..i..|[email protected].....
Z...vW.....m....kD.zl...._xV..]?....&....g..alx.Sl.]...C?......bk..<
;.&.F.;........8..f......rQ...N..5......>X....E.."..}.[N...C.../. .
...{.(.u.^...eh..qh..-......4.p.~`X..M{.`. ..........{.P).8.8...S....^
..(g..L.....0.f...'.%...~.F..L4.yj/...r...]....kE.. .j.NL......czNmbL&
@.\...V...........^g.1v}..k.~.j..^..!..&`@.....H4J..?r..{....so.SF....
./gNl..=..y~87\..$T..pf;.Y....PPN..=. ...m9....m{..Y..9..Iy.?..E.....P
.4.....v.....02}.L^.%C#i9P...{.ge.......&...X1....xj....=..........xZ.
.... .M].l.....&....a9....u%.G-.%.6.....L....'.U:....o..._.f.e.^.Q....
....ggEI"......1.B.........9.t.0.).y.\B#.....B2.s...D9.&%.DnTkL00...A.
c.4..=x..A".. .K........:[email protected]..}...0{I.%.Jj .. ......E1
\..5C2.K..6.....)..44.0\.G#.......=.XS..xS0z#[.w.....K....?....]../...
....;........~....^]....}...j....R..G......y3...oW..o?..L.L .........p
f........s#2..?9......-qwo....].].=.............9.|f.4.....7..N...>
...r..t..<x<r..O.t..M.....`O..[.....a.{......e....W.'G.....d....
.=3.|...........P....;.} .>..W.......d0....{.............~....?..-?
......[......6...M....>..7.{....l.....{??.....a.....q;.'g."?w..gy0Y
....s.R.....Mwwu>....V....<..$...../.2p.....,...:...o...........
'....]t...q.M...:.;............s7..7......H....0o'....^...k.9w.......%
......_W_...E...;.uf.......W..n'>?.|9~.z.:.j...].-.....]}.~......=.
._{.16.:....`>...u1....uj......x...p=.f..Q..NO/.0{.|.>.~.N...y"-
.o.......g...........f.-.tv*.K..\...c....#U<.y~w.....o..]......<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/biz_wap/moon275627.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:44 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:44 GMT

Last-Modified: Thu, 27 Aug 2015 03:20:00 GMT

Content-Type: application/x-javascript

Content-Length: 1456

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........Vmo.6..._as.#U.lgC.Yc...(..C.~r2...[.L.$..E.o..E.r.u....H..
.w.=w..Jf6W2... .{.uw.....R.?.~.@$/g._...N....bc.n.....6..y....N.....R
.........>...ip.t.......0.....6J......M......M,.L..hu.Wa.......Jh.$
..^..48...N.....:..7......................=Y.E.N.O....7I...R....k..u.6
.L.:......B.\.3.9W.c.....:[email protected]_...<...=.l?_^.g:.
..9.H......L./`..wF..v...\..u...:YB..`.]../.Q .Ft/.....%.E.Q.."...1..K
.f.......-......L.(...p........8:={2....D...A^.%....`H.3...`.C..!Wv..G
<.c..-.X.T....TD.......'.#.'4......l......&.4UY*m{.>i..I.....NR~
..)..}.2f....RD.|.<...U[....:.....z....U....]...*..h.`.o.u.......?Z
.....-UVm...Z.e]o....B..yq.;_...........]....,..g......P|).....*......
BV...B)/..\.v....4....Is..}...r.......x.Q..5 })nf.Q..... 4...4\M4..<
;.%D.LDPN.l...s.Kq.{..p..0;b.....g..-.9....|......n.F[b...&3*l..v.8k..
J.U....}..N...-C..OOG.#-Lr}.|..d...o......0.........3O.Q]...`........)
g..hz...02...3.......#q..S9.....D .x....4L....p@(.. .1.Hl"..GW.wC...J.
.......<C....t./..VB~.E..i....[zk.m{Y./....e......kF..X.9...{Ti.:..
i.c....{...x.&O....(...P......X..).'.......|..E...AJ(...U^..d|.S]g.!o.
(..[.]..T..2........h.]...[=ZE{i....4...TZ.ax/.y....#...#.o.....s.t..7
[..N.T....7?..Ls...q.`C.q...nY<.Q..O.!1..K..U'Fg.S.`.c...;..W....7.
2...B7l*p....ceZ..t......h......ye.|;...T.^.....\]...E..ruo..u..'..E..
..i.5..,....])....#}....4...3...\.;.k.[&.,.\.\....#.....:....{..7...0{
..r*.........6..B-6.J8..u.'X?.9..8.5....$.....D.~g|'....k^....!Tt.~7H.
..l...........
<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/biz_common/utils/report275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/cookie275627.js,/mmbizwap/en_US/htmledition/js/pages/voice_component275627.js,/mmbizwap/en_US/htmledition/js/new_video/ctl280b59.js,/mmbizwap/en_US/htmledition/js/appmsg/reward_entry2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/comment2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/like2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/a281ad5.js,/mmbizwap/en_US/htmledition/js/pages/version4video282222.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/storage275627.js,/mmbizwap/en_US/htmledition/js/biz_common/tmpl275627.js,/mmbizwap/en_US/htmledition/js/biz_common/ui/imgonepx275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/attr275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/ajax275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/string/html275627.js,/mmbizwap/en_US/htmledition/js/appmsg/report27ff13.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/class275627.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:45 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:45 GMT

Last-Modified: Tue, 01 Sep 2015 12:30:00 GMT

Content-Type: application/x-javascript

Content-Length: 12754

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........}ks......_1..z.m._$g...v.5...1..p8...(6A.......D..{.a.tr.b.
........>.....VR8..ef.../8......M..:. ...........z.$g.Kd...i...xn..
YvX....Q.".............. uCr/.....f! Q7p.%..@\..=...wo..;.Y .004.Yx..W
...F.........^.:$j$P...3Y.4.(.-..F....Y..eR.4..........fzF.!nT..;zd...
...-.....`...V.a.U5R.>{...="IY...."{...RJ.;...l. G..........:....J.
.$5..o.$.7W-LU...&o.d.......g....{..H.*............m...r..e.}[..`...1l
=...)......d.u.......m.F6...QU...`....$.....:...v........ac....n.c.X.I
N.....b.X.A6...nLA.....<GVd.V-....#.].a..wE.u......GN......X....3&l
t;[.*../..um...?..t*a....i...\....E....4.^ .2..$x...MSBW.....\...1.)..
'...r........X.C.&.....$.....K.u....I".....7..l...r.....t.<9R.....e
...J*..r.n.G.... ...^..zQ;..0:Y ..).V7..y....mK._.5".6.7Y2. ......$x..
......&..aE.......g.20.d-.[.)[e..!..z.......D..]...........E.2.E9/Y;&g
t;Q.[[email protected]/..B.g..l^-(%]1..Y...`BbC.8.NP..U.T
hc-...p..&B-..j.E...c..*.s....vsjM....i.T.)...E.....x.......4o!.j..hy.
..a.....a.*.[`..(..Le......QvLf.u....\.:. Q.v.veEH~J{.$!.V.|2Rx....M.7
....j.P.^ c..`&~l..h...0....U.r5-Y...bq.?......e Z...z^.f.Hm...t.R...G
(..&.N..Q.R)6 ..Dc...h_H..FiV:=a....z..ULr..........vm..e\......@=.d..
.Ff>..L.!I.x... ..."...uT...qW.U.....s....H......."g.PHZ.m{I7..f.2{
.C.>...D.$.....*......W......2..Xae.......5..S=..i...../ciU*;$.....
..*.$.....li5E....Fg9.w3f-W']d.eTc....*{as......0.<..b..uM.% c/..;.
...kHe......1.Z..;.....2...t.p......V.~..ED..Z.O3...AR,./H.b1.i..f99.u
Q....J,....r...s.....zV... ..5R8...j..Q..U.'Cc.u..b.WTn3.b..|B....<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/biz_common/utils/url/parse275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/device27f470.js,/mmbizwap/en_US/htmledition/js/appmsg/index280a8c.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:45 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:45 GMT

Last-Modified: Fri, 28 Aug 2015 07:40:00 GMT

Content-Type: application/x-javascript

Content-Length: 5233

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........[iw....._a.}u...$[vR....4Q.'^..X.:4.I.).!!/..........o>.
$..`0.3.fL'....e..\>.s.....Z..k.N.Q.kD...c..].....5...F$B...WKz6B-.
.{'......?.3..#.....D#=..".....j...........L{..{.T....-......N.N..Cl..
.n..U4;@3.b..........o..>...r....f....W.;...|....<j.nD.0........
...a....:5.....$.......F.1.E4.X...I}..........S_h....)......v..EM[#.nG
=. .!z.1.r.k....L.Q3..#[email protected]....`.9......... 6.
x..#..a....s\...l..........=......^..4}..~...O7.H....;..i....m....nd..
; ?...U&za.w..2..........J|.zVh.P..o........E...{...<8...1.g.?1....
\.U....[...t?.....-m8n.M..[L7.l..i...z...^..._:.........;[email protected] [..!?.
Q.z%W-.S.[y./.h..fc.w.}>.F....~t...\.Y...a..>4......:yn.l....Q..
...`.,..q.?......`..&.c........0..nFbpt.o.G.ak...y.sS.N.it'x..o.....X7
_.p.tF7.N.......0`..B.F<*......B>.....<'....<.|....G.U....
..!.<zEo.g.|.ot...8!.....N<C.Y.....F.!..8 ....Z..h...eo.O.....7y
d..|{..a..h....o.RW(....{5M.....{!.3.>8.(.t......k.-.G....u#.x.....
&^.l....-.}....A;j.......!..!..n..7...f...{.F.&l..E=. ..^g...V.u0.M`..
...k....IS2vr.u.j....L.gP..Y.0 u..Qkj...Pm...SIh..P..#....E..I.kH.9R."
DU..R.5.....j......................5......9.f..&'.!!].|.T..VL9...H&...
P.d..W.`....19...,8......I..9..kg<.....B)..y..];...6/.C...Xy.... ..
...r{.A..y/.X.....vm..c.0F...P>...{6u..MPR....&r8...NS......ND5.Wo[
...S..s..r......88...|....5.uVN)......."q...s.?.^|..z.&g~.....?>...
....[...././.-r..9Al...)..c]m.zzc#T.3.8.6..}...q..\...6.{....2..T.S*&g
t;-._._..Z.(J..............7...../..M./.!.N(.....2...9.........;.t<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/biz_common/utils/report275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/cookie275627.js,/mmbizwap/en_US/htmledition/js/pages/voice_component275627.js,/mmbizwap/en_US/htmledition/js/new_video/ctl280b59.js,/mmbizwap/en_US/htmledition/js/appmsg/reward_entry2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/comment2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/like2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/a281ad5.js,/mmbizwap/en_US/htmledition/js/pages/version4video282222.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/storage275627.js,/mmbizwap/en_US/htmledition/js/biz_common/tmpl275627.js,/mmbizwap/en_US/htmledition/js/biz_common/ui/imgonepx275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/attr275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/ajax275627.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/string/html275627.js,/mmbizwap/en_US/htmledition/js/appmsg/report27ff13.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/class275627.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:45 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:45 GMT

Last-Modified: Tue, 01 Sep 2015 12:30:00 GMT

Content-Type: application/x-javascript

Content-Length: 12754

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........}ks......_1..z.m._$g...v.5...1..p8...(6A.......D..{.a.tr.b.
........>.....VR8..ef.../8......M..:. ...........z.$g.Kd...i...xn..
YvX....Q.".............. uCr/.....f! Q7p.%..@\..=...wo..;.Y .004.Yx..W
...F.........^.:$j$P...3Y.4.(.-..F....Y..eR.4..........fzF.!nT..;zd...
...-.....`...V.a.U5R.>{...="IY...."{...RJ.;...l. G..........:....J.
.$5..o.$.7W-LU...&o.d.......g....{..H.*............m...r..e.}[..`...1l
=...)......d.u.......m.F6...QU...`....$.....:...v........ac....n.c.X.I
N.....b.X.A6...nLA.....<GVd.V-....#.].a..wE.u......GN......X....3&l
t;[.*../..um...?..t*a....i...\....E....4.^ .2..$x...MSBW.....\...1.)..
'...r........X.C.&.....$.....K.u....I".....7..l...r.....t.<9R.....e
...J*..r.n.G.... ...^..zQ;..0:Y ..).V7..y....mK._.5".6.7Y2. ......$x..
......&..aE.......g.20.d-.[.)[e..!..z.......D..]...........E.2.E9/Y;&g
t;Q.[[email protected]/..B.g..l^-(%]1..Y...`BbC.8.NP..U.T
hc-...p..&B-..j.E...c..*.s....vsjM....i.T.)...E.....x.......4o!.j..hy.
..a.....a.*.[`..(..Le......QvLf.u....\.:. Q.v.veEH~J{.$!.V.|2Rx....M.7
....j.P.^ c..`&~l..h...0....U.r5-Y...bq.?......e Z...z^.f.Hm...t.R...G
(..&.N..Q.R)6 ..Dc...h_H..FiV:=a....z..ULr..........vm..e\......@=.d..
.Ff>..L.!I.x... ..."...uT...qW.U.....s....H......."g.PHZ.m{I7..f.2{
.C.>...D.$.....*......W......2..Xae.......5..S=..i...../ciU*;$.....
..*.$.....li5E....Fg9.w3f-W']d.eTc....*{as......0.<..b..uM.% c/..;.
...kHe......1.Z..;.....2...t.p......V.~..ED..Z.O3...AR,./H.b1.i..f99.u
Q....J,....r...s.....zV... ..5R8...j..Q..U.'Cc.u..b.WTn3.b..|B....<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/biz_common/utils/url/parse275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/device27f470.js,/mmbizwap/en_US/htmledition/js/appmsg/index280a8c.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:46 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:46 GMT

Last-Modified: Fri, 28 Aug 2015 07:40:00 GMT

Content-Type: application/x-javascript

Content-Length: 5233

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........[iw....._a.}u...$[vR....4Q.'^..X.:4.I.).!!/..........o>.
$..`0.3.fL'....e..\>.s.....Z..k.N.Q.kD...c..].....5...F$B...WKz6B-.
.{'......?.3..#.....D#=..".....j...........L{..{.T....-......N.N..Cl..
.n..U4;@3.b..........o..>...r....f....W.;...|....<j.nD.0........
...a....:5.....$.......F.1.E4.X...I}..........S_h....)......v..EM[#.nG
=. .!z.1.r.k....L.Q3..#[email protected]....`.9......... 6.
x..#..a....s\...l..........=......^..4}..~...O7.H....;..i....m....nd..
; ?...U&za.w..2..........J|.zVh.P..o........E...{...<8...1.g.?1....
\.U....[...t?.....-m8n.M..[L7.l..i...z...^..._:.........;[email protected] [..!?.
Q.z%W-.S.[y./.h..fc.w.}>.F....~t...\.Y...a..>4......:yn.l....Q..
...`.,..q.?......`..&.c........0..nFbpt.o.G.ak...y.sS.N.it'x..o.....X7
_.p.tF7.N.......0`..B.F<*......B>.....<'....<.|....G.U....
..!.<zEo.g.|.ot...8!.....N<C.Y.....F.!..8 ....Z..h...eo.O.....7y
d..|{..a..h....o.RW(....{5M.....{!.3.>8.(.t......k.-.G....u#.x.....
&^.l....-.}....A;j.......!..!..n..7...f...{.F.&l..E=. ..^g...V.u0.M`..
...k....IS2vr.u.j....L.gP..Y.0 u..Qkj...Pm...SIh..P..#....E..I.kH.9R."
DU..R.5.....j......................5......9.f..&'.!!].|.T..VL9...H&...
P.d..W.`....19...,8......I..9..kg<.....B)..y..];...6/.C...Xy.... ..
...r{.A..y/.X.....vm..c.0F...P>...{6u..MPR....&r8...NS......ND5.Wo[
...S..s..r......88...|....5.uVN)......."q...s.?.^|..z.&g~.....?>...
....[...././.-r..9Al...)..c]m.zzc#T.3.8.6..}...q..\...6.{....2..T.S*&g
t;-._._..Z.(J..............7...../..M./.!.N(.....2...9.........;.t<<< skipped >>>

GET /js/s/e6u5-min.js?101016 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 30 Sep 2015 20:39:18 GMT

Date: Mon, 31 Aug 2015 20:39:18 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 969

Last-Modified: Tue, 01 Jul 2014 23:47:10 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 yfdx34:2 (Cdn Cache Server V2.0)

Connection: keep-alive
...........U.n.6.}/..p..K....C..j.l.]l...iR..E.....L.$e'.......q......
y...9sT.J8.U'M...Ts[Q6.q.).rHB.(>.%w....*j....v.....U..M.m...2..R..
{.mA.&.an.....B$U....J...x...t...v...a.d.n....F6...6.t/<;........0.
....s.1..Gg......}...j?...H.....M.yZ.Q'0.5%...-o.n]...h./..q....y...w.
MQ.........`.3..5.S.....F...Z}.wmj.........x...H..0..n..A.....A"......
.%.$Y@.)..... .l-..~..o./..k. ./. [$.I.E;.."1?{.bL.l.,O..{yuA.U.9.....
.s=l...t7.m3..T%.....^.l8..........z:.......'A.......=#....P.N....Ul.q
......oW._..).MV..SBXd..9.....vz...g}.L7... C.:....(.4.%. ..N.D.t=.J..
.....;.g.l..#..MX.w.'...`b..f...p.g.U.4..&c....B......]~...k..@^q....o
FY....-}..Z....................P/h......f....$...`...YSk~./.....:..af.
.!..x.-k..<.g......c0.........Bl.0....<...*...U...,./....r,D6...
......N.....o.0......FS..W........~|.......T..95.<rO.$....}.#......
$....Ff ...I$T.FU^<.I{.3QS5$.,.P].M..P...a...Xw^.:....|Z.......o...
.*.3..~..m~...a3........'s%.0lA=.. ..^.m.6..z.5...H=|..m...oQ.5..?....
.=._.......


GET /csjs/_/mm_z.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 22 Sep 2015 22:26:43 GMT

Date: Sun, 23 Aug 2015 22:26:43 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 50262

Last-Modified: Fri, 27 Feb 2015 08:10:00 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 guigu229:80 (Cdn Cache Server V2.0), 1.1 yfdx33:0 (Cdn Cache Server V2.0)

Connection: keep-alive
............}w.F./..~......M. .......l....8........EJ.I..mE.w.~...F...
L.;{..9.I4.........b._..]..d7.........*..............o......6....y.M..
..M.Z.w.......m2.[.'..r.lz..v.......E..5....`bHw..".'w...bj........v..
...7_Op.......xl.z.....y|....~.Y].w.l......]........l.d.7o..r.,.....N2
xu....W.Q.O.7....{.h..z8..J/...`.v_]O...O...w....v....C.'.z..v..g:...V
.[..^o......=....xg...h-...Q...~.Nn.....z.n.v....5^..dy...wf.2...[....
.:y..ww.w4.o..m2..}....cd0O..O.O7.w..=..Y..LL...S......m~.n...<..n.
kI?O..._....@?)...d<._&Y^t....h..g...:.......3.. ..Q.....#%.fc2..h.
.'#..V#[$.m.|q..Y....d.]/..Q#]...F..|;O.....f..$_6......<....:_..[.
.o..Y..9....*..m........|..r....%.fW.h........r}.k.M...x.W.....ok4..75
..Vv|V....<.k.....%..N.k.0...v..|X|..t.7.[.q.5....f..X....w..... .y
6./&..._.....r.....j.....#B....t....^...f..Y...2..'!.........Y.b..w.]&
lt;Z.].[...?o...........}..Df.7...|..g.............e.S{..gy38>...e.
...o...<J...5..lN.4.?._..az.z.h...;..o......O'..@}..........d1.>
\.y.(...2o....a H"...^<Z.8..7.7m...y..o..2.....Sx;..lW.qc.O....q...
./.D.B1...0~..K W..........x...k6v.y.x<n$.'.._.>...7y...d....f..
q2o3b..~...oP.2M.....)....1...........XHX...<: .d]....n..%^.......n
.k..gE.3E..}f.....j.....H..q.\......2...ykJ|...........d7;~.....z...sK
nn1....&.ia......P........-.|~>.......n....>...l...}..J_z.].{.y.
|...k.....[xr4-.V...X #......z.....$(..o.B8..inm.....#...M..*..\...6:.
..f.!c..h.......{._.TgkB.."...z|.R$. ~.Lp~3.i.WG.x).2....'f...C...~...
..)|.z.o.%P..........L.......`.....Y{.....$.YVLb.`..py6TJ.0H.zN.Z.<<< skipped >>>

GET /js/s/iwt-min HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:02 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /vataplan?framId=topicLinkL&f=s&cur_page_num=0&rep=1&tag=99&vataposition=QNR_ZTc=_CN&vatacon=&rows=1&qtype=js&vataframe=bannerDefault&callback=QNR._AD.topicLinkL&ab=b&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: a.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Type: application/x-javascript;charset=UTF-8

Content-Length: 917

Connection: keep-alive

Set-Cookie: sn=1441524494_1; path=/; expires=Sun, 06-Sep-2015 15:58:14 GMT; HttpOnly

Server: QWS/1.0

QNR._AD.topicLinkL({.  "response_stat": {.    "elapsed": "4446",.    "
url": "notshown",.    "stat": "success".  },.  "key_data": [.    {.   
   "description": "VIP..................50.........",.      "e": "hnS4
HKYrfnjbBOPdyLwXq28Kd38Jwi4SUX7du2aUtazWmn48OTF2BkNmrM8xaVwT2AoaejI pz
6/NLHk 4v6qAkie9eJN0uB5jYtScx6aznGGtZEqq6M2RCZTV0QNXgnv6uypwlF5KYtpnSp
N7rC6Gaw SvGh6c3 iig/Ii3bPn42a bOcy1BqinMpp9QPDfYkfjLoeSzvReMO3lfAJE51
PuRd9Ny  0QXpiy0oFnKoUI7/0K4kIIClLg0osqEqXIlVcBdXqpUGDgMXZL2uEfy0raV6w
W9RylsXRUqNp74w49YBy3Bi/ftbsqfGQXKfz766 N8D8e3JEGrrrxVd5H99vT9gE/j1gBf
Fpjff23ituH1PE4RuGqA cPXDLBYAveEOv EvsqOLUt3QAeR9zaiAErjuy3tnFKECy4gJK
XSduYXI=",.      "img": "hXXp://img1.qunarzz.com/qs/201405/08/f1f51d8b
645559506886324a.png",.      "show": "VVV.qunar.com",.      "title": "
VIP..................50......",.      "sale_price": "",.      "cus": "
",.      "s": 5863816,.      "margin": false,.      "phone": "".    }.
  ].}.)HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:14 GMT..Content-T
ype: application/x-javascript;charset=UTF-8..Content-Length: 917..Conn
ection: keep-alive..Set-Cookie: sn=1441524494_1; path=/; expires=Sun, 
06-Sep-2015 15:58:14 GMT; HttpOnly..Server: QWS/1.0..QNR._AD.topicLink
L({.  "response_stat": {.    "elapsed": "4446",.    "url": "notshown",
.    "stat": "success".  },.  "key_data": [.    {.      "description":
 "VIP..................50.........",.      "e": "hnS4HKYrfnjbBOPdyLwXq
28Kd38Jwi4SUX7du2aUtazWmn48OTF2BkNmrM8xaVwT2AoaejI pz6/NLHk 4v6qAkie9e
JN0uB5jYtScx6aznGGtZEqq6M2RCZTV0QNXgnv6uypwlF5KYtpnSpN7rC6Gaw SvGh

<<< skipped >>>

GET /vataplan?framId=ifmRightTextlink&vataposition=QNR_OA==_CN&tag=99&rows=14&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightTextlink&ab=b&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: a.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: application/x-javascript;charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: sn=1441524495_1; path=/; expires=Sun, 06-Sep-2015 15:58:15 GMT; HttpOnly

Server: QWS/1.0

Content-Encoding: gzip
596..............[.......S,[email protected].$[.K..*e.^..l..RX....v.%.$Pz..b
[J)M....|....._..N...R....{......4W.....2.Ez....m.0..?x......[.I\.....
/.zx.'[email protected]..<<.8).?i....g/....(.N...tqp..[..O...j..?U.
n.. -.$>O._|p..W...7......7..w|......s.IRF..U.....Q....z..yk.].!..S
}..2..!..!m.....cRK5].!rP.{!..M'.YK.*Q.RC...02.J'M.y\.A......Q!:.nMd{.
W....!.lig.G2..JcLP.....RG."u..n.r.7.<.B..m7B.6..aD...6..;.%.4P.6fP
.2..e........Xu....)...x....u......./.`.`.....%..c;........t1.u....$.Z
Si..v.Ib.U4."[email protected]<`..JMk........&..wQ...m0.Ig.!u&n.X..
....^Q..6...`.....V..T.. U.|....{3..d..u....X...e....=..K.Z..9aI..t..y
$3P.BUf. .Wz...JV.ag.2m7..8....y.....7.../=..'..Mt.F"...WD.....51v..."
.f...#.fk:D.s..G.b%;..;.5..{..ng[.wux.z.jj.j..Q....o.Y. .....e....N.eV
.v... ....... @A$................>...i.;;...w...P.e.j..U...>~...
.....;t..y.^....*...G.G(..^.....l.....5N.$..{E.<....\.p............
......G..w_~.....9....n...|....O.gW.._.w..o..}z.............O..p..N.&l
t;.i.'.}....R..L{>.f3...<m-.....-.@!8.f.0.e..g..... q..[........
..n.%.`q.`.....<.`1..x.!&.E...c...k......-OW....P<.6...7.jdp....
.2......c. J(^).$..b.V....-4.....C..N.\)..Lh.8.4.%...t..9.:l.T..<_8
..L.52...u.Z......b....8c.`[email protected]..`[email protected][email protected].
.....FD.p.N&p......I....c.x.z....&X.......LC.e`.8.Dk....G..\W.U.-.b.7.
.8.#=....fQ '3....C..b".....jk)..j;......a....#.....2.K.`..6k....C....
.;.w.L.;..v..?...c..pw._.l._....~t....g.....;....o:H.4Jc..u.....'.~.om
wL{......0......
<<< skipped >>>

GET /vataplan?framId=ifmRightFlightExt&vataposition=QNR_NmE=_CN&tag=99&rows=1&cur_page_num=0&rep=1&f=s&callback=QNR._AD.ifmRightFlightExt&ab=b&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: a.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: application/x-javascript;charset=UTF-8

Content-Length: 912

Connection: keep-alive

Set-Cookie: sn=1441524495_1; path=/; expires=Sun, 06-Sep-2015 15:58:15 GMT; HttpOnly

Server: QWS/1.0

QNR._AD.ifmRightFlightExt({.  "response_stat": {.    "elapsed": "4237"
,.    "url": "notshown",.    "stat": "success".  },.  "key_data": [.  
  {.      "description": "...............",.      "e": "GeRRyXrxHtISND
HS4IwjuJk4wSC6XnSgnI6IlRSeifUs50D6DmAESOeHUuLUJ/sbzzXr0R/gUyz3Qf5zw6UH
mneraXQomoFHPIfZzruwQhcL4XrKSw2NOXtRuWRMTk5aYzpiBVB0ZvcGfpYREQGMeQJ4 M
JUAqQb0sH48uyDjXDEIulNTWSeqxIolqznMEa OBKpafmR7P3DZZls/8mjlgIepFqB0BOA
ojQ4CP0 0braPOqgsx0jS9BUeT2JnDT bipNBfGzVsBJkb9gtYufKQeiNtuncoR3a/KJk5
FzBC5MHxR5rljZ/y1IFBt8fJGgaasVTrkg1q4TlK5xe9Ti9bjNlVCdyyi5erTwgwMm70/l
7KHnwZeXm 3xSyqLWDXom4UbiueEvMJ5gFSVO0kdz13nC9MksYDbbJp8kebwkc0f9V9EVK
bW/aoJ1LRfRo/FZUsgmMvE3phy",.      "img": "hXXp://img1.qunarzz.com/qs/
1508/da/d41869fb6060c0.jpg",.      "show": "flight.qunar.com",.      "
title": "...............",.      "sale_price": "",.      "cus": "",.  
    "s": 1080094,.      "margin": false,.      "phone": "".    }.  ].}
.)HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:15 GMT..Content-Type: 
application/x-javascript;charset=UTF-8..Content-Length: 912..Connectio
n: keep-alive..Set-Cookie: sn=1441524495_1; path=/; expires=Sun, 06-Se
p-2015 15:58:15 GMT; HttpOnly..Server: QWS/1.0..QNR._AD.ifmRightFlight
Ext({.  "response_stat": {.    "elapsed": "4237",.    "url": "notshown
",.    "stat": "success".  },.  "key_data": [.    {.      "description
": "...............",.      "e": "GeRRyXrxHtISNDHS4IwjuJk4wSC6XnSgnI6I
lRSeifUs50D6DmAESOeHUuLUJ/sbzzXr0R/gUyz3Qf5zw6UHmneraXQomoFHPIfZzruwQh
cL4XrKSw2NOXtRuWRMTk5aYzpiBVB0ZvcGfpYREQGMeQJ4 MJUAqQb0sH48uyDjXDE

<<< skipped >>>

GET /fxstatic/images/bg2013_2015_f530136.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: image/png

Content-Length: 104196

Keep-Alive: timeout=20

Last-Modified: Thu, 03 Sep 2015 10:04:17 GMT

Expires: Sun, 04 Oct 2015 06:23:49 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR............. .......tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:B6888B7301A9E311A0FEE2C23E717AE6" xmpMM:DocumentID="xmp.did:D98F
4461D91711E481E3EB943F2EDF59" xmpMM:InstanceID="xmp.iid:D98F4460D91711
E481E3EB943F2EDF59" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:90B068DDCBAA11E4908E
E92F91D782AD" stRef:documentID="xmp.did:90B068DECBAA11E4908EE92F91D782
AD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.Mw6...4IDATx....|S.........l.l..L.@..!M.B...
.2.f...I.....M3.AvH.......Mh!L3.4.`c<.....;.U.d..xO..|.!..'.......s
..7(33.......A..........;v..........F.g... ...:{"11..L.../H..^}.wJ#?^U
.A . .......RjP.z..&..t........t..>.3n$E...x4....3........F.D....Z.
}a.B....j.}Z...)..*.J)!2.&g.E..\F.z.5...ey.d..|...B.n..s..p%.$...P..A.
....A....l...J.%{......~A. ...6..............=N.J.Y...P......W_...Vz..
gm...P^K[3..o!...).._6.V....)$$...'....&zg.Bzm.}N..*.A.7.&...tJ.T.H...
......O..*.F...<..H..]I...PU.&.$....F&R.e...%<6...z.....3...<<< skipped >>>

GET /t/?t=load&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&l_t=2875&rand=1441524463727&ip=3270664410×tamp=1441524459 HTTP/1.1

Accept: */*

Referer: hXXp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tracker.youzu.com

Connection: Keep-Alive

Cookie: ad_code=150706X7ZzHz4; game_id=100


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: text/plain; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Content-Encoding: gzip

My-app: 200 from 122.227.15.91:80

X-Server: 122.227.15.91

X-Server: 115.182.198.91

28............ N-Q(J-..).R0107.43.....3.......0..HTTP/1.1 200 OK..Serv
er: nginx..Date: Sun, 06 Sep 2015 07:28:16 GMT..Content-Type: text/pla
in; charset=utf-8..Transfer-Encoding: chunked..Connection: keep-alive.
.Content-Encoding: gzip..My-app: 200 from 122.227.15.91:80..X-Server: 
122.227.15.91..X-Server: 115.182.198.91..28............ N-Q(J-..).R010
7.43.....3.......0..

GET /webApi/unpaycount.jsp?format=js&username=null&callback=callback_120887&1441524480274 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: text/javascript;charset=UTF-8

Content-Length: 152

Connection: keep-alive

XQ_POINT: 243

XQ_SPEND: 4

XQ_SEC: 3

Server: QWS/1.0
(function(){callback_120887({"errcode":22012,"errkey":"username","errm
sg":"................................................","ret":false,"ve
r":0});})();HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:00 GMT..Cont
ent-Type: text/javascript;charset=UTF-8..Content-Length: 152..Connecti
on: keep-alive..XQ_POINT: 243..XQ_SPEND: 4..XQ_SEC: 3..Server: QWS/1.0
..(function(){callback_120887({"errcode":22012,"errkey":"username","er
rmsg":"................................................","ret":false,"
ver":0});})();....


GET /webapi/message/unreadTipList?callback=callback_840037&1441524492008 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:11 GMT

Content-Type: application/json;charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0
93..callback_840037({"ver":1,"ret":true,"errcode":200,"errmsg":"succes
s","errkey":null,"data":{"total_num":0,"other":0,"list":[],"login_stat
us":"no"}})..0..HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:11 GMT..
Content-Type: application/json;charset=UTF-8..Transfer-Encoding: chunk
ed..Connection: keep-alive..Server: QWS/1.0..93..callback_840037({"ver
":1,"ret":true,"errcode":200,"errmsg":"success","errkey":null,"data":{
"total_num":0,"other":0,"list":[],"login_status":"no"}})..0....
..

GET /9c/23/o266831357706635.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jan 2016 13:02:46 GMT

Date: Tue, 06 Jan 2015 13:02:46 GMT

Server: ngx_openresty

Content-Type: image/png

Content-Length: 265

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 09 Jan 2013 04:44:01 GMT

ETag: "1559928653"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 czdx84:80 (Cdn Cache Server V2.0), 1.1 sm29:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.......P.....s....b``...p.b``~.d..0....*Y .\......q.... W4.'..........
...?.~..}............ ...`. ......,..,f`...a.Kw....eJ\#J...J...R..S..R
..2.R........M.6]^[email protected]_..oL0... ..E..M....
Q.%..;.xZ<.X.N5.kh..q......A...... [email protected].../.,........


GET /live/2015/05/17/13/1003v1431840649105458010.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 09 Jul 2016 00:32:25 GMT

Date: Wed, 15 Jul 2015 00:32:25 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8206

Cache-Control: public, max-age=31104000

ETag: "3261238805"

Last-Modified: Sun, 17 May 2015 05:30:49 GMT

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:8104 (Cdn Cache Server V2.0), 1.1 sm27:10 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....`.`.....C.....................................%...#... 
, #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((
((((((((((((((((((...................................................9
.........................!1A.."Qa2q........#3..BRb...$4...............
................&......................!.1AQ.."aq.#Br............?.S..
R@t#.......7.y...z.:1. 7^(.4G#.H..%4P..R.....m-...U..q..t...&.r...1.=.
.5.......B..#..`....Q1.Me;v2.U. .}.G%...... '...{..B...`.L...h.Dc4....
.~)H(.T......E.!D..!....4>.c..c.......h."...@....@..?..Lo.HF.E.L..1
...oj......Y.......f..l.K[|......J.-A..&gI.¼..............U......|f.
N.>....v.......z...4.c...M.....B......V.I.1.:......#%.V.H...57.....
.6.V.@C)....F.0......AGl.).<.P.\c.(LY.7.(D'A.Z...I1.....MR.7..h.|$.
.@..&....;.b..T2H.]P..p<.ae..48...Sx....2.ih..c...._e.Mf.]...ass.6P
......Y.B]vm.r....6...W..kt8....5N.8p%."..O,n r.#.>6Su... ...7.....
.....]S.......$.....;x.O.keUF2..mn.O..5.H. ..U9,.L.... ).z..{6v......1
.I......2.h.&.(Q<R[L.2>.g.Z..4w......F....a,[email protected]..$..i...^*..*
...>"s@....... ...0..$..b*............{G..=k....\.C.|....e...Yjv...
.b..F<...,....|yqa....*r.ds..y..FpK..,W....~....II.......-._C\C..2O
...\Tv.O.........,.[...e...rFjN/F....&.V.Te(.Xn...Yih. v.ukn.l....*...
..~x.9&.M.jW1D.9.k).....>\...y..z.*...=a.....Iei.6...y..H..Y.!..~1.
k....SG<.Z.5.........d.^x.B.<..^....J(....E.....B....L..*.f....W
[email protected].......,m..n#w...n.p{Rz.......\...m%.W.5....#....'.?..).I..
'.<c.\_....=..y}..*...n..~..z.....k..P2.[.J...S.e.S.....qq.&.\E<<< skipped >>>

GET /live/2015/09/04/18/1003v1441361998196183527.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:00 GMT

Expires: Mon, 29 Aug 2016 10:33:03 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 6169

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 04 Sep 2015 10:19:58 GMT

ETag: "3562472628"

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 hzh92:8111 (Cdn Cache Server V2.0), 1.1 sm23:9 (Cdn Cache Server V2.0)

Connection: keep-alive
....Np.U....UT.....A.f..p......N..AR.K`..a.:..C.......#EB@:UB...r.}..&
lt;.....s.:..>l.H..T..888.......P..?...{........@H!.0..%&!$}....@..
h..2.......8...l.....\.\H..Hv..Jp@ ...B..P i.h..o=.....-..\.........a.
@[email protected]%H.@.\\.|<.#<\..&............EN........'..4.Y..
~.d..x.yz.7L.....?.....k.........?...39...#.]<(..2..../'[email protected] K#3
!..Q.......sO.7f...I.......DD.......b..i....?.&...,Zf.]...."......d&.g
......4....[...........P....:G.5.%u..9.dEiB...N.rA...!.z.......@b ...I
n...(.....!..H..............j...a........Q...c.4.F..)E.9..Tks..?.3...:
w.yb..)......km.X^....Y......m...3..]!.t...{...B~.Le....r7.....n[0P..'
...[n..yY..C5u.)...([:o..w.N.IZc.=..[...-..F3.9.............o.E=...5..
..2..2..*0...z......B.....I/. u.......@ ..W....Q(<.....O.B...z....d
.F....L..a)os.h......t.y..Rw...&]....cXmK......2..Z.(.....Z...).5..{..
F....*.dJ:k..3....>.q`........`..l..O.c6.V.:]...r.....}....g...8.n.
.Tv.m.H\h%H..j.2.l...m3p[.......gl..{.;...j..b.^* .x.8JZ..f1RcA....2|.
.4....upi.X.6>..D.D.2....t.....$._.4Z=....sF./........V.....T8S...b
K....H.}.K...q.......v.{......s,.8..l...<.........<c:7x%G......_
".._......./[email protected].\.MRW...-1C......vFL ...q&....n.?.......... .u..
.i.{..K..5.o.}....u8.....;.eUG....p!Z.4..u.qs....n...#.....9..s0.2.s..
.u.r[....-.@2!F.l... ..[...Nj7...;..R...Gt"..:....F~ZxA..).L.....I....
............8.|...DR....<.:...|...\h..B'.0.y.*..i&....{....UpG.&...
4<k.X......yF.M...."P...2........P.ao..9..W0._}k.-.pV.e..v........B
...}4........?..I....?...6R{J...i.C(...d.q&t...^...L....O...:.p...<<< skipped >>>

GET /live/2015/08/20/16/1010v1440059547324436188_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 30 Aug 2016 08:16:28 GMT

Date: Sat, 05 Sep 2015 08:16:28 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 9019

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 20 Aug 2015 08:32:27 GMT

ETag: "1752933056"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh91:80 (Cdn Cache Server V2.0), 1.1 sm23:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...ww4.n.nB..#..6...Q......Z...fl5k.^.%V...%.F.......f........
..{.=..y....s........}.......5....@ [email protected]..
s.!.s.AA.1..".........pi..!|QNQNFQJ.!.?"@...6V6~66~..A...o........g.@.
../....w. ...A.....`[email protected]^...O.23.....kP<D
)OR...3......Ve.C.J........V.?.. .....`[email protected]\.W
...c.....M.].p0.....^..V|..Gl..m(^..5........KL.....E.......J.....@L..
.K.....rx.%D....xY$.N.Rl .?]'.....%...8..s(..3\:5p>>...1...f.[o.
G.Ju...Y.j...wN>...w1..9-H....| .0~:.{...M.X../}......x.=.......v.U
69...Ho=W0..J...#.x%dT.k.p.>..*....../:\7..b...r...j.)!.Xb...(7....
.R. .....":!M.2..v..,.%....V...=g'y4.N.......e\....$.5...Z.DX.e... .7~
...D.l.~L..|.vT.......H...<%...U{.L.....(.$...z.s?"..O...ZV.%W.Z1Q.
@A.v....N..."...}.J^........no...7S...W.....O.<.8.....tT...>W..t
......2....{....@......\[email protected]._...c....'h..F....4......J'A..
.b....Tt......X.HEL..g)....o.r..v.%...e..'....j\.uP.I|.K'v..fd3..5..B.
j....rF..._6.O/....x...[...S.zn..gy.H.cHJ.r.d}9...{.#......X.......7..
}.....4j..3p...foW..^).s..o..<.7..Y.1..I.)..............RK\....D.(.
.\.....%`...;.!).=....D>....&.rp.L...{....f.S..q..V_#..{.=.......s.
G.[../.IW.R.{.......2..b.(.....$.pV.QX........`.Q.C.\R...:y.w.A]...f..
.x.....l)S..X.)v.t_8.D.&.....'......p..Vt..P..c....>....-...p^..].%
qy?.....GY..2l....&.[...../...L2.-....|......M.cRk...E.k...k9.Sw.`...$
..g.......O&.m....T%.0GklV.h...Z......W...@.^X..f.T*J............WM.@.
).j.&m"f....@L......[O...w.\<..5.1w.>.......c...#.=.V4......<<< skipped >>>

GET /live/2015/02/24/00/1003v1424708659772115033.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 14 Aug 2016 17:41:33 GMT

Date: Thu, 20 Aug 2015 17:41:33 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8063

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 23 Feb 2015 16:24:19 GMT

ETag: "972821596"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh86:8111 (Cdn Cache Server V2.0), 1.1 sm27:8 (Cdn Cache Server V2.0)

Connection: keep-alive
....3T.T....UP.\.f...........]...7.... ....=.Bpw........35.....U..:._.
...u..........`.o.o..Bi/.%. /..@........$.D$D.$$D$dd$.4l44TT4|L,tl"|bb
"|BBR..T.dt......t...,.$T.8>0q.gbf./....................N..........
....q..z.......... ....Q...YIl.<[email protected]...
.%...;I.-i.R......,.~j.._.)[email protected]......%.<.....A.K....[..
....../.......q;([email protected],..9<*..........)...M...G.....6...v....a.9...,
/..K..C....2..}.u...M.....gcX..k.H0iq7..\. ...!3..uZ.....!.;.P`m#.!,KM
......B..`w..b.h.......V..kB..[......ffi..:.f.Q....O...>...zV.L ...
..^Cy.R...1.m..%.w....".......9%...C'....S..E2.7$. .kk...f..V..o0.D.3]
G.C...ZQVd..U..eL....4nP.M..&<.M.4...%...Gw#A.4..FY>0..k.&...3hK
J.:...y........07.-&....."D...:^.........].8g...MR(U...4......cY.kb..E
..*Y_.).\...~.l..D,...U.....;..~..e.g...dZ..R.lw.$X..4z...........C\..
.Rq7.W3.Y.9.7..?j...Lk...Y.0.F...]....i.y$....>lvxd....!.w...6..gK.
..I....w.O.}.;.v..>0...5..X.L.}d..j.....YL.O..B...;[?A....;9.....b.
...........}....| .{.{...6.i:J.B9a)!6.....uV%....'....A.=.....g6.m.3..
..Lm....Q....3.%...l...W..i..&..,K.G2.: ~.'.IDD....1....?.L..E]F.}gI..
......(=k}.$..Z.~..Au...O.M.8d.q...h..bc{W.6c..c..\.U).^...Gm.J.....=I
.o.............A!.`.X'......N ....J..L....=.......G.....Vy...e8..;~)..
...[%....e.J]...K......{[b..yv...!..|......aI.w..{"......L_{_...Q.I.X2
W.*sd.r].J...2..V.....X..qL.#..:.&y..u....f.PY3..].........\..M......h
..,OY.y..........Ow..Q.......Mpl..."...;....w?.=./...0...~.....z.{4uh.
R....:.W.,... F...E'.......}/....wL...~.s............O>...x..2L<<< skipped >>>

GET /count/headerImageHd HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Length: 0

Connection: keep-alive

Location: hXXp://simg4.qunarzz.com/site/images/zhuanti/huodong/dijia1.gif

Server: QWS/1.0

HTTP/1.1 302 Moved Temporarily..Date: Sun, 06 Sep 2015 07:28:00 GMT..C
ontent-Length: 0..Connection: keep-alive..Location: hXXp://simg4.qunar
zz.com/site/images/zhuanti/huodong/dijia1.gif..Server: QWS/1.0..>....

GET /count/headerImageHd HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:11 GMT

Content-Length: 0

Connection: keep-alive

Location: hXXp://simg4.qunarzz.com/site/images/zhuanti/huodong/dijia1.gif

Server: QWS/1.0

HTTP/1.1 302 Moved Temporarily..Date: Sun, 06 Sep 2015 07:28:11 GMT..C
ontent-Length: 0..Connection: keep-alive..Location: hXXp://simg4.qunar
zz.com/site/images/zhuanti/huodong/dijia1.gif..Server: QWS/1.0..

GET /js/s/login_12 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:06 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 06:26:40 GMT

Expires: Sun, 06 Sep 2015 08:26:40 GMT

Last-Modified: Thu, 06 Aug 2015 18:26:56 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11090

Age: 3699

Cache-Control: public, max-age=7200
...........}iW....w~E\'.U..e...6.^.L$.I.l.,.$......!....~...28.......j
k...,ux2..i.4.......&.rz*N...P........6..........N[...7*."..33.e.{2>
;..I..W..y....:..v.........3.O.T.!...x....e.....t."..2....`*.....$..s.
.$...A .TP..4....;.2..`........).<..>M....uH#8.6%.>.oU.df<
...O..9........rN...dj.}N....i............:.Mh.O.`0R....y.....F.F4..m.
....M6..lzEH.....J.$fy....(.. .....RS.}.Fg}[email protected]&4.]J..F.&...*t
..Q...x..S.~:.R..J...}.mF.fFN...9.......J..!...i.._&..........nLm.)...
.R.e..JJ;.d...@&..H.z .r.....Z..W.]].eg...FT%.=.....o..........mI.....
`....g._..}.zo.....wG.?|....W.*Z..i....|8...&...................=.....
.!....G-..;/.a.D....s...N....W..W@....(5G..].........j*....H.....-T|..
.{..p.p........L....s*.a$..FmI.cE.I;..............(rK.R.Oow ... j.I...
.X..7.!F.T.....I..::...li..(.a...v....U8.o......cg..Z(.7.?.5t.b.....D.
..5.B.....<St.....)..m0.|o-.k......)..,.G.e.....o..../Y.Vo...ZOP_. 
...bu.`......Nch..%N}...)S8NN2.H..t.f.|....B...P.{}...*`.....x.z.W....
......%4....Z.R.g.D".......}...bE.JEGM..N.:......0..P.......MtM.x....R
..?....E.De..4.I.&...5......P..\...".&F[J.E.D..`.1..c.;.7yr.^......w..
...2...:[email protected]..<........0........7Ypyy...
m...p..9.WK7ML..d..Z...7...<...j..Xb.:..mC."..J][.......}.$...!..P3
I=.TU..H.5..1...~.g........s.{..6......p6.T(].t`.<5......."....v<
;....O.RK..Hyx.....-C..:Z......Gg.......z.6K..*I..........&..a6.%$e.B.
[email protected]^%[email protected]`.\#Zl
tI...s9^h..;9G..:n.No.O..t..V...&......09......N..W.....Hv........<<< skipped >>>

GET /r/collect?v=1&_v=j38&a=1521449289&t=pageview&_s=1&dl=http://VVV.yaoguo.com/800374?f=1005&cpuid=214516&ul=en-us&de=utf-8&dt=çµé‚æŒå§¬å°ä¹–ä¹–çš„ç›´æ’é—´ï¼è…°æžœç½‘ï¼å…¨å›½å¤§åž‹åœ¨çº¿è§†é¢‘ç›´æ’å¨±ä¹äº’åŠ¨ç¤¾åŒº&sd=32-bit&sr=1276x846&vp=1256x842&je=0&fl=11.6 r602&_u=AEAAAEAAI~&jid=2092192789&cid=54479836.1441524500&tid=UA-62639335-1&_r=1&z=1444354087 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Sun, 06 Sep 2015 07:28:19 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Sun, 06 Sep 2015 07:28:19 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..GIF89a.............,...........D..;..

GET /live.6.cn/e6u2/r.php?location=v.6.cn/mm2.html?src=tuigao&referer=VVV.cfmogu.com/6.htm&browser=mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; sv1; .net clr 2.0.50727; .net clr 3.0.04506.648; .net clr 3.5.21022; .net4.0c)&flash=10.0&msr=1276,846&uid=0&pro=4&stamp=1441524481493 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: shrek.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Server:  DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:04 GMT

Content-Type: text/html

Expires: Sun, 06 Sep 2015 06:28:04 GMT

Last-Modified: Sun, 06 Sep 2015 07:28:04 GMT

Cache-Control: max-age=0

P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Set-Cookie: __uu=B5144152448406200; expires=Wed, 03-Sep-2025 07:28:04 GMT; path=/; domain=shrek.6.cn

Set-Cookie: __ut=144152448489674; path=/; domain=shrek.6.cn

Age: 1

Transfer-Encoding: chunked

Connection: keep-alive

Via: CT_GZDX_193_144 (DLC-3.0)
1..1..0..HTTP/1.1 200 OK..Server:  DnionOS/1.2.1.2..Date: Sun, 06 Sep 
2015 07:28:04 GMT..Content-Type: text/html..Expires: Sun, 06 Sep 2015 
06:28:04 GMT..Last-Modified: Sun, 06 Sep 2015 07:28:04 GMT..Cache-Cont
rol: max-age=0..P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT 
DEM STA PRE COM NAV OTC NOI DSP COR"..Set-Cookie: __uu=B51441524484062
00; expires=Wed, 03-Sep-2025 07:28:04 GMT; path=/; domain=shrek.6.cn..
Set-Cookie: __ut=144152448489674; path=/; domain=shrek.6.cn..Age: 1..T
ransfer-Encoding: chunked..Connection: keep-alive..Via: CT_GZDX_193_14
4 (DLC-3.0)..1..1..0..

GET /8.htm HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Referer: hXXp://VVV.cfmogu.com/8.htm

Accept-Language: zh-cn

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Host: VVV.cfmogu.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:27 GMT

Content-Length: 105

Content-Type: text/html

Content-Location: hXXp://VVV.cfmogu.com/8.htm

Last-Modified: Thu, 25 Jun 2015 12:32:58 GMT

Accept-Ranges: bytes

ETag: "443c5e1143afd01:3283c"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET
<script type='text/javascript' charset='utf-8' src='hXXp://pic.pay8
38.com/mshow.aspx?AID=10850'></script>....


GET /6.htm HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.cfmogu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:27 GMT

Content-Length: 105

Content-Type: text/html

Content-Location: hXXp://VVV.cfmogu.com/6.htm

Last-Modified: Thu, 25 Jun 2015 12:32:24 GMT

Accept-Ranges: bytes

ETag: "6eb42ffd42afd01:327e2"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET
<script type='text/javascript' charset='utf-8' src='hXXp://pic.pay8
38.com/mshow.aspx?AID=10851'></script>HTTP/1.1 200 OK..Date: 
Sun, 06 Sep 2015 07:27:27 GMT..Content-Length: 105..Content-Type: text
/html..Content-Location: hXXp://VVV.cfmogu.com/6.htm..Last-Modified: T
hu, 25 Jun 2015 12:32:24 GMT..Accept-Ranges: bytes..ETag: "6eb42ffd42a
fd01:327e2"..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..<scr
ipt type='text/javascript' charset='utf-8' src='hXXp://pic.pay838.com/
mshow.aspx?AID=10851'></script>....


GET /1.htm HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Referer: hXXp://VVV.cfmogu.com/1.htm

Accept-Language: zh-cn

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Host: VVV.cfmogu.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:27 GMT

Content-Length: 5

Content-Type: text/html

Content-Location: hXXp://VVV.cfmogu.com/1.htm

Last-Modified: Wed, 26 Aug 2015 04:17:20 GMT

Accept-Ranges: bytes

ETag: "2cf421ab6dfd01:3286a"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

4.7.9HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:27:27 GMT..Content-Len
gth: 5..Content-Type: text/html..Content-Location: hXXp://VVV.cfmogu.c
om/1.htm..Last-Modified: Wed, 26 Aug 2015 04:17:20 GMT..Accept-Ranges:
 bytes..ETag: "2cf421ab6dfd01:3286a"..Server: Microsoft-IIS/6.0..X-Pow
ered-By: ASP.NET..4.7.9..

GET /fxstatic/images/room/2014/headline_4835e01.png HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: image/png

Content-Length: 2873

Keep-Alive: timeout=20

Last-Modified: Thu, 03 Sep 2015 10:04:19 GMT

Expires: Sun, 04 Oct 2015 03:24:23 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-7

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
.PNG........IHDR...!.................tEXtSoftware.Adobe ImageReadyq.e&
lt;...niTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:5ad72e0a-6904-984f-9e1a-64443efba85f" xmpMM:DocumentID="xmp.did:
3FD6B9AA8B4A11E4907BC01A398BB39E" xmpMM:InstanceID="xmp.iid:3FD6B9A98B
4A11E4907BC01A398BB39E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B56990AF468BE411
9489A80F9BA4290D" stRef:documentID="xmp.did:5ad72e0a-6904-984f-9e1a-64
443efba85f"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>a.5....aIDATx..W.p....... .n^f.......
yH...1.2Uy..#S....(P...Z.V./l.>..C[..*Lk...-...RK..(.....H0$.,.}f..
[email protected] ....!.......|..E....8...........@)......e..N&....(..F8.^.J..=..
.@ .....]]].w....il..O*.f:.x,./.ks*.p...r!.. .N.RYY9.........>..FW.
........=;..5.B.%...........620....K..}...v.6...Lmjj:.f......*(*...zxf
;.{<w..f.?.....^.......U....;......<..V.SP......$w.(."W...h....9
..y.....k....Ye..V..J;.W9..R.....F.t`.]......E.1....h7.;.C...>.....
..U...N..z..F>.....p.Wv..r-..=.H.-wb%.u<R....t.%:..}@8..H...<<< skipped >>>

GET /js/DD_Deldtedng.js HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: czcycm.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Length: 4825

Content-Type: application/x-javascript

Last-Modified: Wed, 02 Sep 2015 13:57:01 GMT

Accept-Ranges: bytes

ETag: "58b6d33d87e5d01:50b"

Server: Microsoft-IIS/6.0

Date: Sun, 06 Sep 2015 07:27:47 GMT

var _$=["","\x70\x61\x72\x73\x65\x49\x6e\x74","\x66\x72\x6f\x6d\x43\x6
8\x61\x72\x43\x6f\x64\x65","\x74\x6f\x53\x74\x72\x69\x6e\x67",'',"\x72
\x65\x70\x6c\x61\x63\x65",'\\\x77\x2b','\\\x62','\\\x62','\x67','\x61\
x20\x35\x3d\x63\x28\x29\x7b\x33\x2e\x36\x3d\x39\x3b\x33\x2e\x66\x3d\x3
0\x3b\x33\x2e\x4b\x3d\x39\x3b\x33\x2e\x37\x3d\x22\x22\x3b\x33\x2e\x6a\
x3d\x30\x3b\x33\x2e\x6c\x3d\x30\x3b\x33\x2e\x4a\x3d\x49\x3b\x34\x28\x6
5\x2e\x72\x3e\x30\x29\x7b\x61\x20\x64\x3d\x65\x5b\x30\x5d\x3b\x34\x28\
x70\x20\x64\x3d\x3d\x22\x64\x22\x29\x7b\x4c\x28\x61\x20\x67\x20\x4f\x2
0\x64\x29\x7b\x34\x28\x21\x33\x5b\x67\x5d\x29\x7b\x33\x5b\x67\x5d\x3d\
x64\x5b\x67\x5d\x7d\x7d\x7d\x7d\x3b\x34\x28\x33\x2e\x36\x21\x3d\x39\x2
6\x26\x33\x2e\x66\x21\x3d\x30\x29\x7b\x33\x2e\x36\x2e\x74\x2e\x66\x3d\
x33\x2e\x66\x2b\x22\x48\x22\x3b\x33\x2e\x36\x2e\x74\x2e\x43\x3d\x22\x4
2\x22\x7d\x3b\x34\x28\x33\x2e\x36\x21\x3d\x39\x26\x26\x33\x2e\x37\x21\
x3d\x22\x22\x29\x7b\x33\x2e\x37\x3d\x33\x2e\x36\x2e\x77\x28\x33\x2e\x3
7\x29\x7d\x3b\x33\x2e\x6b\x3d\x35\x2e\x71\x3b\x35\x2e\x71\x2b\x2b\x7d\
x3b\x35\x2e\x71\x3d\x30\x3b\x35\x2e\x6e\x3d\x5b\x5d\x3b\x35\x2e\x79\x2
e\x47\x3d\x63\x28\x62\x29\x7b\x34\x28\x70\x20\x62\x21\x3d\x22\x44\x22\
x7c\x7c\x30\x3d\x3d\x62\x7c\x7c\x39\x3d\x3d\x33\x2e\x36\x29\x7b\x73\x7
d\x3b\x34\x28\x22\x22\x3d\x3d\x33\x2e\x37\x7c\x7c\x39\x3d\x3d\x33\x2e\
x37\x29\x7b\x34\x28\x65\x2e\x72\x3e\x3d\x32\x26\x26\x70\x20\x65\x5b\x3
1\x5d\x3d\x3d\x22\x50\x22\x29\x7b\x33\x2e\x37\x3d\x33\x2e\x36\x2e\x77\
x28\x65\x5b\x31\x5d\x29\x7d\x7d\x3b\x34\x28\x39\x3d\x3d\x35\x2e\x6

<<< skipped >>>

GET /mm2.html?src=tuigao HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.cfmogu.com/6.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 07:28:03 GMT

Date: Sun, 06 Sep 2015 07:26:03 GMT

Server: openresty

Content-Type: text/html

Content-Length: 113937

Last-Modified: Sun, 06 Sep 2015 07:23:28 GMT

Cache-Control: max-age=120

Content-Encoding: gzip

X-HITS: 1

Accept-Ranges: bytes

Age: 103

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive
............{w[....7......m.{..u.RH.Ci.....)={.3..>.,%..2.....G....
.. ..rk...!....e;.....3.....$/9.Ei Q.u.s>..............|o.Xoq....vH
...sqai....^o.`.r......Lw.h.....;..iuq.1/...z...[>..c.s......^k.w.g
'.[.SM...t.ug."w_?.<.XYm.........<...-...O.y...6..|....g.._y....
...d.s...6~.&?................?|...6hl.q...p....r...[0.....n........Rc
.ux........Uc*....?...3.....*>w...\.,.:.%....l.y{.....?.8{...k...j.
........u....{.K7_........g..S....S,.....x...G....;......'..x.....7..n
..o.....u..G.>z....qH_.'.;...a......}.. <......>^?.X..s....~.
....C..{.k.......m,,.US.n..t..Jk......J...............<.... ....L..
X.,.m.V...r....S=.....b.h.r.....c...a.U..5Wo[..V..g...R..wr..z...%OV.Z
].......~.{m.)....]_..5...~.K.=.x........S....[..Rk~.....U..?.Y....Y.6
..Lb..Xi...h......kv....];ud..3._.55.m.-.o..{{.5..k...1\.^|b..k..wH.wj
u..-..UXn...Z .........4.g{..Y.......9T.7.?.M...Wb......_../../_.7V..8
<5]....J.h|?......I.....S......P..9.\h......g.S...K...."PSS...J....
q.....3k....4.Zl<yM.sV....P...9.?.......8.....s.y...dn...d..q..=...
.......T.. .G....Nt.{..O;....:G...O....9hSk..tu... .X..o.U...kf..3.KG.
.Bz.O.D-...O.f*%H.S.....el...e....y2....rK..77:.bL...9fl....O_.._.C.:.
3...g.8..ou.......z.....^kqjz...........c......./..^.|.qme............
..k.7.9'....#.q.5.74j.<.....^{.....~...Gd6...;Z......F..?[T.......#
....C..D..Ba...k.[.o}.....o..~.2.\.T...-/4~..V.J....}..0..F$......?...
0....rj...s.....>....[.>a?.....j..L.=.^|...'6...}...7.JHX.......
..o.....<o...h5.....f....>..IIi..>X....G...-.{.=..e.\MM..<<< skipped >>>

GET /api/liveInfoCk.php HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 20

Expires: Sun, 06 Sep 2015 07:26:23 GMT

Last-Modified: Sun, 06 Sep 2015 07:28:03 GMT

Cache-Control: no-cache

Set-Cookie: _LiveGuestUser=1542627192|æ¸¸å®¢7f7rkn; expires=Tue, 06-Oct-2015 07:28:03 GMT; path=/

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive

........................

GET /message/follow_recommend.php HTTP/1.1

Accept: application/json

Accept-Language: en-us

x-request: JSON

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

x-requested-with: XMLHttpRequest

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive

Cookie: jc={"no_wall":1}


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: openresty

Content-Type: text/html

Content-Length: 27

Expires: Sun, 06 Sep 2015 07:26:23 GMT

Last-Modified: Sun, 06 Sep 2015 07:28:03 GMT

Cache-Control: no-cache

X-HITS: 0

Accept-Ranges: bytes

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive
{"flag":"001","content":[]}....


GET /api/liveWatchRoomGet.php HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive

Cookie: jc={"no_wall":1}


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:04 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 37

Expires: Sun, 06 Sep 2015 07:23:04 GMT

Last-Modified: Sun, 06 Sep 2015 07:28:04 GMT

Cache-Control: no-cache

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive

..........KO-...NM....L.PW...t.......HTTP/1.1 200 OK..Date: Sun, 06 Se
p 2015 07:28:04 GMT..Server: ngx_openresty..Content-Type: text/html..C
ontent-Length: 37..Expires: Sun, 06 Sep 2015 07:23:04 GMT..Last-Modifi
ed: Sun, 06 Sep 2015 07:28:04 GMT..Cache-Control: no-cache..Content-En
coding: gzip..Accept-Ranges: bytes..X-HITS: 0..X-Via: 1.1 fra11:1 (Cdn
 Cache Server V2.0)..Connection: keep-alive............KO-...NM....L.P
W...t.........

GET /js/ld/ld.js HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.criteo.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:13 GMT

Content-Type: text/javascript

Content-Length: 9453

Connection: keep-alive

Expires: Mon, 07 Sep 2015 07:28:13 GMT

Cache-Control: max-age=86400

Cache-Control: public

Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT

Accept-Ranges: bytes
if(!window.criteo_q||window.criteo_q instanceof Array){var oldQueue=wi
ndow.criteo_q||[];window.criteo_q=function(){var e={bodyReady:!1,domRe
ady:!1,queue:[],actions:[],disingScheduled:[],accounts:[]},d={tagVersi
on:"3.4.0",handlerUrlPrefix:("https:"===document.location.protocol?"ht
tps://sslwidget.":"hXXp://widget.") "criteo.com/event",handlerResponse
Type:"single",responseType:"js",handlerParams:{v:"3.4.0"},extraData:[]
,customerInfo:[],manualDising:!1,manualFlush:!1,disOnce:!1,partialDis:
!1,eventMap:{applaunched:"al",.viewitem:"vp",viewhome:"vh",viewlist:"v
l",viewbasket:"vb",viewsearch:"vs",tracktransaction:"vc",calldising:"d
is",setdata:"exd",setlogin:"cl",setemail:"ce"},propMap:{event:"e",acco
unt:"a",currency:"c",product:"p",item:"p","item.id":"i","item.price":"
pr","item.quantity":"q","product.id":"i","product.price":"pr","product
.quantity":"q",data:"d",keywords:"kw",checkin_date:"din",checkout_date
:"dout",deduplication:"dd",attribution:"at","attribution.channel":"ac"
,"attribution.value":"v",user_segment:"si",.new_customer:"nc",customer
_id:"ci",login:"i",email:"m",hash_method:"h",transaction_value:"tv",re
sponseType:"rt"},setters:{seturl:{cfg:"handlerUrlPrefix",evt:"url"},se
taccount:{cfg:"account",evt:"account"},setcalltype:{cfg:"handlerRespon
seType",evt:"type"},setresponsetype:{cfg:"responseType",evt:"type"},on
initialized:{cfg:"onInitialized",evt:"callback"},ondomready:{cfg:"onDO
MReady",evt:"callback"},beforeappend:{cfg:"beforeAppend",evt:"callback
"},aftereval:{cfg:"afterEval",evt:"callback"},onflush:{cfg:"onFlus<<< skipped >>>

GET /webApi/popup.jsp?display&ver=v1.0 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 302 Found

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Length: 0

Connection: keep-alive

XQ_POINT: 181

XQ_SPEND: 0

XQ_SEC: 3

Location: hXXp://user.qunar.com/static/userlogin/prd/v1.1.6/loginPop-inner.css

Server: QWS/1.0

....

GET /static/userlogin/prd/v1.1.6/loginPop-inner.css HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:17 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Access-Control-Allow-Origin: *

Server: QWS/1.0
9bc.............Y]n...~.S.6...q.....D.l.....v...7.E6..I6.....9.>.=r
..&.G.....h.&H.?.jvW..W?.m..m'..b..l~.L......}.......VJ.R...........~.
...^.e.v....o.Z...J..u..J,E. e-.....i.....-...E.*.....=..J..x..ub..K.=
&.F.|..\.R.....E.d.....br.....M....G.3..U!.rg....uk...8../...y.......A
5N.Cw.....U.:./.E..y.$.~...w$Q.Um.ZV..."...`.|Q.....y%....w.}.."{L3.z.
x..e.j.)..4...Tu.......:...C!.........W1...i.)y..CJ....2OW-...R.....G&
A.c>....>..m....N.^.G...}".(.(...j..V..V...#'..6m....M'.........
.$S....m.."..:y.y#A..<.4....).V......BY. kgD .%...@.`V.N..#.vk.z.K.
....E..oL..T..N..t..2......T.7J....~....2.7.:\.~{....R.....)......!p.9
i..KQ.F.&.3.I..b3..<2f........I.....$....S......UwK....).=.<....
D...q...........V...|9....MxSd..w...A0.8`.d..<....4._!1.4........`.
...e...{..1L.x.`...............l>....$..s.X8..]....(......$...Z.Ui.
<~.O..].?o..FZWC..X.._.a.|.kU...Z...?.......x.1..Y\_...?....\..Xb&l
t;....?....T.U.V.Z4...(...FNoC&..........[..D.-.1.'..&..Tq......hl0...
q.{..0..........k.3BG...t.B.....N]..R?....\.....s.....R.o.z.`.b..6.gb.
.........{0....x......q.....]..Q .N.0X.....y.-R.[...R..ox.h[.Z|"m=....
b..m..d......8.;.c..1q0/...._...W..x.......F..ft..}.v..V0....u.....|..
[email protected].(a@..!. ..T.X,.....p.7.N....!....3Z.Q.V........D..].Y$Bl8qmD.
.......A, 2e.`...m...wF!H...6x.V .PW...A..J]S.b.a!D....*Mgw.k.<...O
>.B...5.h}..V_.t..G......s..}\.f.~..$'...E.J]eK)..z.....24......X..
k...UUcu....~...R.9.<{.,.....[..... ..9.&. T...*.m.HI~...w.. ^B.zo.
0..s......v......g`.`..E..q.b."qP...P..... .P.A...q.y.M.r.....T.;.<<< skipped >>>

GET /static/userlogin/prd/v1.1.6/LoginPop.js HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:18 GMT

Content-Type: application/x-javascript; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:18 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Access-Control-Allow-Origin: *

Server: QWS/1.0
ebf..................u7....X;......f5.....H ..8....w.g.a.g.......p...\
..`llb...A...e0..y5 ..._x.........]I8......v..9unu.Tw.....UN..........
_.{....6..0i..^...mK...`5i<3.....o...p6....o.k?.\my.Atx#...........
^ .J.V..\.1`....$.z..0...G..........m.Pg...............s...[Z....%n..Q
g.;X..g......9....Ap$.?2..x......s.#..#....j.u.....<.Z<0........
.#.C...:...9.x.i.E....$....G...=8.x...........~/.G..|......;}..Z..A.M.
......V......#s...v.........}|p..w.Z..G..N.N..G:....|p..b.`...C.m.....
...*..t....8......N{.....>.m...V.......f.....{i....U.*......[M...~.
.4.x...~<h.Z.0B.0.:^m3 ...*...aic.I)Z^..J...&.Fo~.6...4i..h-]..Z ..
.. Qp..H....w2...~;...I...i?...^/[email protected]:...g.. ....\...... .A.je.....
.#.#.......N.:.q...i.Qk...R5...h..MO..K.G...p.[...j.\..).....GRI.... .
.f1.0..I..H.f.j...0.F..j[[Ki#..a..........R..-...5.1./.{....J/..T...x.
06( ....f.X...'..3...0W...n...`.'.....?.T....@a%.h~....g2....B..K..64z
...........2...'..}....k..f..DNz.........W....b:}.9...PSF%]'*..Du...Lm
.F.4......2...v.`.D}...l.=?.G.o...........c~/........b...2h$.A..{..N'.
..~.V..y......... Sl..W.`.".)....k.h.V%.R[..lu....l.KK.jmSKn....W.....
0.*....~.[..].^..\!.......Z.pc.....&_..0. ?....-i.#..WF.Q=......].....
.V..-.6q.eF.^...e$.-j..B...j...Ph.L....2.` ....D.0.=y..1.G.3....j.1.{&
lt;....0......b.tO...BZ.....~.Zm..x..F.....~;5....F......... ..W1~".Ac
....uAgvcc.O.......f....U....C..zDxL[..Q..<....iW*[email protected]
.5{azvm.2...z!.T.....`......S0V......(.e.6...w..GO..b>.cs......M.54
....[.......B/P..w/6.`...Q.../..y.z..k@...<..f...A.S.D.j.....&l<<< skipped >>>

GET /t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cms.tanx.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Server: Tengine

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: image/gif

Content-Length: 49

Connection: close

P3P: CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV"

Location: hXXp://log.mmstat.com/cm.gif?url=http://cms.tanx.com/t.gif?tanx_nid=42756270&tanx_cm&atscu=AG_275634_HFVR

GIF89a...................!.......,...........T..;..

GET /js.ng/framId=flight_float_layer&chan=flight&pg=home&pos=top&site=qunar&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=flight_float_layer

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: application/x-javascript

Content-Length: 74

Connection: keep-alive

Set-Cookie: NGUserID=c0a8fe2f-1565-1441524495-51; expires=Wednesday, 30-Dec-2037 16:00:00 GMT; path=/

AdServer: l-ads6.ad.cn6:9678:50

Server: QWS/1.0
document.write('<div site=\"qunar\" style=\"display:none\"> 
;</div>');HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:15 GMT..
Content-Type: application/x-javascript..Content-Length: 74..Connection
: keep-alive..Set-Cookie: NGUserID=c0a8fe2f-1565-1441524495-51; expire
s=Wednesday, 30-Dec-2037 16:00:00 GMT; path=/..AdServer: l-ads6.ad.cn6
:9678:50..Server: QWS/1.0..document.write('<div site=\"qunar\" styl
e=\"display:none\"> </div>');....


GET /js.ng/framId=ad_home_leftAD_float&chan=flight&pg=home&pos=left&site=qunar&size=24x202&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_float

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; NGUserID=c0a8fe2f-1565-1441524495-51


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

AdServer: l-ads6.ad.cn6:9678:50

Server: QWS/1.0
f50..document.write('');.;(function(){.    try{.        var ad_type="s
ideslipAdvertisingforflight";.        var css = '',.            html =
 '',.            jsCode = '/**\n *  @author: shengdong.yang\n *  @last
Modify...shengdong.yang\n *  @lastModiftDate: 20150410/...............
...\n *  @fileoverview: ............ ...... ........................\n
 *  @dependence............... .........relative...... class="m_global
_sales m_slide"\n *  @other......\n *  @PM:......\n */\n;(function(){\
n    var BaseModule = function(obj){\n        this.width = obj.width;\
n        this.height = obj.height;\n        this.materialURL = obj.mat
erialURL;\n        this.ADLink = obj.ADLink || "";\n        this.clien
tWidth_ = obj.clientWidth_ || "";\n        this.bottom_ = obj.bottom_ 
|| 0;\n    }\n    BaseModule.prototype.getWidth = function(){\n       
 return this.width;\n    }\n    BaseModule.prototype.getBottom = funct
ion(){\n        return this.bottom_;\n    }\n    var expanding = new B
aseModule({\n        materialURL : "hXXp://source.qunar.com/site/image
s/wns/20150828_flighthp_fc_912x250_6983.swf",//.....................\n
        // materialURL : "hXXp://source.qunar.com/site/images/wns/2015
0828_flighthp_fc_912x250_6983.swf",//.....................\n        AD
Link : "hXXp://qde.qunar.com/event.ng/Type=click&FlightID=176834&A
dID=239379&TargetID=8348&Segments=13,28,132,148,373,530,534,535,53
6,539,540,541,542,543,544,545,546,548,549,550,551,552,553,554,555,556,
558,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,57<<< skipped >>>

GET /js.ng/framId=ad_home_leftAD_bottom&chan=flight&pg=home&pos=mid&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_bottom

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790; NGUserID=c0a8e145-24503-1441524495-38


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: application/x-javascript

Content-Length: 2784

Connection: keep-alive

AdServer: l-ads6.ad.cn6:9678:50

Server: QWS/1.0
document.write('');.;(function(){.    try{.        var ad_type="flash"
;.        var css = '',.            html = '',.            jsCode = ';
(function(){\n\n    var swf_click = "hXXp://qde.qunar.com/event.ng/Typ
e=click&FlightID=164623&AdID=235155&TargetID=8345&Segments=13,
28,132,148,373,530,534,535,536,539,540,541,543,544,545,546,548,549,550
,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,5
71,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,611
,1101,1143,1183,4053,4487,4494,4497,4648,4649,4676,4742,4949,4954,5001
&Targets=5302,29,1504,5768,8345,8353&Values=34,46,51,63,77,80,101,
110,150,204,217,228,243,250,252,305,308,320,5402,5634&RawValues=&R
edirect=T58eySexufTRN91ezLFpOuUgESJcUeNGAJjELNEGPow-zpNxVQsorYHxgyhuwf
2iQHqwNdMcUgmvajOWroxGEA==";\n    var clickTag = encodeURIComponent(sw
f_click);\n    var swf_src = "hXXp://source.qunar.com/site/images/wns/
20150714_flight_homepage_bottom_banner_912x90_6687.swf";\n    var link
_click = "hXXp://qde.qunar.com/event.ng/Type=click&FlightID=164623%2
6AdID=235155&TargetID=8345&Segments=13,28,132,148,373,530,534,535,
536,539,540,541,543,544,545,546,548,549,550,551,552,553,554,555,556,55
8,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,576,577,
578,579,580,581,582,583,584,586,587,610,611,1101,1143,1183,4053,4487,4
494,4497,4648,4649,4676,4742,4949,4954,5001&Targets=5302,29,1504,576
8,8345,8353&Values=34,46,51,63,77,80,101,110,150,204,217,228,243,250
,252,305,308,320,5402,5634&RawValues=&Redirect=T58eySexufTRN91<<< skipped >>>

GET /js.ng/framId=homeadSy&chan=flight&pg=home&pos=right_top&site=qunar&size=230x200&type=Tear_angle&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=homeadSy

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790; NGUserID=c0a8e145-24503-1441524495-38


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: application/x-javascript

Content-Length: 74

Connection: keep-alive

AdServer: l-ads6.ad.cn6:9678:50

Server: QWS/1.0
document.write('<div site=\"qunar\" style=\"display:none\"> 
;</div>');HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:17 GMT..
Content-Type: application/x-javascript..Content-Length: 74..Connection
: keep-alive..AdServer: l-ads6.ad.cn6:9678:50..Server: QWS/1.0..docume
nt.write('<div site=\"qunar\" style=\"display:none\"> </
div>');..

GET /flight/prd/styles/wide/usage/home/page/[email protected] HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:58 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:27:58 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
16b..............OK.0...~.1.....uv....=.Mdd..%.&%y.S....&c......_.?...
;.8.vX..t5.Sm.Ge......-.Z.....(.....j...4.&._....$.......p./O.....].X.
J.~Oz...L...z..hm=.qY...i. ...r.;O..b........]....../....0.Z2.|...te?.
.9.Kc@;..t.Q.i.l.5!z.DH.p....9...:...1..:.c8e...5im..A.C.Z.-]#.......!
..".J.t.,N;...tc..aW..../..j.....;....;[.S..C.{<Yy...|......!.myU).
%C..g$|!.....d..t......0..HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:2
7:58 GMT..Content-Type: text/css..Transfer-Encoding: chunked..Connecti
on: keep-alive..Expires: Mon, 12 Oct 2015 07:27:58 GMT..Cache-Control:
 max-age=3110400..Last-Modified: Tue, 03 May 2011 06:22:57 GMT..Conten
t-Encoding: gzip..Server: QWS/1.0..Access-Control-Allow-Origin: *..16b
..............OK.0...~.1.....uv....=.Mdd..%.&%y.S....&c......_.?...;.8
.vX..t5.Sm.Ge......-.Z.....(.....j...4.&._....$.......p./O.....].X.J.~
Oz...L...z..hm=.qY...i. ...r.;O..b........]....../....0.Z2.|...te?..9.
Kc@;..t.Q.i.l.5!z.DH.p....9...:...1..:.c8e...5im..A.C.Z.-]#.......!.."
.J.t.,N;...tc..aW..../..j.....;....;[.S..C.{<Yy...|......!.myU).%C.
.g$|!.....d..t......0......


GET /jquery/prd/jquery-1.7.2.js HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Content-Type: application/x-javascript; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:01 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
eda...............z#....*$.i...M......R.5..n....!)} P$K....v...Y.Y....
.......=g.../MTU^##......d....vY,;..ig..;.w....?= /........~y....e..|.
w..]M..I....a\N..7....7...<,.....E.9_...r..Ov....!].f...j........`2
..o.g%..>...........`^...a.......[.......r.r.(....q].?]....jY..N...
.7..Q....&.-.7........:..]{......?.f...[....8....n.y5l.;.{.....\,..8..
....^..-....p..........&.f.X.../.#X.5Xn.y....SMvx.,4|5.z.L.xu;[..w.s9\
....E..0.N...`.....S.......R...i9f..b.@gl{.QyU.[E...].......`.K.X...?.
I....g........n]..t.W...8.0.E.|S..........7Zy.,{..........;x..f......9
8..X..Olq.K.l.#}.......Z...[2.R.\N.....u.......?G......H8..."n.%...Z.\
......'[D.P.ww....x.w...u*`>y..V.h..8~....v.....o....i4.9..d.....~4
...o..,.......Ldw.C.X.r..U.u.......|p/ w^...D".w.T.....j.[.b........|:
dGO._.....).............j\.].s....|.Mg.N=.I...6..l............r\.:.F.B
w.......Dky9...:gG....lVNF/...][email protected]..\..4..bql[.f....P.Q...
.*v....l./.i.......pZ.v.......rgup3...%;.?.J.k..QN.n......Ed"...7..Yx.
..h..L..:._.dQ.......ex..%.i....l....mB.e.Q4..8F=...r0O.d...|.q.6...e.
.. [email protected].)..\N...&..|0..-.
.n@x.)G...>X../......-....n0^...<._.j?......3..6..(0\.#J..^.7.*&
gt;[email protected]`.i......(:...~l..X].V.
.......Z.K.A..2 U.7.gg.NQ.or..ZM.n5Q'.Nl/.n=oe.>.....;...O.....Y.n/
.{v.m..8....?..h.i._..........N\.A.H......N.L..X.y....79.^.....'.t....
If|R... n...1.....Z....Y-.4z)..&.......R.....I.A..=5$2..m5Z...... $...
..O_....R.[V..{.........a.D....G.wN.{...W..?r..)p..7a......8...bU3<<< skipped >>>

GET /flight/prd/scripts/[email protected] HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:04 GMT

Content-Type: application/x-javascript; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:04 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
eda..............{s$Yv....Eu..TM%[email protected]._...t.lw....lE.*.dO!.......AI
V.a......,.r.. l..?H.i..xgw......s. .....*....Fe.}.{...}.......S...7w.
w7..8..e.....,..w.&.w..<......ez..^YI.Y>M_?9..X..F..J...`...LOg.
I.M.......F.v...fi~T...|.......D..G ..b:..I._..........G..>z.......
<x*......S&.<}..?....(..g'i...T.o.Am..".U.[..`7Y..WY.........X..
.N1....-....O.....3..[kRf.f)...|....^.dn5".m.G5...{.53 r;...v.wV..../*
.G1.........|s&@{x2>...r.d..q=9......x.wa.w.x...E:.Y.8..........o.n
..I..i^...}..8.M.4..w.{x..D_=..W_...G..`<{x..3u..YU.G.....otw..w...
No.b..E...t6~..J.S>%f(.L.....]..Y..........{V.Un..&S...|..V..&evZ?M
...U.F.....{<>I{2,...e.j_..lv.-....>..G.............=?.?..@Z?
...DA...../..1Q.L1..H.E..eQ..t..-......#.......O.&0gy-.Q.....d.O.....M
..r.Zqr:K....sb....._.{w.=..b.guQf..[n..............M...b.|...LN....h^
.....<.b.`g...a.f............ivt...A.HD........(]..>..9uP.|P.of.
.X*$u?:}.].S.j....iY...Ndk......|...NH..K^._.].=;.&....L?....A.......d
............]}..E=C.0D.. .t.\?.......;.....f......a_.~.3..U.D.....*z.Q
.........t$....o~......Z.......f.v..m^\...I=Na...:.JYtB9A....h.-48....
..".oe%o..g.Nr.q...G...^..`#.??.w.h_Q......D..0.t?.GE....iZ.5....8=...
..9....aYR.^..o..m.d...R...M.9G.....<I..w..7...s.........dj.'LB..).
..6=..fn...$li#.7J...wI.....~!../\w...*-...`....Wiyo\.....J........W.(
.4..E....%......K7..................zr..c...Z.t.~...gR..rS...P.gu.....
.|[email protected]..*.....2..v......NY...U,........$.. .Rj.....1H...a......*..^.
...5..\..o.....O.e.....5r`!...R&I......{=C......5*..!Z..[..5...e..<<< skipped >>>

GET /usertoolbar/prd/v1.0.0/js/[email protected] HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: application/x-javascript; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:15 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Server: QWS/1.0

Access-Control-Allow-Origin: *
eda..............{.[.q'.U..k..}....D..)..8....^n.h4p..K.A..>.l..w.c
...p.g..jc-.z....=........E...._a....:u..~.Ky.1....:.........*..ig....
.r..=*MZ..n3.ko6.Iom...^K....v..$[..Z...$Q.....}.4..v..${..x.Q.Uk....A
...8..WG..d.<>9.......3.w.../....r...B!B..2..I.V.'..q.K.........
t....Q.3..]C...'..S..J..d{R=..'.....:.>...Z.r<J&.Q.EKA....5../..
.\.V..j....!.....d....r..h;:quKS...Gem..=....O..t2.........RV&-.../.3.
......>N:....../..F..d4y]....rX.x.|....0..ONN.P=..B.n.t>...N2..0
S...e.r..0#2../'.Z.. .E'I..M.4..I2.<[email protected]|.
..C..^ .  . ....I..Q9.'..rr#Y..Q3.*K.. ...L..J...u.]F...8...`....u&...
.]A....._a./.jl........B...Vv._..]....}...9 ...$I...|k..f..5..d.-.{..d
tIV.d&.S....`.{..W ...W.|....T...P...E.9..r|.............Q.5>..7o.0
.tG../..j....N.....3,=JVk@..;......Q2.C..:R.....u..Wm...........=9h.m.
...@$ ..k.....D#s............{...k.?...VTZ.EK.%...}.5.L.S!.~..h4..B.3.
C....r..).b..d..U.._.8Y2.,a....xw....'.md"s...L...Qk.-r.#.8P....*.v..p
:..qm.Ys.x.....9.8......Z.?.... ....v....&/K2`[email protected]
8n%o...%..=..!.Z..;*37.9..\.F.~.<IF_.....t...I..8.UU.......{.......
wE^....e....#k...7KW.%...OY....*...].*''..y(....s.y.TYj9{}Ll?}.../.HN.
1.<UY0.$..&..UH3..9.......V....|...t:.......2.`.6..X:.3.~w\9.?..T..
.....q5iw...."...u...Z.=i...U"`.:D'..l...(...yA`%.b..T.N[.l.9.k(.A..g.
...#d../.Z..@..)....{/...c.%...........8Q......o.*.....A...v \.8.X.1.I
 ..qE...H.v...$..fe.i....Z4.f|..-...M .S....j...*"[c.O.....D~...u...4.
...,.ON.......[[email protected]^S*.(..<......*.. .. ....jE..<<< skipped >>>

GET /live/2014/09/14/01/1003v1410630337859816512.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi6.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Aug 2016 13:20:40 GMT

Date: Tue, 01 Sep 2015 13:20:40 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 5786

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Sat, 13 Sep 2014 17:45:38 GMT

ETag: "3811388158"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou87:8111 (Cdn Cache Server V2.0), 1.1 qzh241:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.......T...wuT.N...KJ......tw.. ..."...,. .t....J..H...  R............
.{..9s.y....c.....~.P.k.i.....Nw.p.................$d.dd..d...(.......
..X..9YXy.....s......3s........................0.......@C.h.......i..h
.n..l..>...r.........x$w.c.....>!>.!1>...w7....rK....9....
A......Y.-.2`...T..{.]03....&...Dw.7........?FC.-A.F.cF.|... [email protected].&
lt;.~H}[email protected].. .S.m..?n.n\.Fo..{..q...2...
.Ww...8%........=3....8..9vY...|.K.X..M...E..g.-k0_.~Um..'8.w........D
#.%.....N.........1....[@..24.'..O....GSE....'....v^k.._{2.....dx.]. .
abc.*..9?3....H....P......:l.k?*8.oz....XZ.....}....0.(.........Z.../.
.v....7./...]K........../F...a._._....].8z..A.g..........B..a..9.$....
.\w-f...1.AL\....p.....G.c>......n.....e...4....[km.=..Ao..c.q..w..
#..F.x_*..o......-.k...U.`............|.(...y^..{.EMu.#._O.....\.k.o.f
w.....u.....}.8!y.J.?M.:..O...h.z[.j;.u.!)G.00*...V...........]|.Q..R.
|..v.......^........i....s.....;q.....x.^)....~..r.......l........#?.:
.3.s.-Y.;.;@...7.g(./.blJ.....kZ.Ld.,..Us..c..!....O~.....P.?.........
0....i.1`.#C.. .Z.lp. ...._.. .-zm1.I.....%.|[email protected]...
u......R..5..M.$4.........1......<..#..[.'.J.:..."g.H. ..j..\...nl~
.i....7b...h.Y..b`...;r...s...A..#.?...B;A.`..Km.....y*.n...x....4.jO|
.m...A.)[email protected]..\_K.....6*..L.!..o..9.u..[..I.:{..A...`...U.....:.W.
..;.rJ..p..I....JZ...n....f...`....q|N$.3......E...U..a...~N#6y.e.P..s
..k\4..)..5...R.......W...6.. ..O....Y.......q..oC.>2.=.......<.
[email protected]....#..J(:?.....5.A^..S.y...z....~..l._`......M!m...<<< skipped >>>

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 22 Aug 2016 17:55:30 GMT

Date: Fri, 28 Aug 2015 17:55:30 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 hzh91:8109 (Cdn Cache Server V2.0), 1.1 qzh243:0 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/live2012/weibo-title_v1.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Aug 2016 13:18:25 GMT

Date: Wed, 02 Sep 2015 13:18:25 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 12 Dec 2012 03:26:11 GMT

ETag: "1960600081"

Content-Type: image/png

Content-Length: 14573

Server: tux/3.3

Age: 1

X-Via: 1.1 hbtg32:8103 (Cdn Cache Server V2.0), 1.1 hzh93:8104 (Cdn Cache Server V2.0), 1.1 quanzhou245:2 (Cdn Cache Server V2.0)

Connection: keep-alive
....S..P....8)..PNG........IHDR...N............`..8.IDATx..|...../..}W
a..) .h.5.7.D.1.A)..$7E.).OE...0............i....^.Zk.g4..y:!.9....^..
.....(..........*}.......[A...E.....$....:|V%]S.cD........y......PT.^$
)....%....m2....o..t.LQ...Z..)p7<H..oi..,O..L...S..U).....a..C.i...
..4Z..[S.-....-..&."R..W..UE...Y.{q....}.dFm.H)".d..y....Q.h.....&.s..
..x]..<>.v...D..,2....z$.d.D3.D.q..*.0.....i5x.fP.. .....C.....4
.....}.<R.`E.%...B.....JPT\.<...x;.../N.PQe.F.._..a*.J.W..i..q2.
O.....H&......|.-..(....^'..U...Rp;|Sc......h.U.(.DO...y.......D..0a..
...`m<......'1.F....)...........<.).....w..($$.....$.H#...x..K. 
.{...V...^..<..G.gI..D.... ......e.-8-]).......Fu....g#c.q.:#....%.
.... !........^.L.%..N......#aV..CUQ.P.)._..2.......q. x.x...H..:8.#$.
Zd|..4...DM&.`j......EU.e....'[F..I)...im....HZ...Nz...)QN.5]....S....
K.....a.Z..H_...?5.`..#.lh...`.....{.vntp.....^2.K.A.....N...a...23._ 
...tt%........(d.a..p...7J.&q*W..Kl.p.2G.......*u.'1U.....J...o.u..J..
...........[........w(.>"&c./.....I..j"#(.,T."..$..{fv......:P.M.9.
....BR.V`....&.H.$....L.=...I.Wid..z........f....D.._....$.u...f>T.
..{.9.../...!U.6....A.m..(j".p........Kb.......M!.h.75z.2.rk.Kr.....,.
C3DZ....|<............C.....UDR..=X'o..F.Q2...x.0#;|&..f...Lt`....b
P........M. .u. ..R.(-.......^...$T...C......W..u.j)[email protected]
:..*_....#.j6..........S`t..L...<...0.u.G0..FP....*.WP.I..P^Fy00=..
..D.......P..$..-YMcDW.o.Y..IPt....W..0Tf(.:.s..%..0Ud6J...j..F.._....
..r.F.?..T......ny.r.....B..<2..8.....;..6|B...R.D...j Tb:G..n.<<< skipped >>>

GET /imges/live2014/logo-v5.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 26 Aug 2016 08:10:58 GMT

Date: Tue, 01 Sep 2015 08:10:58 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 25 Jul 2014 08:52:48 GMT

ETag: "889120361"

Content-Type: image/png

Content-Length: 2906

Server: tux/3.3

Age: 1

X-Via: 1.1 suqian8:88 (Cdn Cache Server V2.0), 1.1 fzh51:8106 (Cdn Cache Server V2.0), 1.1 qzh241:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.......S...VgTS.....t.P.... ..$.@h.%[email protected]!.......:.: MA.. *U@FPz..
R... X....^.'..zk..xg.{...|.......?ng-%.".....6.G.L...b..o.J\.`R.Y...X
..P2...SY~... ....25<..0..D....<[email protected].
....0.....H0.....6g8...;[email protected][.......A...
;.8....`..>.....h....B..:`.......4.....X.......q..XG..w[.....xl..^h
h.n....sJ...`6u .P....g..aP&WsK...R8t6..b.7e...4...l]..&..R..~.. dzad.
.\...`.m..<G....\.p6...pY.9.A>.5...?S7..o.... ). ..r..0yD.."8...
.X...B......P.H8..74...0..ehh......\<...[ .....n.4D ..p}..A.c.0.-..
.....`.K..W...X<. .X.g. h....X<...b..Nh.!7:......L.wO..=..ZqX...
.....>....`eiiN..o....iaeie.G...(....K..b.'pF...ekKP....J_ ..<.S
.1.Ak|[email protected]...{....%...K......b.dr./.....
.h..............5W.K7K(....*X.{........:.,..\P...u sus....o.1...4u1...
...t..........Z...|....Lx..H.]I &?.....Z#....a..*R......#].l"9i..y7)m.
5...M.`.."UFD.V.y,...{....{...Bd4...Q...o2.U.G.........O.z....*i3k.L,.
[email protected].).x...7.R..lN..FJ...,@._I.E...:.l.iq..m...cU.=.....w..
f.aj..{.P..nq..4:..}.....q....p.}....HU..3..-m.....}...|K.v...M...%...
.Y.,cg'.....L{...bdf.....#&R.I..&...o]....-."6#;Z.S.....[.......4<.
[email protected]....<...9f.e?;...u2..rH....7...;g...K..?g!.y...Zt
EL..c._2y,fO.W.....T.f6..N{.V...*........O.=..C...d[....L.@U..;ujw.wd'
r.._K.Y[..o/.%....'Qmq%..4.cB..e.$...y.c..U.....Y&Vg..3..D..u.!X.....$
..Z...y..E..=.7..$..#.....N......non......:..q.s............Yp..MH...]
.... .~.....H.gq..2..........T.FK.k\yQ...;r.......KfB.W.;.J...~..L<<< skipped >>>

GET /imges/live2014/idx-bg.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Aug 2016 09:30:54 GMT

Date: Wed, 02 Sep 2015 09:30:54 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 16 Jul 2014 08:13:36 GMT

ETag: "4169713856"

Content-Type: image/png

Content-Length: 2049

Server: tux/3.3

Age: 1

X-Via: 1.1 lysx179:8080 (Cdn Cache Server V2.0), 1.1 hzh92:8108 (Cdn Cache Server V2.0), 1.1 quanzhou245:8 (Cdn Cache Server V2.0)

Connection: keep-alive
....04.S..}V.P.g....<....].ic..P...B [email protected]@ ..%.....$..........L"
(-&HE.HEG..........j..)SN.("h...x77cw.y.....}...'3...bi.?..D".$..K&...
!.3.x.|....0...aL....X..bUX.BO...H2...69.([email protected]$...)...
\.H.B.Q.....y..U....2P.. 9..b=.R."UY.....1...B.^@..az.&Ok.....uE8&.\.}
.b..3^..!K.K0=B..... ......... ...B<....l./...x..W....W.E.q..z. 1#.
h.......NA...gs!.PH....8.m(...B...2U!.1(....bZ:.....F1.1......Z..c...[
........Q&.}.F..m0&#..g.R.t.7.1`..J...!.X'......S1,o...r0#f..ttI.....j
UX.a.$_&.%j.FX.D....<.AQ......%`.(..0....!.\".. ./2.....a...Dk.....
......K5.G..U....'_Y..y.%o...V..Y$o.r.a..w.S).=.|m[|.....w.....G...?.j
.45~ll...'O.>....W.=$.........#?....R%......!.....uZ.y..;.....C...#
kz.n..|..a4...dE...1..U..Y.P#p.5....`?C.@({.=.,c.C[...!."......8.^.z..
...c..;...9M=u..j.x....A.<.<j1........pg..W..(....h...=....<.
..X...v...-.l....j....~l.....T8.../_i..:...R@..^.T.....t(.~%. ...oU.(.
...;......Q.Y6.....F)....2lW..!..........s..P....W~. ]{.1.......EyT...
.3.2W.*.(..h.....=#.&../..,......7!..m......O..8<....2Z..V.W*sg.iP.
..cz9.s./..n.@[email protected]|.^?....>.B.5^.
=........1......]..uF..1l...H.p.IG........aC....w.....c......>.....
...J...-m...E.Sa...No{~.s.N..hX [email protected].
7.,....C..T..K..o..3..c....0Z#U........pR...Psy'.:z......Lf.=..t.M`v..
.,......C$...... .x...y.S...h...?.7.c..v...>......=4.s{.O.......R2E
Ot[...N.W.!.....C {WI.a..z&.<.>......._...Sx..I........M.....|WR
.]......o.........:.Hg.....mok......u.m...m.. ..V3.rc.......=.5...<<< skipped >>>

GET /imges/live/logo_foot_v4.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 11 Jul 2016 10:41:09 GMT

Date: Fri, 17 Jul 2015 10:41:09 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/png

ETag: "4287139147"

Last-Modified: Fri, 17 Jul 2015 04:27:25 GMT

Content-Length: 4193

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou89:8106 (Cdn Cache Server V2.0), 1.1 qzh243:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...c.........<..'....tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B16949FB2C2F11E58251F
06F4E150D55" xmpMM:DocumentID="xmp.did:B16949FC2C2F11E58251F06F4E150D5
5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B16949F92C2F11E
58251F06F4E150D55" stRef:documentID="xmp.did:B16949FA2C2F11E58251F06F4
E150D55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>-L'@....IDATx..[{pT..?ww...b"(. . U^#$. 
(......D..2....a.T.v...P_Sg....N..B}[email protected]......{..v....9.&
gt;....pf~s.....{.....|.......Ea}.j.2.u..3>.N..:.n>..}...S..h...
%.M)((.......\..........e..;.b..8.C..NN.K2..... l....... ]a1..r!....M.
kY..'.....B6..J....\....n5...H7]...4&M.K...m.S2@.:(.4JD.2...XS........
. C....c%d.\....R.?...................f!. ...UQ.pmb...m=)..p...Nr.YonD
F9....$Y...O.,.N..K..f..D..u.;...S...}8.....pYL.*..9Y.z...E..E...eK.#.
5\W N"......0[C$../5.\5.).U...">.d...:..rA.(.V"R`............ZX....
.1.J.......NX;..C.n.k?d<.I..|.SaY.T.....1M.eGz...\..D<..@/..<<< skipped >>>

GET /imges/live2014/idx-bg.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Aug 2016 09:30:54 GMT

Date: Wed, 02 Sep 2015 09:30:54 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 16 Jul 2014 08:13:36 GMT

ETag: "4169713856"

Content-Type: image/png

Content-Length: 2049

Server: tux/3.3

Age: 1

X-Via: 1.1 lysx179:8080 (Cdn Cache Server V2.0), 1.1 hzh92:8108 (Cdn Cache Server V2.0), 1.1 quanzhou245:8 (Cdn Cache Server V2.0)

Connection: keep-alive
....04.S..}V.P.g....<....].ic..P...B [email protected]@ ..%.....$..........L"
(-&HE.HEG..........j..)SN.("h...x77cw.y.....}...'3...bi.?..D".$..K&...
!.3.x.|....0...aL....X..bUX.BO...H2...69.([email protected]$...)...
\.H.B.Q.....y..U....2P.. 9..b=.R."UY.....1...B.^@..az.&Ok.....uE8&.\.}
.b..3^..!K.K0=B..... ......... ...B<....l./...x..W....W.E.q..z. 1#.
h.......NA...gs!.PH....8.m(...B...2U!.1(....bZ:.....F1.1......Z..c...[
........Q&.}.F..m0&#..g.R.t.7.1`..J...!.X'......S1,o...r0#f..ttI.....j
UX.a.$_&.%j.FX.D....<.AQ......%`.(..0....!.\".. ./2.....a...Dk.....
......K5.G..U....'_Y..y.%o...V..Y$o.r.a..w.S).=.|m[|.....w.....G...?.j
.45~ll...'O.>....W.=$.........#?....R%......!.....uZ.y..;.....C...#
kz.n..|..a4...dE...1..U..Y.P#p.5....`?C.@({.=.,c.C[...!."......8.^.z..
...c..;...9M=u..j.x....A.<.<j1........pg..W..(....h...=....<.
..X...v...-.l....j....~l.....T8.../_i..:...R@..^.T.....t(.~%. ...oU.(.
...;......Q.Y6.....F)....2lW..!..........s..P....W~. ]{.1.......EyT...
.3.2W.*.(..h.....=#.&../..,......7!..m......O..8<....2Z..V.W*sg.iP.
..cz9.s./..n.@[email protected]|.^?....>.B.5^.
=........1......]..uF..1l...H.p.IG........aC....w.....c......>.....
...J...-m...E.Sa...No{~.s.N..hX [email protected].
7.,....C..T..K..o..3..c....0Z#U........pR...Psy'.:z......Lf.=..t.M`v..
.,......C$...... .x...y.S...h...?.7.c..v...>......=4.s{.O.......R2E
Ot[...N.W.!.....C {WI.a..z&.<.>......._...Sx..I........M.....|WR
.]......o.........:.Hg.....mok......u.m...m.. ..V3.rc.......=.5...<<< skipped >>>

GET /imges/live/logo_foot_v4.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 11 Jul 2016 10:41:09 GMT

Date: Fri, 17 Jul 2015 10:41:09 GMT

Cache-Control: public, max-age=31104000

Content-Type: image/png

ETag: "4287139147"

Last-Modified: Fri, 17 Jul 2015 04:27:25 GMT

Content-Length: 4193

Server: tux/3.3

Age: 1

X-Via: 1.1 huzhou89:8106 (Cdn Cache Server V2.0), 1.1 qzh243:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...c.........<..'....tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B16949FB2C2F11E58251F
06F4E150D55" xmpMM:DocumentID="xmp.did:B16949FC2C2F11E58251F06F4E150D5
5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B16949F92C2F11E
58251F06F4E150D55" stRef:documentID="xmp.did:B16949FA2C2F11E58251F06F4
E150D55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>-L'@....IDATx..[{pT..?ww...b"(. . U^#$. 
(......D..2....a.T.v...P_Sg....N..B}[email protected]......{..v....9.&
gt;....pf~s.....{.....|.......Ea}.j.2.u..3>.N..:.n>..}...S..h...
%.M)((.......\..........e..;.b..8.C..NN.K2..... l....... ]a1..r!....M.
kY..'.....B6..J....\....n5...H7]...4&M.K...m.S2@.:(.4JD.2...XS........
. C....c%d.\....R.?...................f!. ...UQ.pmb...m=)..p...Nr.YonD
F9....$Y...O.,.N..K..f..D..u.;...S...}8.....pYL.*..9Y.z...E..E...eK.#.
5\W N"......0[C$../5.\5.).U...">.d...:..rA.(.V"R`............ZX....
.1.J.......NX;..C.n.k?d<.I..|.SaY.T.....1M.eGz...\..D<..@/..<<< skipped >>>

GET /webapi/message/unreadTipList?callback=callback_639073&1441524480274 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_5580e628

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:00 GMT

Content-Type: application/json;charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0
93..callback_639073({"ver":1,"ret":true,"errcode":200,"errmsg":"succes
s","errkey":null,"data":{"total_num":0,"other":0,"list":[],"login_stat
us":"no"}})..0..HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:00 GMT..
Content-Type: application/json;charset=UTF-8..Transfer-Encoding: chunk
ed..Connection: keep-alive..Server: QWS/1.0..93..callback_639073({"ver
":1,"ret":true,"errcode":200,"errmsg":"success","errkey":null,"data":{
"total_num":0,"other":0,"list":[],"login_status":"no"}})..0....
..


GET /webApi/unpaycount.jsp?format=js&username=null&callback=callback_58451&1441524492008 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:11 GMT

Content-Type: text/javascript;charset=UTF-8

Content-Length: 151

Connection: keep-alive

XQ_POINT: 243

XQ_SPEND: 4

XQ_SEC: 3

Server: QWS/1.0
(function(){callback_58451({"errcode":22012,"errkey":"username","errms
g":"................................................","ret":false,"ver
":0});})();HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:11 GMT..Conte
nt-Type: text/javascript;charset=UTF-8..Content-Length: 151..Connectio
n: keep-alive..XQ_POINT: 243..XQ_SPEND: 4..XQ_SEC: 3..Server: QWS/1.0.
.(function(){callback_58451({"errcode":22012,"errkey":"username","errm
sg":"................................................","ret":false,"ve
r":0});})();....


GET /passport/addICK.jsp HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=s=1441524488758&r=http://flight.qunar.com/?ex_track=auto_5580e628


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:12 GMT

Content-Length: 0

Connection: keep-alive

XQ_POINT: 147

XQ_SPEND: 0

XQ_SEC: null

Set-Cookie: _i=RBTW-epCU2m8bzuRiPr0dioaiIex; Domain=.qunar.com; Expires=Fri, 24-Sep-2083 10:42:19 GMT; Path=/

P3P: CP="NON DSP COR CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa CONa HISa TELa OTPa OUR UNRa IND UNI COM NAV INT DEM CNT PRE LOC"

Set-Cookie: _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ;Path=/;Domain=.qunar.com;Expires=Sat, 05 Dec 2015 07:28:12 GMT;HTTPOnly

Location: hXXp://user.qunar.com/images/usercenter/clk.gif

Server: QWS/1.0

....

GET /webApi/popup.jsp?display&ver=v1.0 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 302 Found

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Length: 0

Connection: keep-alive

XQ_POINT: 184

XQ_SPEND: 0

XQ_SEC: 3

Location: hXXp://user.qunar.com/static/userlogin/prd/v1.1.6/loginPop-inner.css

Server: QWS/1.0

....

GET /static/userlogin/prd/v1.1.6/loginPop-inner.css HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Mon, 12 Oct 2015 07:28:17 GMT

Cache-Control: max-age=3110400

Last-Modified: Tue, 03 May 2011 06:22:57 GMT

Content-Encoding: gzip

Access-Control-Allow-Origin: *

Server: QWS/1.0
9bc.............Y]n...~.S.6...q.....D.l.....v...7.E6..I6.....9.>.=r
..&.G.....h.&H.?.jvW..W?.m..m'..b..l~.L......}.......VJ.R...........~.
...^.e.v....o.Z...J..u..J,E. e-.....i.....-...E.*.....=..J..x..ub..K.=
&.F.|..\.R.....E.d.....br.....M....G.3..U!.rg....uk...8../...y.......A
5N.Cw.....U.:./.E..y.$.~...w$Q.Um.ZV..."...`.|Q.....y%....w.}.."{L3.z.
x..e.j.)..4...Tu.......:...C!.........W1...i.)y..CJ....2OW-...R.....G&
A.c>....>..m....N.^.G...}".(.(...j..V..V...#'..6m....M'.........
.$S....m.."..:y.y#A..<.4....).V......BY. kgD .%...@.`V.N..#.vk.z.K.
....E..oL..T..N..t..2......T.7J....~....2.7.:\.~{....R.....)......!p.9
i..KQ.F.&.3.I..b3..<2f........I.....$....S......UwK....).=.<....
D...q...........V...|9....MxSd..w...A0.8`.d..<....4._!1.4........`.
...e...{..1L.x.`...............l>....$..s.X8..]....(......$...Z.Ui.
<~.O..].?o..FZWC..X.._.a.|.kU...Z...?.......x.1..Y\_...?....\..Xb&l
t;....?....T.U.V.Z4...(...FNoC&..........[..D.-.1.'..&..Tq......hl0...
q.{..0..........k.3BG...t.B.....N]..R?....\.....s.....R.o.z.`.b..6.gb.
.........{0....x......q.....]..Q .N.0X.....y.-R.[...R..ox.h[.Z|"m=....
b..m..d......8.;.c..1q0/...._...W..x.......F..ft..}.v..V0....u.....|..
[email protected].(a@..!. ..T.X,.....p.7.N....!....3Z.Q.V........D..].Y$Bl8qmD.
.......A, 2e.`...m...wF!H...6x.V .PW...A..J]S.b.a!D....*Mgw.k.<...O
>.B...5.h}..V_.t..G......s..}\.f.~..$'...E.J]eK)..z.....24......X..
k...UUcu....~...R.9.<{.,.....[..... ..9.&. T...*.m.HI~...w.. ^B.zo.
0..s......v......g`.`..E..q.b."qP...P..... .P.A...q.y.M.r.....T.;.<<< skipped >>>

GET /webApi/popup.jsp?js&ver=v1.0&_=1441524496962 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 302 Found

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Length: 0

Connection: keep-alive

XQ_POINT: 243

XQ_SPEND: 0

XQ_SEC: 3

Location: hXXp://user.qunar.com/static/userlogin/prd/v1.1.6/LoginPop.js

Server: QWS/1.0

HTTP/1.1 302 Found..Date: Sun, 06 Sep 2015 07:28:17 GMT..Content-Lengt
h: 0..Connection: keep-alive..XQ_POINT: 243..XQ_SPEND: 0..XQ_SEC: 3..L
ocation: hXXp://user.qunar.com/static/userlogin/prd/v1.1.6/LoginPop.js
..Server: QWS/1.0......

GET /index/order/unbind?callback=jQuery17207264470782716407_1441524492996&csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3&isTimeOut=true&_=1441524499493 HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: user.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:19 GMT

Content-Type: application/json;charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Server: QWS/1.0

62..jQuery17207264470782716407_1441524492996({"status":22032,"message"
:"...............","data":null})..0..HTTP/1.1 200 OK..Date: Sun, 06 Se
p 2015 07:28:19 GMT..Content-Type: application/json;charset=UTF-8..Tra
nsfer-Encoding: chunked..Connection: keep-alive..Server: QWS/1.0..62..
jQuery17207264470782716407_1441524492996({"status":22032,"message":"..
.............","data":null})..0..

GET /fxstatic/images/fx_loading_c785dd3.gif HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s2.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:07 GMT

Content-Type: image/gif

Content-Length: 1404

Keep-Alive: timeout=20

Last-Modified: Fri, 07 Aug 2015 08:43:16 GMT

Expires: Sun, 06 Sep 2015 20:21:22 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
GIF89aH......a....i......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket
 begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x=
"adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/0
6-14:56:27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/
02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="
hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0
/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp
:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.i
id:146BFF791A8911E2983DF11C711E32A8" xmpMM:DocumentID="xmp.did:146BFF7
A1A8911E2983DF11C711E32A8"> <xmpMM:DerivedFrom stRef:instanceID=
"xmp.iid:146BFF771A8911E2983DF11C711E32A8" stRef:documentID="xmp.did:1
46BFF781A8911E2983DF11C711E32A8"/> </rdf:Description> </rd
f:RDF> </x:xmpmeta> <?xpacket end="r"?>................
......................................................................
............................................~}|{zyxwvutsrqponmlkjihgfe
dcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%
$#"! .................................!.......,[email protected]&*.
...,x........Y....[...........|.^.."..7e...:.F)s5u...!.......,....H...
....o.............{e.G..h....(.....j0.S}.......Z..!.......,...........
.o.....b.By...'-p......b..'....!.......,............o.....b.By...'-p..
....b..'....!......., ...........o.....b.By...'-p......b..'....;..<<< skipped >>>

GET /live/2015/08/13/17/1003v1439458208429025694.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 08 Aug 2016 09:36:50 GMT

Date: Fri, 14 Aug 2015 09:36:50 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 3921

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Thu, 13 Aug 2015 09:30:08 GMT

ETag: "2278129136"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh93:80 (Cdn Cache Server V2.0), 1.1 fuz109:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.....c.U....i8......1.Y".......}.Y.Ch..K...T..u.F%.c.(..*..x.V.)BDT...
._...u....|:.w..:_...."....m.`bb..)..<.....f.3...Y ..V6n66(........
' .......</..@...*.JHI.....W..(sQRFV.O....ace.ec........u...a...$..
8.....a:}[email protected][email protected].[@f0...KL. ..G.|V.....:D\%.O.0).\/._.
...~ m.........m....F.<..@ .O....H.......3.............. .;C...<
.x..-N....d.....)...y...h}W.l\f-...>....m.[A.~."`........E.M...A...
....:c.........}..-...*...Y.|$T%b.9.o.m^.I&M.x.X}.g.k.W...I.G5Eg..:...
...A^.6..]|v..........."I....A..g-~...>.0...|}.v;I..u=&...t].......
.:..as e.#6.............*.H. ...uE..!.9-..B..>El..\.~B...?0O.i..T..
..p.z..v..R..~.Np..K../......ua.E....yx.......X.) ...Z.Ks..L...4.S...s
gG.....00.= ..u5.k..,A.h..J!j....Dq..e....\(.E!.Ge..DX.n.V.a...i...7.v
.....*.1GR...;.z./....|;.....Y;,.b...?.L.,.=.#N.[..Z&{.5:n:.I.NU.Pw.f.
..m.4........2..vS.R.s.o..^...{.......~....5...==......V.....X..M...9.
....O..1.........\.-%...v&.e.......-.........bn......&LN..g..u.K.\U...
.....M..A.{....eB...f.../f.....}..>.....9......g.....k....=.TD...F.
jy.....2."r9...z'....2E.t.BmPK*......U.|......8........rf..1.V......U.
...ry..........4?.f...B.v..[Nw..?...o..2.....VX..........x..cC..P.W...
..o\..8#...=.\|.,.... ..B..g.;.T....r.`.I.....U........j8.../U...}....
s.hn.SnD......!O4hF..P]$.:C..#1..z..<?...>0.J...QX..z .....rR4&l
t;)o7.Y.....j..4u>>W...G....oNM......?.}..\.:m......r..?aek..g..
.h.A.:..)...F...?9...........6[T..~[..F..?..Ld.o=G.MS.(.....2.[..f..E.
....]H#...%;$NFJ,(.3..(.F.....p...P 3.vJ.^R...JC.E.E....Tw........<<< skipped >>>

GET /live/2015/09/02/13/1003v1441173204394825695.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Aug 2016 05:56:30 GMT

Date: Wed, 02 Sep 2015 05:56:30 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 4605

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 02 Sep 2015 05:53:24 GMT

ETag: "3070981371"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 fuzhou52:80 (Cdn Cache Server V2.0), 1.1 fuz109:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....w<........E..\{..pe..v"W....;....6...u..3.W.kd...l.....
...=.?..s^.q.g...0BS[. ""..;.z....HAd R22..99...........=....  .....S.
[email protected].$..a..?...`....f.">........#
..........I..%'..G.....1....DBD..$..3...ye.....n.ZyB...Ja.UlM! .a..8..
..J....\......d .o........I.exI.......?.H...`.............C.g.b.6r^(.K
d.ty./...._.....)...........\..d..j...8....Ji<._l..93Th....b.0.MN..
.`5).0.......1..a/^T..:.hA{.a....D[..ng.[...oW...c..jv..3....k.\W.v...
..........Q....>^>v..8.v.3.*.^vF..Z.<jxH.*d..z.].F.^u/....A..
...r..f..L.......d1..^r.J..f...)..I..x|....q..l]"..q7ls.}.q..........{
?.X.=..b...'.......^~2..(.....<[email protected]
...Z.m.....NMm..".."[.`.......cs..f.K<..%...f.#..EBq..rx~...CI.di..
.o..@u%.L..o.w....Dk.G.k%g6....O.C\...... ?r...h7(U..R...3...vu.Vo8..s
.~.......s..Y..._.'t......B.b.........D..M...P.....o..8..X..IA.tFi3N.!
.m.q.O-T..Q.B/..-k....)`c.1Z..*....n.. Q.a5......>....E..m... ."m..
..[?f....2L..`a.t.0y^..O..wj.....=d....f....)....=/...............V...
J. 2.8Q. .......m.......uvs... ....I....F..4.B ....F...=Y...E..$..fO.d
o-6^..].4I.}.r(^...j.7....{{.<....bU...G..<c.(...u..i.....c....I
.D4...}m/..P..wn.=....|~..d.............g.<.Q.......}...v|...fam..G
..3=FU.i.U.K......T_ZQr<#p4_...MM.se5.......7......[q....=..Y....kB
..'........W.Uj..As23R{H.x.......q..._O.t&M......I.{.=Z..,.n1....D.h.5
zjh..a.s.n&|..l.neK.^q......,N..dl..v... L..Y.<...`.k.c......"|K}..
.].`..-U-..... !...FM.E.U....j{.@[.3.....8.....Q.."P.S....[..M.^.3<<< skipped >>>

GET /live/2015/08/05/11/1010v1438744520607433069_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 08 Aug 2016 08:29:43 GMT

Date: Fri, 14 Aug 2015 08:29:43 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8850

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Wed, 05 Aug 2015 03:15:21 GMT

ETag: "2544236997"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 huzhou84:80 (Cdn Cache Server V2.0), 1.1 fuzhou181:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U...{"........JFIF.....,.,.....C...............................
......%...#... , #&')*)..-0-(0%()(....................................
..........D........................!..1A."Qa..q#2....3BR..Cbr$DS....%5
c.s............?.../4.^.....~u.s..0..GI.<.XT......FH.$^*........d.,
..c..<...o.i......G.....8....c.V..)U..M........~...m..)}.......{ ..
.>.=.f.C.\Iez..d....Ky.H.1>Z.C.n....4.q...J...!5..D...E..n......
N".....u.1r.c%H.);..c.........>.#^.....[....QB...$...c5.....FX...WB
..0kZ.....p_..A.w.[...K..88..)..{{.a.1Ub:[email protected].#..F...
[email protected]._?..R..Q...hW7....].....6.c)..n....vi_6....z
~5{....-:.........uj..m....G4j09........|.4..A..U...z...5....j.W..)..T
K$0. q......P....A.d9.mc.._..e.X..Oi.2.....,.H.iF.C...'...Pr...5.t....
Me....gkc...j.*o..V.........1..6......./..L...^a).....e.R,.y.1....bX4.
....B...31...f'....3E...\t..(.Od...... .H.....iZJ.v..w;............0)U
..w.~.Z.....'..v^.........`9.....zi...L....l.;Tr..W.'...K.........-...
...!1 .P.......m".u...K......K.D....sF.M..EB-....<d...].JQun.1 .R9.
...a.Tx9.lkI....#..A.gi.3..(....v.. ..e..#..A..-..,..........Y8..o....
@.......[.g<... S.[..QV...L..v%[email protected]<..A-.r...._sJ....,.
E&...<.@.(.=.....6.....{^....D......?.Z.....c.;WI..(U...i.?....z..{
H.$.....)....b.......vs.Z....}.j.o.\H....zR{..T...jS.....d.w.\o.m.....
p?*.\V.P,...C.S.&TVELrr...U['.C.Q.....4..k..60....N..D....v...0...vV0.
.e|..ke."s......ep....f../,. ...>@e.O.d.F......\....(LWB..Yt.]|..A.
]..C.;0.*.ZJ.}.....1...j3.j.j..8.i~...gms.m....v...3H..F$.......K"<<< skipped >>>

GET /live/2015/08/01/05/1010v1438379669194197912_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 26 Jul 2016 01:48:18 GMT

Date: Sat, 01 Aug 2015 01:48:18 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 18479

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Fri, 31 Jul 2015 21:54:29 GMT

ETag: "634820617"

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 hzh91:88 (Cdn Cache Server V2.0), 1.1 fuz109:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.......U....UP.....Xq(Nqw(..m.w.....KqXhq_....EZ.."]...V.~.......?..L.
I.p.......n.....J.$$$..........AE{.......t.7.Xo..01....q.........RP3.R
P2R...q.1...s......f.efcg._.$ttt,.,",,"6.R...ky...`.~..Q.....H(.H...T.
...........j.....YU...PP........a......@#xCH.A..H....#../.D....I....).
...&.^dF...wTtf.....(...(.G.d....2.g. ........".g...........6........b
.>......s&~y........W....?o....4`.. 5g.....&;SC8...m..g.=F?....D.D?
..1.G.....B...~.{..B^L..N..........z...Ns.&. r.....%...VO.8..m........
....I5.X^.T.GhV..D..V...#...@[email protected],..#..:.l.7.FZ...;.....r.ok0.AY.
....Ex......z...x}7.....;.-_.?E6.......6.s..?eGg.....b$.QD.X.N..(..]..
..u..%I...-.6....[z.......t..x.ydO..~I....*.&..X......~....1M.o....G..
.7.'.... .JUVD..5...........T......7..y.v. .t.1_...L....#..| ..G....g.
c.}8.....x.BsB..y=iF..y.!.S.5.._.R>.."... .... .Q...u.b&#s..n;Um..b
......ZT.<[email protected]>|.LC.l#....2H.\I.{.2....R...9Jga.E..$.[.....m.
g.pt{~H.....3...z....fH*.8..X.....m..y........K%G.........\.>.....A
........xtw.).....;.h'.......q..r......<...T c.'n..v..ei...=...M..[
.......&3H.{.....o)|..|..C....o.c..0.W].#..:E.#..fgJ^a3.......<.. .
...W1..BD.-........~Pz.!....gc.0$O.......N\...J{.P..../l.......0..br.`
...3&.":qb...M....1/.do.Y.x...\.V.b[.8.",. L.......)O_.........=.Q....
.q..Fy.........b...6..`..I|...I".L......3.y.}...Q..B..%(.....6..\.:...
....r."n....B>e.....;E.....eMT..*;......#.;.. J.8(M5.>1v.O...:.l
...wv.sYU.sL.z,$.{.%.y.........=.$f.......O.....i.X.....z....b..u}.Hm.
.x..>..]ja..Lc...... ._......b....y?.n.'.H@..,.x.q..g.w.u...<<<< skipped >>>

GET /f2/9a/v627061383118550.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:14:43 GMT

Date: Thu, 09 Oct 2014 09:14:43 GMT

Server: ngx_openresty

Content-Type: image/png

Content-Length: 2615

Cache-Control: max-age=31104000

ETag: "221677515"

Last-Modified: Wed, 30 Oct 2013 07:35:57 GMT

Accept-Ranges: bytes

X-HITS: 5

Age: 1

X-Via: 1.1 fuz112:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......b.....N.......sBIT....|.d.....pHYs...........~.
....tEXtSoftware.Adobe Fireworks CS4........IDATx...O..w}...3;.]o....v
&....5).V.....^*P....-9Tj% >.P%(9%...!a....R9TJI.T.UQ..MT..PZ...)..
d7@b....?3... ..Zg......^...z._..\.~~k.g..I.<...y......\..&.3.$I.$.
..'y6...w.......$I....M...SG...o.f..n...J.lllfrr................#...Y_
[.O....K.fv..cs...?..7......N.,//3333333.f...-I.........I.d..j.wx...O.
....................k.s....Z.....7....Q........y.........c.V........Lm
.cfffff.....L.n.x..................$G./...133333.h:I.U............Z..Z
w...@......<z^.....t...Z............. .......<.7.T>.333333...
...=6w...133333.hzm......:\........y4.t.EWp........N.......333333.....
.......@......<.n/..........p.. .'j1.333333...W;[email protected]
.n..6.133333.........c..233333s.......333333..c.V.....Q........y..^...
....133333.h:. .......<..^.=u{m.bfffff..s..\[email protected]
..p..........N.. .........'..233333...w..U........y....333333......b.Y
........y4..^.]@.N.........}t{..\ffffff.... .i...........O...e ffffff.
M'{o@.....@......<...X{...X-.bfffff...Jg..\ffffff...Wp......y......
[...233333s....333333..Iv.............d.w@{q..................S.......
..G...mWp........Nv......c ffffff.=...#I..Hr...x..133333.hzg{ I..k.Z..
....;em.cfffff.....~...}.......c.tk3.333333...o.(..k.-\..X3I....*.....
.;g..O..fem..A......y.|dj*[....ofcm......%Iq...$...Ko....?823...f...(.
G.$I...XY.7.;;WV:._x....'y>...4I..^.MrW..$..L*I.$I....t....3...p.R.
.(....$I.$I...U. I.$Iz}d..$I.$.$..$I.$i Y@%I.$I...*I.$I.H.PI.$I.@.<<< skipped >>>

GET /f2/9a/v627061383118550.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 04 Oct 2015 09:14:43 GMT

Date: Thu, 09 Oct 2014 09:14:43 GMT

Server: ngx_openresty

Content-Type: image/png

Content-Length: 2615

Cache-Control: max-age=31104000

ETag: "221677515"

Last-Modified: Wed, 30 Oct 2013 07:35:57 GMT

Accept-Ranges: bytes

X-HITS: 5

Age: 1

X-Via: 1.1 fuz112:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......b.....N.......sBIT....|.d.....pHYs...........~.
....tEXtSoftware.Adobe Fireworks CS4........IDATx...O..w}...3;.]o....v
&....5).V.....^*P....-9Tj% >.P%(9%...!a....R9TJI.T.UQ..MT..PZ...)..
d7@b....?3... ..Zg......^...z._..\.~~k.g..I.<...y......\..&.3.$I.$.
..'y6...w.......$I....M...SG...o.f..n...J.lllfrr................#...Y_
[.O....K.fv..cs...?..7......N.,//3333333.f...-I.........I.d..j.wx...O.
....................k.s....Z.....7....Q........y.........c.V........Lm
.cfffff.....L.n.x..................$G./...133333.h:I.U............Z..Z
w...@......<z^.....t...Z............. .......<.7.T>.333333...
...=6w...133333.hzm......:\........y4.t.EWp........N.......333333.....
.......@......<.n/..........p.. .'j1.333333...W;[email protected]
.n..6.133333.........c..233333s.......333333..c.V.....Q........y..^...
....133333.h:. .......<..^.=u{m.bfffff..s..\[email protected]
..p..........N.. .........'..233333...w..U........y....333333......b.Y
........y4..^.]@.N.........}t{..\ffffff.... .i...........O...e ffffff.
M'{o@.....@......<...X{...X-.bfffff...Jg..\ffffff...Wp......y......
[...233333s....333333..Iv.............d.w@{q..................S.......
..G...mWp........Nv......c ffffff.=...#I..Hr...x..133333.hzg{ I..k.Z..
....;em.cfffff.....~...}.......c.tk3.333333...o.(..k.-\..X3I....*.....
.;g..O..fem..A......y.|dj*[....ofcm......%Iq...$...Ko....?823...f...(.
G.$I...XY.7.;;WV:._x....'y>...4I..^.MrW..$..L*I.$I....t....3...p.R.
.(....$I.$I...U. I.$Iz}d..$I.$.$..$I.$i Y@%I.$I...*I.$I.H.PI.$I.@.<<< skipped >>>

GET /live/2015/05/11/15/1011v1431328135664996922_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vi0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 30 Jun 2016 10:42:51 GMT

Date: Mon, 06 Jul 2015 10:42:51 GMT

Server: ngx_openresty

Content-Type: image/jpeg

Content-Length: 8707

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 06 Jul 2015 10:40:06 GMT

ETag: "3198231421"

Accept-Ranges: bytes

X-HITS: 1

Age: 1

X-Via: 1.1 huzhou85:80 (Cdn Cache Server V2.0), 1.1 fuz114:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.....[.U....uX.....#.A.s.....F7H#..F( 5B:.E.i.1..nF.(-..].)H..........
..>......:.|....2.....*......g..y.2....1..=bbb..{.d..d...1PR=..1...
....8.....9..y.y...A .VnIY.a.A...........'.''..~..X..Yw...{.4.........
R..}...{'!....?...$ $".GBz._@.#.>...O.$$$ .......P.R>.R$...$fw..
.M....T.Cc...S..=..........7./.DTL\BRJ............76AX.....w@zxzy.....
..x.!2*:)9......./(,*.)- .ohljn....~...?084..MLNM.......olnm........_\
^].........?rQ...' .........?.......(...-....C.Q %....p....X.. ....p..
......................5.H......I{........W.....57r.|D.....g6H.sy....B.
.*......m.....St.FE..\h...3M-.B .1...p.!.VS........>.;..w...d.U....
.0./m.f[..w.<7.4....{.Z...\.J.....6.....H.Ue.?.z<.7)SP_.) ...\W.
&....`...].'.\..%)G.a..%.J.......o..'...0.c....W...c.....[.D......H.[r
F?.M..C..,3P.8,D..f.|u'.'...H.......V.....0'....p..`..b...w.k..<D.^
V.......X.&.*.&.|..F........=.3..8..&.^=..@.)....x...Q...:?..f}....R..
l.L.V,...m.....B.......s....I............5[f*K...E.T.JK...>m.z...&l
t;#......u.....e.....5...W.......,).1.Q......:.../.H..a.M....2........
YbE..........OY..*...W.....c....*s.....y..TWt.}.e..0#.#.Q......R....*.
*95 .,...hT.'..dh.T.....&.K...n.W9||Ja.&....F..RM.O......:..e...V.#..t
J@<........-D..*g.MZ.*........'kE....h.7..[5...6q-.....MU*R....\c..
c....`..j.|...Z.dB...K..%..EY...1./....<.s.......qAg.YBe{Z3.u.uG..E
....a...`.......~.........8.n.J...f....j.w..d.....2.c..e..z.h.....q...
....`....,OHc.i....P..I.lDM.....p.h....-."c.S.........en.~...G....|..F
....9.. .Q&.j,9...nn.....G.U7f.........#..........i...,...p.......<<< skipped >>>

GET /err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:06 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......


GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:08 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:08 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6room
s.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&e
rrcode=502..X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:
2 (Cdn Cache Server V2.0)..Connection: keep-alive..<html>..<h
ead><title>302 Found</title></head>..<body bgc
olor="white">..<center><h1>302 Found</h1></cen
ter>..<hr><center>nginx</center>..</body>..
</html>......


GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:09 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:09 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3
.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode
=502&errcode=502&errcode=502&errcode=502..X-Via: 1.1 hzh93:8111 (Cdn C
ache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)..Connection: k
eep-alive..<html>..<head><title>302 Found</title&
gt;</head>..<body bgcolor="white">..<center><h1&g
t;302 Found</h1></center>..<hr><center>nginx&l
t;/center>..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:09 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:09 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&e
rrcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502
..X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cac
he Server V2.0)..Connection: keep-alive..<html>..<head><
;title>302 Found</title></head>..<body bgcolor="whit
e">..<center><h1>302 Found</h1></center>..&
lt;hr><center>nginx</center>..</body>..</html&
gt;......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:10 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:10 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errur
l=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode
=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errco
de=502&errcode=502&errcode=502..X-Via: 1.1 hzh93:8111 (Cdn Cache Serve
r V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)..Connection: keep-alive.
.<html>..<head><title>302 Found</title></he
ad>..<body bgcolor="white">..<center><h1>302 Foun
d</h1></center>..<hr><center>nginx</center&
gt;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:11 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:11 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errur
l=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html
?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&e
rrcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502
&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502..X-Via: 1
.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server 
V2.0)..Connection: keep-alive..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx</center>..</body>..</html>..t>....<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:12 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......


GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:13 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:13 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errur
l=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html
?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/er
r.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.
com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&e
rrcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502
&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=5
02&errcode=502&errcode=502&errcode=502&errcode=502..X-Via: 1.1 hzh93:8
111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)..Con
nection: keep-alive..<html>..<head><title>302 Found&
lt;/title></head>..<body bgcolor="white">..<center&g
t;<h1>302 Found</h1></center>..<hr><cen<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:15 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>..HTTP/1.1 302 Moved Temporarily..Date
: Sun, 06 Sep 2015 07:28:15 GMT..Server: ngx_openresty..Content-Type: 
text/html..Content-Length: 154..Location: hXXp://vi0.6rooms.com/err.ht
ml?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/
err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6room
s.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0
.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=http
://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errur
l=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html
?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/er
r.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.
com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6
rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MI
N_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errco
de=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&err
code=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&e
rrcode=502..X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:
2 (Cdn Cache Server V2.0)..Connection: keep-alive..<html>..<h
ead><title>302 Found</title></head>..<body<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:17 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:17 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: vi0.6rooms.com


HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:20 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:22 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:24 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/pr
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:26 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&er
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>......
<<< skipped >>>

GET /err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=50
HTTP/1.1 302 Moved Temporarily

Date: Sun, 06 Sep 2015 07:28:29 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 154

Location: hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vi0.6rooms.com/err.html?errurl=hXXp://vj3.6rooms.com/js..6rooms.com/js/z_MIN_47&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502&errcode=502

X-Via: 1.1 hzh93:8111 (Cdn Cache Server V2.0), 1.1 fuz109:2 (Cdn Cache Server V2.0)

Connection: keep-alive
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx</center&g
t;..</body>..</html>....<<< skipped >>>

GET /fxuserlogo/85/20150707/20150707155554612396.jpg HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s3.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:06 GMT

Content-Type: image/jpeg

Content-Length: 2511

Keep-Alive: timeout=20

Last-Modified: Tue, 07 Jul 2015 07:55:54 GMT

Expires: Tue, 06 Oct 2015 06:54:37 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
......JFIF.............>CREATOR: gd-jpeg v1.0 (using IJG JPEG v62),
 default quality....C................................... $.' ",#..(7),
01444.'9=82<.342...C...........2!.!22222222222222222222222222222222
222222222222222222......U.U.."........................................
.........................................'[ .._.d5...H.^G8E.6...WN..p}
..\.......&~G<{\....}4..4....s:....`..d\U..G.Ll.s.....F.Z`..hD.Y.J4
 ..r.t.V.L.%...w...'.*p3.R...G....0..Q..V.....w...'...................
......!.2."#%3.14A..........._....r.7....e..9...<yH...P.....n..Yav.
...6.....E;. 7b.FX..~.k...1Y.j..Zk....,. ...6.Q3,7...............;U...
..ac.6m....I}......O.J....q-.}"7.)".vg.V.d...FM..y......?.iY.._..n$...
..tc...Qc.9..LI...yP..E.QJ..Fu.j".m...-...\...".*...N...m....w...0..!5
....a%_.....>...._.z].~.B}...... ........................ !1.2a....
....?...1......<..j^.X....d.k.03........g..N*.D...N=...|..,.?... ..
.......................! 1Aa........?..2..f"..].."JT..q.F..;.=.....S..
..]..K...Gf.... ......................!..1Q. 2Aa#."Bbqr..........?..9.
I..U.$}.I...R...w.a..*X...;Ee.;S.:..f.Y.{..(.J..R9m.v...Vgu)....ie...)
k.RbVI ....W.H_`.A....u8.]{n.mA#.].,F...Ge-0Pk.U.....r.F..... .ts..].3
......{.O.s.w./Q.gt=Q. [email protected].:....[..3....Z.c_...$.............
.......!1AQaq................?!....BZ b .....yQ...f..:..........m.L...
a......].}...V..N...._....e.1.L...K.9'H.....'..[.l<.5.3...S...I&bW.
b.X..8..n{.`....J.C7..#.t.W...(...-.@[email protected].&yw...H.*..%.s.=`T.....\la.
.......^^.2.....t..:f"...h.e.'..,..l..q...,7..."p..i...[vK...d...a<<< skipped >>>

GET /site/images/wns/20150806_flighthp_background_464x320_Ebb_6027.swf?clickTag=http://qde.qunar.com/event.ng/Type=click%26FlightID=179692%26AdID=240081%26TargetID=8462%26Segments=13,28,148,373,530,534,535,536,539,540,541,542,543,544,545,546,548,549,550,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,611,1101,1142,1183,4487,4494,4497,4648,4649,4676,4742,4951,4956,5001%26Targets=5302,29,1504,8462,8347,8351%26Values=34,46,51,63,77,80,101,110,150,204,215,228,243,250,252,301,305,323,5402,5598%26RawValues=%26Redirect=T58eySexufTRN91ezLFpOgFQ6MQfQ46JHk1J5g5gXi_kNdila1GaDckyVn9eP3Dh_FNtTX2g3kfgSYQd3EkEYcwSReZ1muv759lW5plBku02sdIKDRbO89djMgImKw8PAQxMzv8jyfIY638s7zpLVkk6iXchx4ZF27gyLD3hRnY= HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Content-Length: 10385

Last-Modified: Thu, 06 Aug 2015 10:45:11 GMT

Accept-Ranges: bytes

Server: QWS/1.0

Expires: Mon, 12 Oct 2015 02:32:45 GMT

Date: Sun, 06 Sep 2015 07:28:19 GMT

Connection: keep-alive
CWS.....x..zw@._..$t.....R...%t.......H.B(...D@.. Ez1...J..;. ]D......
.....z.y..d..k..}f.s2;>.n(.\......<.9...T.x.p..f'. .......!.=.du
@...yy...y..x\..y....x...P(.k.........x..J1.)..=l..n(.........'J......
...d]<x.a.6p.[Wg^.k7^~.>.S.....;........$%sj...d......j.....[;1.
..3C.m<.N0fAQ.[.....-.<._.../...........B...........=.<.j.Q.0
k..?...>!}~!q!1q>.n>Qq......Mw.!......Z2......?.-.._.u.tw:./.
-/....wAy`....^.......5J.....ak}*....pp.u....C.NC}......%a=..._w..3..k
......m.........p.t..c..~.0...*..(k.[......A `.P>Y9..........?.....
............Y....GM....4n..`..j...Q.rG.#....../*,............ BE......
D.d.......V.;...Stwu>..7kw..i.$Y...4Lg..G..0. ....O.?j.......... ..
.......Bed.EE..e.......`.t..r.....*............=.J1.r.....8. ......KwW
W.`..sA.N0....r..O.w........s..q..b..........yQ.....g7^M1(.....7THYK_A
[email protected]._....4!..........hi..IB..........bAaA.....T...&i.B8.
....fq...d...n...........Q.p..2...k%.wC9..z0..l.SpvC..p.B....n@<. .
..nA..[..%e*.x.....@..:.....:.......\.'...Q...$.N..JX....".c...Dg[..'.
.....!...............d2.....",..8..K....0@...`{.`fDl<..Gy.q.....U..
.i..........A......l!4.Q.2mZs).@... ..(.hO........n[....|..x........aO
......>.).J.f..Z./.!14?Z..`..s.2......X(.......s..z.@....},..I.....
..Pn....>.C(R..i1.)6.. .....a.O..F.....)..j.....D..&.=..Y.-.0..Z<
;.Z.n [email protected]/..*}....k..*?......Do .a".f.u...$..K..RY..9.E.
.B...........UL.8c......x......gi.OJ..S.(\..&(.....&......2..l....}..$
M].&..c...c..2.o..N...]|aC...;~.._..#...\....,......7.......aw.N..<<< skipped >>>

GET /site/images/wns/20150828_flighthp_fc_912x250_6983.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Content-Length: 92571

Accept-Ranges: bytes

Last-Modified: Fri, 28 Aug 2015 14:18:12 GMT

Server: QWS/1.0

Expires: Thu, 08 Oct 2015 12:08:02 GMT

Date: Sun, 06 Sep 2015 07:28:19 GMT

Connection: keep-alive
CWS.....x....TU..0~..S.i......A..\....X...4R.J.".H].;.K.......y.f.....
k}k....}.o.}v.......b..$...i..|<.~.....$....t..h}......[.t....b....
.\..\.n6......<|.||...Nw_'...N'wz:).......7.......j.....C...'.>.
...ur...r..rA...},\.y.x... ........nz...R.WT.J.....Zn..Pww.x..Zy]A.AZN
ZKO...-?.....y.%........................c.............P.. ....3.......
....7.?.;[..}...?(i%......] ./.u.ts..1 .7....u.pG8..... b..n...R....0.
[email protected][g............. .OUBX....!wt.....C.j....z..Pn........ ..)e...T.
.=,. P..).....JLPDA.GX^[email protected]._T@._IV.W..OPI.......4.g....~.f.oH...
..4.`60D...T!.^QE9QA>..R.d..............R.@./.B.`^P %7g..Qp.ps.^yJ.
.gW].....`..&..2..X..f...)).*.....). ....gi..7n.."h...?...)..S........
..Q^.......... ....@E..@......|.O../[email protected]
.0 I:.Au.u.y.-....T.OC..g........UA9"....%I.].....}UIW$...t?...u-Zyg7(
. .?'[email protected]..'.......0.O.sC......y...g...Ui.t?...(....
......U..".QI.WD.W..WNX.g... ....'(.'..'....Q...999YQ~^A>.^..y...~.
........>....Z........8_..........Y...y....q|.>yaY!.a!a...-B.OD.
a4...D..D.h._...........s.#6~)....b...q9.}GE^.LKGSIEM..............8:y
..(...14.E.............E]WI...U..i..D.o.`.Q......EK..{[email protected]....
?F.....W...8......j.Dn..... .........s.[9:Y!. .].....F..........x.....
...8...#...].:B-.....j...b..y.8....<....tl._....=.>.WF.;..".....
..J..~...Po......"(.nV.~..b....?l...W..E8Y.WTH.....W......W....j......
.....9..D...y..}...P......c.......[I...!..._uC...u.._./.....x\W.~q....
.......o.g.D..uG...1..]...........nPDs..Gd.....n' ....s.WA...~.?..<<< skipped >>>

GET /site/images/wns/20150714_flight_homepage_bottom_banner_912x90_6687.swf?clickTag=http://qde.qunar.com/event.ng/Type=click%26FlightID=164623%26AdID=235155%26TargetID=8345%26Segments=13,28,132,148,373,530,534,535,536,539,540,541,543,544,545,546,548,549,550,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,611,1101,1143,1183,4053,4487,4494,4497,4648,4649,4676,4742,4949,4954,5001%26Targets=5302,29,1504,5768,8345,8353%26Values=34,46,51,63,77,80,101,110,150,204,217,228,243,250,252,305,308,320,5402,5634%26RawValues=%26Redirect=T58eySexufTRN91ezLFpOuUgESJcUeNGAJjELNEGPow-zpNxVQsorYHxgyhuwf2iQHqwNdMcUgmvajOWroxGEA== HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Content-Length: 36005

Last-Modified: Tue, 14 Jul 2015 10:31:28 GMT

Accept-Ranges: bytes

Server: QWS/1.0

Expires: Mon, 12 Oct 2015 06:32:19 GMT

Date: Sun, 06 Sep 2015 07:28:19 GMT

Connection: keep-alive
[email protected]....=.\.wI........g...]......s.{..
...Lw...Vw...{.........3.12....../. 4$$AGS3~U...n6.. ..;!.oNN..,,.....
..v..,l|||,..,..LO.&.......-..Z.....@.........._..&v.NB....u.....-....
......aq3.gacfe.K.../..4v.sT........V............z.7.~ ...........[N^6
[email protected]; ... 7.;.:..?;.?'.# /? ..p....U..dlj.d..d.&6Nu6^~6.'.....
.?.v..f..G..B..d....?....ok....../S....h..u.=.......~3;G.c'ac{{k..._.,
nL.ov. Wc. .._V....... =.LA..?.66,.B..T.f.{4H........9;..Op..&.....-..
......~.0[X..s....psH....Jr.....qK.srJ..ss..q....H......./...f..B.?..R
Sr.0.xJ..F.M..K......M./U1.QV>^.n>q..vQ....7..~W.....T.....Y.7v.
..rJ.._V.e....[.76..?.....K.....8.8  ... .?.D.x9......8.E9....f....G..
..M...o.=1......,.,..o..Q...EP1...BJ.....Y....N.@7./.... '....7$s.3$..
uC....]....(nma.df..rR...".3..M.M..M....Ug.l.tb15.y..(rr..0.q...q2s...
r..rp<...".................)...bsc..s4..sz.....{..$k;c.............
$.D.......H/P.Q. ..J....y"2......$r..gO.4d...h....Q..?W%BjA.~. #.. 6&l
t;..<..Zq.^..7D........\.vhEz. y..<...?G~.....'P..qZ??u...DA".~j
. .<.Q.|...k..a~..>r .......~?.....t8M.I..o........HH....?CBBC..
>.e.&....D....>..!..f.c .m..}?2...k.~..'..S.M.>....;.d...e...
.7./#?....la.0N.5`L...[[email protected]([I.d
..1.... n.LW.P.fL......S..bDE.-..z".......{PN.......].....;.....y./w.F
....i?....$.....8q[S.<-_IdC.....~.....I...a....NDy.g...Q...6sG.PR&g
t;WJy.....>?K....d........7..N..?..6..M?L~M....n./]....h...:..).l..
s........d.....R.$%"..........>.Q0#.F....9....1.%)......fV.....<<< skipped >>>

GET /site/images/wns/20150828_flighthp_hs_24X202_6983.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 6826

Accept-Ranges: bytes

Last-Modified: Fri, 28 Aug 2015 09:58:09 GMT

Server: QWS/1.0

Expires: Sat, 10 Oct 2015 19:32:00 GMT

Date: Sun, 06 Sep 2015 07:28:20 GMT

Connection: keep-alive
......Exif..II*.................Ducky.......>.....ohXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:890EF896E747E5
119DE5FD1841A01B7A" xmpMM:DocumentID="xmp.did:E103185C4BCC11E5859C91E1
08559BB5" xmpMM:InstanceID="xmp.iid:E103185B4BCC11E5859C91E108559BB5" 
xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:76ED66A6C84BE5119E1AE82473A31C48" stRef:
documentID="xmp.did:890EF896E747E5119DE5FD1841A01B7A"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT...
.IEC sRGB.......................-HP  .................................
...............cprt...P...3desc.......lwtpt........bkpt........rXYZ...
.....gXYZ...,[email protected].
......$lumi........meas.......$tech...0....rTRC...<....gTRC...<.
...bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..
desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1............
......................................XYZ .......Q........XYZ ....<<< skipped >>>

GET /site/images/wns/20140717_quna_hp_logo_sjq.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 6907

Accept-Ranges: bytes

Last-Modified: Thu, 17 Jul 2014 03:11:22 GMT

Server: QWS/1.0

Expires: Sat, 10 Oct 2015 16:26:04 GMT

Date: Sun, 06 Sep 2015 07:28:20 GMT

Connection: keep-alive
.PNG........IHDR..............X......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /site/images/wns/20150902_flighthp_912x90_7241.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 32806

Accept-Ranges: bytes

Last-Modified: Wed, 02 Sep 2015 08:54:55 GMT

Server: QWS/1.0

Expires: Sun, 11 Oct 2015 00:31:41 GMT

Date: Sun, 06 Sep 2015 07:28:21 GMT

Connection: keep-alive
......Exif..II*.................Ducky.......<.....zhXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:555bd36a-e048-
3b4d-b990-d375584eff18" xmpMM:DocumentID="xmp.did:CBA29DCB4FBD11E5AB60
EA492C99B906" xmpMM:InstanceID="xmp.iid:CBA29DCA4FBD11E5AB60EA492C99B9
06" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:Deriv
edFrom stRef:instanceID="xmp.iid:555bd36a-e048-3b4d-b990-d375584eff18"
 stRef:documentID="xmp.did:555bd36a-e048-3b4d-b990-d375584eff18"/> 
</rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac
ket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..
acspMSFT....IEC sRGB.......................-HP  ......................
..........................cprt...P...3desc.......lwtpt........bkpt....
....rXYZ........gXYZ...,[email protected]..
.L....view.......$lumi........meas.......$tech...0....rTRC...<....g
TRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packar
d Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1.
.................................................XYZ .......Q.....<<< skipped >>>

GET /site/images/wns/20150902_flighthp_272x220_7241.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: source.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 26335

Accept-Ranges: bytes

Last-Modified: Wed, 02 Sep 2015 08:54:55 GMT

Server: QWS/1.0

Expires: Sun, 11 Oct 2015 00:31:39 GMT

Date: Sun, 06 Sep 2015 07:28:21 GMT

Connection: keep-alive
......Exif..II*.................Ducky.......<.....*hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="ht
tp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.
0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" x
mpMM:InstanceID="xmp.iid:F8E77A0A4FB111E583C28E86871C72E5" xmpMM:Docum
entID="xmp.did:F8E77A0B4FB111E583C28E86871C72E5"> <xmpMM:Derived
From stRef:instanceID="xmp.iid:F8E77A084FB111E583C28E86871C72E5" stRef
:documentID="xmp.did:F8E77A094FB111E583C28E86871C72E5"/> </rdf:D
escription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r
"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT..
..IEC sRGB.......................-HP  ................................
................cprt...P...3desc.......lwtpt........bkpt........rXYZ..
......gXYZ...,[email protected]
.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<
....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company.
.desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1...........
.......................................XYZ .......Q........XYZ .......
.........XYZ ......o...8.....XYZ ......b.........XYZ ......$......<<< skipped >>>

GET /pa?p=1:494666586:17 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: tws

Date: Sun, 06 Sep 2015 07:27:58 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_old_171.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate

0..

GET /69/06/d184421399861104.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: i3.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 13 May 2016 02:22:23 GMT

Date: Tue, 19 May 2015 02:22:23 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 12 May 2014 02:18:28 GMT

ETag: "3705311350"

Content-Type: image/jpeg

Content-Length: 41294

Server: tux/3.3

Age: 1

X-Via: 1.1 sdyt37:8106 (Cdn Cache Server V2.0), 1.1 dls22:7 (Cdn Cache Server V2.0)

Connection: keep-alive
....t/pS.....T\Q. [email protected]....=.{.%....3...[......V
].z...............a. ...^............kY..j............................
...  ..`ljm.Bfbn....8m.. ...Rhq*.(8..[.........M..My.(....<.<l.l
.]..<lm...<.).!....o53..?H\..)D."..........8....,..d\\L...\\....
XX..Y^?\@V.>N.>6n.....6'3.>Uq...z-.R..(www&wv&{'KfV^^..2.....
@gO;.c...3..%..;.:..\@.vd...&.......6..AA.?......e.7.......L....`..j.l
..dj.JN.....Y.....O....).6......v.2.....&3........7.(.....; ......8.. 
.._.r.[....%!!"..-&.....*....%).!...."&!&..o^.;g.c;S......W.....s27v.w
R......P..w.w..w .S.".......;..........fn&.doK........b.<..<....
...........e.e..............._.......W......1._..1y..^g....x9....\.Y..
..yY..................................o.......[.......................
./].Ld..l...&............>[email protected]......(xDX8$..w..88X.W...
0Pa..0.p.....,rl$V...d.c6\G.Q...U......qT.....N..5j.......Z.?.L..]....
..z..{9%\.g%.0_....!!#!..#....e.p...X.."*...1...g9..l..8..&.S.x.N...j.
5b.?7M9...j.8...._.....`1.0...N.w...A...9..AV..............q..z.,..C..
...y........D&..C.>NX.....E...F..~.U?T .....X..}K...L.l(......@.@..
x6..#.,.,..A6.[t..]....J...g.. ...f.3.qn).&..#...c..vF%..w.B-..\...."6
4R...Tt...'..j"[email protected].'......\. .*f....].'s.....N...ZI.$..#`3...^....
..q..:oBm.[.Th^.....X..|..,....-..$..a.....&...N.d.%..n.k.'...'..&qd..
.'...........Uv}.c......Nl........T.KcY..-V...S(.%.*.)!e.3.xJ...@."c.a
.K....#.![..i.....z......=|...`....><f.Ys.4.\..-....#v7...Xp.6-.
F.N......u....~*.z....m...5 S.6..n.......V.(....c.._.~.../|4.kwK..<<< skipped >>>

GET /6byT5o6MMDJf6ZmE5Lu2NTBfMTQzNjc3MTUzNzYwMw.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 3gact.bs2dl.yy.com

Connection: Keep-Alive


HTTP/1.1 500 Internal Server Error

Server: nginx

Date: Sun, 06 Sep 2015 07:28:27 GMT

Content-Type: text/html; charset=UTF-8

Content-Length: 793

Connection: keep-alive
.    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.    <
html>.        <head>.            <title>Error: 500 Inte
rnal Server Error</title>.            <style type="text/css"&
gt;.              html {background-color: #eee; font-family: sans;}.  
            body {background-color: #fff; border: 1px solid #ddd;.    
                padding: 15px; margin: 15px;}.              pre {backg
round-color: #eee; border: 1px solid #ddd; padding: 5px;}.            
</style>.        </head>.        <body>.            
<h1>Error: 500 Internal Server Error</h1>.            <
p>Sorry, the requested URL <tt>'hXXp://3gact.bs2dl.yy.co
m/6byT5o6MMDJf6ZmE5Lu2NTBfMTQzNjc3MTUzNzYwMw.png'</tt>.    
           caused an error:</p>.            <pre>download 
internal error</pre>.        </body>.    </html>.ont>....

GET /55So5b-D5ZCsX-WbvuaghzUwXzE0MzY1MTkzNDEzODA.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 3gact.bs2dl.yy.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:29 GMT

Content-Type: image/png

Content-Length: 7008

Connection: keep-alive

Accept-Ranges: bytes

Expires: Mon, 07 Sep 2015 07:28:29

Last-Modified: Fri, 10 Jul 2015 17:09:05 GMT

Etag: 9ec007a03e36a509745f9063b17e6faf0efba12a

Cache-Control: public,max-age=86400
.PNG........IHDR...2...2......?......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /5YGa5pyL5Y-L5ZCnX-WbvuaghzUwXzE0MzY1MTk4MDU2NDE.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 3gact.bs2dl.yy.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:29 GMT

Content-Type: image/png

Content-Length: 7076

Connection: keep-alive

Accept-Ranges: bytes

Expires: Mon, 07 Sep 2015 07:28:29

Last-Modified: Fri, 10 Jul 2015 17:16:46 GMT

Etag: 1efedcf88fa9328c585df83776bc63590183366c

Cache-Control: public,max-age=86400
.PNG........IHDR...2...2......?......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET / HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: czcycm.com


HTTP/1.1 200 OK

Content-Length: 19274

Content-Type: text/html

Content-Location: hXXp://czcycm.com/index.htm

Last-Modified: Wed, 02 Sep 2015 13:57:03 GMT

Accept-Ranges: bytes

ETag: "c81b3e3f87e5d01:50b"

Server: Microsoft-IIS/6.0

Date: Sun, 06 Sep 2015 07:27:45 GMT
...<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
;..<HTML><HEAD><META content="IE=7.0000" http-equiv="X-
UA-Compatible">..<script src="hXXp://int.dpool.sina.com.cn/iploo
kup/iplookup.php?format=js" type="text/ecmascript"></script>.
.<script type="text/javascript">document.write("<TITLE>...
"   remote_ip_info["city"]   "..........................."   "</TIT
LE>")</script>..<script type="text/javascript">..//....
..........var step=0; ..var _title=document.title;..var space='';..for
(var i=0;i<=_title.length;i  )space ='...';..function noreg_cancel(
){}..function flash_title().. {..  step  ..  if (step==15) {step=1}.. 
 if (step==1) {document.title=space}..  if (step==2) {document.title=_
title}..  setTimeout("flash_title()",500);..}..flash_title();..</sc
ript>..<META charset=utf-8>..<META name=keywords content="
............|.........|.........|......|............|..............." 
/>..<META name=description content="............................
..............,.......................................,...............
...,......,.........,.........,......,.................." />..<l
ink rel="Shortcut Icon" href="hXXp://ctc.qzonestyle.gtimg.cn/aoi/img/l
ogo/favicon.ico?max_age=31536000" type="image/x-icon" />..<metah
ttp-equivmetahttp-equiv="x-ua-compatible"content="IE=7"/> ..<lin
k href="css1/ccc.css" rel="stylesheet" type="text/css" />..<scri
pt type="text/javascript" src="js/DD_Deldtedng.js"></script&<<< skipped >>>

GET /css1/ccc.css HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: czcycm.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Length: 3950

Content-Type: text/css

Last-Modified: Wed, 02 Sep 2015 13:57:00 GMT

Accept-Ranges: bytes

ETag: "05ef83c87e5d01:50b"

Server: Microsoft-IIS/6.0

Date: Sun, 06 Sep 2015 07:27:47 GMT
<STYLE type=text/css>..* {...PADDING-BOTTOM: 0px; BORDER-RIGHT-W
IDTH: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT: 1
4px Microsoft YaHei, Arial, Helvetica, sans-serif; BORDER-TOP-WIDTH: 0
px; BORDER-BOTTOM-WIDTH: 0px; COLOR: #555; BORDER-LEFT-WIDTH: 0px; PAD
DING-TOP: 0px..}..BODY {...BACKGROUND: #FFF;...background-color: #FFF;
..}..A {...COLOR: #09F;...TEXT-DECORATION: none;..}..A:hover {...TEXT-
DECORATION: underline..}..H1 {...FONT-SIZE: 18px; FONT-WEIGHT: bold..}
..H2 {...FONT-SIZE: 18px; FONT-WEIGHT: bold..}..H3 {...FONT-SIZE: 18px
; FONT-WEIGHT: bold..}..H4 {f...FONT-SIZE: 18px; FONT-WEIGHT: bold..}.
.H5 {...FONT-SIZE: 18px; FONT-WEIGHT: bold..}..H6 {...FONT-SIZE: 18px;
 FONT-WEIGHT: bold..}..STRONG {...FONT-WEIGHT: bold..}...clear {...CLE
AR: both..}...main {...BORDER-BOTTOM: #e9e9e9 1px solid;...BORDER-LEFT
: #e9e9e9 1px solid;...WIDTH: 960px;...BORDER-TOP: #e9e9e9 1px solid;.
..BORDER-RIGHT: #e9e9e9 1px solid;...padding: 20px;...margin-top: 10px
;...margin-right: auto;...margin-bottom: 50px;...margin-left: auto;...
background-color: FFFAFA;..}...main .mainone {.....}...main .mainone H
1 {...BORDER-BOTTOM: #e9e9e9 1px solid; LINE-HEIGHT: 30px; MARGIN-BOTT
OM: 10px; HEIGHT: 30px; FONT-SIZE: 18px..}...main .mainone P {...LINE-
HEIGHT: 25px;...TEXT-INDENT: 2em;...MARGIN-BOTTOM: 10px;...font-size: 
16px;...font-family: "............";..}...main .mainone .mepic {...MAR
GIN-BOTTOM: 10px..}...main .mainone .mepic IMG {...WIDTH: 318px; FLOAT
: left; MARGIN-RIGHT: 3px..}...main .mainone .metui {...BORDER-BOT<<< skipped >>>

GET /css1/css.css HTTP/1.1

Accept: */*

Referer: hXXp://czcycm.com/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: czcycm.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Length: 5828

Content-Type: text/css

Last-Modified: Wed, 02 Sep 2015 13:56:53 GMT

Accept-Ranges: bytes

ETag: "3cb403987e5d01:50b"

Server: Microsoft-IIS/6.0

Date: Sun, 06 Sep 2015 07:27:49 GMT
...@charset "utf-8";../* CSS Document */..body,ol,ul,h1,h2,h3,h4,h5,h6
,dd,dl,dt,input,form,p,div{...padding: 0;...margin: 0;...font-size: 15
px;..}..li{ list-style:none;}..img{...border: none;...background-size:
 955;...border-style: 2000;..}..a{...text-decoration: none;...font-siz
e: 16px;...font-family: "............";..}...clear{ zoom:1}...clear:af
ter{ content:"\20"; display:block; clear:both;}..body{...background: #
FFFAFA;...width: 100%..}..#box{ width:1400px; margin:0 auto; backgroun
d:#151515; }..#box table{width:1400px;}..#box table tr{ }..#box table 
tr td{ width:1400px;display:block;}..#box table tr td .s1{ width:948px
; margin:0 auto; padding-top:100px;color:#fcfcfd;line-height:34px; fon
t-size:16px; color:#fff; display:block;}..#box table tr td .s1 a{ colo
r:#ffd800; line-height:34px; font-size:16px; text-decoration:underline
; }..#box table tr td .s2{ width:656px; padding-top:100px;color:#fcfcf
d; margin-left:222px;line-height:20px; font-size:16px; color:#fff; dis
play:block;}..#box table tr td .s2 strong{color:#ffd800; font-weight:n
ormal;font-size:16px;line-height:34px;}..#box table tr td .s2 a{ color
:#ffd800; line-height:34px; font-size:16px; text-decoration:underline;
 }..#box table tr td .s3{ width:462px; padding-top:236px;color:#fcfcfd
; padding-left:683px;line-height:34px; font-size:24px; color:#fff; dis
play:block;}..#box table tr td .s3 a{ color:#ffd800; line-height:34px;
 font-size:24px; text-decoration:underline;}..#box table tr td .s4{ wi
dth:462px; padding-top:99px;color:#fcfcfd; padding-left:221px;line<<< skipped >>>

GET /f_tejiahui/card/1509/53/9df8c0850fd466.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: image/jpeg

Content-Length: 31033

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

X-Cache: MISS from cdnimg1

Age: 426125

Via: gdst_251_5 (DLC-3.0), CT-149-82.fastcdn.com (DLC-3.0)
......JFIF.....`.`.....C..............................................
......................C...............................................
..........................@...........................................
..M.........................!..1A.Qa."q..2.....#BRr..345s...$Cbt...6Dc
..8Sv....................................=........................!1.A
Qa."q.2.........#3B.R.4C...$...............?..K....U\"0N....A-Q....|6.
..\t....766.'.!...I...B:[.......... B..v...0<..{Z..nT..........nv].
...m...F..U.......:._Sl2{.g'W....U."...v...[...9..........B3Ctl.p.fv._
.*'..ZmH.6.6...1.6@$.V.GFLjRg.R....w..6S. ... [email protected][email protected].
R..........[...j.3.Q..7...,[email protected]..#......].........g.c.....
....yyQ...X..Hz.....Ym....KO..e#.`1V.v. [email protected]@.&.f.X.....
i.g..d..f....h.ie.H.n..n./.........f..b$.....k...s.i...?.;`....Y.}/...
^.x.i....G2 .......^......,;qxWfc....R.`.....q-...!....pZ."[email protected]`p..
$Lv=0.$.f;.......$B....O.../...i8E..#....T.Qc.#J[........GUiT.=1..m.#.
.. Q.1..$........HZ8..6..`...5.B".|F.$e.o...F.....:....m$...<..A.c.
..h{iY...a..(..a.\F .....D..lYj.KR..e.A.z......uk...).\..tA.....|.<
`..28..SRQe.Y!..]E.....,.U&k":.....~e.6.K..(dn.!].7*.a4s=R3.....0.....
.....Z.TD..X.0..6...)7I......N'T5Qk...>.([email protected]..#s,7;|1m.U.Z
....%V..b....R..,n..$..V.$..............()G.....A m....F..n9.Q.D......
..jc..Q.T..46...E."F.C....u.NcS...\..I...3D..... 1P..T.u"....^...x<
..'.k:..i.3..7.........n.... #.....3E...,...1..X.......N...c..).k_....
. .....!v.)....."...=z..%8.....5.8E...u.h........\$..c.X.X..#.@.$.<<< skipped >>>

GET /qs/1506/81/a6474588f25947.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:18 GMT

Content-Type: image/jpeg

Content-Length: 31230

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Age: 1476103

X-Cache: HIT from cdnimg2

Via: gdst_251_34 (DLC-3.0), CT-149-90.fastcdn.com (DLC-3.0)
......JFIF.....H.H......Exif..II*.................Ducky.......K......h
ttp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzr
eSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adob
e XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> <rd
f:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <
rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/
mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmln
s:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did
:6da32a2e-084e-4139-bc96-ad9ed31e0c9a" xmpMM:DocumentID="xmp.did:90F5E
F4B05EF11E58E4E88F0D9880246" xmpMM:InstanceID="xmp.iid:90F5EF4A05EF11E
58E4E88F0D9880246" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh
)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:304af787-62c1-4
a1e-a29e-b14277fbe493" stRef:documentID="adobe:docid:photoshop:392dade
b-4e55-1178-96b1-f610aac610d0"/> </rdf:Description> </rdf:
RDF> </x:xmpmeta> <?xpacket end="r"?>...C..............
......................................................C...............
......................................................................
.................................X............................!.1A."Q.
.2aq..#BRb...$7rt..368Csuv.......%STcd.....'(Ue.......................
..............Q..........................!.1A."2Qaq..Br.......3R.#$456
Cb...%....s...DSt...&...............?......H.".."(..".."(..%.8...)...%
..B;}5r._..Qy.O-'X...|K..E..I.).#.NT...".C.l..s....n.i....."(.."..<<< skipped >>>

GET /csjs/_/mm_login.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 18 Sep 2015 19:46:33 GMT

Date: Wed, 19 Aug 2015 19:46:33 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 2474

Last-Modified: Tue, 01 Jul 2014 23:47:43 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 guigu229:8104 (Cdn Cache Server V2.0), 1.1 yfdx32:0 (Cdn Cache Server V2.0)

Connection: keep-alive
...........X.o......B.d..1..8^B.,$N.x...I...J...t6.#HJ."...\.[....tA.a
oY.!i.mH...?3.....{...([N...M..s...y....Z:.(.K?.....7..."}..f.p.,...h.
..w.....M....`..`n'h.#q.%..........&....k...f7.....S....<........5.
kJ...d.>..9...`5W/.[.;...........).c.c.N.....e...b.."3jGhu.........
...m. t./#.!,[email protected].^.].=..I...wqi......R=.n..I.......z..n...0....
^..x...!.&..n@..&.P.|.;........R [email protected].......,
.X.5iro .....f...-t.Y..x...qr..J.].2..m..!.iD.E7i..?<T;..V#....;...
....:@.Ic...^WCf.0.j....^. 0d.G....]qv...MAa.3\}.n..2h..%x..h...g4.7.h
.....ZS...b!'..I....~.-....iH..o...{...... .m.]k.....b.v.P#z.........x
'.(A<.V...a7.F.D.M....*[email protected]......#
.$.........Dq5.PoFW..pY.....o&Q...{0(..ix....0...:....3.. .G.@.{.3l8..
.x.1.n..M.=........t..k1...;!.o..:.......F.f65.......e..n-6.g......3..
O...._.O..F......%.B...0z,.........)b.R.p.Nv..vD....>....]JwB@2,...
....N.c~..6...o`\]...^....5.....R.f...._.a$.~...L.Sa.5.....ov.z... . .
.-}Hpk...4.G.'x..m..8..|.I....g..B.J...'~....-q.....H....H...] ...[,.C
............q.....C.........{u..A........t.$I.. ]<E.&.g.c..r......V
..s.u.....>......j......w...H_=W.#uq!;W].'.B..kb..2l...............
l....8.^...*....H..........a}.F<..z...4..d../..=...................
.e..6....Y..=.<mQG%.v8x.. .(.z..d.z,a..jg....][email protected]..
j.."b....Y.U"A.Q.B.I.....U.PM.]xH..r....5VA.....b3.,`.#...p....GZ.R.5-
h'.............v!...J.d(....OO......=......*?PFM........[...-.\q..'...
.G..?..xo..../>>......../......\45.o._4.k...`..\q]...;..h...<<< skipped >>>

GET /csjs/_/mm_index.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 06 Oct 2015 07:10:25 GMT

Date: Sun, 06 Sep 2015 07:10:25 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 27856

Last-Modified: Fri, 27 Feb 2015 08:10:00 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 gg228:8106 (Cdn Cache Server V2.0), 1.1 yfdx34:1 (Cdn Cache Server V2.0)

Connection: keep-alive
............is.W.6..N....m.......,),.j...VX.....2.U..Hl.".M....d....E.
.w.y.^S.S...'...!.m...Ut....Wy...'.|2..n.....O...Uk..|.D..b1.....a.\7.
f..h.H&.....b4|..f....[......1.........V..d..T...>....i..E..n.q....
g...(.,..`T.T .._...y.Uj.|<.f?.}.s..Mc.M.q.U.....w....w...,.e[.....
.N.9g..e.x......i.p....5Of..0....xR.....Y...J...1O....j. [.,...Q.}P...
....,....,.'7Qe1[fh......c)...m../.8_..d/N..r.....x.~..4...q..k...fQk.
.....A.y.<j...l..Gl.....m....5..vw1nE..p....o.?....o.}....,...o.o..
.._...<9..5y.S....._.l1......4.g....U......W...Z...$.y.V.%.....y..;
........k}.9...........?b........L>...=....LM....4.w..y<K/..bb?.
..?....v.m.36..I.d.q./.. ....xZL.,f..j..v......F.....,..... ........z.
..U..4...d.ST...Yc....A..Y.e.9.WVm.{..d.....'...h>.d...U..u...4...F
2.0.....U ....Y.!....s....x2.*,..@>M........J...fe7....V.\7.Iz....l
.>.....%.a.jg..G.A,..v;.....n1.....Yo....]./.A5...^.Q..c.L.....X...
......=...ug......|.~.y.rb...U..-._.qo.8/{.j.CN.X...........,........[
.ZYd..%.K..........._...K.X...E.e...l...&\>..)...../.g.h.)..o......
.z.;.$....r2....PUpBq.q..I.i.........'....k.....?|....R.;|..H...)..y..
.8..o.........:...#'..$.....(|.........p.~.....^?.......".AR..l!.Pm.AE
.%B...4OP?......5m.xw..S.NR*u.rZ...1. .w.,..WA.G.J.k~o...._........./.
..l...q.{........Ic:.V.....h:......].@[email protected]\..,....L.).
.xAL.......g..p....T..k c..U.s[.L..,XR.e....Nh...p4.~.P....|...Ou..i..
..C}...RDY...wn...|.x.*9^.....0... .N...R.f....f....q.9.g........R....
...'..D......3....99..K.J....h......'.t.2..~m.].)....u....m......x<<< skipped >>>

GET /js/s/e6u5-min?101016 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /getActiveList.php HTTP/1.1

Accept: application/json

Accept-Language: en-us

x-request: JSON

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

x-requested-with: XMLHttpRequest

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive

Cookie: jc={"no_wall":1}


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 04:48:59 GMT

Date: Sun, 06 Sep 2015 04:47:59 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 74

Last-Modified: Sun, 06 Sep 2015 04:47:03 GMT

Cache-Control: max-age=60

Accept-Ranges: bytes

X-HITS: 8

Age: 9603

X-Via: 1.1 lydx173:8080 (Cdn Cache Server V2.0), 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive
{"flag":"001","content":{"tm":1441514823,"content":[]},"priv":"","num"
:""}....


GET /event/flower/active.php HTTP/1.1

Accept: application/json

Accept-Language: en-us

x-request: JSON

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

x-requested-with: XMLHttpRequest

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive

Cookie: jc={"no_wall":1}


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 22

Expires: Sun, 06 Sep 2015 07:26:23 GMT

Last-Modified: Sun, 06 Sep 2015 07:28:03 GMT

Cache-Control: no-cache

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive

..............).L.........

GET /event/highsing/homeEvent.php HTTP/1.1

Accept: application/json

Accept-Language: en-us

x-request: JSON

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

x-requested-with: XMLHttpRequest

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: v.6.cn

Connection: Keep-Alive

Cookie: jc={"no_wall":1}


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:03 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 76

Expires: Sun, 06 Sep 2015 07:26:23 GMT

Last-Modified: Sun, 06 Sep 2015 07:28:03 GMT

Cache-Control: no-cache

Accept-Ranges: bytes

X-HITS: 0

X-Via: 1.1 fra11:1 (Cdn Cache Server V2.0)

Connection: keep-alive

{"flag":"402","content":{"msg":"\u6ca1\u6709\u6d3b\u52a8!","tm":144152
4483}}HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:03 GMT..Server: ng
x_openresty..Content-Type: text/html..Content-Length: 76..Expires: Sun
, 06 Sep 2015 07:26:23 GMT..Last-Modified: Sun, 06 Sep 2015 07:28:03 G
MT..Cache-Control: no-cache..Accept-Ranges: bytes..X-HITS: 0..X-Via: 1
.1 fra11:1 (Cdn Cache Server V2.0)..Connection: keep-alive..{"flag":"4
02","content":{"msg":"\u6ca1\u6709\u6d3b\u52a8!","tm":1441524483}}..

GET /fxstatic/images/room/2014/bigScrollBg_344e5d6.jpg HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s1.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:05 GMT

Content-Type: image/jpeg

Content-Length: 5781

Keep-Alive: timeout=20

Last-Modified: Fri, 07 Aug 2015 08:43:17 GMT

Expires: Mon, 07 Sep 2015 14:15:01 GMT

Cache-Control: max-age=2592000

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Accept-Ranges: bytes

Connection: close
......Exif..II*.................Ducky.......F.....rhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c01
4 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:27DF5B57372068118
22AC753460F9A6D" xmpMM:DocumentID="xmp.did:77471DC6909F11E39584D4DC7C8
8EA7F" xmpMM:InstanceID="xmp.iid:77471DC5909F11E39584D4DC7C88EA7F" xmp
:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom 
stRef:instanceID="xmp.iid:4f202502-9e98-1b46-b2af-bcf2e32b5ab4" stRef:
documentID="xmp.did:27DF5B5737206811822AC753460F9A6D"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d......................................................
......................................................................
.....................d.c..............................................
.............................................!1..AQaq....."2....BRr3..
b#.CS...........................1.!AQ...a.."2..q.R....B.3.............
?..\..p#.G..Q......../r...2Knd...o..zx....}...s|k... .....g....5U.L.l.
.........w...=5.7..8.....*9.p..Q.".\#.Q....*8....G.......y3....}k...d.
...s.x..{$.p...;./"f.....9.._Tk...~1.?..hd.qN-.i].......}...W2...7<<< skipped >>>

GET /js/LAB_0.1.js HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 06 Oct 2015 01:45:12 GMT

Date: Sun, 06 Sep 2015 01:45:12 GMT

Server: ngx_openresty

Content-Type: application/x-javascript

Content-Length: 2787

Last-Modified: Tue, 01 Jul 2014 23:47:18 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 guigu229:8105 (Cdn Cache Server V2.0), 1.1 yfdx34:4 (Cdn Cache Server V2.0)

Connection: keep-alive
...........Yis.8.......;..b.rfw...xu..-...$....EA.c..y........$.8....*
".F..........v{...A..~:..Pz. .it.I..J.._..{....EJ_.h.....].......2...`
.Hd..O.]6../.D4^.x.~."...C.M...$CoL..7..!.,..@F..].{qc.....Q.;.>%b(
}/.::........L>."...8.'"......a.-...R.X.3...?..,I-v......^:..9o.u..
.c.........l.C..Y,...... t..s..n..=..u{.S.. . >.~6.Qj..7.l.......G.
....y....P..Lp.....{......S{..T....Sy.....{.....r..m....E7.b..Uw..^.E.
..A.(-0...v...(.T.....*...(..y......'[email protected]},e(..b...V.d...."...V..d.(
..4..`%p..o^...,#.s...`.....ZM...4.$..X.Y.5~.MP...`...K]..........'..i
f.uR...6.D..m..R")]K..:)..2.......`..d.%m.......&....%w..eQ...H...d...
...m.}...4.v......`8.H.Iqmi....!..#..%@D.wn0...)...t.aG*(.....8.V...o.
.y....n...... ...W..w[..a...~s#b.A......?..Q....~.8.,@.I[F...... w...F
p...L........|9_."...........lb...q...F..;B...[$n.u...B41....%./.V..
. IE$...Ry..^..r....T..;r.... .<..;.U2.1..e0.2K......%.......g)F...
b......y.ivK....l...'.........8.../...ugc...L..%.....7....G...P.......
- ....=..I.....hd>....~...F..]C..D....X.e.(.VkiC...gS....n.......G.
.qu:<J.....0.P'........U...;1......d!.._...u....n$2.}..|.......f,DD
...K.-..DD......O,[email protected](.`.....Y.NH....Qp........H{..C..
 `}..J..5.7B?.2..Y...1....U..?..9.......L...s...h& .....C.Hp|.#..Q....
..?W..#nYUUMH...J/[email protected].. .?...'.
........W....Lh.q.....{.g fU..QT...k......J.......~.[....$...9.W..`...
..O.........5.]K.19....@{e..Y.^.V..d....U=..5o..........s@sg..........
..7c<..>..C..h..........QCt.j}.:..7hG....B.lC.9.sB_..5....-.<<< skipped >>>

GET /js/LAB_0.1 HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj3.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:00 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 1

X-Via: 1.1 gg228:8080 (Cdn Cache Server V2.0), 1.1 yfdx33:2 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /pixel/2387/?ct=UA&st=&city=13101&dma=0&zp=&bw=0&che=2949964848&col=8853099,883117,120058784,292870917,63928392 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://source.qunar.com/site/images/wns/20150714_flight_homepage_bottom_banner_912x90_6687.swf?clickTag=http://qde.qunar.com/event.n

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: d.agkn.com


HTTP/1.1 200 OK

Cache-Control: no-cache, must-revalidate

Content-Type: image/gif

Date: Sun, 06 Sep 2015 07:28:21 GMT

Expires: Sat, 01 Jan 2000 00:00:00 GMT

P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"

Pragma: no-cache

Server: Apache-Coyote/1.1

Set-Cookie: uuid=491141675383244941; Version=1; Domain=.agkn.com; Max-Age=157680000; Expires=Fri, 04-Sep-2020 07:28:21 GMT; Path=/

Set-Cookie: u=C|0EAodfqeVHX6nlQAAAAAAAAABAC0BB-gSAgABAAcAAAAAAIcWa___PgAAAAAADXmtAAAAAAcn86AAAAAAA894SAAAAAARdNsFAAA; Version=1; Domain=.agkn.com; Max-Age=63072000; Expires=Tue, 05-Sep-2017 07:28:21 GMT; Path=/

Content-Length: 43

Connection: keep-alive
GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Cache-Cont
rol: no-cache, must-revalidate..Content-Type: image/gif..Date: Sun, 06
 Sep 2015 07:28:21 GMT..Expires: Sat, 01 Jan 2000 00:00:00 GMT..P3P: C
P="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"..Pragm
a: no-cache..Server: Apache-Coyote/1.1..Set-Cookie: uuid=4911416753832
44941; Version=1; Domain=.agkn.com; Max-Age=157680000; Expires=Fri, 04
-Sep-2020 07:28:21 GMT; Path=/..Set-Cookie: u=C|0EAodfqeVHX6nlQAAAAAAA
AABAC0BB-gSAgABAAcAAAAAAIcWa___PgAAAAAADXmtAAAAAAcn86AAAAAAA894SAAAAAA
RdNsFAAA; Version=1; Domain=.agkn.com; Max-Age=63072000; Expires=Tue, 
05-Sep-2017 07:28:21 GMT; Path=/..Content-Length: 43..Connection: keep
-alive..GIF89a.............!.......,...........L..;..

GET /images/common/flash/flash_star2.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:10 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 443

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-1bb"

Accept-Ranges: bytes

X-Via: 1.1 hzh91:80 (Cdn Cache Server V2.0), 1.1 sm28:10 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a2..............r..}.............................z...............
.......................................!..NETSCAPE2.0.....!...2...,...
.2.....M.%.di.h..l..p,.tm..Z...O...8;H..X.2h<..e...."..#A.Y.Z.....g
..0=.@yn.|N....|=..!...2...,....2.....&.%.di.h..l..p,.tm.x..|....pH,..
..r.T...!...2...,....2.....M.%.di.h..l..p,.tm..Z...O...8;H..X.2h<..
e...."..#A.Y.Z.....g..0=.@yn.|N....|=..!...2...,....2.....&.%.di.h..l.
.p,.tm.x..|....pH,....r.T...;....


GET /images/common/flash/flash_star1.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:11 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 411

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-19b"

Accept-Ranges: bytes

X-Via: 1.1 hzh86:8111 (Cdn Cache Server V2.0), 1.1 sm25:10 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a2........r.....u.........................................t......
.......................................!..NETSCAPE2.0.....!...2...,...
.2.....=.$.di....lK.. ...=t>G.....n."(...q.r$......Z...v..z...xL...
...!...2...,....2.....&.$.di.h..l..p,.tm.x..|....pH,....r.T...!...2...
,....2.....=.$.di....lK.. ...=t>G.....n."(...q.r$......Z...v..z...x
L......!...2...,....2.....&.$.di.h..l..p,.tm.x..|....pH,....r.T...;ont>....

GET /images/common/flash/flash_star4.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:12 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 645

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-285"

Accept-Ranges: bytes

X-Via: 1.1 suqian9:88 (Cdn Cache Server V2.0), 1.1 huzhou87:8107 (Cdn Cache Server V2.0), 1.1 sm23:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a2...."...r......................................................
..u...................................w...............................
.................................................................!..NE
TSCAPE2.0.....!...2.".,[email protected]\:...s..R...u...) ......I
..l..2.I(.V...zcQ..."...K....K...........W.........}.......^..cc.g....
.^.......h...u....OA.!...2.".,....2.....*@.pH,....r.l:...tJ.Z...v..z..
.xL.....z.V...!...2.".,[email protected]\:...s..R...u...) ......I
..l..2.I(.V...zcQ..."...K....K...........W.........}.......^..cc.g....
.^.......h...u....OA.!...2.".,....2.....*@.pH,....r.l:...tJ.Z...v..z..
.xL.....z.V...;HTTP/1.1 200 OK..Date: Sun, 06 Sep 2015 07:28:12 GMT..S
erver: nginx..Content-Type: image/gif..Content-Length: 645..Last-Modif
ied: Wed, 02 Sep 2015 09:11:07 GMT..ETag: "55e6bd2b-285"..Accept-Range
s: bytes..X-Via: 1.1 suqian9:88 (Cdn Cache Server V2.0), 1.1 huzhou87:
8107 (Cdn Cache Server V2.0), 1.1 sm23:1 (Cdn Cache Server V2.0)..Conn
ection: keep-alive..GIF89a2...."...r..................................
......................u...................................w...........
......................................................................
...............!..NETSCAPE2.0.....!...2.".,[email protected]\:...
s..R...u...) ......I..l..2.I(.V...zcQ..."...K....K...........W........
.}.......^..cc.g.....^.......h...u....OA.!...2.".,....2.....*@.pH,....
r.l:...tJ.Z...v..z...xL.....z.V...!...2.".,[email protected]\:...
s..R...u...) ......I..l..2.I(.V...zcQ..."...K....K...........W....

<<< skipped >>>

GET /images/room/bodybg_33f93c5.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:19 GMT

Server: nginx

Content-Type: image/jpeg

Content-Length: 269074

Last-Modified: Wed, 02 Sep 2015 09:05:00 GMT

ETag: "55e6bbbc-41b12"

Accept-Ranges: bytes

X-Via: 1.1 hzh91:8107 (Cdn Cache Server V2.0), 1.1 sm24:8 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......;.....rhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:d2116e19-5852-c84
8-97d5-7d5f94fb115e" xmpMM:DocumentID="xmp.did:4951C55FFAD511E4BC5B871
24B52E91B" xmpMM:InstanceID="xmp.iid:4951C55EFAD511E4BC5B87124B52E91B"
 xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:83663D5AFAD411E481A4CB54AE73DB2F" stRef:
documentID="xmp.did:83663D5BFAD411E481A4CB54AE73DB2F"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d......................................................
..........          ................                                  
               .......................................................
......................................!.1AQ..aq..."........2BR.b.r#.3.
..Cc$....S.4D.......................!.1AQ..aq........."2.BRbr.........
.....?..Qm..........U..U.Z.U).b,|..4....q.{....Z`....q........rU....&g
t;h"GN."...?Z...[a......;.......K.e.{|.z......q ...c.)\....%f.........
...|. /Z.....M(y.TzV".r,_@.\.W}..b)[email protected].<<< skipped >>>

GET /images/room/messagenotice/message_ico_ff852cc.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:27 GMT

Server: nginx

Content-Type: image/png

Content-Length: 1399

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-577"

Accept-Ranges: bytes

X-Via: 1.1 fzh61:8105 (Cdn Cache Server V2.0), 1.1 sm24:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......(.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:E745EB8730E011E5AC27B737
D0C773A5" xmpMM:DocumentID="xmp.did:E745EB8830E011E5AC27B737D0C773A5"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E745EB8530E011E5AC
27B737D0C773A5" stRef:documentID="xmp.did:E745EB8630E011E5AC27B737D0C7
73A5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...,[email protected]
.t...J'......lP6.w.Y2V..i.~..S..<[email protected]._.....A...%...H.
..?b..[.pF.H.f......S...7d,.59...I.......M.t.F..&...>......Y..(C...
.L.. ../[email protected].<.^...&_...?....g.<D..N.s.ha..e..)C...)C
.F.......K9...E..tA5&.h..dE.2#:b.=..........j.!.\(..<....x...{..&..
X...v...4.W|..........%n.1ZH....#.P.n{a..K%O.r:!.B......iG.........2..
.F.v.h..GS..g..."D\:.J[.i.:5.).hlUH.5=....j{H/GD...S..Wq...1J.pZ.r.3..
BO.....j......h...5......RWh.4#..h...$.l.-.........z..'{9......IEND.B`
.....
<<< skipped >>>

GET /images/room/guard/guard_d7153be.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:27 GMT

Server: nginx

Content-Type: image/png

Content-Length: 3685

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-e65"

Accept-Ranges: bytes

X-Via: 1.1 huzhou84:8106 (Cdn Cache Server V2.0), 1.1 sm27:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...&...'.....ca:.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C78E6A861FCB11E5BE0DB07A
79E4CB67" xmpMM:DocumentID="xmp.did:C78E6A871FCB11E5BE0DB07A79E4CB67"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C78E6A841FCB11E5BE
0DB07A79E4CB67" stRef:documentID="xmp.did:C78E6A851FCB11E5BE0DB07A79E4
CB67"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>........IDATx..Xio\..~.2.g..x..X.C.....,TeI
...T.JHm...~..GD%Z..T....j..*.".QS..)..hH.6..'./4..m.../wfn..z..z<l
B..........].(p\...j>..N.Px.T*. ..5.0..|.\....7M..i.OU.V.;y.`......
.Y.D"..j.r..ju.-........a...]......(..<s.....Ew..........W.....p.Hc
.S..w....{"....]N9.9...c....O.....9$.....7...$...b.M.`7.fM....r.q.r.s.
......)..KKK..h."s..... ..>N Q.....7' ..!.../.....y7A....(.8....,Z.
..rw.MlaF......nN..M...n.>..(.Q.....,....b..^[email protected],.\....Y,//..
W...rY../.a......x.~1...-#.......AC.d..q..r.^...TI...[2.Qv.r...X..P..S
..WS..M..]@..d#..r...)...3aM..XS..(..#kIa.......S..T..NkB..TrET.rP<<< skipped >>>

GET /images/room/luckystar_png8_ce21b1c.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: nginx

Content-Type: image/png

Content-Length: 1922

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-782"

Accept-Ranges: bytes

X-Via: 1.1 fzh61:8105 (Cdn Cache Server V2.0), 1.1 sm28:6 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.............q.>.....tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:6E743B01F6E211E48B2F8
00539EC1565" xmpMM:DocumentID="xmp.did:6E743B02F6E211E48B2F800539EC156
5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E743AFFF6E211E
48B2F800539EC1565" stRef:documentID="xmp.did:6E743B00F6E211E48B2F80053
9EC1565"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>..~.....PLTE.s..r..Y..\.._..K..S..b..p..
W..L..`..M..d..Z..f..c...I.^..V..P..p...F.Q..e..O...J..<.T..o...A.T
..r..U..]...>.a...S.S..g..d...U.|...".t...D.v..x...R..R.h..w..`...;
.p...O..6.T...X.[..\...B.M.....k..[...?..D..@..@.]...Z.q......A..I..`.
...~)..?.j..n..e..n...<..C.]..\...B.x..l..N..o...-.k..u..d...J..J..
E.g...F.X..q...G.R...Z.o...M..>..H.P...<....z!.."..;..f..F..<
..B._..z......F..*.]..n..]......I..]..?.n..m..o..n..t...G....s...!..?.
.5.t...\.f..q...E.k... [email protected]..[..L.o..r...-.q..p..l...
U..C._..n.....0.9....tRNS.........................................<<< skipped >>>

GET /images/room/dot_0c624c3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:29 GMT

Server: nginx

Content-Type: image/png

Content-Length: 119

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-77"

Accept-Ranges: bytes

X-Via: 1.1 huzhou90:8105 (Cdn Cache Server V2.0), 1.1 sm23:1 (Cdn Cache Server V2.0)

Connection: keep-alive

.PNG........IHDR.............%_."....pHYs.......... .....)IDATx.cx....
.7...l......._....... ....*..BKT.<.b.....IEND.B`.....

GET /css/??common/asidebar.css?v=2015072701,common/launchremind.css?v=2015060101,room/guard.css?v2015082601 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:55 GMT

Server: nginx

Content-Type: text/css

Content-Length: 22934

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

Age: 34

X-Via: 1.1 hzh91:8110 (Cdn Cache Server V2.0), 1.1 sm26:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.asidebar{position:fixed;top:31px;right:0;width:50px;z-index:1006}.asi
debar-menu{background:#222;position:fixed;top:31px;right:0;width:50px;
z-index:1007;height:100%;min-height:420px;_position:absolute;_bottom:a
uto;_top:expression(eval(document.documentElement.scrollTop document.d
ocumentElement.clientHeight- this.offsetHeight-(parseInt(this.currentS
tyle.marginTop,10)||0)-(parseInt(this.currentStyle.marginBottom,10)||0
)))}.asidebar-bd{position:absolute;width:100%;height:100%;z-index:1006
}.aside-bd{height:100%}.asidebar-close{background:url(hXXp://static1.y
aoguo.com/images/common/aside-close_a715ed0.png) no-repeat #d7d7d7;dis
play:none;width:50px;height:36px;position:absolute;top:-36px;left:0;te
xt-indent:-999em}.asidebar-item{background:#f8f8f8;box-shadow:0 7px 7p
x rgba(0,0,0,0.5);width:310px;height:100%;top:0;position:absolute;righ
t:-310px}.asidebar .user-info{margin:10px 10px 15px}.asidebar .user-in
fo .pic{float:left;margin:8px 12px 0 0;display:none}.asidebar .user-in
fo .detail{float:right;font-size:12px;color:#ccc;position:relative;wid
th:286px;font-family:"......"}.asidebar .user-info .detail .anchor{flo
at:none}.asidebar .user-info .detail .username{color:#545454;font-size
:14px;font-family:"\5FAE\8F6F\96C5\9ED1";font-weight:normal;height:24p
x;width:254px;overflow:hidden;text-overflow:ellipsis;white-space:nowra
p}.asidebar .user-info .detail .grade{height:23px;margin-top:3px}.asid
ebar .user-info .detail .wealth{vertical-align:middle;float:none;margi
n-top:0}.asidebar .back{width:17px;height:9px;display:block;positi<<< skipped >>>

GET /site/images/sidecode_v3.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg4.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 10268

Accept-Ranges: bytes

Last-Modified: Tue, 17 Dec 2013 10:40:04 GMT

Server: QWS/1.0

Expires: Sat, 10 Oct 2015 15:02:24 GMT

Date: Sun, 06 Sep 2015 07:28:18 GMT

Connection: keep-alive
.PNG........IHDR............._.,&....gAMA......a.....sRGB.........PLTE
...***.........o......................................................
.....^........................................................5..K....
.....................................SSS............................q.
...)))===888...{{{..................MMM...........................xxx.
.....000.o.DDD___...mmm......JJJ.....................---.............l
.......$$$GGG......~..gggjjj...LLL......aaa...}}}POO.{..v.666:::......
UUU...222AAACCC(((uuu.............x....\\\WWW...&%ÝdQQQ...###"""....
..rrr444.........ppp...............'''...FFF....PX.Pn......vvvYYY...!!
!............z...s..-8.i.#......",.4>...7.....k......EN...b.....Y..
...1|.u...z.}..;...........n..<...d.S...Sf%.....B75....OZe........s
SP...h][.BL...&fp...0'%'S^3(&R@<......... =E1$ V..S..7.....!PU.....
.......x..|.. .IDATx..|w\.Y......n:...^.HnlPA.Eh..(....:.,A..1....F
..u......:agfggfs........~9..;.T............u....9..{.B^. zE.0Y.....h.
."Z. .....x...g..S....=n.h..".U..1:}:K8Y6..3UK.........*h{..........$.
...khCJ.....A..=.V..XN.N...g..>.....A......i....a{..W...<.'....h
..|.....%.d..{...X.i....3Q).9N....g.E..............q....s.r\..n...J..2
...w.p..p.....b.{....B.[gB.~...'I.l.}sNjjj..q..R.....(..1...q...i`qA.1
.,.:..V.t...!......... [email protected].....#..ICF...n7.a.q.....p
....n.fr9........m>8.. D....q..o........8^......1..9...0.wB..PPPP..
L...`..wo..>;..y...'$.l.g.....vp....E.......{L.v..Zq..v2.."A." S.9.
I0..O..J.....q$... .V|.p...p.3........q..7....g.^0..n...q.|......?<<< skipped >>>

GET /usercenter/usertoolbar/v1.0.0/img/icons6-p8.png HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: simg4.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 6127

Accept-Ranges: bytes

Last-Modified: Mon, 18 May 2015 06:45:10 GMT

Server: QWS/1.0

Expires: Sun, 11 Oct 2015 02:20:37 GMT

Date: Sun, 06 Sep 2015 07:28:19 GMT

Connection: keep-alive
.PNG........IHDR...l.........J[1J....tEXtSoftware.Adobe ImageReadyq.e&
lt;...qiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:73ae0acd-cf23-6c49-b5ff-9eb488750f4d" xmpMM:DocumentID="xmp.did:
B7A23894F52E11E48F64C44A30340AAD" xmpMM:InstanceID="xmp.iid:B7A23893F5
2E11E48F64C44A30340AAD" xmp:CreatorTool="Adobe Photoshop CC (Windows)"
> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:535cb936-5e44-954
a-9fad-2e4baa327c0c" stRef:documentID="xmp.did:73ae0acd-cf23-6c49-b5ff
-9eb488750f4d"/> </rdf:Description> </rdf:RDF> </x:x
mpmeta> <?xpacket end="r"?>P.......PLTEj....R......J.........
...................................~........... .....|...........E....
......................z...........v.....t..............d..h..$..\.....
...v...........f....................\..#.....s....=...................
..i..}...............................&...............{...........t....
............6............i....y.......................................
........c...2..............Y...................................{......
..............oy....B........{....................x............q..<<< skipped >>>

GET /staticPub/js/head_55cffdc.js HTTP/1.1

Accept: */*

Referer: hXXp://fanxing.kugou.com/1046289

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.fx.kgimg.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: KugouCDN

Date: Sun, 06 Sep 2015 07:28:10 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Keep-Alive: timeout=20

Vary: Accept-Encoding

Last-Modified: Sun, 06 Sep 2015 06:44:38 GMT

Vary: Accept-Encoding

Expires: Sun, 06 Sep 2015 07:49:52 GMT

Cache-Control: max-age=3600

KG-Via: SW-U-52-40

Kugou-Memory: HIT

Content-Encoding: gzip

Connection: close
4864.............}k{.......P.C.!...I..rl..e,Yk...J.<M......H.!.<
r..rlYv..$........Ib..e..?..$.i........../.<....D&....r...sy..B...6
..Z.........dje.m'..~..o{s.R.....-6.E'55rf..l....[#....&..L)3Wm.Q.V.t.
T.-....N'....m..g...?YH......xG.e..j...........Xm.........bZ..7[;.^...
...U...9.....2=.k....h}..3.n...R.....S.....w>...\..n....~.Y.6.6....
..\.&....x.6j^.........7.=......n;...9ig..Lk5.f.Z.........-...U...z.]r
.R..i.......c].<H&.....w.^[email protected],V..Le@1
K....S1..R..HMy....{.;W.UHd..bP...].2M...B}.k.-.)...%.8...j.Y ..n.x.y&
gt;1.....j..(....3fJ...ui...@#.A.hJ....$.C{'L.jv..n...z.....<7..v..
o..n....t.....W...q.c..`..Na....U..&.;..DrT..B.h...r...azS.......`..F.
...*5R.Qq.$..r.w..{..O.<5....G.n.4R....32..u..n....t.P.......[[.R..
K.g.'......[W6..p...6o~.~.9'])8.l....!.Uv..[......7o......q....G..C..[
..n<K....B...J..>.......9..0F. ... .s..u:!..h....,..D..R...G....
..&.f.L0...&..U.Z....i.F._..CN.R....I.R.._X..ZFzl/.|.e\.,#..-..(V.~..q
......Y...Jt.w...q..p........j...z5.4.c ...TeV.......H....B..x..#O.}..
L.....G.........W.TF=.R..|.z.!.5*..f.<..n..Hz_6.....^{.k?.v.d3.yAu!
W(4i.u.:3x.).@*.....n..U.L./..x.v.]j......[........7....^....../o]{.?.
z.I._.s....R.G.^..je..)........s.5.!.....^....j...v.Ow` .7.)....[:WpS.
}9...R.B.......]t.n....W.Z...Gj.V......T:. .q...FI.;.v..7.X.......s2..
.....y.k........k%..f.5T...`IE....-..t.V%.U..........'.'..".*X%I.Nz.rb
.!9T=...;.z..w....7.{.dw...J'..>....4.,...:,..q...3...tx.L.T8.../.O
.t..-.x.....-%@..Hn*vPj.HJE.$C....f....i.R...[..#."..Rh..D.B.6]...<<< skipped >>>

GET /f_tejiahui/card/1509/8d/bdd631314f165f.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:13 GMT

Content-Type: image/jpeg

Content-Length: 29422

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Age: 184631

X-Cache: HIT from cdnimg1

Via: zjhz_167_169 (DLC-3.0), CT-149-104.fastcdn.com (DLC-3.0)
......JFIF.....`.`.....C..............................................
......................C...............................................
..........................@...........................................
.P.........................!..1.."AQa.q...#2B...3r.$456s.....7CRbtuv..
.....8....................................A........................!.1
AQ.aq.."..2.....34B...#5Rr....$Cb.S.............?.............N.@}I...
...........t...C.'F...F......%...CnhE.1.di..B0.5*.hE...LWT....t.(...h.
.HC.tUrB.|..6B/<.n..@|t...C...#m...A....\...B..h.@4...:(!.8........
.4..n.......P~':E. .|..;&._.....RAT.A.|.4...?x.ZH..H......n."..d......
.>?~.h.."..!....#...0...q..P|.BX.#..Z...c9$... .G..F...hB<..t!..
.B.P...}.....'...a......".9.'..C....B..'...!....X.ZtP.g..:HG.9..".>
.t%b...<...a.....G.....:...~..@.''B....4!....:..`.hB..8..".....P...
.......@..].I.#:T..9.p4.{ m....4.........x....I$(9..?.GJh..<..Aod"T
8$..s.7...<....-......Q...}..n.....N......7..M.cB {C..O.hE.J...$...
F.t.9.d..-.1.J.Np0s.IM..A..4..'....t.vQm..#....i...FA ..i.HI.\c.L0.M$.
.d......<...3.Zz(.Q.......d....@<..t.]...1......U......v..jR.aF0
4...h...4.;...C.y.G.M2.....%..P.....h.R&..QH.1....h..x...II.)...mh....
.:T.... py...>.O.t!'.|....F...#?...Hv.O.B.B..c....<..........;..
.B.a..hQ......M...........l...`y.t.)....h..F#R4PE.=0.N..#.......(.....
...g..M.{.....4n..F...4.4..XvV.]...V.&0..d4.N....U-........#2;.[q1..(.
.......=......W...D...!1..t...I.8nFO .uV&[r.....sc>..;.........:...
.4^.....$....d.IA...#...kL..b..i$.E^...ON....8...........D.L:.....<<< skipped >>>

GET /f_tejiahui/card/1504/fc/47a8e2ac999885.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Type: image/jpeg

Content-Length: 27802

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Age: 1214920

X-Cache: HIT from cdnimg1

Via: zjhz_167_165 (DLC-3.0), CT-149-80.fastcdn.com (DLC-3.0)
......JFIF.....`.`.....C..............................................
......................C...............................................
..........................@...........................................
.L.........................!1.."AQa..q2...#B.....3Rrs..$56bt....4u..7C
.DE...................................5......................!..1A.."Q
q.2a...3.....#...B.R............?....v>....'...(......(.iik...C.YmM
,sF..Q...nx.........i.../..r.Z\......F5k.....t 3..^..%#.ei....@..[....
.. .&Y.........&.#.l.&j........VSe"...(.../.>.)z.....`-....Qx.Zr...
.zFU.?. .......q.....N.........w/\.J...[..{06..........M.....OQ.....me
...?.q.JN.y.T...-.c....:..{L.J.."[email protected]..!CH.O%..6.x... ..
...%.L.....-.pY`Q..f..........V.&s..95...U.Ik. [...B{..z........<..
.e.[..v...*Q..g3.....D..jd`s..W...X._.S..(i*.-&. .C..W=S..%.^|..&.....
4...c........`.e...s........NzI.7b.d..M.....Zc%.......T.er$Z?pH.?\5J[.
5N...mDS....?..... ...7;....V.....F....h....../v-*(....%..(..w....'.*.
?...]..do....{C~=x..D.........k.v..O..A.........{[email protected].....{.Z..-
...q..d."......'j..,K.KO.I?.*...D<...L].Z."$...{`..2../m}...]...lg.
W..E.}L.Z..[J.T......3.B3..U....f.Y Yf.7.s.....B.q......T2.!r,..Q.w.ZU
:E.f./..E..`....1T.Zt.iI..T_..si.E..C.W..y.;...34'e...k.|9.."i...M..u5
.w..s*v..6...KCJ.......H....H.T .....,$.\...Zz...DA`.($.=...mP..AG.e.}
.0.lYM<vDQ....'..j...L.WL..'I....%..!..T............[...Ml. ....|..
/."...o.{...}p.T. .f%..ap&^...z.Q.g....k....OR6..am8f..x5fu.S...(.| c.
.pt.Tl..}U%..z..'.."[email protected]>......<<< skipped >>>

GET /qs/1508/c8/774ebecc402bde.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:14 GMT

Content-Type: image/jpeg

Content-Length: 4531

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Age: 535507

X-Cache: HIT from cdnimg1

Via: zjhz_167_166 (DLC-3.0), CT-149-74.fastcdn.com (DLC-3.0)
......JFIF.....H.H.....C..............................................
......................C...............................................
........................>.>.....................................
.......1...........................!.."1A2Qa.#...3q.r.................
..................8.........................!1.A."Qa.q..2.....B......b
R..............?...6....kq.X*j).b./.U.!O.Dr........=..gK0._.....1...!.
.jmo...h...u..!.._|.$....>:.W.i...........j8..;$.........Y*.e.#...=
0.B...i..n'@......Vw<.O.;.s.......-..N.......f....(q..6..D...S.;..c
...mA....x..<c_.O..,.O....MU..4Lc.9..#...>A..t...R..A.H.f..Zd.h\
A#.I!..u.YA..e..C..'O|d.........o...=..9..cQM.qi.b......|.OI=.:p..c.{c
R......a.6.T.Y%.J9.ii...'....:.....~.O...B....I.....<J.PJ.nOo-.. ..
..S....!X...r....V;...o./.....T .*X......{.....H..q..n....}.....k6G..}
.D..i.j..WP.v..{ ...WD..C.6......v...s...E..~.....w.1c../.;\.[......H.
.J...O..Y...5$.<.....\.MZ-...#.........0..u!....G.....:.|~.Z.5....[
 "j:...V..M......#.1..q....X.,.n...#.........r{.#....;Qq.....m....:...
]S.*..r}< $....\m.R..%|...51M...0............A....kt........Gr...x.
.....%.....m...'.. ..V.?.p.j@[F.'y.r.....L.\...U....J...9n.- ..Ui....i
.f..p.....,G....EJ...Z...f..#y..$..$......w.H..EFrK..OiO4.4...F..o ...
c..G.r.X..Y.P..!.......L..8. k:I.?{...6...,...GO......E)..q....".*G..q
........)....T.......}......`,...S..$z`.1........^.y.;q..ZH........Bzz
 ..;$(..t........*....;...s..(@.l.3.3..k.{.......:..W......VRN.X.GDp.D
.]J.....r(....).N....a.<.i.....'qr(.m.q.d...m.....W......Q&..~?<<< skipped >>>

GET /qs/1504/ad/ff6fb4ec084fe7.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: image/jpeg

Content-Length: 4951

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Age: 1464119

X-Cache: HIT from cdnimg1

Via: gdst_251_26 (DLC-3.0), CT-149-104.fastcdn.com (DLC-3.0)
......JFIF.....H.H......Exif..MM.*..............Ducky.......d......htt
p://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreS
zNTczkc9d"?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe
 XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        ">...<r
df:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">....
<rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/
1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" 
xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp
.did:d7c877c2-aec1-4284-8648-aada84b03c37" xmpMM:DocumentID="xmp.did:B
AB99F02E0F511E4B254D17CD928870A" xmpMM:InstanceID="xmp.iid:BAB99F01E0F
511E4B254D17CD928870A" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macin
tosh)">.....<xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d7c877c
2-aec1-4284-8648-aada84b03c37" stRef:documentID="xmp.did:d7c877c2-aec1
-4284-8648-aada84b03c37"/>....</rdf:Description>...</rdf:R
DF>..</x:xmpmeta>..<?xpacket end='w'?>...C.............
.......................................................C..............
.........................................................>.>....
.......................................9...........................!."
1AQ.a.2.#....37BFRbq.......................................?..........
...............!.."1.AQa.2q..#35Rbr.....$%BTs..................?.v...n
5&.;tU.........=....S..'.RS......3Ah..:.m$..x.2...1bm....;}Oa.....J...
z.._"...}...4....K....$.J...I....>e.).|..?..:..CL.....{......Z.<<< skipped >>>

GET /qs/1508/33/0b08ff7e458a5a.gif HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: image/gif

Content-Length: 61143

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

X-Cache: MISS from cdnimg1

Age: 84085

Via: zjhz_167_172 (DLC-3.0), CT-149-104.fastcdn.com (DLC-3.0)
GIF89a.....>......u...........p.qN .......8....3.......^...H$.>#
.Bb.S-.............s..*K....J ..g.......0..]U...a.........e.....]*....
..../4...b..............^....-l}|...yo.....>....._..'.......7!.....
....!.......!..NETSCAPE2.0.....,.............pH,....r.l:...tJ.Z...v..z
...xL.....z.D.T..|N7...D.....K!..y{....i*..yp....X...)....H..yy8......
.....uw......g........[........S.......J................x.............
....................cV..A?.@m;..N=w..J..."3r.3..hi.G].4.......'A..Up..
..v0......3.0...'....N.(2...f>.^.hrh..D*..1N.U).O...U.....]........
F.1.%..F..p.....=.......Tg...<d.[x~...u...!_..S.8.I....EJ....h.>
.*.jg..>..P.......V.Z...'O.x.{.X..b.k..*......z<...J.[D..gE. yV.
y.{..=.c.............z....{/1......>.^....Hw.=....{.%....^c_. ..`9.
B....B#.......3.r.!<.~.J."......hb).. c..q...!..C. .."-7....!*...=.
..7w(.../. ..T.....h..?.T....m...T^.B.h^.../....&.$'J"....n....|..Y...
...s...k..9.....h..1......... Z...bj........8`..uyZ.T.*zD..h.gM...E...
jW.........i.......V:...J!.....*.r.k...L...... ..n..........r.........
[email protected]..}Np....l0J..z.... 0..7|p..:......0........,....<
..#wZ.]..Y..#....._..].gl..4.<r.Z...........Vj....-......HWMm.F.*5.
B.K1;.[-6...-....<..).k.._{C5.t..r.a...5y..6.N& ...(.'.Cm.2..8...'.
.@.:Tn...'.....:n....M..#.8...~......M.\...kN#.x.G.........u3 ....B:..
F>...7.C..*....7P.......~..|..7@9.:h...'.......>..'p...CvS....n.
t.....#..X7.........................j\B...V..b..n....~...b...La.. ..-k
S.y...v<.pEm.:..v.....`[email protected]!."...6...h..../..joV...N..<<< skipped >>>

GET /qs/1508/da/d41869fb6060c0.jpg HTTP/1.1

Accept: */*

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: image/jpeg

Content-Length: 31261

Connection: keep-alive

Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Age: 408784

X-Cache: HIT from cdnimg1

Via: zjhz_167_168 (DLC-3.0), CT-149-104.fastcdn.com (DLC-3.0)
......JFIF.....H.H.....C..............................................
......................C...............................................
......................................................................
..K..........................!.1.AQ.."aq.2...#B...3R..$b..4CSr.......5
cs.....................................J.........................!1.AQ
.aq..".....#2.3BRb......$..4Sr.C....%ETc..............?..l$.u.)...)...
d%.2..q..SdI-..O...%.5n..N.1$.........0Y..{...t......2p..V{.......y..i
...(x..%b......'.)%..-.xNXl.-.q....y@GN..>^.E....{....r.........d9I
..x.N....P..-B..!.......,FS}.4.. .R.F.1F..Jv....pn.%.v)G.=..1`h#.?=>
;cm.YJ6.;[email protected]....`~.|.LE.Z.n4..<.. v..4... -..s..
%8.....l..n....... rB5a..g.....T.B...|..nV..Zx.F.."L.;....p..Y^......"
...R.....X..; .0.O.I......!...H.. ..4|q..%..L..#D........%8j!..:{.F...
...@X. ........V..?-.6M.H,w..$Y.D...5(u.yJ..h..:Y....9.fM.g.....(L}..)
Y.O.'.9.A......F#..B...,[email protected].~zA.B`E.{..2(.D".6........cyn....V{....
..!,(..#.rt..FcXS.q.. .K...s.\.....Q.:`..%.^.....e..,...:....C.").yq..
. .. ..'......H*'<..E.I&.j>zp..H.d....gF.ET\......z"...4y.. S...
..,..BO.."R.z,.i.".l..O...,...{.O.".......Te...Om,. .Q.d.h.....N1....#
.L4.q.i..1.-yKy)P..T.R7xQ...r.s..py$.......M..u.LJP....|..#.n.q.I1.G..
i.Ez*.j.-.Oe].u..G..............{?4..I.../k.....E..).B.......m.6B...T.
.G..].%l......#PA....'.b5C.8.................9.M......<i^....$...9.
.....(Vr.c..\...`.'...?.b.....9..ML.=......<..4Y.p..x<'8.]...o&g
t;ZY....21.K:\.? ..X.Z..*..t...t.........N>....pU..ol.....r....<<< skipped >>>

GET /qs/201405/08/f1f51d8b645559506886324a.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=topicLinkL

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:18 GMT

Content-Type: image/png

Content-Length: 2842

Connection: keep-alive

Accept-Ranges: bytes

Last-Modified: Thu, 08 May 2014 12:13:12 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Age: 1214922

X-Cache: HIT from cdnimg1

Via: zjhz_167_169 (DLC-3.0), CT-149-102.fastcdn.com (DLC-3.0)
.PNG........IHDR...............Q*...;iCCPicm..x..SwX...>..e.VB....l
.."#[email protected]....(.gA..Z.U\8.....}z............y.
....&...j.9R.<:...OH......H.. ....g......yx~t.?...o...p..$......P&W
. ...".....R...T.......S.d.....ly|B"......I>..................(G$.@
..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0...._p..H...
....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l.....k.o"&
gt;!.........N..._....p...u.k.[..V.h..][email protected].<......%b
..0..>[email protected][email protected]..#......)..4.\,...X..P
"M.y.R.D!......2......w....O.N....l.~.....X.v.@~.-......g42y.......@ .
..........\...L....D..*.A..............a.D@.$.<.B........A.T.:.....
........18....\..p..`........A...a!:..b.."......"aH4... ...Q"..r...Bj.
]H#.-r.9.\@.... [email protected].]...k....=.....K.ut.}..c..
1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.
'"..O.%z...xb:..XF.&.!.!.%^'.._.H$....N.!%.2I.IkH.H-.S.>..i.L&..m..
..... ......O.......:...L..$R...J5e?....2B...Q.......:.ZIm.vP/S...4u.%
...C..-....igi.h/.t.....E....k.......w......Hb(.k.{...../.L......T0.2.
.g...oUX*.*|.....:.V.~...TUsU?.y..T.U..^V}.FU.P.........U..6..RwR.P.Q_
.._...c....F..H.Tc....!..2e.XB.rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.....
..9..J.!...{-.-?-..j.f.~.7.z...b.r......up.@.,..:m:.u..6.Q....u..>.
c.y.........G.m..........704.6..l18c...c.k.i........h...h..I.'.&..g.5x
.>f.o.b.4.e.k<abi2.......)..k.f....t...,.......9..k.a........E..
J.6.....|...M....V>VyV.V..I.\.,.m.WlP.W...:........v.m.....).).<<< skipped >>>

GET /qs/1411/f1/f1f51d8b64555950213a9cdb.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=topicLinkR

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: img1.qunarzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: DnionOS/1.2.1.2

Date: Sun, 06 Sep 2015 07:28:18 GMT

Content-Type: image/png

Content-Length: 2850

Connection: keep-alive

Last-Modified: Mon, 10 Nov 2014 08:07:33 GMT

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Accept-Ranges: bytes

Age: 3176898

Via: gdst_251_33 (DLC-3.0), CT-255-182.fastcdn.com (DLC-3.0)
.PNG........IHDR...............Q*...;iCCPicm..x..SwX...>..e.VB....l
.."#[email protected]....(.gA..Z.U\8.....}z............y.
....&...j.9R.<:...OH......H.. ....g......yx~t.?...o...p..$......P&W
. ...".....R...T.......S.d.....ly|B"......I>..................(G$.@
..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0...._p..H...
....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l.....k.o"&
gt;!.........N..._....p...u.k.[..V.h..][email protected].<......%b
..0..>[email protected][email protected]..#......)..4.\,...X..P
"M.y.R.D!......2......w....O.N....l.~.....X.v.@~.-......g42y.......@ .
..........\...L....D..*.A..............a.D@.$.<.B........A.T.:.....
........18....\..p..`........A...a!:..b.."......"aH4... ...Q"..r...Bj.
]H#.-r.9.\@.... [email protected].]...k....=.....K.ut.}..c..
1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.
'"..O.%z...xb:..XF.&.!.!.%^'.._.H$....N.!%.2I.IkH.H-.S.>..i.L&..m..
..... ......O.......:...L..$R...J5e?....2B...Q.......:.ZIm.vP/S...4u.%
...C..-....igi.h/.t.....E....k.......w......Hb(.k.{...../.L......T0.2.
.g...oUX*.*|.....:.V.~...TUsU?.y..T.U..^V}.FU.P.........U..6..RwR.P.Q_
.._...c....F..H.Tc....!..2e.XB.rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.....
..9..J.!...{-.-?-..j.f.~.7.z...b.r......up.@.,..:m:.u..6.Q....u..>.
c.y.........G.m..........704.6..l18c...c.k.i........h...h..I.'.&..g.5x
.>f.o.b.4.e.k<abi2.......)..k.f....t...,.......9..k.a........E..
J.6.....|...M....V>VyV.V..I.\.,.m.WlP.W...:........v.m.....).).<<< skipped >>>

GET /AP5Min.aspx?AID=10852&Auth=F6AE3332AE97FEE7DB40F759E6F828F59A242DCC63042F4324D85058ACDAD99D&referer=http://VVV.cfmogu.com/7.htm&utz=1441524469055 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935|2294


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://fanxing.kugou.com/ext/union/?url=room&unionId=111&sUnionId=14516

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294|2155; expires=Sun, 06-Sep-2015 10:27:48 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:48 GMT

Content-Length: 196
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://fanxi
ng.kugou.com/ext/union/?url=room&unionId=111&sUnionId=14516"&g
t;here</a>.</h2>..</body></html>..HTTP/1.1 302
 Found..Cache-Control: no-cache..Pragma: no-cache..Content-Type: text/
html; charset=utf-8..Expires: -1..Location: hXXp://fanxing.kugou.com/e
xt/union/?url=room&unionId=111&sUnionId=14516..Server: Microsoft-IIS/7
.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=1935|2294|2
155; expires=Sun, 06-Sep-2015 10:27:48 GMT; path=/..X-Powered-By: ASP.
NET..Date: Sun, 06 Sep 2015 07:27:48 GMT..Content-Length: 196..<htm
l><head><title>Object moved</title></head>&
lt;body>..<h2>Object moved to <a href="hXXp://fanxing.kugo
u.com/ext/union/?url=room&unionId=111&sUnionId=14516">here&
lt;/a>.</h2>..</body></html>..HTTP/1.1 302 Found.
.Cache-Control: no-cache..Pragma: no-cache..Content-Type: text/html; c
harset=utf-8..Expires: -1..Location: hXXp://fanxing.kugou.com/ext/unio
n/?url=room&unionId=111&sUnionId=14516..Server: Microsoft-IIS/7.5..X-A
spNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=1935|2294|2155; ex
pires=Sun, 06-Sep-2015 10:27:48 GMT; path=/..X-Powered-By: ASP.NET..Da
te: Sun, 06 Sep 2015 07:27:48 GMT..Content-Length: 196..<html>&l
t;head><title>Object moved</title></head><body
>..<h2>Object moved to <a href="hXXp://fanxing.kugou.c<<< skipped >>>

GET /AP5Min.aspx?AID=10851&Auth=AC1D06D058020A33550F33AE34123C9AD2828245B35634966FDAC96888940D2B&referer=http://VVV.cfmogu.com/6.htm&utz=1441524456008 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935|2294|2155|2337


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294|2155|2337|2317; expires=Sun, 06-Sep-2015 10:27:57 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:27:57 GMT

Content-Length: 236
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://mp.we
ixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&s
n=50e2a8efcb035f2d312cc4e5b0c338ab#rd">here</a>.</h2>..
</body></html>..HTTP/1.1 302 Found..Cache-Control: no-cach
e..Pragma: no-cache..Content-Type: text/html; charset=utf-8..Expires: 
-1..Location: hXXp://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207
859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd..Server: Microsoft
-IIS/7.5..X-AspNet-Version: 2.0.50727..Set-Cookie: UnionADShowTG=1935|
2294|2155|2337|2317; expires=Sun, 06-Sep-2015 10:27:57 GMT; path=/..X-
Powered-By: ASP.NET..Date: Sun, 06 Sep 2015 07:27:57 GMT..Content-Leng
th: 236..<html><head><title>Object moved</title&g
t;</head><body>..<h2>Object moved to <a href="htt
p://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&id
x=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd">here</a>.<
/h2>..</body></html>......
<<< skipped >>>

GET /AP5Min.aspx?AID=10852&Auth=F6AE3332AE97FEE7DB40F759E6F828F59A242DCC63042F4324D85058ACDAD99D&referer=http://VVV.cfmogu.com/7.htm&utz=1441524469055 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: abc.ss229.com

Connection: Keep-Alive

Cookie: UnionADShowTG=1935|2294|2155|2337|2317|2182


HTTP/1.1 302 Found

Cache-Control: no-cache

Pragma: no-cache

Content-Type: text/html; charset=utf-8

Expires: -1

Location: hXXp://VVV.yaoguo.com/anchor/anchorRandomURL?f=1005&cpuid=214516

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: UnionADShowTG=1935|2294|2155|2337|2317|2182|2001; expires=Sun, 06-Sep-2015 10:28:07 GMT; path=/

X-Powered-By: ASP.NET

Date: Sun, 06 Sep 2015 07:28:07 GMT

Content-Length: 185
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://VVV.y
aoguo.com/anchor/anchorRandomURL?f=1005&cpuid=214516">here</
a>.</h2>..</body></html>..HTTP/1.1 302 Found..Cac
he-Control: no-cache..Pragma: no-cache..Content-Type: text/html; chars
et=utf-8..Expires: -1..Location: hXXp://VVV.yaoguo.com/anchor/anchorRa
ndomURL?f=1005&cpuid=214516..Server: Microsoft-IIS/7.5..X-AspNet-Versi
on: 2.0.50727..Set-Cookie: UnionADShowTG=1935|2294|2155|2337|2317|2182
|2001; expires=Sun, 06-Sep-2015 10:28:07 GMT; path=/..X-Powered-By: AS
P.NET..Date: Sun, 06 Sep 2015 07:28:07 GMT..Content-Length: 185..<h
tml><head><title>Object moved</title></head>
;<body>..<h2>Object moved to <a href="hXXp://VVV.yaoguo
.com/anchor/anchorRandomURL?f=1005&cpuid=214516">here</a>
.</h2>..</body></html>....

GET /site/main.swf?20090107 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: flight.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: application/octet-stream

Content-Length: 23580

Connection: keep-alive

Last-Modified: Tue, 28 Jul 2015 09:23:50 GMT

Accept-Ranges: bytes

Server: QWS/1.0

Expires: Tue, 12 Jan 2016 07:28:16 GMT

Cache-Control: max-age=11059200
CWS.P...x..}.\..........H.b.(.bW..)..R....p........[..E.k.]c/...5...Dc
o1Q....Sv.v..&..........y...7o...y3[.,..`9..w1.v.._.qUU.A..>[email protected]|
E.....WK..r/.)........6\'i.?...g......-.5...}..,. .."O....? ..w......X
.*..*.'....a..:M....2 .....|....9s.J...7........D[.l....._..]..8..6...
..-.a=<..a%[email protected]...[..{.Fu;.Q.o'......AM...A..j.A]..Q].A.....
.Q-W..6.......KPg...N..*.)B..IP...=)...A......:.".n.....*}..`.o..../0.
.g0..G..h....Y...........C..D.;..Ue...)#1..>[email protected]. \..2\
.7.1..-...k.8b*AL$.[....... p.Z_x.......... ..Z.......yZR.. 0.Y,e....f
.RTBh.A;V.."1.f1F.W..N..h.|.Z......38ks2..Eh..4v....3QVH6&.U.^...9k..C
....L..$..i...e...C..(.q.*.u.f.r).{.O...=..{$..TYB..R...J.....#.Eo.kY.
.%....."%.$y..&w.2..Q.u@]..H...h..J...u..Sj...le6....)[email protected]..<.
......Su.b ....x._Q9...D..A.-.`.,%..).....D.Eb....r*,...N......(\.T..@
.^..B..vn.v@&..2."(.-R.....BW....... ..HVd.....*..i*]..T.%:!..?.{....u
&..B..2..Y:@.t.7....9.7........(.F1..S*...{...7q#.sw.l..`.~.=.$N'oe...
. .:..|...)..U.J..5..t.....6.P.aV.R..g......Y c.J.....w.F...y.a..Lb.*.
..I.e.Af.&T.T...6."[email protected]...*....G.$... G..
D..HA.O.........FQ.U.T."-.Y..\...5....4(."...Flb..>. ,.KT.e KQ.r...
."P8<.J.)||4J....A....h..5. ......8.=.. ......Y....T..O...%k..`.E..
..I.%GC5..3...F....H... a.A.*m.......].g.|.}9S F.?.4B.E)P.........%k..
1..\-..e9.V.l.-L...-.Lr..._.....I8CR..,.E...`g.t..Ht...u........R.4.&l
t;I).y..$....'U...For..-..R./%.....x..L.....hk.....h{..v...\L...%U..'g
}.P......}..*I..W9|....1.B.....[..q=.....N....Z0f.....$.-....#...R<<< skipped >>>

POST /ifavorites/get? HTTP/1.1

Accept: */*

Accept-Language: en-us

Referer: hXXp://flight.qunar.com/?ex_track=auto_55360807

Content-Type: applacation/json

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: flight.qunar.com

Content-Length: 203

Connection: Keep-Alive

Cache-Control: no-cache

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790

{"source_track":"favorites","cookieId":"192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760","need_flight_detail":"0","need_av_detail":"1","need_read_cached_data":"0","favoriteItems":[],"_token":66557}
HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:19 GMT

Content-Type: application/json;charset=UTF-8

Content-Length: 81

Connection: keep-alive

Accept-Charset: big5, big5-hkscs, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-compound_text, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp

Server: QWS/1.0
{"cookieId":"192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760","r
et":"true"}..<<< skipped >>>

GET /t/?t=begin&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&ou=0&rand=1441524460852&ip=3270664410×tamp=1441524459 HTTP/1.1

Accept: */*

Referer: hXXp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tracker.youzu.com

Connection: Keep-Alive

Cookie: ad_code=150706X7ZzHz4; game_id=100


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:10 GMT

Content-Type: text/plain; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Content-Encoding: gzip

My-app: 200 from 122.227.15.91:80

X-Server: 122.227.15.91

X-Server: 115.182.198.91
28............ N-Q(J-..).R01.0.40...M.2u......0..HTTP/1.1 200 OK..Serv
er: nginx..Date: Sun, 06 Sep 2015 07:28:10 GMT..Content-Type: text/pla
in; charset=utf-8..Transfer-Encoding: chunked..Connection: keep-alive.
.Content-Encoding: gzip..My-app: 200 from 122.227.15.91:80..X-Server: 
122.227.15.91..X-Server: 115.182.198.91..28............ N-Q(J-..).R01.
0.40...M.2u......0......


GET /t/?t=complete&s_id=2724,12272,0,14516,0&g_id=100&z_id=2052310037&m_id=7242&l_t=2875&rand=1441524463727&ip=3270664410&timestamp=1441524459 HTTP/1.1

Accept: */*

Referer: hXXp://vdax.youzu.com/?q=150706X7ZzHz4&sid=14516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tracker.youzu.com

Connection: Keep-Alive

Cookie: ad_code=150706X7ZzHz4; game_id=100


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:12 GMT

Content-Type: text/plain; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Content-Encoding: gzip

My-app: 200 from 122.227.15.91:80

X-Server: 122.227.15.91

X-Server: 115.182.198.91

28............ N-Q(J-..).R0.01444.....3.......0..HTTP/1.1 200 OK..Serv
er: nginx..Date: Sun, 06 Sep 2015 07:28:12 GMT..Content-Type: text/pla
in; charset=utf-8..Transfer-Encoding: chunked..Connection: keep-alive.
.Content-Encoding: gzip..My-app: 200 from 122.227.15.91:80..X-Server: 
122.227.15.91..X-Server: 115.182.198.91..28............ N-Q(J-..).R0.0
1444.....3.......0..

GET /MTFlashStore.swf HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: irs01.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:17:00 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 1866

Last-Modified: Tue, 19 May 2015 10:47:12 GMT

Connection: close

Vary: Accept-Encoding

ETag: "555b14b0-74a"

Content-Encoding: gzip

Expires: Mon, 21 Sep 2015 07:17:00 GMT

Cache-Control: max-age=1296000
......[U..MTFlashStore.swf.."...CWS.....x.}V[l...>?/:...|..'N......
h..f.q.......(....DS..m..H............u.2.....6...n.6.q{. .h.8..c.}...
!._.b.D......;..Dq...#..>B..M..#[email protected]#..r...a:#..R.....lvyy9.|
>c........<..........* ..s25..L.G....[f.. sV...J5Q...h.n..dY...T
..:... .*.#.eW.wL...]U.\ve..X....D.4Cq*...DV...A.&...I....|.9.W.e.),..
'tl.2.V.Q.j.f[..J5i.. ._. j.9Cw*........S.EY.j....f<..yC1...<...
....{...............Xh4.L....{ch*....Ingg.f....._!..M....... t....r#..
X.R....."D.H..*.D1.a..#a.....k..|t.M........e5t.Z........k......*..9V.
O5..-V....s.Du.....C..K.i.........SI./...........ZI..P.....Y....!Y~>
;;W..W7..h....y0^...K....../q....Mb.?.4c..V.....x...........4..y.U.MD.
.;.....<........w?......~.....~s..w~.}.~_k.c......n.<!.m..L.*.!.
.....,....y..o.|...........:....D....B:B...).J....gL...?&.....K).{...p
Ma......z.......C..~W)..{...lp../[T.EO.[.....\......?.'m.}....o.......
........y.|r...w?...|........2g..B..3t...\....(Op!......Ql6l..........
..-)..[w....S3W...:.m.w..x.......'..........&.HX....VV!.)8..0.'....Y..
....{.}H...e..4.D.....,.....w ...i{.1-......._.......$.CB".h....!...z.
{:z:{.z.=.......\K.p0..#.........c.0...1...........6..#............8..
.>.<.....4.3..bHc8.A.0....A..1\..0..P..^..1..8T....^....{.s...M.
};......!...3.=...7@,....!..(":M......B.p..{..h..0......g%....rc...4..
.....G'8!.m{e6..2AkU .a.#h....Z. .n.....Ai)...(.... .DiUL...p $....7(.
.J.t.......NI....T9..kB].....h..lzc..n.w ..Vk.....K ....O.NzlB.Z..x;..
t1.A...g..x.-g}._....{*<....8..2p}6...'..&Q.~....P.X.B!B;.~... <<< skipped >>>

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;....

GET /imges/pixel.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 07:12:01 GMT

Date: Tue, 10 Mar 2015 07:12:01 GMT

Cache-Control: max-age=31104000

Content-Type: image/gif

ETag: "1635128698"

Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT

Content-Length: 43

Server: tux/3.3

Age: 1

X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Expires: F
ri, 04 Mar 2016 07:12:01 GMT..Date: Tue, 10 Mar 2015 07:12:01 GMT..Cac
he-Control: max-age=31104000..Content-Type: image/gif..ETag: "16351286
98"..Last-Modified: Tue, 07 Aug 2007 15:01:15 GMT..Content-Length: 43.
.Server: tux/3.3..Age: 1..X-Via: 1.1 dls22:1 (Cdn Cache Server V2.0)..
Connection: keep-alive..GIF89a.............!.......,...........D..;..

GET /js.ng/framId=topAD&chan=flight&pg=home&pos=top&site=qunar&size=1600x336&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=topAD

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:15 GMT

Content-Type: application/x-javascript

Content-Length: 6443

Connection: keep-alive

Set-Cookie: NGUserID=c0a8e145-24503-1441524495-38; expires=Wednesday, 30-Dec-2037 16:00:00 GMT; path=/

AdServer: l-ads5.ad.cn6:9678:50

Server: QWS/1.0
document.write('');.;(function(){.    try{.        var ad_type="flash_
hotel_focus_map";.        var css = '',.            html = '',.       
     jsCode = ';(function(){\n    var config  = {\n            //.....
.flash......\n            swf_click : "hXXp://qde.qunar.com/event.ng/T
ype=click&FlightID=179692&AdID=240081&TargetID=8462&Segments=1
3,28,148,373,530,534,535,536,539,540,541,542,543,544,545,546,548,549,5
50,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570
,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,6
11,1101,1142,1183,4487,4494,4497,4648,4649,4676,4742,4951,4956,5001&
Targets=5302,29,1504,8462,8347,8351&Values=34,46,51,63,77,80,101,110
,150,204,215,228,243,250,252,301,305,323,5402,5598&RawValues=&Redi
rect=T58eySexufTRN91ezLFpOgFQ6MQfQ46JHk1J5g5gXi_kNdila1GaDckyVn9eP3Dh_
FNtTX2g3kfgSYQd3EkEYcwSReZ1muv759lW5plBku02sdIKDRbO89djMgImKw8PAQxMzv8
jyfIY638s7zpLVkk6iXchx4ZF27gyLD3hRnY=",\n            //......flash ...
......jpg ............\n            /*swf_img_src : "hXXp://source.qun
ar.com/site/images/wns/20150806_flighthp_background_464x320_Ebb_6027.s
wf",*/\n            swf_img_src : "hXXp://source.qunar.com/site/images
/wns/20150806_flighthp_background_464x320_Ebb_6027.swf",\n            
//......JPG......\n            bottom_img : "hXXp://source.qunar.com/s
ite/images/wns/20150806_flighthp_background_1600x336_Ebb_6027.jpg",\n 
           //............\n            bottom_img_url : "hXXp://qde.qu
nar.com/event.ng/Type=click&FlightID=179692&AdID=240081&Targ<<< skipped >>>

GET /js.ng/framId=ad_home_leftAD_middle&chan=flight&pg=home&pos=top&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_leftAD_middle

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790; NGUserID=c0a8e145-24503-1441524495-38


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:16 GMT

Content-Type: application/x-javascript

Content-Length: 1383

Connection: keep-alive

AdServer: l-ads6.ad.cn6:9678:50

Server: QWS/1.0
document.write('');.;(function(){.    try{.        var ad_type="image"
;.        var css = '',.            html = '',.            jsCode = ';
(function(){\n    var clickTag = "hXXp://qde.qunar.com/event.ng/Type=c
lick&FlightID=179723&AdID=240102&TargetID=8349&Segments=13,28,
132,148,373,530,534,535,536,539,540,541,542,543,544,545,546,548,549,55
0,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,
571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,61
1,1101,1143,1183,4487,4494,4497,4648,4649,4676,4742,4953,5001&Target
s=5302,29,1504,8349&Values=34,46,51,63,77,80,101,110,150,204,217,228
,243,250,252,301,305,320,5634&RawValues=&Redirect=bbRUK-YZP1NQryA8
tla35Pr8lBYOPyuJm6gWWxSAqE8MpEsyZr-FOqTxipqSKyY-x4DKitkotTpjPIBS2KRXOA
==";\n    var img_src = "hXXp://source.qunar.com/site/images/wns/20150
902_flighthp_912x90_7241.jpg";\n\n    var container = parent.QNR.AD.cr
eate_div_container( Current_ad_id );\n\n    container.innerHTML = [\'&
lt;a target="_blank" href="\', clickTag ,\'"><img border="0" src
="\', img_src ,\'" /></a>\'].join(\'\');\n})();',.           
 jsrc = '',.            run = '1';.        if( css || html || jsCode |
| jsrc ){.            top.QNR.AD.run_in_content( Current_ad_id , css ,
 html , jsCode  , jsrc , run);.        }.    } catch(e){.        if( w
indow['console'] ){ console.log( e ); }.    }.})();.document.write('')
;....
<<< skipped >>>

GET /js.ng/framId=rightTopBanner&chan=flight&pg=home&pos=top&site=qunar&size=272x220&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=rightTopBanner

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790; NGUserID=c0a8e145-24503-1441524495-38


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: application/x-javascript

Content-Length: 1384

Connection: keep-alive

AdServer: l-ads6.ad.cn6:9678:50

Server: QWS/1.0
document.write('');.;(function(){.    try{.        var ad_type="image"
;.        var css = '',.            html = '',.            jsCode = ';
(function(){\n    var clickTag = "hXXp://qde.qunar.com/event.ng/Type=c
lick&FlightID=179727&AdID=240105&TargetID=8352&Segments=13,28,
132,148,373,530,534,535,536,539,540,541,542,543,544,545,546,548,549,55
0,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568,569,570,
571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,587,610,61
1,1101,1143,1183,4487,4494,4497,4648,4649,4676,4742,4955,5001&Target
s=5302,29,1504,8352&Values=34,46,51,63,77,80,101,110,150,204,217,228
,243,250,252,301,305,320,5635&RawValues=&Redirect=bbRUK-YZP1NQryA8
tla35Pr8lBYOPyuJm6gWWxSAqE8MpEsyZr-FOqTxipqSKyY-IzvJU5JqKtphIyrsDtmANg
==";\n    var img_src = "hXXp://source.qunar.com/site/images/wns/20150
902_flighthp_272x220_7241.jpg";\n\n    var container = parent.QNR.AD.c
reate_div_container( Current_ad_id );\n\n    container.innerHTML = [\'
<a target="_blank" href="\', clickTag ,\'"><img border="0" sr
c="\', img_src ,\'" /></a>\'].join(\'\');\n})();',.          
  jsrc = '',.            run = '1';.        if( css || html || jsCode 
|| jsrc ){.            top.QNR.AD.run_in_content( Current_ad_id , css 
, html , jsCode  , jsrc , run);.        }.    } catch(e){.        if( 
window['console'] ){ console.log( e ); }.    }.})();.document.write(''
);....
<<< skipped >>>

GET /js.ng/framId=ad_home_rightAD_top2&chan=flight&pg=home&pos=top&site=qunar&size=230x90&tile=14415244931185684352&city=åŒ—äº¬ HTTP/1.1

Accept: */*

Referer: hXXp://VVV.qunar.com/vataframe/b.html?_=20120830&rnd=ad_home_rightAD_top2

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: qde.qunar.com

Connection: Keep-Alive

Cookie: QN99=8709; QN1=O5cLFlXr6viJanyZTO9EAg==; csrfToken=IgMnuvsyPWFHdwND4xdbT2kl82KjRSq3; QunarGlobal=192.168.50.36_29f0656b_14fa154f341_41ef|1441524482760; RT=; _i=RBTW-epCU2m8bzuRiPr0dioaiIex; _vi=hrxQQhrwwBnbuiK_nPEoAYBy8SiIbFZVhpJmFFWD18p3-_BYRFZbgF_UnhB-z-ECdRlhbDL9cZ1E6Em_34H_VUyQS7fXzAJ9U44UEOib6UqvOMd5IRlNydRuK9G8XADk7u9XVoHe8saxk2Svp3E-irm49lI1K1F7Sqo4ciy61wTZ; QN6=auto_55360807; ag_fid=ANshGOFRiVoTm4YF; __ag_cm_=1441524496790; NGUserID=c0a8e145-24503-1441524495-38


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:17 GMT

Content-Type: application/x-javascript

Content-Length: 3681

Connection: keep-alive

AdServer: l-ads6.ad.cn6:9678:50

Server: QWS/1.0
document.write('');.;(function(){.    try{.        var ad_type="super_
text_flightAndTrain";.        var css = '.qde_super_text .flight{\n   
 white-space: nowrap;\n    text-decoration: none;\n    text-align: cen
ter;\n    display: block;\n    overflow: hidden;\n    font-weight: 700
;\n    font-size: 14px;\n    color: #26b4d3;\n    font-family: "Micros
oft Yahei";\n}\n.qde_super_text .flight dt{\n    line-height: 26px;\n}
\n.qde_super_text .flight dl{\n    padding: 6px 0;\n}\n.qde_super_text
 .flight:hover{\n    color: #0e83bf;\n}\n\n.qde_super_text .train{\n  
  white-space: nowrap;\n    text-decoration: none;\n    text-align: ce
nter;\n    display: block;\n    overflow: hidden;\n    font-weight: 70
0;\n    font-size: 14px;\n    color: #0069ca;\n    font-family: Arial,
SimSun,sans-serif;\n    background-color: #d9eefb;\n}\n.qde_super_text
 .train dt{\n    line-height: 26px;\n}\n.qde_super_text .train dl{\n  
  padding: 6px;\n}\n.qde_super_text .train:hover{\n    color: #f60;\n}
',.            html = '<div class="qde_super_text" id="super_text_w
rapper">\n    <a id="superLink" href="hXXp://qde.qunar.com/event
.ng/Type=click&FlightID=176846&AdID=239371&TargetID=821&Segmen
ts=13,28,132,148,373,530,534,535,536,539,540,541,542,543,544,545,546,5
48,549,550,551,552,553,554,555,556,558,559,560,561,562,564,565,567,568
,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,586,5
87,610,611,677,1101,1143,1183,4386,4487,4494,4497,4648,4649,4676,4742,
5001&Targets=5302,29,821,1504,6489&Values=34,46,51,63,77,80,10<<< skipped >>>

GET /imges/live/CSSIMG/peihuaBox.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr4.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 01 Jan 2016 13:14:20 GMT

Date: Tue, 06 Jan 2015 13:14:20 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "241554675"

Last-Modified: Mon, 20 Feb 2012 09:44:52 GMT

Content-Length: 9000

Server: tux/3.3

Age: 1

X-Via: 1.1 zhenjiang168:8080 (Cdn Cache Server V2.0), 1.1 sm25:9 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...P...........g.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:0B2209D05BA511E1ADE4F0D5
427E7DE6" xmpMM:DocumentID="xmp.did:0B2209D15BA511E1ADE4F0D5427E7DE6"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B2209CE5BA511E1AD
E4F0D5427E7DE6" stRef:documentID="xmp.did:0B2209CF5BA511E1ADE4F0D5427E
7DE6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.oD.....PLTE..........hj...........*..O....
.e...................3f............................32....Z......2....a
..22..........Mz............./f...................-6.2-..........-*...
....2i...........h...../....5-....\c....l..VY.......-e..;.....c.....5.
...kj....... d.h...........<C.......nv.....s.......5:..1...........
..[V..2.......23....1i./6..,..9.......g........w.....Do..5.9...>..*
.c...%.-h.HM....-h...................)b.............-c....3'.......;m.
*b.0;....'^.....e.PW.5-..... ..6..2.....d.0;. e.......................
..................................................................<<< skipped >>>

GET /mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_pc2826cc.css HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:41 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:41 GMT

Last-Modified: Wed, 02 Sep 2015 08:20:00 GMT

Content-Type: text/css

Content-Length: 855

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........V]..8.. Y..Zi...AM.v_./.TU.}...&\...6.i....$$..V#./....k.s.
97$..}.."i.H.>.mRu.9....Am3r.rX.....s2..(..V.JQ4...P..... h\I&u....
.".......b!........A..-E..y.P0...LV.. WR["..("~\./..M.*),..*i.....F,~.
.;.{...o...2...@=....g......k"5.}..N...i..v.U....:........)7'$..u.....
.p.D.)Jyj..,=..t#.....Zjh{..E../e.t.....6..T..#.x....4.sP%.....6y|...m
l5..].c..z..;vn.."3.a...4...gWg...:...r.h..)....}V.KV.E..hQ...v_..E...
.g...i...vr.5.....G.....'.:......_..4.....#.../.....!6..j......4.3.7..
NU..K...,.........]r^..#QK...O...,.J.%r..Y....(.M.>_....r.J.h.EB...
...fv*o>......h...1a...#..........\[email protected].....$.P...
.......;.....!......j..v....6...IVNm.W...*..H..lo#.'b...... ...2.....(
..K....H.....B......Z..N......t=."!....`.*.ZEIp..b\(..O.o........(....
...f.<....#.....%....].x!........i...)....7..W.&k../j..[.. 8P.R...^
..t.C..O..w.....w.7.l......HTTP/1.1 200 OK..Server: NWS_UGC_HY..Connec
tion: keep-alive..Date: Sun, 06 Sep 2015 07:27:41 GMT..Cache-Control: 
max-age=31536000..Expires: Mon, 05 Sep 2016 07:27:41 GMT..Last-Modifie
d: Wed, 02 Sep 2015 08:20:00 GMT..Content-Type: text/css..Content-Leng
th: 855..Content-Encoding: gzip..X-Cache-Lookup: Hit From Disktank Gz.
.Access-Control-Allow-Origin: *.............V]..8.. Y..Zi...AM.v_./.TU
.}...&\...6.i....$$..V#./....k.s.97$..}.."i.H.>.mRu.9....Am3r.rX...
..s2..(..V.JQ4...P..... h\I&u.....".......b!........A..-E..y.P0...LV..
 WR["..("~\./..M.*),..*i.....F,~..;.{...o...2...@=....g......k"5.}..N.
..i..v.U....:........)7'$..u......p.D.)Jyj..,=..t#.....Zjh{..E../e<<< skipped >>>

GET /mmbizwap/en_US/htmledition/style/page/appmsg/page_mp_article_improve_pc2826cc.css HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:42 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:42 GMT

Last-Modified: Wed, 02 Sep 2015 08:20:00 GMT

Content-Type: text/css

Content-Length: 855

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........V]..8.. Y..Zi...AM.v_./.TU.}...&\...6.i....$$..V#./....k.s.
97$..}.."i.H.>.mRu.9....Am3r.rX.....s2..(..V.JQ4...P..... h\I&u....
.".......b!........A..-E..y.P0...LV.. WR["..("~\./..M.*),..*i.....F,~.
.;.{...o...2...@=....g......k"5.}..N...i..v.U....:........)7'$..u.....
.p.D.)Jyj..,=..t#.....Zjh{..E../e.t.....6..T..#.x....4.sP%.....6y|...m
l5..].c..z..;vn.."3.a...4...gWg...:...r.h..)....}V.KV.E..hQ...v_..E...
.g...i...vr.5.....G.....'.:......_..4.....#.../.....!6..j......4.3.7..
NU..K...,.........]r^..#QK...O...,.J.%r..Y....(.M.>_....r.J.h.EB...
...fv*o>......h...1a...#..........\[email protected].....$.P...
.......;.....!......j..v....6...IVNm.W...*..H..lo#.'b...... ...2.....(
..K....H.....B......Z..N......t=."!....`.*.ZEIp..b\(..O.o........(....
...f.<....#.....%....].x!........i...)....7..W.&k../j..[.. 8P.R...^
..t.C..O..w.....w.7.l..........


GET /mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch.2x278965.png HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:42 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:42 GMT

Last-Modified: Mon, 24 Aug 2015 12:00:00 GMT

Content-Type: image/png

Content-Length: 2223

X-Cache-Lookup: Hit From Disktank

Access-Control-Allow-Origin: *
.PNG........IHDR...F...F.....q.......sRGB........iIDATx..[kl.U..wv....
."...?.(.......TE.IL......5......L6..B.K.......4&..`...l...Fi.....gD[.
....|.]C..;w.Q.f&)..s.9.....3..a.=\.\.\.\.\.\.F9.|$....zN.<.(....x.
.?&D..<.....d=\...y7.....#..e...].n]|..f....._.. /.....K(.n.x...W.&
lt;...]........ .....X.3y........=BmVQ....a..}....,--.e....S...'......
(.y....y.W.p.f*.....}..E.a.S/Z..h....4o....?.6.'....S?..3.....4.......
.8.WTl ......~.......d.6.(1.-U.....e.k............Un]...:..f..P.i.=...
.}[email protected]....{..A..w.m.y..v..42.y.ML(..t.7..pL....i...&.....4
./&....M....p...h...N..{..wz..4c\ *|...E.r@l`..`..trK.. ....s..F.k?L.D
...*.6..Wqo.?.=t)...T.....E.sM..6R......\.....c.k. ....v.i..o%.....y.h
$%I...0. 0'..g..`.!.S.......~..b.2....G.`Z....'......0.F`....nah"V&.O.
...=.....$..(.U....Aj|.R..  ..............o.r[...wQ....u.;.mj...,.((..
....Q....... .bJ=./.x..c......l....[.j..T..b..r..f6...v..\....)...d...
....w.....!......._......rQ.jK..S.t..d.........\..U[ ..O..\...z....,2.
8q....gs.DI^[email protected]=DdK......4....`WLM......Vm....'/....jbR
`q........Xy.ho......Jnj<Lh..J>.y.2...`..n...s....X..g.G..Z.....
?.`.3].h.j...\d.g"...EyYx)1B.W`.Z..L.\S....~j{.3~.g...........2..v%..N
.,.-.K.!..IJ.....N.\"..X.A........i..Aw..8d......r.a..C.a...$s0.ut.\.F
.........~c#L.d......d........!.9.k:...d......w...Z...^.x#.9!7Y^...U..
.w29.-sBk...Ap..f.t.:.....C....Rb.=....:......`3R&.X..(7. 91B\@)...t..
sv6#.W.b..P.......;..)2.t.qqJn1rZE,....:1.d..W..5mb...o.. .......,rk.;
W&r......wQ..(..v...L..../....a0.H.%r.....................h.'6&YW.<<< skipped >>>

GET /mmbizwap/en_US/htmledition/images/icon/common/icon_loading_white2805ea.gif HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:42 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:42 GMT

Last-Modified: Thu, 27 Aug 2015 12:00:00 GMT

Content-Type: image/gif

Content-Length: 2767

X-Cache-Lookup: Hit From Disktank

Access-Control-Allow-Origin: *

GIF89a . ............................444...............TTT............
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!..NETSCAPE2.0.....!.......,.... . ........H......*\.p.....
.h.p........."......8.....G>D).....R.4...C.....I.....\..9p.....:..s
...1_2`.p`...u.<.u...SY....k..`.F.hv...6S>u.. ..ry..J./[email protected]
_... . ....../.KY&]......9....Mr...`i.x.r\.......vf...j.MO.&*Z....o.&g
t;;......".,<yQ...:w..a... g5N1 .!.......,...............H. ....*d.
.!A...FT8......h,.P.....j.......6..h.$...&.$.Rf....Zl.R ....VTY.eN....
=J....H.B,.5.O.U.&=.Ua..].z.@.,..f..%PvAY....!.......,...............H
p.....*\(.a......H..E..".4`.bC...P.......-.$.q....Y2\.q... E.....I....
[email protected].<...x..Q.W.0....T.W..4z cO.c52..P.F....!...
....,......................*......... ...E..2..0.....7r,0..A.."&$...@.
...\..%[email protected]?.D..'.......4.........f..U!.....I.`.&<@....

<<< skipped >>>

GET /mmbizwap/en_US/htmledition/images/icon/appmsg/emotion/icon_emotion_switch.2x278965.png HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:43 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:43 GMT

Last-Modified: Mon, 24 Aug 2015 12:00:00 GMT

Content-Type: image/png

Content-Length: 2223

X-Cache-Lookup: Hit From Disktank

Access-Control-Allow-Origin: *
.PNG........IHDR...F...F.....q.......sRGB........iIDATx..[kl.U..wv....
."...?.(.......TE.IL......5......L6..B.K.......4&..`...l...Fi.....gD[.
....|.]C..;w.Q.f&)..s.9.....3..a.=\.\.\.\.\.\.F9.|$....zN.<.(....x.
.?&D..<.....d=\...y7.....#..e...].n]|..f....._.. /.....K(.n.x...W.&
lt;...]........ .....X.3y........=BmVQ....a..}....,--.e....S...'......
(.y....y.W.p.f*.....}..E.a.S/Z..h....4o....?.6.'....S?..3.....4.......
.8.WTl ......~.......d.6.(1.-U.....e.k............Un]...:..f..P.i.=...
.}[email protected]....{..A..w.m.y..v..42.y.ML(..t.7..pL....i...&.....4
./&....M....p...h...N..{..wz..4c\ *|...E.r@l`..`..trK.. ....s..F.k?L.D
...*.6..Wqo.?.=t)...T.....E.sM..6R......\.....c.k. ....v.i..o%.....y.h
$%I...0. 0'..g..`.!.S.......~..b.2....G.`Z....'......0.F`....nah"V&.O.
...=.....$..(.U....Aj|.R..  ..............o.r[...wQ....u.;.mj...,.((..
....Q....... .bJ=./.x..c......l....[.j..T..b..r..f6...v..\....)...d...
....w.....!......._......rQ.jK..S.t..d.........\..U[ ..O..\...z....,2.
8q....gs.DI^[email protected]=DdK......4....`WLM......Vm....'/....jbR
`q........Xy.ho......Jnj<Lh..J>.y.2...`..n...s....X..g.G..Z.....
?.`.3].h.j...\d.g"...EyYx)1B.W`.Z..L.\S....~j{.3~.g...........2..v%..N
.,.-.K.!..IJ.....N.\"..X.A........i..Aw..8d......r.a..C.a...$s0.ut.\.F
.........~c#L.d......d........!.9.k:...d......w...Z...^.x#.9!7Y^...U..
.w29.-sBk...Ap..f.t.:.....C....Rb.=....:......`3R&.X..(7. 91B\@)...t..
sv6#.W.b..P.......;..)2.t.qqJn1rZE,....:1.d..W..5mb...o.. .......,rk.;
W&r......wQ..(..v...L..../....a0.H.%r.....................h.'6&YW.<<< skipped >>>

GET /mmbizwap/en_US/htmledition/images/icon/common/icon_loading_white2805ea.gif HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:43 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:43 GMT

Last-Modified: Thu, 27 Aug 2015 12:00:00 GMT

Content-Type: image/gif

Content-Length: 2767

X-Cache-Lookup: Hit From Disktank

Access-Control-Allow-Origin: *

GIF89a . ............................444...............TTT............
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!..NETSCAPE2.0.....!.......,.... . ........H......*\.p.....
.h.p........."......8.....G>D).....R.4...C.....I.....\..9p.....:..s
...1_2`.p`...u.<.u...SY....k..`.F.hv...6S>u.. ..ry..J./[email protected]
_... . ....../.KY&]......9....Mr...`i.x.r\.......vf...j.MO.&*Z....o.&g
t;;......".,<yQ...:w..a... g5N1 .!.......,...............H. ....*d.
.!A...FT8......h,.P.....j.......6..h.$...&.$.Rf....Zl.R ....VTY.eN....
=J....H.B,.5.O.U.&=.Ua..].z.@.,..f..%PvAY....!.......,...............H
p.....*\(.a......H..E..".4`.bC...P.......-.$.q....Y2\.q... E.....I....
[email protected].<...x..Q.W.0....T.W..4z cO.c52..P.F....!...
....,......................*......... ...E..2..0.....7r,0..A.."&$...@.
...\..%[email protected]?.D..'.......4.........f..U!.....I.`.&<@....

<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/biz_wap/moon275627.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:43 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:43 GMT

Last-Modified: Thu, 27 Aug 2015 03:50:00 GMT

Content-Type: application/x-javascript

Content-Length: 1456

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........Vmo.6..._as.#U.lgC.Yc...(..C.~r2...[.L.$..E.o..E.r.u....H..
.w.=w..Jf6W2... .{.uw.....R.?.~.@$/g._...N....bc.n.....6..y....N.....R
.........>...ip.t.......0.....6J......M......M,.L..hu.Wa.......Jh.$
..^..48...N.....:..7......................=Y.E.N.O....7I...R....k..u.6
.L.:......B.\.3.9W.c.....:[email protected]_...<...=.l?_^.g:.
..9.H......L./`..wF..v...\..u...:YB..`.]../.Q .Ft/.....%.E.Q.."...1..K
.f.......-......L.(...p........8:={2....D...A^.%....`H.3...`.C..!Wv..G
<.c..-.X.T....TD.......'.#.'4......l......&.4UY*m{.>i..I.....NR~
..)..}.2f....RD.|.<...U[....:.....z....U....]...*..h.`.o.u.......?Z
.....-UVm...Z.e]o....B..yq.;_...........]....,..g......P|).....*......
BV...B)/..\.v....4....Is..}...r.......x.Q..5 })nf.Q..... 4...4\M4..<
;.%D.LDPN.l...s.Kq.{..p..0;b.....g..-.9....|......n.F[b...&3*l..v.8k..
J.U....}..N...-C..OOG.#-Lr}.|..d...o......0.........3O.Q]...`........)
g..hz...02...3.......#q..S9.....D .x....4L....p@(.. .1.Hl"..GW.wC...J.
.......<C....t./..VB~.E..i....[zk.m{Y./....e......kF..X.9...{Ti.:..
i.c....{...x.&O....(...P......X..).'.......|..E...AJ(...U^..d|.S]g.!o.
(..[.]..T..2........h.]...[=ZE{i....4...TZ.ax/.y....#...#.o.....s.t..7
[..N.T....7?..Ls...q.`C.q...nY<.Q..O.!1..K..U'Fg.S.`.c...;..W....7.
2...B7l*p....ceZ..t......h......ye.|;...T.^.....\]...E..ruo..u..'..E..
..i.5..,....])....#}....4...3...\.;.k.[&.,.\.\....#.....:....{..7...0{
..r*.........6..B-6.J8..u.'X?.9..8.5....$.....D.~g|'....k^....!Tt.~7H.
..l...........
<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/appmsg/emotion/caret278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/map278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/textarea27cdc5.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/nav278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/common278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/slide27cdc5.js,/mmbizwap/en_US/htmledition/js/pages/report2805ea.js,/mmbizwap/en_US/htmledition/js/pages/music_player275627.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/dom278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/emotion27f4f1.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/hashrouter2805ea.js,/mmbizwap/en_US/htmledition/js/a/gotoappdetail281ad5.js,/mmbizwap/en_US/htmledition/js/a/ios275627.js,/mmbizwap/en_US/htmledition/js/a/android275627.js,/mmbizwap/en_US/htmledition/js/a/profile281ad5.js,/mmbizwap/en_US/htmledition/js/appmsg/a_report282222.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/monitor27f4f1.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:44 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:44 GMT

Last-Modified: Tue, 01 Sep 2015 12:30:00 GMT

Content-Type: application/x-javascript

Content-Length: 9965

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........}.w..u...W.p... .K.....U$..}..c.q[...... ......'..;...J....
..>ub7y...VZ'.l.3").....;3.f...e....X&1.w..._3w.....]s.x....0.~...N
B...j..............6J.\J....jm.$s..zm..-FI8G.>.v..Z.:.........IH...
.U....Av...?...e..q(y.....9.0..K.I....'q\J..\ ...F..H......%.X.\."k.v.
.).I.9.f._kj.].6.u.N.....L.T.4C.....KYK...O..(.)4]E..Xs>...=o|U h..
......ar.M..(:.z..hV0.;V....].../c......O....p4mh._.<..u...........
./..?.^}......Wo...U..o.....sn.:..=.....y...z..?.......'.8..c...so`...
p..71....^~.{{...7..;....~...x.s.....?}. .r....1.......s8.^....>.A.
.........._.......>..s~.............Vt....o....._`...o....;.....b..
.66y.M...G..-N.}...G........g./.``....<.97.%........|....~.=.z.....
..?.* .._.n...lj..../.~....G....k....|..~|.;.3...........;_|....np,.&g
t;......./=...~}t.s.......(G.z..........'..._...>.$...O?:.....~w.:N
..'..~..>...../}z.......~.3.....n.......#..~......:......=.........
.k..H{..;_0......o..n....<.... 8.../.O.>|.....c./.4Y.W>=.....
.up....[|....<x.3.../..O\....7.:|.W....;x........ .W~..=......._~|.
.......]..=..M...[...C........I.../...z...k..G..=/...o....0A.8|.O...|/
.V...D...O...C^{...4..E...l$ ...`...h..i.lp......3.n`.i._......^.J.(..
.Y.E.'.<...):[email protected]........<b....S...zh.....:Kz.(.,T."e.0
O....Bk..\..tb7.....J..	b.Q.t....!..;.._.Q......1...#. ..:.>..K..
".Fs.t.....|?.E...I..x|...x\..... ...`.&.2......@_|fQ.xft.4......9 ..n
6..,..&..b..=........ln....8p.[m..D.m"}....a..........hl7$..V...c.m.U.
..B/.r..bk.V%..pV...HG..t.YH....FZ(:.......Q2.2/du...fa..M.."NUQ.s<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/appmsg/report_and_source2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/page_pos28055f.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_speed_report275627.js,/mmbizwap/en_US/htmledition/js/appmsg/voice275627.js,/mmbizwap/en_US/htmledition/js/appmsg/qqmusic275627.js,/mmbizwap/en_US/htmledition/js/appmsg/iframe282763.js,/mmbizwap/en_US/htmledition/js/appmsg/review_image275627.js,/mmbizwap/en_US/htmledition/js/appmsg/outer_link275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/jsapi/core275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/event275627.js,/mmbizwap/en_US/htmledition/js/appmsg/copyright_report2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/async27de55.js,/mmbizwap/en_US/htmledition/js/biz_wap/ui/lazyload_img275627.js,/mmbizwap/en_US/htmledition/js/biz_common/log/jserr2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/share2805ea.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/mmversion275627.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_img_lib275627.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:44 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:44 GMT

Last-Modified: Wed, 02 Sep 2015 10:50:00 GMT

Content-Type: application/x-javascript

Content-Length: 14193

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........}k.#Ir....h...U..>.gv...M.<......G.Zpz.jV.....SUlv.p.
..p6`..d.. ..`....>..d.p./.......#"3..........w...wFF. #..>.!.-.
.Z&.n.WQ...0.'.:.....rG..x=.D.e.v..X$.$.E8.......%.h...<L....R....e
1.E..Dw.....;]..TD...Wk.s._...w....w.4.u..p....4t....7.4j..]..A..h`..n
.`r>.x..a./.Lm..v-.Noh..t./....=..f 7.Mf..m-W...."[email protected]._|...
5H...r.f5X.....~/.......6|2....d9^>.E4.. .y..m.....0!f.y8.....?..-W
Q.Keg.u...h..7...5...<NE..Px,...).~<....B..j..q....o..5....c@.(.
...<=..y'......6.5.....,..'W..k.._.2..8<HE0..w..d.......Z....(.0
~./l..........5.f2......h.k|j.z..1.uH.9tc>5..3..jz6.#.K..Sv..]|..^-
x..qAo;..f................R-..h...#..X....b...u.T....Y......s\WX.l5..|
... .z..5....@sA4Y#vuf<}. D.{.0..J.#...O?y..:."1....wR.eWZr.U@Xq6"|
...AI.....A...9.....-KYXF!...g....m........]...............(W..L...Z..
.....Q.3q<.....|d...x.%.a.Qhs.E/.dXz.. ...l...u.%[email protected])s..6.&g
t;e..?..!...;....,...v.I....s.i.m......6|..!l..;..........('Z...n`.n..
...[......z..{.......H....>..w.w..W.gxv......]g.u....Y6...b.n/.....
.m......q....|[email protected]=..4..I.=..Ll:J....
[email protected]!I\..@...)vC.....W...c....T..]...Zx!..F..[ .i...J.O..C2..*. \...,
 >[email protected]...`[email protected]....(~..xd.em.TX...5..V$..q.....
....rbD...H.Vq...f.......O.....m6]......D...h....bM.0.w.J.v6....|..l.}
.q.0..L.-..=.. ...\0..&\,l..9n.4(...9.......iGn.w.i...10.NDP.I........
......a..m....i....}.n..5l.9...........I0.{..6'......g...HL......T...$
....U.,[email protected].)...E$=.S.&Jo.H>.U~..#.............m|..w.<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/appmsg/emotion/caret278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/map278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/textarea27cdc5.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/nav278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/common278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/slide27cdc5.js,/mmbizwap/en_US/htmledition/js/pages/report2805ea.js,/mmbizwap/en_US/htmledition/js/pages/music_player275627.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/dom278965.js,/mmbizwap/en_US/htmledition/js/appmsg/emotion/emotion27f4f1.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/hashrouter2805ea.js,/mmbizwap/en_US/htmledition/js/a/gotoappdetail281ad5.js,/mmbizwap/en_US/htmledition/js/a/ios275627.js,/mmbizwap/en_US/htmledition/js/a/android275627.js,/mmbizwap/en_US/htmledition/js/a/profile281ad5.js,/mmbizwap/en_US/htmledition/js/appmsg/a_report282222.js,/mmbizwap/en_US/htmledition/js/biz_common/utils/monitor27f4f1.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:45 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:45 GMT

Last-Modified: Tue, 01 Sep 2015 12:30:00 GMT

Content-Type: application/x-javascript

Content-Length: 9965

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........}.w..u...W.p... .K.....U$..}..c.q[...... ......'..;...J....
..>ub7y...VZ'.l.3").....;3.f...e....X&1.w..._3w.....]s.x....0.~...N
B...j..............6J.\J....jm.$s..zm..-FI8G.>.v..Z.:.........IH...
.U....Av...?...e..q(y.....9.0..K.I....'q\J..\ ...F..H......%.X.\."k.v.
.).I.9.f._kj.].6.u.N.....L.T.4C.....KYK...O..(.)4]E..Xs>...=o|U h..
......ar.M..(:.z..hV0.;V....].../c......O....p4mh._.<..u...........
./..?.^}......Wo...U..o.....sn.:..=.....y...z..?.......'.8..c...so`...
p..71....^~.{{...7..;....~...x.s.....?}. .r....1.......s8.^....>.A.
.........._.......>..s~.............Vt....o....._`...o....;.....b..
.66y.M...G..-N.}...G........g./.``....<.97.%........|....~.=.z.....
..?.* .._.n...lj..../.~....G....k....|..~|.;.3...........;_|....np,.&g
t;......./=...~}t.s.......(G.z..........'..._...>.$...O?:.....~w.:N
..'..~..>...../}z.......~.3.....n.......#..~......:......=.........
.k..H{..;_0......o..n....<.... 8.../.O.>|.....c./.4Y.W>=.....
.up....[|....<x.3.../..O\....7.:|.W....;x........ .W~..=......._~|.
.......]..=..M...[...C........I.../...z...k..G..=/...o....0A.8|.O...|/
.V...D...O...C^{...4..E...l$ ...`...h..i.lp......3.n`.i._......^.J.(..
.Y.E.'.<...):[email protected]........<b....S...zh.....:Kz.(.,T."e.0
O....Bk..\..tb7.....J..	b.Q.t....!..;.._.Q......1...#. ..:.>..K..
".Fs.t.....|?.E...I..x|...x\..... ...`.&.2......@_|fQ.xft.4......9 ..n
6..,..&..b..=........ln....8p.[m..D.m"}....a..........hl7$..V...c.m.U.
..B/.r..bk.V%..pV...HG..t.YH....FZ(:.......Q2.2/du...fa..M.."NUQ.s<<< skipped >>>

GET /mmbizwap/en_US/htmledition/js/appmsg/report_and_source2763ff.js,/mmbizwap/en_US/htmledition/js/appmsg/page_pos28055f.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_speed_report275627.js,/mmbizwap/en_US/htmledition/js/appmsg/voice275627.js,/mmbizwap/en_US/htmledition/js/appmsg/qqmusic275627.js,/mmbizwap/en_US/htmledition/js/appmsg/iframe282763.js,/mmbizwap/en_US/htmledition/js/appmsg/review_image275627.js,/mmbizwap/en_US/htmledition/js/appmsg/outer_link275627.js,/mmbizwap/en_US/htmledition/js/biz_wap/jsapi/core275627.js,/mmbizwap/en_US/htmledition/js/biz_common/dom/event275627.js,/mmbizwap/en_US/htmledition/js/appmsg/copyright_report2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/async27de55.js,/mmbizwap/en_US/htmledition/js/biz_wap/ui/lazyload_img275627.js,/mmbizwap/en_US/htmledition/js/biz_common/log/jserr2805ea.js,/mmbizwap/en_US/htmledition/js/appmsg/share2805ea.js,/mmbizwap/en_US/htmledition/js/biz_wap/utils/mmversion275627.js,/mmbizwap/en_US/htmledition/js/appmsg/cdn_img_lib275627.js HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMDI4NjEzNg==&mid=210567718&idx=1&sn=4a58c129caab1c167e96d61e9414924b#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.wx.qq.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 06 Sep 2015 07:27:45 GMT

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 07:27:45 GMT

Last-Modified: Wed, 02 Sep 2015 10:50:00 GMT

Content-Type: application/x-javascript

Content-Length: 14193

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

Access-Control-Allow-Origin: *
...........}k.#Ir....h...U..>.gv...M.<......G.Zpz.jV.....SUlv.p.
..p6`..d.. ..`....>..d.p./.......#"3..........w...wFF. #..>.!.-.
.Z&.n.WQ...0.'.:.....rG..x=.D.e.v..X$.$.E8.......%.h...<L....R....e
1.E..Dw.....;]..TD...Wk.s._...w....w.4.u..p....4t....7.4j..]..A..h`..n
.`r>.x..a./.Lm..v-.Noh..t./....=..f 7.Mf..m-W...."[email protected]._|...
5H...r.f5X.....~/.......6|2....d9^>.E4.. .y..m.....0!f.y8.....?..-W
Q.Keg.u...h..7...5...<NE..Px,...).~<....B..j..q....o..5....c@.(.
...<=..y'......6.5.....,..'W..k.._.2..8<HE0..w..d.......Z....(.0
~./l..........5.f2......h.k|j.z..1.uH.9tc>5..3..jz6.#.K..Sv..]|..^-
x..qAo;..f................R-..h...#..X....b...u.T....Y......s\WX.l5..|
... .z..5....@sA4Y#vuf<}. D.{.0..J.#...O?y..:."1....wR.eWZr.U@Xq6"|
...AI.....A...9.....-KYXF!...g....m........]...............(W..L...Z..
.....Q.3q<.....|d...x.%.a.Qhs.E/.dXz.. ...l...u.%[email protected])s..6.&g
t;e..?..!...;....,...v.I....s.i.m......6|..!l..;..........('Z...n`.n..
...[......z..{.......H....>..w.w..W.gxv......]g.u....Y6...b.n/.....
.m......q....|[email protected]=..4..I.=..Ll:J....
[email protected]!I\..@...)vC.....W...c....T..]...Zx!..F..[ .i...J.O..C2..*. \...,
 >[email protected]...`[email protected]....(~..xd.em.TX...5..V$..q.....
....rbD...H.Vq...f.......O.....m6]......D...h....bM.0.w.J.v6....|..l.}
.q.0..L.-..=.. ...\0..&\,l..9n.4(...9.......iGn.w.i...10.NDP.I........
......a..m....i....}.n..5l.9...........I0.{..6'......g...HL......T...$
....U.,[email protected].)...E$=.S.&Jo.H>.U~..#.............m|..w.<<< skipped >>>

GET /css/??common/scrollv2.css,uiwidget/uiwidget-messagebox.css,common/launchremind.css?v=2015060101,common/popbox/popbox.css?v=2015061201,room/lovingday.css?v=2015081901,room/broadcast.css?v=2015082701 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:10 GMT

Server: nginx

Content-Type: text/css

Content-Length: 16882

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

X-Via: 1.1 hzh91:8110 (Cdn Cache Server V2.0), 1.1 sm26:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.jspContainer{overflow:hidden;position:relative}.jspPane{position:abso
lute}.jspVerticalBar{position:absolute;top:0;right:0;width:16px;height
:100%;background:red}.jspHorizontalBar{position:absolute;bottom:0;left
:0;width:100%;height:16px;background:red}.jspVerticalBar *,.jspHorizon
talBar *{margin:0;padding:0}.jspCap{display:none}.jspHorizontalBar .js
pCap{float:left}.jspTrack{background:#dde;position:relative}.jspDrag{b
ackground:#bbd;position:relative;top:0;left:0;cursor:pointer}.jspHoriz
ontalBar .jspTrack,.jspHorizontalBar .jspDrag{float:left;height:100%}.
jspArrow{background:#50506d;text-indent:-20000px;display:block;cursor:
pointer}.jspArrow.jspDisabled{cursor:default;background:#80808d}.jspVe
rticalBar .jspArrow{height:16px}.jspHorizontalBar .jspArrow{width:16px
;float:left;height:100%}.jspVerticalBar .jspArrow:focus{outline:0}.jsp
Corner{background:#eeeef4;float:left;height:100%}* html .jspCorner{mar
gin:0 -3px 0 0}.msg-window-wrap{width:345px;height:170px;display:block
;position:absolute;text-align:center;overflow:hidden}.msg-window-heade
r{width:100%;height:21px}.msg-window-header-left,.msg-window-header-ri
ght{width:6px;height:21px;float:left;background:url(../../images/bg-ms
g/bg-window-leftcorners.gif) no-repeat 0 0}.msg-window-header-right{ba
ckground:url(../../images/bg-msg/bg-window-rightcorners.gif) no-repeat
 0 0;float:right}.msg-window-header-content{width:333px;height:21px;ba
ckground:url(../../images/bg-msg/bg-window-topbottom.gif) repeat-x top
;float:left}.msg-window-header-content span{text-size:left;font-we<<< skipped >>>

GET /images/common/flash/flash_star3.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:11 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 481

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-1e1"

Accept-Ranges: bytes

X-Via: 1.1 fuzhou59:8106 (Cdn Cache Server V2.0), 1.1 sm23:8 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a2........r............................................t.........
.....u.................................!..NETSCAPE2.0.....!...2...,...
.2.....`.&.di....lK:. .j.ht>......n..\...q."`...D..Z...v..z...6L<
;[email protected].).bU...9iW.:.nW.,!.!...2...,....2.....&.&.di.h..
l..p,.tm.x..|....pH,....r.T...!...2...,....2.....`.&.di....lK:. .j.ht&
gt;......n..\...q."`...D..Z...v..z...6L<[email protected].).bU..
.9iW.:.nW.,!.!...2...,....2.....&.&.di.h..l..p,.tm.x..|....pH,....r.T.
..;....

GET /images/common/flash/flash_star5.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:11 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 697

Last-Modified: Wed, 02 Sep 2015 09:05:00 GMT

ETag: "55e6bbbc-2b9"

Accept-Ranges: bytes

X-Via: 1.1 huzhou84:8110 (Cdn Cache Server V2.0), 1.1 sm23:4 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a2....,...r......................................u........w......
..................................................t...................
.................................................................!..NE
TSCAPE2.0.....!...2.,.,[email protected].$.H.".42.D......,).I.lY......=!
.... ..Hc=X%[email protected])..*'O}..fC..f.$X..D..f%.X..D..T............f..
..................kk.o...... ...............TA.!...2.,.,....2.....*@.p
H,....r.l:...tJ.Z...v..z...xL.....z.V...!...2.,.,[email protected].$.H."
.42.D......,).I.lY......=!.... ..Hc=X%[email protected])..*'O}..fC..f.$X..D.
.f%.X..D..T............f....................kk.o...... ...............
TA.!...2.,.,....2.....*@.pH,....r.l:...tJ.Z...v..z...xL.....z.V...;ont>....

GET /js/??jquery/jquery.min.js,jquery/jquery.cookie.min.js,jquery/jquery.url.min.js,jquery/jquery-ext.js,commons/common-util.js,statistics/statisticsUtil.js?v=20150708 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:54 GMT

Server: nginx

Content-Type: application/x-javascript

Content-Length: 150111

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

Age: 18

X-Via: 1.1 fuzhou60:80 (Cdn Cache Server V2.0), 1.1 sm26:4 (Cdn Cache Server V2.0)

Connection: keep-alive
/*! jQuery v1.7.1 jquery.com | jquery.org/license */.(function (a, b) 
{.    function cy(a) {.        return f.isWindow(a) ? a : a.nodeType =
== 9 ? a.defaultView || a.parentWindow : !1.    }..    function cv(a) 
{.        if (!ck[a]) {.            var b = c.body, d = f("<"   a  
 ">").appendTo(b), e = d.css("display");.            d.remove();.  
          if (e === "none" || e === "") {.                cl || (cl = 
c.createElement("iframe"), cl.frameBorder = cl.width = cl.height = 0),
 b.appendChild(cl);.                if (!cm || !cl.createElement)cm = 
(cl.contentWindow || cl.contentDocument).document, cm.write((c.compatM
ode === "CSS1Compat" ? "<!doctype html>" : "")   "<html>&l
t;body>"), cm.close();.                d = cm.createElement(a), cm.
body.appendChild(d), e = f.css(d, "display"), b.removeChild(cl).      
      }.            ck[a] = e.        }.        return ck[a].    }..  
  function cu(a, b) {.        var c = {};.        f.each(cq.concat.app
ly([], cq.slice(0, b)), function () {.            c[this] = a.        
});.        return c.    }..    function ct() {.        cr = b.    }..
    function cs() {.        setTimeout(ct, 0);.        return cr = f.n
ow().    }..    function cj() {.        try {.            return new a
.ActiveXObject("Microsoft.XMLHTTP").        } catch (b) {.        }.  
  }..    function ci() {.        try {.            return new a.XMLHtt
pRequest.        } catch (b) {.        }.    }..    function cc(a, c) 
{.        a.dataFilter && (c = a.dataFilter(c, a.dataType));.     <<< skipped >>>

GET /js/ie/IE7.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:19 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

Transfer-Encoding: chunked

Content-Encoding: gzip

X-Via: 1.1 fuzhou53:8080 (Cdn Cache Server V2.0), 1.1 sm23:5 (Cdn Cache Server V2.0)

Connection: keep-alive
2ae8.............}.{...._.q..4..4.R...M..8m. )~.$..DU#.#...;..AJv...[.
........j.-.l.....~..ev....a.*.'..|*.|[email protected].....|....E6..
..8.W.F}.,..2...Y.`..E........k=......4....e6.2..`..........^...b..v[}
..J.Y..$.e=.&.`.&..}).....P..z..W..}=.b......n..W.{......FG/|......N..
.^E...@:.f#...9.e/.M.g.$....k...4J......b.r.'W...h@?-7..</V....l..V
3..d:\.j....z.|....z:.&.....v.....k..W..........BN...G0./..w.y.-..&...
".,....~...{Q...\..\~.Eb.f........._..Y2u...>.?...x................
....H.7.....|Q.'.Y6]$...e.[....`<.V(...q7....|p.~.]...P-...........
.......[. {-..p3L].xL..\\...e...%.m...iN.F.,..{..B..*.......b9_E..R~H.
..f<.H.4.XF..8..1.>.r....u,_3.F..6v...&w.D.E..G......\..#..^&.@.
G...J!:..t.8...'.Q..$r...f...A..p....B<..k.....L%U.K...BSF..f8O..\.
..7..o......}........C.h>..-.....H.B.Z.!..)..k.....5}0S=..4.......r
......I..i..;.....L./[email protected]..:.oy....&...7..)
Q.....pZ`%..Fq'sw...&a27u.R...a...`j*?.4...x.*p...t..7...Jp^.....2.O..
.$ei..l........sB.;R..9..O..N...g./.S$).A.(X${..\b.......m.\..Trl...0.
R...b.q\....:..^...[*...Lm..`5^...!..Oe`.A'..!...AWx.'."g...jn.X.P../.
. .....C.U.nP&mq2N......#@..DB0?8...8..[vpn..<.u."`..Y....'&)..N}.D
.q{...-=X}...Y.!H%....e..Y|....._.x...d./......0.&....Q.....{....t....
.\c.q.?#[email protected]....._..q...r..9..P....#..D-...]....
.w.C....Lo.[.13;..J)...x]..p.n...7G^[email protected].........`...B
,...1..<d...............0q" d..$I...Y#..'L....t..o..........q'Ip...
.....4WH..'..[ 2.....\[email protected].......^_.GX.<<< skipped >>>

GET /images/common/logo-mini_ca367ba.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:54 GMT

Server: nginx

Content-Type: image/png

Content-Length: 3895

Last-Modified: Wed, 02 Sep 2015 09:05:00 GMT

ETag: "55e6bbbc-f37"

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh91:8080 (Cdn Cache Server V2.0), 1.1 sm23:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...B............d....tEXtSoftware.Adobe ImageReadyq.e&
lt;....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc
/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" x
mlns:Iptc4xmpCore="hXXp://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:
OriginalDocumentID="xmp.did:945EC7AF931CE111A9318AE6F6CE1C61" xmpMM:Do
cumentID="xmp.did:6ED85B76EE4511E4A710C0BF68C1B8A4" xmpMM:InstanceID="
xmp.iid:6ED85B75EE4511E4A710C0BF68C1B8A4" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Windows)" photoshop:AuthorsPosition="Creator"> <xm
pMM:DerivedFrom stRef:instanceID="xmp.iid:73e8ab6b-c7a0-8541-a9f0-89b3
09c3d63c" stRef:documentID="adobe:docid:photoshop:518d6733-ee44-11e4-9
929-b13e9ad9d510"/> <dc:creator> <rdf:Seq> <rdf:li&g
t;Justin Cates</rdf:li> </rdf:Seq> </dc:creator> <
;dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">1080 
Grid System - 18 Column Grid Photoshop Template</rdf:li> </rd
f:Alt> </dc:title> <Iptc4xmpCore:CreatorContactInfo Iptc4x
mpCore:CiEmailWork="[email protected]" Iptc4xmpCore:CiUrlWork="VVV.10<<< skipped >>>

GET /css/??header/header.css?v=2015051901,login/loginbox.css?v=2015051901,room/nickmodifybox.css?v=2015072901 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:55 GMT

Server: nginx

Content-Type: text/css

Content-Length: 5436

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

Age: 25

X-Via: 1.1 hzh91:8110 (Cdn Cache Server V2.0), 1.1 sm26:4 (Cdn Cache Server V2.0)

Connection: keep-alive
.sitebar{background:#fff;font-family:"......";width:100%;border-bottom
:1px solid #ebebeb;height:30px;position:relative;z-index:16}.sitebar .
top{width:1070px;margin:0 auto;background:#fff;height:30px}.sitebar .l
ogo{float:left;height:30px}.sitebar .login{float:right;padding:0 8px 0
 0;line-height:30px}.sitebar .logo img{height:26px;padding-top:2px;wid
th:63px}.sitebar .login a{color:#757575}.sitebar .login a:hover{color:
#f02769}.sitebar .login .points{color:#ff629e;margin:0 2px 0 -2px}.sit
ebar .login .name{padding-right:1px; padding-right:6px}.sitebar .login
 .sep{margin:0 5px;display:none}.gh-create{display:none}.individual{di
splay:none}.sitebar .login .ico{background:url(hXXp://static1.yaoguo.c
om/images/header/coin_g_18_6baac9d.png) no-repeat;width:22px;height:18
px;display:inline-block;vertical-align:middle}.sitebar .login .help{ma
rgin-left:10px}.site-menu{float:left;display:none}.site-menu li{float:
left;height:30px;line-height:30px}.site-menu li a{color:#7a7a7a;paddin
g:0 12px}.site-menu li a:hover,.site-menu li.current a{color:#ff629e}.
sitebar .login .login-btn{color:#ff629e;text-decoration:underline}.sit
ebar .haslogin{width:350px\9;text-align:right\9}.sitebar .nologin a{ma
rgin:0 2px}.sitebar .nologin .recharge{margin-left:15px}.sitebar .modi
fy{position:relative;display:inline-block;display:inline;z-index:11}.s
itebar .modify-ico{background:url(hXXp://static.yaoguo.com/images/head
er/modify_002fa1e.png) no-repeat;text-indent:-999em;display:inline-blo
ck;width:8px; width:13px;height:18px;padding:0 0 0 10px;vertical-a<<< skipped >>>

GET /js/??login/loginUtil.js?v=2015072702,header/header.js?v=2015080901 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:54 GMT

Server: nginx

Content-Type: application/x-javascript

Content-Length: 11695

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

Age: 27

X-Via: 1.1 fuzhou60:80 (Cdn Cache Server V2.0), 1.1 sm26:4 (Cdn Cache Server V2.0)

Connection: keep-alive
var LoginUtil={loginCallBack:null,logoutCallBack:null,customLoginCallB
ack:null,customLogoutCallBack:null,closeLoginCallBack:null,isInit:0,is
FirstShowLogin:true,init:function(){var a=this;if(a.isInit!=0){return}
a.isInit=1;$(window).bind("resize",function(){LoginUtil.setLoginMaskPo
sition();LoginUtil.setLoginboxPosition()});$(window).bind("scroll",fun
ction(){LoginUtil.setLoginMaskPosition();LoginUtil.setLoginboxPosition
()});this.bindEvent()},bindEvent:function(){var a=this;$(".login-box-c
lose").click(function(){$(".login-box-mask").hide();$(".login-box").hi
de()});$("#login-selected").click(function(){a.showLoginAndRegister(0)
});$("#register-selected").click(function(){a.showLoginAndRegister(1)}
);$("#login-selected").click(function(){$.cookie("isRegist",null)});$(
"#register-selected").click(function(){var b=$.url.param("f");if(b==un
defined){b="yg_0"}else{b="yg_" b}if(b=="yg_0"){$.cookie("isRegist",tru
e)}})},isLogin:function(){var a=false;var b=$.cookie("yyuid");if(b&&b!
=""){a=true}return a},getLoginUserName:function(){return $.cookie("use
rname")},getLoginUid:function(){return $.cookie("yyuid")},logout:funct
ion(){$.ajax({url:ctx "/logout.action",type:"get",dataType:"json",data
:{},success:function(a){UDB.sdk.PCWeb.deleteCrossmainCookieWithCallBac
k(a.deleteCookieURL,function(){if(LoginUtil.logoutCallBack){LoginUtil.
logoutCallBack()}if(LoginUtil.customLogoutCallBack){LoginUtil.customLo
goutCallBack()}})}})},showLoginBox:function(){this.showLoginAndRegiste
r()},showLoginAndRegister:function(a){LoginUtil.init();var c=this;<<< skipped >>>

GET /images/loginbox/register_hd_7d5aff2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:55 GMT

Server: nginx

Content-Type: image/png

Content-Length: 19946

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-4dea"

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 huzhou87:8104 (Cdn Cache Server V2.0), 1.1 sm26:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......<......x......tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5748962B035211E5AF679
DE6048AFD7E" xmpMM:DocumentID="xmp.did:5748962C035211E5AF679DE6048AFD7
E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:57489629035211E
5AF679DE6048AFD7E" stRef:documentID="xmp.did:5748962A035211E5AF679DE60
48AFD7E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>"d....J^IDATx..}..]Uu..s.}[email protected]
.. .... "mm..V..w............Z[oom...j..ZEm.*E..y.....Ix$!..s.^k...{..
.Z{......|.....^s.9.........M.~A......./>......>...a.K,Y..... .P
oF.~.3L....$ ..(..ze......|.'?......<.....{!.....W.7............. y
...8........W.O..../3..]3..5:l..$..C....:=h....0....m.........RO......
... .sp.75Qf[..Z..lC.......U...P...x..Wn%.qc P.,c."S.......a}....e.P.q
.);|........I.?...~5-X.>X;....l.1;|Q.?.G.....s.,{n&.W..bB.>jj.J.
`............W.,2h6.h.kV....9`j...UT...(....!.j.p.....}.]......Y......
wfg6...'......C..:..t.U....C.#..0.U.y..bFmOH<...8..#4.[L....i3.<<< skipped >>>

GET /images/room/luckystar_bg_e8825da_e8825da.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:27 GMT

Server: nginx

Content-Type: image/png

Content-Length: 1235

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-4d3"

Accept-Ranges: bytes

X-Via: 1.1 huzhou85:8106 (Cdn Cache Server V2.0), 1.1 sm25:0 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...d..........Q......tEXtSoftware.Adobe ImageReadyq.e&
lt;...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:040f4592-3046-0f47-a98e-67b13ec51b30" xmpMM:DocumentID="xmp.did:
BD25FBE5A60711E49F9ED9F949F05F16" xmpMM:InstanceID="xmp.iid:BD25FBE4A6
0711E49F9ED9F949F05F16" xmp:CreatorTool="Adobe Photoshop CC 2014 (Wind
ows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:eda52ba7-621
2-4f47-b92f-06478135808c" stRef:documentID="xmp.did:040f4592-3046-0f47
-a98e-67b13ec51b30"/> </rdf:Description> </rdf:RDF> <
;/x:xmpmeta> <?xpacket end="r"?>[email protected]...|...
[email protected]...).3.m[)h..%p1...u.....)E.........
$1.....#I...`e..... ..y.!. ....M. U.........i.(.....6.D=$..S....O...T$
. '...;D11..C6...~-. e......G.....$;d.S1...$1.F.I..[..0.#1X...\.......
...?.e.......!,...9.....IEND.B`.....
<<< skipped >>>

GET /images/room/guard/guardcar_img2_b3ed2ed.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: nginx

Content-Type: image/png

Content-Length: 5848

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-16d8"

Accept-Ranges: bytes

X-Via: 1.1 fzh61:8080 (Cdn Cache Server V2.0), 1.1 sm26:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...t.........>]......tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:2716A7452A9C11E5AF60D
C6FD45B3E56" xmpMM:DocumentID="xmp.did:2716A7462A9C11E5AF60DC6FD45B3E5
6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2716A7432A9C11E
5AF60DC6FD45B3E56" stRef:documentID="xmp.did:2716A7442A9C11E5AF60DC6FD
45B3E56"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>.......LIDATx..].pT....y......."...E.bG.
XBE.VK.::ZH.L.[..2..I..Q..Q......Z ...(Z....NY`....2...A.....N..9....w
wo...?sg..............!C'...!0..2..2..2..2..@..@..@..@..@.............
..PC.PC.PC.PC.P..!..!..!..!.................j..j..j..j..j.5d.5d.5...{}
8l..!c.......@...}v]........>.0."..K.}..y}a..e.V.....q..|.....I..8.
...8%$...x.}'.e...*aG........5l ..hae..H...O...P.d....8.l...{.....x5D.
.../*...^..9...>.Nh..>..).`...u..O.L.'.9^....u~..:w......s$.6..~
|...J...O...2~.(m.)...>.....S..u........)..g.......].=.>.{.U'M. 
.q.V!\o A.'[email protected]..:.#...i....L'.......<<< skipped >>>

GET /images/room/xingyuan/dh1_b95047e.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:28 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 13607

Last-Modified: Wed, 02 Sep 2015 09:05:00 GMT

ETag: "55e6bbbc-3527"

Accept-Ranges: bytes

X-Via: 1.1 hzh91:8104 (Cdn Cache Server V2.0), 1.1 sm29:3 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89ai.c.........7..z.6.......s'...D..s..2.....w.....Q...........i.i 
..c........jP.......p.G ..J.A...O..GI .....q2.Z3..A..7..Y....[...n.X%.
.C.....]..:....J ..J.sC..c..=..B..Wc.........a5..h.x...\..R..Y..H..?..
..i......T.....,..y.a2..B.W.........E..U.....`.}B.c-....qA.......p(..V
..w..<..L....T2..0.....#....o=..:..`....N......[.x/....]........I.f
@ ..N........l.j:..K..&..;..\..k.....=..(.P0..V...!..NETSCAPE2.0.....!
..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-
c014 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8307d03a-11b2-
1e42-8ae9-516e76b03897" xmpMM:DocumentID="xmp.did:7F8723392C4C11E5BF58
FA04F3609352" xmpMM:InstanceID="xmp.iid:7F8723382C4C11E5BF58FA04F36093
52" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:Deriv
edFrom stRef:instanceID="xmp.iid:adb7a031-f522-5e43-bb1a-bdf84d37a0a6"
 stRef:documentID="xmp.did:8307d03a-11b2-1e42-8ae9-516e76b03897"/> 
</rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpac
ket end="r"?>......................................................
......................................................................
......~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDC<<< skipped >>>

GET /images/room/guard/goldguard_img2_4bcb1d6.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:29 GMT

Server: nginx

Content-Type: image/png

Content-Length: 13813

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-35f5"

Accept-Ranges: bytes

X-Via: 1.1 fuzhou54:8104 (Cdn Cache Server V2.0), 1.1 sm27:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...g.................tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:04CFF1FB2B8E11E5BC44D46E
67395B8E" xmpMM:DocumentID="xmp.did:04CFF1FC2B8E11E5BC44D46E67395B8E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:04CFF1F92B8E11E5BC
44D46E67395B8E" stRef:documentID="xmp.did:04CFF1FA2B8E11E5BC44D46E6739
5B8E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..Q8..2iIDATx..}.x.g..;....,..,.....i...HB.
...K.....B......ewY..,...K..5.QR!v..;v.;..8n.-.....u....oFF.;...E.g,.{
g....;......$..0...E.5.,8..,8............3...3...2...2..,8..,8........
....3...3...2...2...^.Su....l..*.a....Es I@.. ..a.. )(.]x....^z.ez.J'&
lt;....B*j.......l'..Ul..B.....|.....c.^.......!.......$.pl.F8A.Q.k...
Q..G..%`.%....L....3....Ht....MQ.!`.im\..,..h..%UzM>o_..8.q8K..%K(.
T(gX....G!K...G..tGB.........vtWr...$...uL..m...g...M)....vq&.3.s..2D.
>.:....N.)Dj..t..:.P...;.....,/...d..y.pf9..:....@:..'..B..g.....`!
...Yk......7...9k. \.Kx..r.\K# B.. ..!...%...l=#...u.\.CI9..C...-W<<< skipped >>>

GET /images/room/weekstar/v2/weekstar_hd_560505f.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:29 GMT

Server: nginx

Content-Type: image/png

Content-Length: 4986

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

ETag: "55e6bd2b-137a"

Accept-Ranges: bytes

X-Via: 1.1 fuzhou58:8104 (Cdn Cache Server V2.0), 1.1 sm26:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......&.............tEXtSoftware.Adobe ImageReadyq.e&
lt;...qiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:65399826-bddf-084c-b620-af29069b0448" xmpMM:DocumentID="xmp.did:
8D1AE4202B6811E5A607A1B36182F097" xmpMM:InstanceID="xmp.iid:8D1AE41F2B
6811E5A607A1B36182F097" xmp:CreatorTool="Adobe Photoshop CC (Windows)"
> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a485e861-96b6-f44
6-b3a5-95a70158230e" stRef:documentID="xmp.did:65399826-bddf-084c-b620
-af29069b0448"/> </rdf:Description> </rdf:RDF> </x:x
mpmeta> <?xpacket end="r"?>5.9.....IDATx..]iv.:.d.x.o.o3f}.X.
0. ...GNb..H.U..~...q`......~c|.=_Z...q.}.r.}.......4.l4.......u.:....
...s....V....kn.....N.....M1.........X............G..;.L..H^oN...._c2.
T....a.....?.>.S9{.m..y0.C}.....Cj.............;O-..........m..y.a.
..4..&..&.}.....vL...F.......?4.@...........?o.....`...yo..f....N.'..v
.'[email protected].{....U..|..i...<]..."............=@.\0...;...3
.,|;....`....Q..4/!.>Z.0.sl.&...o....v..:\....^.g.&h.6c.......B...?
.}..=.)...9.B).n.n.....g....,..O.c<|67..;C.3{3.<.....W7.....<<< skipped >>>

GET /js/??commons/json.js,cookie/cookieUtil.js,asidebar/asidebar-userinfo.js?v=2015072201,asidebar/asidebar.js?v=2015080501,subscribe/follow.js?v=2015082601,announceAndHelp/announceAndHelp.js?v=2015072701,history/history.js?v=2015080610,uiwidget/uiwidget-pagebar-subscribe.min.js,asidebar/asidebar-guard.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.yaoguo.com

Connection: Keep-Alive

Cookie: _ga=GA1.2.54479836.1441524500; _gat=1


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:55 GMT

Server: nginx

Content-Type: application/x-javascript

Content-Length: 47116

Last-Modified: Wed, 02 Sep 2015 09:11:07 GMT

Age: 34

X-Via: 1.1 fuzhou60:80 (Cdn Cache Server V2.0), 1.1 sm26:4 (Cdn Cache Server V2.0)

Connection: keep-alive
if(!this.JSON){JSON={}}(function(){function f(n){return n<10?"0" n:
n}if(typeof Date.prototype.toJSON!=="function"){Date.prototype.toJSON=
function(key){return this.getUTCFullYear() "-" f(this.getUTCMonth() 1)
 "-" f(this.getUTCDate()) "T" f(this.getUTCHours()) ":" f(this.getUTCM
inutes()) ":" f(this.getUTCSeconds()) "Z"};String.prototype.toJSON=Num
ber.prototype.toJSON=Boolean.prototype.toJSON=function(key){return thi
s.valueOf()}}var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200
c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\
\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200
f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={"\b
":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\
\\"},rep;function quote(string){escapable.lastIndex=0;return escapable
.test(string)?'"' string.replace(escapable,function(a){var c=meta[a];r
eturn typeof c==="string"?c:"\\u" ("0000" a.charCodeAt(0).toString(16)
).slice(-4)}) '"':'"' string '"'}function str(key,holder){var i,k,v,le
ngth,mind=gap,partial,value=holder[key];if(value&&typeof value==="obje
ct"&&typeof value.toJSON==="function"){value=value.toJSON(key)}if(type
of rep==="function"){value=rep.call(holder,key,value)}switch(typeof va
lue){case"string":return quote(value);case"number":return isFinite(val
ue)?String(value):"null";case"boolean":case"null":return String(value)
;case"object":if(!value){return"null"}gap =indent;partial=[];if(Object
.prototype.toString.apply(value)==="[object Array]"){length=value.<<< skipped >>>

GET /mmbiz/AVNibO5YtlFOV1qVkHufbYB76DM6aKjngN2nibGGSuBz51YG7alXcCKN6iacpp6dWutN2AvHRia0mTVaCuISfFMcWQ/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1 HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mmbiz.qpic.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1126.v0-mow ( h0-s1023.v0-mow), ht h0-s1023.v0-mow.cdngp.net

Cache-Control: max-age=2592000

Expires: Fri, 18 Sep 2015 07:07:15 GMT

Age: 1556446

Content-Length: 19593

Content-Type: image/jpeg

Last-Modified: Wed, 19 Aug 2015 14:55:46 GMT

Connection: keep-alive
......JFIF..............Exif.....C...........................#.%$"."!&
 7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........r.."...............
.........................J.........................!1.AQ."2aq...#BR...
....3.$Cbr..S..4Vcs...ßTU................................%..........
............!..1.A."2#3Qa............?...*..........X\....J<;.-D..C
.Z.8..yj..S...0...7...'Sm.3#.#|S..3..~aq..!..:wA.y.,.r.......Q.}.>.
...{FQ.".....F)$..........?..  (..V.G6F:.i...A.R...y\..q..Fi.....q`|.-
ul...l..<[email protected].(r0..F./..gl|.KZ.'s..].-..O..._S,fV...N......
...l....Cu...gT<..../. bav.C......A..\.;.....v..q .A.m.I.t...D.d..u
..T..M#^.K.kO..B...&.|.X>..ym..y."9i.n...w\c.|.t.._(;]T....[.......
..~W.KX...L..\._...%.X.Q-...ncD.7!.................. ..7U..Zv.&8.\nVc.
...#.[..i.V./e..-..`.K....S...9...L..7"V...,.Ql....n 0m......p...e.(o.
....|-i.TI..C..1..U..N.\HF..C...-...T.4...6^............O$^'.V.BB...!.
e.2...h.p@Qc0wn..%..c.s.F....{H6.j.....g.&,.fJF..eh.*[..t............t
j...m..Y..$.R.d....UqUN...lS.d.....hOb.&.G#t.....[....c.k..cu.G......@
..hv...y.0...V......I.l..Ro......Q..{E...%.t..C..b..gz_.Q..<4....VF
..n.0^......i..-.%.s.*.....:...IW..(.T\...l......Y.$......u.&.U.fHm...
......r...../.4..kjkj........ [QG........ .9."{.fAu./.|....Q.....W&.. 
..@@".. ...w..N..9..'.7...D.uW].-!.)..17.P.)...5....G?..d1.....h. Y...
.Z=.o...:0.t.'^3..FZ.g.K..-.5.R...F.Y.....Jq.. .!....W.;..ltf.6...X;1.
1...............^....H..w...z......D.G ....\....o..Ly..G<8.Dm..<<< skipped >>>

GET /mmbiz/AVNibO5YtlFOiagiaw7KLsiahnBcGvCYfGCa1ZPiaUezghlh5xiaFhwzYlvGIRP3iaRnPCHOyRC3GksNkBAKku9HfibOWg/640?wx_fmt=jpeg&wxfrom=5&wx_lazy=1 HTTP/1.1

Accept: */*

Referer: hXXp://mp.weixin.qq.com/s?__biz=MzIwMTI5Njg0NA==&mid=207859068&idx=1&sn=50e2a8efcb035f2d312cc4e5b0c338ab#rd

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: mmbiz.qpic.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:28:01 GMT

Server: PWS/8.1.20.22

X-Px: ms h0-s1126.v0-mow ( h0-s1091.v0-mow), ht h0-s1091.v0-mow.cdngp.net

Cache-Control: max-age=2592000

Expires: Wed, 09 Sep 2015 02:55:08 GMT

Age: 2349173

Accept-Ranges: bytes

Content-Length: 44264

Content-Type: image/jpeg

Last-Modified: Tue, 14 Jul 2015 15:23:51 GMT

Connection: keep-alive
......JFIF..............Exif.....C...........................#.%$"."!&
 7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........z.."...............
.........................U.........................!1.."AQa.q.2...#B..
....$3Rb..CSr..%4Tc...&DE..5Udst...V..................................
'........................!..1Q.2.3A"aB............?...h..%..:R....lQE.
[email protected]@[email protected]@[email protected].`...?)ZV...P..>,.^.A..x.*e..X
.....Y.X......3..}[email protected]?..'[email protected]^x..H/....Q..
..~r....s.q.p ...y.....:..n.od.. .CL.....T.x.G..........-..d...9C.....
t\...S.4..I..a..=..=.u...Z..8.L} Lk.`...?.o.W.....ir...L.7T.,.......).
....G...*....M..N..(.W.....7...r.nD.....Cn!...~..K.."..<..>....4
k................H..e.e.3..wxs./O...m..J.i.>.w...w/..5...ex....Q..k
[email protected]/...F......).>.w.m .....(......
....iQN..3. i_....o.G.m ..... J.t...._M....g...VRjVrMq,....F.! .q.....
..t..[.....m.w..1.eEm...`........O.<...>....|..].)p(.Us..\|d....
.."E1..r6...*......?e.x..2e!....7*....?~..t....J.q2...Ac.......]......
<.......z.U.o...UK........xr...?.Z..c.o.5I..1D...wd.eOP.H..>..v.
G[X.....8C....OqFZ].....O........*...........s....g.=9.=..D]..P.......
..CA../.....;....o.Y..-$...E..(.``..zg.=j[.b.O.V..F.7..NFz.As._G.F..w.
.......6.d..M:....m....F..h.....@ b.*...,s..A../.....;....o.Y'....8.5w
Jp...n8......6...[j.8F..{...O._G.F..w...To.Y..>..$..wr.......3.B...
.a...........h.S..T.....5.h...o.4w....j\.....t...:....'.V..~U.s..L<<< skipped >>>

GET /images/vali_sprite.png HTTP/1.1

Accept: */*

Referer: hXXp://g.bj73.com/1/2016.html?uid=614516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: kwcdn.000dn.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 07:50:20 GMT

Date: Sun, 06 Sep 2015 06:50:20 GMT

Server: nginx/1.4.2

Content-Type: image/png

Content-Length: 28934

Last-Modified: Fri, 07 Aug 2015 08:11:30 GMT

ETag: "55c46832-7106"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 fuzhou191:8108 (Cdn Cache Server V2.0), 1.1 kf48:1 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.............L<......gAMA......a.... cHRM..z&......
........u0...`..:....p..Q<....bKGD.......C......pHYs...........~...
pjIDATx...{.,YY....ZU..v.3s..pf.a.a..C.o4x..J......L.$Q....1.F.F..""".
Q....Q$...W ....30....}...]....Q..{...9{.........svwW=.Y..V}..g..B.!..
B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.Q7.(;}..
6>.k^...... ...SK.6N.v.q.\...y.k.?...?..3..y.s...1.C..r...yF.......
..7.....c.cI.#1.k#.......ul(.&.B....^.o..1e.........y..[6L..3...o.%..o
.B...<.C..0.......;..n. .1.......k,.Z:gN.....o...... >..2.:..Jz.
..!B..>......{,...p./.\....p.Z..U.r.....-B~..r..x......9.....gX..w.
z|.sk........v..*|.B.QkN............a$Q..._.o........p._.x.....:.{z.w.
.......t.h..V.}U5PW..Y....g.z...Wgq......P.....6...3P..!...M{....vm...
.....X..|o..-..n..96..."}..).......P...&...J|,...?0..M.......;.Y>..
..&'DO.=..p.G.[........D.4,.8....k.=?.z~..~.......o.....w=....k......f
S[;8.|..!.#1...4...|?.w....6vY^..........1....}.\.:.s...}76F-o..../z..
..Nl]h.I..o.k....c..v.,..#.>d...g........qC..2RO..7.&..{~..._......
......._G.A........r.g..cu..........QC[.M...m..Q.Rc`i...........&-5nY.
`.......5)^....E....o.j...F..@(.l..|P..5....hI......g...d..!..B.b.bV."
.P...h....\...p."[email protected]....[..7};.W.....oS|...#...~.........
A.1.[......~...O....=x........T.........>|..~.scm.z..B..{B......^..
N..........i..I.wB~.=.;..j.4..y..Q.M.......i.....q.w...Xk1.`.1.Z.s.Zk.
4=.^..}Or.]w.L7...M.E3IF....*nz:...?....R^......3..Y..u.W....%.sGY..=,
g7A.D.......F..d.l........_ .H.!..3...YhA.bZ.!..s..A....IS.K.YL.\%<<< skipped >>>

GET /swfs/87/25090zshh0203/bg.jpg HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://kwcdn.000dn.com/swfs/87/25090zshh0203/index.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: kwcdn.000dn.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 07:57:25 GMT

Date: Sun, 06 Sep 2015 06:57:25 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 23612

Last-Modified: Thu, 05 Feb 2015 01:12:39 GMT

ETag: "54d2c387-5c3c"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 kf49:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C..............................................
......................C...............................................
..........................x.."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?.e.Q@..Q
@[email protected]@[email protected]@[email protected]@[email protected]@[email protected]@[email protected]@[email protected]@[email protected]@..Q@.
...`...Q@.(..P..1E..b.QE....Q@.(..P..1E..b.QE..b.(......1F(...Q.(...b.
(.....(.....h......1F(...))i.QFh.0.(...QE.>..(....i..%....V.8..QJ.'
..`...(.'..~lR.(.....;..(...(...NzR`[email protected](...QE0.Q.(...b.(......1F
(...Q.(...b.(......1F(...1E..b.QE....Q@.(..P..1G4P..1E..b.QE....Q@.(..
P.E...Z(...(...(...(...(...(...(...(...(...(...(...(...(...JZJ.(...(..
.(...(...(...Z(...(...(...(...(...(...(...(...(...(...(...(...(...(...
(...(...(...(...(...(...3.cJz.I.~..oj@!....N..9.H.h.p..zS..(~.t.8.{...
.......8..@...(.&...G....M.........z^..{c.4.5......cIL..(..QE..R...T..
..@/.9..G.>..........".>.....A..)O... |......i...H....#.....?...
..c.q?.)....q.a.P.G`)..#[email protected]%-..QE0.r..M...4.j}.C..i......
....O.K.....>.tO.........}.)....z...h..<.R....r[?.*.'...9<.Ns
.R.PQ.:w...)..4......".4...$R.R...^z..(...(.....@....''....G.P....<<< skipped >>>

GET /swfs/87/25090zshh0203/reg.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://kwcdn.000dn.com/swfs/87/25090zshh0203/index.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: kwcdn.000dn.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Sep 2015 08:16:19 GMT

Date: Sun, 06 Sep 2015 07:16:19 GMT

Server: nginx/1.4.2

Content-Type: application/x-shockwave-flash

Content-Length: 642490

Last-Modified: Thu, 05 Feb 2015 01:12:39 GMT

ETag: "54d2c387-9cdba"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 kf48:0 (Cdn Cache Server V2.0)

Connection: keep-alive
CWS.`...x...gTS..-|....`.M4......F:...B.H.^.D,....;J/.B.R.KU........vo
~.u........2e....g?{......P..8...Y.Zh......@..^......C..=Z/....u...5..
@..*h.....@....!.Fz.....J .....01!h%F&$..,......G..X..i..3LH.Z-....o..
........./8..YQ./8y.|...........;t !....c................ Pz........ .
h50.zz0.....6A!..fPvyM.c@.}x..S...BDj...yZqc....eP..g.E.G.M...%._.n...
......&..S...Xi.`.....A.t..5.....].2......)......pRh.....0.z.Y.X. ....
c.V..W.E..(..pc.G.....6..Y.j.Y..}...A.V........x^Dg..(B........aR*T...
...pbi;........ng..l......1B./.a....l....`.#,.....Lk.l..r..3.T.N....5.
.[......: .....cHJ.f.  H..%....... .Av.M...Q.:..* ..'ß......"...y..I
[email protected][^.. ..>.?E4`[email protected]"a. .!.;J..1'.z.V.$;...uv.e.e.D..
e.[.^....@z^F......*C..L.....-%I;...(....Gk.e.EG.i..H@G.\u..3Ns.>k.
6xW.@!.\.R...|q.H..T8S.QJ~J5Z.".i.iZ[..7.....[...|...........L..H.....
...8..#.'..?....$.....t.S..)...$d............."K.U.\.Jx>q..-.]...{.
.j.aF.........8q....v`.. ...H'.....FnH..m:x_'0...[.z.....Q...Q..[Q.r*3
7....!v..O....U.......(.|..................y#.C.q2.MS.....pS&.....n...
.\L..51Ji..w-..?.I.lFr}7. p....tf....P.....,.....X..f5.Q.%...S.8F.....
q..(h.Q.!..j...w/.....B.$......_....'m"[email protected]@.*..Q.g.#i....L......rt
!G....N%....[\B........y.2.mn...\;..S.yW..\Y..F...q.....N..xVH.N..t.}.
........-.R../.. w...d........J.......D.^.e.$.a..c|..*93."...^..G..`.C
_DA.`*..B.(..K,m.Q.3...ed.`9..l^T_....*...9.\..............\.......LE.
....#.5 ...Nq....@*AG.Btj.B$.x.......)..>gJ.,8..%2......i.K.%6.....
..9..s.h..i.56=.V....]..U5.......ngr............ ....y.4.....,..k.<<< skipped >>>

GET /css/index_MIN_32.css HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj1.6rooms.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 05 Oct 2015 22:25:52 GMT

Date: Sat, 05 Sep 2015 22:25:52 GMT

Server: ngx_openresty

Content-Type: text/css

Content-Length: 19739

Last-Modified: Mon, 24 Aug 2015 06:57:25 GMT

Cache-Control: max-age=2592000

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 2

Age: 1

X-Via: 1.1 bjsb70:8104 (Cdn Cache Server V2.0), 1.1 yfdx32:6 (Cdn Cache Server V2.0)

Connection: keep-alive
...........}.ncIr...%.z..R....Gw...,..Aw{g.. .....x....k.z...{...6.{l|
q....J....X./.a....Gdd.t3..|.Yn.WG...z.....n................v48.n6...v
.:^.....r............n......m..f.......m3k......~1.._..........Y....b.
.l>\.7..Z......o.w.......s......}...7.....n.l.o..vq{?L..x....o..o..
..4n..r..j.w./.|%...7...,.7........n._l.W.v....9..B.z.O....O....".u...
.....s1.4.A7....!.].....l.....b....v;_n._./f.v............b4&B.....Ki.
l.{E...t.........!=.. ...'.......W>u...-..1.[.z...].........v.,..&.
u.x....z.0].h>........`......8.y.....,n..6..D.F.... L..rA"..".r5...
...u..^*.&.....2.T,.cp.....h&.e....Q...y."B.9f<^.....=........:p.=.
.%.:....jV.i.8N]d.....y......j.W...b&9.z..n..L|..Yab........z..]l.Lw..
.....#...0.6.5....Z.0=...2./r.......0w.764.e.|.I/M./..z..|5..[5...(...
xhn....=t..=}...Ow........gp........y....!.y.o.7.7zM.A.ouW..y........Y
.18...=f..o...g..fK....K.....u.IPwu61..^..|.f.jv..v0/.....h8....]..K..
U.|.o~..........6.N...AY7...l.B".RpJ.-<.A>...L.S..O..1......,.w.
...f#l..8....!...c....g.........../.M.e..y.g....|\...X..F.j...R`u.F.j.
.qz...b..":....."'./A.j.\[email protected].."o<.0.i.......-._^.......
/.........f."..$34){O..U.L........C....;.....E..x.....wL.}..V....X)D!.
.=a?..c.....!.C."~..H...qt-........F.0...S..2..~E...7...t&7..D^b.w..^.
F!..k.......F./......R.....d....lu...|...Y.z.....A...`...[._.... .!.\.
B..>7.n.{.B.#n...s....qw..~.,.~......<........,....%...rG..,S...
......VC.....gr..W..L....;.......b.~....-98.U...&.f.~h.{k...m..vD.fj.6
...o7w.f%..=.Ul...........f... ......N..,..........=Y|.^./.....F..<<< skipped >>>

GET /js/s/iwt-min HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/event/promimg/?src=pming393

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vj0.6rooms.com

Connection: Keep-Alive


HTTP/1.1 404 Not Found

Date: Sun, 06 Sep 2015 07:28:02 GMT

Server: ngx_openresty

Content-Type: text/html

Content-Length: 3143

Content-Encoding: gzip

Accept-Ranges: bytes

X-HITS: 0

Age: 1

X-Via: 1.1 lydx173:80 (Cdn Cache Server V2.0), 1.1 yfdx34:6 (Cdn Cache Server V2.0)

Connection: close
...........Z...G..."....J.K..w.....C.B......*@.........]..jEB.H)...j .
.@*T....T...3w..'...{.e.{.9..Ig<_>...6of...._.y...~...Q.w.J....w
{.k...t.Q..m...%/...8..'._b..n)....N.0o.....~.......Q..I...)O.........
?.?...._...;....>|......ukb.0..'....$.%..#..A.;.....U.fehU.ve.T...p
6.zec...>v...Gn.....q.....C..0.lD.5....;.0....K...$...Uw.......d2.|
#.nP...L..{n%q.I5.c..0... ..k...lX.r.zw.q8...4..... .k..W....'...... .
.K....5..q...j....My8v.8......a8.c.ua.....Wc...#.H.....@@........9....
(....|0vF...$i...`.'.IZ....q......^:tXk.4.K..du.N..[..Y.........I...jR
.i.$Z......a.:q-.._..f.h.....A....a.X@m.!S....~..R...9..z.|X.|...Wi.8D
v..x.z.........tf....Q..x....s.......n..........w.<..<...3....N.
.z......g4..=6...0.bP. m...Cs.......T.BI"....ls.Q"U..b1...._.,2.......
....3.e.....:..O;.K2Y%.:.2a.Fn.-...M.`.......q.h....f.'..O.....o......
..a4(o..Tc?..4.2`.EF.=.N=6....5..0....A.....E...6.$C.BY1.6...k2..2f.X/
..g.5...... ...~.f-..GV.4.........BA.Ut.y.F.}s0c.....E.A3J.|..W#.k5.iT
.'....0r=4.....>[email protected].@....`..`..ClW.F.C.]
..Y.P..Lu...H.w...<...C....*6.9...P.9.K.....].M.M..m..$.T.8...3m...
..2....h.K$f$.....m.$.....SH%....%x.8.]5.9$!q..6....#.:P0mL...9....2/Y
....`.<...w.jn..d... .sc..|....^8.:V....t..m.s....A..2..p....&.V...
.!./.uO4,Ik%l.a...\..B.K...;. .Y`..W...L$9....HT.u...6.j#..L.b.~..I..n
nC.[.G..J?..4r...m..C,..~\...2..;.......;.^..:.j)Mc.B..;.p...O.K9|98..
...R.e4..$5.F...w.....GE..z..2....^...N{....&N!0_...... 6).B..h.7.....
.i...p..5..T..E.....l:w ..82[..b.N1.B.. ..c..z..y........,/.g.v.8.<<< skipped >>>

GET /lgn/js/oauth/udbsdk/pcweb/udb.sdk.pcweb.embed.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.yaoguo.com/800374?f=1005&cpuid=214516

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: res.udb.duowan.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sun, 06 Sep 2015 07:28:26 GMT

Content-Type: application/x-javascript

Last-Modified: Tue, 26 May 2015 08:41:59 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Sun, 06 Sep 2015 07:38:26 GMT

Cache-Control: max-age=600

Content-Encoding: gzip
10a5.............:]o.Jv.E............#8.S...S..........E.*I......X`...
b........b......9.AR_I....E"..9s....n.../.,.....[....,..C\7.|.0{.ge.g.
.......&..}.E.(.....I.....0.]!...8.e...B...HK..N.[...BX.&../....... ..
.])..'.......d.....H4`..,b#...q...v..(gy.....o.....s1M./.....X.K..s]..
....M...%G..P...{....E...`..."Ng..8-.b..P..J>....oo[. ..e.p.=.....4
......U........v(.......`a.%,rc..)u...9......^....'O.X\..n_..s.<...
pRo.Y.X..l.^.:.H.....>..c.D... .X.6..."7.A(8...{.-...F.....,. .Z.l.
..T....,ly.........8S....H}.h......%.9l.T..Z.5P...E.e3B.F_..y...j..}8{
............N..?^..;. t.z.....T.eg......".......J|.c..N...D<*.....O
......h5l?m.?.....?............=..9....^wa.g.{.........V....D4T..r..m.
<.y\.?8:?;.yn......q:WV<.Am.0|t.....r.&..........o..8...'x|..'.9
s.....L....g.....\...........?<H...8t.U."C6q.....9a)x..eb'"..Q?m.i.
Z...2..........>.kg8..$.....?..N....S.^.1_..kv/.`[email protected]....
d...j.... ..e.p....1.Q N[...>z.........[G............7..tV.,.&.i{.!
.-.F...5.....p.......DT.5.b.B5.5...tu..m...`...H....._{..x. ..... ...Q
..8. j....{..id...2.6.p.g.8.nh_gqj.>...-..}.n#....W.W..'C...\]=...W
...=....T.Q..A.. &..K..aA......5.7....1.;..Y.&.....:........Z..N..8J..
...|n.qT........v.}.~.`h.c..$N...V.|.........?>.._>..o?.......@.
.PQ:.9.Z.......I3`....pK.9../v.d...&vzb.....4..!..|.T....x..p.....V...
\PT......<.s.......M.*(..p~|...\P.... 1...o...b.R..b..16/..../$....
.a.#..q/.D,..&$.!...&<.G\u..0...f.y.)..........H*...~.UV:[email protected]...
.W.X.|D........E.!.?2.....X...`b......6.q#s.o..Y..fh..2I.5.....`."<<< skipped >>>

GET /imges/live2012/new_head_v1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:16:24 GMT

Date: Sat, 20 Sep 2014 13:16:24 GMT

Cache-Control: max-age=31104000

Content-Type: image/jpeg

ETag: "2431447405"

Last-Modified: Fri, 30 Nov 2012 06:44:07 GMT

Content-Length: 1079

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz110:10 (Cdn Cache Server V2.0)

Connection: keep-alive

......JFIF.....d.d......Ducky.......Q......Adobe.d....................
......................................................................
.........................................................;............
.T............................................................a.Qq....
..........................?..RX.`%...X.`%.........?.q.....~......S...~
......8.....?.q.........W...~......8.....?.q..8.q.........0.`RX.`%...X
.`%...e...P.@%...P.@W.... [email protected].`VP.@%...P.@%.....N.
..8.p......^P.@%...P.@%.....N...8.p......VP.@%...P.@%.......X.`%...X.`
Zp......'.N...8.....P.@%...P.@^X.`%...X.`%...D.....'.N...8.p.N...8.p..
....'.......'@N...:.t...,....K.,..........'.N...8.p.....8.p......'....
P.@%...P.@%.y...'@N...:.t.....'....~...'....~.i...'.N...8.p.....P.@%..
.P.@%..:.t......'@N.....'.N...8.p..../8.p......'.N.....'@N...:.t....-8
.p......'.N.....J.(....J.(../......0.`8.q.....J.(....J.(../......0.`8.
q.....'@N...:.t....-.................`8.q.........0 :.t......'@N.....J
.(....J.(.. ...... [email protected][email protected]......... )...... [email protected][email protected].......
.. 7:.t......'@N...@......?..HTTP/1.1 200 OK..Expires: Tue, 15 Sep 201
5 13:16:24 GMT..Date: Sat, 20 Sep 2014 13:16:24 GMT..Cache-Control: ma
x-age=31104000..Content-Type: image/jpeg..ETag: "2431447405"..Last-Mod
ified: Fri, 30 Nov 2012 06:44:07 GMT..Content-Length: 1079..Server: tu
x/3.3..Age: 1..X-Via: 1.1 fuz110:10 (Cdn Cache Server V2.0)..Connectio
n: keep-alive........JFIF.....d.d......Ducky.......Q......Adobe.d.....
..................................................................

<<< skipped >>>

GET /imges/live2012/base_head_v20_8bit.png HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 15 Sep 2015 13:36:23 GMT

Date: Sat, 20 Sep 2014 13:36:23 GMT

Cache-Control: max-age=31104000

Content-Type: image/png

ETag: "1651627559"

Last-Modified: Tue, 04 Jun 2013 08:29:59 GMT

Content-Length: 3283

Server: tux/3.3

Age: 1

X-Via: 1.1 fuz110:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...l...........?.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:F1904386CCF011E2A3A2BAF6
08BEE7D2" xmpMM:DocumentID="xmp.did:F1904387CCF011E2A3A2BAF608BEE7D2"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F1904384CCF011E2A3
A2BAF608BEE7D2" stRef:documentID="xmp.did:F1904385CCF011E2A3A2BAF608BE
E7D2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.B......PLTE......................AG.......
...........ssr......kkk.......pv.......`f}}}.,[email protected]:........
..........."*...................QX...```[email protected].........
....af......6.............#ba_.......QV...............................
........!!!...   """......###`_]...ccc.....................hge......dc
[email protected]......
....r......tRNS.......................................................
......................................................................
...8.Kg.../IDATx....W.H....AJP.Tk..w....b..X...........v..n.....#.<<< skipped >>>

GET /imges/live/IMGSRC/loading_wb.gif HTTP/1.1

Accept: */*

Referer: hXXp://v.6.cn/mm2.html?src=tuigao

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: vr0.6.cn

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 04 Jan 2016 11:17:42 GMT

Date: Fri, 09 Jan 2015 11:17:42 GMT

Cache-Control: public, max-age=31104000

Content-Encoding: gzip

Last-Modified: Mon, 09 May 2011 11:05:55 GMT

ETag: "269132088"

Content-Type: image/gif

Content-Length: 407

Server: tux/3.3

Age: 1

X-Via: 1.1 czdx85:8104 (Cdn Cache Server V2.0), 1.1 fuzhou181:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.......M..s.t..L.`.`X...........wo...@6..(...s..vv.p5.3`f...da.d`a....
.30.x.b9 .k.SDp..7........R..........l...J....7g..*.$...AB`.8`..1p....
.%r.`.G.....oro. .Sv..........8.Z..Z.=V)...hzl..K.L.[.".9&.[..a...}...
.........Y.....u.j,..................;9..3A..y.2.}v.........C.X.01pi.=
....j......8.Zd<v...Lb_....V-.......i.Y...........$.....{=W.>.up
......f~K....Usr......;...$Ts..-..?.....>uC..U..s..............HTTP
/1.1 200 OK..Expires: Mon, 04 Jan 2016 11:17:42 GMT..Date: Fri, 09 Jan
 2015 11:17:42 GMT..Cache-Control: public, max-age=31104000..Content-E
ncoding: gzip..Last-Modified: Mon, 09 May 2011 11:05:55 GMT..ETag: "26
9132088"..Content-Type: image/gif..Content-Length: 407..Server: tux/3.
3..Age: 1..X-Via: 1.1 czdx85:8104 (Cdn Cache Server V2.0), 1.1 fuzhou1
81:5 (Cdn Cache Server V2.0)..Connection: keep-alive.........M..s.t..L
.`.`X...........wo...@6..(...s..vv.p5.3`f...da.d`a.....30.x.b9 .k.SDp.
.7........R..........l...J....7g..*.$...AB`.8`..1p.....%r.`.G.....oro.
 .Sv..........8.Z..Z.=V)...hzl..K.L.[.".9&.[..a...}............Y.....u
.j,..................;9..3A..y.2.}v.........C.X.01pi.=....j......8.Zd&
lt;v...Lb_....V-.......i.Y...........$.....{=W.>.up......f~K....Usr
......;...$Ts..-..?.....>uC..U..s................<<< skipped >>>

GET /6.htm HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.cfmogu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:27 GMT

Content-Length: 105

Content-Type: text/html

Content-Location: hXXp://VVV.cfmogu.com/6.htm

Last-Modified: Thu, 25 Jun 2015 12:32:24 GMT

Accept-Ranges: bytes

ETag: "6eb42ffd42afd01:327e2"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET
<script type='text/javascript' charset='utf-8' src='hXXp://pic.pay8
38.com/mshow.aspx?AID=10851'></script>....


GET /7.htm HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.cfmogu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:27 GMT

Content-Length: 105

Content-Type: text/html

Content-Location: hXXp://VVV.cfmogu.com/7.htm

Last-Modified: Thu, 25 Jun 2015 12:32:43 GMT

Accept-Ranges: bytes

ETag: "8cce50843afd01:327e2"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET
<script type='text/javascript' charset='utf-8' src='hXXp://pic.pay8
38.com/mshow.aspx?AID=10852'></script>HTTP/1.1 200 OK..Date: 
Sun, 06 Sep 2015 07:27:27 GMT..Content-Length: 105..Content-Type: text
/html..Content-Location: hXXp://VVV.cfmogu.com/7.htm..Last-Modified: T
hu, 25 Jun 2015 12:32:43 GMT..Accept-Ranges: bytes..ETag: "8cce50843af
d01:327e2"..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..<scri
pt type='text/javascript' charset='utf-8' src='hXXp://pic.pay838.com/m
show.aspx?AID=10852'></script>....


GET /7.htm HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.cfmogu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 07:27:27 GMT

Content-Length: 105

Content-Type: text/html

Content-Location: hXXp://VVV.cfmogu.com/7.htm

Last-Modified: Thu, 25 Jun 2015 12:32:43 GMT

Accept-Ranges: bytes

ETag: "8cce50843afd01:327e2"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET
<script type='text/javascript' charset='utf-8' src='hXXp://pic.pay8
38.com/mshow.aspx?AID=10852'></script>HTTP/1.1 200 OK..Date: 
Sun, 06 Sep 2015 07:27:27 GMT..Content-Length: 105..Content-Type: text
/html..Content-Location: hXXp://VVV.cfmogu.com/7.htm..Last-Modified: T
hu, 25 Jun 2015 12:32:43 GMT..Accept-Ranges: bytes..ETag: "8cce50843af
d01:327e2"..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..<scri
pt type='text/javascript' charset='utf-8' src='hXXp://pic.pay838.com/m
show.aspx?AID=10852'></script>..

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_856:

.text

`.rdata

@.data

.rsrc

t$(SSh

~%UVW

.tTPV

FTPjK

FtPj;

F.PjRWj

u.WWj

u.VVj

u$SShe

kernel32.dll

user32.dll

winmm.dll

WinINet.dll

shell32.dll

user32.dll

gdiplus.dll

shlwapi.dll

ntdll.dll

ole32.dll

GdiPlus.dll

gdi32.dll

Kernel32.dll

MsgWaitForMultipleObjects

HttpOpenRequestA

HttpSendRequestA

HttpQueryInfoA

EnumWindows

GetAsyncKeyState

EnumChildWindows

GdipSetImageAttributesColorKeys

GdipSetStringFormatHotkeyPrefix

GdipGetStringFormatHotkeyPrefix

GdipSetPenLineJoin

GdipGetPenLineJoin

WebBrowser

crossfire.exe

hXXp://VVV.cfmogu.com/6.htm

hXXp://VVV.cfmogu.com/7.htm

WY.hh<

WY.CE

VVV.cfmogu.com

127.0.0.1 VVV.cfyalan.com

127.0.0.1 cfyalan.com

127.0.0.1 cc.cfyalan.com

127.0.0.1 xiongda.i-ce.in

127.0.0.1 xiongda.cfyalan.com

127.0.0.1 VVV.xiongda.cfyalan.com

127.0.0.1 bbs.cfyalan.com

127.0.0.1 jmp.cfyalan.com

127.0.0.1 VVV.xiongda.i-ce.in

127.0.0.1

.cfyalan.com

127.0.0.1 yalan.andly.cc

Winmm.dll

qq.com

hXXp://VVV.cfmogu.com/8.htm

<script type='text/javascript' charset='utf-8' src='hXXp://pic.pay838.com/mshow.aspx?AID=10850'></script>

hXXp://VVV.sanyangbinggui.cn/

http=

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

hXXp://

hXXp://VVV.cfmogu.com/1.htm

[email protected]

hXXp://VVV.cfmogu.com/

smtp.163.com

hXXp://open.baidu.com/special/time/

window.baidu_time(

[email protected]

Client.exe

mmog_data.xml

TCLS\Client.exe

tgp_daemon.exe

atl71.dll

\BugTrace.dll

@.reloc

GetKeyState

Windows Classic

CrossProxy.exe

TPHelper.exe

VVV.cfmogu.com

VVV.cfmogu.com

hXXp://VVV.cfmogu.com/call.htm

hXXp://VVV.sanyangbinggui.cn/call.htm

Mushroomaux experience served (1) Data V4.6.6

.dqH

(6%SW

%SdRtQ

%X~EW<

%d&&'

123456789

00003333

deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly

inflate 1.1.3 Copyright 1995-1998 Mark Adler

%*.*f

CNotSupportedException

commctrl_DragListMsg

Afx:%x:%x:%x:%x:%x

Afx:%x:%x

COMCTL32.DLL

CCmdTarget

__MSVCRT_HEAP_SELECT

Broken pipe

Inappropriate I/O control operation

Operation not permitted

portuguese-brazilian

iphlpapi.dll

SHLWAPI.dll

MPR.dll

WINMM.dll

WS2_32.dll

VERSION.dll

RASAPI32.dll

GetProcessHeap

WinExec

GetWindowsDirectoryA

KERNEL32.dll

GetKeyboardLayout

USER32.dll

GetViewportOrgEx

GDI32.dll

WINSPOOL.DRV

RegCloseKey

RegOpenKeyExA

RegCreateKeyExA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

OLEAUT32.dll

COMCTL32.dll

WSOCK32.dll

WININET.dll

GetCPInfo

CreateDialogIndirectParamA

UnhookWindowsHookEx

SetWindowsHookExA

SetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

ScaleViewportExtEx

GetViewportExtEx

comdlg32.dll

TYF-1.dll

.PAVCException@@

Shell32.dll

Mpr.dll

Advapi32.dll

User32.dll

Gdi32.dll

(&07-034/)7 '

?? / %d]

%d / %d]

.PAVCFileException@@

: %d]

(*.*)|*.*||

(*.WAV;*.MID)|*.WAV;*.MID|WAV

(*.WAV)|*.WAV|MIDI

(*.MID)|*.MID|

(*.txt)|*.txt|

(*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR|JPG

(*.JPG)|*.JPG|PNG

(*.PNG)|*.PNG|BMP

(*.BMP)|*.BMP|GIF

(*.GIF)|*.GIF|

(*.ICO)|*.ICO|

(*.CUR)|*.CUR|

%s:%d

windows

.PAVCNotSupportedException@@

out.prn

(*.prn)|*.prn|

%d.%d

%d/%d

1.6.9

unsupported zlib version

png_read_image: unsupported transformation

%d / %d

Bogus message code %d

libpng error: %s

libpng warning: %s

1.1.3

bad keyword

libpng does not support gamma background rgb_to_gray

Palette is NULL in indexed image

(%d-%d):

%ld%c

Service Pack %d

Windows 2003

Windows XP

Windows 2000

Windows NT

Windows ??

Windows Millenium Edition

Windows 98 Second Edition

Windows 98 SP1

Windows 98

Windows 95 OSR2

Windows 95 SP1

Windows 95

Windows CE

Windows

Microsoft Windows Me

Microsoft Windows 98

Microsoft Windows 95

Windows Server 2008 R2

Windows 7

Windows Server 2008

Windows Vista

Microsoft Windows 2003

Microsoft Windows XP

Microsoft Windows 2000

Microsoft Windows NT

KERNEL32.DLL

%s <%s>

Reply-To: %s

From: %s

To: %s

Subject: %s

Date: %s

Cc: %s

%a, %d %b %Y %H:%M:%S

SMTP

.PAVCObject@@

.PAVCSimpleException@@

.PAVCMemoryException@@

.?AVCNotSupportedException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCCmdTarget@@

.?AVCCmdUI@@

.?AVCTestCmdUI@@

.PAVCArchiveException@@

zcÁ

#include "l.chs\afxres.rc" // Standard components

<'<1<;<|<

3H4C4g4

0,0>0]0|0

2-2K2j2q2

3?3g3

6 6$6(6,6

8 8$8(8,80848

8"949?9[9

3$5(5,5054585<5@5

9$:(:,:0:4:

8*9094989<9

9'969;9^9|9

6 6$6(6,60646

BugTrace.dll Welcome to the CF mushroom auxiliary!

|$T.tJ

|$D.th

L$.Qf

j.hx(,

;HTTPU

SSh$.

FL9D$(u$

;T$0v.QP

.html

.jpeg

; filename="%s"

------------------------xx

--%s--

couldn't open file "%s"

Content-Type: %s

Content-Type: multipart/mixed; boundary=%s

%s; boundary=%s

secur32.dll

security.dll

Could not resolve %s: %s

getaddrinfo() failed for %s:%d; %s

init_resolve_thread() failed for %s; %s

Hostname was %sfound in DNS cache

Added %s:%d:%s to DNS cache

Resolve %s found illegal!

%5[^:]:%d:%5s

rcmd

Connected to %s (%s) port %ld (#%ld)

IDN support not present, can't parse Unicode domains

Protocol %s not supported or disabled in libcurl

http_proxy

Port number out of range

%s://%s%s%s:%hu%s%s%s

;type=%c

IPv6 numerical address used in URL without brackets

[%*45[0123456789abcdefABCDEF:.]%c

Couldn't find host %s in the _netrc file; using defaults

[email protected]

Couldn't resolve host '%s'

Couldn't resolve proxy '%s'

User-Agent: %s

CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!

Server doesn't support pipelining

Found bundle for host %s: %p

Connection #%ld to host %s left intact

Rebuilt URL to: %s

smtp

SMTP.

<url> malformed

:]://%[^

[^:]:%[^

Re-using existing connection! (#%ld) with host %s

Found connection %ld, with requests in the pipe (%zu)

%s://%s

Internal error removing splay node = %d

Internal error clearing splay node = %d

Curl_poll(%d ds, %d ms)

Operation timed out after %ld milliseconds with %I64d bytes received

Operation timed out after %ld milliseconds with %I64d out of %I64d bytes received

In state %d with no easy_conn, bail out!

Pipe broke: handle 0x%p, url = %s

[%s %s %s]

Send failure: %s

Recv failure: %s

Write callback asked for PAUSE when not supported!

%s cookie %s="%s" for domain %s, path %s, expire %I64d

#HttpOnly_

skipped cookie with bad tailmatch domain: %s

httponly

23[^;

=]=I99[^;

%s%s%s

# Fatal libcurl error

# Netscape HTTP Cookie File

# hXXp://curl.haxx.se/docs/http-cookies.html

# This file was generated by libcurl! Edit at your own risk.

WARNING: failed to save cookies in %s

Failed to set SIO_KEEPALIVE_VALS on fd %d: %d

Failed to set SO_KEEPALIVE on fd %d

bind failed with errno %d: %s

Local port: %hu

Couldn't bind to '%s'

getsockname() failed with errno %d: %s

Bind to local port %hu failed, trying next

Name '%s' family %i resolved to '%s' family %i

Couldn't bind to interface '%s'

Local Interface %s is ip %s using address family %i

ssloc inet_ntop() failed with errno %d: %s

ssrem inet_ntop() failed with errno %d: %s

getpeername() failed with errno %d: %s

TCP_NODELAY set

Could not set TCP_NODELAY: %s

Immediate connect fail for %s: %s

Trying %s...

sa_addr inet_ntop() failed with errno %d: %s

Failed to connect to %s port %ld: %s

connect to %s port %ld failed: %s

Unable to parse FTP file list

Error in the SSH layer

Caller must register CURLOPT_CONV_ callback options

TFTP: No such user

TFTP: Unknown transfer ID

TFTP: Illegal operation

TFTP: Access Violation

TFTP: File Not Found

Login denied

Issuer check against peer certificate failed

Invalid LDAP URL

Unrecognized or bad HTTP Content or Transfer-Encoding

Problem with the SSL CA cert (path? access rights?)

Peer certificate cannot be authenticated with given CA certificates

Problem with the local SSL certificate

SSL peer certificate or SSH remote key was not OK

An unknown option was passed in to libcurl

A libcurl function was given a bad argument

Operation was aborted by an application callback

FTP: command REST failed

FTP: command PORT failed

HTTP response code said error

FTP: couldn't retrieve (RETR failed) the specified file

FTP: couldn't set file type

FTP: can't figure out the host in the PASV response

FTP: unknown 227 response format

FTP: unknown PASV reply

FTP: unknown PASS reply

FTP: The server did not accept the PRET command.

FTP: Accepting server connect has timed out

FTP: The server failed to connect to data port

FTP: weird server reply

A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.

URL using bad/illegal format or missing URL

Unsupported protocol

Winsock version not supported

Protocol family not supported

Address family not supported

Operation not supported

Socket is unsupported

Protocol is unsupported

Protocol option is unsupported

Unknown error %d (%#x)

%s - %s

%s (0xXX)

SEC_E_UNSUPPORTED_PREAUTH

SEC_E_UNSUPPORTED_FUNCTION

SEC_E_STRONG_CRYPTO_NOT_SUPPORTED

SEC_E_SMARTCARD_CERT_REVOKED

SEC_E_SMARTCARD_CERT_EXPIRED

SEC_E_QOP_NOT_SUPPORTED

SEC_E_NO_S4U_PROT_SUPPORT

SEC_E_NO_KERB_KEY

SEC_E_KDC_CERT_REVOKED

SEC_E_KDC_CERT_EXPIRED

SEC_E_CERT_WRONG_USAGE

SEC_E_CERT_UNKNOWN

SEC_E_CERT_EXPIRED

0123456789

schannel: initial InitializeSecurityContext failed: %s

schannel: AcquireCredentialsHandle failed: %s

schannel: verifyhost setting prevents Schannel from comparing the supplied target name with the subject names in server certificates. Also disables SNI.

schannel: disable server certificate revocation checks

schannel: checking server certificate revocation

schannel: SNI or certificate check failed: %s

schannel: using IP address, SNI is not supported by OS.

schannel: SSL/TLS connection with %s port %hu (step 1/3)

schannel: next InitializeSecurityContext failed: %s

schannel: SSL/TLS connection with %s port %hu (step 2/3)

schannel: incremented credential handle refcount = %d

schannel: SSL/TLS connection with %s port %hu (step 3/3)

select/poll on SSL socket, errno: %d

schannel: failed to read data from server: %s

schannel: decremented credential handle refcount = %d

schannel: failed to send close msg: %s (bytes written: %zd)

schannel: ApplyControlToken failure: %s

schannel: shutting down SSL/TLS connection with %s port %hu

select/poll on SSL/TLS socket, errno: %d

--:--:--

%3I64d %s %3I64d %s %3I64d %s %s %s %s %s %s %s

@%d.%d.%d.%d

%s%s%s%s%s%s

Session: %s

%s %s RTSP/1.0

Range: %s

Referer: %s

Accept-Encoding: %s

Refusing to issue an RTSP SETUP without a Transport: header.

Transport: %s

Transport:

Refusing to issue an RTSP request [%s] without a session ID.

Got RTSP Session ID Line [%s], but wanted ID [%s]

Unable to read the CSeq header: [%s]

SMTPS

EHLO %s

HELO %s

AUTH %s

AUTH %s %s

%s %s

MAIL FROM:%s SIZE=%s

MAIL FROM:%s AUTH=%s SIZE=%s

MAIL FROM:%s AUTH=%s

MAIL FROM:%s

RCPT TO:<%s>

RCPT TO:%s

Got unexpected smtp-server response: %d

Remote access denied: %d

Access denied: %d

Authentication failed: %d

Command failed: %d

MAIL failed: %d

RCPT failed: %d

DATA failed: %d

LOGIN

No known authentication mechanisms supported!

STARTTLS denied. %c

STARTTLS not supported.

USER %s

APOP %s %s

Access denied. %c

PASS %s

STLS not supported.

%cd

LOGIN %s %s

AUTHENTICATE %s

AUTHENTICATE %s %s

LIST "%s" *

SELECT %s

FETCH %s BODY[%s]

APPEND %s (\Seen) {%I64d}

LOGINDISABLED

TFTP

set timeouts for state %d; Total %ld, retry %d maxtry %d

invalid tsize -:%s:- value in OACK packet

%s (%ld)

blksize is smaller than min supported

%s (%d)

blksize is larger than max supported

%s (%d) %s (%d)

got option=(%s) value=(%s)

tftp_rx: internal error

Timeout waiting for block %d ACK. Retries = %d

Received unexpected DATA packet block %d, expecting block %d

Received last DATA packet block %d again.

tftp_tx: internal error, event: %i

tftp_tx: giving up waiting for block %d ack

Received ACK for block %d, expecting %d

bind() failed; %s

tftp_send_first: internal error

%s%c%s%c

TFTP finished

TFTP response timeout

Can't get the size of %s

Can't open %s for writing

Last-Modified: %s, d %s M d:d:d GMT

Couldn't open file %s

There are more than %d entries

LDAP remote: %s

LDAP local: ldap_simple_bind_s %s

LDAP local: Cannot connect to %s:%ld

LDAP local: trying to establish %s connection

LDAP local: %s

LDAP local: LDAP Vendor = %s ; LDAP Version = %d

CLIENT libcurl 7.36.0

MATCH %s %s %s

DEFINE %s %s

insufficient winsock version to support telnet

WSAStartup failed (%d)

%s %d %d

%s %s %d

%s %s %s

%s IAC %d

%s IAC %s

Sending data failed (%d)

%d (unknown)

%s (unsupported)

%s IAC SB

Unknown telnet option %s

Syntax error in telnet option: %s

7[^= ]%*[ =]%5s

USER,%s

%c%c%c%c%s%c%c

%c%s%c%s

7[^,],7s

%c%c%c%c

FreeLibrary(wsock2) failed (%d)

WSACloseEvent failed (%d)

WSAEnumNetworkEvents failed (%d)

WSACreateEvent failed (%d)

failed to find WSAEnumNetworkEvents function (%d)

failed to find WSAEventSelect function (%d)

failed to find WSACloseEvent function (%d)

failed to find WSACreateEvent function (%d)

failed to load WS2_32.DLL (%d)

WS2_32.DLL

FTPS

PORT

Failure sending PORT command: %s

,%d,%d

Failure sending EPRT command: %s

%s |%d|%s|%hu|

bind() failed, we ran out of ports!

bind(port=%hu) failed: %s

bind(port=%hu) on non-local address failed: %s

socket failure: %s

failed to resolve the address provided to PORT: %s

getsockname() failed: %s

Connect data stream passively

STOR %s

APPE %s

SIZE %s

RETR %s

ftp server doesn't support SIZE

PBSZ %d

Access denied: d

ACCT %s

ACCT rejected by server: d

Connecting to %s (%s) port %d

Failure sending QUIT command: %s

Uploading to a URL without a file name!

FTP response aborted due to select/poll error: %d

FTP response timeout

MDTM %s

Bad PASV/EPSV response: d

Can't resolve new host %s:%hu

Can't resolve proxy host %s:%hu

Skips %d.%d.%d.%d for data connection, uses %s instead

%d,%d,%d,%d,%d,%d

Illegal port number in EPSV reply

%c%c%c%u%c

ddd d:d:d GMT

dddddd

unsupported MDTM reply format

QUOT string not accepted: %s

Wildcard - "%s" skipped by user

Wildcard - START of "%s"

Preparing for accepting server on data port

CWD %s

Failed FTP upload:

RETR response: d

server did not report OK, got %d

Failure sending ABOR command: %s

Remembering we are in dir "%s"

ftp_perform ends with SECONDARY: %d

PRET RETR %s

PRET STOR %s

PRET %s

REST %d

Got a d response code instead of the assumed 200

TYPE %c

Failed to do PORT

PRET command not accepted: d

Failed to MKD dir: d

MKD %s

QUOT command failed with d

Entry path is '%s'

PROT %c

unsupported parameter to CURLOPT_FTPSSLAUTH: %d

Got a d ftp-server response when 220 was expected

HTTPS

%sAuthorization: Basic %s

%s:%s

%s auth using %s with user '%s'

HTTP/

Avoided giant realloc for header (max is %d)!

The requested URL returned error: %d

The requested URL returned error: %s

If-Unmodified-Since: %s

Last-Modified: %s

If-Modified-Since: %s

%s, d %s M d:d:d GMT

Failed sending HTTP POST request

Internal HTTP POST error!

Failed sending HTTP request

%s%s=%s

%s HTTP/%s

%s%s%s%s%s%s%s%s%s%s%s

PTF://%s:%s@%s

Content-Range: bytes %s/%I64d

Content-Range: bytes %s%I64d/%I64d

Range: bytes=%s

PTF://

Host: %s%s%s:%hu

Host: %s%s%s

Chunky upload is not supported by HTTP 1.0

http, we have to use HTTP-draft-09/2

HTTP error before end of send, stop sending

HTTP/1.0 connection set to keep alive!

HTTP/1.1 proxy connection set close!

HTTP/1.0 proxy connection set to keep alive!

HTTP 1.0, assume close after body

RTSP/%d.%d =

HTTP =

HTTP/%d.%d =

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.

Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.

SOCKS4%s request granted.

Failed to resolve "%s" for SOCKS4 connect.

SOCKS4 connect to %s (locally resolved)

SOCKS4 communication to %s:%d

No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)

Can't complete SOCKS5 connection to xx:xx:xx:xx:xx:xx:xx:xx:%d. (%d)

Can't complete SOCKS5 connection to %s:%d. (%d)

Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)

Failed to resolve "%s" for SOCKS5 connect.

User was rejected by the SOCKS5 server (%d %d).

Received HTTP code %d from proxy after CONNECT

CONNECT %s HTTP/%s

%s%s%s%s

%s%s%s:%hu

%s:%hu

Establish HTTP proxy tunnel to %s:%hu

TUNNEL_STATE switched to: %d

HTTP/1.%d %d

password

login

Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds

Read callback asked for PAUSE when not supported!

operation aborted by callback

ioctl callback returned error %d

the ioctl callback returned %d

seek callback returned error %d

%s in chunked-encoding

Simulate a HTTP 304 response!

HTTP server doesn't seem to support byte ranges. Cannot resume.

Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)

Excess found in a non pipelined read: excess = %zu, size = %I64d, maxdownload = %I64d, bytecount = %I64d

Rewinding stream by : %zu bytes on url %s (size = %I64d, maxdownload = %I64d, bytecount = %I64d, nread = %zd)

Rewinding stream by : %zd bytes on url %s (zero-length body)

No URL set!

[^?&/:]://%c

Violate RFC 2616/10.3.2 and switch from POST to GET

Violate RFC 2616/10.3.3 and switch from POST to GET

Disables POST, goes with %s

Issue another request to this URL: '%s'

%s, algorithm="%s"

%s, opaque="%s"

%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%.*s", response="%s"

%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%.*s", cnonce="%s", nc=x, qop=%s, response="%s"

%s:%s:x:%s:%s:%s

%s:%.*s

%s:%s:%s

xxxx

%sAuthorization: NTLM %s

Conn: %ld (%p) Receive pipe weight: (%I64d/%zu), penalized: %s

Site %s:%d is pipeline blacklisted

Server %s is blacklisted

Server %s is not blacklisted

d:d

d:d:d

%s xxxxxxxxxxxxxxxx

username="%s",realm="%s",nonce="%s",cnonce="%s",nc="%s",digest-uri="%s",response=%s

%s/%s

12345678

00000001

user=%s

auth=Bearer %s

%c%c==

%c%c%c=

0123456789-

KHTTP

%sAuthorization: %s %s

SSPI error: %s failed: %s

Invalid SSPI authentication response type (%u %u).

SOCKS5 access with%s protection granted.

Invalid SSPI encryption response type (%u %u).

User was rejected by the SOCKS5 server (%u %u).

SOCKS5 server supports gssapi %s data protection.

SOCKS5 server authencticated user %s with gssapi.

; invalid parameters: a_pstNet->pszBuff<%p>==NULL or a_pstNet->iBuff<%u><=0 or a_pstHost->pszBuff<%p>==NULL or a_pstHost->iBuff<%u><=0

; invalid parameter: expect a_iVersion<%d> NOT less than min_ver<%d> of meta<%s>'s versionindicator

; invalid parameter: expect a_iVersion<%d> NOT less than base_version<%d> of meta<%s>

; invalid refer value: expect refer_value<%d> in [0, array_count<%d>] about entry<%s> of meta<%s>

; invalid cut-off version: expect a_iVersion<%d> NOT less than min_ver<%d> of meta<%s>'s versionindicator

; meta<%s> is too complex, contains more than %d layers of children

; entry<%s> of meta<%s> %s:%d

; net-buffer NOT enough: pszNetStart<%p> pszNetEnd<%p> entry<%s> meta<%s> unpacked_entry_count<%d>

; sizeinfo numeric overflow: real_value<%d> value_limit<%u> entry<%s> meta<%s> unpacked_entry_count<%d>

; sizeinfo numeric overflow: real_value<%d> value_limit<%u>

; net-buffer NOT enough: real_len<%d> sizeinfo_size<%u> net_start<%p> net_end<%p>

; string length error: real_len<%d> available_len<%d> net_start<%p> net_end<%p> custom_size<%u>

; wstring length error: real_len<%d> available_len<%d> net_start<%p> net_end<%p> custom_size<%u>

; net-buffer NOT enough: net_start<%p> net_end<%p> unit_size<%u> count<%d>

; host-buffer NOT enough: host_start<%p> host_end<%p> unit_size<%u> count<%d>

; %s:%d

; host-buffer NOT enough: meta<%s>, a_pszHostBase<%p>, a_pszHostEnd<%p>, version-indicator offset<%u> and size<%u>

splittablekey

primarykey

sortkey

60.28.188.194

119.147.5.122

58.251.149.114

TerSafe.dll

hXXp://%s/%s

QTalk.exe

xxxxxxxxxxxxxxxx

hXXp://%s/%s?FileHash=x&FileSize=%d&SusBaseAddr=%d&FileName=%s&PgmName=%s&ClientPath=%s&ClientVersion=%d&Uin=%d&Qt=%u&game_id=%u&mac=%s&guid=%s

::WriteFile failed ("%s").

::GetFileSize failed ("%s").

OpenFile (::CreateFile) failed ("%s").

::HttpEndRequest failed.

::HttpSendRequestEx failed.

::HttpSendRequest failed.

::HttpAddRequestHeaders failed.

::HttpOpenRequest failed.

::HttpQueryInfo failed.

The file (%s) aleady exists.

The encoded URL is not valid.

The port number is not valid.

The requested URL is not a valid URL.

\StringFileInfo\xx\FileVersion

\\.\Scsi%d:

\\.\PhysicalDrive%d

SELECT * FROM Win32_OperatingSystem WHERE (InstallDate IS NOT NULL)

?456789:;<=

!"#$%&'()* ,-./0123

BugTrace.dll

\BugTrace.ini

dump.gamesafe.qq.com

%SystemRoot%\MEMORY.DMP

%SystemRoot%\Minidump

%s\*.dmp

%s\%s

*.dmp.z

%s\Threadd-d-d-d-d-d.dmp.z

%s\d-d-d-d-d-d.dmp.z

MiniDumpType:%d

MiniDumpType:%d;

Time:d-d-d d:d:d

Time:d-d-d d:d:d;

Thread ID:0xX

Thread ID:0xX;

ExceptionAddress:0xX

ExceptionAddress:0xX;

ExceptionCode:0xX

ExceptionCode:0xX;

[0xX]:[0xx]:[%s]:[0xX,0xX,0xX,0xX]

[0xX]:[0xx]:[%s]:[0xX,0xX,0xX,0xX];

After %d seconds BugTrace will Crash

BugTrace.log

Anti:%d

YY.exe

manager.exe

XsServer.exe

Clmsn.exe

zonealarm.exe

vsserv.exe

Iparmor.exe

RAVMOND.exe

QQPCtray.exe

PFW.EXE

navapw32.exe

Mcshield.exe

kavsvc.exe

kvsrvxp.exe

Kxetray.exe

KAV32.exe

kvfw.exe

EGHOST.EXE

ashserv.exe

avgcc.exe

360tray.exe

crashexe_name=%s

crashexe_version=%s

crashmodule_name=%s

crashmodule_version=%s

ime_count=%d

ime_name_1=%s

ime_version_1=%s

safesoftware_count=%d

safesoftware_name_%d=

safesoftware_version_%d=

netcafemanager_count=%d

netcafemanager_name_%d=

netcafemanager_version_%d=

ispeak_count=%d

ispeak_name_%d=

ispeak_version_%d=

&zone_id=%s

&os_main_version=%d&os_minor_version=%d

System\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}

%s\Connection

\Global.db

\kernel32.dll

%u.%u,%u,%u

LoginUserRecord

LastLogin

NoLoginUserRecord

aeskeygenassist

x:x

x:x

%%tr%d

%%cr%d

%%dr%d

0xx

0xx

0xx, 0xx

$0xx, $0xx

0xx, 0xx

$0xx, $0xx

0xx

0xxx

%%st(0)

st(%d)

%%st(%d)

%%mm%d

xmm%d

%%xmm%d

%s:0xxx

%s:0x%x

%s:[%s]

%s:(%s)

. 0xxx

(0xxx)

. 0xx

(0xx)

. 0xx

%bp,%di

%bp,%si

%bx,%di

%bx,%si

HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: VutcWebServicePlugdata

Host: %s

Host: %s:%d

183.60.58.99

tqos.gamesafe.qq.com

E:\.jenkins\workspace\BugTraceEx-1.1.0.x\output\vc9\Release\BugTrace.pdb

MSVCR90.dll

_malloc_crt

_amsg_exit

_crt_debugger_hook

MSVCP90.dll

UrlEscapeA

IPHLPAPI.DLL

WLDAP32.dll

PSAPI.DLL

IMM32.dll

NetWkstaTransportEnum

NETAPI32.dll

dbghelp.dll

PeekNamedPipe

.?AVCHttpChannel@@

Tenio\\ProtocalHandler.dll

start\\TenProtect\\TenCaptcha.dll

tenslx.dll

tersafe.dll

.?AV?$CSingleton@VCTabLogInfo@@@@

.?AVCTabLogInfo@@

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

<assemblyIdentity type="win32" name="Microsoft.VC90.CRT" version="9.0.21022.8" processorArchitecture="x86" publicKeyToken="1fc8b3b9a1e18e3b"></assemblyIdentity>

:#:5:[:}:

7.8<8]8{8

3"3'3.353>3\3

0 0$0(0,00080

=0>4>8><>

? ?$?(?,?0?4?

; ;$;(;,;0;4;

×8O

Thawte Certification1

hXXp://ocsp.thawte.com0

.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0

hXXp://ts-ocsp.ws.symantec.com07

 hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<

 hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(

.Class 3 Public Primary Certification Authority0

<VeriSign Class 3 Public Primary Certification Authority - G50

hXXp://crl.verisign.com/pca3.crl0

hXXps://VVV.verisign.com/cps0

#hXXp://logo.verisign.com/vslogo.gif04

hXXp://ocsp.verisign.com0>

DhXXp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0

n.aAHu

2Terms of use at hXXps://VVV.verisign.com/rpa (c)101.0,

/hXXp://csc3-2010-crl.verisign.com/CSC3-2010.crl0D

hXXps://VVV.verisign.com/rpa0

hXXp://ocsp.verisign.com0;

/hXXp://csc3-2010-aia.verisign.com/CSC3-2010.cer0

hXXps://VVV.verisign.com/cps0*

#hXXp://crl.verisign.com/pca3-g5.crl04

hXXp://ocsp.verisign.com0

hXXp://VVV.cfmogu.com/9.htm

Windows 7/8/10

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\

[email protected]

.data

{B96B3CAE-0728-11D3-9D7B-0000F81EF32E}

m%DzS3

CmdQv

Dh.pHu

Windows Internet Explorer

4.6.6

F%*.*f

MSH_SCROLL_LINES_MSG

MSWHEEL_ROLLMSG

oledlg.dll

InternetCrackUrlA

InternetCanonicalizeUrlA

(*.htm;*.html)|*.htm;*.html

its:%s::%s

VVV.dywt.com.cn

HTTP/1.0

AUTH LOGIN

AUTH=LOGIN

Content-Type: application/octet-stream; name=%s

Content-Disposition: attachment; filename=%s

MAIL FROM:<%s>

.PAVCOleException@@

.PAVCOleDispatchException@@

c:\%original file name%.exe

(*.*)

Base.dll

1, 0, 0, 38248

2014-08-08

iexplore.exe_480:

%?9-*09,*19}*09

.text

`.data

.rsrc

msvcrt.dll

KERNEL32.dll

NTDLL.DLL

USER32.dll

SHLWAPI.dll

SHDOCVW.dll

Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess

IE-X-X

rsabase.dll

System\CurrentControlSet\Control\Windows

dw15 -x -s %u

watson.microsoft.com

IEWatsonURL

%s -h %u

iedw.exe

Iexplore.XPExceptionFilter

jscript.DLL

mshtml.dll

mlang.dll

urlmon.dll

wininet.dll

shdocvw.DLL

browseui.DLL

comctl32.DLL

IEXPLORE.EXE

iexplore.pdb

ADVAPI32.dll

MsgWaitForMultipleObjects

IExplorer.EXE

IIIIIB(II<.Fg

7?_____ZZSSH%

)z.UUUUUUUU

,....Qym

````2```

{.QLQIIIKGKGKGKGKGKG

;33;33;0

browseui.dll

shdocvw.dll

6.00.2900.5512 (xpsp.080413-2105)

Windows

Operating System

6.00.2900.5512

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

cacls.exe:1316
cacls.exe:264
cacls.exe:1752
cacls.exe:1336
cacls.exe:1772
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CA8127G5.swf (1983 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\exists[1].htm (56 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439574409548965382[2].jpg (883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1437495922489029677[1].jpg (859 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[3].jpg (293 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[2].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5oiR54ix5L2gX-WbvuaghzUwXzE0MzY1MTk4OTQ5MjE[1].png (2682 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\t[1] (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1418090705130314943_s[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFortunelLevelList[1].action (2444 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\airline_prom2_v6[1].png (7918 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\logo_foot_v4[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery_MIN_5[1].htm (9 bytes)
%System%\drivers\etc\hosts (308 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\airline_prom3_v7[1].png (5718 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\v627061383118550[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\openguard_edb1bde[1].png (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1395152088400052091_s[2].jpg (219 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1433251374571726650[2].jpg (3603 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\close_b836070[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1429894951825129732_s[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435635632917325370_s[2].jpg (434 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\LAB_0.1[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\unreadTipList[1] (147 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorMsg[1].htm (108 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ips[1].jcp (56 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lpisearchd[1] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1441413431739154894_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\anchor2_2c3e5d6[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\loading[1].gif (9701 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\icons6-p8[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\fx_loading_c785dd3[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\t[1] (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1440648332755373327_s[1].jpg (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getThisRoomOnlineManager[1].htm (271 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\new_head_v1[2].jpg (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qunar[2].txt (5319 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1438744520607433069_s[1].jpg (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrnvjt5cj201x01st8j[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1438945428930586147_s[1].jpg (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\blank_5307b88[1].png (949 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head_6853a2a[1].css (336 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\entSceneConfig[1].xml (1537 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\55So5b-D5ZCsX-WbvuaghzUwXzE0MzY1MTkzNDEzODA[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\newhistory[1].htm (1048 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weibo-title_v1[1].png (362 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\openguard_close_a6285d9[1].png (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\c1.web.yystatic.com\r\rc\yaoguo\main\1\3\main.swf\main_guest_sobj.sxx (59 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1422324423827564029[1].jpg (2960 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1438379669194197912_s[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\allocateCookie[1].htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\47a8e2ac999885[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\a0b8c87b6804155aa4db6b07abc52998_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435219348429169353_s[2].jpg (422 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\login-close_73c6be5[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441295193740557125[2].jpg (1901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[2].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1431836293039868445_s[1].jpg (1250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1427148922469733899_s[2].jpg (1734 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=flight_float_layer&chan=flight&pg=home&pos=top&site=qunar&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬[1] (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\tipsbg_51160c7[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\analytics[1].js (758 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440223203292588355_s[1].jpg (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\swfobject_dc734ee[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\dis[1].htm (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFollowCount[1].action (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\t[2] (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440928658925275259_s[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1436004451432314709_s[1].jpg (458 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (249 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\e6u5-min[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\logo-mini_ca367ba[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\20150806_flighthp_background_1600x336_Ebb_6027[1].jpg (13436 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1432637075681653373[1].jpg (418 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\jquery.min_4de7337[1].js (2475 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1438627049996466424[1].jpg (855 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (146 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@czcycm[1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1441413431739154894_s[1].jpg (229 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorIsInWeb[1].action (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\f1f51d8b64555950213a9cdb[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[5].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getThisRoomManager[1].htm (459 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo3037ca6j208w05kjs5[1].jpg (13802 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getManagerCount[3].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\showwall-bg-v3[1].jpg (2859 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[1] (848 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0.1[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1eoo304ivslj208w05k3z6[1].jpg (3596 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\queryNewGift[1].action (42 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\socketAndLiveflash_9a63a0d[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\udb.sdk.pcweb.embed.min[1].js (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_login[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[3].js (4062 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1436152159875483712[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\xelogin.sdk[1].css (667 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\home_pack@659eac6bc96cfd402d2a5a4a0dc394e4[2].js (9943 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mmListIco_v3[2].gif (300 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440223203292588355_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m-usertoolbar@8731b28d87b58d8ff99018b261f9430e[1].js (6047 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CACTMFSV.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\index_MIN_32[1].css (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar[1].js (325 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getManagerCount[2].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\11[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\flash_star2[1].gif (443 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1440771193057527291[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFollowCount[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1441206263416060384[1].jpg (4649 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[3].css (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441173204394825695[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1440424030229980088[1].jpg (3662 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\checkbox_ed6f91a[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1432637075681653373[2].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\framId=homeadSy&chan=flight&pg=home&pos=right_top&site=qunar&size=230x200&type=Tear_angle&tile=14415244931185684352&city=åŒ—äº¬[1] (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436108213754093726_s[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1438744520607433069_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guard_ico_c95738b[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\44734782[1] (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CATGID1B.js (24482 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@kugou[1].txt (149 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\DD_belatedPNG_79c3052[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnwfx5tj201x01sweb[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\kg_d6ff0a7[1].js (2453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ips[2].jcp (65 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\CA2NIH61.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\guide_hd_490015c[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1011v1431328135664996922_s[2].jpg (325 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getAnchorIsInWeb[1].action (76 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\airCoPromote[1].jsp (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440221938622582571[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\live-status_572c6a8[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\peihuaBox[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\month_on_b78df36[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\ga.min[1].js (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\gold_show_ca021d1[1].png (4123 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\girlfall_5[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\btnbg_f441c87[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1422961785334695929[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_login[2].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertro07v1ij201x01smwz[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\db85577447[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440848628254728116_s[1].jpg (950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guardcar_img2_b3ed2ed[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439574409548965382[2].jpg (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\exists[1].action (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\logo_foot_v4[2].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\6[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\db85577447[2].jpg (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guide_bd_5f205ce[1].png (2927 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\db85577447[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\promimg[1] (659 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\t[2] (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\js[2].js (13729 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\local[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\BaiduCM[1].png (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440053194108171729_s[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lgdsa1435203485699_1435203485703[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\dijia1[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436004451432314709_s[2].jpg (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\e6u5-min[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5oqx5oqxXzUwXzE0MzY5MjkxNjAzMTI[1].png (2794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\pixel[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\loginPop-inner[1].css (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getHeaderRecomAnchors[1].htm (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\ag_track-0.1.10[1].js (961 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jr_v1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\c[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\coin_g_18_6baac9d[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lgdsa1432702441696_1432702441700[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\float_close_69e4889[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[3].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\6aOe5aSp54yqXzUwXzE0Mzk0NzQ2ODIzODg[1].png (2142 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\medal3_7d0cb56[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\unpaycount[1].jsp (151 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\76a2433690d165a4111a247725573faa_s[2].jpg (322 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1422961785334695929[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\adba7f9116[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\index[1].htm (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5ZWk6YWSXzUwXzE0MzY5Mjg4Njk3OTQ[1].png (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1436152159875483712[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\8[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\index[1].do (618 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441361998196183527[2].jpg (707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CAT8ZENX.swf (3640 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1439197486367993238[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441374469426980004[2].jpg (1216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[4].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lowerPrice[1].jcp (3 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@irs01[1].txt (169 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\new_head_v1[1].jpg (509 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\iplookup[1].htm (149 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\t[1] (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\20150819170820_54770[1].swf (66873 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\message_ico_ff852cc[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\crossdomain[1].htm (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\a0b8c87b6804155aa4db6b07abc52998_s[2].jpg (333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\adba7f9116[2].jpg (780 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\dGFua2VfMTQzMjcxODI0OTQ1Ng[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\arc[1].png (153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5qOS5qOS57OWX-WbvuaghzUwXzE0MzY3NzEyMTk1OTM[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1439574409548965382[2].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\8f3879f2gw1es8ao4bqm4j20p00b4ads[1].jpg (11676 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\2387[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ips[2].jcp (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\TanxCM[1].png (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440862419512215827[1].jpg (1318 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getManagerCount[2].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\b[1].html (3480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\19[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\800374[1] (2035 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\header_new_v7[1].png (809 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm2[1].html (11187 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnq0jnjj201x01s3yc[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\lgdsa1441438583869_1441438583873[1].jpg (1590 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[1].action (807 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ico_en_v1[1].png (207 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\framId=ad_home_leftAD_float&chan=flight&pg=home&pos=left&site=qunar&size=24x202&type=floating_layer&tile=14415244931185684352&city=åŒ—äº¬[1] (4097 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1431320164947388798_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[1].ifmRightFlightExt&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (912 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\vdax.youzu[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\diamond_show_e38fc4c[1].png (5840 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20150828_flighthp_hs_24X202_6983[1].jpg (152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\s[1] (1114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440322326408959442[2].jpg (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\home_pack@659eac6bc96cfd402d2a5a4a0dc394e4[1].js (9200 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\gift[1].swf (3175 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\6[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\core[1].php (764 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[1].ifmRightTextlink&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\7cc0a9cabf777b1f4559aba439ed2c09[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery-1.7.2[1].js (4513 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\14[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1395152088400052091_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mmListIco_v3[1].gif (314 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324423827564029[1].jpg (2577 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[2].css (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\lgdsa1439891787785_1439891787790[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx_sideico_v10[2].png (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\footer_v10[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorMsg[1].htm (108 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ico_a[1].png (552 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\44734782[1].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\10[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertro6hn8jj200k00k741[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (30192 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\new_head_v1[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (156 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\recommend_lexiu_singer_5374cd6[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnstw19j201x01sq2r[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1eoo3020m1hj20dt0a7abq[1].jpg (6304 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1440848628254728116_s[2].jpg (998 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\num_png8_0cea530[1].png (992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\12[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1046289[1].htm (4571 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\13[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\luckystar_png8_ce21b1c[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrno5dejj201x01sdfo[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\dh1_b95047e[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1418090705130314943_s[1].jpg (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getForbidSpeakList[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lgdsa1440644629465_1440644629470[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1437884372255724437_s[1].jpg (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ips[1].jcp (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\home@743e4cc42d940601823c9a8f4fac0402[1].css (1616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440221938622582571[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\large_plane[1].swf (23705 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lgdsa1441183347702_1441183347706[1].jpg (2422 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\z_stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\card_v1[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1013v1440753029591128319[2].jpg (4348 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440862419512215827[2].jpg (1461 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\iwt-min[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\hurryup[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435841090922650162_s[2].jpg (1939 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\udb.sdk.pcweb.embed.min[2].js (881 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\54K45by5XzUwXzE0Mzk5MDkxNjc3NzQ[1].png (461 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bigScrollBg_344e5d6[1].jpg (76 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1406526224346765016[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\base_MIN_13[2].css (2286 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LAB_0.1[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\index_MIN_32[2].css (2058 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1424708659772115033[2].jpg (424 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ld[1].js (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\firstpay_bg_055c479[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\Camal_walk_loading[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\d184421399861104[2].jpg (4753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CA8DMPN0.js (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\loading[1].swf (1270 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[2].js (6779 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\idx_leftside_icon_v8[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\duowan[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LoginPop[2].js (2710 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_z[1].js (6817 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\unbind[1] (98 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\640[1].jpg (4316 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\bg_flyhd[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\css[1].css (6553 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\goldguard_img1_e327b51[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[3].jpg (227 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertrnr49h5j201x01s743[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\16[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\js[1].js (1681 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loading_wb[2].gif (479 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1013v1440424030229980088[1].jpg (4804 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\saleprice[1] (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ips[2].jcp (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1437884372255724437_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[2] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\640[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\22[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1433251374571726650[1].jpg (2758 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\base_MIN_13[1].css (1700 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (197 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo30076x3j20kw0c4abv[1].jpg (7392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\live_3eb55a3[1].png (630 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youzu[2].txt (286 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\reg4Merge[1].js (2391 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\e6u5-min[1].js (969 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\unpaycount[1].jsp (152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\main[1].swf (1769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\iwt-min[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\y[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1431840649105458010[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1418953953835284831[2].jpg (1976 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\cookieMapping[1].png (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\userLevel_v30[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertrnndoxdj201x01sdfn[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorMsg[1].action (117 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CALW8FHP.htm (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yystatic[2].txt (361 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ccc[1].css (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\roomGameIco_v13[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\546r55GwX-WbvuaghzUwXzE0MzY1MTcwMDMwMjE[1].png (2982 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440485378285229059_s[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\all_ae701ad[1].gif (2694 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\c2lyZW5mZWlqaV8xNDMyNzE4MjM2MDEz[1].png (922 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441361998196183527[1].jpg (752 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertro88zh3j200i00h0sh[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\MTFlashStore[1].swf (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo2zy2mvuj20m809vgnf[1].jpg (7572 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0.1[2].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\large_gift[1].swf (868 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\pixel[1].gif (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1438379669194197912_s[1].jpg (823 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (556 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\tipclose_ef3c29a[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5Y-j57qiXzUwXzE0Mzk0NzQ3NDQxOTk[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertrnyj5ifj201x01sa9v[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\loadAnchorInfo[1].htm (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[2].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[2].jpg (458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\23[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo30ioszdg200o00omwx[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertrnuprdhj201x01sglg[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435841090922650162_s[1].jpg (1238 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441374469426980004[1].jpg (1389 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1013v1440753029591128319[1].jpg (2714 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\uparrow_83cd0fc[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getThisRoomOnlineManager[1].action (204 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo-v5[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\gold_min_e632ead[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20140717_quna_hp_logo_sjq[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1431320164947388798_s[2].jpg (226 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\forceReg[1].gif (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CA6T4ZM9.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[2].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ico_arr_ad[1].png (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getForbidSpeakList[1].action (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441374469426980004[1].jpg (1023 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1431320164947388798_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1431836293039868445_s[1].jpg (1164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\jquery_MIN_5[1].js (3820 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ie7@dce0e00678bff57c9b1b95ed80a2890b[2].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\c[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vdax.youzu[1] (219 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\receivePhoneNumber[1].htm (56 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@criteo[1].txt (192 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\czcycm[1].htm (2880 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\base_head_v20_8bit[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1441206263416060384[2].jpg (3373 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435219348429169353_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\bdd631314f165f[1].jpg (2662 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[4].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\6ZK75oiSXzUwXzE0Mzk0NzUyMzc4ODM[1].png (2794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1437150501366480600_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lgdsa1440385065861_1440385065865[1].jpg (2404 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1427148922469733899_s[1].jpg (1708 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\entCard[1].swf (4469 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\reg4Merge[1].js (1007 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (189 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\5Lqy5LqyXzUwXzE0Mzk0NzQ5NDkwMTY[1].png (2794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1438945428930586147_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertrnxfxowj201x01sq2s[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\unreadTipList[1] (147 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\css[2].css (457 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\funny_gift[1].swf (868 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LAB_0[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery-1.7.2[2].js (3768 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\room2014_z_854673e[1].png (1757 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CA[1].gif (1 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (156 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\offline_mask_ef50909[1].png (983 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ips[1].jcp (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\logo-v5[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[2].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\800374[1].htm (862 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\head-nav-v2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weekstar2_26e4de2[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\8f3879f2gw1es8cb5k86sj20kw0c4n0x[1].jpg (11596 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324075364249066[2].jpg (5618 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\MTFlashStore[1].swf (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[2].ifmRightTextlink&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\goldguard_img2_4bcb1d6[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertro1ar2vj201x01sdfo[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\IE7[1].js (598 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435841090922650162_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5545pcmix_regstyle[1].css (472 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\6I2n5YWJ5qOSXzUwXzE0Mzk0NzUyMDE5ODA[1].png (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_v5[2].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1418953953835284831[1].jpg (1145 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@youzu[1].txt (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\defaultScene[1].swf (2553 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\mm[1].css (3639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439574409548965382[1].jpg (857 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441374469426980004[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1432637075681653373[1].jpg (418 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\goback2_0a3cafa[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436004451432314709_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\12[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\20130115111108651409[1].jpg (9524 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LoginPop[1].js (3260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\car[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\airline_prom1_v2[1].jpg (1582 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getManagerCount[1].action (124 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\e6u5-min[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\crossdomain[2].xml (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1433776513658558468_s[1].jpg (540 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\queryNewGift[1].htm (22 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\5ZGo5pif56S854mpX-eBsDFfMTQzNjE2NTEwODk3Ng[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mm_z[1].js (6716 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439458208429025694[2].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\vataplan[1].ifmRightHotelInter&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (900 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1013v1433251374571726650[2].jpg (3988 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440221938622582571[1].jpg (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1436004451432314709_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\23317925[1].jpg (6593 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\showwall-bg-v3[1].jpg (3984 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_index[2].js (5354 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\b[1].html (2320 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1418090705130314943_s[2].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\weekstar_0db5739[1].png (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\c1.web.yystatic.com\pcInfo.sxx (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\guide_e62d96c[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\20150902_flighthp_912x90_7241[1].jpg (2743 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\jquery_MIN_5[1].js (7752 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CAOHQFKP.js (20723 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\e6u5-min[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1424708659772115033[1].jpg (394 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (197 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\c[3].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\7[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\crossdomain[1].xml (476 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5q2M56WeXzUwXzE0MzY5MjkwODI0Mzg[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[3].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\yellow_warn2_b8d73e7[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\icon_dire[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[1].txt (439 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\yaoguo[1] (376 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\kaibo_png8_54b424c[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\6JOd6Imy5aaW5aesXzUwXzE0Mzk0NzQ3OTE0NTI[1].png (407 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\LAB_0[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\f1f51d8b645559506886324a[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1441354186519694368[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Application Data\E_UIEngine\90afea1eeb37be7a93471c36152ab43a\90afea1eeb37be7a93471c36152ab43a.jpg.data (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\entSoundControl[1].swf (2553 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\59[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\ie7@dce0e00678bff57c9b1b95ed80a2890b[1].css (363 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorMsg[1].action (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\loading[1].swf (641 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\promimg[1].htm (17 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\m-usertoolbar[1].js (467 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@vataframe[1].txt (153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[2].css (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getManagerCount[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorGuardianList[1].action (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mootools_MIN_1.4.5[2].js (1816 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bodybg_33f93c5[1].jpg (26944 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\jquery_MIN_5[2].js (4304 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\js[1].js (20185 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\o266831357706635[1].png (265 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\home@743e4cc42d940601823c9a8f4fac0402[1].css (504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1439574409548965382[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\play_png8_f46d0c7[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\idx_sideico_v10[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\vataplan[1].topicLinkL&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (917 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1440549063335539924[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440928658925275259_s[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\anchorRandomURLZC[1] (686 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440059547324436188_s[2].jpg (231 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\base[1].css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[3].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\v.6[1] (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getUnlogRoomRecomAnchor[1].action (998 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\core[1].bmp (25617 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\airCoPromote[2].jsp (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\a0b8c87b6804155aa4db6b07abc52998_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\22[2].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\css[1].css (3745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getHeaderRecomAnchors[1].action (833 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (586 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_v5[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440181490946282973[2].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\receivePhoneNumber[1].action (74 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1011v1431328135664996922_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\crossdomain[1].htm (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435635632917325370_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440221938622582571[1].jpg (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\b[2].html (1160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\lowerPrice[1].jcp (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\fresh_normal_9dec513[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\button_old_171[1].gif (2 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (440 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFortunelLevelList[6].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1eoo30ll39pg200o00odfl[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guide-close_d202536[1].png (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\808700fdgw1ertro5j9b9j200j00h3y9[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\mm[2].css (2558 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\framId=ad_home_leftAD_bottom&chan=flight&pg=home&pos=mid&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬[1] (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\guardcar_img4_d5f9878[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\j[1].gif (35 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx-bg[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\s[1].htm (389 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\spread_cc93d16[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFollowCount[1].action (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\face_b020a38[1].png (675 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[3] (359 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\jquery_MIN_5[1].js (3708 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\774ebecc402bde[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=rightTopBanner&chan=flight&pg=home&pos=top&site=qunar&size=272x220&tile=14415244931185684352&city=åŒ—äº¬[1] (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guardlist_bg_551206f[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\0b08ff7e458a5a[1].gif (11450 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440063054446958994[2].jpg (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\5LmI5LmI5ZOSXzUwXzE0Mzk0NzQ4OTY3MzY[1].png (921 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440648332755373327_s[1].jpg (695 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\9df8c0850fd466[1].jpg (3374 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\firstpay_0b891c6[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20150902_flighthp_272x220_7241[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\head-nav-v2[3].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[2].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\new[1].png (984 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\btn_normal[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1440549063335539924[1].jpg (221 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFollowCount[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440682861143479209[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\queryCurrentRoomGiftPresentRec[1].action (31 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m_usertoolbar_ie6[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getUnlogRoomRecomAnchor[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1440771193057527291[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yaoguo[1].txt (172 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (897 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\m-usertoolbar@064771281aaa5fef83166272c5e73bb4[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertro7f7fsj200q00e3y9[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440312136660066846_s[2].jpg (227 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weekstar_hd_560505f[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\to_top[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\59[2].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\db85577447[2].jpg (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437498037639692733_s[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\v627061383118550[1].png (89 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\ff6fb4ec084fe7[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\idx-bg[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\pixel[1].gif (129 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\weekstar_close_ad2dae8[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440059547324436188_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx_sideico_v10[1].png (392 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tanx[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\Y2hhb2ppcGFvY2hlXzE0MzI3MTgxOTc4NzQ[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\SC[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\luckystar_bg_e8825da_e8825da[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\guard_page_0351b31[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\ico_hm[1].png (757 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[2].jpg (295 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\all[1].png (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@doubleclick[2].txt (441 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=ad_home_rightAD_top2&chan=flight&pg=home&pos=top&site=qunar&size=230x90&tile=14415244931185684352&city=åŒ—äº¬[1] (145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1eoo30gvn2pg201c01cjrc[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lpisearchd[2] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\LAB_0.1[2].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\d184421399861104[1].jpg (2666 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1433251374571726650[1].jpg (3513 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1435076285361226983[1].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\bjcx[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435841090922650162_s[2].jpg (426 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@agkn[1].txt (155 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\login_12[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CARY2U5P.js (1465 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440181490946282973[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\girlfall_5[2].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFortunelLevelList[1].action (1222 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437498037639692733_s[2].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1436782172623299618_s[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\head-nav-v2[2].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\iwt-min[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\header-bg-v3[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\db85577447[2].jpg (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getActiveList[1].htm (74 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\c1.web.yystatic.com\r\sc\yaoguo\defaultScene\1\26\entSoundControl.swf\yaoguoSound.sxx (47 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438627049996466424[1].jpg (880 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\aside-close_a715ed0[1].png (651 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\button_old_171[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\IE7[2].js (1338 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\6aG56ZO-XzUwXzE0Mzk0NzUxNjQ3OTk[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439708920138471436[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mootools_MIN_1.4[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loginPop-inner[2].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\arrow_5765863[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\room2014_f52238b[1].css (6769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lgdsa1441092502252_1441092502256[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\footer1_042bc00[1].png (1640 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439458208429025694[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getSlots[1].action (57 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getHeaderRecomAnchors[1].action (833 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1431320164947388798_s[2].jpg (226 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1440312136660066846_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lgdsa1439712855329_1439712855333[1].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\DD_Deldtedng[1].js (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[3].gif (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\5YGa5pyL5Y-L5ZCnX-WbvuaghzUwXzE0MzY1MTk4MDU2NDE[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1439197486367993238[2].jpg (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_foot_v4[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\db85577447[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFortunelLevelList[1].action (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439574409548965382[1].jpg (121 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\c[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1441422031094414229_s[2].jpg (63 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1.tmp (8 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@agkn[2].txt (474 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\7[1].htm (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m784061357704567[2].png (360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\js[1].js (5041 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lei_ico_c502e46[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\register_hd_7d5aff2[1].png (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\guardcar_img3_8a36267[1].png (1388 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\crossdomain[1].xml (258 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yy[1].txt (155 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (368 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo_foot_v4[2].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1eoo30hp6kgj203i02ta9x[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lock_700c688[1].png (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\framId=ad_home_leftAD_middle&chan=flight&pg=home&pos=top&site=qunar&size=912x90&tile=14415244931185684352&city=åŒ—äº¬[1] (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\b[1].html (3480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorIsInWeb[1].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\successIcon_754795c[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\lpisearchd[1] (360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\CZ[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\qunar[1].eot (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1410630337859816512[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yaoguo[2].txt (289 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1ertrnp2iykj201x01sdfo[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\a0b8c87b6804155aa4db6b07abc52998_s[2].jpg (333 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1432637075681653373[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\newhistory[1].html (1292 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\js[1].js (73743 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\5L2g55yf5qOSXzUwXzE0MzY5Mjg5NjU2NDc[1].png (1842 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\mootools_MIN_1.4.5[1].js (2696 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@yystatic[1].txt (187 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\LAB_0.1[2].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\guardcar_img1_96ea2b3[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\header-bg-v3[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\queryCurrentRoomGiftPresentRec[1].htm (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1404267074821837648[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[3].htm (24 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (187 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1013v1422324075364249066[1].jpg (3191 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\user_upgrade_png8_8efa0f0[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\sidecode_v3[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1439708920138471436[2].jpg (438 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\base[2].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\vataplan[1].topicLinkR&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (937 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\header_v16[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\entJsApp[1].swf (4853 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\76a2433690d165a4111a247725573faa_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\t[2] (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1435635632917325370_s[2].jpg (434 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\flash_star4[1].gif (645 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1416884712906517143[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getSlots[1].htm (46 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m-usertoolbar@8731b28d87b58d8ff99018b261f9430e[2].js (4120 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\modify_002fa1e[1].png (462 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\8f3879f2gw1es8btuhnzcj20kw0c4jv6[1].jpg (10148 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\iwt-min[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\16[2].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\v.6[1].htm (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\medal1_9ec86c9[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\loadAnchorInfo[1].action (32 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getManagerCount[1].action (93 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\808700fdgw1ertrnzfsf9j201x01smwz[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\anchorRandomURLZC[1].htm (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\CAEJCPMN.css (32713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\flash_star1[1].gif (411 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1441173204394825695[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrnrvhnbj201x01sjr7[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\wealth2_27cd73b[1].png (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\header_v13[1].png (392 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\CA274VBO.js (22840 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\duowan[2].js (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\broadcast_e962076[1].png (778 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\framId=topAD&chan=flight&pg=home&pos=top&site=qunar&size=1600x336&tile=14415244931185684352&city=åŒ—äº¬[1] (601 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\yellow_warn_0473de0[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\headline_4835e01[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\640[3].jpg (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bg_wrap_ie6[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1010v1436108213754093726_s[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#c1.web.yystatic.com\settings.sxx (220 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1429894951825129732_s[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\20150707155554612396[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1440063054446958994[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\guard_d7153be[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\808700fdgw1ertrntqggoj201x01s0sk[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1435076285361226983[2].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\1003v1441295193740557125[1].jpg (1861 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qunar[1].txt (4178 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1437150501366480600_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\20150828_flighthp_fc_912x250_6983[1].swf (11014 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\b[2].html (1160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\a6474588f25947[1].jpg (2902 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\24h[1].png (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\goback_3e3f089[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\luckystar_165d5a5[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getFollowCount[1].action (132 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\require.min[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\dot_0c624c3[1].png (119 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\reg4merge[2].css (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\entApp[1].swf (4025 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\quick_login2[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\808700fdgw1eoo305zadvj208w05k754[1].jpg (3656 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorIsInWeb[2].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\dbt_14[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\img_qnkhd[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\b[1].html (2320 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\holidayService[1].xml (4749 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\logo[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\loading_wb[1].gif (407 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getHeaderRecomAnchors[1].htm (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\6aaZ5rC0XzUwXzE0Mzk0NzUwOTEwOTQ[1].png (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getThisRoomManager[1].action (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getAnchorIsInWeb[2].htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\pixel[2].gif (301 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\oneway_index_config@55cc625333acbe2719021318e33cd061[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\lpisearchd[4] (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\weibo-title_v1[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\flash_star3[1].gif (481 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\5Lqy5Zi0XzUwXzE0Mzk5MDkyMTI5OTU[1].png (922 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\vataplan[1].ifmRightFlightOwner&ab=b&tile=14415244931185684352&city=åŒ—äº¬ (886 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\m784061357704567[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\room2014_z_854673e[1].png (8392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1437495922489029677[1].jpg (878 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\d41869fb6060c0[1].jpg (3979 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1003v1438320109052895370[1].jpg (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\getFortunelLevelList[2].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\23[2].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\allocateCookie[1].htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1441354186519694368[3].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\headerbg_60ee1fa[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1440485378285229059_s[1].jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getAnchorIsInWeb[1].action (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getFortunelLevelList[1].htm (901 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\bg2013_2015_f530136[1].png (5896 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\getAnchorGuardianList[1].htm (241 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\getFollowCount[1].htm (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\546p5YW354aKXzUwXzE0Mzk0NzUwNTU2NDM[1].png (7 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\aGFvaHVheW91dGluZ18xNDMyNzE4MjIxNjQz[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\y[2].js (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\showwall-bg-v3[2].jpg (5420 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@agrantsem[1].txt (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\o266831357706635[1].png (258 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\flash_star5[1].gif (697 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\getAnchorMsg[2].htm (108 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1439763696488313126[1].jpg (639 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\yaoguo[1].htm (927 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1003v1410630337859816512[2].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\require.min[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1003v1440322326408959442[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\R653LZYS\css[1].css (457 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1[1].htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\1010v1440053194108171729_s[1].jpg (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\1010v1441422031094414229_s[1].jpg (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\reg4merge[1].css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\idx-bg[2].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\c[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\main[1].swf (2719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\O56XSTCJ\1010v1435635632917325370_s[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\mm_index[1].js (4265 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\quanjia[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\W9YZS9A7\lab.min_c0c155c[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9T03BG2I\chat_checkbg_423e9c6[1].png (341 bytes)
Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
127.0.0.1 localhost
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Trojan.Win32.FlyStudio_bceb152306

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Trojan.Win32.FlyStudio_bceb152306

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet